Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 10:59:27.110 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:50042 14 14298 1 2025-11-13 10:59:39.785 00:00:10.519 TCP 23.104.0.1:47622 -> 1.101.0.1:3000 17 2241 1 2025-11-13 11:00:27.387 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35528 10 6452 1 2025-11-13 11:00:40.343 00:00:10.326 TCP 23.104.0.1:42782 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:01:27.611 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42284 10 6452 1 2025-11-13 11:01:40.704 00:00:10.365 TCP 23.104.0.1:54856 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:01:52.664 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 11:01:52.893 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 11:02:27.824 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55168 10 6452 1 2025-11-13 11:02:41.107 00:00:10.359 TCP 23.104.0.1:43144 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:03:28.073 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:44386 10 6452 1 2025-11-13 11:03:41.504 00:00:10.366 TCP 23.104.0.1:43236 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:59:56.526 00:05:04.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 10:59:56.524 00:05:04.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 11:04:28.274 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57420 10 6452 1 2025-11-13 11:04:41.907 00:00:10.378 TCP 23.104.0.1:40118 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:05:28.496 00:00:10.274 TCP 1.101.0.1:3000 -> 22.102.0.1:54296 13 6608 1 2025-11-13 11:05:42.326 00:00:10.369 TCP 23.104.0.1:37174 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:06:28.827 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39382 10 6452 1 2025-11-13 11:06:53.120 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 11:06:52.897 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 11:06:42.731 00:00:10.325 TCP 23.104.0.1:34816 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:07:29.071 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37358 10 6452 1 2025-11-13 11:07:43.102 00:00:10.365 TCP 23.104.0.1:54844 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:08:29.288 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60512 10 6452 1 2025-11-13 11:08:43.504 00:00:10.367 TCP 23.104.0.1:57038 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:09:29.516 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44450 10 6452 1 2025-11-13 11:09:43.908 00:00:10.374 TCP 23.104.0.1:34262 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:05:56.527 00:05:04.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 11:05:56.530 00:05:04.103 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 11:10:29.742 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39346 10 6452 1 2025-11-13 11:10:44.325 00:00:10.368 TCP 23.104.0.1:33878 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:11:29.957 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35686 12 6556 1 2025-11-13 11:11:52.955 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 11:11:44.730 00:00:10.367 TCP 23.104.0.1:43554 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:11:53.224 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 11:12:30.184 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:47252 11 6504 1 2025-11-13 11:12:45.138 00:00:10.366 TCP 23.104.0.1:59934 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:13:30.444 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:43988 10 6452 1 2025-11-13 11:13:45.544 00:00:10.324 TCP 23.104.0.1:35054 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:14:30.618 00:00:10.372 TCP 1.101.0.1:3000 -> 22.102.0.1:47560 11 6492 1 2025-11-13 11:14:45.906 00:00:10.365 TCP 23.104.0.1:60080 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:15:31.037 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38276 10 6452 1 2025-11-13 11:15:46.313 00:00:10.365 TCP 23.104.0.1:33814 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:11:56.531 00:05:04.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 11:11:56.528 00:05:04.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 11:16:31.256 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:55562 10 6452 1 2025-11-13 11:16:53.460 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 11:16:53.281 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 11:16:46.717 00:00:10.323 TCP 23.104.0.1:36272 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:17:31.514 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41958 10 6452 1 2025-11-13 11:17:47.100 00:00:10.363 TCP 23.104.0.1:60162 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:18:31.735 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55892 10 6452 1 2025-11-13 11:18:47.504 00:00:10.365 TCP 23.104.0.1:55356 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:19:31.964 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:49718 12 10369 1 2025-11-13 11:19:47.913 00:00:10.440 TCP 23.104.0.1:55366 -> 1.101.0.1:3000 15 1926 1 2025-11-13 11:20:32.237 00:00:11.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59642 10 6452 1 2025-11-13 11:20:48.391 00:00:10.367 TCP 23.104.0.1:54678 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:21:33.467 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47364 10 6452 1 2025-11-13 11:21:53.318 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 11:17:56.532 00:05:04.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 11:21:53.338 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 11:17:56.536 00:05:04.100 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 11:21:48.797 00:00:10.376 TCP 23.104.0.1:34562 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:22:33.689 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38542 10 6452 1 2025-11-13 11:22:49.211 00:00:10.365 TCP 23.104.0.1:44930 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:23:33.912 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56348 10 6452 1 2025-11-13 11:23:49.616 00:00:10.365 TCP 23.104.0.1:60064 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:24:34.125 00:00:10.947 TCP 1.101.0.1:3000 -> 22.102.0.1:49806 10 6452 1 2025-11-13 11:24:50.018 00:00:17.663 TCP 23.104.0.1:59298 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:25:35.110 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44920 10 6452 1 2025-11-13 11:25:57.724 00:00:10.368 TCP 23.104.0.1:42884 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:26:35.324 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60082 10 6452 1 2025-11-13 11:26:53.468 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 11:26:53.598 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 11:26:58.129 00:00:10.368 TCP 23.104.0.1:36154 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:27:35.539 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60668 10 6452 1 2025-11-13 11:23:56.538 00:05:04.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 11:23:56.535 00:05:04.