Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 08:58:48.116 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35946 10 6452 1 2025-10-04 08:58:57.919 00:00:10.373 TCP 23.104.0.1:46044 -> 1.101.0.1:3000 11 1507 1 2025-10-04 08:59:48.330 00:00:10.373 TCP 1.101.0.1:3000 -> 22.102.0.1:37274 10 6452 1 2025-10-04 08:59:58.330 00:00:10.368 TCP 23.104.0.1:56462 -> 1.101.0.1:3000 11 1507 1 2025-10-04 08:56:37.448 00:05:01.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 09:00:48.738 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36014 10 6452 1 2025-10-04 09:00:58.733 00:00:10.368 TCP 23.104.0.1:54940 -> 1.101.0.1:3000 11 1507 1 2025-10-04 08:57:37.449 00:05:01.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 09:01:48.948 00:00:10.715 TCP 1.101.0.1:3000 -> 22.102.0.1:46118 10 6452 1 2025-10-04 09:01:59.158 00:00:10.373 TCP 23.104.0.1:50980 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:02:35.045 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 09:02:35.205 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 09:02:49.705 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43704 10 6452 1 2025-10-04 09:02:59.574 00:00:10.366 TCP 23.104.0.1:54070 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:03:49.881 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:51324 12 10375 1 2025-10-04 09:03:59.979 00:00:10.500 TCP 23.104.0.1:33174 -> 1.101.0.1:3000 15 1926 1 2025-10-04 09:04:50.095 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53272 10 6452 1 2025-10-04 09:05:00.523 00:00:10.367 TCP 23.104.0.1:35890 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:05:50.305 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57984 10 6452 1 2025-10-04 09:06:00.929 00:00:10.438 TCP 23.104.0.1:37730 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:02:37.449 00:05:01.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 09:06:50.528 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59954 10 6452 1 2025-10-04 09:07:01.409 00:00:10.358 TCP 23.104.0.1:51846 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:07:35.063 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 09:07:35.150 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 09:03:37.451 00:05:01.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 09:07:50.744 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55066 10 6452 1 2025-10-04 09:08:01.811 00:00:10.372 TCP 23.104.0.1:46162 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:08:50.963 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51216 10 6452 1 2025-10-04 09:09:02.225 00:00:10.328 TCP 23.104.0.1:52534 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:09:51.136 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36344 10 6452 1 2025-10-04 09:10:02.591 00:00:10.365 TCP 23.104.0.1:57918 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:10:51.350 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32944 10 6452 1 2025-10-04 09:11:02.992 00:00:10.366 TCP 23.104.0.1:57080 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:11:51.565 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43892 10 6452 1 2025-10-04 09:12:03.398 00:00:10.365 TCP 23.104.0.1:35090 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:12:35.184 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 09:12:35.298 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 09:08:37.451 00:05:01.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 09:12:51.785 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54444 10 6452 1 2025-10-04 09:13:03.807 00:00:10.363 TCP 23.104.0.1:46668 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:09:37.454 00:05:01.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 09:13:52.012 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35834 10 6452 1 2025-10-04 09:14:04.206 00:00:10.365 TCP 23.104.0.1:43856 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:14:52.262 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56266 10 6452 1 2025-10-04 09:15:04.608 00:00:10.323 TCP 23.104.0.1:58180 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:15:52.480 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50492 10 6452 1 2025-10-04 09:16:04.969 00:00:10.372 TCP 23.104.0.1:51122 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:16:52.690 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:32936 10 6452 1 2025-10-04 09:17:05.381 00:00:10.360 TCP 23.104.0.1:46006 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:17:35.417 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 09:17:35.355 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 09:17:52.898 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:35474 10 6452 1 2025-10-04 09:18:05.785 00:00:10.326 TCP 23.104.0.1:53822 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:14:37.453 00:05:01.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 09:18:53.169 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56406 10 6452 1 2025-10-04 09:19:06.145 00:00:10.363 TCP 23.104.0.1:49102 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:15:37.456 00:05:01.940 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 09:19:53.341 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51272 10 6452 1 2025-10-04 09:20:06.546 00:00:10.368 TCP 23.104.0.1:59842 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:20:53.514 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38548 10 6452 1 2025-10-04 09:21:06.952 00:00:10.372 TCP 23.104.0.1:58842 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:21:53.684 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38324 10 6452 1 2025-10-04 09:22:07.368 00:00:10.344 TCP 23.104.0.1:45918 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:22:35.630 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 09:22:35.897 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 09:22:53.898 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53948 10 6452 1 2025-10-04 09:23:07.750 00:00:10.458 TCP 23.104.0.1:57532 -> 1.101.0.1:3000 15 1926 1 2025-10-04 09:23:54.115 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:44292 12 10375 1 2025-10-04 09:24:08.243 00:00:10.379 TCP 23.104.0.1:49926 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:20:37.455 00:05:01.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 09:24:54.358 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:43166 10 6452 1 2025-10-04 09:25:08.663 00:00:10.365 TCP 23.104.0.1:59422 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:21:37.457 00:05:01.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 09:25:54.524 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48224 10 6452 1 2025-10-04 09:26:09.105 00:00:10.386 TCP 23.104.0.1:40896 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:26:54.737 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41582 10 6452 1 2025-10-04 09:27:09.552 00:00:10.364 TCP 23.104.0.1:50424 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:27:35.661 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 09:27:35.425 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 09:27:54.951 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:42212 10 6452 1 2025-10-04 09:28:09.956 00:00:10.367 TCP 23.104.0.1:57106 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:28:55.145 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41648 10 6452 1 2025-10-04 09:29:10.366 00:00:10.321 TCP 23.104.0.1:55590 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:29:55.378 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46446 10 6452 1 2025-10-04 09:30:10.727 00:00:10.367 TCP 23.104.0.1:53246 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:26:37.457 00:05:01.