Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 23:58:51.291 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50874 10 6452 1 2025-09-13 23:59:18.353 00:00:11.007 TCP 23.104.0.1:47056 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:59:51.466 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34256 10 6452 1 2025-09-13 23:55:28.106 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 00:00:19.414 00:00:10.367 TCP 23.104.0.1:45086 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:00:51.686 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54302 10 6452 1 2025-09-14 00:01:19.820 00:00:10.607 TCP 23.104.0.1:36820 -> 1.101.0.1:3000 11 1507 1 2025-09-13 23:56:28.109 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 00:01:51.905 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39724 10 6452 1 2025-09-14 00:02:20.465 00:00:10.364 TCP 23.104.0.1:39384 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:02:46.794 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 00:02:46.791 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 00:02:52.087 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33266 10 6452 1 2025-09-14 00:03:20.865 00:00:10.367 TCP 23.104.0.1:57278 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:03:52.297 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57084 10 6452 1 2025-09-14 00:04:21.272 00:00:10.363 TCP 23.104.0.1:37996 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:04:52.509 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50346 10 6452 1 2025-09-14 00:05:21.680 00:00:10.375 TCP 23.104.0.1:41536 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:05:52.719 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42332 10 6452 1 2025-09-14 00:06:22.104 00:00:10.371 TCP 23.104.0.1:47348 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:06:52.937 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:47808 10 6452 1 2025-09-14 00:02:28.107 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 00:07:22.510 00:00:10.367 TCP 23.104.0.1:60950 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:07:46.731 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 00:07:46.602 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 00:07:53.193 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40470 10 6452 1 2025-09-14 00:03:28.111 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 00:08:22.915 00:00:10.370 TCP 23.104.0.1:37624 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:08:53.371 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51576 10 6452 1 2025-09-14 00:09:23.322 00:00:10.363 TCP 23.104.0.1:53404 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:09:53.589 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55032 10 6452 1 2025-09-14 00:10:23.724 00:00:10.332 TCP 23.104.0.1:43686 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:10:53.803 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53852 10 6452 1 2025-09-14 00:11:24.113 00:00:10.362 TCP 23.104.0.1:40568 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:11:54.020 00:00:10.752 TCP 1.101.0.1:3000 -> 22.102.0.1:51566 10 6452 1 2025-09-14 00:12:24.510 00:00:10.366 TCP 23.104.0.1:44498 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:12:46.786 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 00:12:46.985 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 00:12:54.814 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55502 10 6452 1 2025-09-14 00:13:24.913 00:00:10.365 TCP 23.104.0.1:51930 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:13:55.029 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35040 10 6452 1 2025-09-14 00:09:28.110 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 00:14:25.313 00:00:10.364 TCP 23.104.0.1:33920 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:14:55.235 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45690 10 6452 1 2025-09-14 00:10:28.112 00:06:00.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 00:15:25.714 00:00:10.382 TCP 23.104.0.1:44436 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:15:55.408 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46906 10 6452 1 2025-09-14 00:16:26.139 00:00:10.366 TCP 23.104.0.1:53912 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:16:55.628 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36774 10 6452 1 2025-09-14 00:17:26.550 00:00:10.363 TCP 23.104.0.1:37838 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:17:46.881 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 00:17:47.082 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 00:17:55.844 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46754 10 6452 1 2025-09-14 00:18:26.955 00:00:10.372 TCP 23.104.0.1:48686 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:18:56.076 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53978 12 10367 1 2025-09-14 00:19:27.367 00:00:10.439 TCP 23.104.0.1:52154 -> 1.101.0.1:3000 15 1926 1 2025-09-14 00:19:56.309 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51822 10 6452 1 2025-09-14 00:20:27.857 00:00:10.371 TCP 23.104.0.1:35538 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:20:56.485 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51370 10 6452 1 2025-09-14 00:16:28.110 00:06:00.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 00:21:28.263 00:00:10.323 TCP 23.104.0.1:44778 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:21:56.698 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57858 10 6452 1 2025-09-14 00:17:28.114 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 00:22:28.625 00:00:10.364 TCP 23.104.0.1:51966 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:22:47.214 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 00:22:47.022 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 00:22:56.922 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57228 10 6452 1 2025-09-14 00:23:29.025 00:00:13.171 TCP 23.104.0.1:39688 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:23:57.100 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:58508 12 10367 1 2025-09-14 00:24:32.235 00:00:10.447 TCP 23.104.0.1:34422 -> 1.101.0.1:3000 15 1926 1 2025-09-14 00:24:57.346 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39930 10 6452 1 2025-09-14 00:25:32.728 00:00:10.383 TCP 23.104.0.1:54256 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:25:57.567 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41172 10 6452 1 2025-09-14 00:26:33.141 00:00:10.363 TCP 23.104.0.1:49488 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:26:57.781 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56812 10 6452 1 2025-09-14 00:27:33.541 00:00:10.378 TCP 23.104.0.1:36302 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:27:47.334 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 00:27:47.325 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 00:27:57.996 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60614 10 6452 1 2025-09-14 00:23:28.111 00:06:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 00:28:33.950 00:00:10.369 TCP 23.104.0.1:51290 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:28:58.211 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59922 10 6452 1 2025-09-14 00:24:28.114 