Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 03:58:42.465 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36350 10 6452 1 2025-11-15 03:59:22.508 00:00:10.475 TCP 23.104.0.1:34874 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:59:42.682 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47122 10 6452 1 2025-11-15 04:00:23.057 00:00:10.374 TCP 23.104.0.1:52260 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:00:42.913 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55288 10 6452 1 2025-11-15 04:01:23.467 00:00:10.369 TCP 23.104.0.1:47716 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:01:43.127 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36252 10 6452 1 2025-11-15 04:02:23.875 00:00:10.356 TCP 23.104.0.1:60578 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:02:42.473 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 04:02:42.242 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 04:02:43.351 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52644 10 6452 1 2025-11-15 04:03:24.268 00:00:10.367 TCP 23.104.0.1:55602 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:03:43.571 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40786 10 6452 1 2025-11-15 03:59:57.311 00:05:04.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 03:59:57.314 00:05:04.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 04:04:24.672 00:00:10.366 TCP 23.104.0.1:50562 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:04:43.793 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57882 10 6452 1 2025-11-15 04:05:25.102 00:00:10.367 TCP 23.104.0.1:46724 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:05:44.011 00:00:10.616 TCP 1.101.0.1:3000 -> 22.102.0.1:53198 10 6452 1 2025-11-15 04:06:25.505 00:00:10.368 TCP 23.104.0.1:43420 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:06:44.669 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37590 10 6452 1 2025-11-15 04:07:25.911 00:00:10.362 TCP 23.104.0.1:45960 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:07:42.623 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 04:07:42.411 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 04:07:44.883 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55778 10 6452 1 2025-11-15 04:08:26.315 00:00:10.325 TCP 23.104.0.1:59950 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:08:45.085 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57090 10 6452 1 2025-11-15 04:09:26.694 00:00:10.365 TCP 23.104.0.1:37034 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:09:45.263 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42750 10 6452 1 2025-11-15 04:05:57.313 00:05:04.532 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 04:05:57.316 00:05:04.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 04:10:27.105 00:00:10.366 TCP 23.104.0.1:55172 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:10:45.480 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59506 10 6452 1 2025-11-15 04:11:27.510 00:00:10.368 TCP 23.104.0.1:38440 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:11:45.699 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53290 10 6452 1 2025-11-15 04:12:27.918 00:00:10.386 TCP 23.104.0.1:35294 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:12:42.989 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 04:12:42.615 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 04:12:45.921 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51294 10 6452 1 2025-11-15 04:13:28.342 00:00:10.369 TCP 23.104.0.1:42238 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:13:46.160 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60854 10 6452 1 2025-11-15 04:14:28.750 00:00:16.716 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:14:46.405 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36138 10 6452 1 2025-11-15 04:15:35.508 00:00:10.370 TCP 23.104.0.1:34622 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:15:46.583 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51944 10 6452 1 2025-11-15 04:11:57.319 00:05:04.533 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 04:11:57.316 00:05:04.537 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 04:16:35.912 00:00:10.364 TCP 23.104.0.1:51294 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:16:46.800 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48108 10 6452 1 2025-11-15 04:17:42.542 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 04:17:36.308 00:00:10.365 TCP 23.104.0.1:42096 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:17:42.631 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 04:17:47.013 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50308 10 6452 1 2025-11-15 04:18:36.707 00:00:10.366 TCP 23.104.0.1:55224 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:18:47.230 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42142 10 6452 1 2025-11-15 04:19:37.111 00:00:10.371 TCP 23.104.0.1:36260 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:19:47.443 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57186 10 6452 1 2025-11-15 04:20:37.519 00:00:10.380 TCP 23.104.0.1:43494 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:20:47.672 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41484 10 6452 1 2025-11-15 04:21:37.938 00:00:10.373 TCP 23.104.0.1:42242 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:21:47.896 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51690 10 6452 1 2025-11-15 04:17:57.318 00:05:04.534 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 04:17:57.317 00:05:04.539 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 04:22:43.062 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 04:22:43.148 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 04:22:38.348 00:00:10.366 TCP 23.104.0.1:45824 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:22:48.114 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44088 10 6452 1 2025-11-15 04:23:38.749 00:00:10.386 TCP 23.104.0.1:56866 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:23:48.346 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49170 10 6452 1 2025-11-15 04:24:39.175 00:00:10.325 TCP 23.104.0.1:39924 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:24:48.573 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54716 10 6452 1 2025-11-15 04:25:39.543 00:00:10.362 TCP 23.104.0.1:38676 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:25:48.787 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54722 10 6452 1 2025-11-15 04:26:39.942 00:00:10.336 TCP 23.104.0.1:54600 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:26:49.001 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52354 10 6452 1 2025-11-15 04:27:42.501 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 04:27:42.580 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 04:27:40.319 00:00:10.364 TCP 23.104.0.1:37426 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:23:57.320 00:05:04.536 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 04:27:49.179 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54786 10 6452 1 2025-11-15 04:23:57.317 00:05:04.