Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-11 04:58:47.669 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38174 10 6452 1 2025-09-11 04:59:37.706 00:00:10.333 TCP 23.104.0.1:41012 -> 1.101.0.1:3000 11 1507 1 2025-09-11 04:59:47.890 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45466 10 6452 1 2025-09-11 04:56:26.660 00:05:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 05:00:38.099 00:00:10.369 TCP 23.104.0.1:46216 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:00:48.113 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44022 10 6452 1 2025-09-11 05:01:26.155 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 05:01:26.026 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 05:01:38.506 00:00:10.495 TCP 23.104.0.1:54034 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:01:48.291 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34792 10 6452 1 2025-09-11 05:02:39.049 00:00:10.340 TCP 23.104.0.1:40768 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:02:48.515 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39214 10 6452 1 2025-09-11 05:03:39.436 00:00:10.378 TCP 23.104.0.1:59798 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:03:48.721 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58044 10 6452 1 2025-09-11 05:00:26.662 00:05:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 05:04:39.850 00:00:10.378 TCP 23.104.0.1:57916 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:04:48.942 00:00:10.576 TCP 1.101.0.1:3000 -> 22.102.0.1:36348 10 6452 1 2025-09-11 05:05:40.269 00:00:10.472 TCP 23.104.0.1:45796 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:05:49.551 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41388 10 6452 1 2025-09-11 05:06:26.275 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 05:06:26.169 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 05:02:26.659 00:05:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 05:06:40.785 00:00:10.366 TCP 23.104.0.1:55270 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:06:49.774 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44324 10 6452 1 2025-09-11 05:07:41.185 00:00:10.365 TCP 23.104.0.1:52082 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:07:49.984 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:37096 10 6452 1 2025-09-11 05:08:41.584 00:00:10.361 TCP 23.104.0.1:42466 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:08:50.235 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50310 10 6452 1 2025-09-11 05:09:41.981 00:00:10.370 TCP 23.104.0.1:50166 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:09:50.448 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55370 10 6452 1 2025-09-11 05:06:26.663 00:05:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 05:10:42.390 00:00:10.325 TCP 23.104.0.1:36232 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:10:50.683 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55350 10 6452 1 2025-09-11 05:11:26.243 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 05:11:26.362 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 05:11:42.754 00:00:10.383 TCP 23.104.0.1:60670 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:11:50.899 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37530 10 6452 1 2025-09-11 05:08:26.660 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 05:12:43.177 00:00:10.368 TCP 23.104.0.1:59106 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:12:51.117 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50974 10 6452 1 2025-09-11 05:13:43.584 00:00:10.438 TCP 23.104.0.1:39850 -> 1.101.0.1:3000 15 1926 1 2025-09-11 05:13:51.328 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:59894 12 10367 1 2025-09-11 05:14:44.069 00:00:10.365 TCP 23.104.0.1:33396 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:14:51.571 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51642 10 6452 1 2025-09-11 05:15:44.469 00:00:10.426 TCP 23.104.0.1:46820 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:15:51.748 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34272 10 6452 1 2025-09-11 05:16:26.594 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 05:16:26.217 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 05:12:26.664 00:05:00.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 05:16:44.932 00:00:10.382 TCP 23.104.0.1:41860 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:16:51.959 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53224 10 6452 1 2025-09-11 05:17:45.354 00:00:10.320 TCP 23.104.0.1:44384 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:17:52.189 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58298 10 6452 1 2025-09-11 05:14:26.662 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 05:18:45.717 00:00:10.371 TCP 23.104.0.1:60114 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:18:52.408 00:00:10.437 TCP 1.101.0.1:3000 -> 22.102.0.1:41058 10 6452 1 2025-09-11 05:19:46.130 00:00:10.368 TCP 23.104.0.1:35638 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:19:52.888 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48118 10 6452 1 2025-09-11 05:20:46.532 00:00:10.365 TCP 23.104.0.1:42620 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:20:53.100 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:34036 10 6452 1 2025-09-11 05:21:26.305 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 05:21:26.299 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 05:21:46.936 00:00:10.374 TCP 23.104.0.1:51248 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:21:53.297 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:40244 10 6452 1 2025-09-11 05:18:26.665 00:05:00.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 05:22:47.349 00:00:10.368 TCP 23.104.0.1:59708 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:22:53.532 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46704 10 6452 1 2025-09-11 05:23:47.757 00:00:10.384 TCP 23.104.0.1:32846 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:23:53.754 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59110 10 6452 1 2025-09-11 05:20:26.663 00:05:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 05:24:48.177 00:00:10.368 TCP 23.104.0.1:51198 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:24:53.934 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:44384 10 6452 1 2025-09-11 05:25:48.584 00:00:10.366 TCP 23.104.0.1:47110 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:25:54.196 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:41984 10 6452 1 2025-09-11 05:26:26.715 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 05:26:26.749 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 05:26:48.989 00:00:10.371 TCP 23.104.0.1:54886 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:26:54.376 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45332 10 6452 1 2025-09-11 05:27:49.402 00:00:10.370 TCP 23.104.0.1:44230 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:27:54.592 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54422 10 6452 1 2025-09-11 05:24:26.669 00:05:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 05:28:49.808 00:00:10.361 TCP 23.104.0.1:44666 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:28:54.809 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39336 10 6452 1 2025-09-11 05:29:50.204 00:00:10.370 TCP 23.104.0.1:35388 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:29:55.032 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36732 10 6452 1 2025-09-11 05:26:26.665 00:05:00.