Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-03 02:58:53.390 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40240 10 6452 1 2025-10-03 02:59:07.262 00:00:10.366 TCP 23.104.0.1:43992 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:59:53.604 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57472 10 6452 1 2025-10-03 03:00:07.673 00:00:10.333 TCP 23.104.0.1:49346 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:56:36.864 00:05:01.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 03:00:53.827 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38924 10 6452 1 2025-10-03 03:01:08.033 00:00:10.367 TCP 23.104.0.1:36658 -> 1.101.0.1:3000 11 1507 1 2025-10-03 02:57:36.866 00:05:01.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 03:01:58.979 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 03:01:58.997 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 03:01:54.037 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36522 10 6452 1 2025-10-03 03:02:08.442 00:00:10.366 TCP 23.104.0.1:37694 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:02:54.253 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:51256 12 10375 1 2025-10-03 03:03:08.850 00:00:10.453 TCP 23.104.0.1:43170 -> 1.101.0.1:3000 15 1926 1 2025-10-03 03:03:54.500 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47872 10 6452 1 2025-10-03 03:04:09.341 00:00:10.374 TCP 23.104.0.1:44008 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:04:54.723 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48228 10 6452 1 2025-10-03 03:05:09.763 00:00:10.357 TCP 23.104.0.1:41266 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:05:54.937 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:60182 10 6452 1 2025-10-03 03:06:10.134 00:00:10.365 TCP 23.104.0.1:46338 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:02:36.865 00:05:01.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 03:06:59.023 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 03:06:58.992 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 03:06:55.187 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39240 10 6452 1 2025-10-03 03:07:10.538 00:00:10.374 TCP 23.104.0.1:42982 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:03:36.869 00:05:01.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 03:07:55.421 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54824 10 6452 1 2025-10-03 03:08:10.955 00:00:10.364 TCP 23.104.0.1:46584 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:08:55.642 00:00:11.248 TCP 1.101.0.1:3000 -> 22.102.0.1:35590 10 6452 1 2025-10-03 03:09:11.358 00:00:10.336 TCP 23.104.0.1:47450 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:09:56.927 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60914 10 6452 1 2025-10-03 03:10:11.726 00:00:10.366 TCP 23.104.0.1:58320 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:10:57.141 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46060 10 6452 1 2025-10-03 03:11:12.130 00:00:10.369 TCP 23.104.0.1:54762 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:11:59.361 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 03:11:59.218 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 03:11:57.357 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35080 10 6452 1 2025-10-03 03:12:12.537 00:00:10.368 TCP 23.104.0.1:39486 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:08:36.869 00:05:01.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 03:12:57.566 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39568 10 6452 1 2025-10-03 03:13:12.942 00:00:10.374 TCP 23.104.0.1:60806 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:09:36.872 00:05:01.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 03:13:57.778 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48686 10 6452 1 2025-10-03 03:14:13.357 00:00:10.364 TCP 23.104.0.1:58354 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:14:57.984 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:36424 10 6452 1 2025-10-03 03:15:13.759 00:00:10.370 TCP 23.104.0.1:34924 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:15:58.210 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42360 10 6452 1 2025-10-03 03:16:14.165 00:00:10.367 TCP 23.104.0.1:54046 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:16:59.268 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 03:16:59.276 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 03:16:58.420 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48686 10 6452 1 2025-10-03 03:17:14.569 00:00:10.366 TCP 23.104.0.1:35630 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:17:58.639 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42264 10 6452 1 2025-10-03 03:18:14.976 00:00:10.329 TCP 23.104.0.1:42990 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:14:36.872 00:05:01.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 03:18:58.861 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:38150 10 6452 1 2025-10-03 03:19:15.345 00:00:10.363 TCP 23.104.0.1:38920 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:15:36.876 00:05:01.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 03:19:59.089 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-10-03 03:20:15.744 00:00:10.366 TCP 23.104.0.1:45988 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:20:59.306 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33152 10 6452 1 2025-10-03 03:21:16.143 00:00:10.324 TCP 23.104.0.1:35056 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:21:59.465 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 03:21:59.354 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 03:21:59.530 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44112 10 6452 1 2025-10-03 03:22:16.522 00:00:10.365 TCP 23.104.0.1:38872 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:22:59.745 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37574 10 6452 1 2025-10-03 03:23:16.925 00:00:10.383 TCP 23.104.0.1:45474 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:23:59.963 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39658 12 6556 1 2025-10-03 03:24:17.348 00:00:10.367 TCP 23.104.0.1:59612 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:20:36.874 00:05:01.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 03:25:00.194 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:33606 10 6452 1 2025-10-03 03:25:17.759 00:00:10.383 TCP 23.104.0.1:37250 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:21:36.876 00:05:01.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 03:26:00.365 00:00:10.452 TCP 1.101.0.1:3000 -> 22.102.0.1:45562 10 6452 1 2025-10-03 03:26:18.181 00:00:10.366 TCP 23.104.0.1:55660 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:26:59.393 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 03:26:59.474 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 03:27:00.854 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47032 10 6452 1 2025-10-03 03:27:18.584 00:00:10.372 TCP 23.104.0.1:58058 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:28:01.085 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:43352 12 10369 1 2025-10-03 03:28:18.987 00:00:10.492 TCP 23.104.0.1:54184 -> 1.101.0.1:3000 15 1926 1 2025-10-03 03:29:01.327 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52602 10 6452 1 2025-10-03 03:29:19.519 00:00:10.329 TCP 23.104.0.1:33180 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:30:01.544 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47262 10 6452 1 2025-10-03 03:30:19.884 00:00:10.346 TCP 23.104.0.1:47278 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:26:36.875 00:05:01.