Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-23 03:59:14.650 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49098 10 6452 1 2025-09-23 03:59:30.763 00:00:10.384 TCP 23.104.0.1:41272 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:00:14.864 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:40300 10 6452 1 2025-09-23 03:56:32.295 00:05:01.397 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 04:00:31.189 00:00:10.366 TCP 23.104.0.1:37240 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:01:15.096 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57554 10 6452 1 2025-09-23 03:57:32.298 00:05:01.392 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 04:01:31.589 00:00:10.329 TCP 23.104.0.1:49422 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:02:11.420 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 04:02:11.389 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 04:02:15.319 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57050 10 6452 1 2025-09-23 04:02:31.960 00:00:10.326 TCP 23.104.0.1:49136 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:03:15.553 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:54098 10 6452 1 2025-09-23 04:03:32.330 00:00:10.322 TCP 23.104.0.1:40402 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:04:15.732 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38778 10 6452 1 2025-09-23 04:04:32.690 00:00:10.376 TCP 23.104.0.1:53430 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:05:15.952 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42840 10 6452 1 2025-09-23 04:05:33.109 00:00:10.364 TCP 23.104.0.1:50322 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:06:16.176 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53256 12 10365 1 2025-09-23 04:02:32.296 00:05:01.397 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 04:06:33.511 00:00:10.438 TCP 23.104.0.1:46912 -> 1.101.0.1:3000 15 1926 1 2025-09-23 04:07:11.735 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 04:07:11.594 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 04:07:16.383 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36450 10 6452 1 2025-09-23 04:03:32.300 00:05:01.392 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 04:07:33.986 00:00:10.367 TCP 23.104.0.1:47234 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:08:16.605 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44418 10 6452 1 2025-09-23 04:08:34.390 00:00:10.323 TCP 23.104.0.1:47258 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:09:16.828 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58274 10 6452 1 2025-09-23 04:09:34.753 00:00:10.385 TCP 23.104.0.1:32914 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:10:17.038 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41764 10 6452 1 2025-09-23 04:10:35.177 00:00:10.366 TCP 23.104.0.1:55172 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:11:17.246 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56314 10 6452 1 2025-09-23 04:11:35.579 00:00:10.376 TCP 23.104.0.1:39068 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:12:11.700 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 04:12:11.606 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 04:12:17.460 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48674 10 6452 1 2025-09-23 04:08:32.298 00:05:01.400 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 04:12:35.993 00:00:10.368 TCP 23.104.0.1:45910 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:13:17.694 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60338 10 6452 1 2025-09-23 04:09:32.300 00:05:01.395 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 04:13:36.398 00:00:10.324 TCP 23.104.0.1:32818 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:14:17.906 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54964 10 6452 1 2025-09-23 04:14:36.763 00:00:10.379 TCP 23.104.0.1:38668 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:15:18.128 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36582 10 6452 1 2025-09-23 04:15:37.180 00:00:10.367 TCP 23.104.0.1:52358 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:16:18.344 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34364 10 6452 1 2025-09-23 04:16:37.581 00:00:10.362 TCP 23.104.0.1:47750 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:17:11.480 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 04:17:11.715 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 04:17:18.511 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45078 10 6452 1 2025-09-23 04:17:37.980 00:00:10.366 TCP 23.104.0.1:52874 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:18:18.722 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59222 10 6452 1 2025-09-23 04:14:32.299 00:05:01.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 04:18:38.383 00:00:10.374 TCP 23.104.0.1:38360 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:19:18.937 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:55968 10 6452 1 2025-09-23 04:15:32.302 00:05:01.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 04:19:38.804 00:00:10.373 TCP 23.104.0.1:46976 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:20:19.128 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39668 10 6452 1 2025-09-23 04:20:39.212 00:00:10.370 TCP 23.104.0.1:50240 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:21:19.303 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:32866 10 6452 1 2025-09-23 04:21:39.615 00:00:10.363 TCP 23.104.0.1:43004 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:22:11.862 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 04:22:11.857 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 04:22:19.526 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45696 10 6452 1 2025-09-23 04:22:40.017 00:00:10.366 TCP 23.104.0.1:52660 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:23:19.742 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39694 10 6452 1 2025-09-23 04:23:40.425 00:00:10.366 TCP 23.104.0.1:43960 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:24:19.952 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:40600 12 6556 1 2025-09-23 04:20:32.300 00:05:01.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 04:24:40.826 00:00:10.805 TCP 23.104.0.1:46978 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:25:20.188 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53776 10 6452 1 2025-09-23 04:21:32.304 00:05:01.393 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 04:25:41.672 00:00:10.364 TCP 23.104.0.1:39514 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:26:20.355 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-09-23 04:26:42.098 00:00:10.322 TCP 23.104.0.1:56812 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:27:11.819 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 04:27:11.729 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 04:27:20.571 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33086 10 6452 1 2025-09-23 04:27:42.461 00:00:10.363 TCP 23.104.0.1:55958 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:28:20.787 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34700 10 6452 1 2025-09-23 04:28:42.865 00:00:10.370 TCP 23.104.0.1:52428 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:29:21.002 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34308 10 6452 