Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 19:59:12.848 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58144 10 6870 1 2025-11-18 19:59:28.187 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 19:59:28.295 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 19:59:40.787 00:00:10.364 TCP 23.104.0.1:58458 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:00:13.024 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59080 10 6870 1 2025-11-18 20:00:41.191 00:00:10.365 TCP 23.104.0.1:34888 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:01:13.240 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46780 10 6870 1 2025-11-18 20:01:41.598 00:00:10.358 TCP 23.104.0.1:44396 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:57:59.571 00:05:04.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 20:02:13.453 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38892 10 6870 1 2025-11-18 20:02:42.002 00:00:10.362 TCP 23.104.0.1:49944 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:58:59.574 00:05:04.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 20:03:13.668 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38394 10 6870 1 2025-11-18 20:03:42.403 00:00:10.320 TCP 23.104.0.1:42836 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:04:28.220 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 20:04:13.839 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47264 10 6870 1 2025-11-18 20:04:28.212 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 20:04:42.761 00:00:10.376 TCP 23.104.0.1:46994 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:05:14.077 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46784 10 6870 1 2025-11-18 20:05:43.176 00:00:10.326 TCP 23.104.0.1:37724 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:06:14.250 00:00:10.950 TCP 1.101.0.1:3000 -> 22.102.0.1:59112 10 6870 1 2025-11-18 20:06:43.538 00:00:10.324 TCP 23.104.0.1:33252 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:07:15.241 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33802 10 6870 1 2025-11-18 20:07:43.901 00:00:10.375 TCP 23.104.0.1:44376 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:03:59.575 00:05:04.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 20:08:15.450 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34344 10 6870 1 2025-11-18 20:08:44.313 00:00:10.363 TCP 23.104.0.1:51166 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:04:59.577 00:05:04.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 20:09:28.091 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 20:09:15.626 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51572 10 6870 1 2025-11-18 20:09:28.250 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 20:09:44.714 00:00:10.329 TCP 23.104.0.1:47892 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:10:15.842 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57444 10 6870 1 2025-11-18 20:10:45.103 00:00:10.358 TCP 23.104.0.1:37212 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:11:16.083 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:54972 10 6870 1 2025-11-18 20:11:45.501 00:00:10.360 TCP 23.104.0.1:40552 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:12:16.282 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44932 10 6870 1 2025-11-18 20:12:45.908 00:00:10.369 TCP 23.104.0.1:48986 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:13:16.496 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52904 10 6870 1 2025-11-18 20:13:46.315 00:00:10.364 TCP 23.104.0.1:36596 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:09:59.577 00:05:04.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 20:14:28.132 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 20:14:16.723 00:00:11.377 TCP 1.101.0.1:3000 -> 22.102.0.1:39588 10 6870 1 2025-11-18 20:14:28.387 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 20:14:46.715 00:00:10.383 TCP 23.104.0.1:60656 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:10:59.578 00:05:04.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 20:15:18.141 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53722 10 6870 1 2025-11-18 20:15:47.133 00:00:10.372 TCP 23.104.0.1:35204 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:16:18.314 00:00:24.508 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6870 1 2025-11-18 20:16:47.543 00:00:10.359 TCP 23.104.0.1:59752 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:17:32.871 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:52476 12 10793 1 2025-11-18 20:17:47.936 00:00:10.497 TCP 23.104.0.1:54726 -> 1.101.0.1:3000 15 1926 1 2025-11-18 20:18:33.127 00:00:10.841 TCP 1.101.0.1:3000 -> 22.102.0.1:53158 11 6922 1 2025-11-18 20:18:48.473 00:00:10.368 TCP 23.104.0.1:55510 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:19:28.621 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 20:19:28.472 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 20:19:34.003 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40760 10 6870 1 2025-11-18 20:19:48.893 00:00:10.423 TCP 23.104.0.1:59318 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:15:59.577 00:05:04.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 20:20:34.217 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44368 10 6870 1 2025-11-18 20:20:49.360 00:00:10.361 TCP 23.104.0.1:50786 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:16:59.580 00:05:04.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 20:21:34.429 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44546 10 6870 1 2025-11-18 20:21:49.759 00:00:10.380 TCP 23.104.0.1:42118 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:22:34.638 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52630 10 6870 1 2025-11-18 20:22:50.185 00:00:10.366 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:23:34.858 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57968 10 6870 1 2025-11-18 20:23:50.589 00:00:10.360 TCP 23.104.0.1:57090 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:24:28.628 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 20:24:28.600 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 20:24:35.092 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33576 10 6870 1 2025-11-18 20:24:50.991 00:00:10.339 TCP 23.104.0.1:53550 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:25:35.302 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38152 10 6870 1 2025-11-18 20:25:51.379 00:00:10.360 TCP 23.104.0.1:44770 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:21:59.580 00:05:04.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 20:26:35.516 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59650 10 6870 1 2025-11-18 20:22:59.584 00:05:04.