Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 19:54:52.126 00:05:03.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 19:59:08.839 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60616 10 6452 1 2025-11-03 19:59:08.436 00:00:10.376 TCP 23.104.0.1:42388 -> 1.101.0.1:3000 11 1507 1 2025-11-03 19:55:52.129 00:05:03.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 20:00:09.084 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47000 10 6452 1 2025-11-03 20:00:08.860 00:00:10.370 TCP 23.104.0.1:54490 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:01:09.304 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57520 10 6452 1 2025-11-03 20:01:09.264 00:00:10.326 TCP 23.104.0.1:40540 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:02:14.946 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 20:02:15.172 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 20:02:09.530 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49948 10 6452 1 2025-11-03 20:02:09.628 00:00:10.358 TCP 23.104.0.1:34860 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:03:09.749 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53922 10 6452 1 2025-11-03 20:03:10.031 00:00:10.364 TCP 23.104.0.1:39594 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:04:10.433 00:00:10.320 TCP 23.104.0.1:49952 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:04:09.971 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35292 10 6452 1 2025-11-03 20:00:52.129 00:05:03.096 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 20:05:10.791 00:00:10.335 TCP 23.104.0.1:35794 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:05:10.197 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44046 10 6452 1 2025-11-03 20:01:52.131 00:05:03.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 20:06:11.159 00:00:10.436 TCP 23.104.0.1:60080 -> 1.101.0.1:3000 15 1926 1 2025-11-03 20:06:10.367 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52328 12 10369 1 2025-11-03 20:07:15.173 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 20:07:14.982 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 20:07:10.601 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48916 10 6452 1 2025-11-03 20:07:11.635 00:00:10.368 TCP 23.104.0.1:56356 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:08:10.824 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40576 10 6452 1 2025-11-03 20:08:12.048 00:00:10.366 TCP 23.104.0.1:49130 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:09:11.069 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:44006 10 6452 1 2025-11-03 20:09:12.452 00:00:10.363 TCP 23.104.0.1:41394 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:10:11.246 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49946 10 6452 1 2025-11-03 20:10:12.851 00:00:10.385 TCP 23.104.0.1:33982 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:06:52.130 00:05:03.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 20:11:11.461 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60678 10 6452 1 2025-11-03 20:11:13.270 00:00:10.367 TCP 23.104.0.1:44406 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:07:52.133 00:05:03.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 20:12:15.217 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 20:12:15.347 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 20:12:11.673 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35662 10 6452 1 2025-11-03 20:12:13.668 00:00:10.325 TCP 23.104.0.1:51014 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:13:14.062 00:00:10.321 TCP 23.104.0.1:58694 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:13:11.889 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40838 10 6452 1 2025-11-03 20:14:12.105 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40164 10 6452 1 2025-11-03 20:14:14.422 00:00:10.365 TCP 23.104.0.1:41280 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:15:14.827 00:00:10.413 TCP 23.104.0.1:41764 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:15:12.316 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38290 10 6452 1 2025-11-03 20:16:12.528 00:00:10.338 TCP 1.101.0.1:3000 -> 22.102.0.1:36022 10 6452 1 2025-11-03 20:16:15.316 00:00:11.066 TCP 23.104.0.1:58076 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:12:52.132 00:05:03.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 20:17:15.143 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 20:17:15.368 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 20:17:16.420 00:00:10.365 TCP 23.104.0.1:35636 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:17:12.901 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60220 10 6452 1 2025-11-03 20:13:52.135 00:05:03.095 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 20:18:13.112 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48066 10 6452 1 2025-11-03 20:18:16.822 00:00:10.324 TCP 23.104.0.1:57134 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:19:13.320 00:00:10.906 TCP 1.101.0.1:3000 -> 22.102.0.1:50736 10 6452 1 2025-11-03 20:19:17.187 00:00:10.367 TCP 23.104.0.1:41732 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:20:14.265 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42180 10 6452 1 2025-11-03 20:20:17.595 00:00:10.329 TCP 23.104.0.1:60936 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:21:14.435 00:00:10.662 TCP 1.101.0.1:3000 -> 22.102.0.1:48660 10 6452 1 2025-11-03 20:21:17.956 00:00:10.330 TCP 23.104.0.1:50296 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:22:15.385 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 20:22:15.326 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 20:22:15.133 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55756 10 6452 1 2025-11-03 20:22:18.321 00:00:10.322 TCP 23.104.0.1:52282 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:18:52.133 00:05:03.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 20:23:15.305 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38564 10 6452 1 2025-11-03 20:23:18.683 00:00:10.324 TCP 23.104.0.1:51080 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:19:52.138 00:05:03.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 20:24:15.514 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50426 10 6452 1 2025-11-03 20:24:19.052 00:00:10.864 TCP 23.104.0.1:53906 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:25:15.726 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56634 10 6452 1 2025-11-03 20:25:19.953 00:00:10.369 TCP 23.104.0.1:54520 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:26:15.905 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34822 10 6452 1 2025-11-03 20:26:20.358 00:00:10.375 TCP 23.104.0.1:35670 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:27:15.595 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 20:27:15.397 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 20:27:16.122 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45084 10 6452 1 2025-11-03 20:27:20.770 00:00:10.373 TCP 23.104.0.1:37450 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:28:16.292 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38860 10 6452 1 2025-11-03 20:28:21.182 00:00:10.371 TCP 23.104.0.1:47424 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:24:52.137 00:05:03.