Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 03:59:09.963 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54274 10 6452 1 2025-09-16 03:59:41.132 00:00:10.324 TCP 23.104.0.1:40058 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:00:10.196 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38668 10 6452 1 2025-09-16 03:56:29.025 00:05:01.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 04:00:41.493 00:00:10.358 TCP 23.104.0.1:52554 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:01:10.407 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46326 10 6452 1 2025-09-16 03:57:29.025 00:05:01.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 04:01:41.890 00:00:10.379 TCP 23.104.0.1:52374 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:02:10.612 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52706 10 6452 1 2025-09-16 04:02:42.307 00:00:10.367 TCP 23.104.0.1:59170 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:03:10.782 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45670 10 6452 1 2025-09-16 04:03:49.219 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 04:03:49.336 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 04:03:42.712 00:00:10.372 TCP 23.104.0.1:36618 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:04:11.037 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58310 10 6452 1 2025-09-16 04:04:43.127 00:00:10.376 TCP 23.104.0.1:49172 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:05:11.266 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58428 10 6452 1 2025-09-16 04:05:43.544 00:00:10.364 TCP 23.104.0.1:58130 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:06:11.475 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42738 10 6452 1 2025-09-16 04:02:29.031 00:05:01.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 04:06:43.946 00:00:10.370 TCP 23.104.0.1:60542 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:07:11.692 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52042 10 6452 1 2025-09-16 04:03:29.036 00:05:01.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 04:07:44.361 00:00:10.365 TCP 23.104.0.1:50036 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:08:11.910 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39786 10 6452 1 2025-09-16 04:08:49.374 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 04:08:49.675 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 04:08:44.764 00:00:10.376 TCP 23.104.0.1:47444 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:09:12.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55124 10 6452 1 2025-09-16 04:09:45.179 00:00:10.439 TCP 23.104.0.1:58654 -> 1.101.0.1:3000 15 1926 1 2025-09-16 04:10:12.342 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53260 12 10367 1 2025-09-16 04:10:45.656 00:00:10.371 TCP 23.104.0.1:47992 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:11:12.574 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56726 10 6452 1 2025-09-16 04:11:46.097 00:00:10.367 TCP 23.104.0.1:51332 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:12:12.800 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38458 10 6452 1 2025-09-16 04:08:29.041 00:05:01.092 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 04:12:46.511 00:00:10.364 TCP 23.104.0.1:58608 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:13:13.026 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52556 10 6452 1 2025-09-16 04:09:29.042 00:05:01.087 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 04:13:49.631 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 04:13:49.635 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 04:13:46.913 00:00:10.323 TCP 23.104.0.1:55944 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:14:13.238 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44130 10 6452 1 2025-09-16 04:14:47.274 00:00:10.328 TCP 23.104.0.1:43736 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:15:13.408 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56548 10 6452 1 2025-09-16 04:15:47.637 00:00:10.366 TCP 23.104.0.1:43820 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:16:13.628 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42252 10 6452 1 2025-09-16 04:16:48.045 00:00:10.333 TCP 23.104.0.1:51340 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:17:13.855 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44596 10 6452 1 2025-09-16 04:17:48.428 00:00:10.330 TCP 23.104.0.1:53486 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:18:14.082 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50918 10 6452 1 2025-09-16 04:14:29.041 00:05:01.093 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 04:18:49.713 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 04:18:49.769 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 04:18:48.796 00:00:10.363 TCP 23.104.0.1:56468 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:19:14.298 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34016 10 6452 1 2025-09-16 04:15:29.043 00:05:01.088 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 04:19:49.198 00:00:10.360 TCP 23.104.0.1:39306 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:20:14.514 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36338 10 6452 1 2025-09-16 04:20:49.595 00:00:10.333 TCP 23.104.0.1:38166 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:21:14.740 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33140 10 6452 1 2025-09-16 04:21:49.963 00:00:10.323 TCP 23.104.0.1:56870 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:22:14.964 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47934 10 6452 1 2025-09-16 04:22:50.327 00:00:10.359 TCP 23.104.0.1:54236 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:23:15.189 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43126 10 6452 1 2025-09-16 04:23:49.706 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 04:23:49.813 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 04:23:50.726 00:00:10.376 TCP 23.104.0.1:33168 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:24:15.406 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48040 10 6452 1 2025-09-16 04:20:29.043 00:05:01.091 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 04:24:51.142 00:00:10.801 TCP 23.104.0.1:38584 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:25:15.620 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59296 10 6452 1 2025-09-16 04:21:29.047 00:05:01.083 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 04:25:51.984 00:00:10.370 TCP 23.104.0.1:49108 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:26:15.825 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37222 10 6452 1 2025-09-16 04:26:52.390 00:00:10.365 TCP 23.104.0.1:42058 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:27:16.059 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53370 10 6452 1 2025-09-16 04:27:52.801 00:00:10.368 TCP 23.104.0.1:37666 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:28:16.275 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39038 10 6452 1 2025-09-16 04:28:49.639 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 04:28:49.782 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 04:28:53.208 00:00:10.362 TCP 23.104.0.1:39628 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:29:16.492 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60696 