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 20:26:51.784 00:00:10.360 TCP 23.104.0.1:49446 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:27:35.749 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49188 10 6870 1 2025-11-18 20:27:52.188 00:00:10.379 TCP 23.104.0.1:41294 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:28:35.967 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40350 10 6870 1 2025-11-18 20:28:52.633 00:00:10.361 TCP 23.104.0.1:54714 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:29:29.405 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 20:29:29.241 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 20:29:36.195 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56630 10 6870 1 2025-11-18 20:29:53.036 00:00:10.359 TCP 23.104.0.1:56244 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:30:36.418 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50680 10 6870 1 2025-11-18 20:30:53.435 00:00:10.360 TCP 23.104.0.1:50718 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:31:36.640 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57192 10 6870 1 2025-11-18 20:31:53.836 00:00:10.437 TCP 23.104.0.1:56318 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:27:59.586 00:05:04.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 20:32:36.815 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49230 12 10584 1 2025-11-18 20:32:54.314 00:00:10.446 TCP 23.104.0.1:39258 -> 1.101.0.1:3000 15 1926 1 2025-11-18 20:28:59.589 00:05:04.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 20:33:37.028 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49342 10 6661 1 2025-11-18 20:33:54.796 00:00:10.365 TCP 23.104.0.1:44612 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:34:28.633 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 20:34:28.820 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 20:34:37.253 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43930 10 6661 1 2025-11-18 20:34:55.203 00:00:10.369 TCP 23.104.0.1:50638 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:35:37.470 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46890 10 6661 1 2025-11-18 20:35:55.605 00:00:10.373 TCP 23.104.0.1:33434 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:36:37.683 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56696 10 6661 1 2025-11-18 20:36:56.015 00:00:10.373 TCP 23.104.0.1:43148 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:37:37.910 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60852 10 6661 1 2025-11-18 20:37:56.421 00:00:10.374 TCP 23.104.0.1:40274 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:33:59.586 00:05:04.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 20:38:38.125 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52096 10 6661 1 2025-11-18 20:34:59.592 00:05:04.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 20:38:56.834 00:00:10.390 TCP 23.104.0.1:52050 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:39:28.911 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 20:39:28.937 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 20:39:38.355 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56818 10 6661 1 2025-11-18 20:39:57.263 00:00:10.367 TCP 23.104.0.1:49284 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:40:38.568 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52078 10 6661 1 2025-11-18 20:40:57.665 00:00:10.327 TCP 23.104.0.1:55826 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:41:38.746 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45336 10 6661 1 2025-11-18 20:41:58.026 00:00:10.376 TCP 23.104.0.1:37548 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:42:38.955 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37970 10 6661 1 2025-11-18 20:42:58.439 00:00:10.329 TCP 23.104.0.1:40372 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:43:39.181 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50824 10 6661 1 2025-11-18 20:39:59.587 00:05:04.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 20:43:58.813 00:00:10.365 TCP 23.104.0.1:45068 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:44:28.998 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 20:44:28.777 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 20:44:39.353 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40514 10 6661 1 2025-11-18 20:40:59.589 00:05:04.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 20:44:59.214 00:00:10.327 TCP 23.104.0.1:43398 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:45:39.572 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55318 10 6661 1 2025-11-18 20:45:59.579 00:00:10.325 TCP 23.104.0.1:33072 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:46:39.791 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58530 10 6661 1 2025-11-18 20:46:59.941 00:00:10.373 TCP 23.104.0.1:55464 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:47:40.006 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36310 10 6661 1 2025-11-18 20:48:00.353 00:00:10.321 TCP 23.104.0.1:57256 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:48:40.181 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39204 10 6661 1 2025-11-18 20:49:00.716 00:00:10.372 TCP 23.104.0.1:51036 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:49:29.168 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 20:49:29.148 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 20:49:40.395 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42756 10 6661 1 2025-11-18 20:45:59.594 00:05:04.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 20:50:01.127 00:00:20.312 TCP 23.104.0.1:45390 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:50:40.606 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47984 10 6661 1 2025-11-18 20:46:59.596 00:05:04.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 20:51:11.484 00:00:10.366 TCP 23.104.0.1:58640 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:51:40.823 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35986 10 6661 1 2025-11-18 20:52:11.893 00:00:10.335 TCP 23.104.0.1:49016 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:52:40.994 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:46366 12 10578 1 2025-11-18 20:53:12.273 00:00:10.399 TCP 23.104.0.1:45824 -> 1.101.0.1:3000 15 1926 1 2025-11-18 20:53:41.190 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33658 10 6661 1 2025-11-18 20:54:28.907 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 20:54:12.716 00:00:10.378 TCP 23.104.0.1:40796 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:54:29.477 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 20:54:41.402 00:00:10.720 TCP 1.101.0.1:3000 -> 22.102.0.1:35808 10 6661 1 2025-11-18 20:55:13.133 00:00:10.323 TCP 23.104.0.1:57900 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:55:42.158 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50212 10 6661 1 2025-11-18 20:51:59.595 00:05:04.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 20:56:13.497 00:00:10.369 TCP 23.104.0.1:47712 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:56:42.333 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39868 10 6661 1 2025-11-18 20:52:59.598 00:05:04.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 20:57:13.898 00:00:10.370 TCP 23.104.0.1:56272 -> 1.101.0.1:3000 11 1507 1 2025-11-18 20:57:42.544 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46888 10 6661 1 2025-11-18 20:58:14.305 00:00:10.365 TCP 23.104.0.1:53384 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 522689, total packets: 1570, avg bps: 1153, avg pps: 0, avg bpp: 332 Time window: 2025-11-18 19:57:59 - 2025-11-18 20:58:24 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0037s User: 0.0028s Wall: 0.0023s flows/second: 70499.8 Runtime: 0.0023s