Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 15:58:41.955 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43682 10 6452 1 2025-09-15 15:59:05.552 00:00:10.626 TCP 23.104.0.1:38114 -> 1.101.0.1:3000 11 1507 1 2025-09-15 15:59:42.178 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35994 10 6452 1 2025-09-15 16:00:06.216 00:00:10.369 TCP 23.104.0.1:53796 -> 1.101.0.1:3000 11 1507 1 2025-09-15 15:56:28.802 00:05:01.005 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 16:00:42.399 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48256 10 6452 1 2025-09-15 16:01:06.625 00:00:10.367 TCP 23.104.0.1:38046 -> 1.101.0.1:3000 11 1507 1 2025-09-15 15:57:28.805 00:05:00.999 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 16:01:42.614 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38510 10 6452 1 2025-09-15 16:02:07.028 00:00:10.329 TCP 23.104.0.1:60960 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:02:42.828 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54840 10 6452 1 2025-09-15 16:03:07.391 00:00:10.359 TCP 23.104.0.1:47428 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:03:34.960 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 16:03:34.816 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 16:03:43.071 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46724 10 6452 1 2025-09-15 16:04:07.802 00:00:10.332 TCP 23.104.0.1:51114 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:04:43.293 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48924 10 6452 1 2025-09-15 16:05:08.175 00:00:10.366 TCP 23.104.0.1:49418 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:05:43.502 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37068 10 6452 1 2025-09-15 16:06:08.581 00:00:10.366 TCP 23.104.0.1:40958 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:02:28.804 00:05:01.011 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 16:06:43.680 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60584 10 6452 1 2025-09-15 16:07:08.980 00:00:10.365 TCP 23.104.0.1:53656 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:03:28.807 00:05:01.006 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 16:07:43.888 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54236 10 6452 1 2025-09-15 16:08:09.385 00:00:10.368 TCP 23.104.0.1:49058 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:08:34.751 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 16:08:34.964 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 16:08:44.112 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39136 10 6452 1 2025-09-15 16:09:09.787 00:00:10.367 TCP 23.104.0.1:35288 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:09:44.329 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50570 10 6452 1 2025-09-15 16:10:10.202 00:00:10.362 TCP 23.104.0.1:42120 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:10:44.544 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40284 10 6452 1 2025-09-15 16:11:10.599 00:00:10.366 TCP 23.104.0.1:40482 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:11:44.760 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58172 10 6452 1 2025-09-15 16:12:11.008 00:00:10.362 TCP 23.104.0.1:40836 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:08:28.806 00:05:01.011 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 16:12:44.973 00:00:10.391 TCP 1.101.0.1:3000 -> 22.102.0.1:56892 10 6452 1 2025-09-15 16:13:11.410 00:00:10.362 TCP 23.104.0.1:48388 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:09:28.808 00:05:01.006 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 16:13:35.156 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 16:13:35.057 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 16:13:45.405 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43614 10 6452 1 2025-09-15 16:14:11.812 00:00:10.366 TCP 23.104.0.1:40128 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:14:45.620 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39468 10 6452 1 2025-09-15 16:15:12.211 00:00:10.367 TCP 23.104.0.1:53290 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:15:45.794 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41978 10 6452 1 2025-09-15 16:16:12.616 00:00:10.362 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:16:45.969 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49322 10 6452 1 2025-09-15 16:17:13.015 00:00:10.369 TCP 23.104.0.1:33148 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:17:46.193 00:00:11.010 TCP 1.101.0.1:3000 -> 22.102.0.1:52300 10 6452 1 2025-09-15 16:18:13.421 00:00:10.326 TCP 23.104.0.1:50144 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:14:28.808 00:05:01.010 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 16:18:35.248 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 16:18:35.148 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 16:18:47.241 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39936 10 6452 1 2025-09-15 16:19:13.780 00:00:10.325 TCP 23.104.0.1:43176 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:15:28.811 00:05:01.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 16:19:47.456 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:35032 12 10367 1 2025-09-15 16:20:14.146 00:00:10.454 TCP 23.104.0.1:60428 -> 1.101.0.1:3000 15 1926 1 2025-09-15 16:20:47.696 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40232 10 6452 1 2025-09-15 16:21:14.650 00:00:10.379 TCP 23.104.0.1:48646 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:21:47.917 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47486 10 6452 1 2025-09-15 16:22:15.102 00:00:10.368 TCP 23.104.0.1:47090 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:22:48.123 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54314 10 6452 1 2025-09-15 16:23:15.508 00:00:10.334 TCP 23.104.0.1:33100 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:23:35.326 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 16:23:35.377 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 16:23:48.341 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59146 10 6452 1 2025-09-15 16:24:15.869 00:00:10.359 TCP 23.104.0.1:55880 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:20:28.810 00:05:01.009 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 16:24:48.555 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44834 10 6452 1 2025-09-15 16:25:16.272 00:00:10.367 TCP 23.104.0.1:60702 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:21:28.812 00:05:01.005 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 16:25:48.769 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40446 10 6452 1 2025-09-15 16:26:16.677 00:00:10.326 TCP 23.104.0.1:37640 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:26:48.943 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50510 10 6452 1 2025-09-15 16:27:17.044 00:00:10.363 TCP 23.104.0.1:54778 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:27:49.174 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37806 10 6452 1 2025-09-15 16:28:17.446 00:00:10.380 TCP 23.104.0.1:56956 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:28:35.404 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 16:28:35.288 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 16:28:49.389 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34598 10 6452 1 2025-09-15 16:29:17.858 00:00:10.374 TCP 23.104.0.1:51534 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:29:49.605 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37714 10 6452 1 2025-09-15 16:26:28.811 00:05:01.009 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 16:30:18.281 00:00:10.326 TCP 23.104.0.1:57160 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:30:49.816 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34636 10 6452 1 2025-09-15 16:27:28.817 00:05:01.