Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 09:58:49.261 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:44798 10 6452 1 2025-11-18 09:59:16.204 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 09:59:16.164 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 09:59:32.769 00:00:10.378 TCP 23.104.0.1:58680 -> 1.101.0.1:3000 11 1507 1 2025-11-18 09:59:49.434 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49032 10 6452 1 2025-11-18 10:00:33.183 00:00:10.367 TCP 23.104.0.1:56468 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:00:49.647 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49500 10 6452 1 2025-11-18 10:01:33.586 00:00:10.325 TCP 23.104.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:01:49.867 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46250 10 6452 1 2025-11-18 09:57:59.270 00:05:04.893 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 10:02:33.954 00:00:10.370 TCP 23.104.0.1:48542 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:02:50.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33718 10 6452 1 2025-11-18 09:58:59.272 00:05:04.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 10:03:34.360 00:00:10.366 TCP 23.104.0.1:49796 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:03:50.301 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58772 10 6452 1 2025-11-18 10:04:16.086 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 10:04:16.191 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 10:04:34.759 00:00:10.378 TCP 23.104.0.1:35972 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:04:50.519 00:00:14.081 TCP 1.101.0.1:3000 -> 22.102.0.1:36310 10 6452 1 2025-11-18 10:05:35.181 00:00:10.363 TCP 23.104.0.1:57528 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:05:54.641 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57136 10 6452 1 2025-11-18 10:06:35.584 00:00:10.364 TCP 23.104.0.1:54266 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:06:54.859 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52156 10 6452 1 2025-11-18 10:07:35.985 00:00:10.328 TCP 23.104.0.1:51658 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:07:55.090 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36288 10 6452 1 2025-11-18 10:03:59.271 00:05:04.893 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 10:08:36.354 00:00:10.323 TCP 23.104.0.1:59846 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:04:59.274 00:05:04.887 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 10:08:55.269 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52164 10 6452 1 2025-11-18 10:09:16.204 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 10:09:16.224 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 10:09:36.715 00:00:10.375 TCP 23.104.0.1:52596 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:09:55.485 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49588 10 6452 1 2025-11-18 10:10:37.130 00:00:10.366 TCP 23.104.0.1:53482 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:10:55.699 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48608 10 6452 1 2025-11-18 10:11:37.541 00:00:10.369 TCP 23.104.0.1:40652 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:11:55.919 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:49382 10 6452 1 2025-11-18 10:12:37.969 00:00:10.337 TCP 23.104.0.1:57206 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:12:56.105 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45070 10 6452 1 2025-11-18 10:13:38.354 00:00:10.364 TCP 23.104.0.1:54330 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:09:59.277 00:05:04.886 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 10:13:56.323 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52820 10 6452 1 2025-11-18 10:14:16.423 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 10:14:16.289 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 10:14:38.759 00:00:10.384 TCP 23.104.0.1:36672 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:10:59.280 00:05:04.881 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 10:14:56.542 00:00:14.354 TCP 1.101.0.1:3000 -> 22.102.0.1:43604 10 6452 1 2025-11-18 10:15:39.195 00:00:10.371 TCP 23.104.0.1:49750 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:16:00.939 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56832 10 6452 1 2025-11-18 10:16:39.617 00:00:10.367 TCP 23.104.0.1:37506 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:17:01.184 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54132 10 6452 1 2025-11-18 10:17:40.024 00:00:10.327 TCP 23.104.0.1:44062 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:18:01.362 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57798 10 6452 1 2025-11-18 10:18:40.390 00:00:10.370 TCP 23.104.0.1:51526 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:19:16.362 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 10:19:01.572 00:00:10.970 TCP 1.101.0.1:3000 -> 22.102.0.1:33020 11 6504 1 2025-11-18 10:19:16.409 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 10:19:40.795 00:00:10.371 TCP 23.104.0.1:40624 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:15:59.279 00:05:04.888 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 10:20:02.579 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37320 10 6452 1 2025-11-18 10:20:41.204 00:00:10.363 TCP 23.104.0.1:50070 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:16:59.283 00:05:04.884 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 10:21:02.755 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50294 10 6452 1 2025-11-18 10:21:41.599 00:00:10.363 TCP 23.104.0.1:34976 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:22:02.965 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54818 10 6452 1 2025-11-18 10:22:42.002 00:00:10.363 TCP 23.104.0.1:43454 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:23:03.182 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48428 10 6452 1 2025-11-18 10:23:42.406 00:00:10.360 TCP 23.104.0.1:35382 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:24:16.571 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 10:24:03.402 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46662 10 6452 1 2025-11-18 10:24:16.623 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 10:24:42.802 00:00:10.371 TCP 23.104.0.1:43256 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:25:03.608 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33128 10 6452 1 2025-11-18 10:25:43.207 00:00:10.363 TCP 23.104.0.1:45042 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:21:59.279 00:05:04.889 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 10:26:03.822 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46688 10 6452 1 2025-11-18 10:26:43.612 00:00:10.373 TCP 23.104.0.1:49794 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:22:59.282 00:05:04.884 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 10:27:04.043 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45796 10 6452 1 2025-11-18 10:27:44.025 00:00:10.573 TCP 23.104.0.1:56250 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:28:04.257 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37390 10 6452 1 2025-11-18 10:28:44.640 00:00:10.366 TCP 23.104.0.1:33110 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:29:04.471 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34204 10 6452 