Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 10:54:52.404 00:05:03.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 10:59:04.296 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50776 10 6452 1 2025-11-04 10:59:16.909 00:00:10.363 TCP 23.104.0.1:35278 -> 1.101.0.1:3000 11 1507 1 2025-11-04 10:55:52.405 00:05:03.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 11:00:04.518 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36536 10 6452 1 2025-11-04 11:00:17.315 00:00:10.359 TCP 23.104.0.1:57432 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:01:04.738 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42246 10 6452 1 2025-11-04 11:01:17.718 00:00:10.343 TCP 23.104.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:02:04.960 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36052 10 6452 1 2025-11-04 11:02:18.107 00:00:10.364 TCP 23.104.0.1:50698 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:02:33.271 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 11:02:33.154 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 11:03:05.189 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44490 10 6452 1 2025-11-04 11:03:18.506 00:00:10.323 TCP 23.104.0.1:40618 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:04:05.410 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43908 10 6452 1 2025-11-04 11:04:18.869 00:00:10.371 TCP 23.104.0.1:36340 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:00:52.406 00:05:03.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 11:05:05.622 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49344 10 6452 1 2025-11-04 11:05:19.284 00:00:10.368 TCP 23.104.0.1:50256 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:01:52.409 00:05:03.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 11:06:05.830 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48688 10 6452 1 2025-11-04 11:06:19.692 00:00:10.367 TCP 23.104.0.1:41690 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:07:06.006 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52954 10 6452 1 2025-11-04 11:07:33.149 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 11:07:20.110 00:00:12.161 TCP 23.104.0.1:48868 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:07:33.277 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 11:08:06.180 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45094 10 6452 1 2025-11-04 11:08:22.309 00:00:10.366 TCP 23.104.0.1:36610 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:09:06.396 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53774 10 6452 1 2025-11-04 11:09:22.711 00:00:10.322 TCP 23.104.0.1:42384 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:10:06.609 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42154 10 6452 1 2025-11-04 11:10:23.096 00:00:10.368 TCP 23.104.0.1:57408 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:06:52.408 00:05:03.127 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 11:11:06.822 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:53254 12 10369 1 2025-11-04 11:11:23.501 00:00:10.398 TCP 23.104.0.1:34174 -> 1.101.0.1:3000 15 1926 1 2025-11-04 11:07:52.410 00:05:03.122 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 11:12:07.084 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59522 10 6452 1 2025-11-04 11:12:33.350 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 11:12:33.310 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 11:12:23.939 00:00:10.378 TCP 23.104.0.1:33476 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:13:07.295 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44244 10 6452 1 2025-11-04 11:13:24.351 00:00:10.847 TCP 23.104.0.1:57380 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:14:07.510 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37058 10 6452 1 2025-11-04 11:14:25.235 00:00:10.326 TCP 23.104.0.1:54900 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:15:07.729 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54984 10 6452 1 2025-11-04 11:15:25.602 00:00:10.325 TCP 23.104.0.1:39868 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:16:07.944 00:00:10.486 TCP 1.101.0.1:3000 -> 22.102.0.1:32826 10 6452 1 2025-11-04 11:16:25.968 00:00:10.374 TCP 23.104.0.1:33484 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:12:52.408 00:05:03.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 11:17:08.467 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42200 10 6452 1 2025-11-04 11:17:33.290 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 11:17:33.473 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 11:17:26.381 00:00:10.367 TCP 23.104.0.1:41178 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:13:52.411 00:05:03.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 11:18:08.687 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38644 10 6452 1 2025-11-04 11:18:26.783 00:00:10.368 TCP 23.104.0.1:38260 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:19:08.902 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51452 10 6452 1 2025-11-04 11:19:27.196 00:00:10.375 TCP 23.104.0.1:57744 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:20:09.122 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46474 10 6452 1 2025-11-04 11:20:27.608 00:00:10.337 TCP 23.104.0.1:51148 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:21:09.298 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34016 10 6452 1 2025-11-04 11:21:27.986 00:00:10.371 TCP 23.104.0.1:51326 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:22:09.534 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56456 10 6452 1 2025-11-04 11:22:34.087 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 11:22:34.327 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 11:22:28.401 00:00:10.328 TCP 23.104.0.1:40006 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:18:52.410 00:05:03.130 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 11:23:09.745 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57966 10 6452 1 2025-11-04 11:23:28.768 00:00:10.332 TCP 23.104.0.1:56510 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:19:52.413 00:05:03.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 11:24:09.971 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:44710 10 6452 1 2025-11-04 11:24:29.138 00:00:10.362 TCP 23.104.0.1:44384 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:25:10.166 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54816 10 6452 1 2025-11-04 11:25:29.543 00:00:10.362 TCP 23.104.0.1:46180 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:26:10.371 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44770 10 6452 1 2025-11-04 11:26:29.945 00:00:10.334 TCP 23.104.0.1:46622 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:27:10.587 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42802 10 6452 1 2025-11-04 11:27:33.604 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 11:27:33.475 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 11:27:30.319 00:00:10.368 TCP 23.104.0.1:57824 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:28:10.820 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51790 10 6452 1 2025-11-04 11:28:30.727 00:00:10.374 TCP 23.104.0.1:46712 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:24:52.410 00:05:03.130 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 11:29:11.044 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54528 10 6452 1 2025-11-04 11:29:31.141 00:00:10.364 TCP 23.104.0.1:52128 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:25:52.414 00:05:03.