Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-25 02:59:05.557 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35168 10 6452 1 2025-09-25 02:59:29.746 00:00:10.368 TCP 23.104.0.1:60772 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:00:05.772 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40428 10 6452 1 2025-09-25 02:56:33.177 00:05:01.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 03:00:30.150 00:00:10.368 TCP 23.104.0.1:58048 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:01:05.985 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:59814 10 6452 1 2025-09-25 02:57:33.180 00:05:01.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 03:01:30.553 00:00:10.379 TCP 23.104.0.1:57956 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:02:06.217 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33766 10 6452 1 2025-09-25 03:02:30.967 00:00:10.374 TCP 23.104.0.1:42284 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:03:08.012 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 03:03:07.872 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 03:03:06.429 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41358 10 6452 1 2025-09-25 03:03:31.373 00:00:10.324 TCP 23.104.0.1:34654 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:04:06.641 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49808 10 6452 1 2025-09-25 03:04:31.739 00:00:10.364 TCP 23.104.0.1:58994 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:05:06.809 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49266 10 6452 1 2025-09-25 03:05:32.145 00:00:10.324 TCP 23.104.0.1:50418 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:06:07.032 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42958 10 6452 1 2025-09-25 03:02:33.179 00:05:01.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 03:06:32.507 00:00:10.439 TCP 23.104.0.1:50604 -> 1.101.0.1:3000 15 1926 1 2025-09-25 03:07:07.240 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:58236 12 10365 1 2025-09-25 03:03:33.182 00:05:01.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 03:07:32.989 00:00:10.367 TCP 23.104.0.1:34396 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:08:08.039 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 03:08:08.037 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 03:08:07.478 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54008 10 6452 1 2025-09-25 03:08:33.398 00:00:10.323 TCP 23.104.0.1:37950 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:09:07.696 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36892 10 6452 1 2025-09-25 03:09:33.757 00:00:10.379 TCP 23.104.0.1:36178 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:10:07.908 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6452 1 2025-09-25 03:10:34.173 00:00:10.368 TCP 23.104.0.1:42216 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:11:08.121 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55862 10 6452 1 2025-09-25 03:11:34.574 00:00:10.359 TCP 23.104.0.1:38720 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:12:08.326 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34998 10 6452 1 2025-09-25 03:08:33.182 00:05:01.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 03:12:34.972 00:00:10.364 TCP 23.104.0.1:39678 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:13:08.160 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 03:13:08.236 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 03:13:08.539 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41840 10 6452 1 2025-09-25 03:09:33.183 00:05:01.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 03:13:35.381 00:00:10.364 TCP 23.104.0.1:54290 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:14:08.705 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55118 10 6452 1 2025-09-25 03:14:35.791 00:00:10.368 TCP 23.104.0.1:49932 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:15:08.921 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56322 10 6452 1 2025-09-25 03:15:36.199 00:00:10.329 TCP 23.104.0.1:54746 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:16:09.134 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39274 10 6452 1 2025-09-25 03:16:36.565 00:00:10.367 TCP 23.104.0.1:37514 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:17:09.359 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39196 10 6452 1 2025-09-25 03:17:36.970 00:00:10.327 TCP 23.104.0.1:60514 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:18:08.345 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 03:18:08.238 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 03:18:09.529 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39348 10 6452 1 2025-09-25 03:14:33.180 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 03:18:37.335 00:00:10.321 TCP 23.104.0.1:60986 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:19:09.755 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44706 10 6452 1 2025-09-25 03:15:33.183 00:05:01.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 03:19:37.695 00:00:10.361 TCP 23.104.0.1:56798 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:20:09.970 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:38760 10 6452 1 2025-09-25 03:20:38.113 00:00:10.361 TCP 23.104.0.1:50308 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:21:10.169 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46704 10 6452 1 2025-09-25 03:21:38.517 00:00:10.328 TCP 23.104.0.1:58962 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:22:10.384 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:36800 10 6452 1 2025-09-25 03:22:38.879 00:00:10.384 TCP 23.104.0.1:41684 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:23:08.469 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 03:23:08.564 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 03:23:10.646 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55630 10 6452 1 2025-09-25 03:23:39.297 00:00:10.370 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:24:10.822 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40900 10 6452 1 2025-09-25 03:20:33.181 00:05:01.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 03:24:39.705 00:00:10.368 TCP 23.104.0.1:57360 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:25:11.069 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48858 10 6452 1 2025-09-25 03:21:33.186 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 03:25:40.112 00:00:10.368 TCP 23.104.0.1:47690 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:26:11.281 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:59038 10 6452 1 2025-09-25 03:26:40.520 00:00:10.323 TCP 23.104.0.1:57658 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:27:11.473 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37818 10 6452 1 2025-09-25 03:27:40.883 00:00:10.386 TCP 23.104.0.1:54100 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:28:08.375 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 03:28:08.226 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 03:28:11.684 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57152 10 6452 1 2025-09-25 03:28:41.306 00:00:10.369 TCP 23.104.0.1:54136 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:29:11.890 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57184 10 6452 1 2025-09-25 03:29:41.712 00:00:10.373 TCP 23.104.0.1:43456 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:30:12.082 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39958 10 6452 1 2025-09-25 03:26:33.181 00:05:01.