Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-05 11:58:48.495 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:47008 12 10375 1 2025-10-05 11:58:57.876 00:00:10.430 TCP 23.104.0.1:37828 -> 1.101.0.1:3000 15 1926 1 2025-10-05 11:59:48.700 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42330 10 6452 1 2025-10-05 11:59:58.343 00:00:10.321 TCP 23.104.0.1:51010 -> 1.101.0.1:3000 11 1507 1 2025-10-05 11:56:37.971 00:05:01.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 12:00:48.916 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:45740 10 6452 1 2025-10-05 12:00:58.707 00:00:10.385 TCP 23.104.0.1:36464 -> 1.101.0.1:3000 11 1507 1 2025-10-05 11:57:37.973 00:05:01.988 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 12:01:49.104 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58030 12 6556 1 2025-10-05 12:01:59.132 00:00:10.323 TCP 23.104.0.1:50472 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:02:49.318 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52086 10 6452 1 2025-10-05 12:03:07.852 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 12:03:07.472 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 12:02:59.492 00:00:10.365 TCP 23.104.0.1:54800 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:03:49.496 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56636 10 6452 1 2025-10-05 12:03:59.897 00:00:10.396 TCP 23.104.0.1:36012 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:04:49.712 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:38356 10 6452 1 2025-10-05 12:05:00.322 00:00:10.369 TCP 23.104.0.1:58488 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:05:49.883 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38972 10 6452 1 2025-10-05 12:06:00.730 00:00:10.364 TCP 23.104.0.1:46362 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:02:37.972 00:05:01.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 12:06:50.116 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58890 10 6452 1 2025-10-05 12:07:01.132 00:00:10.368 TCP 23.104.0.1:36966 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:03:37.976 00:05:01.987 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 12:07:50.330 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52612 10 6452 1 2025-10-05 12:08:07.950 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 12:08:01.541 00:00:10.366 TCP 23.104.0.1:46894 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:08:07.993 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 12:08:50.547 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57148 10 6452 1 2025-10-05 12:09:01.941 00:00:10.373 TCP 23.104.0.1:47252 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:09:50.767 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43536 10 6452 1 2025-10-05 12:10:02.356 00:00:10.363 TCP 23.104.0.1:44536 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:10:50.935 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:36240 10 6452 1 2025-10-05 12:11:02.759 00:00:10.380 TCP 23.104.0.1:41978 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:11:51.129 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41942 10 6452 1 2025-10-05 12:12:03.182 00:00:10.369 TCP 23.104.0.1:49776 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:08:37.972 00:05:01.994 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 12:12:51.345 00:00:10.768 TCP 1.101.0.1:3000 -> 22.102.0.1:34396 10 6452 1 2025-10-05 12:13:07.700 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 12:13:07.926 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 12:13:03.585 00:00:10.326 TCP 23.104.0.1:44784 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:09:37.975 00:05:01.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 12:13:52.153 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58986 10 6452 1 2025-10-05 12:14:03.950 00:00:10.372 TCP 23.104.0.1:60370 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:14:52.364 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45932 10 6452 1 2025-10-05 12:15:04.356 00:00:10.367 TCP 23.104.0.1:52094 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:15:52.575 00:00:10.393 TCP 1.101.0.1:3000 -> 22.102.0.1:43058 10 6452 1 2025-10-05 12:16:04.761 00:00:10.370 TCP 23.104.0.1:56486 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:16:53.000 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46168 10 6452 1 2025-10-05 12:17:05.170 00:00:10.366 TCP 23.104.0.1:58750 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:17:53.178 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45302 10 6452 1 2025-10-05 12:18:07.755 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 12:18:07.745 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 12:18:05.571 00:00:10.370 TCP 23.104.0.1:57976 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:14:37.975 00:05:01.994 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 12:18:53.393 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55822 10 6452 1 2025-10-05 12:19:05.977 00:00:10.365 TCP 23.104.0.1:34266 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:15:37.978 00:05:01.989 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 12:19:53.601 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53628 10 6452 1 2025-10-05 12:20:06.385 00:00:10.360 TCP 23.104.0.1:53222 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:20:53.819 00:00:10.391 TCP 1.101.0.1:3000 -> 22.102.0.1:42050 10 6452 1 2025-10-05 12:21:06.787 00:00:10.364 TCP 23.104.0.1:56296 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:21:54.254 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42646 11 6492 1 2025-10-05 12:22:07.190 00:00:10.328 TCP 23.104.0.1:56884 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:22:54.485 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41564 10 6452 1 2025-10-05 12:23:08.054 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 12:23:08.124 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 12:23:07.555 00:00:10.325 TCP 23.104.0.1:53222 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:23:54.691 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51866 10 6452 1 2025-10-05 12:24:07.920 00:00:10.394 TCP 23.104.0.1:56726 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:20:37.978 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 12:24:54.925 00:00:10.759 TCP 1.101.0.1:3000 -> 22.102.0.1:44680 10 6452 1 2025-10-05 12:25:08.349 00:00:10.364 TCP 23.104.0.1:39866 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:21:37.979 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 12:25:55.727 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:37018 11 6504 1 2025-10-05 12:26:08.749 00:00:10.325 TCP 23.104.0.1:36474 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:26:55.989 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:44862 10 6452 1 2025-10-05 12:27:09.122 00:00:10.365 TCP 23.104.0.1:38562 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:28:08.180 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 12:27:56.178 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56812 10 6452 1 2025-10-05 12:28:08.081 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 12:28:09.528 00:00:10.365 TCP 23.104.0.1:42898 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:28:56.387 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38566 10 6452 1 2025-10-05 12:29:09.933 00:00:10.372 TCP 23.104.0.1:36454 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:29:56.606 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37778 10 6452 1 2025-10-05 12:30:10.347 00:00:10.369 TCP 23.104.0.1:40218 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:26:37.978 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 12:30:56.787 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51404 11 6492 1 2025-10-05 12:31:10.752 00:00:10.386 TCP 23.104.0.1:53786 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:27:37.981 00:05:01.