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 04:28:40.721 00:00:10.325 TCP 23.104.0.1:50024 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:28:49.393 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34884 10 6452 1 2025-11-15 04:29:41.108 00:00:10.322 TCP 23.104.0.1:56710 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:29:49.604 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48194 10 6452 1 2025-11-15 04:30:41.470 00:00:10.368 TCP 23.104.0.1:45456 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:30:49.827 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42934 10 6452 1 2025-11-15 04:31:41.872 00:00:10.365 TCP 23.104.0.1:45796 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:31:50.072 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59612 10 6452 1 2025-11-15 04:32:42.883 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 04:32:42.717 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 04:32:42.276 00:00:10.328 TCP 23.104.0.1:36150 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:32:50.303 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41938 10 6452 1 2025-11-15 04:33:42.640 00:00:10.369 TCP 23.104.0.1:46068 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:33:50.526 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44010 10 6452 1 2025-11-15 04:29:57.319 00:05:04.544 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 04:29:57.320 00:05:04.540 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 04:34:43.054 00:00:10.367 TCP 23.104.0.1:37302 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:34:50.744 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:57248 10 6452 1 2025-11-15 04:35:43.460 00:00:10.367 TCP 23.104.0.1:43578 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:35:50.937 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-11-15 04:36:43.866 00:00:10.331 TCP 23.104.0.1:37788 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:36:51.171 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43358 10 6452 1 2025-11-15 04:37:42.831 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 04:37:43.019 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 04:37:44.235 00:00:10.324 TCP 23.104.0.1:33658 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:37:51.386 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56740 10 6452 1 2025-11-15 04:38:44.596 00:00:10.873 TCP 23.104.0.1:60786 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:38:51.599 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36954 10 6452 1 2025-11-15 04:39:45.512 00:00:10.360 TCP 23.104.0.1:56882 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:39:51.808 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40606 10 6452 1 2025-11-15 04:35:57.319 00:05:04.545 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 04:35:57.322 00:05:04.541 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 04:40:45.911 00:00:10.402 TCP 23.104.0.1:39388 -> 1.101.0.1:3000 15 1926 1 2025-11-15 04:40:52.020 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:56014 12 10375 1 2025-11-15 04:41:46.352 00:00:10.369 TCP 23.104.0.1:35758 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:41:52.260 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36426 10 6452 1 2025-11-15 04:42:43.266 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 04:42:43.255 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 04:42:46.762 00:00:10.372 TCP 23.104.0.1:41278 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:42:52.468 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57294 10 6452 1 2025-11-15 04:43:47.171 00:00:10.366 TCP 23.104.0.1:53898 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:43:52.684 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34562 10 6452 1 2025-11-15 04:44:47.577 00:00:10.374 TCP 23.104.0.1:41202 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:44:52.892 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48672 10 6452 1 2025-11-15 04:41:57.323 00:05:04.542 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 04:41:57.326 00:05:04.536 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 04:45:53.112 00:00:17.457 TCP 1.101.0.1:3000 -> 22.102.0.1:47790 10 6452 1 2025-11-15 04:45:47.994 00:00:22.585 TCP 23.104.0.1:53350 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:47:00.626 00:00:10.361 TCP 23.104.0.1:47334 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:47:00.623 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:50312 10 6452 1 2025-11-15 04:47:43.161 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 04:47:43.215 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 04:48:00.792 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40358 10 6452 1 2025-11-15 04:48:01.026 00:00:10.326 TCP 23.104.0.1:43590 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:49:01.016 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40304 10 6452 1 2025-11-15 04:49:01.388 00:00:10.750 TCP 23.104.0.1:44580 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:50:01.233 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53852 10 6452 1 2025-11-15 04:50:02.178 00:00:10.323 TCP 23.104.0.1:55498 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:51:01.455 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54378 10 6452 1 2025-11-15 04:51:02.539 00:00:10.361 TCP 23.104.0.1:52510 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:47:57.327 00:05:04.540 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 04:47:57.326 00:05:04.545 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 04:52:01.673 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45736 10 6452 1 2025-11-15 04:52:02.941 00:00:10.376 TCP 23.104.0.1:45594 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:52:43.311 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 04:52:43.427 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 04:53:01.848 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:42170 10 6452 1 2025-11-15 04:53:03.348 00:00:10.365 TCP 23.104.0.1:37856 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:54:02.038 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45052 10 6452 1 2025-11-15 04:54:03.755 00:00:10.385 TCP 23.104.0.1:58992 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:55:04.177 00:00:10.363 TCP 23.104.0.1:56220 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:55:02.258 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37026 10 6452 1 2025-11-15 04:56:04.577 00:00:10.330 TCP 23.104.0.1:46852 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:56:02.480 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:52180 10 6452 1 2025-11-15 04:57:04.949 00:00:10.386 TCP 23.104.0.1:37232 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:57:02.788 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42280 10 6452 1 2025-11-15 04:57:43.476 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 04:57:43.417 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 04:53:57.326 00:05:04.545 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 04:53:57.328 00:05:04.540 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 04:58:05.377 00:00:10.372 TCP 23.104.0.1:40688 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:58:03.002 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39026 10 6452 1 Summary: total flows: 163, total bytes: 501183, total packets: 1567, avg bps: 1107, avg pps: 0, avg bpp: 319 Time window: 2025-11-15 03:58:42 - 2025-11-15 04:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0052s User: 0.0010s Wall: 0.0020s flows/second: 80337.4 Runtime: 0.0020s