Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 04:58:55.120 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36566 10 6452 1 2025-10-11 04:59:37.279 00:00:10.325 TCP 23.104.0.1:43680 -> 1.101.0.1:3000 11 1507 1 2025-10-11 04:59:55.351 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49888 10 6452 1 2025-10-11 04:56:40.641 00:05:02.310 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 05:00:37.646 00:00:10.371 TCP 23.104.0.1:49532 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:00:52.335 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 05:00:52.328 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 05:00:55.575 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52398 10 6452 1 2025-10-11 04:56:42.948 00:05:57.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 05:01:38.062 00:00:10.361 TCP 23.104.0.1:40064 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:01:55.793 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54856 10 6452 1 2025-10-11 05:02:38.461 00:00:10.329 TCP 23.104.0.1:32798 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:02:56.010 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57082 10 6452 1 2025-10-11 05:03:38.825 00:00:10.323 TCP 23.104.0.1:42372 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:03:56.234 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60174 10 6452 1 2025-10-11 05:04:39.185 00:00:10.363 TCP 23.104.0.1:53434 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:04:56.406 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39842 10 6452 1 2025-10-11 05:05:39.582 00:00:10.374 TCP 23.104.0.1:42188 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:05:52.525 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 05:05:52.182 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 05:05:56.624 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39900 10 6452 1 2025-10-11 05:02:40.641 00:05:02.312 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 05:06:40.001 00:00:10.372 TCP 23.104.0.1:33826 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:06:56.848 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35180 10 6452 1 2025-10-11 05:02:42.948 00:05:57.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 05:07:40.411 00:00:10.700 TCP 23.104.0.1:54972 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:07:57.091 00:00:20.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54854 10 6452 1 2025-10-11 05:08:41.152 00:00:10.359 TCP 23.104.0.1:50948 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:09:07.339 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41820 10 6452 1 2025-10-11 05:09:41.550 00:00:10.328 TCP 23.104.0.1:34936 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:10:07.552 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33328 10 6452 1 2025-10-11 05:10:52.505 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 05:10:52.493 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 05:10:41.918 00:00:10.399 TCP 23.104.0.1:36238 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:11:07.780 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40366 10 6452 1 2025-10-11 05:11:42.365 00:00:10.324 TCP 23.104.0.1:52748 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:12:07.951 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33374 10 6452 1 2025-10-11 05:08:40.643 00:05:02.314 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 05:12:42.728 00:00:10.365 TCP 23.104.0.1:51346 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:13:08.189 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49542 10 6452 1 2025-10-11 05:08:42.952 00:05:57.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 05:13:43.136 00:00:10.364 TCP 23.104.0.1:44716 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:14:08.407 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41340 10 6452 1 2025-10-11 05:14:43.561 00:00:10.634 TCP 23.104.0.1:34356 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:15:08.627 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41514 10 6452 1 2025-10-11 05:15:52.737 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 05:15:44.234 00:00:10.324 TCP 23.104.0.1:47788 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:15:52.738 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 05:16:08.845 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47592 10 6452 1 2025-10-11 05:16:44.592 00:00:10.368 TCP 23.104.0.1:43552 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:17:09.080 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33872 10 6452 1 2025-10-11 05:17:45.006 00:00:10.360 TCP 23.104.0.1:52474 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:18:09.296 00:00:16.793 TCP 1.101.0.1:3000 -> 22.102.0.1:42418 10 6452 1 2025-10-11 05:14:40.642 00:05:02.314 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 05:18:45.406 00:00:10.326 TCP 23.104.0.1:38306 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:19:16.123 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46794 10 6452 1 2025-10-11 05:14:42.955 00:05:57.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 05:19:45.772 00:00:10.326 TCP 23.104.0.1:52942 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:20:16.334 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33206 10 6452 1 2025-10-11 05:20:52.857 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 05:20:52.923 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 05:20:46.138 00:00:10.369 TCP 23.104.0.1:43042 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:21:16.552 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56738 10 6452 1 2025-10-11 05:21:46.546 00:00:10.365 TCP 23.104.0.1:35070 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:22:16.773 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52978 10 6452 1 2025-10-11 05:22:46.947 00:00:10.368 TCP 23.104.0.1:55294 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:23:16.996 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42212 10 6452 1 2025-10-11 05:23:47.352 00:00:10.362 TCP 23.104.0.1:48216 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:24:17.224 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41274 10 6452 1 2025-10-11 05:20:40.645 00:05:02.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 05:24:47.754 00:00:10.329 TCP 23.104.0.1:39804 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:25:17.436 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:34268 10 6452 1 2025-10-11 05:20:42.955 00:05:57.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 05:25:52.894 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 05:25:52.809 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 05:25:48.115 00:00:10.363 TCP 23.104.0.1:40484 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:26:17.603 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:39134 10 6452 1 2025-10-11 05:26:48.516 00:00:10.383 TCP 23.104.0.1:35982 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:27:17.865 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:37496 10 6452 1 2025-10-11 05:27:48.973 00:00:10.371 TCP 23.104.0.1:33928 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:28:18.096 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48836 10 6452 1 2025-10-11 05:28:49.379 00:00:10.367 TCP 23.104.0.1:48086 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:29:18.270 00:00:21.838 TCP 1.101.0.1:3000 -> 22.102.0.1:53026 11 6504 1 2025-10-11 05:29:49.781 00:00:10.381 TCP 23.104.0.1:58290 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:30:30.156 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56158 10 6452 1 2025-10-11 05:26:40.649 00:05:02.