Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-13 16:58:55.300 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50466 10 6452 1 2025-10-13 16:59:19.713 00:00:10.331 TCP 23.104.0.1:33310 -> 1.101.0.1:3000 11 1507 1 2025-10-13 16:59:55.521 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43950 10 6452 1 2025-10-13 17:00:20.108 00:00:10.372 TCP 23.104.0.1:51312 -> 1.101.0.1:3000 11 1507 1 2025-10-13 16:56:41.764 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 16:56:41.768 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 17:00:55.738 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38664 10 6452 1 2025-10-13 17:01:20.527 00:00:10.465 TCP 23.104.0.1:41776 -> 1.101.0.1:3000 13 1611 1 2025-10-13 17:01:55.912 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51700 10 6452 1 2025-10-13 17:02:04.746 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 17:02:04.839 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 17:02:21.029 00:00:10.364 TCP 23.104.0.1:37992 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:02:56.129 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60348 10 6452 1 2025-10-13 17:03:21.431 00:00:10.373 TCP 23.104.0.1:33864 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:03:56.337 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49424 10 6452 1 2025-10-13 17:04:21.843 00:00:10.381 TCP 23.104.0.1:55682 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:04:56.516 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38038 10 6452 1 2025-10-13 17:05:22.266 00:00:10.364 TCP 23.104.0.1:57864 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:05:56.738 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50092 10 6452 1 2025-10-13 17:06:22.667 00:00:10.326 TCP 23.104.0.1:38710 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:02:41.766 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 17:02:41.769 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 17:07:04.734 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 17:07:04.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 17:06:56.913 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52702 10 6452 1 2025-10-13 17:07:23.033 00:00:10.327 TCP 23.104.0.1:50836 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:07:57.128 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60434 10 6452 1 2025-10-13 17:08:23.395 00:00:10.328 TCP 23.104.0.1:35050 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:08:57.344 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59144 10 6452 1 2025-10-13 17:09:23.758 00:00:10.379 TCP 23.104.0.1:54432 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:09:57.558 00:00:10.687 TCP 1.101.0.1:3000 -> 22.102.0.1:33326 10 6452 1 2025-10-13 17:10:24.173 00:00:10.326 TCP 23.104.0.1:37712 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:10:58.281 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:44488 12 10375 1 2025-10-13 17:11:24.538 00:00:10.435 TCP 23.104.0.1:56578 -> 1.101.0.1:3000 15 1926 1 2025-10-13 17:12:05.114 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 17:12:04.784 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 17:11:58.483 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47524 10 6452 1 2025-10-13 17:12:25.018 00:00:10.368 TCP 23.104.0.1:51246 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:08:41.770 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 17:08:41.771 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 17:12:58.695 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43012 10 6452 1 2025-10-13 17:13:25.424 00:00:10.374 TCP 23.104.0.1:56190 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:13:58.909 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:38570 10 6452 1 2025-10-13 17:14:25.836 00:00:10.388 TCP 23.104.0.1:45954 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:14:59.103 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53948 10 6452 1 2025-10-13 17:15:26.261 00:00:10.373 TCP 23.104.0.1:57610 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:15:59.316 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37172 10 6452 1 2025-10-13 17:16:26.673 00:00:10.371 TCP 23.104.0.1:57288 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:17:04.731 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 17:17:04.709 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 17:16:59.489 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46520 10 6452 1 2025-10-13 17:17:27.098 00:00:10.371 TCP 23.104.0.1:54016 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:17:59.702 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38486 10 6452 1 2025-10-13 17:18:27.504 00:00:10.371 TCP 23.104.0.1:45530 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:14:41.772 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 17:14:41.770 00:05:02.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 17:18:59.914 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:50852 10 6452 1 2025-10-13 17:19:27.909 00:00:10.326 TCP 23.104.0.1:41990 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:20:00.108 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41656 10 6452 1 2025-10-13 17:20:28.270 00:00:10.323 TCP 23.104.0.1:44034 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:21:00.327 00:00:10.486 TCP 1.101.0.1:3000 -> 22.102.0.1:47014 10 6452 1 2025-10-13 17:21:28.632 00:00:10.370 TCP 23.104.0.1:60344 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:22:05.058 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 17:22:04.991 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 17:22:00.850 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41220 10 6452 1 2025-10-13 17:22:29.055 00:00:10.323 TCP 23.104.0.1:53676 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:23:01.089 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41254 10 6452 1 2025-10-13 17:23:29.428 00:00:10.369 TCP 23.104.0.1:47492 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:24:01.320 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52754 10 6452 1 2025-10-13 17:24:29.833 00:00:10.351 TCP 23.104.0.1:35730 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:20:41.773 00:05:02.438 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 17:20:41.771 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 17:25:01.532 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52002 10 6452 1 2025-10-13 17:25:30.225 00:00:10.359 TCP 23.104.0.1:47632 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:26:01.755 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60710 10 6452 1 2025-10-13 17:26:30.624 00:00:10.364 TCP 23.104.0.1:57702 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:27:05.189 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 17:27:05.106 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 17:27:01.973 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:41638 10 6452 1 2025-10-13 17:27:31.026 00:00:10.363 TCP 23.104.0.1:46132 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:28:02.173 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59538 10 6452 1 2025-10-13 17:28:31.426 00:00:10.366 TCP 23.104.0.1:55800 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:29:02.386 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44010 10 6452 1 2025-10-13 17:29:31.832 00:00:10.389 TCP 23.104.0.1:42090 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:30:02.597 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47500 10 6452 1 2025-10-13 17:26:41.771 00:05:02.