Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-24 08:58:50.893 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57754 10 6452 1 2025-09-24 08:59:39.981 00:00:10.368 TCP 23.104.0.1:58632 -> 1.101.0.1:3000 11 1507 1 2025-09-24 08:59:51.107 00:00:12.860 TCP 1.101.0.1:3000 -> 22.102.0.1:43298 10 6452 1 2025-09-24 08:56:32.808 00:05:01.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 09:00:40.389 00:00:10.370 TCP 23.104.0.1:52946 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:00:54.006 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41328 10 6452 1 2025-09-24 08:57:32.810 00:05:01.486 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 09:01:40.817 00:00:10.441 TCP 23.104.0.1:41810 -> 1.101.0.1:3000 15 1926 1 2025-09-24 09:01:54.224 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60998 12 10365 1 2025-09-24 09:02:46.369 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 09:02:46.340 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 09:02:41.295 00:00:10.366 TCP 23.104.0.1:51946 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:02:54.464 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:33560 10 6452 1 2025-09-24 09:03:41.701 00:00:10.320 TCP 23.104.0.1:46416 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:03:54.638 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41658 10 6452 1 2025-09-24 09:04:42.090 00:00:10.365 TCP 23.104.0.1:55950 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:04:54.854 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39334 10 6452 1 2025-09-24 09:05:42.490 00:00:10.365 TCP 23.104.0.1:53042 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:05:55.081 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38316 10 6452 1 2025-09-24 09:02:32.813 00:05:01.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 09:06:42.894 00:00:10.446 TCP 23.104.0.1:47756 -> 1.101.0.1:3000 15 1926 1 2025-09-24 09:06:55.293 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:59386 12 10365 1 2025-09-24 09:03:32.814 00:05:01.486 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 09:07:46.634 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 09:07:46.431 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 09:07:43.382 00:00:10.361 TCP 23.104.0.1:43336 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:07:55.492 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47524 10 6452 1 2025-09-24 09:08:43.785 00:00:10.369 TCP 23.104.0.1:58674 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:08:55.705 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34878 10 6452 1 2025-09-24 09:09:44.194 00:00:10.325 TCP 23.104.0.1:34028 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:09:55.925 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33406 10 6452 1 2025-09-24 09:10:44.555 00:00:10.364 TCP 23.104.0.1:60216 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:10:56.101 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45506 10 6452 1 2025-09-24 09:11:44.966 00:00:10.427 TCP 23.104.0.1:39202 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:11:56.325 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34954 10 6452 1 2025-09-24 09:08:32.813 00:05:01.490 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 09:12:46.744 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 09:12:46.952 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 09:12:45.432 00:00:10.734 TCP 23.104.0.1:42220 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:12:56.496 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47740 10 6452 1 2025-09-24 09:09:32.817 00:05:01.484 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 09:13:46.210 00:00:10.369 TCP 23.104.0.1:48556 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:13:56.710 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59580 10 6452 1 2025-09-24 09:14:46.613 00:00:10.367 TCP 23.104.0.1:37298 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:14:56.925 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57122 10 6452 1 2025-09-24 09:15:47.021 00:00:10.370 TCP 23.104.0.1:37004 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:15:57.134 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38012 10 6452 1 2025-09-24 09:16:47.432 00:00:10.326 TCP 23.104.0.1:32834 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:16:57.351 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42344 10 6452 1 2025-09-24 09:17:46.759 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 09:17:46.817 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 09:17:47.794 00:00:10.342 TCP 23.104.0.1:37822 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:17:57.558 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42520 10 6452 1 2025-09-24 09:14:32.819 00:05:01.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 09:18:48.173 00:00:10.366 TCP 23.104.0.1:54256 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:18:57.770 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57084 10 6452 1 2025-09-24 09:15:32.821 00:05:01.487 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 09:19:48.576 00:00:10.369 TCP 23.104.0.1:48226 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:19:57.982 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60458 10 6452 1 2025-09-24 09:20:48.980 00:00:10.363 TCP 23.104.0.1:59250 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:20:58.205 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59806 10 6452 1 2025-09-24 09:21:49.383 00:00:10.358 TCP 23.104.0.1:35456 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:21:58.431 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55220 10 6452 1 2025-09-24 09:22:46.870 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 09:22:46.834 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 09:22:49.782 00:00:10.373 TCP 23.104.0.1:55872 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:22:58.648 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56764 10 6452 1 2025-09-24 09:23:50.192 00:00:10.326 TCP 23.104.0.1:52574 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:23:58.864 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45496 10 6452 1 2025-09-24 09:20:32.820 00:05:01.490 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 09:24:50.554 00:00:10.364 TCP 23.104.0.1:47640 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:24:59.095 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59026 10 6452 1 2025-09-24 09:21:32.823 00:05:01.485 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 09:25:50.956 00:00:10.321 TCP 23.104.0.1:44746 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:25:59.309 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58188 10 6452 1 2025-09-24 09:26:51.322 00:00:10.372 TCP 23.104.0.1:34840 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:26:59.485 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57666 10 6452 1 2025-09-24 09:27:47.403 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 09:27:47.342 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 09:27:51.729 00:00:10.320 TCP 23.104.0.1:60720 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:27:59.697 00:00:11.210 TCP 1.101.0.1:3000 -> 22.102.0.1:52082 10 6452 1 2025-09-24 09:28:52.113 00:00:10.366 TCP 23.104.0.1:38378 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:29:00.950 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48926 10 6452 1 2025-09-24 09:29:52.519 00:00:10.363 TCP 23.104.0.1:49814 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:30:01.177 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39706 10 6452 1 2025-09-24 09:26:32.820 00:05:01.490 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 09:30:52.931 00:00:10.383 TCP 23.104.0.1:33118 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:31:01.395 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40412 10 6452 1 2025-09-24 09:27:32.823 00:05:01.485 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 09:31:53.354 00:00:10.365 TCP 23.104.0.1:48704 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:32:01.601 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45230 10 6452 1 2025-09-24 09:32:46.