Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 06:58:40.076 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39588 10 6452 1 2025-11-03 06:54:51.850 00:05:03.132 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 06:59:10.750 00:00:10.385 TCP 23.104.0.1:56762 -> 1.101.0.1:3000 11 1507 1 2025-11-03 06:59:40.290 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51870 10 6452 1 2025-11-03 06:55:51.854 00:05:03.127 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 07:00:11.180 00:00:10.333 TCP 23.104.0.1:35046 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:00:40.505 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35206 10 6452 1 2025-11-03 07:01:11.549 00:00:10.371 TCP 23.104.0.1:40858 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:01:40.717 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33408 10 6452 1 2025-11-03 07:01:59.410 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 07:01:59.315 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 07:02:11.956 00:00:10.381 TCP 23.104.0.1:59508 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:02:40.958 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52708 10 6452 1 2025-11-03 07:03:12.375 00:00:10.370 TCP 23.104.0.1:53174 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:03:41.194 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45148 10 6452 1 2025-11-03 07:04:12.787 00:00:10.384 TCP 23.104.0.1:51926 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:04:41.411 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37870 10 6452 1 2025-11-03 07:00:51.852 00:05:03.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 07:05:13.215 00:00:10.369 TCP 23.104.0.1:43366 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:05:41.614 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54370 10 6452 1 2025-11-03 07:01:51.854 00:05:03.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 07:06:13.619 00:00:10.365 TCP 23.104.0.1:52322 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:06:41.830 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36386 10 6452 1 2025-11-03 07:06:59.537 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 07:06:59.514 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 07:07:14.022 00:00:12.955 TCP 23.104.0.1:49122 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:07:42.066 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53138 10 6452 1 2025-11-03 07:08:17.019 00:00:10.321 TCP 23.104.0.1:50430 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:08:42.278 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60438 10 6452 1 2025-11-03 07:09:17.386 00:00:10.321 TCP 23.104.0.1:52500 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:09:42.457 00:00:10.454 TCP 1.101.0.1:3000 -> 22.102.0.1:35752 10 6452 1 2025-11-03 07:10:17.748 00:00:10.437 TCP 23.104.0.1:45492 -> 1.101.0.1:3000 15 1926 1 2025-11-03 07:10:42.952 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:59298 14 10473 1 2025-11-03 07:06:51.853 00:05:03.135 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 07:11:18.217 00:00:10.363 TCP 23.104.0.1:34584 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:07:51.855 00:05:03.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 07:11:43.218 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39494 10 6452 1 2025-11-03 07:11:59.842 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 07:11:59.768 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 07:12:18.616 00:00:10.363 TCP 23.104.0.1:42456 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:12:43.439 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56454 10 6452 1 2025-11-03 07:13:19.027 00:00:10.329 TCP 23.104.0.1:51952 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:13:43.622 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48588 10 6452 1 2025-11-03 07:14:19.389 00:00:10.362 TCP 23.104.0.1:57312 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:14:43.844 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37238 10 6452 1 2025-11-03 07:15:19.784 00:00:10.368 TCP 23.104.0.1:60936 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:15:44.090 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40800 12 6556 1 2025-11-03 07:16:20.197 00:00:10.367 TCP 23.104.0.1:51548 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:16:44.308 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46422 10 6452 1 2025-11-03 07:12:51.853 00:05:03.137 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 07:16:59.622 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 07:16:59.763 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 07:17:20.610 00:00:10.330 TCP 23.104.0.1:41958 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:13:51.856 00:05:03.131 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 07:17:44.514 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60118 10 6452 1 2025-11-03 07:18:20.978 00:00:10.324 TCP 23.104.0.1:55372 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:18:44.733 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35844 10 6452 1 2025-11-03 07:19:21.340 00:00:10.760 TCP 23.104.0.1:46536 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:19:44.902 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:59514 10 6452 1 2025-11-03 07:20:22.148 00:00:10.323 TCP 23.104.0.1:35534 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:20:45.100 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53820 10 6452 1 2025-11-03 07:21:22.508 00:00:10.369 TCP 23.104.0.1:50206 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:21:45.310 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59188 10 6452 1 2025-11-03 07:22:00.226 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 07:22:00.227 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 07:22:22.926 00:00:10.392 TCP 23.104.0.1:37946 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:22:45.526 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33538 10 6452 1 2025-11-03 07:18:51.855 00:05:03.136 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 07:23:23.360 00:00:10.364 TCP 23.104.0.1:55142 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:23:45.739 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41092 10 6452 1 2025-11-03 07:19:51.857 00:05:03.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 07:24:23.760 00:00:10.328 TCP 23.104.0.1:50336 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:24:45.954 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:59782 12 6556 1 2025-11-03 07:25:24.127 00:00:10.383 TCP 23.104.0.1:50982 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:25:46.191 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:45458 10 6452 1 2025-11-03 07:26:24.547 00:00:10.365 TCP 23.104.0.1:48708 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:26:46.371 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60714 10 6452 1 2025-11-03 07:27:00.289 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 07:27:00.265 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 07:27:24.951 00:00:10.369 TCP 23.104.0.1:52862 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:27:46.590 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59636 10 6452 1 2025-11-03 07:28:25.362 00:00:10.322 TCP 23.104.0.1:33216 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:24:51.856 00:05:03.