Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-06 11:58:42.376 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54214 10 6452 1 2025-10-06 11:59:06.793 00:00:10.320 TCP 23.104.0.1:35408 -> 1.101.0.1:3000 11 1507 1 2025-10-06 11:59:42.587 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50008 10 6452 1 2025-10-06 12:00:07.149 00:00:10.362 TCP 23.104.0.1:54924 -> 1.101.0.1:3000 11 1507 1 2025-10-06 11:56:38.496 00:05:01.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 12:00:42.756 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36292 10 6452 1 2025-10-06 12:01:07.550 00:00:10.367 TCP 23.104.0.1:56902 -> 1.101.0.1:3000 11 1507 1 2025-10-06 11:57:38.499 00:05:01.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 12:01:42.983 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37694 13 6608 1 2025-10-06 12:02:07.959 00:00:10.370 TCP 23.104.0.1:42240 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:02:43.206 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44092 10 6452 1 2025-10-06 12:03:08.367 00:00:10.364 TCP 23.104.0.1:46248 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:03:36.568 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 12:03:36.560 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 12:03:43.437 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56242 10 6452 1 2025-10-06 12:04:08.767 00:00:10.368 TCP 23.104.0.1:33478 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:04:43.618 00:00:10.896 TCP 1.101.0.1:3000 -> 22.102.0.1:56166 10 6452 1 2025-10-06 12:05:09.174 00:00:10.374 TCP 23.104.0.1:57320 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:05:44.550 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:60460 10 6452 1 2025-10-06 12:06:09.586 00:00:10.367 TCP 23.104.0.1:53362 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:02:38.509 00:05:01.975 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 12:06:44.769 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50564 10 6452 1 2025-10-06 12:07:09.990 00:00:11.116 TCP 23.104.0.1:60522 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:03:38.516 00:05:01.966 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 12:07:44.987 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34894 10 6452 1 2025-10-06 12:08:11.146 00:00:10.555 TCP 23.104.0.1:58960 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:08:36.490 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 12:08:36.593 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 12:08:45.218 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36872 10 6452 1 2025-10-06 12:09:11.740 00:00:10.327 TCP 23.104.0.1:57170 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:09:45.435 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34642 11 6492 1 2025-10-06 12:10:12.106 00:00:10.324 TCP 23.104.0.1:59292 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:10:45.653 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36440 10 6452 1 2025-10-06 12:11:12.469 00:00:10.325 TCP 23.104.0.1:36496 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:11:45.868 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36530 10 6452 1 2025-10-06 12:12:12.831 00:00:10.379 TCP 23.104.0.1:60448 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:08:38.513 00:05:01.972 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 12:12:46.065 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57060 10 6452 1 2025-10-06 12:13:13.245 00:00:10.362 TCP 23.104.0.1:51298 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:13:36.871 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 12:13:36.810 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 12:09:38.515 00:05:01.968 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 12:13:46.291 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50928 10 6452 1 2025-10-06 12:14:13.646 00:00:10.365 TCP 23.104.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:14:46.518 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:52882 10 6452 1 2025-10-06 12:15:14.058 00:00:10.365 TCP 23.104.0.1:43506 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:15:46.700 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55908 10 6452 1 2025-10-06 12:16:14.462 00:00:10.363 TCP 23.104.0.1:40738 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:16:46.920 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:49484 10 6452 1 2025-10-06 12:17:14.863 00:00:10.368 TCP 23.104.0.1:56672 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:17:47.151 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51646 10 6452 1 2025-10-06 12:18:15.270 00:00:10.380 TCP 23.104.0.1:52254 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:18:36.975 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 12:14:38.516 00:05:01.973 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 12:18:37.157 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 12:18:47.365 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33240 10 6452 1 2025-10-06 12:19:15.690 00:00:10.365 TCP 23.104.0.1:49490 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:15:38.517 00:05:01.969 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 12:19:47.537 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:57312 10 6452 1 2025-10-06 12:20:16.107 00:00:10.365 TCP 23.104.0.1:44768 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:20:47.788 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35868 12 6556 1 2025-10-06 12:21:16.510 00:00:10.369 TCP 23.104.0.1:48602 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:21:48.007 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:52546 10 6452 1 2025-10-06 12:22:16.917 00:00:10.390 TCP 23.104.0.1:43472 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:22:48.182 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33814 10 6452 1 2025-10-06 12:23:17.355 00:00:10.369 TCP 23.104.0.1:46116 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:23:36.763 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 12:23:36.825 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 12:23:48.396 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42098 10 6452 1 2025-10-06 12:24:17.758 00:00:10.369 TCP 23.104.0.1:35670 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:20:38.517 00:05:01.974 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 12:24:48.603 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59644 10 6452 1 2025-10-06 12:25:18.162 00:00:10.325 TCP 23.104.0.1:45194 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:21:38.518 00:05:01.969 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 12:25:48.773 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36328 10 6452 1 2025-10-06 12:26:18.526 00:00:10.362 TCP 23.104.0.1:45920 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:26:48.988 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53080 10 6452 1 2025-10-06 12:27:18.930 00:00:10.386 TCP 23.104.0.1:52362 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:27:49.212 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49396 10 6452 1 2025-10-06 12:28:36.879 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 12:28:36.795 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 12:28:19.371 00:00:19.234 TCP 23.104.0.1:49040 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:28:49.442 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47336 10 6452 1 2025-10-06 12:29:28.649 00:00:10.319 TCP 23.104.0.1:36504 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:29:49.664 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41712 10 6452 1 2025-10-06 12:26:38.518 00:05:01.975 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 12:30:29.015 00:00:10.819 TCP 23.104.0.1:54842 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:30:49.883 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40136 10 6452 1 2025-10-06 12:31:29.875 00:00:10.608 TCP 23.104.0.1:33090 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:27:38.520 00:05:01.