Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 11:58:55.784 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55282 10 6661 1 2025-11-17 11:59:41.269 00:00:10.373 TCP 23.104.0.1:36756 -> 1.101.0.1:3000 11 1507 1 2025-11-17 11:59:56.006 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48504 10 6661 1 2025-11-17 12:00:41.683 00:00:10.369 TCP 23.104.0.1:56180 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:00:56.231 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42196 10 6661 1 2025-11-17 12:01:42.108 00:00:10.440 TCP 23.104.0.1:59642 -> 1.101.0.1:3000 15 1926 1 2025-11-17 12:01:56.445 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:47534 12 10369 1 2025-11-17 12:02:42.588 00:00:10.323 TCP 23.104.0.1:57624 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:02:56.695 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37240 10 6452 1 2025-11-17 11:58:58.702 00:05:04.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 12:03:49.448 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 12:03:49.774 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 12:03:42.948 00:00:10.330 TCP 23.104.0.1:39522 -> 1.101.0.1:3000 11 1507 1 2025-11-17 11:59:58.705 00:05:04.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 12:03:56.902 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34656 10 6452 1 2025-11-17 12:04:43.316 00:00:10.365 TCP 23.104.0.1:47556 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:04:57.129 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45996 10 6452 1 2025-11-17 12:05:43.720 00:00:10.374 TCP 23.104.0.1:47672 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:05:57.343 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55482 10 6452 1 2025-11-17 12:06:44.130 00:00:10.363 TCP 23.104.0.1:58018 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:06:57.563 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:56876 10 6452 1 2025-11-17 12:07:44.531 00:00:10.360 TCP 23.104.0.1:47496 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:07:57.756 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56938 10 6452 1 2025-11-17 12:08:49.888 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 12:08:50.026 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 12:08:44.929 00:00:10.386 TCP 23.104.0.1:57412 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:04:58.703 00:05:04.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 12:08:57.966 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46690 10 6452 1 2025-11-17 12:09:45.360 00:00:10.360 TCP 23.104.0.1:40896 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:05:58.705 00:05:04.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 12:09:58.194 00:00:15.616 TCP 1.101.0.1:3000 -> 22.102.0.1:54678 10 6452 1 2025-11-17 12:10:45.760 00:00:10.377 TCP 23.104.0.1:56824 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:11:03.863 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37386 10 6452 1 2025-11-17 12:11:46.177 00:00:10.363 TCP 23.104.0.1:56110 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:12:04.096 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60192 10 6452 1 2025-11-17 12:12:46.580 00:00:10.365 TCP 23.104.0.1:45400 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:13:04.306 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55150 10 6452 1 2025-11-17 12:13:50.108 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 12:13:49.966 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 12:13:46.991 00:00:10.363 TCP 23.104.0.1:46436 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:14:04.514 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49262 10 6452 1 2025-11-17 12:14:47.397 00:00:10.323 TCP 23.104.0.1:43690 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:10:58.705 00:05:04.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 12:15:04.741 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43460 10 6452 1 2025-11-17 12:15:47.766 00:00:10.375 TCP 23.104.0.1:59154 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:11:58.707 00:05:04.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 12:16:04.961 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48418 10 6452 1 2025-11-17 12:16:48.180 00:00:10.368 TCP 23.104.0.1:49520 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:17:05.193 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39778 10 6452 1 2025-11-17 12:17:48.584 00:00:10.379 TCP 23.104.0.1:51200 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:18:05.412 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33390 10 6452 1 2025-11-17 12:18:50.261 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 12:18:50.299 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 12:18:49.009 00:00:10.365 TCP 23.104.0.1:40572 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:19:05.632 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32856 10 6452 1 2025-11-17 12:19:49.412 00:00:10.376 TCP 23.104.0.1:38280 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:20:05.853 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37474 10 6452 1 2025-11-17 12:20:49.828 00:00:10.368 TCP 23.104.0.1:59690 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:16:58.706 00:05:04.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 12:21:06.088 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60078 10 6452 1 2025-11-17 12:21:50.233 00:00:10.336 TCP 23.104.0.1:49446 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:17:58.711 00:05:04.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 12:22:06.308 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56538 10 6452 1 2025-11-17 12:22:50.607 00:00:10.323 TCP 23.104.0.1:43496 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:23:06.527 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55384 10 6452 1 2025-11-17 12:23:50.256 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 12:23:50.005 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 12:23:50.968 00:00:10.333 TCP 23.104.0.1:45236 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:24:06.738 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49156 10 6452 1 2025-11-17 12:24:51.342 00:00:10.481 TCP 23.104.0.1:59590 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:25:06.963 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:41406 10 6452 1 2025-11-17 12:25:51.865 00:00:10.372 TCP 23.104.0.1:36154 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:26:07.228 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33254 10 6452 1 2025-11-17 12:22:58.708 00:05:04.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 12:26:52.278 00:00:10.328 TCP 23.104.0.1:33350 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:27:07.439 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49440 10 6452 1 2025-11-17 12:23:58.711 00:05:04.