Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 16:59:08.979 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37130 10 6452 1 2025-10-04 16:59:24.112 00:00:10.367 TCP 23.104.0.1:41308 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:00:09.207 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40182 10 6452 1 2025-10-04 17:00:24.517 00:00:10.364 TCP 23.104.0.1:39182 -> 1.101.0.1:3000 11 1507 1 2025-10-04 16:56:37.599 00:05:01.959 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 17:01:09.416 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46118 10 6452 1 2025-10-04 17:01:24.928 00:00:10.387 TCP 23.104.0.1:37294 -> 1.101.0.1:3000 11 1507 1 2025-10-04 16:57:37.601 00:05:01.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 17:02:09.629 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35022 10 6452 1 2025-10-04 17:02:25.354 00:00:10.364 TCP 23.104.0.1:44684 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:02:44.837 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 17:02:44.670 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 17:03:09.844 00:00:11.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59862 12 10369 1 2025-10-04 17:03:25.752 00:00:10.435 TCP 23.104.0.1:45538 -> 1.101.0.1:3000 15 1926 1 2025-10-04 17:04:11.083 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49716 10 6452 1 2025-10-04 17:04:26.230 00:00:10.368 TCP 23.104.0.1:52672 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:05:11.258 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41982 10 6452 1 2025-10-04 17:05:26.630 00:00:10.386 TCP 23.104.0.1:44202 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:06:11.477 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38502 10 6452 1 2025-10-04 17:02:37.599 00:05:01.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 17:06:27.124 00:00:10.326 TCP 23.104.0.1:60466 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:07:11.692 00:00:10.960 TCP 1.101.0.1:3000 -> 22.102.0.1:36966 11 6504 1 2025-10-04 17:07:27.488 00:00:10.326 TCP 23.104.0.1:57446 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:03:37.602 00:05:01.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 17:07:44.841 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 17:07:45.025 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 17:08:12.684 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36550 10 6452 1 2025-10-04 17:08:27.853 00:00:10.339 TCP 23.104.0.1:41186 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:09:12.900 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35456 10 6452 1 2025-10-04 17:09:28.226 00:00:10.366 TCP 23.104.0.1:33848 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:10:13.114 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48938 10 6452 1 2025-10-04 17:10:28.630 00:00:10.321 TCP 23.104.0.1:60346 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:11:13.335 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34888 10 6452 1 2025-10-04 17:11:28.989 00:00:10.325 TCP 23.104.0.1:57024 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:12:13.559 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33342 10 6452 1 2025-10-04 17:08:37.601 00:05:01.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 17:12:44.779 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 17:12:29.355 00:00:10.367 TCP 23.104.0.1:39098 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:12:44.723 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 17:13:13.777 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40274 10 6452 1 2025-10-04 17:09:37.604 00:05:01.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 17:13:29.761 00:00:10.668 TCP 23.104.0.1:41558 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:14:13.997 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55502 10 6452 1 2025-10-04 17:14:30.470 00:00:10.319 TCP 23.104.0.1:41336 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:15:14.228 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38070 10 6452 1 2025-10-04 17:15:30.831 00:00:10.383 TCP 23.104.0.1:55872 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:16:14.445 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59806 10 6452 1 2025-10-04 17:16:31.253 00:00:10.367 TCP 23.104.0.1:33514 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:17:14.656 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:43472 10 6452 1 2025-10-04 17:17:45.311 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 17:17:45.105 00:00:00.049 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 17:17:31.666 00:00:10.370 TCP 23.104.0.1:44554 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:18:14.844 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:57960 10 6452 1 2025-10-04 17:14:37.602 00:05:01.963 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 17:18:32.114 00:00:10.360 TCP 23.104.0.1:46998 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:19:15.070 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45600 10 6452 1 2025-10-04 17:15:37.605 00:05:01.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 17:19:32.510 00:00:10.370 TCP 23.104.0.1:58168 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:20:15.289 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42796 10 6452 1 2025-10-04 17:20:32.924 00:00:10.400 TCP 23.104.0.1:34652 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:21:15.514 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50164 10 6452 1 2025-10-04 17:21:33.367 00:00:10.322 TCP 23.104.0.1:57500 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:22:15.737 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39910 10 6452 1 2025-10-04 17:22:45.093 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 17:22:33.730 00:00:10.373 TCP 23.104.0.1:34826 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:22:45.230 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 17:23:15.952 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49988 10 6452 1 2025-10-04 17:23:34.142 00:00:10.363 TCP 23.104.0.1:48846 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:24:16.187 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48174 10 6452 1 2025-10-04 17:20:37.605 00:05:01.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 17:24:34.542 00:00:10.368 TCP 23.104.0.1:52730 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:25:16.403 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:40968 10 6452 1 2025-10-04 17:21:37.607 00:05:01.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 17:25:34.945 00:00:10.374 TCP 23.104.0.1:59846 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:26:16.580 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36214 10 6452 1 2025-10-04 17:26:35.359 00:00:10.367 TCP 23.104.0.1:35676 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:27:16.797 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43412 10 6452 1 2025-10-04 17:27:45.484 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 17:27:45.484 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 17:27:35.757 00:00:10.385 TCP 23.104.0.1:49316 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:28:17.010 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37024 10 6452 1 2025-10-04 17:28:36.179 00:00:10.363 TCP 23.104.0.1:41130 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:29:17.220 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41524 10 6452 1 2025-10-04 17:29:36.581 00:00:10.365 TCP 23.104.0.1:52326 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:30:17.439 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44632 10 6452 1 2025-10-04 17:26:37.607 00:05:01.