Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 02:58:47.992 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:44810 10 6452 1 2025-10-16 02:59:08.637 00:00:10.368 TCP 23.104.0.1:50878 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:59:48.226 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59458 10 6452 1 2025-10-16 03:00:09.049 00:00:10.776 TCP 23.104.0.1:60602 -> 1.101.0.1:3000 11 1507 1 2025-10-16 02:56:42.896 00:05:02.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 02:56:42.893 00:05:02.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 03:00:48.452 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38362 10 6452 1 2025-10-16 03:01:09.865 00:00:10.544 TCP 23.104.0.1:43014 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:01:48.625 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55886 10 6452 1 2025-10-16 03:02:10.445 00:00:10.366 TCP 23.104.0.1:54824 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:02:48.833 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34132 10 6452 1 2025-10-16 03:03:14.674 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:03:14.390 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 03:03:10.846 00:00:10.386 TCP 23.104.0.1:60612 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:03:49.012 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35916 10 6452 1 2025-10-16 03:04:11.265 00:00:10.368 TCP 23.104.0.1:48018 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:04:49.178 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39728 10 6452 1 2025-10-16 03:05:11.675 00:00:10.369 TCP 23.104.0.1:38714 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:05:49.388 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35724 10 6452 1 2025-10-16 03:06:12.105 00:00:10.376 TCP 23.104.0.1:50226 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:02:42.897 00:05:02.579 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 03:02:42.900 00:05:02.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 03:06:49.563 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33682 10 6452 1 2025-10-16 03:07:12.515 00:00:10.365 TCP 23.104.0.1:44352 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:07:49.792 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40088 10 6452 1 2025-10-16 03:08:14.525 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 03:08:14.322 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:08:12.917 00:00:10.447 TCP 23.104.0.1:37386 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:08:50.005 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48210 10 6452 1 2025-10-16 03:09:13.402 00:00:10.373 TCP 23.104.0.1:44510 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:09:50.218 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35620 10 6452 1 2025-10-16 03:10:13.808 00:00:10.333 TCP 23.104.0.1:36062 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:10:50.430 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57834 10 6452 1 2025-10-16 03:11:14.176 00:00:10.437 TCP 23.104.0.1:34932 -> 1.101.0.1:3000 15 1926 1 2025-10-16 03:11:50.646 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:46264 12 10369 1 2025-10-16 03:12:14.653 00:00:10.371 TCP 23.104.0.1:45278 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:08:42.903 00:05:02.573 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 03:08:42.901 00:05:02.578 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 03:12:50.883 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:46192 10 6452 1 2025-10-16 03:13:14.711 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:13:14.659 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 03:13:15.069 00:00:10.325 TCP 23.104.0.1:50426 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:13:51.083 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37904 10 6452 1 2025-10-16 03:14:15.432 00:00:10.373 TCP 23.104.0.1:56586 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:14:51.299 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59008 10 6452 1 2025-10-16 03:15:15.845 00:00:10.349 TCP 23.104.0.1:41196 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:15:51.523 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57480 10 6452 1 2025-10-16 03:16:16.243 00:00:10.377 TCP 23.104.0.1:39190 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:16:51.737 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38592 10 6452 1 2025-10-16 03:17:16.673 00:00:10.381 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:17:51.963 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56346 12 6556 1 2025-10-16 03:18:14.640 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:18:15.165 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 03:18:17.108 00:00:10.328 TCP 23.104.0.1:42780 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:14:42.904 00:05:02.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 03:14:42.907 00:05:02.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 03:18:52.185 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47480 10 6452 1 2025-10-16 03:19:17.474 00:00:10.364 TCP 23.104.0.1:46842 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:19:52.357 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55778 10 6452 1 2025-10-16 03:20:17.873 00:00:10.362 TCP 23.104.0.1:58520 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:20:52.582 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:59366 10 6452 1 2025-10-16 03:21:18.279 00:00:10.445 TCP 23.104.0.1:48846 -> 1.101.0.1:3000 15 1926 1 2025-10-16 03:21:52.774 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:47066 12 10369 1 2025-10-16 03:22:18.785 00:00:10.362 TCP 23.104.0.1:44916 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:22:53.043 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54184 10 6452 1 2025-10-16 03:23:14.948 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 03:23:14.873 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:23:19.185 00:00:10.326 TCP 23.104.0.1:51142 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:23:53.264 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48488 10 6452 1 2025-10-16 03:24:19.547 00:00:10.320 TCP 23.104.0.1:47938 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:20:42.908 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 03:20:42.905 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 03:24:53.478 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51438 10 6452 1 2025-10-16 03:25:19.908 00:00:10.368 TCP 23.104.0.1:43662 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:25:53.695 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54260 10 6452 1 2025-10-16 03:26:20.315 00:00:10.324 TCP 23.104.0.1:51998 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:26:53.909 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33224 10 6452 1 2025-10-16 03:27:20.672 00:00:10.368 TCP 23.104.0.1:43636 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:27:54.083 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38194 10 6452 1 2025-10-16 03:28:14.