Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-02 04:59:01.186 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50986 10 6452 1 2025-10-02 04:59:08.058 00:00:10.366 TCP 23.104.0.1:54518 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:00:01.365 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57176 10 6452 1 2025-10-02 05:00:08.467 00:00:10.367 TCP 23.104.0.1:37436 -> 1.101.0.1:3000 11 1507 1 2025-10-02 04:56:36.429 00:05:01.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 05:01:01.569 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60344 10 6452 1 2025-10-02 05:01:08.877 00:00:10.366 TCP 23.104.0.1:49264 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:01:32.555 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 05:01:32.433 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 04:57:36.432 00:05:01.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 05:02:01.782 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48168 10 6452 1 2025-10-02 05:02:09.275 00:00:10.367 TCP 23.104.0.1:36756 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:03:01.996 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60288 10 6452 1 2025-10-02 05:03:09.677 00:00:10.777 TCP 23.104.0.1:33730 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:04:02.218 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:48216 10 6452 1 2025-10-02 05:04:10.498 00:00:10.365 TCP 23.104.0.1:46102 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:05:02.399 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39932 10 6452 1 2025-10-02 05:05:10.902 00:00:10.332 TCP 23.104.0.1:52842 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:06:02.564 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33432 10 6452 1 2025-10-02 05:06:11.274 00:00:10.370 TCP 23.104.0.1:43794 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:06:32.781 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 05:06:32.614 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 05:02:36.432 00:05:01.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 05:07:02.777 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60600 10 6452 1 2025-10-02 05:07:11.679 00:00:10.354 TCP 23.104.0.1:34192 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:03:36.434 00:05:01.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 05:08:02.948 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45840 10 6452 1 2025-10-02 05:08:12.105 00:00:10.360 TCP 23.104.0.1:52594 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:09:03.181 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54068 10 6452 1 2025-10-02 05:09:12.504 00:00:10.363 TCP 23.104.0.1:33472 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:10:03.396 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49316 10 6452 1 2025-10-02 05:10:12.905 00:00:10.370 TCP 23.104.0.1:56902 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:11:03.601 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53316 10 6452 1 2025-10-02 05:11:13.315 00:00:10.370 TCP 23.104.0.1:34222 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:11:32.481 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 05:11:32.707 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 05:12:03.817 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54300 10 6452 1 2025-10-02 05:12:13.728 00:00:10.373 TCP 23.104.0.1:50756 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:08:36.433 00:05:01.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 05:13:03.990 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60784 10 6452 1 2025-10-02 05:13:14.143 00:00:10.330 TCP 23.104.0.1:38960 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:09:36.436 00:05:01.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 05:14:04.222 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34074 10 6452 1 2025-10-02 05:14:14.514 00:00:10.364 TCP 23.104.0.1:44150 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:15:04.435 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53442 10 6452 1 2025-10-02 05:15:14.920 00:00:10.372 TCP 23.104.0.1:50524 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:16:04.606 00:00:10.386 TCP 1.101.0.1:3000 -> 22.102.0.1:44370 10 6452 1 2025-10-02 05:16:15.331 00:00:10.334 TCP 23.104.0.1:35490 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:16:32.760 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 05:16:32.734 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 05:17:05.039 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49170 10 6452 1 2025-10-02 05:17:15.711 00:00:10.382 TCP 23.104.0.1:60852 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:18:05.249 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:42610 12 10375 1 2025-10-02 05:18:16.130 00:00:10.441 TCP 23.104.0.1:42500 -> 1.101.0.1:3000 15 1926 1 2025-10-02 05:14:36.435 00:05:01.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 05:19:05.442 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45090 10 6452 1 2025-10-02 05:19:16.611 00:00:10.363 TCP 23.104.0.1:46890 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:15:36.437 00:05:01.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 05:20:05.658 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38638 10 6452 1 2025-10-02 05:20:17.013 00:00:10.367 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:21:05.835 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55356 10 6452 1 2025-10-02 05:21:17.414 00:00:10.368 TCP 23.104.0.1:56148 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:21:32.688 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 05:21:32.822 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 05:22:06.007 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55118 10 6452 1 2025-10-02 05:22:17.817 00:00:10.370 TCP 23.104.0.1:43844 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:23:06.216 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49198 10 6452 1 2025-10-02 05:23:18.238 00:00:10.670 TCP 23.104.0.1:52684 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:24:06.426 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41078 10 6452 1 2025-10-02 05:24:18.953 00:00:10.365 TCP 23.104.0.1:48960 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:20:36.441 00:05:01.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 05:25:06.634 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36750 10 6452 1 2025-10-02 05:25:19.357 00:00:10.331 TCP 23.104.0.1:59630 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:21:36.443 00:05:01.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 05:26:06.847 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36170 10 6452 1 2025-10-02 05:26:32.911 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 05:26:19.729 00:00:10.379 TCP 23.104.0.1:42280 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:26:32.597 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 05:27:07.083 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44520 10 6452 1 2025-10-02 05:27:20.145 00:00:10.370 TCP 23.104.0.1:50584 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:28:07.255 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44966 10 6452 1 2025-10-02 05:28:20.559 00:00:10.369 TCP 23.104.0.1:46144 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:29:07.466 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49066 10 6452 1 2025-10-02 05:29:20.962 00:00:10.366 TCP 23.104.0.1:48280 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:30:07.678 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:52830 10 6452 1 2025-10-02 05:30:21.369 00:00:10.534 TCP 23.104.0.1:56170 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:26:36.444 00:05:01.