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 16:31:18.646 00:00:10.359 TCP 23.104.0.1:38700 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:31:49.995 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47724 10 6452 1 2025-09-15 16:32:19.059 00:00:10.375 TCP 23.104.0.1:58416 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:32:50.213 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45980 10 6452 1 2025-09-15 16:33:19.469 00:00:10.325 TCP 23.104.0.1:43088 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:33:35.608 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 16:33:35.395 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 16:33:50.421 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60372 10 6452 1 2025-09-15 16:34:19.830 00:00:10.383 TCP 23.104.0.1:39642 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:34:50.636 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39262 10 6452 1 2025-09-15 16:35:20.252 00:00:10.376 TCP 23.104.0.1:35682 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:35:50.844 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55154 10 6452 1 2025-09-15 16:32:28.819 00:05:01.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 16:36:20.674 00:00:10.363 TCP 23.104.0.1:50690 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:36:51.086 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49988 10 6452 1 2025-09-15 16:37:21.089 00:00:10.366 TCP 23.104.0.1:53640 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:33:28.826 00:05:00.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 16:37:51.256 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47468 10 6452 1 2025-09-15 16:38:21.493 00:00:10.368 TCP 23.104.0.1:44320 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:38:35.500 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 16:38:35.788 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 16:38:51.434 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34822 10 6452 1 2025-09-15 16:39:21.902 00:00:10.369 TCP 23.104.0.1:55974 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:39:51.666 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37786 10 6452 1 2025-09-15 16:40:22.311 00:00:10.361 TCP 23.104.0.1:40034 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:40:51.887 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46932 10 6452 1 2025-09-15 16:41:22.711 00:00:10.361 TCP 23.104.0.1:38066 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:41:52.106 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32958 10 6452 1 2025-09-15 16:38:28.823 00:05:01.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 16:42:23.112 00:00:10.329 TCP 23.104.0.1:52834 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:42:52.313 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49582 10 6452 1 2025-09-15 16:39:28.827 00:05:00.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 16:43:35.809 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 16:43:23.475 00:00:10.363 TCP 23.104.0.1:50118 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:43:35.548 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 16:43:52.522 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53622 10 6452 1 2025-09-15 16:44:23.880 00:00:10.369 TCP 23.104.0.1:44934 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:44:52.734 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56318 10 6452 1 2025-09-15 16:45:24.289 00:00:10.360 TCP 23.104.0.1:44278 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:45:52.949 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52224 10 6452 1 2025-09-15 16:46:24.690 00:00:10.362 TCP 23.104.0.1:58396 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:46:53.175 00:00:10.262 TCP 1.101.0.1:3000 -> 22.102.0.1:42588 10 6452 1 2025-09-15 16:47:25.104 00:00:10.366 TCP 23.104.0.1:40952 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:47:53.483 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50142 10 6452 1 2025-09-15 16:44:28.825 00:05:01.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 16:48:35.903 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 16:48:25.509 00:00:10.324 TCP 23.104.0.1:50104 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:48:35.830 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 16:48:53.696 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42872 10 6452 1 2025-09-15 16:45:28.827 00:05:00.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 16:49:25.873 00:00:10.364 TCP 23.104.0.1:55046 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:49:53.907 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:60536 10 6452 1 2025-09-15 16:50:26.277 00:00:10.361 TCP 23.104.0.1:38586 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:50:54.092 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33228 10 6452 1 2025-09-15 16:51:26.677 00:00:10.324 TCP 23.104.0.1:59228 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:51:54.305 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33752 10 6452 1 2025-09-15 16:52:27.045 00:00:10.363 TCP 23.104.0.1:51972 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:52:54.517 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40976 10 6452 1 2025-09-15 16:53:35.518 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 16:53:35.817 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 16:53:27.450 00:00:10.995 TCP 23.104.0.1:48456 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:53:54.733 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53096 10 6452 1 2025-09-15 16:50:28.825 00:05:01.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 16:54:28.490 00:00:10.367 TCP 23.104.0.1:40258 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:54:54.947 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46526 10 6452 1 2025-09-15 16:51:28.828 00:05:00.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 16:55:28.898 00:00:10.370 TCP 23.104.0.1:52618 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:55:55.171 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43842 10 6452 1 2025-09-15 16:56:29.302 00:00:10.367 TCP 23.104.0.1:44196 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:56:55.381 00:00:10.434 TCP 1.101.0.1:3000 -> 22.102.0.1:42192 10 6452 1 2025-09-15 16:57:29.708 00:00:10.369 TCP 23.104.0.1:50310 -> 1.101.0.1:3000 11 1507 1 2025-09-15 16:57:55.854 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55744 10 6452 1 2025-09-15 16:58:35.795 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 16:58:36.120 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 16:58:30.115 00:00:10.329 TCP 23.104.0.1:60860 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502682, total packets: 1578, avg bps: 1077, avg pps: 0, avg bpp: 318 Time window: 2025-09-15 15:56:28 - 2025-09-15 16:58:40 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0009s Wall: 0.0029s flows/second: 55987.8 Runtime: 0.0029s