Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 00:58:38.196 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43858 10 6452 1 2025-11-04 00:54:52.213 00:05:03.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 00:58:58.910 00:00:10.367 TCP 23.104.0.1:40782 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:59:38.412 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:55410 10 6452 1 2025-11-04 00:55:52.216 00:05:03.100 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 00:59:59.316 00:00:10.371 TCP 23.104.0.1:51528 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:00:38.695 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51672 10 6452 1 2025-11-04 01:00:59.720 00:00:10.329 TCP 23.104.0.1:52218 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:01:38.866 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57632 10 6452 1 2025-11-04 01:02:00.115 00:00:10.359 TCP 23.104.0.1:57976 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:02:21.840 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 01:02:21.455 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 01:02:39.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51034 10 6452 1 2025-11-04 01:03:00.515 00:00:10.369 TCP 23.104.0.1:41440 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:03:39.297 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39996 10 6452 1 2025-11-04 01:04:00.920 00:00:10.337 TCP 23.104.0.1:39906 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:04:39.510 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35146 10 6452 1 2025-11-04 01:00:52.215 00:05:03.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 01:05:01.296 00:00:10.364 TCP 23.104.0.1:57804 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:05:39.726 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33740 10 6452 1 2025-11-04 01:01:52.220 00:05:03.100 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 01:06:01.701 00:00:10.368 TCP 23.104.0.1:38108 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:06:39.902 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55522 10 6452 1 2025-11-04 01:07:02.108 00:00:10.361 TCP 23.104.0.1:37748 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:07:21.395 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 01:07:21.196 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 01:07:40.118 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54540 10 6452 1 2025-11-04 01:08:02.505 00:00:10.365 TCP 23.104.0.1:59376 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:08:40.328 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55090 10 6452 1 2025-11-04 01:09:02.905 00:00:10.366 TCP 23.104.0.1:55968 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:09:40.541 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48180 10 6452 1 2025-11-04 01:10:03.314 00:00:10.365 TCP 23.104.0.1:55712 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:10:40.720 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50134 10 6452 1 2025-11-04 01:06:52.217 00:05:03.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 01:11:03.717 00:00:10.332 TCP 23.104.0.1:58046 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:11:40.935 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:38030 10 6452 1 2025-11-04 01:07:52.219 00:05:03.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 01:12:04.106 00:00:10.365 TCP 23.104.0.1:42274 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:12:21.323 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 01:12:21.395 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 01:12:41.170 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:48164 10 6452 1 2025-11-04 01:13:04.506 00:00:10.366 TCP 23.104.0.1:57208 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:13:41.378 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59500 10 6452 1 2025-11-04 01:14:04.912 00:00:10.385 TCP 23.104.0.1:39208 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:14:41.589 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55750 10 6452 1 2025-11-04 01:15:05.335 00:00:10.361 TCP 23.104.0.1:55344 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:15:41.816 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44894 10 6452 1 2025-11-04 01:16:05.698 00:00:10.368 TCP 23.104.0.1:36992 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:16:42.076 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49848 10 6452 1 2025-11-04 01:12:52.216 00:05:03.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 01:17:06.105 00:00:10.322 TCP 23.104.0.1:51364 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:17:21.475 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 01:17:21.538 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 01:17:42.290 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60940 10 6452 1 2025-11-04 01:13:52.219 00:05:03.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 01:18:06.464 00:00:10.364 TCP 23.104.0.1:46316 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:18:42.466 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:38894 10 6452 1 2025-11-04 01:19:06.873 00:00:10.365 TCP 23.104.0.1:34410 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:19:42.643 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44350 10 6452 1 2025-11-04 01:20:07.279 00:00:10.367 TCP 23.104.0.1:37272 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:20:42.852 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:60356 11 7373 1 2025-11-04 01:21:07.686 00:00:10.371 TCP 23.104.0.1:50388 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:21:43.108 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42902 10 6452 1 2025-11-04 01:22:21.679 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 01:22:08.112 00:00:10.363 TCP 23.104.0.1:46436 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:22:21.632 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 01:22:43.322 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58384 10 6452 1 2025-11-04 01:18:52.218 00:05:03.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 01:23:08.515 00:00:10.363 TCP 23.104.0.1:57556 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:23:43.531 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37342 10 6452 1 2025-11-04 01:19:52.220 00:05:03.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 01:24:08.916 00:00:10.360 TCP 23.104.0.1:43354 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:24:43.708 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35294 10 6452 1 2025-11-04 01:25:09.321 00:00:10.323 TCP 23.104.0.1:33784 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:25:43.888 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41494 10 6452 1 2025-11-04 01:26:09.686 00:00:10.368 TCP 23.104.0.1:39272 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:26:44.111 00:00:11.624 TCP 1.101.0.1:3000 -> 22.102.0.1:49428 11 6504 1 2025-11-04 01:27:21.633 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 01:27:10.107 00:00:10.325 TCP 23.104.0.1:52784 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:27:21.585 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 01:27:45.776 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33606 10 6452 1 2025-11-04 01:28:10.469 00:00:10.365 TCP 23.104.0.1:55218 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:28:45.992 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46606 10 6452 1 2025-11-04 01:24:52.219 00:05:03.