Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-16 19:59:00.371 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39858 10 6452 1 2025-09-16 19:59:08.410 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 19:59:08.545 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 19:59:09.419 00:00:10.327 TCP 23.104.0.1:34050 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:00:00.583 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60292 10 6452 1 2025-09-16 20:00:09.785 00:00:10.367 TCP 23.104.0.1:41642 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:56:29.336 00:05:01.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 20:01:00.755 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47684 10 6452 1 2025-09-16 20:01:10.188 00:00:10.363 TCP 23.104.0.1:38288 -> 1.101.0.1:3000 11 1507 1 2025-09-16 19:57:29.339 00:05:01.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 20:02:00.966 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38442 10 6452 1 2025-09-16 20:02:10.590 00:00:10.367 TCP 23.104.0.1:33566 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:03:01.201 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42926 10 6452 1 2025-09-16 20:03:10.995 00:00:10.317 TCP 23.104.0.1:59290 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:04:08.626 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 20:04:08.584 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 20:04:01.427 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41574 10 6452 1 2025-09-16 20:04:11.352 00:00:10.366 TCP 23.104.0.1:48858 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:05:01.655 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57054 10 6452 1 2025-09-16 20:05:11.755 00:00:17.082 TCP 23.104.0.1:50108 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:06:01.871 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39688 10 6452 1 2025-09-16 20:02:29.337 00:05:01.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 20:06:18.870 00:00:10.328 TCP 23.104.0.1:37754 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:07:02.100 00:00:10.883 TCP 1.101.0.1:3000 -> 22.102.0.1:51894 10 6452 1 2025-09-16 20:07:19.233 00:00:10.360 TCP 23.104.0.1:34318 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:03:29.340 00:05:01.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 20:08:03.035 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43248 10 6452 1 2025-09-16 20:08:19.631 00:00:10.358 TCP 23.104.0.1:45828 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:09:08.765 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 20:09:08.607 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 20:09:03.248 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59990 10 6452 1 2025-09-16 20:09:20.029 00:00:10.377 TCP 23.104.0.1:59976 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:10:03.460 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56778 10 6452 1 2025-09-16 20:10:20.444 00:00:10.904 TCP 23.104.0.1:38538 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:11:03.630 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52544 10 6452 1 2025-09-16 20:11:21.393 00:00:10.362 TCP 23.104.0.1:44558 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:12:03.846 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58284 10 6452 1 2025-09-16 20:08:29.339 00:05:01.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 20:12:21.794 00:00:10.364 TCP 23.104.0.1:34974 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:13:04.084 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34112 10 6452 1 2025-09-16 20:09:29.341 00:05:01.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 20:13:22.199 00:00:10.371 TCP 23.104.0.1:51990 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:14:08.705 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 20:14:08.649 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 20:14:04.264 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42368 10 6452 1 2025-09-16 20:14:22.604 00:00:10.366 TCP 23.104.0.1:56842 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:15:04.434 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46598 10 6452 1 2025-09-16 20:15:23.008 00:00:10.322 TCP 23.104.0.1:36564 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:16:04.653 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54364 10 6452 1 2025-09-16 20:16:23.368 00:00:10.382 TCP 23.104.0.1:35908 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:17:04.868 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53674 10 6452 1 2025-09-16 20:17:23.767 00:00:10.373 TCP 23.104.0.1:48372 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:18:05.103 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60738 10 6452 1 2025-09-16 20:14:29.339 00:05:01.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 20:18:24.181 00:00:10.363 TCP 23.104.0.1:33200 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:19:08.893 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 20:19:08.750 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 20:19:05.312 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49292 10 6452 1 2025-09-16 20:15:29.342 00:05:01.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 20:19:24.578 00:00:10.329 TCP 23.104.0.1:51864 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:20:05.537 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58288 10 6452 1 2025-09-16 20:20:24.942 00:00:10.373 TCP 23.104.0.1:34162 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:21:05.760 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48636 10 6452 1 2025-09-16 20:21:25.352 00:00:10.365 TCP 23.104.0.1:39278 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:22:05.973 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:35806 10 6452 1 2025-09-16 20:22:25.756 00:00:10.384 TCP 23.104.0.1:44246 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:23:06.254 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53802 10 6452 1 2025-09-16 20:23:26.176 00:00:10.367 TCP 23.104.0.1:53020 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:24:09.653 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 20:24:09.021 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 20:24:06.495 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6452 1 2025-09-16 20:20:29.340 00:05:01.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 20:24:26.575 00:00:10.360 TCP 23.104.0.1:41482 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:25:06.678 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53468 10 6452 1 2025-09-16 20:21:29.343 00:05:01.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 20:25:26.976 00:00:10.337 TCP 23.104.0.1:37838 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:26:06.904 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48114 10 6452 1 2025-09-16 20:26:27.350 00:00:10.364 TCP 23.104.0.1:50874 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:27:07.118 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38870 10 6452 1 2025-09-16 20:27:27.750 00:00:10.322 TCP 23.104.0.1:52128 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:28:07.327 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:34668 11 6504 1 2025-09-16 20:28:28.113 00:00:10.416 TCP 23.104.0.1:38224 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:29:09.129 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 20:29:09.099 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 20:29:07.599 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35008 10 6452 1 2025-09-16 20:29:28.567 00:00:10.367 TCP 23.104.0.1:36350 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:30:07.820 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48656 10 6452 1 2025-09-16 20:26:29.341 00:05:01.