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 05:30:50.611 00:00:10.371 TCP 23.104.0.1:59088 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:30:55.251 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44752 10 6452 1 2025-09-11 05:31:26.757 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 05:31:26.671 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 05:31:51.017 00:00:10.364 TCP 23.104.0.1:35860 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:31:55.463 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35128 10 6452 1 2025-09-11 05:32:51.417 00:00:10.375 TCP 23.104.0.1:53382 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:32:55.673 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39666 10 6452 1 2025-09-11 05:33:55.882 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36798 10 6452 1 2025-09-11 05:33:51.820 00:00:10.347 TCP 23.104.0.1:43024 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:30:26.668 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 05:34:56.106 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56756 10 6452 1 2025-09-11 05:34:52.211 00:00:10.370 TCP 23.104.0.1:37452 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:35:56.283 00:00:10.628 TCP 1.101.0.1:3000 -> 22.102.0.1:59914 10 6452 1 2025-09-11 05:35:52.619 00:00:10.365 TCP 23.104.0.1:50440 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:36:26.719 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 05:36:26.866 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 05:32:26.665 00:05:00.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 05:36:53.031 00:00:10.336 TCP 23.104.0.1:45372 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:36:56.959 00:00:10.341 TCP 1.101.0.1:3000 -> 22.102.0.1:51526 10 6452 1 2025-09-11 05:37:53.409 00:00:10.323 TCP 23.104.0.1:44562 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:37:57.340 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59452 10 6452 1 2025-09-11 05:38:53.774 00:00:10.373 TCP 23.104.0.1:55918 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:38:57.549 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45206 10 6452 1 2025-09-11 05:39:54.180 00:00:10.368 TCP 23.104.0.1:37286 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:39:57.771 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56488 10 6452 1 2025-09-11 05:36:26.669 00:05:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 05:40:54.586 00:00:10.325 TCP 23.104.0.1:54750 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:40:57.943 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37216 10 6452 1 2025-09-11 05:41:26.865 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 05:41:26.885 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 05:41:54.950 00:00:10.331 TCP 23.104.0.1:42560 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:41:58.177 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53004 10 6452 1 2025-09-11 05:38:26.668 00:05:00.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 05:42:55.321 00:00:10.378 TCP 23.104.0.1:38724 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:42:58.389 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38518 10 6452 1 2025-09-11 05:43:55.725 00:00:10.458 TCP 23.104.0.1:43162 -> 1.101.0.1:3000 15 1926 1 2025-09-11 05:43:58.599 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:41918 12 10365 1 2025-09-11 05:44:56.219 00:00:10.329 TCP 23.104.0.1:57544 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:44:58.844 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52030 10 6452 1 2025-09-11 05:45:56.580 00:00:10.370 TCP 23.104.0.1:43898 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:45:59.028 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48508 10 6452 1 2025-09-11 05:46:26.949 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 05:46:26.949 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 05:42:26.671 00:05:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 05:46:56.994 00:00:10.366 TCP 23.104.0.1:53674 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:46:59.239 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51614 10 6452 1 2025-09-11 05:47:59.407 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36926 10 6452 1 2025-09-11 05:47:57.400 00:00:10.325 TCP 23.104.0.1:52182 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:44:26.668 00:05:00.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 05:48:59.613 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57320 10 6452 1 2025-09-11 05:48:57.770 00:00:10.369 TCP 23.104.0.1:33102 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:49:58.175 00:00:10.329 TCP 23.104.0.1:46680 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:49:59.833 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56920 10 6452 1 2025-09-11 05:50:58.541 00:00:10.365 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:51:00.073 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57262 10 6452 1 2025-09-11 05:51:26.918 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 05:51:27.030 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 05:51:58.943 00:00:10.376 TCP 23.104.0.1:51296 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:52:00.285 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44444 10 6452 1 2025-09-11 05:48:26.673 00:05:00.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-11 05:53:00.496 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60080 10 6452 1 2025-09-11 05:52:59.355 00:00:10.366 TCP 23.104.0.1:41160 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:53:59.761 00:00:10.381 TCP 23.104.0.1:51270 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:54:00.714 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51814 10 6452 1 2025-09-11 05:50:26.670 00:05:00.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-11 05:55:00.181 00:00:10.363 TCP 23.104.0.1:46194 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:55:00.889 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36782 10 6452 1 2025-09-11 05:56:01.121 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37872 10 6452 1 2025-09-11 05:56:00.582 00:00:10.365 TCP 23.104.0.1:50732 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:56:27.317 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-11 05:56:27.326 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-11 05:57:01.343 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44292 10 6452 1 2025-09-11 05:57:00.987 00:00:10.358 TCP 23.104.0.1:58446 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:58:01.524 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54370 10 6452 1 2025-09-11 05:58:01.397 00:00:10.375 TCP 23.104.0.1:33806 -> 1.101.0.1:3000 11 1507 1 2025-09-11 05:54:26.673 00:05:00.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 Summary: total flows: 163, total bytes: 505507, total packets: 1573, avg bps: 1069, avg pps: 0, avg bpp: 321 Time window: 2025-09-11 04:56:26 - 2025-09-11 05:59:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0014s Wall: 0.0020s flows/second: 82449.5 Runtime: 0.0020s