Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-06 03:58:46.407 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42912 10 6452 1 2025-11-06 03:54:53.272 00:05:03.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 03:59:18.831 00:00:10.388 TCP 23.104.0.1:54970 -> 1.101.0.1:3000 11 1507 1 2025-11-06 03:59:46.594 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48280 10 6452 1 2025-11-06 03:55:53.275 00:05:03.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 04:00:19.261 00:00:10.365 TCP 23.104.0.1:43106 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:00:46.825 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52194 10 6452 1 2025-11-06 04:01:19.663 00:00:10.323 TCP 23.104.0.1:42270 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:01:47.068 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:48302 12 10375 1 2025-11-06 04:02:20.024 00:00:10.444 TCP 23.104.0.1:58248 -> 1.101.0.1:3000 15 1926 1 2025-11-06 04:02:47.316 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59614 10 6452 1 2025-11-06 04:03:22.444 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 04:03:22.334 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 04:03:20.496 00:00:10.376 TCP 23.104.0.1:49208 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:03:47.530 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36486 10 6452 1 2025-11-06 04:04:20.896 00:00:18.202 TCP 23.104.0.1:54992 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:00:53.274 00:05:03.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 04:04:47.701 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53956 10 6452 1 2025-11-06 04:05:29.136 00:00:10.363 TCP 23.104.0.1:43698 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:01:53.276 00:05:03.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 04:05:47.886 00:00:10.249 TCP 1.101.0.1:3000 -> 22.102.0.1:56338 10 6452 1 2025-11-06 04:06:29.538 00:00:10.365 TCP 23.104.0.1:44310 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:06:48.181 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41380 10 6452 1 2025-11-06 04:07:29.940 00:00:10.370 TCP 23.104.0.1:59046 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:07:48.404 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44478 10 6452 1 2025-11-06 04:08:23.543 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 04:08:23.532 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 04:08:30.345 00:00:10.992 TCP 23.104.0.1:35614 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:08:48.627 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55598 10 6452 1 2025-11-06 04:09:31.380 00:00:10.369 TCP 23.104.0.1:48534 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:09:48.842 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53924 10 6452 1 2025-11-06 04:10:31.786 00:00:10.366 TCP 23.104.0.1:40884 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:06:53.278 00:05:03.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 04:10:49.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36176 10 6452 1 2025-11-06 04:11:32.191 00:00:10.363 TCP 23.104.0.1:41690 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:11:49.298 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50142 10 6452 1 2025-11-06 04:07:53.280 00:05:03.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 04:12:32.592 00:00:10.368 TCP 23.104.0.1:59300 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:12:49.509 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37860 10 6452 1 2025-11-06 04:13:22.490 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 04:13:22.622 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 04:13:32.999 00:00:10.361 TCP 23.104.0.1:33282 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:13:49.719 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:44396 10 6452 1 2025-11-06 04:14:33.403 00:00:10.322 TCP 23.104.0.1:47038 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:14:49.882 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59256 10 6452 1 2025-11-06 04:15:33.762 00:00:10.379 TCP 23.104.0.1:47684 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:15:50.110 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40540 10 6452 1 2025-11-06 04:16:34.183 00:00:10.376 TCP 23.104.0.1:42446 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:12:53.279 00:05:03.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 04:16:50.329 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42352 10 6452 1 2025-11-06 04:17:34.599 00:00:10.963 TCP 23.104.0.1:54310 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:13:53.282 00:05:03.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 04:17:50.545 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45306 10 6452 1 2025-11-06 04:18:22.823 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 04:18:22.675 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 04:18:35.620 00:00:10.363 TCP 23.104.0.1:47890 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:18:50.763 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34510 10 6452 1 2025-11-06 04:19:36.024 00:00:10.372 TCP 23.104.0.1:46910 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:19:50.983 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35950 10 6452 1 2025-11-06 04:20:36.440 00:00:10.363 TCP 23.104.0.1:43018 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:20:51.230 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47050 10 6452 1 2025-11-06 04:21:36.844 00:00:10.588 TCP 23.104.0.1:53816 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:21:51.409 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50190 10 6452 1 2025-11-06 04:22:37.468 00:00:10.327 TCP 23.104.0.1:46796 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:22:51.621 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48220 10 6452 1 2025-11-06 04:18:53.282 00:05:03.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 04:23:22.937 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 04:23:22.911 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 04:23:37.828 00:00:10.354 TCP 23.104.0.1:55524 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:19:53.284 00:05:03.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 04:23:51.835 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39910 10 6452 1 2025-11-06 04:24:38.219 00:00:10.326 TCP 23.104.0.1:44002 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:24:52.077 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52782 10 6452 1 2025-11-06 04:25:38.583 00:00:10.326 TCP 23.104.0.1:48862 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:25:52.280 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51538 10 6452 1 2025-11-06 04:26:38.949 00:00:10.369 TCP 23.104.0.1:50676 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:26:52.492 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45080 10 6452 1 2025-11-06 04:27:39.357 00:00:10.328 TCP 23.104.0.1:55954 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:27:52.664 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33038 10 6452 1 2025-11-06 04:28:22.939 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 04:28:22.965 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 04:28:39.726 00:00:10.324 TCP 23.104.0.1:33328 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:24:53.285 00:05:03.