Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 03:58:53.897 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:43704 10 6452 1 2025-10-12 03:59:00.110 00:00:10.359 TCP 23.104.0.1:38518 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:59:54.087 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43768 10 6452 1 2025-10-12 04:00:00.510 00:00:10.368 TCP 23.104.0.1:50476 -> 1.101.0.1:3000 11 1507 1 2025-10-12 03:55:43.465 00:05:57.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 03:56:41.050 00:05:02.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 04:00:54.303 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40764 10 6452 1 2025-10-12 04:01:00.917 00:00:10.375 TCP 23.104.0.1:55118 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:01:20.029 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 04:01:20.020 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 04:01:54.518 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47286 10 6452 1 2025-10-12 04:02:01.336 00:00:10.672 TCP 23.104.0.1:59676 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:02:54.730 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44934 10 6452 1 2025-10-12 04:03:02.054 00:00:10.364 TCP 23.104.0.1:45810 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:03:54.944 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36494 10 6452 1 2025-10-12 04:04:02.455 00:00:10.377 TCP 23.104.0.1:42030 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:04:55.176 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53180 10 6452 1 2025-10-12 04:05:02.859 00:00:10.395 TCP 23.104.0.1:44518 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:05:55.394 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39384 10 6452 1 2025-10-12 04:06:03.270 00:00:10.326 TCP 23.104.0.1:33404 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:06:19.967 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 04:06:20.034 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 04:02:41.052 00:05:02.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 04:01:43.468 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-10-12 04:06:55.618 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38526 10 6452 1 2025-10-12 04:07:03.632 00:00:10.366 TCP 23.104.0.1:49036 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:07:55.784 00:00:10.314 TCP 1.101.0.1:3000 -> 22.102.0.1:46878 10 6452 1 2025-10-12 04:08:04.044 00:00:10.339 TCP 23.104.0.1:53374 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:08:56.139 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58838 10 6452 1 2025-10-12 04:09:04.421 00:00:10.368 TCP 23.104.0.1:38420 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:09:56.354 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41126 10 6452 1 2025-10-12 04:10:04.825 00:00:10.415 TCP 23.104.0.1:45608 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:10:56.562 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36300 10 6452 1 2025-10-12 04:11:05.294 00:00:10.367 TCP 23.104.0.1:47546 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:11:20.393 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 04:11:20.427 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 04:11:56.780 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44406 10 6452 1 2025-10-12 04:12:05.700 00:00:10.368 TCP 23.104.0.1:60274 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:08:41.052 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 04:08:41.057 00:05:02.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 04:12:56.986 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:41802 10 6452 1 2025-10-12 04:13:06.112 00:00:10.362 TCP 23.104.0.1:59060 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:13:57.171 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52124 10 6452 1 2025-10-12 04:14:06.508 00:00:10.365 TCP 23.104.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:14:57.380 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:50410 10 6452 1 2025-10-12 04:15:06.912 00:00:10.464 TCP 23.104.0.1:41496 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:15:57.647 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42752 10 6452 1 2025-10-12 04:16:20.359 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 04:16:07.422 00:00:10.361 TCP 23.104.0.1:56430 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:16:20.303 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 04:16:57.857 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36818 10 6452 1 2025-10-12 04:17:07.820 00:00:10.367 TCP 23.104.0.1:59862 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:17:58.093 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:44958 10 6452 1 2025-10-12 04:18:08.228 00:00:10.361 TCP 23.104.0.1:57206 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:14:41.055 00:05:02.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 04:14:41.057 00:05:02.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 04:18:58.300 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48672 10 6452 1 2025-10-12 04:19:08.627 00:00:10.366 TCP 23.104.0.1:47938 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:19:58.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46838 10 6452 1 2025-10-12 04:20:09.027 00:00:23.642 TCP 23.104.0.1:38218 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:20:58.734 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:33776 10 6452 1 2025-10-12 04:21:20.477 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 04:21:20.460 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 04:21:22.714 00:00:10.362 TCP 23.104.0.1:35318 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:21:58.906 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42766 10 6452 1 2025-10-12 04:22:23.113 00:00:10.362 TCP 23.104.0.1:49444 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:22:59.141 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51390 10 6452 1 2025-10-12 04:23:23.517 00:00:10.376 TCP 23.104.0.1:45998 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:23:59.356 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45270 10 6452 1 2025-10-12 04:24:23.940 00:00:10.377 TCP 23.104.0.1:53378 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:20:41.059 00:05:02.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 04:20:41.057 00:05:02.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 04:24:59.573 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:32888 10 6452 1 2025-10-12 04:25:24.354 00:00:10.369 TCP 23.104.0.1:40938 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:25:59.744 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58864 10 6452 1 2025-10-12 04:26:20.515 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 04:26:20.621 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 04:26:24.759 00:00:10.369 TCP 23.104.0.1:54044 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:26:59.954 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37958 10 6452 1 2025-10-12 04:27:25.166 00:00:10.365 TCP 23.104.0.1:37954 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:28:00.198 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:33792 11 6504 1 2025-10-12 04:28:25.570 00:00:10.324 TCP 23.104.0.1:58396 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:29:00.463 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60272 10 6452 1 2025-10-12 04:29:25.933 00:00:10.372 TCP 23.104.0.1:53796 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:30:00.