Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-23 23:58:56.510 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:36664 10 6452 1 2025-10-23 23:59:30.804 00:00:10.340 TCP 23.104.0.1:54216 -> 1.101.0.1:3000 11 1507 1 2025-10-23 23:55:46.560 00:05:02.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 23:59:56.734 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59358 10 6452 1 2025-10-24 00:00:31.184 00:00:10.366 TCP 23.104.0.1:38530 -> 1.101.0.1:3000 11 1507 1 2025-10-23 23:56:46.559 00:05:02.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 00:00:56.954 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44770 10 6452 1 2025-10-24 00:01:31.585 00:00:10.366 TCP 23.104.0.1:33370 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:02:01.946 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 00:02:01.948 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 00:01:57.174 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56702 10 6452 1 2025-10-24 00:02:31.991 00:00:10.369 TCP 23.104.0.1:42326 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:02:57.400 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36034 10 6452 1 2025-10-24 00:03:32.406 00:00:10.368 TCP 23.104.0.1:46096 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:03:57.577 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52936 10 6452 1 2025-10-24 00:04:32.808 00:00:10.367 TCP 23.104.0.1:47230 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:04:57.788 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42310 10 6452 1 2025-10-24 00:05:33.211 00:00:10.369 TCP 23.104.0.1:54906 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:01:46.563 00:05:02.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 00:05:58.006 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60280 10 6452 1 2025-10-24 00:06:33.633 00:00:10.371 TCP 23.104.0.1:39198 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:02:46.560 00:05:02.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 00:07:01.948 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 00:07:02.021 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 00:06:58.183 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:34530 10 6452 1 2025-10-24 00:07:34.048 00:00:10.327 TCP 23.104.0.1:34680 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:07:58.371 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44990 10 6452 1 2025-10-24 00:08:34.408 00:00:10.367 TCP 23.104.0.1:51582 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:08:58.596 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52210 10 6452 1 2025-10-24 00:09:34.810 00:00:10.331 TCP 23.104.0.1:48932 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:09:58.809 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43564 12 10375 1 2025-10-24 00:10:35.177 00:00:10.437 TCP 23.104.0.1:32880 -> 1.101.0.1:3000 15 1926 1 2025-10-24 00:10:59.080 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52696 10 6452 1 2025-10-24 00:11:35.652 00:00:10.327 TCP 23.104.0.1:49938 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:07:46.563 00:05:02.981 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 00:12:02.114 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 00:12:02.028 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 00:11:59.287 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53994 10 6452 1 2025-10-24 00:12:36.023 00:00:10.376 TCP 23.104.0.1:53762 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:08:46.560 00:05:02.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 00:12:59.491 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53110 10 6452 1 2025-10-24 00:13:36.438 00:00:10.372 TCP 23.104.0.1:59682 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:13:59.707 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55638 10 6452 1 2025-10-24 00:14:36.854 00:00:10.372 TCP 23.104.0.1:47368 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:14:59.921 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51202 10 6452 1 2025-10-24 00:15:37.266 00:00:10.376 TCP 23.104.0.1:56686 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:16:00.131 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49816 10 6452 1 2025-10-24 00:16:37.668 00:00:10.364 TCP 23.104.0.1:54880 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:17:01.992 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 00:17:02.095 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 00:17:00.344 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51774 10 6452 1 2025-10-24 00:13:46.564 00:05:02.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 00:17:38.100 00:00:10.325 TCP 23.104.0.1:57958 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:18:00.559 00:00:10.779 TCP 1.101.0.1:3000 -> 22.102.0.1:43750 10 6452 1 2025-10-24 00:14:46.561 00:05:02.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 00:18:38.468 00:00:10.327 TCP 23.104.0.1:57838 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:19:01.375 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33706 10 6452 1 2025-10-24 00:19:38.829 00:00:10.346 TCP 23.104.0.1:56696 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:20:01.595 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50752 10 6452 1 2025-10-24 00:20:39.215 00:00:10.598 TCP 23.104.0.1:52566 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:21:01.808 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44850 10 6452 1 2025-10-24 00:21:39.851 00:00:10.378 TCP 23.104.0.1:49914 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:22:02.302 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 00:22:02.486 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 00:22:02.025 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41584 10 6452 1 2025-10-24 00:22:40.267 00:00:10.361 TCP 23.104.0.1:37368 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:23:02.234 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33504 10 6452 1 2025-10-24 00:19:46.565 00:05:02.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 00:23:40.670 00:00:11.672 TCP 23.104.0.1:48812 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:24:02.443 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49716 10 6452 1 2025-10-24 00:20:46.563 00:05:02.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 00:24:42.389 00:00:10.371 TCP 23.104.0.1:41236 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:25:02.661 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41412 10 6452 1 2025-10-24 00:25:42.793 00:00:10.370 TCP 23.104.0.1:58144 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:26:02.874 00:00:10.301 TCP 1.101.0.1:3000 -> 22.102.0.1:40448 10 6452 1 2025-10-24 00:26:43.204 00:00:10.326 TCP 23.104.0.1:60068 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:27:02.447 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 00:27:02.361 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 00:27:03.222 00:00:10.256 TCP 1.101.0.1:3000 -> 22.102.0.1:45164 13 6608 1 2025-10-24 00:27:43.568 00:00:10.368 TCP 23.104.0.1:52362 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:28:03.547 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42166 10 6452 1 2025-10-24 00:28:43.976 00:00:10.359 TCP 23.104.0.1:46546 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:29:03.758 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38220 10 6452 