1 2025-09-23 04:29:43.275 00:00:10.363 TCP 23.104.0.1:47390 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:30:21.226 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41026 11 6492 1 2025-09-23 04:26:32.303 00:05:01.400 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 04:30:43.674 00:00:10.323 TCP 23.104.0.1:47116 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:31:21.407 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50174 10 6452 1 2025-09-23 04:27:32.306 00:05:01.395 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 04:31:44.037 00:00:10.364 TCP 23.104.0.1:52350 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:32:11.825 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 04:32:12.065 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 04:32:21.621 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34044 10 6452 1 2025-09-23 04:32:44.439 00:00:10.377 TCP 23.104.0.1:55224 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:33:21.842 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32966 10 6452 1 2025-09-23 04:33:44.855 00:00:10.380 TCP 23.104.0.1:46214 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:34:22.078 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48518 10 6452 1 2025-09-23 04:34:45.272 00:00:10.365 TCP 23.104.0.1:37486 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:35:22.292 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33858 10 6452 1 2025-09-23 04:35:45.675 00:00:10.373 TCP 23.104.0.1:46930 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:36:22.513 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54992 10 6452 1 2025-09-23 04:32:32.304 00:05:01.409 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 04:36:46.109 00:00:10.375 TCP 23.104.0.1:38648 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:37:12.160 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 04:37:12.109 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 04:33:32.308 00:05:01.397 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 04:37:22.722 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55990 10 6452 1 2025-09-23 04:37:46.521 00:00:10.362 TCP 23.104.0.1:49470 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:38:22.935 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:50790 10 6452 1 2025-09-23 04:38:46.919 00:00:10.366 TCP 23.104.0.1:33658 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:39:23.167 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42188 10 6452 1 2025-09-23 04:39:47.323 00:00:10.363 TCP 23.104.0.1:39212 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:40:23.396 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51740 10 6452 1 2025-09-23 04:40:47.736 00:00:10.373 TCP 23.104.0.1:35254 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:41:23.621 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45118 10 6452 1 2025-09-23 04:41:48.148 00:00:10.383 TCP 23.104.0.1:41744 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:42:12.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 04:42:12.195 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 04:42:23.830 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40758 10 6452 1 2025-09-23 04:38:32.307 00:05:01.401 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 04:42:48.569 00:00:10.367 TCP 23.104.0.1:59740 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:43:23.996 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41052 10 6452 1 2025-09-23 04:39:32.309 00:05:01.396 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 04:43:48.975 00:00:10.323 TCP 23.104.0.1:49684 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:44:24.213 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52736 10 6452 1 2025-09-23 04:44:49.339 00:00:10.318 TCP 23.104.0.1:42832 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:45:24.425 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34600 10 6452 1 2025-09-23 04:45:49.696 00:00:10.362 TCP 23.104.0.1:49668 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:46:24.656 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46444 10 6452 1 2025-09-23 04:46:50.103 00:00:10.363 TCP 23.104.0.1:60182 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:47:12.177 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 04:47:12.239 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 04:47:24.865 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43892 10 6452 1 2025-09-23 04:47:50.504 00:00:10.369 TCP 23.104.0.1:54528 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:48:25.089 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55394 10 6452 1 2025-09-23 04:44:32.312 00:05:01.396 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 04:48:50.922 00:00:10.391 TCP 23.104.0.1:42176 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:49:25.296 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47630 10 6452 1 2025-09-23 04:45:32.314 00:05:01.391 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 04:49:51.351 00:00:10.364 TCP 23.104.0.1:45348 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:50:25.506 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33736 10 6452 1 2025-09-23 04:50:51.756 00:00:10.522 TCP 23.104.0.1:38170 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:51:25.723 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59934 10 6452 1 2025-09-23 04:51:52.319 00:00:10.365 TCP 23.104.0.1:33384 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:52:12.391 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 04:52:12.135 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 04:52:25.905 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47004 10 6452 1 2025-09-23 04:52:52.724 00:00:10.374 TCP 23.104.0.1:48964 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:53:26.114 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36278 10 6452 1 2025-09-23 04:53:53.133 00:00:10.364 TCP 23.104.0.1:39246 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:54:26.327 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48528 10 6452 1 2025-09-23 04:50:32.317 00:05:01.393 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-23 04:54:53.536 00:00:10.326 TCP 23.104.0.1:42230 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:55:26.538 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49456 10 6452 1 2025-09-23 04:51:32.318 00:05:01.388 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-23 04:55:53.896 00:00:10.384 TCP 23.104.0.1:46672 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:56:26.751 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48720 10 6452 1 2025-09-23 04:56:54.309 00:00:10.365 TCP 23.104.0.1:49312 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:57:12.378 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-23 04:57:12.545 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-23 04:57:26.966 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44706 10 6452 1 2025-09-23 04:57:54.710 00:00:10.653 TCP 23.104.0.1:48984 -> 1.101.0.1:3000 11 1507 1 2025-09-23 04:58:27.189 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58542 10 6452 1 Summary: total flows: 163, total bytes: 501317, total packets: 1570, avg bps: 1076, avg pps: 0, avg bpp: 319 Time window: 2025-09-23 03:56:32 - 2025-09-23 04:58:37 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0010s User: 0.0039s Wall: 0.0039s flows/second: 42139.5 Runtime: 0.0039s