Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 04:58:55.177 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60798 10 6452 1 2025-10-17 04:59:28.991 00:00:10.326 TCP 23.104.0.1:51374 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:59:55.391 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38464 10 6452 1 2025-10-17 05:00:29.354 00:00:10.368 TCP 23.104.0.1:42916 -> 1.101.0.1:3000 11 1507 1 2025-10-17 04:56:43.482 00:05:02.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 04:56:43.480 00:05:02.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 05:00:55.615 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59712 10 6452 1 2025-10-17 05:01:29.764 00:00:10.328 TCP 23.104.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:01:55.785 00:00:10.589 TCP 1.101.0.1:3000 -> 22.102.0.1:44026 10 6452 1 2025-10-17 05:02:30.131 00:00:10.325 TCP 23.104.0.1:52978 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:02:56.407 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50836 10 6452 1 2025-10-17 05:03:30.496 00:00:10.711 TCP 23.104.0.1:50228 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:03:45.590 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:03:45.739 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 05:03:56.618 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44878 10 6452 1 2025-10-17 05:04:31.258 00:00:10.361 TCP 23.104.0.1:47894 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:04:56.832 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52558 10 6452 1 2025-10-17 05:05:31.657 00:00:10.363 TCP 23.104.0.1:58814 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:05:57.068 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38476 10 6452 1 2025-10-17 05:02:43.481 00:05:02.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 05:02:43.484 00:05:02.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 05:06:32.086 00:00:10.369 TCP 23.104.0.1:39084 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:06:57.284 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41676 10 6452 1 2025-10-17 05:07:32.490 00:00:10.368 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:07:57.507 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55186 10 6452 1 2025-10-17 05:08:45.871 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 05:08:32.893 00:00:10.334 TCP 23.104.0.1:60464 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:08:45.836 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:08:57.720 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43310 10 6452 1 2025-10-17 05:09:33.271 00:00:10.325 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:09:57.954 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34320 10 6452 1 2025-10-17 05:10:33.631 00:00:10.365 TCP 23.104.0.1:43316 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:10:58.173 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:58498 10 6452 1 2025-10-17 05:11:34.036 00:00:10.369 TCP 23.104.0.1:36784 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:11:58.340 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:42140 12 10375 1 2025-10-17 05:08:43.485 00:05:02.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 05:12:34.444 00:00:10.399 TCP 23.104.0.1:39812 -> 1.101.0.1:3000 15 1926 1 2025-10-17 05:08:43.482 00:05:02.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 05:12:58.535 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46768 10 6452 1 2025-10-17 05:13:46.026 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 05:13:34.884 00:00:10.372 TCP 23.104.0.1:39364 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:13:46.078 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:13:58.749 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41448 10 6452 1 2025-10-17 05:14:35.294 00:00:10.363 TCP 23.104.0.1:44170 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:14:58.964 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:57538 10 6452 1 2025-10-17 05:15:35.706 00:00:10.363 TCP 23.104.0.1:52410 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:15:59.142 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51690 10 6452 1 2025-10-17 05:16:36.109 00:00:10.363 TCP 23.104.0.1:39550 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:16:59.359 00:00:10.513 TCP 1.101.0.1:3000 -> 22.102.0.1:40036 12 10375 1 2025-10-17 05:17:36.511 00:00:10.444 TCP 23.104.0.1:56818 -> 1.101.0.1:3000 15 1926 1 2025-10-17 05:17:59.912 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33760 10 6452 1 2025-10-17 05:18:46.256 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 05:18:46.027 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:14:43.486 00:05:02.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 05:14:43.483 00:05:02.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 05:18:36.994 00:00:10.367 TCP 23.104.0.1:51788 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:19:00.126 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41102 10 6452 1 2025-10-17 05:19:37.397 00:00:11.036 TCP 23.104.0.1:44780 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:20:00.335 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53438 10 6452 1 2025-10-17 05:20:38.467 00:00:10.361 TCP 23.104.0.1:37016 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:21:00.548 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50556 10 6452 1 2025-10-17 05:21:38.867 00:00:10.326 TCP 23.104.0.1:53334 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:22:00.724 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57888 10 6452 1 2025-10-17 05:22:39.231 00:00:10.331 TCP 23.104.0.1:44320 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:23:00.940 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:57872 10 6452 1 2025-10-17 05:23:46.172 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 05:23:46.075 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:23:39.599 00:00:10.369 TCP 23.104.0.1:44764 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:24:01.132 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53420 10 6452 1 2025-10-17 05:20:43.487 00:05:02.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 05:20:43.486 00:05:02.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 05:24:40.006 00:00:10.322 TCP 23.104.0.1:44272 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:25:01.351 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46400 10 6452 1 2025-10-17 05:25:40.370 00:00:10.361 TCP 23.104.0.1:33284 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:26:01.572 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34632 10 6452 1 2025-10-17 05:26:40.770 00:00:10.398 TCP 23.104.0.1:39758 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:27:01.785 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:49180 10 6452 1 2025-10-17 05:27:41.207 00:00:10.365 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:28:01.972 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:43606 10 6452 1 2025-10-17 05:28:46.199 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:28:46.222 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 05:28:41.610 00:00:10.386 TCP 23.104.0.1:36746 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:29:02.208 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49634 10 6452 1 2025-10-17 05:29:42.048 00:00:10.364 TCP 23.104.0.1:39636 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:30:02.423 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57140 10 6452 1 2025-10-17 05:26:43.468 00:05:02.