Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-15 17:58:46.879 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52674 10 6452 1 2025-10-15 17:59:13.383 00:00:10.364 TCP 23.104.0.1:51158 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:59:47.117 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57640 10 6452 1 2025-10-15 18:00:13.783 00:00:10.369 TCP 23.104.0.1:45140 -> 1.101.0.1:3000 11 1507 1 2025-10-15 17:56:42.720 00:05:02.533 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 17:56:42.717 00:05:02.538 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 18:00:47.331 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43714 10 6452 1 2025-10-15 18:01:14.187 00:00:10.443 TCP 23.104.0.1:35264 -> 1.101.0.1:3000 15 1926 1 2025-10-15 18:01:47.548 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:56944 12 10369 1 2025-10-15 18:02:14.668 00:00:10.362 TCP 23.104.0.1:54036 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:03:03.631 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 18:02:47.793 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:47966 11 6504 1 2025-10-15 18:03:03.627 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 18:03:15.107 00:00:10.369 TCP 23.104.0.1:54860 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:03:48.088 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53060 12 6556 1 2025-10-15 18:04:15.517 00:00:10.360 TCP 23.104.0.1:54200 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:04:48.303 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46926 10 6452 1 2025-10-15 18:05:15.916 00:00:10.372 TCP 23.104.0.1:52488 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:05:48.478 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43766 10 6452 1 2025-10-15 18:06:16.325 00:00:10.364 TCP 23.104.0.1:48008 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:02:42.719 00:05:02.534 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 18:02:42.717 00:05:02.540 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 18:06:48.651 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57014 10 6452 1 2025-10-15 18:07:16.729 00:00:10.373 TCP 23.104.0.1:56600 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:07:48.859 00:00:10.868 TCP 1.101.0.1:3000 -> 22.102.0.1:35586 10 6452 1 2025-10-15 18:08:03.579 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 18:08:03.833 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 18:08:17.138 00:00:10.377 TCP 23.104.0.1:43046 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:08:49.767 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49962 10 6452 1 2025-10-15 18:09:17.556 00:00:10.368 TCP 23.104.0.1:41216 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:09:49.982 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50664 10 6452 1 2025-10-15 18:10:17.961 00:00:10.547 TCP 23.104.0.1:45302 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:10:50.155 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59988 10 6452 1 2025-10-15 18:11:18.541 00:00:10.322 TCP 23.104.0.1:53180 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:11:50.375 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45162 10 6452 1 2025-10-15 18:12:18.909 00:00:10.326 TCP 23.104.0.1:47094 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:08:42.718 00:05:02.540 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 18:08:42.720 00:05:02.535 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 18:12:50.597 00:00:10.585 TCP 1.101.0.1:3000 -> 22.102.0.1:38942 10 6452 1 2025-10-15 18:13:03.826 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 18:13:04.025 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 18:13:19.273 00:00:10.364 TCP 23.104.0.1:50338 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:13:51.215 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57392 10 6452 1 2025-10-15 18:14:19.674 00:00:10.371 TCP 23.104.0.1:46024 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:14:51.428 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37546 10 6452 1 2025-10-15 18:15:20.106 00:00:10.366 TCP 23.104.0.1:48374 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:15:51.644 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38204 10 6452 1 2025-10-15 18:16:20.512 00:00:10.367 TCP 23.104.0.1:37948 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:16:51.855 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43846 10 6452 1 2025-10-15 18:17:20.922 00:00:10.387 TCP 23.104.0.1:43260 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:18:03.891 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 18:17:52.077 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45768 10 6452 1 2025-10-15 18:18:03.930 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 18:18:21.336 00:00:10.321 TCP 23.104.0.1:58428 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:14:42.721 00:05:02.587 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 18:14:42.723 00:05:02.582 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 18:18:52.291 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:58090 10 6452 1 2025-10-15 18:19:21.696 00:00:10.322 TCP 23.104.0.1:50516 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:19:52.465 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58246 10 6452 1 2025-10-15 18:20:22.073 00:00:10.361 TCP 23.104.0.1:53098 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:20:52.680 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44118 10 6452 1 2025-10-15 18:21:22.479 00:00:10.366 TCP 23.104.0.1:40952 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:21:52.900 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36932 10 6452 1 2025-10-15 18:22:22.880 00:00:10.404 TCP 23.104.0.1:59020 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:23:03.874 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 18:22:53.128 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34698 10 6452 1 2025-10-15 18:23:03.936 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 18:23:23.331 00:00:10.366 TCP 23.104.0.1:59986 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:23:53.344 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43740 10 6452 1 2025-10-15 18:24:23.734 00:00:10.369 TCP 23.104.0.1:59200 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:20:42.726 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 18:20:42.728 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 18:24:53.553 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:39096 10 6452 1 2025-10-15 18:25:24.139 00:00:10.369 TCP 23.104.0.1:34230 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:25:53.790 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52398 10 6452 1 2025-10-15 18:26:24.552 00:00:10.361 TCP 23.104.0.1:42042 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:26:54.004 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40786 10 6452 1 2025-10-15 18:27:24.955 00:00:10.366 TCP 23.104.0.1:52786 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:28:04.238 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 18:27:54.231 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48862 10 6452 1 2025-10-15 18:28:04.038 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 18:28:25.361 00:00:10.324 TCP 23.104.0.1:49762 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:28:54.443 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34794 10 6452 1 2025-10-15 18:29:25.725 00:00:10.374 TCP 23.104.0.1:57824 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:29:54.653 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33470 10 6452 1 2025-10-15 18:30:26.136 00:00:10.361 TCP 23.104.0.1:39960 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:26:42.727 00:05:02.