Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 11:59:08.379 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:49650 10 6452 1 2025-10-31 11:59:07.212 00:00:10.371 TCP 23.104.0.1:44690 -> 1.101.0.1:3000 11 1507 1 2025-10-31 11:54:53.510 00:05:56.625 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 11:54:53.507 00:05:56.631 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 12:00:08.616 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59402 10 6452 1 2025-10-31 12:00:07.623 00:00:10.380 TCP 23.104.0.1:35012 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:00:38.794 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 12:00:38.954 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 12:01:08.786 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48014 10 6452 1 2025-10-31 12:01:08.088 00:00:10.368 TCP 23.104.0.1:46288 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:02:08.492 00:00:10.367 TCP 23.104.0.1:51910 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:02:08.996 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56766 10 6452 1 2025-10-31 12:03:08.896 00:00:10.364 TCP 23.104.0.1:45860 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:03:09.209 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38096 10 6452 1 2025-10-31 12:04:09.297 00:00:10.369 TCP 23.104.0.1:47564 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:04:09.378 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39568 10 6452 1 2025-10-31 12:05:09.703 00:00:10.322 TCP 23.104.0.1:38654 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:05:09.551 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52008 10 6452 1 2025-10-31 12:05:38.784 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 12:05:38.876 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 12:00:53.512 00:05:56.626 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 12:00:53.509 00:05:56.630 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 12:06:10.085 00:00:10.362 TCP 23.104.0.1:38158 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:06:09.730 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52874 10 6452 1 2025-10-31 12:07:10.489 00:00:10.323 TCP 23.104.0.1:35226 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:07:09.944 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:43432 10 6452 1 2025-10-31 12:08:10.856 00:00:10.375 TCP 23.104.0.1:42302 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:08:10.130 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55132 10 6452 1 2025-10-31 12:09:10.341 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37578 10 6452 1 2025-10-31 12:09:11.264 00:00:10.371 TCP 23.104.0.1:37308 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:10:10.525 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52726 10 6452 1 2025-10-31 12:10:11.673 00:00:10.391 TCP 23.104.0.1:33170 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:10:39.251 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 12:10:39.329 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 12:11:10.742 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56062 10 6452 1 2025-10-31 12:11:12.096 00:00:10.361 TCP 23.104.0.1:44208 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:06:53.512 00:05:56.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 12:06:53.516 00:05:56.631 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 12:12:10.957 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49252 12 6556 1 2025-10-31 12:12:12.496 00:00:10.367 TCP 23.104.0.1:56030 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:13:11.185 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42880 10 6452 1 2025-10-31 12:13:12.902 00:00:10.376 TCP 23.104.0.1:55196 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:14:11.396 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:56596 12 10375 1 2025-10-31 12:14:13.307 00:00:10.442 TCP 23.104.0.1:38020 -> 1.101.0.1:3000 15 1926 1 2025-10-31 12:15:11.599 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36910 10 6452 1 2025-10-31 12:15:13.787 00:00:10.362 TCP 23.104.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:15:39.105 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 12:15:39.187 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 12:16:11.774 00:00:10.296 TCP 1.101.0.1:3000 -> 22.102.0.1:33332 10 6452 1 2025-10-31 12:16:14.183 00:00:10.382 TCP 23.104.0.1:58720 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:17:12.112 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60216 10 6452 1 2025-10-31 12:17:14.610 00:00:10.366 TCP 23.104.0.1:51144 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:12:53.513 00:05:56.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 12:12:53.517 00:05:56.631 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 12:18:15.016 00:00:10.376 TCP 23.104.0.1:38720 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:18:12.338 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48414 10 6452 1 2025-10-31 12:19:12.546 00:00:10.472 TCP 1.101.0.1:3000 -> 22.102.0.1:35812 10 6452 1 2025-10-31 12:19:15.433 00:00:10.428 TCP 23.104.0.1:53070 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:20:13.078 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55546 10 6452 1 2025-10-31 12:20:15.907 00:00:10.374 TCP 23.104.0.1:35426 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:20:38.963 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 12:20:39.198 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 12:21:13.294 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47878 10 6452 1 2025-10-31 12:21:16.316 00:00:10.367 TCP 23.104.0.1:47970 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:22:13.507 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39040 10 6452 1 2025-10-31 12:22:16.721 00:00:10.370 TCP 23.104.0.1:43250 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:23:13.678 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43214 10 6452 1 2025-10-31 12:23:17.130 00:00:10.364 TCP 23.104.0.1:43656 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:18:53.517 00:05:56.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 12:18:53.520 00:05:56.629 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 12:24:13.855 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42746 10 6452 1 2025-10-31 12:24:17.528 00:00:10.362 TCP 23.104.0.1:33558 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:25:14.092 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51204 10 6452 1 2025-10-31 12:25:17.929 00:00:10.348 TCP 23.104.0.1:44282 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:25:39.419 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 12:25:39.322 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 12:26:14.262 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47482 10 6452 1 2025-10-31 12:26:18.317 00:00:10.364 TCP 23.104.0.1:46436 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:27:14.476 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39338 10 6452 1 2025-10-31 12:27:18.720 00:00:10.379 TCP 23.104.0.1:53062 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:28:14.653 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59020 10 6452 1 2025-10-31 12:28:19.137 00:00:10.366 TCP 23.104.0.1:53372 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:29:14.825 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46340 10 6452 1 2025-10-31 12:29:19.539 00:00:10.372 TCP 23.104.0.1:36886 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:24:53.520 00:05:56.636 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 12:24:53.519 00:05:56.