Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 00:58:40.947 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:58774 10 6452 1 2025-11-05 00:54:52.679 00:05:03.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 00:58:56.423 00:00:10.382 TCP 23.104.0.1:55438 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:59:41.185 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44310 10 6452 1 2025-11-05 00:55:52.683 00:05:03.138 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 00:59:56.843 00:00:10.386 TCP 23.104.0.1:36634 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:00:41.390 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35916 10 6452 1 2025-11-05 01:00:57.267 00:00:10.325 TCP 23.104.0.1:36632 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:01:41.604 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35656 10 6452 1 2025-11-05 01:01:57.635 00:00:10.369 TCP 23.104.0.1:51554 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:02:49.936 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 01:02:41.816 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43464 10 6452 1 2025-11-05 01:02:50.011 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 01:02:58.045 00:00:10.373 TCP 23.104.0.1:57994 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:03:42.031 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35432 10 6452 1 2025-11-05 01:03:58.447 00:00:10.361 TCP 23.104.0.1:56294 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:04:42.243 00:00:10.827 TCP 1.101.0.1:3000 -> 22.102.0.1:59810 10 6452 1 2025-11-05 01:00:52.680 00:05:03.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 01:04:58.848 00:00:10.491 TCP 23.104.0.1:34832 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:05:43.111 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33974 10 6452 1 2025-11-05 01:01:52.683 00:05:03.138 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 01:05:59.381 00:00:10.360 TCP 23.104.0.1:38120 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:06:43.326 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:54782 10 6452 1 2025-11-05 01:06:59.782 00:00:10.367 TCP 23.104.0.1:52978 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:07:50.055 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 01:07:49.883 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 01:07:43.511 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49330 10 6452 1 2025-11-05 01:08:00.190 00:00:10.369 TCP 23.104.0.1:39784 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:08:43.722 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38628 10 6452 1 2025-11-05 01:09:00.591 00:00:10.368 TCP 23.104.0.1:35550 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:09:43.954 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51148 12 6556 1 2025-11-05 01:10:00.998 00:00:10.364 TCP 23.104.0.1:33354 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:06:52.685 00:05:03.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 01:10:44.181 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59240 10 6452 1 2025-11-05 01:11:01.406 00:00:11.244 TCP 23.104.0.1:44416 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:11:44.395 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50342 10 6452 1 2025-11-05 01:07:52.688 00:05:03.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 01:12:02.707 00:00:10.363 TCP 23.104.0.1:50392 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:12:50.237 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 01:12:50.327 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 01:12:44.606 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37532 10 6452 1 2025-11-05 01:13:03.115 00:00:10.371 TCP 23.104.0.1:34858 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:13:44.815 00:00:10.665 TCP 1.101.0.1:3000 -> 22.102.0.1:49814 10 6452 1 2025-11-05 01:14:03.521 00:00:10.325 TCP 23.104.0.1:52686 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:14:45.519 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40972 10 6452 1 2025-11-05 01:15:03.881 00:00:10.382 TCP 23.104.0.1:56634 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:15:45.689 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53360 10 6452 1 2025-11-05 01:16:04.302 00:00:10.365 TCP 23.104.0.1:41772 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:16:45.898 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:40146 10 6452 1 2025-11-05 01:12:52.686 00:05:03.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 01:17:04.722 00:00:10.371 TCP 23.104.0.1:49238 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:17:50.305 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 01:17:50.433 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 01:13:52.688 00:05:03.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 01:17:46.113 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60286 10 6452 1 2025-11-05 01:18:05.131 00:00:10.637 TCP 23.104.0.1:56902 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:18:46.322 00:00:10.397 TCP 1.101.0.1:3000 -> 22.102.0.1:40854 10 6452 1 2025-11-05 01:19:05.809 00:00:10.366 TCP 23.104.0.1:55364 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:19:46.756 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48610 10 6452 1 2025-11-05 01:20:06.216 00:00:10.363 TCP 23.104.0.1:49406 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:20:46.964 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36916 12 6556 1 2025-11-05 01:21:06.619 00:00:10.364 TCP 23.104.0.1:49840 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:21:47.195 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46714 10 6452 1 2025-11-05 01:22:07.024 00:00:10.363 TCP 23.104.0.1:54964 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:22:50.506 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 01:22:50.314 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 01:18:52.687 00:05:03.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 01:22:47.412 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46362 10 6452 1 2025-11-05 01:23:07.429 00:00:10.361 TCP 23.104.0.1:42986 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:19:52.688 00:05:03.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 01:23:47.631 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55046 10 6452 1 2025-11-05 01:24:07.828 00:00:10.348 TCP 23.104.0.1:56430 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:24:47.845 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55224 10 6452 1 2025-11-05 01:25:08.215 00:00:10.365 TCP 23.104.0.1:58888 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:25:48.083 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44866 10 6452 1 2025-11-05 01:26:08.624 00:00:10.366 TCP 23.104.0.1:40720 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:26:48.297 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49622 10 6452 1 2025-11-05 01:27:09.030 00:00:10.365 TCP 23.104.0.1:37164 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:27:50.918 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 01:27:50.690 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 01:27:48.553 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43200 10 6452 1 2025-11-05 01:28:09.435 00:00:10.366 TCP 23.104.0.1:49990 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:24:52.688 00:05:03.