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 17:26:41.774 00:05:02.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 17:30:32.258 00:00:10.369 TCP 23.104.0.1:55438 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:31:02.815 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51214 10 6452 1 2025-10-13 17:31:32.665 00:00:10.324 TCP 23.104.0.1:36262 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:32:05.533 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 17:32:05.408 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 17:32:03.070 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45418 10 6452 1 2025-10-13 17:32:33.029 00:00:10.367 TCP 23.104.0.1:49190 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:33:03.291 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40548 10 6452 1 2025-10-13 17:33:33.439 00:00:10.365 TCP 23.104.0.1:35966 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:34:03.510 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48944 10 6452 1 2025-10-13 17:34:33.843 00:00:10.349 TCP 23.104.0.1:53466 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:35:03.737 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35982 10 6452 1 2025-10-13 17:35:34.225 00:00:10.367 TCP 23.104.0.1:60696 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:36:03.952 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33476 10 6452 1 2025-10-13 17:36:34.630 00:00:10.367 TCP 23.104.0.1:41830 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:32:41.777 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 17:32:41.774 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 17:37:05.478 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 17:37:05.255 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 17:37:04.186 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48022 10 6452 1 2025-10-13 17:37:35.036 00:00:10.353 TCP 23.104.0.1:49500 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:38:04.406 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37006 10 6452 1 2025-10-13 17:38:35.428 00:00:10.381 TCP 23.104.0.1:52364 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:39:04.625 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60738 10 6452 1 2025-10-13 17:39:35.837 00:00:10.375 TCP 23.104.0.1:56574 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:40:04.850 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51098 10 6452 1 2025-10-13 17:40:36.256 00:00:10.368 TCP 23.104.0.1:41192 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:41:05.080 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36386 10 6452 1 2025-10-13 17:41:36.668 00:00:10.364 TCP 23.104.0.1:33812 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:42:05.553 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 17:42:05.743 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 17:42:05.306 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34888 10 6452 1 2025-10-13 17:38:41.776 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 17:38:41.780 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 17:42:37.098 00:00:13.225 TCP 23.104.0.1:39564 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:43:05.518 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39758 10 6452 1 2025-10-13 17:43:40.376 00:00:10.362 TCP 23.104.0.1:52284 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:44:05.742 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41536 10 6452 1 2025-10-13 17:44:40.786 00:00:10.322 TCP 23.104.0.1:43666 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:45:05.964 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49432 10 6452 1 2025-10-13 17:45:41.147 00:00:10.379 TCP 23.104.0.1:46354 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:46:06.199 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43308 10 6452 1 2025-10-13 17:46:41.567 00:00:10.365 TCP 23.104.0.1:47554 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:47:05.534 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 17:47:05.827 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 17:47:06.412 00:00:10.733 TCP 1.101.0.1:3000 -> 22.102.0.1:43904 10 6452 1 2025-10-13 17:47:41.967 00:00:10.328 TCP 23.104.0.1:49004 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:48:07.184 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56716 10 6452 1 2025-10-13 17:44:41.777 00:05:02.443 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 17:44:41.781 00:05:02.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 17:48:42.334 00:00:10.366 TCP 23.104.0.1:33858 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:49:07.397 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59414 10 6452 1 2025-10-13 17:49:42.749 00:00:10.368 TCP 23.104.0.1:56112 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:50:07.606 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53052 12 6556 1 2025-10-13 17:50:43.156 00:00:10.362 TCP 23.104.0.1:41126 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:51:07.834 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39076 10 6452 1 2025-10-13 17:51:43.563 00:00:10.372 TCP 23.104.0.1:33480 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:52:05.761 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 17:52:05.627 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 17:52:08.076 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35488 10 6452 1 2025-10-13 17:52:43.965 00:00:10.373 TCP 23.104.0.1:44300 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:53:08.295 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45522 10 6452 1 2025-10-13 17:53:44.375 00:00:10.371 TCP 23.104.0.1:46342 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:54:08.512 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43002 10 6452 1 2025-10-13 17:50:41.780 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-13 17:50:41.783 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-13 17:54:44.784 00:00:10.363 TCP 23.104.0.1:60512 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:55:08.721 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54786 10 6452 1 2025-10-13 17:55:45.184 00:00:10.361 TCP 23.104.0.1:50734 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:56:08.933 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:56596 10 6452 1 2025-10-13 17:56:45.582 00:00:10.322 TCP 23.104.0.1:55088 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:57:06.021 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-13 17:57:05.847 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-13 17:57:09.132 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:46268 10 6452 1 2025-10-13 17:57:45.944 00:00:10.372 TCP 23.104.0.1:34456 -> 1.101.0.1:3000 11 1507 1 2025-10-13 17:58:09.313 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54028 10 6452 1 Summary: total flows: 163, total bytes: 501391, total packets: 1571, avg bps: 1084, avg pps: 0, avg bpp: 319 Time window: 2025-10-13 16:56:41 - 2025-10-13 17:58:19 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0010s User: 0.0041s Wall: 0.0027s flows/second: 60501.9 Runtime: 0.0027s