Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 12:54:50.785 00:05:03.357 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 12:59:40.947 00:00:10.320 TCP 1.101.0.1:3000 -> 22.102.0.1:36102 12 10369 1 2025-11-01 12:59:33.650 00:00:17.682 TCP 23.104.0.1:50254 -> 1.101.0.1:3000 15 1926 1 2025-11-01 12:54:54.138 00:05:56.653 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 13:00:41.309 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35666 10 6452 1 2025-11-01 13:00:41.374 00:00:10.366 TCP 23.104.0.1:46294 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:01:09.070 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 13:01:08.760 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 13:01:41.526 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45072 10 6452 1 2025-11-01 13:01:41.780 00:00:10.364 TCP 23.104.0.1:58956 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:02:41.747 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45762 10 6452 1 2025-11-01 13:02:42.182 00:00:10.328 TCP 23.104.0.1:33384 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:03:42.550 00:00:10.365 TCP 23.104.0.1:36776 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:03:41.968 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43228 10 6452 1 2025-11-01 13:04:42.950 00:00:10.366 TCP 23.104.0.1:50894 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:04:42.194 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50534 10 6452 1 2025-11-01 13:00:50.787 00:05:03.358 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 13:00:54.141 00:05:56.650 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 13:05:42.410 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35608 10 6452 1 2025-11-01 13:05:43.360 00:00:10.362 TCP 23.104.0.1:57648 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:06:08.823 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 13:06:08.904 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 13:06:42.632 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44580 10 6452 1 2025-11-01 13:06:43.762 00:00:10.440 TCP 23.104.0.1:33852 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:07:44.235 00:00:10.369 TCP 23.104.0.1:44948 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:07:42.807 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38144 10 6452 1 2025-11-01 13:08:44.643 00:00:10.373 TCP 23.104.0.1:35612 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:08:43.030 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42984 10 6452 1 2025-11-01 13:09:45.062 00:00:10.366 TCP 23.104.0.1:44920 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:09:43.239 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41940 10 6452 1 2025-11-01 13:10:45.470 00:00:10.365 TCP 23.104.0.1:60442 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:10:43.449 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53386 10 6452 1 2025-11-01 13:06:50.789 00:05:03.357 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 13:11:09.044 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 13:11:09.499 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 13:06:54.143 00:05:56.649 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 13:11:45.869 00:00:10.365 TCP 23.104.0.1:53952 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:11:43.661 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40270 10 6452 1 2025-11-01 13:12:46.273 00:00:10.367 TCP 23.104.0.1:36942 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:12:43.874 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53520 10 6452 1 2025-11-01 13:13:44.107 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41744 10 6452 1 2025-11-01 13:13:46.675 00:00:10.368 TCP 23.104.0.1:41606 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:14:44.321 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:37038 10 6452 1 2025-11-01 13:14:47.099 00:00:10.368 TCP 23.104.0.1:58164 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:15:44.526 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47870 10 6452 1 2025-11-01 13:15:47.503 00:00:10.368 TCP 23.104.0.1:34732 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:16:09.004 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 13:16:09.016 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 13:16:44.748 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59936 10 6452 1 2025-11-01 13:12:50.790 00:05:03.358 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 13:16:47.909 00:00:10.368 TCP 23.104.0.1:39632 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:12:54.145 00:05:56.651 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 13:17:44.964 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40718 10 6452 1 2025-11-01 13:17:48.318 00:00:10.382 TCP 23.104.0.1:33260 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:18:45.193 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37964 10 6452 1 2025-11-01 13:18:48.759 00:00:10.386 TCP 23.104.0.1:50306 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:19:45.418 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6452 1 2025-11-01 13:19:49.188 00:00:10.370 TCP 23.104.0.1:60858 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:20:45.630 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37470 10 6452 1 2025-11-01 13:20:49.598 00:00:10.371 TCP 23.104.0.1:49740 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:21:09.308 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 13:21:09.336 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 13:21:45.857 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:53372 10 6452 1 2025-11-01 13:21:50.008 00:00:10.364 TCP 23.104.0.1:51390 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:22:46.101 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50234 10 6452 1 2025-11-01 13:18:50.793 00:05:03.358 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 13:22:50.414 00:00:10.368 TCP 23.104.0.1:35408 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:18:54.147 00:05:56.653 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 13:23:46.318 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59820 10 6452 1 2025-11-01 13:23:50.823 00:00:10.363 TCP 23.104.0.1:49880 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:24:46.539 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:48942 12 10375 1 2025-11-01 13:24:51.226 00:00:10.398 TCP 23.104.0.1:37768 -> 1.101.0.1:3000 15 1926 1 2025-11-01 13:25:46.790 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59372 10 6452 1 2025-11-01 13:25:51.664 00:00:10.365 TCP 23.104.0.1:47706 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:26:09.065 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 13:26:09.367 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 13:26:47.018 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45152 10 6452 1 2025-11-01 13:26:52.099 00:00:10.366 TCP 23.104.0.1:49860 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:27:47.241 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53682 10 6452 1 2025-11-01 13:27:52.499 00:00:10.326 TCP 23.104.0.1:49436 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:24:50.795 00:05:03.355 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 13:28:47.417 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50350 10 6452 1 2025-11-01 13:28:52.859 00:00:10.371 TCP 