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 12:31:56.964 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:33016 10 6452 1 2025-10-05 12:32:11.173 00:00:10.366 TCP 23.104.0.1:57344 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:32:57.156 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49424 10 6452 1 2025-10-05 12:33:08.052 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 12:33:08.413 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 12:33:11.577 00:00:10.368 TCP 23.104.0.1:52498 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:33:57.367 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57406 10 6452 1 2025-10-05 12:34:11.979 00:00:10.382 TCP 23.104.0.1:48568 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:34:57.574 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33684 10 6452 1 2025-10-05 12:35:12.408 00:00:11.039 TCP 23.104.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:35:57.787 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33520 10 6452 1 2025-10-05 12:36:13.516 00:00:10.366 TCP 23.104.0.1:33134 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:32:37.978 00:05:01.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 12:36:57.966 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34336 12 6556 1 2025-10-05 12:37:13.917 00:00:10.332 TCP 23.104.0.1:43212 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:33:37.980 00:05:01.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 12:38:08.311 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 12:37:58.194 00:00:10.589 TCP 1.101.0.1:3000 -> 22.102.0.1:60018 10 6452 1 2025-10-05 12:38:08.371 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 12:38:14.290 00:00:10.362 TCP 23.104.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:38:58.815 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37306 10 6452 1 2025-10-05 12:39:14.692 00:00:10.341 TCP 23.104.0.1:44822 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:39:58.986 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54780 10 6452 1 2025-10-05 12:40:15.107 00:00:10.366 TCP 23.104.0.1:56452 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:40:59.214 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60022 10 6452 1 2025-10-05 12:41:15.510 00:00:10.365 TCP 23.104.0.1:33288 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:41:59.427 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37622 10 6452 1 2025-10-05 12:42:15.913 00:00:10.327 TCP 23.104.0.1:37706 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:38:37.980 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 12:43:08.436 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 12:43:08.380 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 12:42:59.640 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57398 10 6452 1 2025-10-05 12:43:16.277 00:00:10.367 TCP 23.104.0.1:59478 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:39:37.983 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 12:43:59.858 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:47258 10 6452 1 2025-10-05 12:44:16.680 00:00:10.368 TCP 23.104.0.1:39386 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:45:00.084 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43704 10 6452 1 2025-10-05 12:45:17.111 00:00:10.322 TCP 23.104.0.1:52480 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:46:00.257 00:00:10.499 TCP 1.101.0.1:3000 -> 22.102.0.1:48990 10 6452 1 2025-10-05 12:46:17.470 00:00:10.364 TCP 23.104.0.1:45686 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:47:00.801 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34064 10 6452 1 2025-10-05 12:47:17.872 00:00:10.364 TCP 23.104.0.1:40742 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:48:00.974 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36772 10 6452 1 2025-10-05 12:48:08.568 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 12:48:08.474 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 12:48:18.274 00:00:10.370 TCP 23.104.0.1:49050 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:44:37.982 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 12:49:01.219 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:36370 12 10369 1 2025-10-05 12:49:18.681 00:00:10.447 TCP 23.104.0.1:33342 -> 1.101.0.1:3000 15 1926 1 2025-10-05 12:45:37.985 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 12:50:01.438 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58706 10 6452 1 2025-10-05 12:50:19.169 00:00:10.364 TCP 23.104.0.1:44992 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:51:01.646 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49518 10 6452 1 2025-10-05 12:51:19.568 00:00:10.321 TCP 23.104.0.1:49564 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:52:01.860 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40694 10 6452 1 2025-10-05 12:52:19.929 00:00:10.382 TCP 23.104.0.1:60980 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:53:08.705 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 12:53:08.776 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 12:53:02.037 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38192 10 6452 1 2025-10-05 12:53:20.347 00:00:10.362 TCP 23.104.0.1:32788 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:54:02.207 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:54560 10 6452 1 2025-10-05 12:54:20.747 00:00:10.319 TCP 23.104.0.1:55546 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:50:37.982 00:05:02.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-05 12:55:02.378 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38142 10 6452 1 2025-10-05 12:55:21.108 00:00:10.363 TCP 23.104.0.1:55494 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:51:37.987 00:05:01.997 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-05 12:56:02.594 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:39738 10 6452 1 2025-10-05 12:56:21.517 00:00:10.371 TCP 23.104.0.1:44640 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:57:02.762 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59580 10 6452 1 2025-10-05 12:57:21.923 00:00:10.374 TCP 23.104.0.1:42504 -> 1.101.0.1:3000 11 1507 1 2025-10-05 12:58:08.727 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-05 12:58:08.607 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-05 12:58:02.981 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:49370 10 6452 1 2025-10-05 12:58:22.331 00:00:10.983 TCP 23.104.0.1:48410 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 164, total bytes: 507785, total packets: 1595, avg bps: 1093, avg pps: 0, avg bpp: 318 Time window: 2025-10-05 11:56:37 - 2025-10-05 12:58:33 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0050s User: 0.0000s Wall: 0.0022s flows/second: 73052.9 Runtime: 0.0023s