Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-19 00:59:02.667 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33090 10 6452 1 2025-09-19 00:59:38.271 00:00:10.363 TCP 23.104.0.1:48232 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:00:02.875 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49052 10 6452 1 2025-09-19 01:00:12.225 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 01:00:12.214 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 00:56:30.370 00:05:01.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 01:00:38.671 00:00:10.759 TCP 23.104.0.1:58398 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:01:03.100 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49122 10 6452 1 2025-09-19 00:57:30.371 00:05:01.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 01:01:39.469 00:00:10.316 TCP 23.104.0.1:57178 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:02:03.314 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36292 10 6452 1 2025-09-19 01:02:39.825 00:00:10.358 TCP 23.104.0.1:50614 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:03:03.525 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32898 10 6452 1 2025-09-19 01:03:40.228 00:00:10.363 TCP 23.104.0.1:37366 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:04:03.743 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:37870 10 6452 1 2025-09-19 01:04:40.630 00:00:10.379 TCP 23.104.0.1:49908 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:05:03.949 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54830 10 6452 1 2025-09-19 01:05:12.366 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 01:05:12.188 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 01:05:41.047 00:00:10.325 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:06:04.177 00:00:10.529 TCP 1.101.0.1:3000 -> 22.102.0.1:46758 10 6452 1 2025-09-19 01:02:30.369 00:05:01.241 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 01:06:41.410 00:00:10.366 TCP 23.104.0.1:39474 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:07:04.744 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43028 10 6452 1 2025-09-19 01:03:30.373 00:05:01.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 01:07:41.813 00:00:10.372 TCP 23.104.0.1:38200 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:08:04.961 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57280 12 6556 1 2025-09-19 01:08:42.220 00:00:10.364 TCP 23.104.0.1:53454 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:09:05.191 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33870 10 6452 1 2025-09-19 01:09:42.624 00:00:10.369 TCP 23.104.0.1:57364 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:10:12.376 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 01:10:05.408 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39508 10 6452 1 2025-09-19 01:10:12.403 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 01:10:43.028 00:00:10.441 TCP 23.104.0.1:49274 -> 1.101.0.1:3000 15 1926 1 2025-09-19 01:11:05.582 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:58048 12 10365 1 2025-09-19 01:11:43.503 00:00:10.371 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:12:05.785 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46910 10 6452 1 2025-09-19 01:08:30.387 00:05:01.225 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 01:12:43.913 00:00:10.364 TCP 23.104.0.1:57958 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:13:05.957 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:55570 10 6452 1 2025-09-19 01:09:30.389 00:05:01.219 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 01:13:44.311 00:00:10.365 TCP 23.104.0.1:47276 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:14:06.199 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45540 10 6452 1 2025-09-19 01:14:44.711 00:00:10.703 TCP 23.104.0.1:34706 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:15:12.405 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 01:15:06.375 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:51340 10 6452 1 2025-09-19 01:15:12.636 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 01:15:45.472 00:00:10.365 TCP 23.104.0.1:33030 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:16:06.569 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33192 10 6452 1 2025-09-19 01:16:45.872 00:00:10.369 TCP 23.104.0.1:39080 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:17:06.779 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:35074 10 6452 1 2025-09-19 01:17:46.276 00:00:10.368 TCP 23.104.0.1:45124 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:18:06.973 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:52090 10 6452 1 2025-09-19 01:14:30.389 00:05:01.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 01:18:46.681 00:00:10.373 TCP 23.104.0.1:51710 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:19:07.158 00:00:10.590 TCP 1.101.0.1:3000 -> 22.102.0.1:50918 10 6452 1 2025-09-19 01:15:30.390 00:05:01.223 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 01:19:47.102 00:00:10.321 TCP 23.104.0.1:55950 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:20:12.815 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 01:20:12.743 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 01:20:07.787 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59572 10 6452 1 2025-09-19 01:20:47.463 00:00:11.023 TCP 23.104.0.1:49112 -> 1.101.0.1:3000 15 1926 1 2025-09-19 01:21:08.016 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:58950 12 10367 1 2025-09-19 01:21:48.529 00:00:10.364 TCP 23.104.0.1:36700 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:22:08.261 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41830 10 6452 1 2025-09-19 01:22:48.928 00:00:10.385 TCP 23.104.0.1:42416 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:23:08.481 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:32794 10 6452 1 2025-09-19 01:23:49.348 00:00:10.363 TCP 23.104.0.1:56746 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:24:08.702 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41170 10 6452 1 2025-09-19 01:20:30.390 00:05:01.229 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 01:24:49.754 00:00:10.382 TCP 23.104.0.1:34838 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:25:12.939 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 01:25:12.886 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 01:25:08.919 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56928 10 6452 1 2025-09-19 01:21:30.392 00:05:01.226 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 01:25:50.168 00:00:10.368 TCP 23.104.0.1:59484 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:26:09.129 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60706 10 6452 1 2025-09-19 01:26:50.574 00:00:10.371 TCP 23.104.0.1:38456 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:27:09.334 00:00:10.738 TCP 1.101.0.1:3000 -> 22.102.0.1:39460 10 6452 1 2025-09-19 01:27:51.007 00:00:10.325 TCP 23.104.0.1:57040 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:28:10.108 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56242 10 6452 1 2025-09-19 01:28:51.374 00:00:10.364 TCP 23.104.0.1:54472 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:29:10.320 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50356 10 6452 1 2025-09-19 01:29:51.772 00:00:10.332 TCP 23.104.0.1:47490 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:30:12.758 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 01:30:12.645 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 01:30:10.529 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56320 10 6452 1 2025-09-19 01:26:30.390 00:05:01.