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 03:30:42.121 00:00:10.320 TCP 23.104.0.1:57022 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:31:12.259 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60846 10 6452 1 2025-09-25 03:27:33.183 00:05:01.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 03:31:42.479 00:00:10.364 TCP 23.104.0.1:55112 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:32:12.467 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58552 10 6452 1 2025-09-25 03:32:42.885 00:00:10.411 TCP 23.104.0.1:33072 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:33:08.680 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 03:33:08.648 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 03:33:12.678 00:00:10.665 TCP 1.101.0.1:3000 -> 22.102.0.1:33218 10 6452 1 2025-09-25 03:33:43.316 00:00:10.368 TCP 23.104.0.1:33342 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:34:13.383 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38242 10 6452 1 2025-09-25 03:34:43.722 00:00:10.373 TCP 23.104.0.1:38520 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:35:13.591 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41288 10 6452 1 2025-09-25 03:35:44.134 00:00:10.366 TCP 23.104.0.1:41248 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:36:13.806 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40530 10 6452 1 2025-09-25 03:32:33.183 00:05:01.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 03:36:44.538 00:00:10.368 TCP 23.104.0.1:33808 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:37:14.026 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37760 10 6452 1 2025-09-25 03:33:33.187 00:05:01.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 03:37:44.949 00:00:10.338 TCP 23.104.0.1:46070 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:38:08.792 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 03:38:08.557 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 03:38:14.242 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60074 10 6452 1 2025-09-25 03:38:45.319 00:00:10.369 TCP 23.104.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:39:14.463 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56852 10 6452 1 2025-09-25 03:39:45.727 00:00:10.370 TCP 23.104.0.1:49278 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:40:14.671 00:00:10.637 TCP 1.101.0.1:3000 -> 22.102.0.1:32912 10 6452 1 2025-09-25 03:40:46.135 00:00:10.363 TCP 23.104.0.1:51282 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:41:15.349 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51890 10 6452 1 2025-09-25 03:41:46.540 00:00:10.366 TCP 23.104.0.1:42634 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:42:15.565 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:48764 10 6452 1 2025-09-25 03:38:33.184 00:05:01.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 03:42:46.946 00:00:10.367 TCP 23.104.0.1:51932 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:43:08.960 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 03:43:09.026 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 03:43:15.761 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60050 10 6452 1 2025-09-25 03:39:33.187 00:05:01.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 03:43:47.354 00:00:10.365 TCP 23.104.0.1:59268 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:44:15.982 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:43334 10 6452 1 2025-09-25 03:44:47.762 00:00:10.379 TCP 23.104.0.1:42390 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:45:16.216 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49650 10 6452 1 2025-09-25 03:45:48.184 00:00:10.365 TCP 23.104.0.1:55518 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:46:16.391 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38468 10 6452 1 2025-09-25 03:46:48.587 00:00:10.369 TCP 23.104.0.1:48676 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:47:16.563 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49790 10 6452 1 2025-09-25 03:47:48.993 00:00:10.368 TCP 23.104.0.1:59738 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:48:08.663 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 03:48:08.779 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 03:48:16.779 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37778 10 6452 1 2025-09-25 03:44:33.185 00:05:01.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 03:48:49.402 00:00:10.365 TCP 23.104.0.1:46926 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:49:16.956 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39494 10 6452 1 2025-09-25 03:45:33.188 00:05:01.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 03:49:49.808 00:00:10.363 TCP 23.104.0.1:43502 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:50:17.184 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54010 10 6452 1 2025-09-25 03:50:50.208 00:00:10.366 TCP 23.104.0.1:43926 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:51:17.403 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54954 10 6452 1 2025-09-25 03:51:50.613 00:00:10.362 TCP 23.104.0.1:51518 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:52:17.578 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38520 10 6452 1 2025-09-25 03:52:51.017 00:00:10.366 TCP 23.104.0.1:54874 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:53:08.950 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 03:53:08.919 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 03:53:17.753 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43186 10 6452 1 2025-09-25 03:53:51.428 00:00:10.335 TCP 23.104.0.1:54404 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:54:17.966 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:60668 10 6452 1 2025-09-25 03:50:33.187 00:05:01.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-25 03:54:51.805 00:00:10.367 TCP 23.104.0.1:48462 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:55:18.152 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55936 10 6452 1 2025-09-25 03:51:33.189 00:05:01.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-25 03:55:52.211 00:00:10.367 TCP 23.104.0.1:50658 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:56:18.364 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41370 10 6452 1 2025-09-25 03:56:52.618 00:00:10.333 TCP 23.104.0.1:57038 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:57:18.581 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48166 10 6452 1 2025-09-25 03:57:52.983 00:00:10.362 TCP 23.104.0.1:46756 -> 1.101.0.1:3000 11 1507 1 2025-09-25 03:58:09.096 00:00:00.081 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-25 03:58:09.412 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-25 03:58:18.784 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51052 10 6452 1 Summary: total flows: 163, total bytes: 501173, total packets: 1567, avg bps: 1079, avg pps: 0, avg bpp: 319 Time window: 2025-09-25 02:56:33 - 2025-09-25 03:58:28 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0026s Wall: 0.0032s flows/second: 51419.3 Runtime: 0.0032s