Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 06:58:51.563 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46902 10 6452 1 2025-09-07 06:59:08.554 00:00:10.364 TCP 23.104.0.1:43858 -> 1.101.0.1:3000 11 1507 1 2025-09-07 06:59:25.494 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 06:59:25.519 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 06:59:51.778 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55020 10 6452 1 2025-09-07 07:00:08.953 00:00:10.416 TCP 23.104.0.1:39854 -> 1.101.0.1:3000 11 1507 1 2025-09-07 06:56:24.792 00:05:00.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 07:00:51.988 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40356 10 6452 1 2025-09-07 07:01:09.412 00:00:10.323 TCP 23.104.0.1:54340 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:01:52.207 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44682 10 6452 1 2025-09-07 07:02:09.778 00:00:10.365 TCP 23.104.0.1:48228 -> 1.101.0.1:3000 11 1507 1 2025-09-07 06:58:24.795 00:05:00.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 07:02:52.430 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55344 10 6452 1 2025-09-07 07:03:10.183 00:00:10.330 TCP 23.104.0.1:47246 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:03:52.602 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39558 10 6452 1 2025-09-07 07:04:10.547 00:00:10.367 TCP 23.104.0.1:39954 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:04:25.673 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 07:04:25.587 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 07:04:52.815 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52696 10 6452 1 2025-09-07 07:05:10.980 00:00:10.326 TCP 23.104.0.1:42606 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:05:53.030 00:00:10.688 TCP 1.101.0.1:3000 -> 22.102.0.1:41342 10 6452 1 2025-09-07 07:06:11.341 00:00:10.369 TCP 23.104.0.1:47584 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:02:24.793 00:05:00.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 07:06:53.760 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48668 10 6452 1 2025-09-07 07:07:11.749 00:00:10.319 TCP 23.104.0.1:33136 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:07:53.966 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:50506 10 6452 1 2025-09-07 07:04:24.796 00:05:00.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 07:08:12.109 00:00:10.365 TCP 23.104.0.1:36000 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:08:54.155 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58780 10 6452 1 2025-09-07 07:09:25.818 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 07:09:12.540 00:00:10.330 TCP 23.104.0.1:36284 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:09:25.755 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 07:09:54.325 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34558 10 6452 1 2025-09-07 07:10:12.901 00:00:10.366 TCP 23.104.0.1:44898 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:10:54.502 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57330 10 6452 1 2025-09-07 07:11:13.313 00:00:10.319 TCP 23.104.0.1:46182 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:11:54.680 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35758 10 6452 1 2025-09-07 07:12:13.669 00:00:10.367 TCP 23.104.0.1:57224 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:08:24.794 00:05:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 07:12:54.894 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57284 10 6452 1 2025-09-07 07:13:14.099 00:00:10.370 TCP 23.104.0.1:46188 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:13:55.083 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57888 10 6452 1 2025-09-07 07:14:25.833 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 07:10:24.797 00:05:00.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 07:14:14.504 00:00:10.320 TCP 23.104.0.1:43178 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:14:25.767 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 07:14:55.294 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58456 10 6452 1 2025-09-07 07:15:14.861 00:00:10.371 TCP 23.104.0.1:43530 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:15:55.510 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51706 10 6452 1 2025-09-07 07:16:15.268 00:00:10.711 TCP 23.104.0.1:52154 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:16:55.723 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39234 10 6452 1 2025-09-07 07:17:16.019 00:00:10.322 TCP 23.104.0.1:40054 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:17:55.931 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45458 10 6452 1 2025-09-07 07:18:16.378 00:00:10.372 TCP 23.104.0.1:46024 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:14:24.796 00:05:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 07:18:56.171 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55670 10 6452 1 2025-09-07 07:19:26.031 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 07:19:26.321 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 07:19:16.788 00:00:10.364 TCP 23.104.0.1:37992 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:19:56.409 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58782 10 6452 1 2025-09-07 07:16:24.798 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 07:20:17.192 00:00:10.364 TCP 23.104.0.1:55982 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:20:56.586 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45416 10 6452 1 2025-09-07 07:21:17.593 00:00:10.322 TCP 23.104.0.1:33988 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:21:56.802 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40164 10 6452 1 2025-09-07 07:22:17.956 00:00:10.369 TCP 23.104.0.1:59298 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:22:57.025 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49016 10 6452 1 2025-09-07 07:23:18.363 00:00:10.363 TCP 23.104.0.1:32952 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:23:57.239 00:00:10.294 TCP 1.101.0.1:3000 -> 22.102.0.1:51624 10 6452 1 2025-09-07 07:24:26.144 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 07:20:24.797 00:05:00.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 07:24:26.415 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 07:24:18.767 00:00:10.372 TCP 23.104.0.1:33982 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:24:57.568 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33846 10 6452 1 2025-09-07 07:25:19.179 00:00:10.365 TCP 23.104.0.1:55682 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:25:57.792 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56064 10 6452 1 2025-09-07 07:22:24.799 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 07:26:19.582 00:00:10.368 TCP 23.104.0.1:41438 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:26:58.029 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53480 10 6452 1 2025-09-07 07:27:19.990 00:00:10.363 TCP 23.104.0.1:45578 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:27:58.241 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:55100 12 10367 1 2025-09-07 07:28:20.391 00:00:10.984 TCP 23.104.0.1:48188 -> 1.101.0.1:3000 15 1926 1 2025-09-07 07:28:58.437 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42894 10 