Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-22 07:58:43.358 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45668 10 6452 1 2025-09-22 07:59:08.341 00:00:10.365 TCP 23.104.0.1:49954 -> 1.101.0.1:3000 11 1507 1 2025-09-22 07:59:43.569 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39366 10 6452 1 2025-09-22 08:00:08.746 00:00:10.328 TCP 23.104.0.1:46708 -> 1.101.0.1:3000 11 1507 1 2025-09-22 07:56:31.880 00:05:01.375 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 08:00:43.778 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41264 10 6452 1 2025-09-22 08:01:09.113 00:00:10.370 TCP 23.104.0.1:43384 -> 1.101.0.1:3000 11 1507 1 2025-09-22 07:57:31.882 00:05:01.371 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 08:01:47.281 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 08:01:47.355 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 08:01:44.005 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37490 10 6452 1 2025-09-22 08:02:09.520 00:00:10.374 TCP 23.104.0.1:53724 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:02:44.226 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34440 10 6452 1 2025-09-22 08:03:09.968 00:00:10.373 TCP 23.104.0.1:58306 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:03:44.442 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52354 10 6452 1 2025-09-22 08:04:10.380 00:00:10.319 TCP 23.104.0.1:48442 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:04:44.658 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45648 10 6452 1 2025-09-22 08:05:10.741 00:00:10.365 TCP 23.104.0.1:40996 -> 1.101.0.1:3000 12 1559 1 2025-09-22 08:05:44.880 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38190 10 6452 1 2025-09-22 08:06:11.146 00:00:10.322 TCP 23.104.0.1:39050 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:02:31.880 00:05:01.377 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 08:06:47.767 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 08:06:47.430 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 08:06:45.087 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51286 10 6452 1 2025-09-22 08:07:11.513 00:00:10.327 TCP 23.104.0.1:38026 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:03:31.885 00:05:01.370 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 08:07:45.301 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37938 10 6452 1 2025-09-22 08:08:11.877 00:00:10.395 TCP 23.104.0.1:36252 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:08:45.517 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35338 10 6452 1 2025-09-22 08:09:12.308 00:00:10.373 TCP 23.104.0.1:37266 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:09:45.732 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51866 10 6452 1 2025-09-22 08:10:12.725 00:00:10.370 TCP 23.104.0.1:58820 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:10:45.944 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33242 10 6452 1 2025-09-22 08:11:13.137 00:00:10.328 TCP 23.104.0.1:34724 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:11:47.417 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 08:11:47.799 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 08:11:46.178 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38388 10 6452 1 2025-09-22 08:12:13.502 00:00:10.332 TCP 23.104.0.1:58554 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:08:31.881 00:05:01.377 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 08:12:46.357 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60464 10 6452 1 2025-09-22 08:13:13.872 00:00:10.370 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:09:31.884 00:05:01.371 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 08:13:46.571 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38454 10 6452 1 2025-09-22 08:14:14.277 00:00:10.361 TCP 23.104.0.1:33410 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:14:46.789 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35196 10 6452 1 2025-09-22 08:15:14.676 00:00:10.364 TCP 23.104.0.1:57584 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:15:47.002 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53934 10 6452 1 2025-09-22 08:16:15.103 00:00:10.366 TCP 23.104.0.1:33438 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:16:47.388 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 08:16:47.370 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 08:16:47.223 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45410 10 6452 1 2025-09-22 08:17:15.506 00:00:10.360 TCP 23.104.0.1:52752 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:17:47.436 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49490 10 6452 1 2025-09-22 08:18:15.906 00:00:10.366 TCP 23.104.0.1:41324 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:14:31.883 00:05:01.379 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 08:18:47.651 00:00:10.574 TCP 1.101.0.1:3000 -> 22.102.0.1:51674 10 6452 1 2025-09-22 08:19:16.313 00:00:10.362 TCP 23.104.0.1:56024 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:15:31.885 00:05:01.374 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 08:19:48.264 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54010 10 6452 1 2025-09-22 08:20:16.717 00:00:10.375 TCP 23.104.0.1:41232 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:20:48.476 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41600 10 6452 1 2025-09-22 08:21:17.128 00:00:10.361 TCP 23.104.0.1:33468 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:21:47.587 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 08:21:47.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 08:21:48.703 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40754 10 6452 1 2025-09-22 08:22:17.528 00:00:10.323 TCP 23.104.0.1:48976 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:22:48.919 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:58818 10 6452 1 2025-09-22 08:23:17.889 00:00:10.348 TCP 23.104.0.1:51806 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:23:49.160 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48854 10 6452 1 2025-09-22 08:24:18.274 00:00:10.327 TCP 23.104.0.1:48908 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:20:31.885 00:05:01.378 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 08:24:49.334 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37440 10 6452 1 2025-09-22 08:25:18.644 00:00:10.372 TCP 23.104.0.1:58520 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:21:31.891 00:05:01.371 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 08:25:49.546 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60662 10 6452 1 2025-09-22 08:26:19.097 00:00:10.372 TCP 23.104.0.1:54028 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:26:47.908 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 08:26:47.869 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 08:26:49.769 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39778 10 6452 1 2025-09-22 08:27:19.511 00:00:10.365 TCP 23.104.0.1:35034 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:27:50.003 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:43012 10 6452 1 2025-09-22 08:28:19.911 00:00:10.363 TCP 23.104.0.1:48882 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:28:50.193 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50228 10 6452 1 2025-09-22 08:29:20.312 00:00:10.326 TCP 23.104.0.1:33112 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:29:50.406 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45592 10 6452 1 2025-09-22 08:30:20.673 00:00:10.361 TCP 23.104.0.1:56336 -> 1.101.0.1:3000 12 1559 1 2025-09-22 08:26:31.921 00:05:01.