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37074 10 6452 1 2025-10-12 04:30:26.340 00:00:10.366 TCP 23.104.0.1:34864 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:26:41.059 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 04:26:41.061 00:05:02.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 04:31:00.893 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51868 10 6452 1 2025-10-12 04:31:20.751 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 04:31:20.705 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 04:31:26.747 00:00:10.368 TCP 23.104.0.1:52346 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:32:01.113 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47792 10 6452 1 2025-10-12 04:32:27.158 00:00:10.326 TCP 23.104.0.1:43638 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:33:01.322 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55510 10 6452 1 2025-10-12 04:33:27.521 00:00:10.362 TCP 23.104.0.1:39264 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:34:01.538 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41252 10 6452 1 2025-10-12 04:34:27.920 00:00:10.330 TCP 23.104.0.1:59264 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:35:01.714 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50428 10 6452 1 2025-10-12 04:35:28.291 00:00:10.364 TCP 23.104.0.1:34068 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:36:01.929 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:46708 10 6452 1 2025-10-12 04:36:20.504 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 04:36:20.540 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 04:36:28.695 00:00:10.360 TCP 23.104.0.1:47488 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:32:41.061 00:05:02.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 04:32:41.059 00:05:02.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 04:37:02.123 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49532 10 6452 1 2025-10-12 04:37:29.109 00:00:10.381 TCP 23.104.0.1:51862 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:38:02.301 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:53258 10 6452 1 2025-10-12 04:38:29.535 00:00:10.367 TCP 23.104.0.1:58032 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:39:02.583 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49508 10 6452 1 2025-10-12 04:39:29.946 00:00:10.371 TCP 23.104.0.1:36706 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:40:02.803 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:34106 10 6452 1 2025-10-12 04:40:30.361 00:00:10.360 TCP 23.104.0.1:39226 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:41:20.987 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 04:41:03.101 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38238 10 6452 1 2025-10-12 04:41:20.734 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 04:41:30.758 00:00:10.370 TCP 23.104.0.1:57964 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:42:03.326 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45920 10 6452 1 2025-10-12 04:42:31.171 00:00:10.452 TCP 23.104.0.1:45948 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:38:41.060 00:05:02.425 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 04:38:41.063 00:05:02.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 04:43:03.550 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47384 10 6452 1 2025-10-12 04:43:31.665 00:00:10.392 TCP 23.104.0.1:44204 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:44:03.723 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43884 10 6452 1 2025-10-12 04:44:32.103 00:00:10.360 TCP 23.104.0.1:50598 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:45:03.937 00:00:10.323 TCP 1.101.0.1:3000 -> 22.102.0.1:33770 10 6452 1 2025-10-12 04:45:32.507 00:00:10.438 TCP 23.104.0.1:52288 -> 1.101.0.1:3000 15 1926 1 2025-10-12 04:46:04.292 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:50260 12 10375 1 2025-10-12 04:46:20.679 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 04:46:21.101 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 04:46:32.984 00:00:10.365 TCP 23.104.0.1:38524 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:47:04.532 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36122 10 6452 1 2025-10-12 04:47:33.389 00:00:10.323 TCP 23.104.0.1:50344 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:48:04.751 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49294 10 6452 1 2025-10-12 04:44:41.067 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 04:48:33.753 00:00:10.368 TCP 23.104.0.1:54466 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:44:41.064 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 04:49:04.970 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:35862 10 6452 1 2025-10-12 04:49:34.159 00:00:10.323 TCP 23.104.0.1:46846 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:50:05.205 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43094 10 6452 1 2025-10-12 04:50:34.522 00:00:10.422 TCP 23.104.0.1:41890 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:51:21.025 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 04:51:05.421 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33186 10 6452 1 2025-10-12 04:51:21.247 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 04:51:34.985 00:00:10.367 TCP 23.104.0.1:48368 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:52:05.644 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58306 10 6452 1 2025-10-12 04:52:35.391 00:00:10.363 TCP 23.104.0.1:32816 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:53:05.819 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56848 10 6452 1 2025-10-12 04:53:35.792 00:00:10.784 TCP 23.104.0.1:38732 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:54:06.065 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32980 10 6452 1 2025-10-12 04:50:41.065 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 04:54:36.613 00:00:10.323 TCP 23.104.0.1:50524 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:50:41.068 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 04:55:06.289 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37914 10 6452 1 2025-10-12 04:55:36.973 00:00:10.367 TCP 23.104.0.1:46834 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:56:06.462 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40718 10 6452 1 2025-10-12 04:56:21.058 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 04:56:21.222 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 04:56:37.382 00:00:10.364 TCP 23.104.0.1:34748 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:57:06.671 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54246 10 6452 1 2025-10-12 04:57:37.782 00:00:10.385 TCP 23.104.0.1:57996 -> 1.101.0.1:3000 11 1507 1 2025-10-12 04:58:06.895 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60682 10 6452 1 2025-10-12 04:58:38.210 00:00:10.368 TCP 23.104.0.1:42124 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502813, total packets: 1580, avg bps: 1062, avg pps: 0, avg bpp: 318 Time window: 2025-10-12 03:55:43 - 2025-10-12 04:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0017s Wall: 0.0023s flows/second: 72636.3 Runtime: 0.0023s