Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 18:59:09.277 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52170 10 6452 1 2025-09-25 18:59:17.117 00:00:10.365 TCP 23.104.0.1:55116 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:00:09.497 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48820 10 6452 1 2025-09-25 19:00:17.519 00:00:10.369 TCP 23.104.0.1:41892 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:56:33.497 00:05:01.589 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 19:01:09.706 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44634 10 6452 1 2025-09-25 19:01:17.925 00:00:10.346 TCP 23.104.0.1:46208 -> 1.101.0.1:3000 11 1507 1 2025-09-25 18:57:33.499 00:05:01.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 19:02:09.921 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:57270 10 6452 1 2025-09-25 19:02:18.308 00:00:10.319 TCP 23.104.0.1:58318 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:03:10.107 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52556 10 6452 1 2025-09-25 19:03:27.271 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 19:03:18.677 00:00:10.363 TCP 23.104.0.1:51924 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:03:27.171 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 19:04:10.332 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52252 10 6452 1 2025-09-25 19:04:19.096 00:00:10.366 TCP 23.104.0.1:49764 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:05:10.552 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48720 10 6452 1 2025-09-25 19:05:19.502 00:00:10.368 TCP 23.104.0.1:50906 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:06:10.768 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55586 10 6452 1 2025-09-25 19:06:19.904 00:00:10.371 TCP 23.104.0.1:41662 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:02:33.498 00:05:01.590 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 19:07:10.982 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55482 10 6452 1 2025-09-25 19:07:20.313 00:00:10.364 TCP 23.104.0.1:42162 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:03:33.500 00:05:01.585 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 19:08:11.207 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50480 10 6452 1 2025-09-25 19:08:20.716 00:00:10.374 TCP 23.104.0.1:33002 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:08:27.253 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 19:08:27.362 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 19:09:11.422 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50570 10 6452 1 2025-09-25 19:09:21.133 00:00:10.360 TCP 23.104.0.1:46198 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:10:11.639 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33240 10 6452 1 2025-09-25 19:10:21.534 00:00:10.361 TCP 23.104.0.1:53832 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:11:11.872 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:47942 13 13937 1 2025-09-25 19:11:21.929 00:00:10.455 TCP 23.104.0.1:54812 -> 1.101.0.1:3000 15 1926 1 2025-09-25 19:12:12.128 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37140 10 6452 1 2025-09-25 19:08:33.499 00:05:01.589 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 19:12:22.427 00:00:10.320 TCP 23.104.0.1:36550 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:13:12.344 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37252 10 6452 1 2025-09-25 19:13:27.389 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 19:13:27.453 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 19:13:22.786 00:00:10.368 TCP 23.104.0.1:33612 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:09:33.501 00:05:01.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 19:14:12.583 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55036 10 6452 1 2025-09-25 19:14:23.197 00:00:10.360 TCP 23.104.0.1:43674 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:15:12.811 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45818 10 6452 1 2025-09-25 19:15:23.593 00:00:10.365 TCP 23.104.0.1:39532 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:16:13.028 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34920 10 6452 1 2025-09-25 19:16:23.991 00:00:10.325 TCP 23.104.0.1:37678 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:17:13.236 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45182 10 6452 1 2025-09-25 19:17:24.352 00:00:10.360 TCP 23.104.0.1:41942 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:18:13.451 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:41872 10 6452 1 2025-09-25 19:18:27.478 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 19:18:27.583 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 19:18:24.749 00:00:10.387 TCP 23.104.0.1:52292 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:14:33.501 00:05:01.589 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 19:19:13.655 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35078 10 6452 1 2025-09-25 19:15:33.504 00:05:01.583 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 19:19:25.175 00:00:10.369 TCP 23.104.0.1:54806 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:20:13.871 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:44122 10 6452 1 2025-09-25 19:20:25.583 00:00:10.364 TCP 23.104.0.1:45874 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:21:14.106 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43630 10 6452 1 2025-09-25 19:21:25.991 00:00:10.374 TCP 23.104.0.1:38324 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:22:14.323 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45950 10 6452 1 2025-09-25 19:22:26.404 00:00:10.368 TCP 23.104.0.1:43910 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:23:14.538 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47070 10 6452 1 2025-09-25 19:23:27.894 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 19:23:27.687 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 19:23:26.808 00:00:10.361 TCP 23.104.0.1:40586 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:24:14.710 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51510 10 6452 1 2025-09-25 19:20:33.502 00:05:01.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 19:24:27.213 00:00:10.325 TCP 23.104.0.1:37464 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:25:14.928 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48376 10 6452 1 2025-09-25 19:21:33.506 00:05:01.583 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 19:25:27.574 00:00:10.363 TCP 23.104.0.1:46368 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:26:15.163 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54650 10 6452 1 2025-09-25 19:26:27.978 00:00:10.381 TCP 23.104.0.1:59008 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:27:15.377 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55754 10 6452 1 2025-09-25 19:27:28.403 00:00:10.333 TCP 23.104.0.1:44010 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:28:15.603 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40122 10 6452 1 2025-09-25 19:28:27.715 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 19:28:27.745 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 19:28:28.773 00:00:10.373 TCP 23.104.0.1:58068 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:29:15.778 00:00:11.