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 12:30:15.000 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36486 10 6452 1 2025-10-31 12:30:19.947 00:00:10.378 TCP 23.104.0.1:37640 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:30:39.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 12:30:39.316 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 12:31:15.221 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33206 10 6452 1 2025-10-31 12:31:20.361 00:00:10.363 TCP 23.104.0.1:38100 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:32:15.443 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43116 10 6452 1 2025-10-31 12:32:20.764 00:00:10.371 TCP 23.104.0.1:60336 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:33:15.651 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35692 10 6452 1 2025-10-31 12:33:21.170 00:00:10.365 TCP 23.104.0.1:44304 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:34:15.861 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45968 10 6452 1 2025-10-31 12:34:21.571 00:00:10.363 TCP 23.104.0.1:49316 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:35:16.092 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38144 10 6452 1 2025-10-31 12:35:21.971 00:00:10.370 TCP 23.104.0.1:43192 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:35:39.887 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 12:35:39.353 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 12:30:53.522 00:05:56.638 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 12:30:53.520 00:05:56.643 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 12:36:16.308 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52296 10 6452 1 2025-10-31 12:36:22.378 00:00:10.324 TCP 23.104.0.1:36280 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:37:16.484 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47094 10 6452 1 2025-10-31 12:37:22.741 00:00:10.368 TCP 23.104.0.1:45868 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:38:16.701 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55564 10 6452 1 2025-10-31 12:38:23.147 00:00:10.325 TCP 23.104.0.1:46570 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:39:16.909 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55912 10 6452 1 2025-10-31 12:39:23.511 00:00:10.367 TCP 23.104.0.1:44134 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:40:17.098 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56920 10 6452 1 2025-10-31 12:40:23.918 00:00:10.385 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:40:39.620 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 12:40:39.464 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 12:41:17.332 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56044 10 6452 1 2025-10-31 12:41:24.343 00:00:10.326 TCP 23.104.0.1:37430 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:36:53.525 00:05:56.647 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 12:36:53.527 00:05:56.642 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 12:42:17.539 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59408 10 6452 1 2025-10-31 12:42:24.704 00:00:10.365 TCP 23.104.0.1:34856 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:43:17.756 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56800 10 6452 1 2025-10-31 12:43:25.116 00:00:10.401 TCP 23.104.0.1:35030 -> 1.101.0.1:3000 15 1926 1 2025-10-31 12:44:17.966 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:48074 12 10375 1 2025-10-31 12:44:25.555 00:00:10.326 TCP 23.104.0.1:51888 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:45:18.224 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38974 10 6452 1 2025-10-31 12:45:25.918 00:00:10.318 TCP 23.104.0.1:45550 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:45:39.713 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 12:45:39.547 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 12:46:18.438 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56036 10 6452 1 2025-10-31 12:46:26.282 00:00:10.372 TCP 23.104.0.1:54188 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:47:18.652 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49036 10 6452 1 2025-10-31 12:47:26.693 00:00:10.367 TCP 23.104.0.1:56220 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:42:53.529 00:05:56.634 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 12:42:53.527 00:05:56.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 12:48:18.867 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52666 10 6452 1 2025-10-31 12:48:27.105 00:00:10.366 TCP 23.104.0.1:47116 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:49:19.088 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55884 10 6452 1 2025-10-31 12:49:27.516 00:00:10.367 TCP 23.104.0.1:41978 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:50:19.267 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40348 10 6452 1 2025-10-31 12:50:39.641 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 12:50:39.717 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 12:50:27.920 00:00:10.386 TCP 23.104.0.1:48620 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:51:19.484 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56012 10 6452 1 2025-10-31 12:51:28.345 00:00:10.319 TCP 23.104.0.1:32862 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:52:19.701 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39438 10 6452 1 2025-10-31 12:52:28.704 00:00:10.367 TCP 23.104.0.1:49056 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:53:19.917 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46218 10 6452 1 2025-10-31 12:53:29.109 00:00:10.363 TCP 23.104.0.1:56168 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:48:53.528 00:05:56.640 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 12:48:53.531 00:05:56.635 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 12:54:20.126 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42844 10 6452 1 2025-10-31 12:54:29.525 00:00:10.368 TCP 23.104.0.1:37852 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:55:20.342 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41210 10 6452 1 2025-10-31 12:55:39.678 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 12:55:29.933 00:00:10.374 TCP 23.104.0.1:49586 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:55:39.918 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 12:56:20.553 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40420 10 6452 1 2025-10-31 12:56:30.347 00:00:10.362 TCP 23.104.0.1:56254 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:57:20.767 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37706 10 6452 1 2025-10-31 12:57:30.752 00:00:10.355 TCP 23.104.0.1:59304 -> 1.101.0.1:3000 11 1507 1 2025-10-31 12:58:20.987 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:36994 10 6452 1 2025-10-31 12:58:31.135 00:00:10.366 TCP 23.104.0.1:41688 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507136, total packets: 1586, avg bps: 1059, avg pps: 0, avg bpp: 319 Time window: 2025-10-31 11:54:53 - 2025-10-31 12:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0024s User: 0.0024s Wall: 0.0013s flows/second: 122658.0 Runtime: 0.0013s