Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 00:59:01.905 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46434 10 6452 1 2025-09-24 00:59:18.930 00:00:10.382 TCP 23.104.0.1:41066 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:00:02.114 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37708 10 6452 1 2025-09-24 01:00:19.350 00:00:10.366 TCP 23.104.0.1:47808 -> 1.101.0.1:3000 11 1507 1 2025-09-24 00:56:32.663 00:05:01.480 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 01:01:02.285 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53270 10 6452 1 2025-09-24 01:01:19.755 00:00:10.692 TCP 23.104.0.1:47710 -> 1.101.0.1:3000 15 1926 1 2025-09-24 00:57:32.666 00:05:01.475 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 01:02:02.499 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48922 12 10367 1 2025-09-24 01:02:20.506 00:00:10.372 TCP 23.104.0.1:42554 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:02:36.804 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 01:02:36.637 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 01:03:02.740 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50168 10 6452 1 2025-09-24 01:03:20.913 00:00:10.365 TCP 23.104.0.1:42668 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:04:02.950 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48212 12 6556 1 2025-09-24 01:04:21.317 00:00:10.336 TCP 23.104.0.1:54886 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:05:03.176 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40220 10 6452 1 2025-09-24 01:05:21.693 00:00:10.369 TCP 23.104.0.1:37874 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:06:03.387 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52312 10 6452 1 2025-09-24 01:02:32.665 00:05:01.480 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 01:06:22.113 00:00:10.368 TCP 23.104.0.1:50892 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:07:03.602 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60610 10 6452 1 2025-09-24 01:07:36.725 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 01:03:32.667 00:05:01.475 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 01:07:22.517 00:00:10.369 TCP 23.104.0.1:54712 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:07:36.841 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 01:08:03.819 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53474 10 6452 1 2025-09-24 01:08:22.924 00:00:10.386 TCP 23.104.0.1:40166 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:09:04.050 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46616 10 6452 1 2025-09-24 01:09:23.343 00:00:10.323 TCP 23.104.0.1:51940 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:10:04.265 00:00:10.442 TCP 1.101.0.1:3000 -> 22.102.0.1:52994 10 6452 1 2025-09-24 01:10:23.709 00:00:10.365 TCP 23.104.0.1:33958 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:11:04.741 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60536 10 6452 1 2025-09-24 01:11:24.110 00:00:10.366 TCP 23.104.0.1:52204 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:12:04.953 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:32908 10 6452 1 2025-09-24 01:12:36.913 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 01:12:24.515 00:00:10.321 TCP 23.104.0.1:47972 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:12:36.797 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 01:08:32.666 00:05:01.479 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 01:13:05.149 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38582 10 6452 1 2025-09-24 01:13:24.876 00:00:10.324 TCP 23.104.0.1:42534 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:09:32.670 00:05:01.475 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 01:14:05.377 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45256 10 6452 1 2025-09-24 01:14:25.240 00:00:10.370 TCP 23.104.0.1:40676 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:15:05.590 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42502 10 6452 1 2025-09-24 01:15:25.650 00:00:10.325 TCP 23.104.0.1:40962 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:16:05.811 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52332 10 6452 1 2025-09-24 01:16:26.016 00:00:10.365 TCP 23.104.0.1:42900 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:17:06.036 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54980 10 6452 1 2025-09-24 01:17:36.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 01:17:26.420 00:00:10.373 TCP 23.104.0.1:49776 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:17:36.979 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 01:18:06.246 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34942 10 6452 1 2025-09-24 01:14:32.667 00:05:01.481 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 01:18:26.832 00:00:10.375 TCP 23.104.0.1:57328 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:19:06.458 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55070 10 6452 1 2025-09-24 01:15:32.671 00:05:01.475 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 01:19:27.244 00:00:10.365 TCP 23.104.0.1:51880 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:20:06.674 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37178 10 6452 1 2025-09-24 01:20:27.654 00:00:10.363 TCP 23.104.0.1:53896 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:21:06.884 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55562 12 6556 1 2025-09-24 01:21:28.085 00:00:10.364 TCP 23.104.0.1:33768 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:22:07.105 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55252 10 6452 1 2025-09-24 01:22:36.703 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 01:22:37.052 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 01:22:28.484 00:00:10.367 TCP 23.104.0.1:35170 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:23:07.321 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32942 10 6452 1 2025-09-24 01:23:28.890 00:00:10.383 TCP 23.104.0.1:59050 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:24:07.530 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56416 10 6452 1 2025-09-24 01:20:32.669 00:05:01.480 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 01:24:29.307 00:00:10.369 TCP 23.104.0.1:45742 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:25:07.744 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37352 10 6452 1 2025-09-24 01:21:32.675 00:05:01.472 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 01:25:29.711 00:00:10.376 TCP 23.104.