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 09:32:47.076 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 09:32:53.755 00:00:10.374 TCP 23.104.0.1:49380 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:33:01.810 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55076 10 6452 1 2025-09-24 09:33:54.163 00:00:10.368 TCP 23.104.0.1:36810 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:34:02.032 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52812 10 6452 1 2025-09-24 09:34:54.571 00:00:10.364 TCP 23.104.0.1:41866 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:35:02.205 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55912 10 6452 1 2025-09-24 09:35:54.974 00:00:10.369 TCP 23.104.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:36:02.413 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47826 10 6452 1 2025-09-24 09:32:32.825 00:05:01.498 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 09:36:55.382 00:00:10.369 TCP 23.104.0.1:56000 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:37:02.630 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41660 10 6452 1 2025-09-24 09:33:32.828 00:05:01.495 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 09:37:47.805 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 09:37:47.173 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 09:37:55.788 00:00:11.018 TCP 23.104.0.1:53236 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:38:02.796 00:00:10.299 TCP 1.101.0.1:3000 -> 22.102.0.1:38316 10 6452 1 2025-09-24 09:38:56.844 00:00:10.348 TCP 23.104.0.1:37472 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:39:03.132 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57580 10 6452 1 2025-09-24 09:39:57.229 00:00:10.370 TCP 23.104.0.1:55968 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:40:03.343 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54008 10 6452 1 2025-09-24 09:40:57.632 00:00:11.166 TCP 23.104.0.1:40044 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:41:03.515 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36282 10 6452 1 2025-09-24 09:41:58.834 00:00:10.338 TCP 23.104.0.1:52782 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:42:03.692 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41054 10 6452 1 2025-09-24 09:38:32.825 00:05:01.528 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 09:42:47.251 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 09:42:47.164 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 09:42:59.215 00:00:10.365 TCP 23.104.0.1:44194 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:43:03.867 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 10 6452 1 2025-09-24 09:39:32.828 00:05:01.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 09:43:59.622 00:00:10.372 TCP 23.104.0.1:48806 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:44:04.091 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36660 10 6452 1 2025-09-24 09:45:00.029 00:00:10.364 TCP 23.104.0.1:52074 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:45:04.309 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54700 10 6452 1 2025-09-24 09:46:00.434 00:00:10.371 TCP 23.104.0.1:36738 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:46:04.524 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47680 10 6452 1 2025-09-24 09:47:00.852 00:00:10.341 TCP 23.104.0.1:48406 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:47:04.699 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45392 10 6452 1 2025-09-24 09:47:47.483 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 09:47:47.053 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 09:48:01.230 00:00:10.376 TCP 23.104.0.1:38178 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:48:04.912 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37714 10 6452 1 2025-09-24 09:44:32.826 00:05:01.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 09:49:05.118 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42544 10 6452 1 2025-09-24 09:49:01.637 00:00:10.364 TCP 23.104.0.1:47320 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:45:32.829 00:05:01.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 09:50:05.333 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35006 10 6452 1 2025-09-24 09:50:02.052 00:00:10.361 TCP 23.104.0.1:38452 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:51:05.548 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33286 10 6452 1 2025-09-24 09:51:02.455 00:00:10.374 TCP 23.104.0.1:39906 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:52:05.764 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44482 10 6452 1 2025-09-24 09:52:02.864 00:00:10.371 TCP 23.104.0.1:35994 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:52:47.363 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 09:52:47.451 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 09:53:03.271 00:00:10.755 TCP 23.104.0.1:54778 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:53:05.943 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55224 10 6452 1 2025-09-24 09:54:06.180 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52586 10 6452 1 2025-09-24 09:54:04.098 00:00:10.358 TCP 23.104.0.1:54256 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:50:32.827 00:05:01.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-24 09:55:04.492 00:00:10.369 TCP 23.104.0.1:39100 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:55:06.354 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58454 10 6452 1 2025-09-24 09:51:32.830 00:05:01.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-24 09:56:06.527 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36662 10 6452 1 2025-09-24 09:56:04.898 00:00:10.432 TCP 23.104.0.1:49378 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:57:06.704 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43862 10 6452 1 2025-09-24 09:57:05.372 00:00:10.365 TCP 23.104.0.1:52866 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:57:47.692 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-24 09:57:47.643 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-24 09:58:05.771 00:00:10.369 TCP 23.104.0.1:46852 -> 1.101.0.1:3000 11 1507 1 2025-09-24 09:58:06.914 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41804 10 6452 1 Summary: total flows: 163, total bytes: 505505, total packets: 1573, avg bps: 1091, avg pps: 0, avg bpp: 321 Time window: 2025-09-24 08:56:32 - 2025-09-24 09:58:17 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0000s Wall: 0.0016s flows/second: 100569.5 Runtime: 0.0016s