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 18:26:42.729 00:05:02.580 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 18:30:54.866 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:37180 10 6452 1 2025-10-15 18:31:26.546 00:00:10.360 TCP 23.104.0.1:52670 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:31:55.100 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55640 10 6452 1 2025-10-15 18:32:26.955 00:00:10.364 TCP 23.104.0.1:39814 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:33:04.455 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 18:33:04.279 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 18:32:55.312 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33838 10 6452 1 2025-10-15 18:33:27.359 00:00:10.367 TCP 23.104.0.1:59904 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:33:55.519 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33214 10 6452 1 2025-10-15 18:34:27.767 00:00:10.371 TCP 23.104.0.1:60714 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:34:55.696 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60412 10 6452 1 2025-10-15 18:35:28.176 00:00:10.369 TCP 23.104.0.1:49166 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:35:55.913 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34526 10 6452 1 2025-10-15 18:36:28.581 00:00:10.440 TCP 23.104.0.1:46028 -> 1.101.0.1:3000 16 1978 1 2025-10-15 18:32:42.730 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 18:32:42.732 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 18:36:56.122 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41740 12 10375 1 2025-10-15 18:37:29.090 00:00:10.361 TCP 23.104.0.1:56084 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:37:56.352 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37044 10 6452 1 2025-10-15 18:38:04.162 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 18:38:04.346 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 18:38:29.490 00:00:10.364 TCP 23.104.0.1:51020 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:38:56.570 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46470 10 6452 1 2025-10-15 18:39:29.890 00:00:10.338 TCP 23.104.0.1:53118 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:39:56.784 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:46080 11 6504 1 2025-10-15 18:40:30.263 00:00:10.361 TCP 23.104.0.1:48312 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:40:57.070 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42264 10 6452 1 2025-10-15 18:41:30.664 00:00:10.367 TCP 23.104.0.1:42024 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:41:57.284 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43456 10 6452 1 2025-10-15 18:38:42.733 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 18:42:31.093 00:00:10.366 TCP 23.104.0.1:51628 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:38:42.734 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 18:43:04.049 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 18:43:04.466 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 18:42:57.454 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53232 10 6452 1 2025-10-15 18:43:31.499 00:00:10.363 TCP 23.104.0.1:40292 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:43:57.665 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43796 10 6452 1 2025-10-15 18:44:31.897 00:00:10.368 TCP 23.104.0.1:40832 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:44:57.843 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58740 10 6452 1 2025-10-15 18:45:32.304 00:00:10.362 TCP 23.104.0.1:36682 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:45:58.092 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50784 10 6452 1 2025-10-15 18:46:32.706 00:00:10.365 TCP 23.104.0.1:36196 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:46:58.324 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50226 10 6452 1 2025-10-15 18:47:33.112 00:00:10.368 TCP 23.104.0.1:40004 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:48:04.397 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 18:48:04.464 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 18:47:58.544 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38930 10 6452 1 2025-10-15 18:44:42.735 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 18:48:33.511 00:00:10.364 TCP 23.104.0.1:50372 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:44:42.733 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 18:48:58.751 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60754 10 6452 1 2025-10-15 18:49:33.913 00:00:10.334 TCP 23.104.0.1:36866 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:49:58.959 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43920 10 6452 1 2025-10-15 18:50:34.286 00:00:10.364 TCP 23.104.0.1:48620 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:50:59.185 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46410 10 6452 1 2025-10-15 18:51:34.684 00:00:10.326 TCP 23.104.0.1:35300 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:51:59.362 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:32952 10 6452 1 2025-10-15 18:52:35.063 00:00:10.324 TCP 23.104.0.1:45252 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:53:04.719 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 18:53:04.714 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 18:52:59.534 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34700 10 6452 1 2025-10-15 18:53:35.429 00:00:10.322 TCP 23.104.0.1:50778 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:53:59.743 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50406 11 6492 1 2025-10-15 18:50:42.732 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-15 18:54:35.792 00:00:10.354 TCP 23.104.0.1:55322 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:50:42.735 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-15 18:54:59.955 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60564 10 6452 1 2025-10-15 18:55:36.187 00:00:10.367 TCP 23.104.0.1:48548 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:56:00.181 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49170 10 6452 1 2025-10-15 18:56:36.597 00:00:10.342 TCP 23.104.0.1:47636 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:57:00.357 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39910 10 6452 1 2025-10-15 18:57:36.979 00:00:10.373 TCP 23.104.0.1:45052 -> 1.101.0.1:3000 11 1507 1 2025-10-15 18:58:04.619 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-15 18:58:04.756 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-15 18:58:00.571 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44932 10 6452 1 2025-10-15 18:58:37.388 00:00:10.324 TCP 23.104.0.1:44584 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507326, total packets: 1590, avg bps: 1089, avg pps: 0, avg bpp: 319 Time window: 2025-10-15 17:56:42 - 2025-10-15 18:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0025s User: 0.0025s Wall: 0.0025s flows/second: 65262.4 Runtime: 0.0025s