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 05:31:07.848 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43816 10 6452 1 2025-10-02 05:31:33.103 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 05:31:32.967 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 05:31:21.946 00:00:10.545 TCP 23.104.0.1:42426 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:27:36.445 00:05:01.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 05:32:08.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54778 10 6452 1 2025-10-02 05:32:22.526 00:00:10.366 TCP 23.104.0.1:40572 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:33:08.294 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49068 10 6452 1 2025-10-02 05:33:22.929 00:00:10.374 TCP 23.104.0.1:33460 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:34:08.496 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41246 10 6452 1 2025-10-02 05:34:23.346 00:00:10.371 TCP 23.104.0.1:39744 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:35:08.671 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57072 10 6452 1 2025-10-02 05:35:23.756 00:00:10.377 TCP 23.104.0.1:35892 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:36:08.891 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52160 10 6452 1 2025-10-02 05:36:33.400 00:00:00.016 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 05:36:24.171 00:00:10.365 TCP 23.104.0.1:35052 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:36:33.272 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 05:32:36.443 00:05:01.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 05:37:09.110 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46584 10 6452 1 2025-10-02 05:37:24.574 00:00:10.364 TCP 23.104.0.1:58100 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:33:36.445 00:05:01.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 05:38:09.326 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53008 12 10375 1 2025-10-02 05:38:24.976 00:00:10.438 TCP 23.104.0.1:40754 -> 1.101.0.1:3000 15 1926 1 2025-10-02 05:39:09.563 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51392 10 6452 1 2025-10-02 05:39:25.453 00:00:10.324 TCP 23.104.0.1:48518 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:40:09.777 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37200 10 6452 1 2025-10-02 05:40:25.813 00:00:10.332 TCP 23.104.0.1:42030 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:41:09.993 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57240 10 6452 1 2025-10-02 05:41:33.157 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 05:41:26.186 00:00:10.356 TCP 23.104.0.1:51582 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:41:33.105 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 05:42:10.215 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40084 10 6452 1 2025-10-02 05:42:26.581 00:00:10.363 TCP 23.104.0.1:45202 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:38:36.443 00:05:01.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 05:43:10.428 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60762 10 6452 1 2025-10-02 05:43:26.986 00:00:10.368 TCP 23.104.0.1:34248 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:39:36.447 00:05:01.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 05:44:10.641 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51194 10 6452 1 2025-10-02 05:44:27.396 00:00:10.359 TCP 23.104.0.1:56728 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:45:10.851 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58166 10 6452 1 2025-10-02 05:45:27.797 00:00:10.361 TCP 23.104.0.1:38268 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:46:11.081 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51566 10 6452 1 2025-10-02 05:46:33.007 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 05:46:33.450 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 05:46:28.195 00:00:10.366 TCP 23.104.0.1:49212 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:47:11.291 00:00:10.755 TCP 1.101.0.1:3000 -> 22.102.0.1:50700 10 6452 1 2025-10-02 05:47:28.599 00:00:10.363 TCP 23.104.0.1:49056 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:48:12.086 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:33620 10 6452 1 2025-10-02 05:48:29.006 00:00:10.363 TCP 23.104.0.1:59690 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:44:36.446 00:05:01.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 05:49:12.259 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38830 10 6452 1 2025-10-02 05:45:36.448 00:05:01.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 05:49:29.411 00:00:10.418 TCP 23.104.0.1:44498 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:50:12.492 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59030 10 6452 1 2025-10-02 05:50:29.867 00:00:10.371 TCP 23.104.0.1:56282 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:51:12.662 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41006 10 6452 1 2025-10-02 05:51:33.480 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 05:51:33.310 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 05:51:30.274 00:00:10.372 TCP 23.104.0.1:49618 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:52:12.900 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42980 10 6452 1 2025-10-02 05:52:30.681 00:00:10.643 TCP 23.104.0.1:45842 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:53:13.116 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46324 10 6452 1 2025-10-02 05:53:31.361 00:00:10.367 TCP 23.104.0.1:34512 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:54:13.325 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41762 10 6452 1 2025-10-02 05:50:36.446 00:05:01.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-02 05:54:31.763 00:00:10.374 TCP 23.104.0.1:49272 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:55:13.538 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54972 10 6452 1 2025-10-02 05:51:36.447 00:05:01.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-02 05:55:32.177 00:00:10.318 TCP 23.104.0.1:38194 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:56:13.768 00:00:10.417 TCP 1.101.0.1:3000 -> 22.102.0.1:46000 10 6452 1 2025-10-02 05:56:33.733 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-02 05:56:33.741 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-02 05:56:32.538 00:00:10.386 TCP 23.104.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:57:14.219 00:00:10.249 TCP 1.101.0.1:3000 -> 22.102.0.1:34982 11 6504 1 2025-10-02 05:57:32.968 00:00:10.391 TCP 23.104.0.1:49276 -> 1.101.0.1:3000 11 1507 1 2025-10-02 05:58:14.512 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47416 10 6452 1 2025-10-02 05:58:33.392 00:00:10.331 TCP 23.104.0.1:39938 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507084, total packets: 1585, avg bps: 1088, avg pps: 0, avg bpp: 319 Time window: 2025-10-02 04:56:36 - 2025-10-02 05:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0026s User: 0.0026s Wall: 0.0030s flows/second: 55091.0 Runtime: 0.0030s