Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 08:59:15.267 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41152 10 6661 1 2025-10-26 08:59:16.671 00:00:10.957 TCP 23.104.0.1:46022 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:55:47.606 00:05:03.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 09:00:15.480 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51268 10 6661 1 2025-10-26 09:00:17.665 00:00:10.364 TCP 23.104.0.1:53304 -> 1.101.0.1:3000 11 1507 1 2025-10-26 08:56:47.603 00:05:03.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 09:01:15.708 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52920 10 6661 1 2025-10-26 09:01:18.087 00:00:10.335 TCP 23.104.0.1:51194 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:02:15.916 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:55230 10 6661 1 2025-10-26 09:02:18.460 00:00:10.361 TCP 23.104.0.1:39180 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:03:12.232 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:03:12.264 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 09:03:16.103 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51814 10 6661 1 2025-10-26 09:03:18.857 00:00:10.331 TCP 23.104.0.1:57178 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:04:16.315 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56924 10 6661 1 2025-10-26 09:04:19.228 00:00:10.364 TCP 23.104.0.1:54236 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:05:16.549 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:43800 10 6661 1 2025-10-26 09:05:19.632 00:00:10.324 TCP 23.104.0.1:45244 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:01:47.607 00:05:03.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 09:06:16.811 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39058 10 6661 1 2025-10-26 09:06:19.991 00:00:10.367 TCP 23.104.0.1:60268 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:02:47.605 00:05:03.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 09:07:20.403 00:00:10.373 TCP 23.104.0.1:45206 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:07:17.035 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37546 10 6661 1 2025-10-26 09:08:11.026 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:08:10.895 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 09:08:17.254 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57132 10 6661 1 2025-10-26 09:08:20.815 00:00:10.760 TCP 23.104.0.1:50938 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:09:17.508 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46432 10 6661 1 2025-10-26 09:09:21.623 00:00:10.336 TCP 23.104.0.1:47824 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:10:17.726 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57382 10 6661 1 2025-10-26 09:10:21.996 00:00:10.370 TCP 23.104.0.1:50502 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:11:17.950 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60690 12 6765 1 2025-10-26 09:11:22.411 00:00:10.366 TCP 23.104.0.1:52794 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:07:47.609 00:05:03.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 09:12:18.187 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33184 10 6661 1 2025-10-26 09:12:22.815 00:00:10.371 TCP 23.104.0.1:52288 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:08:47.607 00:05:03.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 09:13:11.221 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:13:10.998 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 09:13:18.393 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48824 10 6661 1 2025-10-26 09:13:23.221 00:00:10.366 TCP 23.104.0.1:58478 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:14:18.605 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34212 10 6661 1 2025-10-26 09:14:23.628 00:00:10.366 TCP 23.104.0.1:39580 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:15:18.821 00:00:19.933 TCP 1.101.0.1:3000 -> 22.102.0.1:36872 10 6661 1 2025-10-26 09:15:24.031 00:00:14.819 TCP 23.104.0.1:45460 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:16:28.793 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52304 10 6661 1 2025-10-26 09:16:28.885 00:00:10.340 TCP 23.104.0.1:57628 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:17:29.264 00:00:10.370 TCP 23.104.0.1:51816 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:17:29.028 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:59264 10 6661 1 2025-10-26 09:13:47.613 00:05:03.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 09:18:11.058 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 09:18:11.040 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:18:29.234 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53330 10 6661 1 2025-10-26 09:18:29.672 00:00:10.375 TCP 23.104.0.1:57400 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:14:47.609 00:05:03.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 09:19:29.449 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56008 10 6661 1 2025-10-26 09:19:30.106 00:00:10.366 TCP 23.104.0.1:35762 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:20:30.510 00:00:10.365 TCP 23.104.0.1:49756 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:20:29.666 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39306 10 6661 1 2025-10-26 09:21:29.885 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48120 10 6661 1 2025-10-26 09:21:30.918 00:00:10.376 TCP 23.104.0.1:53422 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:22:30.084 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45806 10 6661 1 2025-10-26 09:22:31.326 00:00:10.365 TCP 23.104.0.1:57100 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:23:11.324 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 09:23:11.617 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:23:30.299 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54528 10 6661 1 2025-10-26 09:23:31.734 00:00:10.371 TCP 23.104.0.1:44464 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:19:47.613 00:05:03.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 09:24:30.519 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54202 10 6661 1 2025-10-26 09:24:32.140 00:00:10.324 TCP 23.104.0.1:45700 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:20:47.611 00:05:03.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 09:25:30.745 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34730 10 6661 1 2025-10-26 09:25:32.508 00:00:10.365 TCP 23.104.0.1:56026 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:26:30.967 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:56192 10 6661 1 2025-10-26 09:26:32.919 00:00:10.339 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:27:31.160 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34500 10 6661 1 2025-10-26 09:27:33.297 00:00:10.374 TCP 23.104.0.1:43870 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:28:11.225 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 09:28:11.196 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:28:31.376 00:00:10.756 TCP 1.101.0.1:3000 -> 22.102.0.1:50190 10 6661 1 2025-10-26 09:28:33.710 00:00:10.663 TCP 23.104.0.1:44706 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:29:34.411 00:00:10.362 TCP 23.104.0.1:56700 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:29:32.172 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41022 10 6661 1 2025-10-26 09:25:47.615 00:05:03.