6452 1 2025-09-07 07:29:26.290 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 07:29:26.058 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 07:29:21.412 00:00:10.377 TCP 23.104.0.1:59448 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:29:58.649 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48570 10 6452 1 2025-09-07 07:26:24.799 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 07:30:21.817 00:00:10.365 TCP 23.104.0.1:38230 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:30:58.857 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34138 10 6452 1 2025-09-07 07:31:22.219 00:00:10.368 TCP 23.104.0.1:49972 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:31:59.082 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47514 10 6452 1 2025-09-07 07:28:24.801 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 07:32:22.618 00:00:10.325 TCP 23.104.0.1:58412 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:32:59.296 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36146 10 6452 1 2025-09-07 07:33:22.980 00:00:10.373 TCP 23.104.0.1:35616 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:33:59.509 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44192 10 6452 1 2025-09-07 07:34:26.342 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 07:34:26.289 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 07:34:23.391 00:00:10.367 TCP 23.104.0.1:39382 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:34:59.725 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33016 10 6452 1 2025-09-07 07:35:23.790 00:00:10.369 TCP 23.104.0.1:50694 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:35:59.934 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:38594 10 6452 1 2025-09-07 07:32:24.799 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 07:36:24.196 00:00:10.370 TCP 23.104.0.1:52422 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:37:00.167 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33774 10 6452 1 2025-09-07 07:37:24.607 00:00:10.364 TCP 23.104.0.1:40496 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:38:00.339 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37008 10 6452 1 2025-09-07 07:34:24.802 00:05:00.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 07:38:25.009 00:00:10.329 TCP 23.104.0.1:49492 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:39:00.553 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35956 10 6452 1 2025-09-07 07:39:26.526 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 07:39:26.201 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 07:39:25.372 00:00:10.364 TCP 23.104.0.1:41130 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:40:00.768 00:00:10.971 TCP 1.101.0.1:3000 -> 22.102.0.1:53188 10 6452 1 2025-09-07 07:40:25.771 00:00:10.377 TCP 23.104.0.1:35886 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:41:01.783 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55348 10 6452 1 2025-09-07 07:41:26.184 00:00:10.423 TCP 23.104.0.1:39460 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:42:01.998 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38686 10 6452 1 2025-09-07 07:38:24.800 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 07:42:26.649 00:00:10.368 TCP 23.104.0.1:44952 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:43:02.226 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34338 10 6452 1 2025-09-07 07:43:27.069 00:00:10.369 TCP 23.104.0.1:48074 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:44:02.395 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40620 10 6452 1 2025-09-07 07:44:26.767 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 07:40:24.804 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 07:44:26.811 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 07:44:27.481 00:00:10.370 TCP 23.104.0.1:51222 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:45:02.610 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36978 10 6452 1 2025-09-07 07:45:27.891 00:00:10.343 TCP 23.104.0.1:37710 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:46:02.822 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37082 10 6452 1 2025-09-07 07:46:28.273 00:00:10.371 TCP 23.104.0.1:47404 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:47:03.036 00:00:10.316 TCP 1.101.0.1:3000 -> 22.102.0.1:57822 10 6452 1 2025-09-07 07:47:28.683 00:00:10.656 TCP 23.104.0.1:42614 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:48:03.400 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:60794 12 10365 1 2025-09-07 07:44:24.808 00:05:00.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 07:48:29.388 00:00:10.433 TCP 23.104.0.1:60288 -> 1.101.0.1:3000 15 1926 1 2025-09-07 07:49:03.599 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56764 10 6452 1 2025-09-07 07:49:26.498 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 07:49:26.535 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 07:49:29.858 00:00:10.385 TCP 23.104.0.1:59496 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:50:03.808 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46988 10 6452 1 2025-09-07 07:46:24.810 00:05:00.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 07:50:30.283 00:00:10.376 TCP 23.104.0.1:43698 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:51:04.030 00:00:11.492 TCP 1.101.0.1:3000 -> 22.102.0.1:47444 10 6452 1 2025-09-07 07:51:30.696 00:00:10.366 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:52:05.569 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:39892 10 6452 1 2025-09-07 07:52:31.104 00:00:10.986 TCP 23.104.0.1:35778 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:53:05.735 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54974 10 6452 1 2025-09-07 07:53:32.130 00:00:10.363 TCP 23.104.0.1:47746 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:54:05.947 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47044 10 6452 1 2025-09-07 07:54:26.659 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 07:54:26.816 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 07:50:24.809 00:05:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-07 07:54:32.536 00:00:10.361 TCP 23.104.0.1:50250 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:55:06.173 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48722 10 6452 1 2025-09-07 07:55:32.944 00:00:10.371 TCP 23.104.0.1:60502 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:56:06.343 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34596 10 6452 1 2025-09-07 07:52:24.811 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-07 07:56:33.356 00:00:10.324 TCP 23.104.0.1:47122 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:57:06.520 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55576 10 6452 1 2025-09-07 07:57:33.720 00:00:10.372 TCP 23.104.0.1:50840 -> 1.101.0.1:3000 11 1507 1 2025-09-07 07:58:06.730 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43216 10 6452 1 2025-09-07 07:58:34.131 00:00:10.366 TCP 23.104.0.1:52504 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507014, total packets: 1584, avg bps: 1084, avg pps: 0, avg bpp: 320 Time window: 2025-09-07 06:56:24 - 2025-09-07 07:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0018s Wall: 0.0015s flows/second: 107613.6 Runtime: 0.0015s