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 03:31:01.753 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:51090 10 6452 1 2025-10-03 03:31:20.266 00:00:10.366 TCP 23.104.0.1:47448 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:27:36.878 00:05:01.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 03:31:59.650 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 03:31:59.441 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 03:32:01.985 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:35974 10 6452 1 2025-10-03 03:32:20.676 00:00:10.321 TCP 23.104.0.1:56712 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:33:02.173 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41948 10 6452 1 2025-10-03 03:33:21.033 00:00:10.363 TCP 23.104.0.1:43964 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:34:02.342 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49122 10 6452 1 2025-10-03 03:34:21.431 00:00:10.369 TCP 23.104.0.1:58550 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:35:02.555 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41512 10 6452 1 2025-10-03 03:35:21.836 00:00:10.389 TCP 23.104.0.1:52428 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:36:02.782 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57118 10 6452 1 2025-10-03 03:36:22.263 00:00:10.368 TCP 23.104.0.1:38716 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:32:36.889 00:05:01.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 03:36:59.743 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 03:36:59.745 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 03:37:02.990 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:41108 10 6452 1 2025-10-03 03:37:22.673 00:00:10.610 TCP 23.104.0.1:56004 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:33:36.891 00:05:01.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 03:38:03.249 00:00:13.898 TCP 1.101.0.1:3000 -> 22.102.0.1:33018 10 6452 1 2025-10-03 03:38:23.347 00:00:10.321 TCP 23.104.0.1:43216 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:39:07.185 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47650 10 6452 1 2025-10-03 03:39:23.709 00:00:13.262 TCP 23.104.0.1:44922 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:40:07.361 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57324 10 6452 1 2025-10-03 03:40:27.017 00:00:10.325 TCP 23.104.0.1:38078 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:41:07.587 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40814 10 6452 1 2025-10-03 03:41:27.379 00:00:10.371 TCP 23.104.0.1:52198 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:41:59.867 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 03:41:59.807 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 03:42:07.805 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53214 10 6452 1 2025-10-03 03:42:27.786 00:00:10.372 TCP 23.104.0.1:50224 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:38:36.891 00:05:01.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 03:43:08.034 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46234 10 6452 1 2025-10-03 03:43:28.195 00:00:10.367 TCP 23.104.0.1:59246 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:39:36.894 00:05:01.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 03:44:08.252 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37048 10 6452 1 2025-10-03 03:44:28.603 00:00:10.485 TCP 23.104.0.1:42428 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:45:08.471 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:56608 10 6452 1 2025-10-03 03:45:29.127 00:00:10.367 TCP 23.104.0.1:43374 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:46:08.729 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59458 10 6452 1 2025-10-03 03:46:29.532 00:00:10.368 TCP 23.104.0.1:54656 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:46:59.617 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 03:46:59.853 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 03:47:08.952 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:45616 10 6452 1 2025-10-03 03:47:29.939 00:00:10.376 TCP 23.104.0.1:52166 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:48:09.187 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51842 10 6452 1 2025-10-03 03:48:30.358 00:00:10.331 TCP 23.104.0.1:57342 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:44:36.892 00:05:01.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 03:49:09.418 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33384 10 6452 1 2025-10-03 03:49:30.727 00:00:10.367 TCP 23.104.0.1:51640 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:45:36.894 00:05:01.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 03:50:09.646 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39484 10 6452 1 2025-10-03 03:50:31.132 00:00:10.364 TCP 23.104.0.1:44510 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:51:09.866 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52320 10 6452 1 2025-10-03 03:51:31.537 00:00:10.372 TCP 23.104.0.1:36108 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:51:59.978 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 03:51:59.739 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 03:52:10.091 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56506 10 6452 1 2025-10-03 03:52:31.944 00:00:10.374 TCP 23.104.0.1:39608 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:53:10.335 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59708 10 6452 1 2025-10-03 03:53:32.372 00:00:10.365 TCP 23.104.0.1:55384 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:54:10.543 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56328 10 6452 1 2025-10-03 03:50:36.894 00:05:01.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-03 03:54:32.772 00:00:10.375 TCP 23.104.0.1:52794 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:55:10.715 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:32880 10 6452 1 2025-10-03 03:51:36.898 00:05:01.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-03 03:55:33.190 00:00:10.363 TCP 23.104.0.1:48314 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:56:10.890 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33916 10 6452 1 2025-10-03 03:56:33.591 00:00:10.362 TCP 23.104.0.1:36506 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:56:59.779 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-03 03:56:59.998 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-03 03:57:11.116 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39508 10 6452 1 2025-10-03 03:57:33.996 00:00:10.367 TCP 23.104.0.1:49742 -> 1.101.0.1:3000 11 1507 1 2025-10-03 03:58:11.332 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39114 10 6452 1 2025-10-03 03:58:34.415 00:00:10.369 TCP 23.104.0.1:34422 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507130, total packets: 1586, avg bps: 1088, avg pps: 0, avg bpp: 319 Time window: 2025-10-03 02:56:36 - 2025-10-03 03:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0020s Wall: 0.0023s flows/second: 71839.8 Runtime: 0.0023s