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 11:27:58.532 00:00:10.327 TCP 23.104.0.1:34170 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:28:35.752 00:00:10.556 TCP 1.101.0.1:3000 -> 22.102.0.1:58516 12 6556 1 2025-11-13 11:28:58.894 00:00:11.565 TCP 23.104.0.1:39442 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:29:36.350 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35380 10 6452 1 2025-11-13 11:30:00.498 00:00:10.364 TCP 23.104.0.1:56326 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:30:36.577 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35430 10 6452 1 2025-11-13 11:31:00.902 00:00:10.366 TCP 23.104.0.1:46738 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:31:36.789 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43890 10 6452 1 2025-11-13 11:31:54.376 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 11:31:53.816 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 11:32:01.307 00:00:10.323 TCP 23.104.0.1:42720 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:32:37.011 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54292 10 6452 1 2025-11-13 11:33:01.667 00:00:10.367 TCP 23.104.0.1:37676 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:33:37.225 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34084 10 6452 1 2025-11-13 11:29:56.538 00:05:04.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 11:29:56.536 00:05:04.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 11:34:02.094 00:00:10.323 TCP 23.104.0.1:40070 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:34:37.455 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35958 10 6452 1 2025-11-13 11:35:02.455 00:00:10.365 TCP 23.104.0.1:50002 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:35:37.663 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35772 10 6452 1 2025-11-13 11:36:02.859 00:00:10.364 TCP 23.104.0.1:39668 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:36:53.754 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 11:36:37.876 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54924 10 6452 1 2025-11-13 11:36:53.619 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 11:37:03.261 00:00:10.321 TCP 23.104.0.1:38626 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:37:38.102 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34136 10 6452 1 2025-11-13 11:38:03.626 00:00:10.364 TCP 23.104.0.1:55218 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:38:38.319 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37494 10 6452 1 2025-11-13 11:39:04.030 00:00:10.364 TCP 23.104.0.1:55486 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:39:38.526 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40222 10 6452 1 2025-11-13 11:35:56.538 00:05:04.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 11:35:56.541 00:05:04.103 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 11:40:04.435 00:00:10.364 TCP 23.104.0.1:39286 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:40:38.739 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33116 10 6452 1 2025-11-13 11:41:04.845 00:00:10.385 TCP 23.104.0.1:40492 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:41:38.947 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46970 10 6452 1 2025-11-13 11:41:53.886 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 11:41:53.881 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 11:42:05.273 00:00:10.360 TCP 23.104.0.1:48508 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:42:39.174 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55836 10 6452 1 2025-11-13 11:43:05.675 00:00:10.368 TCP 23.104.0.1:55184 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:43:39.410 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39416 10 6452 1 2025-11-13 11:44:06.087 00:00:10.363 TCP 23.104.0.1:39536 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:44:39.581 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60782 10 6452 1 2025-11-13 11:45:06.486 00:00:10.328 TCP 23.104.0.1:37738 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:45:39.802 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37776 10 6452 1 2025-11-13 11:41:56.543 00:05:04.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 11:41:56.540 00:05:04.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 11:46:06.854 00:00:10.375 TCP 23.104.0.1:47832 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:46:40.031 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33048 10 6452 1 2025-11-13 11:46:54.029 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 11:46:53.836 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 11:47:07.267 00:00:10.370 TCP 23.104.0.1:38416 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:47:40.199 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36116 10 6452 1 2025-11-13 11:48:07.676 00:00:10.367 TCP 23.104.0.1:38986 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:48:40.365 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48214 10 6452 1 2025-11-13 11:49:08.101 00:00:11.123 TCP 23.104.0.1:47690 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:49:40.581 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:49824 12 10369 1 2025-11-13 11:50:09.259 00:00:10.439 TCP 23.104.0.1:52070 -> 1.101.0.1:3000 15 1926 1 2025-11-13 11:50:40.827 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54384 10 6452 1 2025-11-13 11:51:09.737 00:00:10.370 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:51:41.070 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57642 10 6452 1 2025-11-13 11:51:54.023 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 11:51:54.039 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 11:47:56.541 00:05:04.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 11:47:56.544 00:05:04.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 11:52:10.140 00:00:10.325 TCP 23.104.0.1:58044 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:52:41.291 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41808 10 6452 1 2025-11-13 11:53:10.505 00:00:10.366 TCP 23.104.0.1:49026 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:53:41.461 00:00:10.670 TCP 1.101.0.1:3000 -> 22.102.0.1:40036 10 6452 1 2025-11-13 11:54:10.910 00:00:10.365 TCP 23.104.0.1:38950 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:54:42.174 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38470 10 6452 1 2025-11-13 11:55:11.317 00:00:10.320 TCP 23.104.0.1:48936 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:55:42.357 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43780 10 6452 1 2025-11-13 11:56:11.681 00:00:10.368 TCP 23.104.0.1:45710 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:56:42.525 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59718 10 6452 1 2025-11-13 11:56:54.022 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 11:56:54.376 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 11:57:12.105 00:00:10.454 TCP 23.104.0.1:36962 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:57:42.734 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53140 10 6452 1 2025-11-13 11:53:56.543 00:05:04.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 11:53:56.547 00:05:04.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 11:58:12.595 00:00:10.400 TCP 23.104.0.1:55538 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 508097, total packets: 1582, avg bps: 1137, avg pps: 0, avg bpp: 321 Time window: 2025-11-13 10:59:27 - 2025-11-13 11:59:00 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0038s User: 0.0015s Wall: 0.0022s flows/second: 72936.6 Runtime: 0.0022s