Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-12 08:59:06.361 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50340 10 6452 1 2025-10-12 08:59:25.017 00:00:10.361 TCP 23.104.0.1:37738 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:00:06.574 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42692 10 6452 1 2025-10-12 09:00:25.413 00:00:10.368 TCP 23.104.0.1:34276 -> 1.101.0.1:3000 11 1507 1 2025-10-12 08:56:41.129 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 08:56:41.128 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 09:01:06.793 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35208 10 6452 1 2025-10-12 09:01:26.330 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 09:01:26.262 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 09:01:25.819 00:00:10.329 TCP 23.104.0.1:50376 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:02:07.012 00:00:10.464 TCP 1.101.0.1:3000 -> 22.102.0.1:42968 10 6452 1 2025-10-12 09:02:26.184 00:00:10.364 TCP 23.104.0.1:38498 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:03:07.516 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:36698 11 6504 1 2025-10-12 09:03:26.590 00:00:10.328 TCP 23.104.0.1:39852 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:04:07.784 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36234 10 6452 1 2025-10-12 09:04:26.958 00:00:10.372 TCP 23.104.0.1:42274 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:05:08.004 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35190 10 6452 1 2025-10-12 09:05:27.357 00:00:10.374 TCP 23.104.0.1:53714 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:06:08.223 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58828 10 6452 1 2025-10-12 09:06:26.278 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 09:06:26.170 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 09:02:41.128 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 09:06:27.769 00:00:10.371 TCP 23.104.0.1:51940 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:02:41.131 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 09:07:08.460 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59164 10 6452 1 2025-10-12 09:07:28.178 00:00:10.363 TCP 23.104.0.1:60042 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:08:08.676 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44522 10 6452 1 2025-10-12 09:08:28.580 00:00:10.363 TCP 23.104.0.1:55490 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:09:08.899 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38548 10 6452 1 2025-10-12 09:09:28.985 00:00:10.376 TCP 23.104.0.1:55624 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:10:09.127 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45096 10 6452 1 2025-10-12 09:10:29.391 00:00:10.359 TCP 23.104.0.1:42190 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:11:09.346 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43496 10 6452 1 2025-10-12 09:11:26.217 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 09:11:26.430 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 09:11:29.787 00:00:21.034 TCP 23.104.0.1:57348 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:12:09.572 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58398 10 6452 1 2025-10-12 09:08:41.129 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 09:08:41.131 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 09:12:40.874 00:00:10.365 TCP 23.104.0.1:53574 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:13:09.793 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57000 10 6452 1 2025-10-12 09:13:41.276 00:00:10.362 TCP 23.104.0.1:56944 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:14:10.012 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51462 10 6452 1 2025-10-12 09:14:41.682 00:00:10.377 TCP 23.104.0.1:38120 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:15:10.235 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33756 10 6452 1 2025-10-12 09:15:42.105 00:00:10.364 TCP 23.104.0.1:54624 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:16:10.448 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52498 10 6452 1 2025-10-12 09:16:26.387 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 09:16:26.326 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 09:16:42.508 00:00:10.365 TCP 23.104.0.1:49362 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:17:10.629 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52454 10 6452 1 2025-10-12 09:17:42.912 00:00:10.358 TCP 23.104.0.1:57214 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:18:10.847 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47114 10 6452 1 2025-10-12 09:14:41.134 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 09:14:41.133 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 09:18:43.310 00:00:10.364 TCP 23.104.0.1:33406 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:19:11.081 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57948 10 6452 1 2025-10-12 09:19:43.721 00:00:10.366 TCP 23.104.0.1:46250 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:20:11.299 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43666 10 6452 1 2025-10-12 09:20:44.126 00:00:10.372 TCP 23.104.0.1:38690 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:21:11.522 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51848 10 6452 1 2025-10-12 09:21:26.648 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 09:21:26.835 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 09:21:44.534 00:00:10.363 TCP 23.104.0.1:60656 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:22:11.698 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46794 10 6452 1 2025-10-12 09:22:44.942 00:00:10.375 TCP 23.104.0.1:34200 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:23:11.910 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54322 10 6452 1 2025-10-12 09:23:45.362 00:00:10.361 TCP 23.104.0.1:34408 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:24:12.118 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45128 10 6452 1 2025-10-12 09:20:41.133 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 09:20:41.133 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 09:24:45.762 00:00:10.380 TCP 23.104.0.1:52076 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:25:12.336 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35644 10 6452 1 2025-10-12 09:25:46.179 00:00:10.927 TCP 23.104.0.1:41276 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:26:26.543 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 09:26:12.508 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48710 10 6452 1 2025-10-12 09:26:26.480 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 09:26:47.141 00:00:10.363 TCP 23.104.0.1:45462 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:27:12.727 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34564 10 6452 1 2025-10-12 09:27:47.545 00:00:10.364 TCP 23.104.0.1:51740 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:28:12.942 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45726 10 6452 1 2025-10-12 09:28:47.947 00:00:10.326 TCP 23.104.0.1:60124 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:29:13.167 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52870 10 6452 1 2025-10-12 09:29:48.310 00:00:10.366 TCP 23.104.0.1:39546 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:30:13.341 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43472 10 6452 1 2025-10-12 09:26:41.133 00:05:02.