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 01:28:48.766 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36256 10 6452 1 2025-11-05 01:29:09.843 00:00:10.385 TCP 23.104.0.1:34524 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:25:52.692 00:05:03.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 01:29:48.981 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45602 10 6452 1 2025-11-05 01:30:10.271 00:00:10.323 TCP 23.104.0.1:40042 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:30:49.210 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53850 10 6452 1 2025-11-05 01:31:10.630 00:00:10.324 TCP 23.104.0.1:42980 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:31:49.420 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54164 10 6452 1 2025-11-05 01:32:10.991 00:00:10.372 TCP 23.104.0.1:40504 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:32:50.698 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 01:32:50.371 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 01:32:49.638 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45162 10 6452 1 2025-11-05 01:33:11.401 00:00:10.327 TCP 23.104.0.1:53760 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:33:49.855 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48008 10 6452 1 2025-11-05 01:34:11.768 00:00:10.380 TCP 23.104.0.1:39426 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:30:52.691 00:05:03.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 01:34:50.081 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56150 10 6452 1 2025-11-05 01:35:12.191 00:00:11.031 TCP 23.104.0.1:54062 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:31:52.694 00:05:03.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 01:35:50.288 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43766 10 6452 1 2025-11-05 01:36:13.264 00:00:10.371 TCP 23.104.0.1:52826 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:36:50.499 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33392 10 6452 1 2025-11-05 01:37:13.679 00:00:10.324 TCP 23.104.0.1:50904 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:37:50.840 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 01:37:50.760 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 01:37:50.713 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33790 10 6452 1 2025-11-05 01:38:14.051 00:00:10.367 TCP 23.104.0.1:33350 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:38:50.923 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55522 10 6452 1 2025-11-05 01:39:14.458 00:00:10.364 TCP 23.104.0.1:34232 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:39:51.136 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51734 10 6452 1 2025-11-05 01:40:14.863 00:00:10.364 TCP 23.104.0.1:56116 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:36:52.693 00:05:03.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 01:40:51.353 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47226 10 6452 1 2025-11-05 01:41:15.271 00:00:10.365 TCP 23.104.0.1:57524 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:37:52.696 00:05:03.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 01:41:51.569 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48850 10 6452 1 2025-11-05 01:42:15.676 00:00:10.362 TCP 23.104.0.1:45400 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:42:50.961 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 01:42:50.757 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 01:42:51.775 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53904 10 6452 1 2025-11-05 01:43:16.104 00:00:10.323 TCP 23.104.0.1:58098 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:43:51.986 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48176 10 6452 1 2025-11-05 01:44:16.469 00:00:10.358 TCP 23.104.0.1:39644 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:44:52.213 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51658 10 6452 1 2025-11-05 01:45:16.865 00:00:10.326 TCP 23.104.0.1:60512 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:45:52.384 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55494 10 6452 1 2025-11-05 01:46:17.231 00:00:10.369 TCP 23.104.0.1:56662 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:42:52.692 00:05:03.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 01:46:52.560 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53710 10 6452 1 2025-11-05 01:47:17.657 00:00:10.336 TCP 23.104.0.1:45040 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:47:50.797 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 01:47:51.075 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 01:43:52.696 00:05:03.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 01:47:52.771 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53102 10 6452 1 2025-11-05 01:48:18.035 00:00:10.364 TCP 23.104.0.1:52276 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:48:52.980 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43858 10 6452 1 2025-11-05 01:49:18.435 00:00:10.364 TCP 23.104.0.1:38410 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:49:53.208 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51462 10 6452 1 2025-11-05 01:50:18.844 00:00:10.430 TCP 23.104.0.1:55812 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:50:53.381 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35686 10 6452 1 2025-11-05 01:51:19.311 00:00:10.367 TCP 23.104.0.1:36208 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:51:53.605 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45222 10 6452 1 2025-11-05 01:52:19.719 00:00:10.373 TCP 23.104.0.1:52684 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:52:51.016 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 01:52:51.006 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 01:48:52.695 00:05:03.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 01:52:53.826 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58326 10 6452 1 2025-11-05 01:53:20.126 00:00:10.362 TCP 23.104.0.1:41268 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:49:52.697 00:05:03.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 01:53:54.001 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49678 10 6452 1 2025-11-05 01:54:20.527 00:00:10.366 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:54:54.217 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50094 10 6452 1 2025-11-05 01:55:20.934 00:00:10.777 TCP 23.104.0.1:57702 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:55:54.428 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45076 10 6452 1 2025-11-05 01:56:21.750 00:00:10.376 TCP 23.104.0.1:54956 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:56:54.639 00:00:18.154 TCP 1.101.0.1:3000 -> 22.102.0.1:42822 12 10369 1 2025-11-05 01:57:22.162 00:00:10.440 TCP 23.104.0.1:40654 -> 1.101.0.1:3000 15 1926 1 2025-11-05 01:57:51.140 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 01:57:50.806 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 01:58:02.849 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33220 10 6452 1 2025-11-05 01:58:22.639 00:00:10.370 TCP 23.104.0.1:39246 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502892, total packets: 1582, avg bps: 1053, avg pps: 0, avg bpp: 317 Time window: 2025-11-05 00:54:52 - 2025-11-05 01:58:33 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0026s Wall: 0.0025s flows/second: 65256.2 Runtime: 0.0025s