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 05:26:43.465 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 05:30:42.456 00:00:10.363 TCP 23.104.0.1:54796 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:31:02.638 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58548 10 6452 1 2025-10-17 05:31:42.858 00:00:10.371 TCP 23.104.0.1:46038 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:32:02.868 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37722 10 6452 1 2025-10-17 05:32:43.266 00:00:10.333 TCP 23.104.0.1:50788 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:33:03.068 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52248 10 6452 1 2025-10-17 05:33:46.212 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 05:33:46.554 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:33:43.648 00:00:10.323 TCP 23.104.0.1:47662 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:34:03.283 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45040 10 6452 1 2025-10-17 05:34:44.008 00:00:10.317 TCP 23.104.0.1:42174 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:35:03.491 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50350 10 6452 1 2025-10-17 05:35:44.367 00:00:10.327 TCP 23.104.0.1:39314 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:36:03.703 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60464 10 6452 1 2025-10-17 05:32:43.467 00:05:02.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 05:32:43.469 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 05:36:44.738 00:00:10.369 TCP 23.104.0.1:36830 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:37:03.925 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:47390 10 6452 1 2025-10-17 05:37:45.148 00:00:10.366 TCP 23.104.0.1:57604 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:38:04.103 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54632 10 6452 1 2025-10-17 05:38:46.429 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 05:38:46.501 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:38:45.550 00:00:10.370 TCP 23.104.0.1:50642 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:39:04.313 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34592 10 6452 1 2025-10-17 05:39:45.970 00:00:10.369 TCP 23.104.0.1:34308 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:40:04.528 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53464 10 6452 1 2025-10-17 05:40:46.380 00:00:10.371 TCP 23.104.0.1:51002 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:41:04.695 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58832 10 6452 1 2025-10-17 05:41:46.785 00:00:10.365 TCP 23.104.0.1:40022 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:42:04.910 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45870 10 6452 1 2025-10-17 05:38:43.470 00:05:02.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 05:38:43.470 00:05:02.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 05:42:47.191 00:00:10.323 TCP 23.104.0.1:49452 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:43:05.127 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55118 10 6452 1 2025-10-17 05:43:46.630 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 05:43:46.744 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:43:47.557 00:00:10.368 TCP 23.104.0.1:49916 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:44:05.340 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40532 10 6452 1 2025-10-17 05:44:47.973 00:00:10.380 TCP 23.104.0.1:34610 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:45:05.514 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60928 10 6452 1 2025-10-17 05:45:48.396 00:00:10.371 TCP 23.104.0.1:50482 -> 1.101.0.1:3000 12 1559 1 2025-10-17 05:46:05.731 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52434 10 6452 1 2025-10-17 05:46:48.804 00:00:10.337 TCP 23.104.0.1:46156 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:47:05.944 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45602 10 6452 1 2025-10-17 05:47:49.183 00:00:10.363 TCP 23.104.0.1:54732 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:48:06.168 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48182 10 6452 1 2025-10-17 05:48:46.658 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:48:46.713 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 05:44:43.468 00:05:02.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 05:44:43.471 00:05:02.616 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 05:48:49.586 00:00:10.328 TCP 23.104.0.1:58202 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:49:06.384 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33662 10 6452 1 2025-10-17 05:49:49.952 00:00:10.370 TCP 23.104.0.1:36276 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:50:06.597 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39192 10 6452 1 2025-10-17 05:50:50.357 00:00:10.366 TCP 23.104.0.1:58134 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:51:06.806 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57676 10 6452 1 2025-10-17 05:51:50.763 00:00:10.377 TCP 23.104.0.1:47338 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:52:07.030 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44356 10 6452 1 2025-10-17 05:52:51.177 00:00:10.366 TCP 23.104.0.1:35494 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:53:07.202 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53024 10 6452 1 2025-10-17 05:53:46.723 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 05:53:46.708 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 05:53:51.585 00:00:10.368 TCP 23.104.0.1:38854 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:54:07.409 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39294 10 6452 1 2025-10-17 05:50:43.475 00:05:02.616 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 05:50:43.476 00:05:02.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 05:54:51.991 00:00:10.326 TCP 23.104.0.1:48924 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:55:07.634 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37452 10 6452 1 2025-10-17 05:55:52.354 00:00:10.811 TCP 23.104.0.1:37570 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:56:07.862 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54860 10 6452 1 2025-10-17 05:56:53.175 00:00:10.329 TCP 23.104.0.1:57550 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:57:08.084 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41422 10 6452 1 2025-10-17 05:57:53.540 00:00:10.365 TCP 23.104.0.1:38426 -> 1.101.0.1:3000 11 1507 1 2025-10-17 05:58:08.302 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44758 10 6452 1 2025-10-17 05:58:46.861 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 05:58:46.841 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 163, total bytes: 505577, total packets: 1574, avg bps: 1086, avg pps: 0, avg bpp: 321 Time window: 2025-10-17 04:56:43 - 2025-10-17 05:58:46 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0008s Wall: 0.0025s flows/second: 64527.8 Runtime: 0.0025s