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 09:30:55.593 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48412 10 6452 1 2025-10-04 09:31:11.132 00:00:10.365 TCP 23.104.0.1:59206 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:27:37.459 00:05:01.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 09:31:55.812 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60078 10 6452 1 2025-10-04 09:32:11.534 00:00:10.926 TCP 23.104.0.1:57214 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:32:35.894 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 09:32:35.966 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 09:32:56.040 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58354 10 6452 1 2025-10-04 09:33:12.503 00:00:10.366 TCP 23.104.0.1:55384 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:33:56.258 00:00:14.478 TCP 1.101.0.1:3000 -> 22.102.0.1:41454 10 6452 1 2025-10-04 09:34:12.908 00:00:10.365 TCP 23.104.0.1:34942 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:35:00.796 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44826 10 6452 1 2025-10-04 09:35:13.314 00:00:10.330 TCP 23.104.0.1:50120 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:36:01.015 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47224 10 6452 1 2025-10-04 09:36:13.683 00:00:10.369 TCP 23.104.0.1:58212 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:32:37.458 00:05:01.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 09:37:01.237 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52978 10 6452 1 2025-10-04 09:37:14.108 00:00:10.328 TCP 23.104.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:37:36.187 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 09:37:36.050 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 09:33:37.461 00:05:01.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 09:38:01.446 00:00:10.964 TCP 1.101.0.1:3000 -> 22.102.0.1:53736 10 6452 1 2025-10-04 09:38:14.475 00:00:10.364 TCP 23.104.0.1:60650 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:39:02.446 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50686 10 6452 1 2025-10-04 09:39:14.876 00:00:10.367 TCP 23.104.0.1:57846 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:40:02.653 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40134 10 6452 1 2025-10-04 09:40:15.280 00:00:10.389 TCP 23.104.0.1:55540 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:41:02.867 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50696 10 6452 1 2025-10-04 09:41:15.709 00:00:10.365 TCP 23.104.0.1:60798 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:42:03.090 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45636 10 6452 1 2025-10-04 09:42:16.113 00:00:10.374 TCP 23.104.0.1:47562 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:42:35.935 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 09:42:35.800 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 09:38:37.461 00:05:01.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 09:43:03.255 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57938 10 6452 1 2025-10-04 09:43:16.525 00:00:10.364 TCP 23.104.0.1:45846 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:39:37.463 00:05:01.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 09:44:03.430 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45700 10 6452 1 2025-10-04 09:44:16.933 00:00:10.395 TCP 23.104.0.1:54658 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:45:03.637 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43090 10 6452 1 2025-10-04 09:45:17.354 00:00:10.319 TCP 23.104.0.1:53228 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:46:03.846 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41882 10 6452 1 2025-10-04 09:46:17.716 00:00:10.379 TCP 23.104.0.1:34436 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:47:04.086 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39192 10 6452 1 2025-10-04 09:47:18.132 00:00:10.366 TCP 23.104.0.1:38930 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:47:36.004 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 09:47:35.865 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 09:48:04.256 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42682 10 6452 1 2025-10-04 09:48:18.539 00:00:10.363 TCP 23.104.0.1:60598 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:44:37.462 00:05:01.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 09:49:04.467 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39390 10 6452 1 2025-10-04 09:49:18.944 00:00:10.375 TCP 23.104.0.1:39944 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:45:37.466 00:05:01.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 09:50:04.682 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55612 10 6452 1 2025-10-04 09:50:19.355 00:00:10.363 TCP 23.104.0.1:36020 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:51:04.894 00:00:15.709 TCP 1.101.0.1:3000 -> 22.102.0.1:56722 10 6452 1 2025-10-04 09:51:19.757 00:00:10.376 TCP 23.104.0.1:58260 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:52:10.662 00:00:10.468 TCP 1.101.0.1:3000 -> 22.102.0.1:35700 10 6452 1 2025-10-04 09:52:35.800 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 09:52:20.170 00:00:10.370 TCP 23.104.0.1:48792 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:52:36.206 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 09:53:11.172 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44014 10 6452 1 2025-10-04 09:53:20.577 00:00:10.365 TCP 23.104.0.1:33842 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:54:11.388 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49244 10 6452 1 2025-10-04 09:54:20.976 00:00:10.375 TCP 23.104.0.1:37864 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:50:37.464 00:05:01.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 09:55:11.611 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47266 10 6452 1 2025-10-04 09:55:21.397 00:00:10.326 TCP 23.104.0.1:45476 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:51:37.467 00:05:01.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 09:56:11.824 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46282 10 6452 1 2025-10-04 09:56:21.771 00:00:10.384 TCP 23.104.0.1:51996 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:57:12.061 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39164 10 6452 1 2025-10-04 09:57:36.067 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 09:57:22.199 00:00:12.703 TCP 23.104.0.1:38106 -> 1.101.0.1:3000 11 1507 1 2025-10-04 09:57:35.995 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 09:58:12.226 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42692 10 6452 1 2025-10-04 09:58:24.940 00:00:10.332 TCP 23.104.0.1:60830 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507032, total packets: 1584, avg bps: 1091, avg pps: 0, avg bpp: 320 Time window: 2025-10-04 08:56:37 - 2025-10-04 09:58:35 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0020s Wall: 0.0025s flows/second: 64923.6 Runtime: 0.0025s