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 09:30:34.809 00:00:10.366 TCP 23.104.0.1:34732 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:30:32.383 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47398 10 6661 1 2025-10-26 09:26:47.613 00:05:03.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 09:31:35.211 00:00:10.443 TCP 23.104.0.1:56708 -> 1.101.0.1:3000 15 1926 1 2025-10-26 09:31:32.603 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:40634 12 10375 1 2025-10-26 09:32:32.843 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:60854 10 6452 1 2025-10-26 09:32:35.696 00:00:10.370 TCP 23.104.0.1:37474 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:33:11.459 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:33:11.799 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 09:33:36.109 00:00:10.322 TCP 23.104.0.1:55424 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:33:33.083 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53302 10 6452 1 2025-10-26 09:34:33.304 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33730 10 6452 1 2025-10-26 09:34:36.467 00:00:10.398 TCP 23.104.0.1:41310 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:35:33.522 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45414 10 6452 1 2025-10-26 09:35:36.903 00:00:10.370 TCP 23.104.0.1:37062 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:31:47.618 00:05:03.178 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 09:36:33.738 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43488 10 6452 1 2025-10-26 09:32:47.615 00:05:03.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 09:36:37.312 00:00:10.363 TCP 23.104.0.1:60772 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:37:33.946 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:43552 10 6452 1 2025-10-26 09:37:37.713 00:00:10.386 TCP 23.104.0.1:34988 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:38:11.486 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 09:38:11.477 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:38:34.196 00:00:12.783 TCP 1.101.0.1:3000 -> 22.102.0.1:60498 10 6452 1 2025-10-26 09:38:38.128 00:00:10.322 TCP 23.104.0.1:47316 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:39:38.491 00:00:10.348 TCP 23.104.0.1:56798 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:39:37.022 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60290 10 6452 1 2025-10-26 09:40:38.889 00:00:10.341 TCP 23.104.0.1:54242 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:40:37.196 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57378 10 6452 1 2025-10-26 09:41:39.270 00:00:10.372 TCP 23.104.0.1:49728 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:37:47.618 00:05:03.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 09:41:37.404 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48696 10 6452 1 2025-10-26 09:42:39.682 00:00:10.378 TCP 23.104.0.1:45346 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:42:37.617 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37646 10 6452 1 2025-10-26 09:38:47.615 00:05:03.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 09:43:11.757 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:43:11.719 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 09:43:40.101 00:00:10.368 TCP 23.104.0.1:40552 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:43:37.831 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41586 10 6452 1 2025-10-26 09:44:38.027 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53316 10 6452 1 2025-10-26 09:44:40.506 00:00:10.365 TCP 23.104.0.1:59466 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:45:40.911 00:00:10.376 TCP 23.104.0.1:33028 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:45:38.246 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50314 11 6504 1 2025-10-26 09:46:38.474 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53166 10 6452 1 2025-10-26 09:46:41.326 00:00:10.331 TCP 23.104.0.1:53280 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:43:47.618 00:05:03.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 09:47:38.690 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32812 10 6452 1 2025-10-26 09:47:41.696 00:00:10.365 TCP 23.104.0.1:38942 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:48:11.686 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 09:48:11.806 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:48:38.901 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58000 10 6452 1 2025-10-26 09:44:47.617 00:05:03.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 09:48:42.106 00:00:10.360 TCP 23.104.0.1:33902 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:49:39.111 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40102 10 6452 1 2025-10-26 09:49:42.502 00:00:10.368 TCP 23.104.0.1:50684 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:50:39.325 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:40622 14 14507 1 2025-10-26 09:50:42.908 00:00:10.514 TCP 23.104.0.1:37764 -> 1.101.0.1:3000 17 2241 1 2025-10-26 09:51:39.594 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6661 1 2025-10-26 09:51:43.456 00:00:10.325 TCP 23.104.0.1:45944 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:52:39.803 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51906 10 6661 1 2025-10-26 09:52:43.818 00:00:10.328 TCP 23.104.0.1:59490 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:53:11.903 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 09:53:11.823 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:49:47.622 00:05:03.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 09:53:39.972 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:45996 10 6661 1 2025-10-26 09:53:44.185 00:00:10.371 TCP 23.104.0.1:55962 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:50:47.619 00:05:03.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 09:54:40.224 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34426 10 6661 1 2025-10-26 09:54:44.595 00:00:10.375 TCP 23.104.0.1:49594 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:55:40.437 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56344 10 6661 1 2025-10-26 09:55:45.011 00:00:10.364 TCP 23.104.0.1:40742 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:56:40.616 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52744 10 6661 1 2025-10-26 09:56:45.410 00:00:10.366 TCP 23.104.0.1:60606 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:57:40.850 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46788 10 6661 1 2025-10-26 09:57:45.812 00:00:10.363 TCP 23.104.0.1:49418 -> 1.101.0.1:3000 11 1507 1 2025-10-26 09:58:11.790 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 09:58:11.984 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 09:58:41.084 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34988 10 6661 1 Summary: total flows: 163, total bytes: 518488, total packets: 1580, avg bps: 1096, avg pps: 0, avg bpp: 328 Time window: 2025-10-26 08:55:47 - 2025-10-26 09:58:51 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0027s User: 0.0027s Wall: 0.0056s flows/second: 29338.3 Runtime: 0.0056s