Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-29 18:58:54.299 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56588 10 6452 1 2025-09-29 18:59:31.689 00:00:10.368 TCP 23.104.0.1:48388 -> 1.101.0.1:3000 11 1507 1 2025-09-29 18:59:54.513 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46072 10 6452 1 2025-09-29 19:00:22.655 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 19:00:22.707 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 18:56:35.366 00:05:01.638 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 19:00:32.104 00:00:10.361 TCP 23.104.0.1:58476 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:00:54.731 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56132 10 6452 1 2025-09-29 18:57:35.379 00:05:01.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 19:01:32.504 00:00:10.320 TCP 23.104.0.1:42376 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:01:54.950 00:00:10.336 TCP 1.101.0.1:3000 -> 22.102.0.1:59672 10 6452 1 2025-09-29 19:02:32.864 00:00:10.365 TCP 23.104.0.1:54970 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:02:55.324 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55580 10 6452 1 2025-09-29 19:03:33.270 00:00:10.322 TCP 23.104.0.1:34910 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:03:55.540 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44564 10 6452 1 2025-09-29 19:04:33.630 00:00:10.364 TCP 23.104.0.1:38550 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:04:55.755 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42954 10 6452 1 2025-09-29 19:05:22.456 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 19:05:22.966 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 19:05:34.032 00:00:10.369 TCP 23.104.0.1:43450 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:05:55.975 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51398 10 6452 1 2025-09-29 19:02:35.377 00:05:01.659 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 19:06:34.438 00:00:10.360 TCP 23.104.0.1:33198 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:06:56.195 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52398 10 6452 1 2025-09-29 19:03:35.379 00:05:01.655 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 19:07:34.836 00:00:10.395 TCP 23.104.0.1:34042 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:07:56.402 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48578 10 6452 1 2025-09-29 19:08:35.270 00:00:10.369 TCP 23.104.0.1:33234 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:08:56.613 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52028 10 6452 1 2025-09-29 19:09:35.688 00:00:10.369 TCP 23.104.0.1:45628 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:09:56.827 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:42698 10 6452 1 2025-09-29 19:10:23.060 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 19:10:22.912 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 19:10:36.102 00:00:10.364 TCP 23.104.0.1:33730 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:10:56.993 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49820 10 6452 1 2025-09-29 19:11:36.509 00:00:10.362 TCP 23.104.0.1:60194 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:11:57.210 00:00:10.996 TCP 1.101.0.1:3000 -> 22.102.0.1:48162 10 6452 1 2025-09-29 19:08:35.378 00:05:01.661 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 19:12:36.915 00:00:10.324 TCP 23.104.0.1:52532 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:12:58.242 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38814 10 6452 1 2025-09-29 19:09:35.379 00:05:01.657 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 19:13:37.277 00:00:10.371 TCP 23.104.0.1:35288 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:13:58.461 00:00:10.245 TCP 1.101.0.1:3000 -> 22.102.0.1:40758 11 6504 1 2025-09-29 19:14:37.687 00:00:10.367 TCP 23.104.0.1:33006 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:14:58.756 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34870 10 6452 1 2025-09-29 19:15:23.177 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 19:15:23.545 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 19:15:38.105 00:00:10.370 TCP 23.104.0.1:41856 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:15:58.975 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:43826 10 6452 1 2025-09-29 19:16:38.513 00:00:10.620 TCP 23.104.0.1:35676 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:16:59.252 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48138 10 6452 1 2025-09-29 19:17:39.169 00:00:10.360 TCP 23.104.0.1:42536 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:17:59.479 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51300 10 6452 1 2025-09-29 19:14:35.377 00:05:01.664 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 19:18:39.567 00:00:10.368 TCP 23.104.0.1:43388 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:18:59.688 00:00:10.812 TCP 1.101.0.1:3000 -> 22.102.0.1:56662 10 6452 1 2025-09-29 19:15:35.381 00:05:01.658 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 19:19:39.974 00:00:10.328 TCP 23.104.0.1:55084 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:20:00.537 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34194 10 6452 1 2025-09-29 19:20:23.027 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 19:20:23.062 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 19:20:40.344 00:00:10.370 TCP 23.104.0.1:53128 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:21:00.745 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34742 10 6452 1 2025-09-29 19:21:40.752 00:00:10.381 TCP 23.104.0.1:42562 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:22:00.955 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:59446 10 6452 1 2025-09-29 19:22:41.172 00:00:10.368 TCP 23.104.0.1:51288 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:23:01.148 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56372 10 6452 1 2025-09-29 19:23:41.578 00:00:10.365 TCP 23.104.0.1:33892 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:24:01.360 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49734 10 6452 1 2025-09-29 19:20:35.379 00:05:01.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 19:24:41.979 00:00:10.335 TCP 23.104.0.1:52244 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:25:01.567 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55952 10 6452 1 2025-09-29 19:25:23.180 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 19:25:23.028 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 19:21:35.381 00:05:01.664 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 19:25:42.353 00:00:10.367 TCP 23.104.0.1:35374 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:26:01.786 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33476 10 6452 1 2025-09-29 19:26:42.753 00:00:10.376 TCP 23.104.0.1:39872 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:27:01.960 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41632 10 6452 1 2025-09-29 19:27:43.171 00:00:10.339 TCP 23.104.0.1:54202 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:28:02.190 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44372 10 6452 1 2025-09-29 19:28:43.550 00:00:10.363 TCP 23.104.0.1:51990 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:29:02.363 00:00:10.752 TCP 1.101.0.1:3000 -> 22.102.0.1:56484 10 6452 1 2025-09-29 19:29:43.951 00:00:10.370 TCP 23.104.0.1:51370 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:30:03.157 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53924 10 6452 1 2025-09-29 19:30:23.529 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 19:30:23.076 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 19:26:35.380 00:05:01.