Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 03:59:21.330 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34862 10 6452 1 2025-09-15 03:59:36.733 00:00:10.423 TCP 23.104.0.1:59996 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:00:21.554 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52244 10 6452 1 2025-09-15 03:56:28.587 00:05:00.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 04:00:37.201 00:00:10.329 TCP 23.104.0.1:37524 -> 1.101.0.1:3000 11 1507 1 2025-09-15 03:57:28.591 00:05:00.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 04:01:21.778 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46472 10 6452 1 2025-09-15 04:01:37.565 00:00:10.356 TCP 23.104.0.1:52470 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:02:22.015 00:00:10.282 TCP 1.101.0.1:3000 -> 22.102.0.1:45816 10 6452 1 2025-09-15 04:02:37.963 00:00:10.399 TCP 23.104.0.1:47834 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:03:20.628 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 04:03:20.700 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 04:03:22.336 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45774 10 6452 1 2025-09-15 04:03:38.400 00:00:10.361 TCP 23.104.0.1:41996 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:04:22.548 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56456 10 6452 1 2025-09-15 04:04:38.801 00:00:10.377 TCP 23.104.0.1:50106 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:05:22.762 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:39974 10 6452 1 2025-09-15 04:05:39.217 00:00:10.331 TCP 23.104.0.1:34768 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:02:28.589 00:05:00.975 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 04:06:23.025 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36176 10 6452 1 2025-09-15 04:06:39.587 00:00:10.328 TCP 23.104.0.1:55004 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:03:28.593 00:05:00.968 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 04:07:23.250 00:00:10.428 TCP 1.101.0.1:3000 -> 22.102.0.1:47348 10 6452 1 2025-09-15 04:07:39.957 00:00:10.363 TCP 23.104.0.1:45102 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:08:20.588 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 04:08:20.493 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 04:08:23.718 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59862 10 6452 1 2025-09-15 04:08:40.361 00:00:10.360 TCP 23.104.0.1:55704 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:09:23.941 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:42730 10 6452 1 2025-09-15 04:09:40.759 00:00:10.388 TCP 23.104.0.1:39336 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:10:24.185 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33476 10 6452 1 2025-09-15 04:10:41.187 00:00:10.375 TCP 23.104.0.1:41580 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:11:24.413 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46956 10 6452 1 2025-09-15 04:11:41.600 00:00:10.364 TCP 23.104.0.1:54830 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:08:28.590 00:05:00.975 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 04:12:24.637 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34132 10 6452 1 2025-09-15 04:12:42.007 00:00:10.385 TCP 23.104.0.1:46634 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:13:20.367 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 04:13:20.360 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 04:09:28.593 00:05:00.969 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 04:13:24.856 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41216 10 6452 1 2025-09-15 04:13:42.451 00:00:10.366 TCP 23.104.0.1:41618 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:14:25.045 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54774 10 6452 1 2025-09-15 04:14:42.857 00:00:10.379 TCP 23.104.0.1:37202 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:15:25.270 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32974 10 6452 1 2025-09-15 04:15:43.271 00:00:10.365 TCP 23.104.0.1:48932 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:16:25.487 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51222 10 6452 1 2025-09-15 04:16:43.670 00:00:10.378 TCP 23.104.0.1:36942 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:17:25.653 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40918 10 6452 1 2025-09-15 04:17:44.103 00:00:10.366 TCP 23.104.0.1:36864 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:18:20.824 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 04:18:20.649 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 04:14:28.592 00:05:00.974 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 04:18:25.878 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53424 10 6452 1 2025-09-15 04:18:44.508 00:00:10.325 TCP 23.104.0.1:50936 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:15:28.594 00:05:00.968 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 04:19:26.100 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:60778 12 10367 1 2025-09-15 04:19:44.875 00:00:10.436 TCP 23.104.0.1:53882 -> 1.101.0.1:3000 15 1926 1 2025-09-15 04:20:26.337 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50490 10 6452 1 2025-09-15 04:20:45.352 00:00:10.365 TCP 23.104.0.1:51790 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:21:26.553 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49498 10 6452 1 2025-09-15 04:21:45.755 00:00:10.598 TCP 23.104.0.1:54056 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:22:26.763 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37748 10 6452 1 2025-09-15 04:22:46.393 00:00:10.368 TCP 23.104.0.1:36050 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:23:20.910 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 04:23:20.786 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 04:23:26.971 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:60454 10 6452 1 2025-09-15 04:23:46.791 00:00:10.336 TCP 23.104.0.1:55200 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:20:28.595 00:05:00.973 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 04:24:27.203 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48566 10 6452 1 2025-09-15 04:24:47.164 00:00:10.370 TCP 23.104.0.1:44406 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:21:28.597 00:05:00.968 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 04:25:27.422 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40998 10 6452 1 2025-09-15 04:25:47.572 00:00:10.364 TCP 23.104.0.1:43116 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:26:27.639 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46662 10 6452 1 2025-09-15 04:26:47.973 00:00:10.322 TCP 23.104.0.1:59718 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:27:27.851 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43806 10 6452 1 2025-09-15 04:27:48.335 00:00:10.327 TCP 23.104.0.1:46110 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:28:20.813 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 04:28:20.910 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 04:28:28.040 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39280 10 6452 1 2025-09-15 04:28:48.698 00:00:10.364 TCP 23.104.0.1:48178 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:29:28.253 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 