23.104.0.1:58512 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:24:54.148 00:05:56.652 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 13:29:47.636 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:48940 10 6452 1 2025-11-01 13:29:53.267 00:00:10.327 TCP 23.104.0.1:40904 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:30:47.893 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49602 10 6452 1 2025-11-01 13:30:53.634 00:00:10.562 TCP 23.104.0.1:44224 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:31:09.467 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 13:31:09.457 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 13:31:48.125 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41466 10 6452 1 2025-11-01 13:31:54.231 00:00:10.324 TCP 23.104.0.1:36230 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:32:48.354 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42526 10 6452 1 2025-11-01 13:32:54.593 00:00:10.361 TCP 23.104.0.1:35452 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:33:48.571 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39976 10 6452 1 2025-11-01 13:33:54.993 00:00:10.374 TCP 23.104.0.1:57668 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:30:50.798 00:05:03.355 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 13:34:48.790 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44668 10 6452 1 2025-11-01 13:34:55.431 00:00:10.325 TCP 23.104.0.1:49010 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:30:54.149 00:05:56.651 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 13:35:49.008 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:42922 10 6452 1 2025-11-01 13:35:55.792 00:00:10.372 TCP 23.104.0.1:59358 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:36:09.520 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 13:36:09.691 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 13:36:49.192 00:00:10.955 TCP 1.101.0.1:3000 -> 22.102.0.1:50212 10 6452 1 2025-11-01 13:36:56.198 00:00:10.815 TCP 23.104.0.1:56494 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:37:50.185 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47536 10 6452 1 2025-11-01 13:37:57.063 00:00:10.369 TCP 23.104.0.1:60088 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:38:50.408 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49796 10 6452 1 2025-11-01 13:38:57.470 00:00:10.332 TCP 23.104.0.1:39600 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:39:50.631 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51126 10 6452 1 2025-11-01 13:39:57.843 00:00:10.389 TCP 23.104.0.1:39788 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:36:50.798 00:05:03.356 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 13:40:50.853 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51818 10 6452 1 2025-11-01 13:41:10.474 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 13:40:58.274 00:00:10.364 TCP 23.104.0.1:50430 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:41:10.454 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 13:36:54.150 00:05:56.651 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 13:41:51.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54554 10 6452 1 2025-11-01 13:41:58.679 00:00:10.323 TCP 23.104.0.1:49260 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:42:51.303 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48642 10 6452 1 2025-11-01 13:42:59.046 00:00:11.802 TCP 23.104.0.1:56596 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:43:51.518 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55748 10 6452 1 2025-11-01 13:44:00.887 00:00:10.380 TCP 23.104.0.1:57092 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:44:51.690 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36086 10 6452 1 2025-11-01 13:45:01.304 00:00:10.361 TCP 23.104.0.1:58160 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:45:51.870 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37992 10 6452 1 2025-11-01 13:46:09.823 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 13:46:09.739 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 13:46:01.703 00:00:10.362 TCP 23.104.0.1:54128 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:42:50.799 00:05:03.356 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 13:46:52.099 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60336 10 6452 1 2025-11-01 13:47:02.120 00:00:10.366 TCP 23.104.0.1:49634 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:42:54.152 00:05:56.650 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 13:47:52.315 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39854 10 6452 1 2025-11-01 13:48:02.523 00:00:10.363 TCP 23.104.0.1:49876 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:48:52.536 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:54006 10 6452 1 2025-11-01 13:49:02.926 00:00:10.381 TCP 23.104.0.1:57946 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:49:52.721 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42832 10 6452 1 2025-11-01 13:50:03.342 00:00:10.364 TCP 23.104.0.1:53550 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:50:52.935 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:51698 10 6452 1 2025-11-01 13:51:09.723 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 13:51:10.006 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 13:51:03.745 00:00:10.362 TCP 23.104.0.1:41718 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:51:53.143 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50702 10 6452 1 2025-11-01 13:52:04.140 00:00:10.323 TCP 23.104.0.1:39716 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:48:50.800 00:05:03.357 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 13:52:53.358 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57392 10 6452 1 2025-11-01 13:53:04.502 00:00:10.335 TCP 23.104.0.1:47198 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:48:54.152 00:05:56.651 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 13:53:53.567 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:53764 10 6452 1 2025-11-01 13:54:04.883 00:00:10.341 TCP 23.104.0.1:42846 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:54:53.800 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:52476 10 6452 1 2025-11-01 13:55:05.265 00:00:10.363 TCP 23.104.0.1:56208 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:55:53.985 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44144 10 6452 1 2025-11-01 13:56:10.008 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 13:56:10.200 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 13:56:05.664 00:00:10.320 TCP 23.104.0.1:45798 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:56:54.217 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54256 12 6556 1 2025-11-01 13:57:06.024 00:00:10.620 TCP 23.104.0.1:47730 -> 1.101.0.1:3000 11 1507 1 2025-11-01 13:57:54.432 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46346 10 6452 1 2025-11-01 13:58:06.679 00:00:10.361 TCP 23.104.0.1:58594 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499171, total packets: 1565, avg bps: 1049, avg pps: 0, avg bpp: 318 Time window: 2025-11-01 12:54:50 - 2025-11-01 13:58:17 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0043s User: 0.0011s Wall: 0.0052s flows/second: 31364.3 Runtime: 0.0052s