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 08:30:50.620 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54442 10 6452 1 2025-09-22 08:31:21.093 00:00:10.364 TCP 23.104.0.1:48598 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:27:31.923 00:05:01.341 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 08:31:47.630 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 08:31:47.884 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 08:31:50.794 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56726 10 6452 1 2025-09-22 08:32:21.494 00:00:10.365 TCP 23.104.0.1:52846 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:32:51.009 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:41834 10 6452 1 2025-09-22 08:33:21.908 00:00:10.365 TCP 23.104.0.1:48096 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:33:51.173 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42362 10 6452 1 2025-09-22 08:34:22.312 00:00:10.362 TCP 23.104.0.1:46576 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:34:51.392 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54116 10 6452 1 2025-09-22 08:35:22.714 00:00:10.372 TCP 23.104.0.1:39828 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:35:51.613 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43302 10 6452 1 2025-09-22 08:32:31.921 00:05:01.347 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 08:36:23.125 00:00:10.365 TCP 23.104.0.1:55274 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:36:48.036 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 08:36:47.763 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 08:36:51.835 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40704 10 6452 1 2025-09-22 08:33:31.925 00:05:01.342 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 08:37:23.537 00:00:10.364 TCP 23.104.0.1:32794 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:37:52.073 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36920 10 6452 1 2025-09-22 08:38:23.956 00:00:10.368 TCP 23.104.0.1:43156 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:38:52.249 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34404 10 6452 1 2025-09-22 08:39:24.367 00:00:10.367 TCP 23.104.0.1:36560 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:39:52.468 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45136 10 6452 1 2025-09-22 08:40:24.768 00:00:10.368 TCP 23.104.0.1:49046 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:40:52.640 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59824 10 6452 1 2025-09-22 08:41:25.171 00:00:10.365 TCP 23.104.0.1:59244 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:41:47.975 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 08:41:48.115 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 08:41:52.860 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60704 10 6452 1 2025-09-22 08:38:31.922 00:05:01.347 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 08:42:25.570 00:00:10.362 TCP 23.104.0.1:51460 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:42:53.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34544 10 6452 1 2025-09-22 08:39:31.926 00:05:01.341 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 08:43:25.973 00:00:10.369 TCP 23.104.0.1:37732 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:43:53.303 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43740 10 6452 1 2025-09-22 08:44:26.378 00:00:10.331 TCP 23.104.0.1:59874 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:44:53.514 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34378 10 6452 1 2025-09-22 08:45:26.750 00:00:10.374 TCP 23.104.0.1:53322 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:45:53.728 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58120 10 6452 1 2025-09-22 08:46:27.161 00:00:10.367 TCP 23.104.0.1:55944 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:46:48.693 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 08:46:48.536 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 08:46:53.947 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54890 10 6452 1 2025-09-22 08:47:27.564 00:00:10.365 TCP 23.104.0.1:48954 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:47:54.175 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51884 10 6452 1 2025-09-22 08:44:31.924 00:05:01.351 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 08:48:27.970 00:00:10.366 TCP 23.104.0.1:47758 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:48:54.348 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47614 10 6452 1 2025-09-22 08:45:31.927 00:05:01.342 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 08:49:28.375 00:00:10.358 TCP 23.104.0.1:40822 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:49:54.555 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56578 10 6452 1 2025-09-22 08:50:28.773 00:00:10.369 TCP 23.104.0.1:39974 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:50:54.768 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38334 10 6452 1 2025-09-22 08:51:29.179 00:00:10.363 TCP 23.104.0.1:53452 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:51:48.508 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 08:51:48.424 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 08:51:54.982 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37730 10 6452 1 2025-09-22 08:52:29.581 00:00:10.368 TCP 23.104.0.1:47832 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:52:55.203 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54028 10 6452 1 2025-09-22 08:53:29.988 00:00:10.368 TCP 23.104.0.1:49934 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:53:55.409 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34500 10 6452 1 2025-09-22 08:50:31.927 00:05:01.350 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 08:54:30.389 00:00:10.368 TCP 23.104.0.1:49598 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:54:55.619 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34180 10 6452 1 2025-09-22 08:51:31.929 00:05:01.345 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 08:55:30.789 00:00:10.372 TCP 23.104.0.1:54656 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:55:55.843 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58760 10 6452 1 2025-09-22 08:56:31.202 00:00:10.368 TCP 23.104.0.1:45024 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:56:48.267 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 08:56:48.412 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 08:56:56.081 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40612 10 6452 1 2025-09-22 08:57:31.605 00:00:10.365 TCP 23.104.0.1:58812 -> 1.101.0.1:3000 11 1507 1 2025-09-22 08:57:56.300 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58096 10 6452 1 2025-09-22 08:58:32.017 00:00:10.319 TCP 23.104.0.1:35578 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1068, avg pps: 0, avg bpp: 316 Time window: 2025-09-22 07:56:31 - 2025-09-22 08:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0009s Wall: 0.0014s flows/second: 118332.3 Runtime: 0.0014s