10 6452 1 2025-09-16 04:29:53.608 00:00:11.045 TCP 23.104.0.1:41420 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:30:16.706 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:53432 10 6452 1 2025-09-16 04:26:29.045 00:05:01.090 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 04:30:54.691 00:00:10.368 TCP 23.104.0.1:47126 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:31:16.943 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:43012 10 6452 1 2025-09-16 04:27:29.048 00:05:01.085 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 04:31:55.105 00:00:10.366 TCP 23.104.0.1:46834 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:32:17.188 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55570 10 6452 1 2025-09-16 04:32:55.511 00:00:10.366 TCP 23.104.0.1:57732 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:33:17.407 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47788 10 6452 1 2025-09-16 04:33:50.314 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 04:33:50.413 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 04:33:55.914 00:00:10.366 TCP 23.104.0.1:43708 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:34:17.640 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36600 10 6452 1 2025-09-16 04:34:56.315 00:00:10.441 TCP 23.104.0.1:50094 -> 1.101.0.1:3000 15 1926 1 2025-09-16 04:35:17.853 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:43624 12 10367 1 2025-09-16 04:35:56.795 00:00:10.361 TCP 23.104.0.1:46752 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:36:18.118 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58694 10 6452 1 2025-09-16 04:32:29.049 00:05:01.088 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 04:36:57.198 00:00:10.363 TCP 23.104.0.1:45512 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:37:18.334 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50770 10 6452 1 2025-09-16 04:33:29.053 00:05:01.081 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 04:37:57.599 00:00:10.332 TCP 23.104.0.1:42858 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:38:18.550 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49964 10 6452 1 2025-09-16 04:38:50.098 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 04:38:50.127 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 04:38:57.969 00:00:10.337 TCP 23.104.0.1:40244 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:39:18.760 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45696 10 6452 1 2025-09-16 04:39:58.343 00:00:10.365 TCP 23.104.0.1:56244 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:40:18.970 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:41316 10 6452 1 2025-09-16 04:40:58.744 00:00:10.379 TCP 23.104.0.1:54728 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:41:19.165 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38596 10 6452 1 2025-09-16 04:41:59.162 00:00:10.368 TCP 23.104.0.1:40566 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:38:29.052 00:05:01.085 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 04:42:19.378 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35776 10 6452 1 2025-09-16 04:42:59.570 00:00:10.364 TCP 23.104.0.1:42934 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:43:19.592 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37306 10 6452 1 2025-09-16 04:39:29.058 00:05:01.077 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 04:43:50.146 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 04:43:50.274 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 04:43:59.979 00:00:10.369 TCP 23.104.0.1:48932 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:44:19.768 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37346 10 6452 1 2025-09-16 04:45:00.391 00:00:10.366 TCP 23.104.0.1:57198 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:45:19.983 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34446 10 6452 1 2025-09-16 04:46:00.794 00:00:10.365 TCP 23.104.0.1:44378 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:46:20.212 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60566 10 6452 1 2025-09-16 04:47:01.197 00:00:10.365 TCP 23.104.0.1:57058 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:47:20.436 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58534 10 6452 1 2025-09-16 04:48:01.602 00:00:10.361 TCP 23.104.0.1:55970 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:48:20.648 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47928 10 6452 1 2025-09-16 04:44:29.054 00:05:01.087 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 04:48:49.945 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 04:48:50.356 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 04:49:02.006 00:00:10.373 TCP 23.104.0.1:52892 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:45:29.055 00:05:01.084 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 04:49:20.857 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59050 10 6452 1 2025-09-16 04:50:02.416 00:00:10.369 TCP 23.104.0.1:40464 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:50:21.039 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33356 10 6452 1 2025-09-16 04:51:02.832 00:00:10.333 TCP 23.104.0.1:50312 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:51:21.257 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42698 10 6452 1 2025-09-16 04:52:03.203 00:00:10.358 TCP 23.104.0.1:58794 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:52:21.472 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54472 10 6452 1 2025-09-16 04:53:03.599 00:00:10.362 TCP 23.104.0.1:59680 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:53:21.681 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53340 10 6452 1 2025-09-16 04:53:50.404 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 04:53:50.635 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 04:54:04.003 00:00:10.360 TCP 23.104.0.1:39128 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:50:29.055 00:05:01.086 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 04:54:21.899 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:35516 10 6452 1 2025-09-16 04:55:04.412 00:00:10.369 TCP 23.104.0.1:47174 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:51:29.058 00:05:01.081 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 04:55:22.083 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53264 10 6452 1 2025-09-16 04:56:04.822 00:00:10.369 TCP 23.104.0.1:53932 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:56:22.312 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39442 10 6452 1 2025-09-16 04:57:05.225 00:00:10.361 TCP 23.104.0.1:36092 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:57:22.554 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45914 10 6452 1 2025-09-16 04:58:05.633 00:00:10.368 TCP 23.104.0.1:44568 -> 1.101.0.1:3000 11 1507 1 2025-09-16 04:58:22.776 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46934 10 6452 1 2025-09-16 04:58:50.598 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 04:58:50.569 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 505509, total packets: 1573, avg bps: 1080, avg pps: 0, avg bpp: 321 Time window: 2025-09-16 03:56:29 - 2025-09-16 04:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0000s Wall: 0.0023s flows/second: 71678.7 Runtime: 0.0023s