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 17:30:36.988 00:00:10.359 TCP 23.104.0.1:42594 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:31:17.655 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:39552 10 6452 1 2025-10-04 17:27:37.610 00:05:01.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 17:31:37.403 00:00:10.323 TCP 23.104.0.1:48780 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:32:17.867 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48408 10 6452 1 2025-10-04 17:32:45.352 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 17:32:45.340 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 17:32:37.768 00:00:10.367 TCP 23.104.0.1:55734 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:33:18.086 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50254 10 6452 1 2025-10-04 17:33:38.175 00:00:10.361 TCP 23.104.0.1:49086 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:34:18.301 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35512 10 6452 1 2025-10-04 17:34:38.578 00:00:10.380 TCP 23.104.0.1:54500 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:35:18.517 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36512 10 6452 1 2025-10-04 17:35:39.030 00:00:10.379 TCP 23.104.0.1:41766 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:36:18.728 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35068 10 6452 1 2025-10-04 17:32:37.608 00:05:01.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 17:36:39.450 00:00:10.364 TCP 23.104.0.1:33682 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:37:18.938 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:52572 10 6452 1 2025-10-04 17:33:37.616 00:05:01.952 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 17:37:45.494 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 17:37:45.259 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 17:37:39.848 00:00:10.384 TCP 23.104.0.1:54616 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:38:19.178 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47686 10 6452 1 2025-10-04 17:38:40.273 00:00:10.420 TCP 23.104.0.1:43332 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:39:19.391 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33074 10 6452 1 2025-10-04 17:39:40.735 00:00:10.366 TCP 23.104.0.1:51392 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:40:19.563 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54230 10 6452 1 2025-10-04 17:40:41.135 00:00:10.366 TCP 23.104.0.1:39426 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:41:19.778 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39718 10 6452 1 2025-10-04 17:41:41.540 00:00:10.369 TCP 23.104.0.1:44224 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:42:19.987 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36424 10 6452 1 2025-10-04 17:38:37.613 00:05:01.958 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 17:42:45.632 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 17:42:45.416 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 17:42:41.949 00:00:10.367 TCP 23.104.0.1:50600 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:43:20.215 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34372 10 6452 1 2025-10-04 17:39:37.615 00:05:01.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 17:43:42.352 00:00:10.363 TCP 23.104.0.1:43022 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:44:20.434 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52106 10 6452 1 2025-10-04 17:44:42.753 00:00:10.336 TCP 23.104.0.1:47948 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:45:20.655 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40108 10 6452 1 2025-10-04 17:45:43.125 00:00:10.329 TCP 23.104.0.1:34590 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:46:20.872 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48530 10 6452 1 2025-10-04 17:46:43.499 00:00:10.373 TCP 23.104.0.1:55064 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:47:21.090 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47538 10 6452 1 2025-10-04 17:47:45.756 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 17:47:45.545 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 17:47:43.908 00:00:10.322 TCP 23.104.0.1:54120 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:48:21.302 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59852 10 6452 1 2025-10-04 17:44:37.615 00:05:01.960 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 17:48:44.268 00:00:10.322 TCP 23.104.0.1:34388 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:49:21.516 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49354 10 6452 1 2025-10-04 17:45:37.617 00:05:01.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 17:49:44.628 00:00:10.378 TCP 23.104.0.1:57328 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:50:21.725 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57844 10 6452 1 2025-10-04 17:50:45.057 00:00:10.338 TCP 23.104.0.1:45596 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:51:21.943 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57962 10 6452 1 2025-10-04 17:51:45.429 00:00:10.325 TCP 23.104.0.1:58764 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:52:22.178 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47356 10 6452 1 2025-10-04 17:52:45.720 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 17:52:45.570 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 17:52:45.792 00:00:10.365 TCP 23.104.0.1:51284 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:53:22.394 00:00:10.336 TCP 1.101.0.1:3000 -> 22.102.0.1:37352 10 6452 1 2025-10-04 17:53:46.194 00:00:10.363 TCP 23.104.0.1:35870 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:54:22.769 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48930 10 6452 1 2025-10-04 17:50:37.616 00:05:01.959 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 17:54:46.594 00:00:10.323 TCP 23.104.0.1:35684 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:55:22.940 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:54466 10 6452 1 2025-10-04 17:51:37.618 00:05:01.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 17:55:46.953 00:00:10.367 TCP 23.104.0.1:44420 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:56:23.179 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44100 12 6556 1 2025-10-04 17:56:47.357 00:00:10.364 TCP 23.104.0.1:53910 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:57:23.409 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47148 10 6452 1 2025-10-04 17:57:45.925 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 17:57:45.661 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 17:57:47.760 00:00:10.385 TCP 23.104.0.1:49692 -> 1.101.0.1:3000 11 1507 1 2025-10-04 17:58:23.624 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52572 10 6452 1 Summary: total flows: 163, total bytes: 501333, total packets: 1570, avg bps: 1079, avg pps: 0, avg bpp: 319 Time window: 2025-10-04 16:56:37 - 2025-10-04 17:58:33 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0011s Wall: 0.0015s flows/second: 111711.0 Runtime: 0.0015s