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:26:07.956 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46416 10 6452 1 2025-09-24 01:26:30.125 00:00:10.368 TCP 23.104.0.1:41346 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:27:08.181 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60068 10 6452 1 2025-09-24 01:27:37.046 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 01:27:30.529 00:00:10.369 TCP 23.104.0.1:59614 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:27:36.993 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 01:28:08.350 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58182 10 6452 1 2025-09-24 01:28:30.937 00:00:10.387 TCP 23.104.0.1:38664 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:29:08.563 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34246 10 6452 1 2025-09-24 01:29:31.362 00:00:10.323 TCP 23.104.0.1:58548 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:30:08.779 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50488 10 6452 1 2025-09-24 01:26:32.669 00:05:01.483 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 01:30:31.723 00:00:10.376 TCP 23.104.0.1:33878 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:31:08.951 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55162 10 6452 1 2025-09-24 01:27:32.671 00:05:01.479 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 01:31:32.134 00:00:10.366 TCP 23.104.0.1:34590 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:32:09.177 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38018 10 6452 1 2025-09-24 01:32:37.438 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 01:32:37.434 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 01:32:32.542 00:00:10.366 TCP 23.104.0.1:40952 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:33:09.399 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:40058 10 6452 1 2025-09-24 01:33:32.940 00:00:10.373 TCP 23.104.0.1:47016 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:34:09.641 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33176 10 6452 1 2025-09-24 01:34:33.353 00:00:10.368 TCP 23.104.0.1:44636 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:35:09.855 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:55850 10 6452 1 2025-09-24 01:35:33.763 00:00:10.377 TCP 23.104.0.1:47432 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:36:10.085 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54652 10 6452 1 2025-09-24 01:32:32.669 00:05:01.484 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 01:36:34.176 00:00:10.327 TCP 23.104.0.1:48966 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:37:10.300 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40084 10 6452 1 2025-09-24 01:33:32.674 00:05:01.479 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 01:37:37.294 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 01:37:37.605 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 01:37:34.539 00:00:10.372 TCP 23.104.0.1:55362 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:38:10.511 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33806 10 6452 1 2025-09-24 01:38:34.949 00:00:10.368 TCP 23.104.0.1:57996 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:39:10.725 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39350 10 6452 1 2025-09-24 01:39:35.348 00:00:10.370 TCP 23.104.0.1:36076 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:40:10.950 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46306 10 6452 1 2025-09-24 01:40:35.757 00:00:11.009 TCP 23.104.0.1:43942 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:41:11.180 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54028 10 6452 1 2025-09-24 01:41:36.805 00:00:10.367 TCP 23.104.0.1:49176 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:42:11.396 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38862 10 6452 1 2025-09-24 01:38:32.671 00:05:01.484 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 01:42:37.310 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 01:42:37.497 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 01:42:37.209 00:00:10.361 TCP 23.104.0.1:42462 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:43:11.610 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39662 10 6452 1 2025-09-24 01:39:32.672 00:05:01.481 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 01:43:37.608 00:00:10.325 TCP 23.104.0.1:49596 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:44:11.825 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33786 10 6452 1 2025-09-24 01:44:37.970 00:00:10.379 TCP 23.104.0.1:45426 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:45:12.038 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59380 10 6452 1 2025-09-24 01:45:38.389 00:00:10.364 TCP 23.104.0.1:60880 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:46:12.251 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52348 10 6452 1 2025-09-24 01:46:38.793 00:00:10.577 TCP 23.104.0.1:34328 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:47:12.463 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34750 10 6452 1 2025-09-24 01:47:37.589 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 01:47:37.646 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 01:47:39.405 00:00:10.368 TCP 23.104.0.1:57648 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:48:12.681 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51496 10 6452 1 2025-09-24 01:44:32.669 00:05:01.486 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 01:48:39.812 00:00:10.365 TCP 23.104.0.1:60196 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:49:12.900 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37014 10 6452 1 2025-09-24 01:45:32.672 00:05:01.481 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 01:49:40.216 00:00:10.337 TCP 23.104.0.1:59950 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:50:13.116 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54350 10 6452 1 2025-09-24 01:50:40.584 00:00:10.368 TCP 23.104.0.1:47274 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:51:13.336 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60786 10 6452 1 2025-09-24 01:51:40.991 00:00:10.365 TCP 23.104.0.1:48190 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:52:13.546 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45262 10 6452 1 2025-09-24 01:52:37.696 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 01:52:37.722 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 01:52:41.391 00:00:10.324 TCP 23.104.0.1:46270 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:53:13.763 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:40940 10 6452 1 2025-09-24 01:53:41.752 00:00:10.381 TCP 23.104.0.1:33244 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:54:13.970 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34602 10 6452 1 2025-09-24 01:50:32.673 00:05:01.485 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 01:54:42.168 00:00:10.329 TCP 23.104.0.1:40048 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:55:14.194 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43882 10 6452 1 2025-09-24 01:51:32.674 00:05:01.480 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 01:55:42.536 00:00:10.363 TCP 23.104.0.1:36468 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:56:14.408 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36686 10 6452 1 2025-09-24 01:56:42.937 00:00:10.380 TCP 23.104.0.1:54342 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:57:14.622 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40744 10 6452 1 2025-09-24 01:57:37.747 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 01:57:37.561 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 01:57:43.358 00:00:10.325 TCP 23.104.0.1:60148 -> 1.101.0.1:3000 11 1507 1 2025-09-24 01:58:14.841 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58868 10 6452 1 Summary: total flows: 163, total bytes: 501383, total packets: 1571, avg bps: 1080, avg pps: 0, avg bpp: 319 Time window: 2025-09-24 00:56:32 - 2025-09-24 01:58:25 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0043s User: 0.0007s Wall: 0.0025s flows/second: 66260.1 Runtime: 0.0025s