12 10367 1 2025-09-15 04:29:49.112 00:00:10.401 TCP 23.104.0.1:59846 -> 1.101.0.1:3000 15 1926 1 2025-09-15 04:26:28.596 00:05:00.972 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 04:30:28.489 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49478 10 6452 1 2025-09-15 04:30:49.554 00:00:10.358 TCP 23.104.0.1:54334 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:27:28.599 00:05:00.968 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 04:31:28.699 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43842 10 6452 1 2025-09-15 04:31:49.953 00:00:10.328 TCP 23.104.0.1:55986 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:32:28.867 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54188 10 6452 1 2025-09-15 04:32:50.332 00:00:10.335 TCP 23.104.0.1:37254 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:33:21.031 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 04:33:20.970 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 04:33:29.089 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44600 10 6452 1 2025-09-15 04:33:50.713 00:00:10.382 TCP 23.104.0.1:39448 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:34:29.300 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51168 10 6452 1 2025-09-15 04:34:51.137 00:00:10.324 TCP 23.104.0.1:46198 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:35:29.509 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34448 10 6452 1 2025-09-15 04:35:51.500 00:00:10.367 TCP 23.104.0.1:45760 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:32:28.599 00:05:00.970 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 04:36:29.725 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51438 10 6452 1 2025-09-15 04:36:51.903 00:00:10.387 TCP 23.104.0.1:42240 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:33:28.602 00:05:00.965 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 04:37:29.949 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:48160 10 6452 1 2025-09-15 04:37:52.327 00:00:10.361 TCP 23.104.0.1:51174 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:38:21.008 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 04:38:21.020 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 04:38:30.191 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39654 10 6452 1 2025-09-15 04:38:52.727 00:00:10.375 TCP 23.104.0.1:58830 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:39:30.417 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45326 10 6452 1 2025-09-15 04:39:53.142 00:00:10.364 TCP 23.104.0.1:40982 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:40:30.646 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:57446 10 6452 1 2025-09-15 04:40:53.545 00:00:10.693 TCP 23.104.0.1:54914 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:41:30.853 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44948 10 6452 1 2025-09-15 04:41:54.277 00:00:10.369 TCP 23.104.0.1:51472 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:38:28.601 00:05:00.972 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 04:42:31.087 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51770 10 6452 1 2025-09-15 04:42:54.680 00:00:10.328 TCP 23.104.0.1:59086 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:43:21.200 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 04:43:21.188 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 04:39:28.605 00:05:00.966 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 04:43:31.300 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41634 10 6452 1 2025-09-15 04:43:55.059 00:00:10.373 TCP 23.104.0.1:47544 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:44:31.530 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:55876 12 10367 1 2025-09-15 04:44:55.468 00:00:10.396 TCP 23.104.0.1:43232 -> 1.101.0.1:3000 15 1926 1 2025-09-15 04:45:31.778 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47774 10 6452 1 2025-09-15 04:45:55.908 00:00:10.325 TCP 23.104.0.1:57354 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:46:32.002 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41200 10 6452 1 2025-09-15 04:46:56.271 00:00:10.371 TCP 23.104.0.1:38396 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:47:32.229 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52764 10 6452 1 2025-09-15 04:47:56.675 00:00:10.326 TCP 23.104.0.1:60130 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:48:21.174 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 04:48:21.234 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 04:44:28.604 00:05:00.972 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 04:48:32.450 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51614 10 6452 1 2025-09-15 04:48:57.036 00:00:10.365 TCP 23.104.0.1:57062 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:45:28.607 00:05:00.966 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 04:49:32.631 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40528 10 6452 1 2025-09-15 04:49:57.440 00:00:10.374 TCP 23.104.0.1:36536 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:50:32.842 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33930 10 6452 1 2025-09-15 04:50:57.861 00:00:10.332 TCP 23.104.0.1:50234 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:51:33.081 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43336 10 6452 1 2025-09-15 04:51:58.231 00:00:10.364 TCP 23.104.0.1:60520 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:52:33.303 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40840 10 6452 1 2025-09-15 04:52:58.636 00:00:10.365 TCP 23.104.0.1:55722 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:53:21.291 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 04:53:21.540 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 04:53:33.511 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:32790 10 6452 1 2025-09-15 04:53:59.046 00:00:10.317 TCP 23.104.0.1:59376 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:50:28.605 00:05:00.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 04:54:33.707 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40776 10 6452 1 2025-09-15 04:54:59.405 00:00:10.319 TCP 23.104.0.1:35514 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:51:28.608 00:05:00.966 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 04:55:33.927 00:00:10.359 TCP 1.101.0.1:3000 -> 22.102.0.1:55176 10 6452 1 2025-09-15 04:55:59.764 00:00:10.372 TCP 23.104.0.1:56720 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:56:34.328 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49670 10 6452 1 2025-09-15 04:57:00.171 00:00:10.636 TCP 23.104.0.1:35612 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:57:34.537 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37748 12 6556 1 2025-09-15 04:58:00.859 00:00:10.374 TCP 23.104.0.1:60616 -> 1.101.0.1:3000 11 1507 1 2025-09-15 04:58:21.704 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 04:58:21.379 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 04:58:34.758 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40764 10 6452 1 Summary: total flows: 163, total bytes: 509947, total packets: 1581, avg bps: 1091, avg pps: 0, avg bpp: 322 Time window: 2025-09-15 03:56:28 - 2025-09-15 04:58:44 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0008s Wall: 0.0025s flows/second: 64889.1 Runtime: 0.0025s