Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 17:59:10.243 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40056 10 6452 1 2025-10-16 17:59:30.187 00:00:10.329 TCP 23.104.0.1:54906 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:00:10.461 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47954 10 6452 1 2025-10-16 18:00:30.553 00:00:10.365 TCP 23.104.0.1:40640 -> 1.101.0.1:3000 11 1507 1 2025-10-16 17:56:43.235 00:05:02.588 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 17:56:43.235 00:05:02.592 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 18:01:10.639 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42972 10 6452 1 2025-10-16 18:01:30.955 00:00:10.851 TCP 23.104.0.1:36242 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:02:10.853 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44250 10 6452 1 2025-10-16 18:02:31.854 00:00:10.376 TCP 23.104.0.1:36696 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:03:11.028 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43778 10 6452 1 2025-10-16 18:03:32.856 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 18:03:32.864 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 18:03:32.264 00:00:10.329 TCP 23.104.0.1:59518 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:04:11.234 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41532 10 6452 1 2025-10-16 18:04:32.632 00:00:10.363 TCP 23.104.0.1:52086 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:05:11.455 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49398 10 6452 1 2025-10-16 18:05:33.036 00:00:10.322 TCP 23.104.0.1:60184 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:06:11.692 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50896 10 6452 1 2025-10-16 18:06:33.394 00:00:10.372 TCP 23.104.0.1:43614 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:02:43.237 00:05:02.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 18:02:43.234 00:05:02.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 18:07:11.923 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:48212 10 6452 1 2025-10-16 18:07:33.800 00:00:10.365 TCP 23.104.0.1:41308 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:08:12.177 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59762 10 6452 1 2025-10-16 18:08:32.679 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 18:08:32.356 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 18:08:34.204 00:00:11.003 TCP 23.104.0.1:52616 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:09:12.392 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33466 10 6452 1 2025-10-16 18:09:35.241 00:00:10.365 TCP 23.104.0.1:51700 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:10:12.614 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34094 10 6452 1 2025-10-16 18:10:35.646 00:00:10.323 TCP 23.104.0.1:57660 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:11:12.833 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40848 10 6452 1 2025-10-16 18:11:36.010 00:00:10.364 TCP 23.104.0.1:59660 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:12:13.094 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56300 10 6452 1 2025-10-16 18:08:43.235 00:05:02.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 18:12:36.406 00:00:10.360 TCP 23.104.0.1:50124 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:08:43.237 00:05:02.588 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 18:13:13.306 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38260 10 6452 1 2025-10-16 18:13:32.753 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 18:13:32.682 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 18:13:36.811 00:00:10.368 TCP 23.104.0.1:39646 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:14:13.520 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45670 10 6452 1 2025-10-16 18:14:37.216 00:00:10.365 TCP 23.104.0.1:47060 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:15:13.741 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42082 10 6452 1 2025-10-16 18:15:37.617 00:00:10.365 TCP 23.104.0.1:49122 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:16:13.956 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40480 10 6452 1 2025-10-16 18:16:38.017 00:00:10.324 TCP 23.104.0.1:59682 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:17:14.185 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36362 10 6452 1 2025-10-16 18:17:38.373 00:00:10.362 TCP 23.104.0.1:52270 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:18:14.359 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50938 10 6452 1 2025-10-16 18:18:33.187 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 18:18:33.033 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 18:14:43.239 00:05:02.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 18:14:43.237 00:05:02.591 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 18:18:38.771 00:00:10.369 TCP 23.104.0.1:56770 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:19:14.562 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43926 10 6452 1 2025-10-16 18:19:39.175 00:00:10.323 TCP 23.104.0.1:57488 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:20:14.734 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49566 10 6452 1 2025-10-16 18:20:39.539 00:00:10.366 TCP 23.104.0.1:37706 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:21:14.952 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:38314 10 6452 1 2025-10-16 18:21:39.937 00:00:10.824 TCP 23.104.0.1:33598 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:22:15.134 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40840 10 6452 1 2025-10-16 18:22:40.798 00:00:10.367 TCP 23.104.0.1:50440 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:23:15.355 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52760 10 6452 1 2025-10-16 18:23:32.966 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 18:23:33.026 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 18:23:41.202 00:00:10.326 TCP 23.104.0.1:34750 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:24:15.569 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42322 10 6452 1 2025-10-16 18:20:43.239 00:05:02.592 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 18:20:43.242 00:05:02.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 18:24:41.570 00:00:10.374 TCP 23.104.0.1:59950 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:25:15.786 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48674 11 6492 1 2025-10-16 18:25:41.983 00:00:10.341 TCP 23.104.0.1:46276 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:26:15.997 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42058 10 6452 1 2025-10-16 18:26:42.364 00:00:10.362 TCP 23.104.0.1:50604 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:27:16.217 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49552 10 6452 1 2025-10-16 18:27:42.769 00:00:10.783 TCP 23.104.0.1:55462 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:28:16.423 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48824 10 6452 1 2025-10-16 18:28:33.028 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 18:28:32.982 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 18:28:43.593 00:00:10.367 TCP 23.104.0.1:33402 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:29:16.633 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53258 10 6452 1 2025-10-16 18:29:43.997 00:00:10.371 TCP 23.104.0.1:56226 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:30:16.860 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38854 10 6452 1 2025-10-16 18:26:43.247 00:05:02.