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 09:26:41.136 00:05:02.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 09:30:48.717 00:00:10.376 TCP 23.104.0.1:37590 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:31:26.634 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 09:31:26.862 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 09:31:13.512 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37708 10 6452 1 2025-10-12 09:31:49.133 00:00:10.365 TCP 23.104.0.1:57610 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:32:13.681 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48970 10 6452 1 2025-10-12 09:32:49.540 00:00:10.325 TCP 23.104.0.1:38200 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:33:13.918 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45412 10 6452 1 2025-10-12 09:33:49.906 00:00:10.369 TCP 23.104.0.1:44706 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:34:14.132 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48672 10 6452 1 2025-10-12 09:34:50.311 00:00:10.361 TCP 23.104.0.1:39858 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:35:14.309 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55296 10 6452 1 2025-10-12 09:35:50.722 00:00:10.375 TCP 23.104.0.1:52866 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:36:26.886 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 09:36:14.525 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35476 10 6452 1 2025-10-12 09:36:26.952 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 09:32:41.135 00:05:02.446 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 09:32:41.138 00:05:02.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 09:36:51.133 00:00:10.363 TCP 23.104.0.1:47300 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:37:14.696 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47528 10 6452 1 2025-10-12 09:37:51.533 00:00:10.384 TCP 23.104.0.1:58962 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:38:14.913 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52286 10 6452 1 2025-10-12 09:38:51.961 00:00:10.368 TCP 23.104.0.1:41094 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:39:15.125 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41074 10 6452 1 2025-10-12 09:39:52.363 00:00:10.370 TCP 23.104.0.1:58082 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:40:15.338 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48786 10 6452 1 2025-10-12 09:40:52.772 00:00:10.374 TCP 23.104.0.1:54546 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:41:15.520 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55648 10 6452 1 2025-10-12 09:41:27.011 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 09:41:27.065 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 09:41:53.185 00:00:10.326 TCP 23.104.0.1:34596 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:42:15.734 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37748 10 6452 1 2025-10-12 09:38:41.141 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 09:38:41.144 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 09:42:53.544 00:00:10.364 TCP 23.104.0.1:47156 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:43:15.945 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:40076 10 6452 1 2025-10-12 09:43:53.955 00:00:10.381 TCP 23.104.0.1:50284 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:44:16.182 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53420 10 6452 1 2025-10-12 09:44:54.375 00:00:10.364 TCP 23.104.0.1:40014 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:45:16.354 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40672 10 6452 1 2025-10-12 09:45:54.779 00:00:10.456 TCP 23.104.0.1:39132 -> 1.101.0.1:3000 15 1926 1 2025-10-12 09:46:16.565 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:57764 12 10375 1 2025-10-12 09:46:27.052 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 09:46:27.066 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 09:46:55.273 00:00:10.362 TCP 23.104.0.1:54622 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:47:16.807 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60586 10 6452 1 2025-10-12 09:47:55.679 00:00:10.359 TCP 23.104.0.1:41350 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:48:16.981 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:50448 10 6452 1 2025-10-12 09:44:41.148 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 09:44:41.145 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 09:48:56.106 00:00:10.359 TCP 23.104.0.1:53934 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:49:17.171 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47580 10 6452 1 2025-10-12 09:49:56.502 00:00:10.324 TCP 23.104.0.1:34308 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:50:17.381 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45448 10 6452 1 2025-10-12 09:50:56.863 00:00:10.372 TCP 23.104.0.1:35056 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:51:27.065 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 09:51:17.556 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60414 10 6452 1 2025-10-12 09:51:27.222 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 09:51:57.277 00:00:10.333 TCP 23.104.0.1:58098 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:52:17.771 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41046 10 6452 1 2025-10-12 09:52:57.646 00:00:10.362 TCP 23.104.0.1:44156 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:53:17.979 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40678 10 6452 1 2025-10-12 09:53:58.045 00:00:10.367 TCP 23.104.0.1:45548 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:54:18.216 00:00:10.271 TCP 1.101.0.1:3000 -> 22.102.0.1:50452 10 6452 1 2025-10-12 09:50:41.145 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-12 09:50:41.149 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-12 09:54:58.449 00:00:10.324 TCP 23.104.0.1:53468 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:55:18.528 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48910 10 6452 1 2025-10-12 09:55:58.811 00:00:10.340 TCP 23.104.0.1:45666 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:56:26.962 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-12 09:56:27.171 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-12 09:56:18.771 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45378 10 6452 1 2025-10-12 09:56:59.189 00:00:10.367 TCP 23.104.0.1:43220 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:57:18.982 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57334 10 6452 1 2025-10-12 09:57:59.594 00:00:10.366 TCP 23.104.0.1:50610 -> 1.101.0.1:3000 11 1507 1 2025-10-12 09:58:19.205 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37740 10 6452 1 Summary: total flows: 163, total bytes: 501235, total packets: 1568, avg bps: 1081, avg pps: 0, avg bpp: 319 Time window: 2025-10-12 08:56:41 - 2025-10-12 09:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0027s User: 0.0027s Wall: 0.0025s flows/second: 65858.0 Runtime: 0.0025s