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 04:28:52.879 00:00:10.431 TCP 1.101.0.1:3000 -> 22.102.0.1:37478 10 6452 1 2025-11-06 04:29:40.096 00:00:10.363 TCP 23.104.0.1:34392 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:25:53.288 00:05:03.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 04:29:53.346 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49504 10 6452 1 2025-11-06 04:30:40.498 00:00:10.360 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:30:53.569 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:35764 10 6452 1 2025-11-06 04:31:40.896 00:00:10.381 TCP 23.104.0.1:48934 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:31:53.770 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:47366 10 6452 1 2025-11-06 04:32:41.313 00:00:10.363 TCP 23.104.0.1:35600 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:32:53.973 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:44984 10 6452 1 2025-11-06 04:33:24.170 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 04:33:24.096 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 04:33:41.711 00:00:10.373 TCP 23.104.0.1:56670 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:33:54.237 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33084 10 6452 1 2025-11-06 04:34:42.123 00:00:10.367 TCP 23.104.0.1:50110 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:30:53.287 00:05:03.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 04:34:54.458 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:56916 10 6452 1 2025-11-06 04:35:42.526 00:00:10.326 TCP 23.104.0.1:41598 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:31:53.290 00:05:03.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 04:35:54.691 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60934 10 6452 1 2025-11-06 04:36:42.884 00:00:10.380 TCP 23.104.0.1:50410 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:36:54.905 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41048 10 6452 1 2025-11-06 04:37:43.302 00:00:10.364 TCP 23.104.0.1:35094 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:37:55.133 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48456 10 6452 1 2025-11-06 04:38:23.130 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 04:38:23.250 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 04:38:43.701 00:00:10.364 TCP 23.104.0.1:35288 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:38:55.350 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41500 10 6452 1 2025-11-06 04:39:44.112 00:00:10.333 TCP 23.104.0.1:50336 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:39:55.565 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:42570 10 6452 1 2025-11-06 04:40:44.482 00:00:10.322 TCP 23.104.0.1:50958 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:36:53.287 00:05:03.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 04:40:55.829 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49610 10 6452 1 2025-11-06 04:41:44.843 00:00:10.717 TCP 23.104.0.1:51246 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:37:53.292 00:05:03.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 04:41:56.076 00:00:10.608 TCP 1.101.0.1:3000 -> 22.102.0.1:44140 10 6452 1 2025-11-06 04:42:45.598 00:00:10.365 TCP 23.104.0.1:45506 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:42:56.721 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36938 12 6556 1 2025-11-06 04:43:23.271 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 04:43:23.381 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 04:43:46.003 00:00:10.322 TCP 23.104.0.1:59470 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:43:56.939 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55466 10 6452 1 2025-11-06 04:44:46.363 00:00:10.368 TCP 23.104.0.1:46476 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:44:57.181 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42112 10 6452 1 2025-11-06 04:45:46.775 00:00:10.370 TCP 23.104.0.1:54432 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:45:57.394 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45928 10 6452 1 2025-11-06 04:46:47.194 00:00:10.417 TCP 23.104.0.1:60462 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:42:53.289 00:05:03.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 04:46:57.570 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47180 10 6452 1 2025-11-06 04:43:53.291 00:05:03.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 04:47:47.665 00:00:10.367 TCP 23.104.0.1:45838 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:47:57.786 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44018 10 6452 1 2025-11-06 04:48:23.568 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 04:48:23.742 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 04:48:48.098 00:00:10.366 TCP 23.104.0.1:49842 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:48:58.019 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35692 10 6452 1 2025-11-06 04:49:48.503 00:00:10.367 TCP 23.104.0.1:59080 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:49:58.227 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:52578 10 6452 1 2025-11-06 04:50:48.910 00:00:10.366 TCP 23.104.0.1:51812 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:50:58.420 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60260 10 6452 1 2025-11-06 04:51:49.321 00:00:10.367 TCP 23.104.0.1:57198 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:51:58.635 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36308 10 6452 1 2025-11-06 04:48:53.291 00:05:03.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 04:52:49.739 00:00:10.363 TCP 23.104.0.1:43406 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:52:58.866 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33768 10 6452 1 2025-11-06 04:53:23.675 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 04:53:23.813 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 04:53:50.141 00:00:10.362 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:49:53.294 00:05:03.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 04:53:59.090 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57106 10 6452 1 2025-11-06 04:54:50.542 00:00:10.329 TCP 23.104.0.1:36610 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:54:59.301 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51494 10 6452 1 2025-11-06 04:55:50.902 00:00:10.342 TCP 23.104.0.1:45914 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:55:59.488 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:32924 10 6452 1 2025-11-06 04:56:51.273 00:00:10.366 TCP 23.104.0.1:50732 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:56:59.714 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47120 10 6452 1 2025-11-06 04:57:51.676 00:00:10.374 TCP 23.104.0.1:47422 -> 1.101.0.1:3000 11 1507 1 2025-11-06 04:57:59.928 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46604 10 6452 1 2025-11-06 04:58:23.568 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 04:58:23.592 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1052, avg pps: 0, avg bpp: 319 Time window: 2025-11-06 03:54:53 - 2025-11-06 04:58:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0026s Wall: 0.0025s flows/second: 65043.4 Runtime: 0.0025s