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 01:29:10.871 00:00:10.324 TCP 23.104.0.1:40514 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:25:52.221 00:05:03.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 01:29:46.219 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52432 10 6452 1 2025-11-04 01:30:11.229 00:00:10.362 TCP 23.104.0.1:40178 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:30:46.434 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48652 10 6452 1 2025-11-04 01:31:11.634 00:00:10.318 TCP 23.104.0.1:38272 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:31:46.650 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60584 10 6452 1 2025-11-04 01:32:21.832 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 01:32:21.515 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 01:32:11.990 00:00:10.372 TCP 23.104.0.1:40936 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:32:46.864 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:37318 10 6452 1 2025-11-04 01:33:12.397 00:00:10.322 TCP 23.104.0.1:49896 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:33:47.108 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:43048 10 6452 1 2025-11-04 01:34:12.768 00:00:10.373 TCP 23.104.0.1:37012 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:30:52.220 00:05:03.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 01:34:47.274 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51974 10 6452 1 2025-11-04 01:35:13.178 00:00:10.369 TCP 23.104.0.1:33206 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:31:52.225 00:05:03.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 01:35:47.486 00:00:17.657 TCP 1.101.0.1:3000 -> 22.102.0.1:42364 10 6452 1 2025-11-04 01:36:13.582 00:00:10.364 TCP 23.104.0.1:36240 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:36:55.203 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59312 10 6452 1 2025-11-04 01:37:21.765 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 01:37:21.908 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 01:37:13.987 00:00:10.381 TCP 23.104.0.1:54920 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:37:55.428 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40734 10 6452 1 2025-11-04 01:38:14.412 00:00:10.367 TCP 23.104.0.1:39978 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:38:55.644 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53300 10 6452 1 2025-11-04 01:39:14.817 00:00:10.710 TCP 23.104.0.1:35934 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:39:55.859 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54574 10 6452 1 2025-11-04 01:40:15.571 00:00:10.363 TCP 23.104.0.1:60644 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:36:52.222 00:05:03.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 01:40:56.089 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34366 10 6452 1 2025-11-04 01:41:15.964 00:00:10.379 TCP 23.104.0.1:43990 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:37:52.225 00:05:03.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 01:41:56.297 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:33214 10 6452 1 2025-11-04 01:42:21.716 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 01:42:21.959 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 01:42:16.380 00:00:10.764 TCP 23.104.0.1:57262 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:42:56.485 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47800 10 6452 1 2025-11-04 01:43:17.201 00:00:10.367 TCP 23.104.0.1:54502 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:43:56.700 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42992 10 6452 1 2025-11-04 01:44:17.611 00:00:10.374 TCP 23.104.0.1:47686 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:44:56.917 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:59586 10 6452 1 2025-11-04 01:45:18.027 00:00:10.483 TCP 23.104.0.1:44918 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:45:57.097 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44086 10 6452 1 2025-11-04 01:46:18.554 00:00:10.373 TCP 23.104.0.1:35662 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:42:52.225 00:05:03.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 01:46:57.310 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37088 10 6452 1 2025-11-04 01:47:21.816 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 01:47:22.336 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 01:47:18.965 00:00:10.393 TCP 23.104.0.1:38504 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:43:52.226 00:05:03.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 01:47:57.480 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40366 10 6452 1 2025-11-04 01:48:19.402 00:00:10.339 TCP 23.104.0.1:55090 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:48:57.696 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42566 10 6452 1 2025-11-04 01:49:19.800 00:00:10.368 TCP 23.104.0.1:56918 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:49:57.869 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49162 10 6452 1 2025-11-04 01:50:20.205 00:00:10.363 TCP 23.104.0.1:35134 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:50:58.090 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37166 10 6452 1 2025-11-04 01:51:20.604 00:00:10.328 TCP 23.104.0.1:42184 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:51:58.309 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55186 10 6452 1 2025-11-04 01:52:22.170 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 01:52:22.143 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 01:52:20.970 00:00:10.377 TCP 23.104.0.1:44644 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:48:52.225 00:05:03.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 01:52:58.528 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54334 10 6452 1 2025-11-04 01:53:21.383 00:00:10.320 TCP 23.104.0.1:44278 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:49:52.227 00:05:03.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 01:53:58.696 00:00:10.528 TCP 1.101.0.1:3000 -> 22.102.0.1:60306 10 6452 1 2025-11-04 01:54:21.739 00:00:10.367 TCP 23.104.0.1:34464 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:54:59.267 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39566 10 6452 1 2025-11-04 01:55:22.142 00:00:10.369 TCP 23.104.0.1:51364 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:55:59.477 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:50698 10 6452 1 2025-11-04 01:56:22.549 00:00:10.325 TCP 23.104.0.1:49366 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:56:59.660 00:00:22.252 TCP 1.101.0.1:3000 -> 22.102.0.1:47434 10 6452 1 2025-11-04 01:57:22.180 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 01:57:22.112 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 01:57:22.910 00:00:10.362 TCP 23.104.0.1:53040 -> 1.101.0.1:3000 11 1507 1 2025-11-04 01:58:11.961 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42516 10 6452 1 2025-11-04 01:58:23.309 00:00:10.362 TCP 23.104.0.1:38928 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 499321, total packets: 1574, avg bps: 1045, avg pps: 0, avg bpp: 317 Time window: 2025-11-04 00:54:52 - 2025-11-04 01:58:33 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0020s User: 0.0030s Wall: 0.0029s flows/second: 55688.6 Runtime: 0.0030s