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 07:28:46.800 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35708 10 6452 1 2025-11-03 07:29:25.723 00:00:10.324 TCP 23.104.0.1:48186 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:25:51.859 00:05:03.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 07:29:47.016 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:36548 10 6452 1 2025-11-03 07:30:26.106 00:00:10.363 TCP 23.104.0.1:32972 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:30:47.196 00:00:10.371 TCP 1.101.0.1:3000 -> 22.102.0.1:43740 10 6452 1 2025-11-03 07:31:26.507 00:00:10.364 TCP 23.104.0.1:37118 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:32:00.002 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 07:31:47.606 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57660 10 6452 1 2025-11-03 07:32:00.155 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 07:32:26.908 00:00:10.363 TCP 23.104.0.1:33722 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:32:47.825 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41768 10 6452 1 2025-11-03 07:33:27.305 00:00:10.369 TCP 23.104.0.1:40616 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:33:48.057 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60328 10 6452 1 2025-11-03 07:34:27.709 00:00:10.380 TCP 23.104.0.1:50056 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:30:51.856 00:05:03.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 07:34:48.271 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38818 10 6452 1 2025-11-03 07:35:28.132 00:00:10.370 TCP 23.104.0.1:43938 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:31:51.859 00:05:03.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 07:35:48.485 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35458 10 6452 1 2025-11-03 07:36:28.536 00:00:10.367 TCP 23.104.0.1:56490 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:36:48.702 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34914 10 6452 1 2025-11-03 07:37:00.061 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 07:37:00.240 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 07:37:28.938 00:00:10.408 TCP 23.104.0.1:41958 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:37:48.916 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56494 10 6452 1 2025-11-03 07:38:29.380 00:00:10.368 TCP 23.104.0.1:52112 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:38:49.130 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56674 10 6452 1 2025-11-03 07:39:29.784 00:00:10.329 TCP 23.104.0.1:55182 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:39:49.344 00:00:10.539 TCP 1.101.0.1:3000 -> 22.102.0.1:36646 10 6452 1 2025-11-03 07:40:30.150 00:00:10.326 TCP 23.104.0.1:37462 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:36:51.859 00:05:03.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 07:40:49.924 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:39830 10 6452 1 2025-11-03 07:41:30.513 00:00:10.768 TCP 23.104.0.1:58498 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:37:51.861 00:05:03.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 07:41:50.108 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53674 10 6452 1 2025-11-03 07:42:00.272 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 07:42:00.265 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 07:42:31.314 00:00:10.364 TCP 23.104.0.1:38684 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:42:50.320 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55976 10 6452 1 2025-11-03 07:43:31.718 00:00:10.388 TCP 23.104.0.1:52294 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:43:50.492 00:00:10.641 TCP 1.101.0.1:3000 -> 22.102.0.1:43502 10 6452 1 2025-11-03 07:44:32.142 00:00:10.771 TCP 23.104.0.1:34176 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:44:51.169 00:00:13.946 TCP 1.101.0.1:3000 -> 22.102.0.1:43182 10 6452 1 2025-11-03 07:45:32.952 00:00:10.369 TCP 23.104.0.1:60816 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:45:55.161 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55680 10 6452 1 2025-11-03 07:46:33.352 00:00:10.361 TCP 23.104.0.1:54206 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:42:51.859 00:05:03.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 07:47:00.502 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 07:47:00.338 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 07:46:55.380 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37842 10 6452 1 2025-11-03 07:47:33.751 00:00:10.361 TCP 23.104.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:43:51.863 00:05:03.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 07:47:55.550 00:00:10.785 TCP 1.101.0.1:3000 -> 22.102.0.1:34536 10 6452 1 2025-11-03 07:48:34.148 00:00:10.365 TCP 23.104.0.1:56502 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:48:56.379 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33606 10 6452 1 2025-11-03 07:49:34.555 00:00:10.366 TCP 23.104.0.1:35008 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:49:56.550 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52756 10 6452 1 2025-11-03 07:50:34.960 00:00:10.365 TCP 23.104.0.1:58678 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:50:56.727 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56264 10 6452 1 2025-11-03 07:51:35.367 00:00:10.367 TCP 23.104.0.1:36012 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:52:00.435 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 07:52:00.337 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 07:51:56.939 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49610 10 6452 1 2025-11-03 07:52:35.773 00:00:10.331 TCP 23.104.0.1:34890 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:48:51.860 00:05:03.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 07:52:57.171 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51524 10 6452 1 2025-11-03 07:53:36.149 00:00:10.365 TCP 23.104.0.1:48196 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:49:51.863 00:05:03.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 07:53:57.388 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:35806 10 6452 1 2025-11-03 07:54:36.550 00:00:10.369 TCP 23.104.0.1:56272 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:54:57.641 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50030 10 6452 1 2025-11-03 07:55:36.954 00:00:10.372 TCP 23.104.0.1:41732 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:55:57.848 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:57590 10 6452 1 2025-11-03 07:56:37.362 00:00:10.363 TCP 23.104.0.1:39828 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:57:00.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 07:57:00.556 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 07:56:58.087 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42508 10 6452 1 2025-11-03 07:57:37.762 00:00:10.380 TCP 23.104.0.1:37028 -> 1.101.0.1:3000 11 1507 1 2025-11-03 07:57:58.307 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33072 10 6452 1 2025-11-03 07:58:38.184 00:00:10.322 TCP 23.104.0.1:41820 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502996, total packets: 1584, avg bps: 1048, avg pps: 0, avg bpp: 317 Time window: 2025-11-03 06:54:51 - 2025-11-03 07:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0020s Wall: 0.0029s flows/second: 56354.7 Runtime: 0.0029s