Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 14:54:52.498 00:05:03.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 14:58:49.360 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37048 10 6452 1 2025-11-04 14:59:21.357 00:00:10.328 TCP 23.104.0.1:55866 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:55:52.501 00:05:03.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 14:59:49.571 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53544 10 6452 1 2025-11-04 15:00:21.742 00:00:10.383 TCP 23.104.0.1:52100 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:00:49.742 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36964 10 6452 1 2025-11-04 15:01:22.161 00:00:10.328 TCP 23.104.0.1:36776 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:01:49.958 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50974 10 6452 1 2025-11-04 15:02:22.526 00:00:10.368 TCP 23.104.0.1:47576 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:02:37.918 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 15:02:38.022 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 15:02:50.177 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52776 10 6452 1 2025-11-04 15:03:22.932 00:00:10.390 TCP 23.104.0.1:55676 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:03:50.350 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33048 10 6452 1 2025-11-04 15:04:23.356 00:00:10.363 TCP 23.104.0.1:39578 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:00:52.499 00:05:03.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 15:04:50.565 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:49816 10 6452 1 2025-11-04 15:05:23.759 00:00:10.368 TCP 23.104.0.1:57474 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:01:52.502 00:05:03.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 15:05:50.808 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43010 10 6452 1 2025-11-04 15:06:24.166 00:00:10.330 TCP 23.104.0.1:42892 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:06:51.034 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50920 10 6452 1 2025-11-04 15:07:24.539 00:00:10.362 TCP 23.104.0.1:39592 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:07:38.107 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 15:07:37.922 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 15:07:51.243 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42564 10 6452 1 2025-11-04 15:08:24.941 00:00:10.383 TCP 23.104.0.1:60162 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:08:51.454 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49658 10 6452 1 2025-11-04 15:09:25.366 00:00:10.364 TCP 23.104.0.1:34210 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:09:51.663 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49544 10 6452 1 2025-11-04 15:10:25.769 00:00:10.370 TCP 23.104.0.1:52812 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:06:52.502 00:05:03.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 15:10:51.832 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37272 10 6452 1 2025-11-04 15:11:26.174 00:00:10.365 TCP 23.104.0.1:53962 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:07:52.503 00:05:03.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 15:11:52.008 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60238 10 6452 1 2025-11-04 15:12:26.573 00:00:10.366 TCP 23.104.0.1:58014 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:12:38.011 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 15:12:38.281 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 15:12:52.183 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56428 10 6452 1 2025-11-04 15:13:26.979 00:00:10.370 TCP 23.104.0.1:35194 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:13:52.400 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44728 10 6452 1 2025-11-04 15:14:27.391 00:00:10.321 TCP 23.104.0.1:41894 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:14:52.619 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42674 10 6452 1 2025-11-04 15:15:27.751 00:00:10.387 TCP 23.104.0.1:41882 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:15:52.841 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:33260 10 6452 1 2025-11-04 15:16:28.178 00:00:10.364 TCP 23.104.0.1:35190 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:12:52.501 00:05:03.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 15:16:53.092 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42022 10 6452 1 2025-11-04 15:17:38.467 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 15:17:38.659 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 15:17:28.578 00:00:10.371 TCP 23.104.0.1:48302 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:13:52.503 00:05:03.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 15:17:53.306 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37536 10 6452 1 2025-11-04 15:18:28.987 00:00:10.367 TCP 23.104.0.1:40070 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:18:53.528 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39538 10 6452 1 2025-11-04 15:19:29.388 00:00:10.361 TCP 23.104.0.1:47274 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:19:53.743 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52994 10 6452 1 2025-11-04 15:20:29.798 00:00:10.332 TCP 23.104.0.1:42076 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:20:53.923 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36814 10 6452 1 2025-11-04 15:21:30.163 00:00:10.374 TCP 23.104.0.1:39010 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:21:54.135 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37722 10 6452 1 2025-11-04 15:22:38.355 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 15:22:38.127 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 15:22:30.577 00:00:10.368 TCP 23.104.0.1:49834 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:18:52.502 00:05:03.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 15:22:54.349 00:00:10.541 TCP 1.101.0.1:3000 -> 22.102.0.1:44650 10 6452 1 2025-11-04 15:23:30.979 00:00:10.327 TCP 23.104.0.1:51736 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:19:52.505 00:05:03.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 15:23:54.932 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:45986 10 6452 1 2025-11-04 15:24:31.345 00:00:10.364 TCP 23.104.0.1:44552 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:24:55.165 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55320 10 6452 1 2025-11-04 15:25:31.745 00:00:10.364 TCP 23.104.0.1:56032 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:25:55.374 00:00:15.707 TCP 1.101.0.1:3000 -> 22.102.0.1:49268 10 6452 1 2025-11-04 15:26:32.155 00:00:10.396 TCP 23.104.0.1:58436 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:27:01.142 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56330 10 6452 1 2025-11-04 15:27:38.547 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 15:27:38.323 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 15:27:32.613 00:00:10.436 TCP 23.104.0.1:57106 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:28:01.356 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49240 10 6452 1 2025-11-04 15:28:33.104 00:00:10.367 TCP 23.104.0.1:56016 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:24:52.503 00:05:03.