Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 16:58:50.969 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60596 10 6452 1 2025-09-11 16:59:07.263 00:00:10.325 TCP 23.104.0.1:52100 -> 1.101.0.1:3000 11 1507 1 2025-09-11 16:59:51.205 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49614 10 6452 1 2025-09-11 17:00:07.625 00:00:10.328 TCP 23.104.0.1:43632 -> 1.101.0.1:3000 11 1507 1 2025-09-11 16:56:26.910 00:05:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 17:00:51.413 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39936 10 6452 1 2025-09-11 17:01:08.007 00:00:10.357 TCP 23.104.0.1:49212 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:01:41.442 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 17:01:41.416 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 17:01:51.625 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40824 10 6452 1 2025-09-11 17:02:08.403 00:00:10.667 TCP 23.104.0.1:39356 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:02:51.835 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52586 10 6452 1 2025-09-11 17:03:09.118 00:00:10.318 TCP 23.104.0.1:58878 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:03:52.073 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42920 10 6452 1 2025-09-11 17:04:09.473 00:00:10.363 TCP 23.104.0.1:42880 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:00:26.913 00:05:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 17:04:52.304 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39070 10 6452 1 2025-09-11 17:05:09.870 00:00:10.366 TCP 23.104.0.1:44732 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:05:52.514 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39088 10 6452 1 2025-09-11 17:06:10.274 00:00:10.368 TCP 23.104.0.1:48644 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:02:26.913 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 17:06:40.575 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 17:06:40.646 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 17:06:52.725 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45686 10 6452 1 2025-09-11 17:07:10.681 00:00:10.363 TCP 23.104.0.1:57684 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:07:52.940 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:48776 10 6452 1 2025-09-11 17:08:11.109 00:00:10.366 TCP 23.104.0.1:54082 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:08:53.181 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:55798 10 6452 1 2025-09-11 17:09:11.517 00:00:10.365 TCP 23.104.0.1:38328 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:09:53.424 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35016 10 6452 1 2025-09-11 17:10:11.922 00:00:10.347 TCP 23.104.0.1:40326 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:06:26.916 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 17:10:53.642 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:55002 10 6452 1 2025-09-11 17:11:12.312 00:00:10.324 TCP 23.104.0.1:56328 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:11:40.668 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 17:11:40.773 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 17:11:53.885 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58204 10 6452 1 2025-09-11 17:12:12.677 00:00:10.366 TCP 23.104.0.1:48946 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:08:26.915 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 17:12:54.111 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36678 10 6452 1 2025-09-11 17:13:13.103 00:00:10.320 TCP 23.104.0.1:33712 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:13:54.332 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46520 10 6452 1 2025-09-11 17:14:13.462 00:00:10.364 TCP 23.104.0.1:56396 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:14:54.541 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51108 10 6452 1 2025-09-11 17:15:13.867 00:00:10.369 TCP 23.104.0.1:44290 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:15:54.756 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45878 10 6452 1 2025-09-11 17:16:14.274 00:00:10.367 TCP 23.104.0.1:53406 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:12:26.919 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 17:16:40.670 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 17:16:40.788 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 17:16:54.962 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60878 12 6556 1 2025-09-11 17:17:14.678 00:00:10.371 TCP 23.104.0.1:46570 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:17:55.188 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42852 10 6452 1 2025-09-11 17:18:15.099 00:00:10.322 TCP 23.104.0.1:53362 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:14:26.916 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 17:18:55.405 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39840 10 6452 1 2025-09-11 17:19:15.459 00:00:10.361 TCP 23.104.0.1:47242 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:19:55.610 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39330 10 6452 1 2025-09-11 17:20:15.855 00:00:10.373 TCP 23.104.0.1:32956 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:20:55.824 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38310 10 6452 1 2025-09-11 17:21:16.268 00:00:10.364 TCP 23.104.0.1:37942 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:21:41.005 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 17:21:41.325 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 17:21:56.005 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42718 10 6452 1 2025-09-11 17:22:16.675 00:00:10.377 TCP 23.104.0.1:51420 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:18:26.921 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 17:22:56.219 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43184 10 6452 1 2025-09-11 17:23:17.106 00:00:10.326 TCP 23.104.0.1:51000 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:23:56.391 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48278 10 6452 1 2025-09-11 17:20:26.917 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 17:24:17.470 00:00:10.362 TCP 23.104.0.1:48572 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:24:56.614 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47614 10 6452 1 2025-09-11 17:25:17.877 00:00:10.362 TCP 23.104.0.1:52596 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:25:56.790 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59924 10 6452 1 2025-09-11 17:26:18.283 00:00:10.380 TCP 23.104.0.1:46778 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:26:41.135 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 17:26:40.818 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 17:26:57.001 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:34166 10 6452 1 2025-09-11 17:27:18.714 00:00:10.386 TCP 23.104.0.1:59676 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:27:57.188 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60420 10 6452 1 2025-09-11 17:28:19.140 00:00:10.366 TCP 23.104.0.1:53120 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:24:26.920 00:05:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 17:28:57.403 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54802 