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 01:30:52.144 00:00:10.321 TCP 23.104.0.1:58694 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:31:10.757 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45660 10 6452 1 2025-09-19 01:27:30.393 00:05:01.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 01:31:52.502 00:00:10.376 TCP 23.104.0.1:38834 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:32:10.972 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57812 10 6452 1 2025-09-19 01:32:52.916 00:00:10.337 TCP 23.104.0.1:35060 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:33:11.210 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57714 10 6452 1 2025-09-19 01:33:53.274 00:00:10.948 TCP 23.104.0.1:51046 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:34:11.432 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44526 10 6452 1 2025-09-19 01:34:54.266 00:00:10.372 TCP 23.104.0.1:36312 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:35:12.875 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 01:35:12.722 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 01:35:11.601 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37268 10 6452 1 2025-09-19 01:35:54.678 00:00:10.372 TCP 23.104.0.1:48086 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:36:11.812 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41968 10 6452 1 2025-09-19 01:32:30.394 00:05:01.231 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 01:36:55.105 00:00:10.387 TCP 23.104.0.1:53440 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:37:12.032 00:00:10.276 TCP 1.101.0.1:3000 -> 22.102.0.1:52300 10 6452 1 2025-09-19 01:33:30.396 00:05:01.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 01:37:55.528 00:00:10.951 TCP 23.104.0.1:37016 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:38:12.348 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39298 10 6452 1 2025-09-19 01:38:56.518 00:00:10.367 TCP 23.104.0.1:41830 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:39:12.570 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36758 10 6452 1 2025-09-19 01:39:56.923 00:00:10.821 TCP 23.104.0.1:42748 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:40:12.961 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 01:40:12.969 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 01:40:12.791 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35152 10 6452 1 2025-09-19 01:40:57.783 00:00:10.374 TCP 23.104.0.1:46210 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:41:13.027 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55570 10 6452 1 2025-09-19 01:41:58.192 00:00:10.339 TCP 23.104.0.1:43984 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:42:13.247 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52474 10 6452 1 2025-09-19 01:38:30.393 00:05:01.232 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 01:42:58.561 00:00:10.363 TCP 23.104.0.1:34056 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:43:13.463 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48616 10 6452 1 2025-09-19 01:39:30.396 00:05:01.226 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 01:43:58.954 00:00:10.360 TCP 23.104.0.1:47524 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:44:13.678 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57018 10 6452 1 2025-09-19 01:44:59.353 00:00:10.361 TCP 23.104.0.1:51452 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:45:13.147 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 01:45:13.080 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 01:45:13.893 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53950 10 6452 1 2025-09-19 01:45:59.758 00:00:10.371 TCP 23.104.0.1:41940 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:46:14.079 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36316 10 6452 1 2025-09-19 01:47:00.173 00:00:10.363 TCP 23.104.0.1:53536 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:47:14.296 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:57778 10 6452 1 2025-09-19 01:48:00.575 00:00:10.370 TCP 23.104.0.1:43092 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:48:14.475 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37130 10 6452 1 2025-09-19 01:44:30.394 00:05:01.232 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 01:49:00.990 00:00:10.371 TCP 23.104.0.1:52500 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:49:14.688 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:51982 10 6452 1 2025-09-19 01:45:30.396 00:05:01.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 01:50:01.402 00:00:10.365 TCP 23.104.0.1:57846 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:50:13.177 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 01:50:13.172 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 01:50:14.878 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:51126 10 6452 1 2025-09-19 01:51:01.808 00:00:10.373 TCP 23.104.0.1:42128 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:51:15.110 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36936 10 6452 1 2025-09-19 01:52:02.215 00:00:10.368 TCP 23.104.0.1:35866 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:52:15.325 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40824 10 6452 1 2025-09-19 01:53:02.625 00:00:10.365 TCP 23.104.0.1:42896 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:53:15.538 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59466 10 6452 1 2025-09-19 01:54:03.035 00:00:10.363 TCP 23.104.0.1:53460 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:54:15.706 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48162 10 6452 1 2025-09-19 01:50:30.399 00:05:01.229 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-19 01:55:13.225 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-19 01:55:03.435 00:00:10.366 TCP 23.104.0.1:49588 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:55:13.565 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-19 01:55:15.876 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56432 10 6452 1 2025-09-19 01:51:30.403 00:05:01.224 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-19 01:56:03.839 00:00:10.472 TCP 23.104.0.1:47662 -> 1.101.0.1:3000 15 1926 1 2025-09-19 01:56:16.096 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:35466 12 10367 1 2025-09-19 01:57:04.349 00:00:10.365 TCP 23.104.0.1:46960 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:57:16.356 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40032 10 6452 1 2025-09-19 01:58:04.749 00:00:10.380 TCP 23.104.0.1:39162 -> 1.101.0.1:3000 11 1507 1 2025-09-19 01:58:16.582 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40688 10 6452 1 Summary: total flows: 163, total bytes: 509945, total packets: 1581, avg bps: 1097, avg pps: 0, avg bpp: 322 Time window: 2025-09-19 00:56:30 - 2025-09-19 01:58:26 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0029s Wall: 0.0053s flows/second: 30818.2 Runtime: 0.0053s