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46604 10 6452 1 2025-09-25 19:29:29.182 00:00:10.366 TCP 23.104.0.1:37040 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:30:16.983 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:39150 10 6452 1 2025-09-25 19:26:33.504 00:05:01.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 19:30:29.584 00:00:10.364 TCP 23.104.0.1:39860 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:31:17.218 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54310 10 6452 1 2025-09-25 19:27:33.507 00:05:01.583 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 19:31:29.986 00:00:10.328 TCP 23.104.0.1:47860 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:32:17.429 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57442 10 6452 1 2025-09-25 19:32:30.356 00:00:10.361 TCP 23.104.0.1:37744 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:33:27.846 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 19:33:17.645 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52012 10 6452 1 2025-09-25 19:33:27.718 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 19:33:30.757 00:00:10.391 TCP 23.104.0.1:57926 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:34:17.855 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58730 10 6452 1 2025-09-25 19:34:31.189 00:00:10.366 TCP 23.104.0.1:32900 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:35:18.083 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37656 10 6452 1 2025-09-25 19:35:31.595 00:00:10.367 TCP 23.104.0.1:54316 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:36:18.253 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:39584 10 6452 1 2025-09-25 19:32:33.509 00:05:01.587 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 19:36:32.004 00:00:10.366 TCP 23.104.0.1:50452 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:37:18.445 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49308 10 6452 1 2025-09-25 19:33:33.510 00:05:01.582 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 19:37:32.404 00:00:10.369 TCP 23.104.0.1:40010 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:38:27.938 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 19:38:18.660 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35166 10 6452 1 2025-09-25 19:38:27.948 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 19:38:32.812 00:00:10.420 TCP 23.104.0.1:56612 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:39:18.877 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60042 10 6452 1 2025-09-25 19:39:33.272 00:00:10.364 TCP 23.104.0.1:46414 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:40:19.099 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59658 10 6452 1 2025-09-25 19:40:33.670 00:00:10.360 TCP 23.104.0.1:60658 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:41:19.323 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59428 10 6452 1 2025-09-25 19:41:34.094 00:00:10.365 TCP 23.104.0.1:43320 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:42:19.544 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44954 10 6452 1 2025-09-25 19:38:33.508 00:05:01.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 19:42:34.508 00:00:10.364 TCP 23.104.0.1:37798 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:43:19.768 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52754 10 6452 1 2025-09-25 19:43:28.040 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 19:43:28.102 00:00:00.052 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 19:39:33.511 00:05:01.583 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 19:43:34.909 00:00:10.359 TCP 23.104.0.1:35584 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:44:19.981 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:53702 10 6452 1 2025-09-25 19:44:35.303 00:00:10.365 TCP 23.104.0.1:42574 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:45:20.228 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37500 10 6452 1 2025-09-25 19:45:35.705 00:00:10.357 TCP 23.104.0.1:55796 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:46:20.440 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39564 10 6452 1 2025-09-25 19:46:36.105 00:00:10.365 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:47:20.610 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36902 10 6452 1 2025-09-25 19:47:36.509 00:00:10.326 TCP 23.104.0.1:57580 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:48:28.315 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 19:48:20.821 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55952 10 6452 1 2025-09-25 19:48:28.398 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 19:44:33.509 00:05:01.589 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 19:48:36.869 00:00:10.372 TCP 23.104.0.1:35536 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:49:21.036 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33296 10 6452 1 2025-09-25 19:45:33.512 00:05:01.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 19:49:37.283 00:00:10.332 TCP 23.104.0.1:40676 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:50:21.244 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58826 10 6452 1 2025-09-25 19:50:37.647 00:00:10.371 TCP 23.104.0.1:38022 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:51:21.457 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37596 10 6452 1 2025-09-25 19:51:38.081 00:00:10.330 TCP 23.104.0.1:49074 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:52:21.679 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47084 10 6452 1 2025-09-25 19:52:38.455 00:00:10.366 TCP 23.104.0.1:52392 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:53:28.058 00:00:00.049 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 19:53:28.308 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 19:53:21.889 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33074 10 6452 1 2025-09-25 19:53:38.861 00:00:10.329 TCP 23.104.0.1:33416 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:54:22.105 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46396 10 6452 1 2025-09-25 19:50:33.511 00:05:01.589 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 19:54:39.227 00:00:10.366 TCP 23.104.0.1:49540 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:55:22.319 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33894 10 6452 1 2025-09-25 19:51:33.513 00:05:01.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 19:55:39.631 00:00:10.856 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:56:22.491 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42858 10 6452 1 2025-09-25 19:56:40.528 00:00:10.321 TCP 23.104.0.1:55034 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:57:22.701 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54642 10 6452 1 2025-09-25 19:57:40.886 00:00:10.327 TCP 23.104.0.1:45738 -> 1.101.0.1:3000 11 1507 1 2025-09-25 19:58:28.368 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 19:58:28.036 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 19:58:22.874 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44492 10 6452 1 2025-09-25 19:58:41.263 00:00:10.334 TCP 23.104.0.1:50558 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 506252, total packets: 1579, avg bps: 1083, avg pps: 0, avg bpp: 320 Time window: 2025-09-25 18:56:33 - 2025-09-25 19:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0023s User: 0.0023s Wall: 0.0013s flows/second: 124343.1 Runtime: 0.0013s