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 11:30:11.268 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53538 10 6452 1 2025-11-04 11:30:31.545 00:00:21.852 TCP 23.104.0.1:33002 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:31:11.496 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:44744 12 10375 1 2025-11-04 11:31:43.463 00:00:10.437 TCP 23.104.0.1:54066 -> 1.101.0.1:3000 15 1926 1 2025-11-04 11:32:11.740 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57024 10 6452 1 2025-11-04 11:32:33.723 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 11:32:33.757 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 11:32:43.940 00:00:10.329 TCP 23.104.0.1:35480 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:33:11.950 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:55498 10 6452 1 2025-11-04 11:33:44.308 00:00:10.356 TCP 23.104.0.1:39036 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:34:12.184 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44036 10 6452 1 2025-11-04 11:30:52.412 00:05:03.130 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 11:34:44.706 00:00:10.362 TCP 23.104.0.1:33792 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:35:12.352 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59390 10 6452 1 2025-11-04 11:35:45.111 00:00:10.436 TCP 23.104.0.1:58996 -> 1.101.0.1:3000 15 1926 1 2025-11-04 11:31:52.414 00:05:03.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 11:36:12.526 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:54702 12 10369 1 2025-11-04 11:36:45.589 00:00:10.372 TCP 23.104.0.1:55588 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:37:12.763 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48342 10 6452 1 2025-11-04 11:37:33.803 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 11:37:33.893 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 11:37:45.989 00:00:10.366 TCP 23.104.0.1:37786 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:38:12.979 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:60236 10 6452 1 2025-11-04 11:38:46.393 00:00:10.320 TCP 23.104.0.1:55074 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:39:13.220 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60572 10 6452 1 2025-11-04 11:39:46.749 00:00:10.360 TCP 23.104.0.1:46792 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:40:13.390 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49336 10 6452 1 2025-11-04 11:36:52.418 00:05:03.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 11:40:47.145 00:00:10.365 TCP 23.104.0.1:55852 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:41:13.601 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45184 10 6452 1 2025-11-04 11:37:52.421 00:05:03.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 11:41:47.545 00:00:10.337 TCP 23.104.0.1:55708 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:42:13.815 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48204 10 6452 1 2025-11-04 11:42:33.892 00:00:00.049 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 11:42:34.213 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 11:42:47.923 00:00:10.373 TCP 23.104.0.1:54442 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:43:14.035 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56874 10 6452 1 2025-11-04 11:43:48.333 00:00:10.375 TCP 23.104.0.1:51044 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:44:14.246 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54120 10 6452 1 2025-11-04 11:44:48.748 00:00:10.321 TCP 23.104.0.1:58400 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:45:14.467 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51952 10 6452 1 2025-11-04 11:45:49.112 00:00:10.359 TCP 23.104.0.1:54706 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:46:14.677 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:37676 10 6452 1 2025-11-04 11:42:52.418 00:05:03.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 11:46:49.513 00:00:10.359 TCP 23.104.0.1:38140 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:47:14.859 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51044 10 6452 1 2025-11-04 11:47:34.406 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 11:47:34.288 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 11:43:52.422 00:05:03.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 11:47:49.913 00:00:10.364 TCP 23.104.0.1:33974 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:48:15.089 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32808 10 6452 1 2025-11-04 11:48:50.315 00:00:10.365 TCP 23.104.0.1:45312 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:49:15.306 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39328 10 6452 1 2025-11-04 11:49:50.715 00:00:10.378 TCP 23.104.0.1:43862 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:50:15.525 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34082 10 6452 1 2025-11-04 11:50:51.135 00:00:10.365 TCP 23.104.0.1:52492 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:51:15.742 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51564 10 6452 1 2025-11-04 11:51:51.538 00:00:10.358 TCP 23.104.0.1:40172 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:52:15.958 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:32872 10 6452 1 2025-11-04 11:52:34.229 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 11:52:34.260 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 11:48:52.420 00:05:03.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 11:52:51.934 00:00:10.513 TCP 23.104.0.1:53176 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:53:16.186 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34690 10 6452 1 2025-11-04 11:49:52.423 00:05:03.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 11:53:52.483 00:00:10.365 TCP 23.104.0.1:51636 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:54:16.399 00:00:10.504 TCP 1.101.0.1:3000 -> 22.102.0.1:56594 10 6452 1 2025-11-04 11:54:52.893 00:00:10.370 TCP 23.104.0.1:44006 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:55:16.942 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33452 10 6452 1 2025-11-04 11:55:53.305 00:00:10.935 TCP 23.104.0.1:33774 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:56:17.179 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54380 10 6452 1 2025-11-04 11:56:54.283 00:00:10.363 TCP 23.104.0.1:43774 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:57:17.396 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:36448 10 6452 1 2025-11-04 11:57:34.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 11:57:34.319 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 11:57:54.688 00:00:10.369 TCP 23.104.0.1:39064 -> 1.101.0.1:3000 11 1507 1 2025-11-04 11:58:17.638 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48310 10 6452 1 Summary: total flows: 163, total bytes: 509855, total packets: 1579, avg bps: 1069, avg pps: 0, avg bpp: 322 Time window: 2025-11-04 10:54:52 - 2025-11-04 11:58:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0028s Wall: 0.0019s flows/second: 85469.6 Runtime: 0.0019s