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 12:27:52.643 00:00:10.365 TCP 23.104.0.1:45234 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:28:07.644 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51476 10 6452 1 2025-11-17 12:28:50.275 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 12:28:50.172 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 12:28:53.052 00:00:10.365 TCP 23.104.0.1:39942 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:29:07.869 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54240 10 6452 1 2025-11-17 12:29:53.453 00:00:10.883 TCP 23.104.0.1:52440 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:30:08.102 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48184 10 6452 1 2025-11-17 12:30:54.372 00:00:10.364 TCP 23.104.0.1:41732 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:31:08.326 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42120 10 6452 1 2025-11-17 12:31:54.776 00:00:10.444 TCP 23.104.0.1:55984 -> 1.101.0.1:3000 15 1926 1 2025-11-17 12:32:08.554 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43604 12 10375 1 2025-11-17 12:32:55.259 00:00:10.326 TCP 23.104.0.1:37254 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:28:58.710 00:05:04.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 12:33:08.784 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36006 10 6452 1 2025-11-17 12:33:50.502 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 12:33:50.351 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 12:33:55.637 00:00:10.370 TCP 23.104.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:29:58.711 00:05:04.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 12:34:09.027 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48402 10 6452 1 2025-11-17 12:34:56.063 00:00:10.356 TCP 23.104.0.1:53218 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:35:09.201 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46200 10 6452 1 2025-11-17 12:35:56.461 00:00:10.362 TCP 23.104.0.1:55450 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:36:09.413 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53798 10 6452 1 2025-11-17 12:36:56.864 00:00:10.368 TCP 23.104.0.1:55858 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:37:09.644 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54826 10 6452 1 2025-11-17 12:37:57.271 00:00:10.367 TCP 23.104.0.1:45776 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:38:09.868 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:43734 10 6452 1 2025-11-17 12:38:50.731 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 12:38:50.667 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 12:34:58.710 00:05:04.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 12:38:57.678 00:00:10.377 TCP 23.104.0.1:35948 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:39:10.111 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54330 10 6452 1 2025-11-17 12:35:58.714 00:05:04.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 12:39:58.113 00:00:10.361 TCP 23.104.0.1:35140 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:40:10.325 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53090 10 6452 1 2025-11-17 12:40:58.516 00:00:10.366 TCP 23.104.0.1:39024 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:41:10.537 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37436 10 6452 1 2025-11-17 12:41:58.922 00:00:10.339 TCP 23.104.0.1:57838 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:42:10.754 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48662 10 6452 1 2025-11-17 12:42:59.302 00:00:10.380 TCP 23.104.0.1:57538 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:43:10.980 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:37304 10 6452 1 2025-11-17 12:43:50.515 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 12:43:50.863 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 12:43:59.719 00:00:10.365 TCP 23.104.0.1:38880 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:44:11.214 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52206 10 6452 1 2025-11-17 12:40:58.714 00:05:04.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 12:45:00.134 00:00:10.324 TCP 23.104.0.1:59694 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:45:11.439 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53844 10 6452 1 2025-11-17 12:41:58.715 00:05:04.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 12:46:00.497 00:00:10.322 TCP 23.104.0.1:32828 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:46:11.663 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50824 10 6452 1 2025-11-17 12:47:00.863 00:00:10.331 TCP 23.104.0.1:47778 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:47:11.877 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47012 10 6452 1 2025-11-17 12:48:01.235 00:00:10.374 TCP 23.104.0.1:48448 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:48:12.099 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60396 10 6452 1 2025-11-17 12:48:50.590 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 12:48:50.745 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 12:49:01.650 00:00:10.370 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:49:12.318 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56272 10 6452 1 2025-11-17 12:50:02.061 00:00:10.329 TCP 23.104.0.1:38426 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:50:12.540 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54824 10 6452 1 2025-11-17 12:46:58.714 00:05:04.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 12:51:02.440 00:00:10.365 TCP 23.104.0.1:41352 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:51:12.757 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52876 10 6452 1 2025-11-17 12:47:58.716 00:05:04.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 12:52:02.842 00:00:10.383 TCP 23.104.0.1:42886 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:52:12.972 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:44262 10 6452 1 2025-11-17 12:53:03.267 00:00:10.362 TCP 23.104.0.1:36924 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:53:13.214 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58870 10 6452 1 2025-11-17 12:53:50.941 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 12:53:50.650 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 12:54:03.672 00:00:10.372 TCP 23.104.0.1:57162 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:54:13.431 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47250 10 6452 1 2025-11-17 12:55:04.109 00:00:10.387 TCP 23.104.0.1:39908 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:55:13.605 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38580 10 6452 1 2025-11-17 12:56:04.557 00:00:10.361 TCP 23.104.0.1:50036 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:56:13.815 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38290 10 6452 1 2025-11-17 12:52:58.715 00:05:04.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 12:57:04.962 00:00:10.364 TCP 23.104.0.1:45796 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:57:13.992 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35584 10 6452 1 2025-11-17 12:53:58.718 00:05:04.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 12:58:05.364 00:00:10.359 TCP 23.104.0.1:60354 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:58:14.229 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36910 10 6452 1 2025-11-17 12:58:50.652 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 12:58:50.799 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 506146, total packets: 1573, avg bps: 1122, avg pps: 0, avg bpp: 321 Time window: 2025-11-17 11:58:55 - 2025-11-17 12:59:03 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0046s User: 0.0018s Wall: 0.0022s flows/second: 72762.0 Runtime: 0.0023s