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 05:30:52.874 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 05:30:52.802 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 05:30:50.201 00:00:10.362 TCP 23.104.0.1:40470 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:31:30.384 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41246 10 6452 1 2025-10-11 05:26:42.957 00:05:57.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 05:31:50.602 00:00:10.363 TCP 23.104.0.1:36888 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:32:30.601 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50208 10 6452 1 2025-10-11 05:32:51.009 00:00:10.364 TCP 23.104.0.1:58250 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:33:30.816 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50744 10 6452 1 2025-10-11 05:33:51.412 00:00:10.364 TCP 23.104.0.1:52720 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:34:31.038 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39022 10 6452 1 2025-10-11 05:34:51.820 00:00:10.374 TCP 23.104.0.1:43850 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:35:31.220 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48422 10 6452 1 2025-10-11 05:35:53.205 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 05:35:53.266 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 05:35:52.232 00:00:10.372 TCP 23.104.0.1:56240 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:36:31.439 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33296 10 6452 1 2025-10-11 05:32:40.650 00:05:02.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 05:36:52.639 00:00:10.322 TCP 23.104.0.1:59958 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:37:31.614 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38484 10 6452 1 2025-10-11 05:32:42.966 00:05:57.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 05:37:53.000 00:00:10.363 TCP 23.104.0.1:33162 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:38:31.830 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50890 10 6452 1 2025-10-11 05:38:53.402 00:00:10.373 TCP 23.104.0.1:42848 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:39:32.086 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50194 11 6492 1 2025-10-11 05:39:53.816 00:00:10.364 TCP 23.104.0.1:59054 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:40:32.299 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59842 10 6452 1 2025-10-11 05:40:53.171 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 05:40:53.195 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 05:40:54.214 00:00:10.382 TCP 23.104.0.1:36546 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:41:32.523 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36518 10 6452 1 2025-10-11 05:41:54.638 00:00:10.325 TCP 23.104.0.1:42794 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:42:32.700 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51314 10 6452 1 2025-10-11 05:38:40.651 00:05:02.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 05:42:55.004 00:00:10.324 TCP 23.104.0.1:47260 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:38:42.964 00:05:57.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 05:43:32.913 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35754 10 6452 1 2025-10-11 05:43:55.366 00:00:10.373 TCP 23.104.0.1:42932 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:44:33.124 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:42018 10 6452 1 2025-10-11 05:44:55.775 00:00:10.369 TCP 23.104.0.1:51428 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:45:33.383 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:39254 10 6452 1 2025-10-11 05:45:53.189 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 05:45:53.475 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 05:45:56.183 00:00:10.328 TCP 23.104.0.1:38514 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:46:33.648 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:43606 10 6452 1 2025-10-11 05:46:56.546 00:00:11.145 TCP 23.104.0.1:44258 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:47:33.852 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:37520 10 6452 1 2025-10-11 05:47:57.729 00:00:10.327 TCP 23.104.0.1:33718 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:48:34.036 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43996 10 6452 1 2025-10-11 05:44:40.652 00:05:02.323 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 05:48:58.108 00:00:10.342 TCP 23.104.0.1:56456 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:44:42.967 00:05:57.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 05:49:34.208 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45918 10 6452 1 2025-10-11 05:49:58.471 00:00:10.362 TCP 23.104.0.1:59076 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:50:34.381 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39268 10 6452 1 2025-10-11 05:50:53.247 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 05:50:53.552 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 05:50:58.867 00:00:10.367 TCP 23.104.0.1:39146 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:51:34.596 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39194 10 6452 1 2025-10-11 05:51:59.282 00:00:10.379 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:52:34.805 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51444 10 6452 1 2025-10-11 05:52:59.714 00:00:10.378 TCP 23.104.0.1:38742 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:53:35.030 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55198 10 6452 1 2025-10-11 05:54:00.128 00:00:10.378 TCP 23.104.0.1:51638 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:54:35.241 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37364 10 6452 1 2025-10-11 05:50:40.656 00:05:02.317 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 05:55:00.547 00:00:10.385 TCP 23.104.0.1:58456 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:50:42.969 00:05:57.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 05:55:35.470 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33170 12 10375 1 2025-10-11 05:55:53.553 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 05:55:53.578 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 05:56:00.966 00:00:10.454 TCP 23.104.0.1:52362 -> 1.101.0.1:3000 15 1926 1 2025-10-11 05:56:35.687 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39024 10 6452 1 2025-10-11 05:57:01.463 00:00:10.324 TCP 23.104.0.1:53932 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:57:35.904 00:00:10.388 TCP 1.101.0.1:3000 -> 22.102.0.1:58428 10 6452 1 2025-10-11 05:58:01.824 00:00:10.321 TCP 23.104.0.1:42572 -> 1.101.0.1:3000 11 1507 1 2025-10-11 05:58:36.330 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46644 10 6452 1 Summary: total flows: 163, total bytes: 501275, total packets: 1569, avg bps: 1076, avg pps: 0, avg bpp: 319 Time window: 2025-10-11 04:56:40 - 2025-10-11 05:58:46 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0126s User: 0.0011s Wall: 0.0140s flows/second: 11662.8 Runtime: 0.0140s