10 6452 1 2025-09-11 17:29:19.541 00:00:10.368 TCP 23.104.0.1:53150 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:29:57.615 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47646 10 6452 1 2025-09-11 17:30:19.947 00:00:10.368 TCP 23.104.0.1:55844 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:26:26.918 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 17:30:57.826 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47164 10 6452 1 2025-09-11 17:31:20.353 00:00:10.368 TCP 23.104.0.1:53252 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:31:41.178 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 17:31:41.275 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 17:31:58.070 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43650 10 6452 1 2025-09-11 17:32:20.759 00:00:10.343 TCP 23.104.0.1:58470 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:32:58.283 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58898 10 6452 1 2025-09-11 17:33:21.142 00:00:10.367 TCP 23.104.0.1:32976 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:33:58.497 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41976 10 6452 1 2025-09-11 17:30:26.921 00:05:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 17:34:21.546 00:00:10.367 TCP 23.104.0.1:46518 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:34:58.716 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41092 10 6452 1 2025-09-11 17:35:21.951 00:00:10.326 TCP 23.104.0.1:43420 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:35:58.928 00:00:10.591 TCP 1.101.0.1:3000 -> 22.102.0.1:59036 10 6452 1 2025-09-11 17:32:26.921 00:05:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 17:36:22.315 00:00:10.367 TCP 23.104.0.1:55998 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:36:41.212 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 17:36:41.145 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 17:36:59.558 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58292 10 6452 1 2025-09-11 17:37:22.716 00:00:10.377 TCP 23.104.0.1:33426 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:37:59.774 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-09-11 17:38:23.122 00:00:10.365 TCP 23.104.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:39:00.011 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46866 10 6452 1 2025-09-11 17:39:23.528 00:00:10.366 TCP 23.104.0.1:43050 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:40:00.227 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:49266 10 6452 1 2025-09-11 17:36:26.924 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 17:40:23.930 00:00:10.391 TCP 23.104.0.1:59664 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:41:00.447 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37162 10 6452 1 2025-09-11 17:41:24.352 00:00:10.363 TCP 23.104.0.1:56080 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:41:41.556 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 17:41:41.716 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 17:42:00.659 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41188 10 6452 1 2025-09-11 17:38:26.922 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 17:42:24.755 00:00:10.385 TCP 23.104.0.1:55574 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:43:00.867 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47304 11 6492 1 2025-09-11 17:43:25.175 00:00:10.365 TCP 23.104.0.1:59426 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:44:01.071 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57604 10 6452 1 2025-09-11 17:44:25.578 00:00:10.373 TCP 23.104.0.1:55452 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:45:01.286 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51026 10 6452 1 2025-09-11 17:45:25.986 00:00:10.330 TCP 23.104.0.1:50082 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:46:01.501 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44600 10 6452 1 2025-09-11 17:42:26.926 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 17:46:26.353 00:00:10.362 TCP 23.104.0.1:47076 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:46:41.443 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 17:46:41.573 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 17:47:01.715 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32904 10 6452 1 2025-09-11 17:47:26.755 00:00:10.380 TCP 23.104.0.1:51720 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:48:01.931 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:37196 10 6452 1 2025-09-11 17:44:26.923 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 17:48:27.175 00:00:10.411 TCP 23.104.0.1:38782 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:49:02.170 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54700 10 6452 1 2025-09-11 17:49:27.623 00:00:10.367 TCP 23.104.0.1:56104 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:50:02.346 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55894 10 6452 1 2025-09-11 17:50:28.031 00:00:10.364 TCP 23.104.0.1:47180 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:51:02.560 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58036 10 6452 1 2025-09-11 17:51:41.414 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 17:51:28.433 00:00:10.362 TCP 23.104.0.1:56946 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:51:41.594 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 17:52:02.771 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35118 10 6452 1 2025-09-11 17:48:26.927 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 17:52:28.834 00:00:10.373 TCP 23.104.0.1:51896 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:53:02.986 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:46844 10 6452 1 2025-09-11 17:53:29.248 00:00:10.459 TCP 23.104.0.1:59326 -> 1.101.0.1:3000 15 1926 1 2025-09-11 17:54:03.215 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:60662 12 10367 1 2025-09-11 17:50:26.924 00:05:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 17:54:29.761 00:00:10.377 TCP 23.104.0.1:50062 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:55:03.416 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45938 10 6452 1 2025-09-11 17:55:30.181 00:00:10.327 TCP 23.104.0.1:58706 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:56:03.633 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:39570 10 6452 1 2025-09-11 17:56:41.718 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 17:56:41.601 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 17:56:30.554 00:00:10.363 TCP 23.104.0.1:39944 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:57:03.891 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37558 10 6452 1 2025-09-11 17:57:30.956 00:00:10.366 TCP 23.104.0.1:40400 -> 1.101.0.1:3000 11 1507 1 2025-09-11 17:58:04.122 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:49660 10 6452 1 2025-09-11 17:54:26.931 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 17:58:31.365 00:00:10.321 TCP 23.104.0.1:38816 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502826, total packets: 1581, avg bps: 1063, avg pps: 0, avg bpp: 318 Time window: 2025-09-11 16:56:26 - 2025-09-11 17:59:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0021s Wall: 0.0022s flows/second: 73153.9 Runtime: 0.0023s