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 19:30:44.358 00:00:10.361 TCP 23.104.0.1:40176 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:31:03.371 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:34808 10 6452 1 2025-09-29 19:27:35.382 00:05:01.665 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 19:31:44.753 00:00:10.376 TCP 23.104.0.1:40012 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:32:03.573 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33996 10 6452 1 2025-09-29 19:32:45.169 00:00:10.364 TCP 23.104.0.1:37118 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:33:03.808 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33180 10 6452 1 2025-09-29 19:33:45.576 00:00:10.327 TCP 23.104.0.1:52832 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:34:04.028 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48190 10 6452 1 2025-09-29 19:34:45.930 00:00:10.390 TCP 23.104.0.1:60056 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:35:04.246 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37642 10 6452 1 2025-09-29 19:35:24.275 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 19:35:24.041 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 19:35:46.360 00:00:10.365 TCP 23.104.0.1:43894 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:36:04.425 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59892 10 6452 1 2025-09-29 19:32:35.381 00:05:01.671 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 19:36:46.763 00:00:10.377 TCP 23.104.0.1:59656 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:37:04.633 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:46628 10 6452 1 2025-09-29 19:33:35.383 00:05:01.666 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 19:37:47.177 00:00:10.367 TCP 23.104.0.1:42302 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:38:04.808 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51314 10 6452 1 2025-09-29 19:38:47.582 00:00:10.327 TCP 23.104.0.1:53452 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:39:05.026 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60566 10 6452 1 2025-09-29 19:39:47.943 00:00:10.375 TCP 23.104.0.1:43502 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:40:05.244 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49782 10 6452 1 2025-09-29 19:40:23.562 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 19:40:23.254 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 19:40:48.354 00:00:10.368 TCP 23.104.0.1:41904 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:41:05.467 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33706 10 6452 1 2025-09-29 19:41:48.755 00:00:10.341 TCP 23.104.0.1:48344 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:42:05.675 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41854 10 6452 1 2025-09-29 19:38:35.380 00:05:01.674 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 19:42:49.139 00:00:10.362 TCP 23.104.0.1:51868 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:43:05.891 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57690 10 6452 1 2025-09-29 19:39:35.384 00:05:01.668 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 19:43:49.541 00:00:10.756 TCP 23.104.0.1:60500 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:44:06.080 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40334 10 6452 1 2025-09-29 19:44:50.333 00:00:10.321 TCP 23.104.0.1:42654 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:45:06.295 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37920 10 6452 1 2025-09-29 19:45:23.589 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 19:45:23.445 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 19:45:50.694 00:00:10.368 TCP 23.104.0.1:47750 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:46:06.478 00:00:10.996 TCP 1.101.0.1:3000 -> 22.102.0.1:34484 10 6452 1 2025-09-29 19:46:51.108 00:00:10.321 TCP 23.104.0.1:52234 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:47:07.515 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45222 10 6452 1 2025-09-29 19:47:51.468 00:00:10.332 TCP 23.104.0.1:57430 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:48:07.736 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48718 10 6452 1 2025-09-29 19:44:35.386 00:05:01.672 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 19:48:51.832 00:00:10.373 TCP 23.104.0.1:37498 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:49:07.957 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41384 10 6452 1 2025-09-29 19:45:35.389 00:05:01.667 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 19:49:52.241 00:00:10.367 TCP 23.104.0.1:52624 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:50:08.190 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53240 10 6452 1 2025-09-29 19:50:23.702 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 19:50:23.811 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 19:50:52.644 00:00:10.370 TCP 23.104.0.1:46744 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:51:08.401 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38482 10 6452 1 2025-09-29 19:51:53.061 00:00:10.372 TCP 23.104.0.1:45178 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:52:08.612 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56554 10 6452 1 2025-09-29 19:52:53.478 00:00:10.322 TCP 23.104.0.1:48524 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:53:08.817 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46872 10 6452 1 2025-09-29 19:53:53.837 00:00:10.394 TCP 23.104.0.1:53806 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:54:08.990 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47118 10 6452 1 2025-09-29 19:50:35.388 00:05:01.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 19:54:54.277 00:00:10.365 TCP 23.104.0.1:46126 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:55:09.221 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36140 10 6452 1 2025-09-29 19:55:24.675 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 19:55:24.805 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 19:51:35.391 00:05:01.666 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 19:55:54.678 00:00:10.368 TCP 23.104.0.1:42082 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:56:09.440 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55884 10 6452 1 2025-09-29 19:56:55.103 00:00:10.366 TCP 23.104.0.1:47114 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:57:09.656 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52680 10 6452 1 2025-09-29 19:57:55.511 00:00:10.368 TCP 23.104.0.1:55516 -> 1.101.0.1:3000 11 1507 1 2025-09-29 19:58:09.867 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:46728 10 6452 1 Summary: total flows: 163, total bytes: 496893, total packets: 1562, avg bps: 1072, avg pps: 0, avg bpp: 318 Time window: 2025-09-29 18:56:35 - 2025-09-29 19:58:20 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0060s User: 0.0000s Wall: 0.0025s flows/second: 64735.5 Runtime: 0.0025s