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 18:26:43.250 00:05:02.580 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 18:30:44.412 00:00:10.890 TCP 23.104.0.1:56514 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:31:17.041 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57956 10 6452 1 2025-10-16 18:31:45.349 00:00:10.365 TCP 23.104.0.1:58824 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:32:17.258 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59466 10 6452 1 2025-10-16 18:32:45.754 00:00:10.373 TCP 23.104.0.1:57002 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:33:17.478 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35930 10 6452 1 2025-10-16 18:33:33.065 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 18:33:32.928 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 18:33:46.163 00:00:10.366 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:34:17.695 00:00:10.792 TCP 1.101.0.1:3000 -> 22.102.0.1:55662 10 6452 1 2025-10-16 18:34:46.565 00:00:10.370 TCP 23.104.0.1:49892 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:35:18.526 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57088 10 6452 1 2025-10-16 18:35:46.976 00:00:10.371 TCP 23.104.0.1:34036 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:36:18.742 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35328 10 6452 1 2025-10-16 18:32:43.251 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 18:32:43.252 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 18:36:47.384 00:00:10.365 TCP 23.104.0.1:40674 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:37:18.968 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56500 12 6556 1 2025-10-16 18:37:47.785 00:00:10.363 TCP 23.104.0.1:54676 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:38:19.198 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44350 10 6452 1 2025-10-16 18:38:33.175 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 18:38:33.013 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 18:38:48.188 00:00:10.365 TCP 23.104.0.1:52476 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:39:19.412 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35514 10 6452 1 2025-10-16 18:39:48.591 00:00:10.360 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:40:19.624 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45092 10 6452 1 2025-10-16 18:40:48.990 00:00:10.370 TCP 23.104.0.1:36290 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:41:19.837 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38606 10 6452 1 2025-10-16 18:41:49.394 00:00:10.366 TCP 23.104.0.1:39858 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:42:20.013 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53420 10 6452 1 2025-10-16 18:38:43.250 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 18:38:43.253 00:05:02.578 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 18:42:49.799 00:00:11.023 TCP 23.104.0.1:47044 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:43:20.232 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44004 10 6452 1 2025-10-16 18:43:33.134 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 18:43:33.657 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 18:43:50.858 00:00:10.378 TCP 23.104.0.1:60322 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:44:20.447 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40144 10 6452 1 2025-10-16 18:44:51.276 00:00:10.366 TCP 23.104.0.1:58782 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:45:20.666 00:00:10.932 TCP 1.101.0.1:3000 -> 22.102.0.1:35424 10 6452 1 2025-10-16 18:45:51.677 00:00:10.367 TCP 23.104.0.1:45174 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:46:21.638 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60190 10 6452 1 2025-10-16 18:46:52.109 00:00:10.360 TCP 23.104.0.1:41050 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:47:21.854 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41800 10 6452 1 2025-10-16 18:47:52.514 00:00:10.896 TCP 23.104.0.1:41822 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:48:33.332 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 18:48:22.082 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39322 10 6452 1 2025-10-16 18:48:33.375 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 18:44:43.254 00:05:02.582 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 18:44:43.252 00:05:02.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 18:48:53.457 00:00:10.366 TCP 23.104.0.1:45082 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:49:22.294 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45040 10 6452 1 2025-10-16 18:49:53.858 00:00:10.376 TCP 23.104.0.1:36138 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:50:22.502 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58054 10 6452 1 2025-10-16 18:50:54.269 00:00:10.362 TCP 23.104.0.1:52796 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:51:22.713 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46160 10 6452 1 2025-10-16 18:51:54.670 00:00:10.370 TCP 23.104.0.1:34304 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:52:22.925 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56394 10 6452 1 2025-10-16 18:52:55.095 00:00:10.327 TCP 23.104.0.1:34028 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:53:33.227 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 18:53:23.105 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44736 10 6452 1 2025-10-16 18:53:33.569 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 18:53:55.457 00:00:10.369 TCP 23.104.0.1:53144 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:54:23.330 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33848 10 6452 1 2025-10-16 18:50:43.255 00:05:02.590 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 18:50:43.252 00:05:02.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 18:54:55.861 00:00:10.372 TCP 23.104.0.1:52976 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:55:23.545 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:33886 10 6452 1 2025-10-16 18:55:56.272 00:00:10.367 TCP 23.104.0.1:48782 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:56:23.713 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50356 10 6452 1 2025-10-16 18:56:56.678 00:00:10.366 TCP 23.104.0.1:47048 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:57:23.941 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38152 10 6452 1 2025-10-16 18:57:57.099 00:00:10.370 TCP 23.104.0.1:59168 -> 1.101.0.1:3000 11 1507 1 2025-10-16 18:58:33.595 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 18:58:24.146 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34576 10 6452 1 2025-10-16 18:58:33.828 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 496985, total packets: 1564, avg bps: 1071, avg pps: 0, avg bpp: 317 Time window: 2025-10-16 17:56:43 - 2025-10-16 18:58:34 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0020s Wall: 0.0025s flows/second: 64655.9 Runtime: 0.0025s