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 12:31:50.075 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59222 10 6452 1 2025-10-06 12:32:30.521 00:00:10.360 TCP 23.104.0.1:50496 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:32:50.247 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:55166 10 6452 1 2025-10-06 12:33:37.297 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 12:33:30.927 00:00:10.346 TCP 23.104.0.1:46546 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:33:37.370 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 12:33:50.498 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40878 10 6452 1 2025-10-06 12:34:31.316 00:00:10.322 TCP 23.104.0.1:49970 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:34:50.708 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:46472 11 6504 1 2025-10-06 12:35:31.676 00:00:10.371 TCP 23.104.0.1:52034 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:35:50.971 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:50526 10 6452 1 2025-10-06 12:32:38.519 00:05:01.974 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 12:36:32.101 00:00:10.324 TCP 23.104.0.1:59054 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:36:51.157 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46206 10 6452 1 2025-10-06 12:33:38.522 00:05:01.968 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 12:37:32.463 00:00:10.334 TCP 23.104.0.1:52558 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:37:51.384 00:00:10.260 TCP 1.101.0.1:3000 -> 22.102.0.1:34172 10 6452 1 2025-10-06 12:38:37.099 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 12:38:37.348 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 12:38:32.837 00:00:10.386 TCP 23.104.0.1:59386 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:38:51.689 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55758 10 6452 1 2025-10-06 12:39:33.261 00:00:10.367 TCP 23.104.0.1:57772 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:39:51.906 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:35420 10 6452 1 2025-10-06 12:40:33.667 00:00:10.364 TCP 23.104.0.1:33762 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:40:52.113 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57856 10 6452 1 2025-10-06 12:41:34.095 00:00:10.362 TCP 23.104.0.1:48280 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:41:52.321 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35164 10 6452 1 2025-10-06 12:38:38.521 00:05:01.973 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 12:42:34.497 00:00:10.325 TCP 23.104.0.1:53062 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:42:52.537 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44518 10 6452 1 2025-10-06 12:43:37.339 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 12:43:37.497 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 12:39:38.523 00:05:01.968 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 12:43:34.858 00:00:10.376 TCP 23.104.0.1:33738 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:43:52.751 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56862 10 6452 1 2025-10-06 12:44:35.277 00:00:10.362 TCP 23.104.0.1:38030 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:44:52.964 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:32926 10 6452 1 2025-10-06 12:45:35.679 00:00:10.328 TCP 23.104.0.1:41928 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:45:53.192 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35116 10 6452 1 2025-10-06 12:46:36.056 00:00:10.366 TCP 23.104.0.1:38416 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:46:53.363 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54754 10 6452 1 2025-10-06 12:47:36.464 00:00:10.363 TCP 23.104.0.1:36082 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:47:53.573 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57226 10 6452 1 2025-10-06 12:48:37.616 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 12:44:38.522 00:05:01.973 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 12:48:37.419 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 12:48:36.872 00:00:10.380 TCP 23.104.0.1:37006 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:48:53.751 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54274 10 6452 1 2025-10-06 12:45:38.524 00:05:01.969 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 12:49:37.292 00:00:10.365 TCP 23.104.0.1:46686 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:49:53.968 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:44402 10 6452 1 2025-10-06 12:50:37.696 00:00:10.362 TCP 23.104.0.1:41208 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:50:54.162 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41040 10 6452 1 2025-10-06 12:51:38.108 00:00:10.366 TCP 23.104.0.1:37736 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:51:54.387 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36236 10 6452 1 2025-10-06 12:52:38.514 00:00:10.367 TCP 23.104.0.1:60982 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:52:54.607 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60226 10 6452 1 2025-10-06 12:53:37.335 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 12:53:37.379 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 12:53:38.925 00:00:10.348 TCP 23.104.0.1:49296 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:53:54.823 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51900 10 6452 1 2025-10-06 12:50:38.532 00:05:01.964 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-06 12:54:39.310 00:00:10.328 TCP 23.104.0.1:55504 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:54:55.070 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:39652 10 6452 1 2025-10-06 12:51:38.534 00:05:01.959 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-06 12:55:39.677 00:00:10.368 TCP 23.104.0.1:44262 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:55:55.269 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36168 10 6452 1 2025-10-06 12:56:40.104 00:00:10.324 TCP 23.104.0.1:35688 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:56:55.480 00:00:10.742 TCP 1.101.0.1:3000 -> 22.102.0.1:41966 10 6452 1 2025-10-06 12:57:40.460 00:00:10.361 TCP 23.104.0.1:44616 -> 1.101.0.1:3000 11 1507 1 2025-10-06 12:57:56.260 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48278 10 6452 1 2025-10-06 12:58:37.471 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-06 12:58:37.645 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-06 12:58:40.858 00:00:10.342 TCP 23.104.0.1:39832 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498700, total packets: 1579, avg bps: 1068, avg pps: 0, avg bpp: 315 Time window: 2025-10-06 11:56:38 - 2025-10-06 12:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0022s Wall: 0.0028s flows/second: 58631.6 Runtime: 0.0028s