1 2025-10-24 00:25:46.567 00:05:02.981 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 00:29:44.375 00:00:10.319 TCP 23.104.0.1:37028 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:30:03.981 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44266 10 6452 1 2025-10-24 00:26:46.567 00:05:02.983 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 00:30:44.734 00:00:10.369 TCP 23.104.0.1:51702 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:31:04.219 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58022 10 6452 1 2025-10-24 00:31:45.141 00:00:10.364 TCP 23.104.0.1:53276 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:32:03.296 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 00:32:03.237 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 00:32:04.441 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39240 10 6452 1 2025-10-24 00:32:45.544 00:00:10.367 TCP 23.104.0.1:60446 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:33:04.658 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58464 10 6452 1 2025-10-24 00:33:45.949 00:00:10.366 TCP 23.104.0.1:38310 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:34:04.880 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42138 10 6452 1 2025-10-24 00:34:46.359 00:00:10.369 TCP 23.104.0.1:53340 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:35:05.107 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36208 10 6452 1 2025-10-24 00:31:46.571 00:05:02.979 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 00:35:46.775 00:00:10.333 TCP 23.104.0.1:47828 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:36:05.325 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42550 10 6452 1 2025-10-24 00:32:46.569 00:05:02.984 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 00:36:47.150 00:00:10.323 TCP 23.104.0.1:45202 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:37:02.548 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 00:37:02.468 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 00:37:05.544 00:00:10.307 TCP 1.101.0.1:3000 -> 22.102.0.1:44050 10 6452 1 2025-10-24 00:37:47.514 00:00:10.331 TCP 23.104.0.1:53392 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:38:05.891 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51800 10 6452 1 2025-10-24 00:38:47.874 00:00:10.368 TCP 23.104.0.1:39326 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:39:06.115 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:45650 10 6452 1 2025-10-24 00:39:48.282 00:00:10.995 TCP 23.104.0.1:45090 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:40:06.333 00:00:12.749 TCP 1.101.0.1:3000 -> 22.102.0.1:57484 10 6452 1 2025-10-24 00:40:49.312 00:00:10.325 TCP 23.104.0.1:38060 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:41:09.134 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53880 10 6452 1 2025-10-24 00:37:46.585 00:05:02.966 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 00:41:49.672 00:00:10.360 TCP 23.104.0.1:45148 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:42:02.475 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 00:42:02.696 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 00:42:09.355 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47416 10 6452 1 2025-10-24 00:38:46.583 00:05:02.971 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 00:42:50.101 00:00:10.333 TCP 23.104.0.1:43536 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:43:09.572 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44992 10 6452 1 2025-10-24 00:43:50.475 00:00:10.362 TCP 23.104.0.1:59702 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:44:09.796 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35962 10 6452 1 2025-10-24 00:44:50.875 00:00:10.438 TCP 23.104.0.1:43006 -> 1.101.0.1:3000 15 1926 1 2025-10-24 00:45:10.011 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:39858 12 10375 1 2025-10-24 00:45:51.353 00:00:10.369 TCP 23.104.0.1:47146 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:46:10.259 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41096 10 6452 1 2025-10-24 00:46:51.756 00:00:10.340 TCP 23.104.0.1:53984 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:47:02.750 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 00:47:02.781 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 00:47:10.477 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44198 10 6452 1 2025-10-24 00:43:46.587 00:05:02.965 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 00:47:52.138 00:00:10.401 TCP 23.104.0.1:53278 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:48:10.693 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54628 10 6452 1 2025-10-24 00:44:46.585 00:05:02.970 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 00:48:52.583 00:00:10.353 TCP 23.104.0.1:42658 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:49:10.899 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37312 10 6452 1 2025-10-24 00:49:52.960 00:00:10.368 TCP 23.104.0.1:34922 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:50:11.130 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46066 10 6452 1 2025-10-24 00:50:53.366 00:00:10.363 TCP 23.104.0.1:48758 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:51:11.346 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41058 10 6452 1 2025-10-24 00:52:02.836 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 00:51:53.777 00:00:10.366 TCP 23.104.0.1:60238 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:52:02.798 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 00:52:11.562 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44934 10 6452 1 2025-10-24 00:52:54.184 00:00:10.368 TCP 23.104.0.1:43734 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:53:11.743 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51980 10 6452 1 2025-10-24 00:49:46.590 00:05:02.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-24 00:53:54.588 00:00:10.337 TCP 23.104.0.1:44202 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:54:11.968 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33020 10 6452 1 2025-10-24 00:50:46.586 00:05:02.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-24 00:54:54.965 00:00:10.369 TCP 23.104.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:55:12.201 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54306 10 6452 1 2025-10-24 00:55:55.376 00:00:10.374 TCP 23.104.0.1:35320 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:56:12.413 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52284 10 6452 1 2025-10-24 00:57:03.138 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-24 00:56:55.786 00:00:10.366 TCP 23.104.0.1:40574 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:57:03.102 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-24 00:57:12.631 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55862 10 6452 1 2025-10-24 00:57:56.191 00:00:10.368 TCP 23.104.0.1:54940 -> 1.101.0.1:3000 11 1507 1 2025-10-24 00:58:12.844 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51150 10 6452 1 Summary: total flows: 163, total bytes: 505681, total packets: 1576, avg bps: 1076, avg pps: 0, avg bpp: 320 Time window: 2025-10-23 23:55:46 - 2025-10-24 00:58:22 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0000s Wall: 0.0020s flows/second: 81906.3 Runtime: 0.0020s