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 20:29:16.502 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51206 10 6452 1 2025-11-03 20:29:21.586 00:00:10.365 TCP 23.104.0.1:48856 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:25:52.138 00:05:03.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 20:30:16.720 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42846 10 6452 1 2025-11-03 20:30:21.985 00:00:10.367 TCP 23.104.0.1:44900 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:31:16.941 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:50112 10 6452 1 2025-11-03 20:31:22.393 00:00:10.365 TCP 23.104.0.1:52912 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:32:15.486 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 20:32:15.513 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 20:32:17.133 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40260 10 6452 1 2025-11-03 20:32:22.800 00:00:10.377 TCP 23.104.0.1:37902 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:33:17.344 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55102 10 6452 1 2025-11-03 20:33:23.214 00:00:10.366 TCP 23.104.0.1:59976 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:34:17.553 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37034 10 6452 1 2025-11-03 20:34:23.615 00:00:10.315 TCP 23.104.0.1:51086 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:30:52.136 00:05:03.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 20:35:17.764 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46138 10 6452 1 2025-11-03 20:35:23.973 00:00:10.770 TCP 23.104.0.1:57054 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:31:52.139 00:05:03.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 20:36:17.977 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48112 10 6452 1 2025-11-03 20:36:24.779 00:00:10.370 TCP 23.104.0.1:57464 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:37:15.888 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 20:37:16.034 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 20:37:18.215 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60576 12 6556 1 2025-11-03 20:37:25.190 00:00:10.365 TCP 23.104.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:38:18.446 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46742 10 6452 1 2025-11-03 20:38:25.590 00:00:10.323 TCP 23.104.0.1:43010 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:39:18.616 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59836 10 6452 1 2025-11-03 20:39:25.950 00:00:10.366 TCP 23.104.0.1:33446 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:40:18.827 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46686 10 6452 1 2025-11-03 20:40:26.354 00:00:10.364 TCP 23.104.0.1:44474 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:36:52.140 00:05:03.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 20:41:18.998 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44668 11 6492 1 2025-11-03 20:41:26.755 00:00:10.322 TCP 23.104.0.1:37894 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:37:52.142 00:05:03.095 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 20:42:15.975 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 20:42:15.765 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 20:42:19.172 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50098 10 6452 1 2025-11-03 20:42:27.118 00:00:10.368 TCP 23.104.0.1:59480 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:43:19.339 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58630 10 6452 1 2025-11-03 20:43:27.525 00:00:10.331 TCP 23.104.0.1:45342 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:44:19.558 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38630 10 6452 1 2025-11-03 20:44:27.908 00:00:10.368 TCP 23.104.0.1:39684 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:45:19.775 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59574 10 6452 1 2025-11-03 20:45:28.321 00:00:10.366 TCP 23.104.0.1:53224 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:46:19.982 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48616 10 6452 1 2025-11-03 20:46:28.727 00:00:12.148 TCP 23.104.0.1:48162 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:42:52.140 00:05:03.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 20:47:16.158 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 20:47:16.064 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 20:47:20.223 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35486 10 6452 1 2025-11-03 20:47:30.950 00:00:10.363 TCP 23.104.0.1:51104 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:43:52.143 00:05:03.095 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 20:48:20.435 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33490 10 6452 1 2025-11-03 20:48:31.353 00:00:10.368 TCP 23.104.0.1:59650 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:49:20.644 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54576 10 6452 1 2025-11-03 20:49:31.757 00:00:10.383 TCP 23.104.0.1:46240 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:50:20.858 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49558 10 6452 1 2025-11-03 20:50:32.176 00:00:10.372 TCP 23.104.0.1:47616 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:51:21.040 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38938 10 6452 1 2025-11-03 20:51:32.585 00:00:10.376 TCP 23.104.0.1:59472 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:52:16.187 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 20:52:16.072 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 20:52:21.251 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58428 10 6452 1 2025-11-03 20:52:33.010 00:00:10.391 TCP 23.104.0.1:52398 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:48:52.141 00:05:03.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 20:53:21.464 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58992 10 6452 1 2025-11-03 20:53:33.438 00:00:10.363 TCP 23.104.0.1:44288 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:49:52.144 00:05:03.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 20:54:21.633 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55464 10 6452 1 2025-11-03 20:54:33.836 00:00:10.379 TCP 23.104.0.1:50268 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:55:21.806 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36456 10 6452 1 2025-11-03 20:55:34.251 00:00:10.364 TCP 23.104.0.1:58638 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:56:22.022 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60408 10 6452 1 2025-11-03 20:56:34.657 00:00:10.367 TCP 23.104.0.1:38114 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:57:16.339 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 20:57:16.526 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 20:57:22.198 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36600 10 6452 1 2025-11-03 20:57:35.081 00:00:18.278 TCP 23.104.0.1:47182 -> 1.101.0.1:3000 11 1507 1 2025-11-03 20:58:22.410 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56626 10 6452 1 Summary: total flows: 163, total bytes: 501321, total packets: 1570, avg bps: 1049, avg pps: 0, avg bpp: 319 Time window: 2025-11-03 19:54:52 - 2025-11-03 20:58:32 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0020s Wall: 0.0025s flows/second: 64503.4 Runtime: 0.0025s