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:28:14.770 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 03:28:21.099 00:00:10.367 TCP 23.104.0.1:40178 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:28:54.302 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33696 10 6452 1 2025-10-16 03:29:21.504 00:00:10.365 TCP 23.104.0.1:34712 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:29:54.520 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50230 10 6452 1 2025-10-16 03:30:21.910 00:00:10.368 TCP 23.104.0.1:53916 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:26:42.906 00:05:02.582 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 03:26:42.910 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 03:30:54.696 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46336 10 6452 1 2025-10-16 03:31:22.316 00:00:10.365 TCP 23.104.0.1:45648 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:31:54.911 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43832 10 6452 1 2025-10-16 03:32:22.717 00:00:15.838 TCP 23.104.0.1:48146 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:32:55.127 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35142 10 6452 1 2025-10-16 03:33:14.948 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 03:33:15.170 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:33:28.591 00:00:10.322 TCP 23.104.0.1:46618 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:33:55.345 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33112 10 6452 1 2025-10-16 03:34:28.954 00:00:10.325 TCP 23.104.0.1:52796 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:34:55.554 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55776 10 6452 1 2025-10-16 03:35:29.319 00:00:10.366 TCP 23.104.0.1:54408 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:35:55.767 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54476 10 6452 1 2025-10-16 03:32:42.907 00:05:02.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 03:36:29.721 00:00:10.372 TCP 23.104.0.1:40556 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:32:42.911 00:05:02.581 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 03:36:55.976 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44510 10 6452 1 2025-10-16 03:37:30.126 00:00:10.366 TCP 23.104.0.1:37116 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:37:56.206 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49618 10 6452 1 2025-10-16 03:38:14.974 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:38:15.092 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 03:38:30.527 00:00:10.371 TCP 23.104.0.1:56660 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:38:56.423 00:00:10.768 TCP 1.101.0.1:3000 -> 22.102.0.1:59562 10 6452 1 2025-10-16 03:39:30.935 00:00:10.381 TCP 23.104.0.1:36132 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:39:57.228 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44202 10 6452 1 2025-10-16 03:40:31.351 00:00:10.362 TCP 23.104.0.1:57738 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:40:57.404 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41012 10 6452 1 2025-10-16 03:41:31.753 00:00:10.320 TCP 23.104.0.1:40036 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:41:57.573 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46572 10 6452 1 2025-10-16 03:42:32.114 00:00:10.367 TCP 23.104.0.1:47330 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:38:42.911 00:05:02.586 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 03:38:42.908 00:05:02.591 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 03:42:57.747 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48876 10 6452 1 2025-10-16 03:43:15.342 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 03:43:14.992 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:43:32.519 00:00:10.542 TCP 23.104.0.1:39112 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:43:57.957 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:36814 10 6452 1 2025-10-16 03:44:33.105 00:00:10.382 TCP 23.104.0.1:37360 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:44:58.195 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59308 10 6452 1 2025-10-16 03:45:33.525 00:00:10.369 TCP 23.104.0.1:35634 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:45:58.406 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56082 10 6452 1 2025-10-16 03:46:33.930 00:00:10.382 TCP 23.104.0.1:39006 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:46:58.623 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37550 10 6452 1 2025-10-16 03:47:34.347 00:00:10.365 TCP 23.104.0.1:37866 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:47:58.796 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36656 10 6452 1 2025-10-16 03:48:15.271 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:48:15.295 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 03:44:42.909 00:05:02.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 03:44:42.912 00:05:02.590 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 03:48:34.754 00:00:10.338 TCP 23.104.0.1:46816 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:48:59.010 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53958 10 6452 1 2025-10-16 03:49:35.130 00:00:10.372 TCP 23.104.0.1:47158 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:49:59.228 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57462 10 6452 1 2025-10-16 03:50:35.539 00:00:10.370 TCP 23.104.0.1:46046 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:50:59.440 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35276 10 6452 1 2025-10-16 03:51:35.947 00:00:10.449 TCP 23.104.0.1:35118 -> 1.101.0.1:3000 15 1926 1 2025-10-16 03:51:59.651 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:45014 12 10375 1 2025-10-16 03:52:36.436 00:00:10.360 TCP 23.104.0.1:32800 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:52:59.893 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53120 10 6452 1 2025-10-16 03:53:15.526 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 03:53:15.358 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:53:36.834 00:00:10.362 TCP 23.104.0.1:53726 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:54:00.126 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57700 10 6452 1 2025-10-16 03:50:42.909 00:05:02.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 03:50:42.911 00:05:02.590 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 03:54:37.230 00:00:10.362 TCP 23.104.0.1:35240 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:55:00.337 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52806 10 6452 1 2025-10-16 03:55:37.640 00:00:10.347 TCP 23.104.0.1:35414 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:56:00.508 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51680 10 6452 1 2025-10-16 03:56:38.022 00:00:10.366 TCP 23.104.0.1:46382 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:57:00.717 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55854 10 6452 1 2025-10-16 03:57:38.429 00:00:10.328 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-10-16 03:58:00.928 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57522 10 6452 1 2025-10-16 03:58:15.597 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 03:58:15.504 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 03:58:38.791 00:00:10.366 TCP 23.104.0.1:46888 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511466, total packets: 1592, avg bps: 1098, avg pps: 0, avg bpp: 321 Time window: 2025-10-16 02:56:42 - 2025-10-16 03:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0055s User: 0.0000s Wall: 0.0017s flows/second: 97680.5 Runtime: 0.0017s