1 2025-11-18 10:29:16.823 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 10:29:16.763 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 10:29:45.053 00:00:10.367 TCP 23.104.0.1:43348 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:30:04.680 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43896 10 6452 1 2025-11-18 10:30:45.459 00:00:10.367 TCP 23.104.0.1:46902 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:31:04.893 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37554 10 6452 1 2025-11-18 10:31:45.866 00:00:10.367 TCP 23.104.0.1:54132 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:27:59.281 00:05:04.889 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 10:32:05.133 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38220 10 6452 1 2025-11-18 10:32:46.274 00:00:10.369 TCP 23.104.0.1:39636 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:28:59.285 00:05:04.883 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 10:33:05.358 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58876 10 6452 1 2025-11-18 10:33:46.686 00:00:10.364 TCP 23.104.0.1:44072 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:34:16.457 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 10:34:05.582 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47170 10 6452 1 2025-11-18 10:34:16.825 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 10:34:47.100 00:00:10.361 TCP 23.104.0.1:53094 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:35:05.813 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58580 10 6452 1 2025-11-18 10:35:47.504 00:00:10.368 TCP 23.104.0.1:58984 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:36:06.059 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44824 10 6452 1 2025-11-18 10:36:47.912 00:00:10.320 TCP 23.104.0.1:41076 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:37:06.270 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50904 10 6452 1 2025-11-18 10:37:48.270 00:00:10.368 TCP 23.104.0.1:45166 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:33:59.285 00:05:04.886 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 10:38:06.476 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:59802 10 6452 1 2025-11-18 10:38:48.674 00:00:10.376 TCP 23.104.0.1:58146 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:34:59.287 00:05:04.882 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 10:39:16.792 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 10:39:16.937 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 10:39:06.681 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54038 10 6452 1 2025-11-18 10:39:49.105 00:00:10.367 TCP 23.104.0.1:37642 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:40:06.857 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40066 10 6452 1 2025-11-18 10:40:49.511 00:00:10.767 TCP 23.104.0.1:34438 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:41:07.043 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47274 10 6452 1 2025-11-18 10:41:50.310 00:00:10.326 TCP 23.104.0.1:60988 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:42:07.261 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45252 10 6452 1 2025-11-18 10:42:50.669 00:00:10.367 TCP 23.104.0.1:41564 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:43:07.479 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60186 10 6452 1 2025-11-18 10:43:51.101 00:00:10.371 TCP 23.104.0.1:37592 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:39:59.288 00:05:04.886 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 10:44:16.766 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 10:44:07.688 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33204 10 6452 1 2025-11-18 10:44:17.124 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 10:44:51.512 00:00:10.372 TCP 23.104.0.1:38848 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:40:59.291 00:05:04.883 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 10:45:07.896 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33350 10 6452 1 2025-11-18 10:45:51.926 00:00:10.386 TCP 23.104.0.1:60966 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:46:08.112 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49094 10 6452 1 2025-11-18 10:46:52.355 00:00:11.142 TCP 23.104.0.1:55162 -> 1.101.0.1:3000 12 1559 1 2025-11-18 10:47:08.326 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43562 10 6452 1 2025-11-18 10:47:53.572 00:00:10.368 TCP 23.104.0.1:34050 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:48:08.535 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45256 10 6452 1 2025-11-18 10:48:53.979 00:00:10.338 TCP 23.104.0.1:60104 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:49:17.052 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 10:49:08.751 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34354 10 6452 1 2025-11-18 10:49:17.151 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 10:49:54.360 00:00:10.370 TCP 23.104.0.1:40830 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:45:59.290 00:05:04.887 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 10:50:08.970 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51896 12 6556 1 2025-11-18 10:50:54.772 00:00:10.370 TCP 23.104.0.1:40768 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:46:59.293 00:05:04.882 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 10:51:09.187 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37142 10 6452 1 2025-11-18 10:51:55.182 00:00:10.361 TCP 23.104.0.1:34024 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:52:09.404 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38710 10 6452 1 2025-11-18 10:52:55.580 00:00:10.366 TCP 23.104.0.1:40692 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:53:09.621 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54024 10 6452 1 2025-11-18 10:53:55.986 00:00:10.364 TCP 23.104.0.1:34372 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:54:09.840 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55882 10 6452 1 2025-11-18 10:54:17.318 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 10:54:17.004 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 10:54:56.383 00:00:10.364 TCP 23.104.0.1:54068 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:55:10.081 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53632 10 6452 1 2025-11-18 10:51:59.293 00:05:04.886 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 10:55:56.785 00:00:10.369 TCP 23.104.0.1:35818 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:56:10.291 00:00:11.303 TCP 1.101.0.1:3000 -> 22.102.0.1:42562 10 6452 1 2025-11-18 10:52:59.295 00:05:04.881 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 10:56:57.194 00:00:10.360 TCP 23.104.0.1:50482 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:57:11.657 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49834 10 6452 1 2025-11-18 10:57:57.593 00:00:10.367 TCP 23.104.0.1:43108 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:58:11.829 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39558 10 6452 1 Summary: total flows: 163, total bytes: 497049, total packets: 1565, avg bps: 1097, avg pps: 0, avg bpp: 317 Time window: 2025-11-18 09:57:59 - 2025-11-18 10:58:22 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0045s User: 0.0018s Wall: 0.0027s flows/second: 60754.6 Runtime: 0.0027s