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 15:29:01.578 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48780 10 6452 1 2025-11-04 15:29:33.507 00:00:10.366 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:25:52.506 00:05:03.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 15:30:01.795 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35412 10 6452 1 2025-11-04 15:30:33.911 00:00:10.372 TCP 23.104.0.1:60000 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:31:02.012 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:60578 11 6504 1 2025-11-04 15:31:34.317 00:00:10.367 TCP 23.104.0.1:50636 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:32:02.280 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41024 10 6452 1 2025-11-04 15:32:38.780 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 15:32:38.420 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 15:32:34.719 00:00:10.374 TCP 23.104.0.1:42442 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:33:02.494 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34716 10 6452 1 2025-11-04 15:33:35.130 00:00:10.367 TCP 23.104.0.1:41172 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:34:02.664 00:00:10.277 TCP 1.101.0.1:3000 -> 22.102.0.1:41392 10 6452 1 2025-11-04 15:34:35.532 00:00:10.330 TCP 23.104.0.1:60742 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:30:52.527 00:05:03.091 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 15:35:02.977 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:34526 10 6452 1 2025-11-04 15:35:35.897 00:00:10.370 TCP 23.104.0.1:51156 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:31:52.529 00:05:03.087 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 15:36:03.237 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38514 10 6452 1 2025-11-04 15:36:36.304 00:00:10.368 TCP 23.104.0.1:51720 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:37:03.458 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55560 10 6452 1 2025-11-04 15:37:38.665 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 15:37:38.615 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 15:37:36.710 00:00:10.378 TCP 23.104.0.1:48052 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:38:03.673 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34224 10 6452 1 2025-11-04 15:38:37.129 00:00:10.361 TCP 23.104.0.1:53586 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:39:03.902 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36738 10 6452 1 2025-11-04 15:39:37.530 00:00:10.368 TCP 23.104.0.1:55912 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:40:04.123 00:00:17.409 TCP 1.101.0.1:3000 -> 22.102.0.1:37592 10 6452 1 2025-11-04 15:40:37.939 00:00:10.367 TCP 23.104.0.1:56562 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:36:52.527 00:05:03.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 15:41:11.582 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51092 10 6452 1 2025-11-04 15:41:38.344 00:00:10.365 TCP 23.104.0.1:38686 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:37:52.529 00:05:03.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 15:42:11.809 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41658 10 6452 1 2025-11-04 15:42:38.883 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 15:42:38.803 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 15:42:38.755 00:00:10.338 TCP 23.104.0.1:51626 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:43:12.028 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38636 10 6452 1 2025-11-04 15:43:39.130 00:00:10.364 TCP 23.104.0.1:50642 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:44:12.243 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45908 10 6452 1 2025-11-04 15:44:39.530 00:00:10.363 TCP 23.104.0.1:49606 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:45:12.465 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56476 10 6452 1 2025-11-04 15:45:39.932 00:00:10.376 TCP 23.104.0.1:49060 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:46:12.682 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:47608 12 10375 1 2025-11-04 15:46:40.351 00:00:10.438 TCP 23.104.0.1:58938 -> 1.101.0.1:3000 15 1926 1 2025-11-04 15:42:52.527 00:05:03.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 15:47:12.934 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49012 10 6452 1 2025-11-04 15:47:38.865 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 15:47:38.612 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 15:47:40.831 00:00:10.391 TCP 23.104.0.1:60506 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:43:52.530 00:05:03.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 15:48:13.171 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38802 10 6452 1 2025-11-04 15:48:41.259 00:00:10.371 TCP 23.104.0.1:46974 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:49:13.381 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38956 10 6452 1 2025-11-04 15:49:41.671 00:00:10.366 TCP 23.104.0.1:52900 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:50:13.599 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59654 10 6452 1 2025-11-04 15:50:42.105 00:00:10.375 TCP 23.104.0.1:54642 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:51:13.814 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:50050 10 6452 1 2025-11-04 15:51:42.517 00:00:10.375 TCP 23.104.0.1:49078 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:52:14.045 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56778 10 6452 1 2025-11-04 15:52:39.035 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 15:52:38.801 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 15:48:52.528 00:05:03.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 15:52:42.926 00:00:10.388 TCP 23.104.0.1:52792 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:53:14.250 00:00:23.054 TCP 1.101.0.1:3000 -> 22.102.0.1:42240 10 6452 1 2025-11-04 15:53:43.352 00:00:10.364 TCP 23.104.0.1:34626 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:49:52.531 00:05:03.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 15:54:27.352 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40094 10 6452 1 2025-11-04 15:54:43.755 00:00:10.739 TCP 23.104.0.1:55450 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:55:27.581 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46810 10 6452 1 2025-11-04 15:55:44.529 00:00:10.323 TCP 23.104.0.1:38776 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:56:27.796 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34774 10 6452 1 2025-11-04 15:56:44.890 00:00:10.375 TCP 23.104.0.1:46366 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:57:28.011 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47540 10 6452 1 2025-11-04 15:57:39.234 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 15:57:39.292 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 15:57:45.305 00:00:10.363 TCP 23.104.0.1:59798 -> 1.101.0.1:3000 11 1507 1 2025-11-04 15:58:28.219 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51146 10 6452 1 Summary: total flows: 163, total bytes: 501235, total packets: 1568, avg bps: 1048, avg pps: 0, avg bpp: 319 Time window: 2025-11-04 14:54:52 - 2025-11-04 15:58:38 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0016s Wall: 0.0026s flows/second: 63573.7 Runtime: 0.0026s