00:06:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 00:29:34.361 00:00:10.365 TCP 23.104.0.1:36564 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:29:58.423 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58118 10 6452 1 2025-09-14 00:30:34.764 00:00:10.378 TCP 23.104.0.1:57618 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:30:58.636 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60330 10 6452 1 2025-09-14 00:31:35.188 00:00:10.370 TCP 23.104.0.1:48094 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:31:58.810 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:36332 10 6452 1 2025-09-14 00:32:35.592 00:00:10.324 TCP 23.104.0.1:37202 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:32:47.055 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 00:32:47.121 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 00:32:59.015 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46334 10 6452 1 2025-09-14 00:33:35.957 00:00:10.371 TCP 23.104.0.1:49548 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:33:59.225 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 10 6452 1 2025-09-14 00:34:36.383 00:00:10.364 TCP 23.104.0.1:51118 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:34:59.438 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52250 10 6452 1 2025-09-14 00:30:28.112 00:06:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 00:35:36.783 00:00:10.363 TCP 23.104.0.1:52770 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:35:59.651 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55446 10 6452 1 2025-09-14 00:31:28.117 00:06:00.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 00:36:37.185 00:00:10.364 TCP 23.104.0.1:38826 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:36:59.861 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60124 10 6452 1 2025-09-14 00:37:47.379 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 00:37:37.588 00:00:10.361 TCP 23.104.0.1:37054 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:37:47.325 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 00:38:00.087 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48722 10 6452 1 2025-09-14 00:38:37.990 00:00:10.388 TCP 23.104.0.1:38814 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:39:00.297 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:58380 10 6452 1 2025-09-14 00:39:38.421 00:00:10.367 TCP 23.104.0.1:48262 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:40:00.566 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34988 10 6452 1 2025-09-14 00:40:38.838 00:00:10.394 TCP 23.104.0.1:42394 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:41:00.779 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53624 10 6452 1 2025-09-14 00:41:39.301 00:00:10.369 TCP 23.104.0.1:55986 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:42:00.997 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50328 10 6452 1 2025-09-14 00:37:28.114 00:06:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 00:42:47.439 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 00:42:47.526 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 00:42:39.704 00:00:10.363 TCP 23.104.0.1:41238 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:43:01.214 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47624 10 6452 1 2025-09-14 00:38:28.117 00:06:00.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 00:43:40.114 00:00:10.361 TCP 23.104.0.1:42280 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:44:01.386 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55072 10 6452 1 2025-09-14 00:44:40.517 00:00:10.365 TCP 23.104.0.1:42590 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:45:01.601 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57566 10 6452 1 2025-09-14 00:45:40.924 00:00:10.331 TCP 23.104.0.1:40664 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:46:01.768 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60340 10 6452 1 2025-09-14 00:46:41.296 00:00:10.320 TCP 23.104.0.1:58882 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:47:01.985 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49500 10 6452 1 2025-09-14 00:47:47.515 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 00:47:47.669 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 00:47:41.656 00:00:10.367 TCP 23.104.0.1:46968 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:48:02.214 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33432 10 6452 1 2025-09-14 00:48:42.087 00:00:10.366 TCP 23.104.0.1:54002 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:49:02.401 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33742 10 6452 1 2025-09-14 00:44:28.115 00:06:00.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 00:49:42.490 00:00:10.371 TCP 23.104.0.1:50002 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:50:02.613 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52428 10 6452 1 2025-09-14 00:45:28.118 00:06:00.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 00:50:42.896 00:00:10.370 TCP 23.104.0.1:37888 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:51:02.844 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35588 10 6452 1 2025-09-14 00:51:43.333 00:00:10.327 TCP 23.104.0.1:58868 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:52:03.074 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39262 10 6452 1 2025-09-14 00:52:47.681 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 00:52:47.831 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 00:52:43.697 00:00:10.368 TCP 23.104.0.1:52018 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:53:03.290 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56408 10 6452 1 2025-09-14 00:53:44.109 00:00:10.369 TCP 23.104.0.1:43744 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:54:03.504 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48534 10 6452 1 2025-09-14 00:54:44.513 00:00:10.366 TCP 23.104.0.1:50356 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:55:03.716 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48590 10 6452 1 2025-09-14 00:55:44.917 00:00:10.384 TCP 23.104.0.1:35822 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:56:03.889 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44740 10 6452 1 2025-09-14 00:51:28.118 00:06:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-14 00:56:45.339 00:00:10.331 TCP 23.104.0.1:35634 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:57:04.110 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53238 10 6452 1 2025-09-14 00:52:28.120 00:06:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-14 00:57:47.897 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-14 00:57:47.979 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-14 00:57:45.705 00:00:10.331 TCP 23.104.0.1:55652 -> 1.101.0.1:3000 11 1507 1 2025-09-14 00:58:04.323 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59796 10 6452 1 Summary: total flows: 161, total bytes: 506247, total packets: 1585, avg bps: 1071, avg pps: 0, avg bpp: 319 Time window: 2025-09-13 23:55:28 - 2025-09-14 00:58:28 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0021s User: 0.0021s Wall: 0.0028s flows/second: 58309.6 Runtime: 0.0028s