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 20:30:28.973 00:00:10.326 TCP 23.104.0.1:60186 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:31:08.036 00:00:10.567 TCP 1.101.0.1:3000 -> 22.102.0.1:46076 10 6452 1 2025-09-16 20:27:29.343 00:05:01.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 20:31:29.346 00:00:10.366 TCP 23.104.0.1:59398 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:32:08.646 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33642 10 6452 1 2025-09-16 20:32:29.749 00:00:10.390 TCP 23.104.0.1:38362 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:33:08.864 00:00:10.257 TCP 1.101.0.1:3000 -> 22.102.0.1:59826 11 6504 1 2025-09-16 20:33:30.179 00:00:10.952 TCP 23.104.0.1:60408 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:34:09.268 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 20:34:08.998 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 20:34:09.163 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37750 10 6452 1 2025-09-16 20:34:31.165 00:00:10.324 TCP 23.104.0.1:33136 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:35:09.383 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44614 10 6452 1 2025-09-16 20:35:31.544 00:00:10.668 TCP 23.104.0.1:35916 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:36:09.589 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50288 10 6452 1 2025-09-16 20:32:29.341 00:05:01.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 20:36:32.249 00:00:10.370 TCP 23.104.0.1:56220 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:37:09.812 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36374 10 6452 1 2025-09-16 20:33:29.345 00:05:01.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 20:37:32.656 00:00:10.372 TCP 23.104.0.1:48804 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:38:10.042 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51222 10 6452 1 2025-09-16 20:38:33.100 00:00:10.326 TCP 23.104.0.1:42682 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:39:09.232 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 20:39:09.537 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 20:39:10.261 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54380 10 6452 1 2025-09-16 20:39:33.465 00:00:10.367 TCP 23.104.0.1:49792 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:40:10.470 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43294 10 6452 1 2025-09-16 20:40:33.866 00:00:10.383 TCP 23.104.0.1:46480 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:41:10.687 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46022 10 6452 1 2025-09-16 20:41:34.274 00:00:10.369 TCP 23.104.0.1:56390 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:42:10.910 00:00:10.323 TCP 1.101.0.1:3000 -> 22.102.0.1:35516 10 6452 1 2025-09-16 20:38:29.354 00:05:01.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 20:42:34.688 00:00:10.372 TCP 23.104.0.1:59100 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:43:11.273 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58070 10 6452 1 2025-09-16 20:39:29.351 00:05:01.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 20:43:35.110 00:00:10.366 TCP 23.104.0.1:33536 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:44:09.685 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 20:44:09.853 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 20:44:11.486 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44098 10 6452 1 2025-09-16 20:44:35.514 00:00:10.367 TCP 23.104.0.1:40430 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:45:11.710 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53318 10 6452 1 2025-09-16 20:45:35.919 00:00:10.418 TCP 23.104.0.1:40124 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:46:11.929 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:44026 10 6452 1 2025-09-16 20:46:36.360 00:00:10.321 TCP 23.104.0.1:57310 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:47:12.176 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34428 10 6452 1 2025-09-16 20:47:36.718 00:00:10.324 TCP 23.104.0.1:45300 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:48:12.393 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40228 10 6452 1 2025-09-16 20:44:29.351 00:05:01.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 20:48:37.108 00:00:10.363 TCP 23.104.0.1:55354 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:49:09.662 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 20:49:09.385 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 20:49:12.619 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44860 10 6452 1 2025-09-16 20:45:29.353 00:05:01.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 20:49:37.521 00:00:10.361 TCP 23.104.0.1:59268 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:50:12.843 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41740 10 6452 1 2025-09-16 20:50:37.924 00:00:10.350 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:51:13.078 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51950 10 6452 1 2025-09-16 20:51:38.314 00:00:10.368 TCP 23.104.0.1:45780 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:52:13.296 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37416 10 6452 1 2025-09-16 20:52:38.717 00:00:10.378 TCP 23.104.0.1:54248 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:53:13.507 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57540 10 6452 1 2025-09-16 20:53:39.130 00:00:10.679 TCP 23.104.0.1:40458 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:54:09.451 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-16 20:54:09.536 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-16 20:54:13.713 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 2025-09-16 20:50:29.351 00:05:01.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-16 20:54:39.847 00:00:10.388 TCP 23.104.0.1:38526 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:55:13.927 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:32870 10 6452 1 2025-09-16 20:51:29.355 00:05:01.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-16 20:55:40.277 00:00:10.371 TCP 23.104.0.1:53536 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:56:14.169 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42260 10 6452 1 2025-09-16 20:56:40.689 00:00:10.368 TCP 23.104.0.1:54310 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:57:14.398 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36150 10 6452 1 2025-09-16 20:57:41.109 00:00:10.365 TCP 23.104.0.1:48912 -> 1.101.0.1:3000 11 1507 1 2025-09-16 20:58:14.619 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48696 10 6452 1 2025-09-16 20:58:41.512 00:00:10.329 TCP 23.104.0.1:57380 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1065, avg pps: 0, avg bpp: 316 Time window: 2025-09-16 19:56:29 - 2025-09-16 20:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0025s User: 0.0025s Wall: 0.0023s flows/second: 70449.2 Runtime: 0.0024s