Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-19 05:58:53.707 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34030 10 6452 1 2025-11-19 05:58:59.405 00:00:10.368 TCP 23.104.0.1:46800 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:59:40.003 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 05:59:40.031 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 05:59:53.921 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54338 10 6452 1 2025-11-19 05:59:59.812 00:00:10.364 TCP 23.104.0.1:41942 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:00:54.127 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39174 10 6452 1 2025-11-19 06:01:00.213 00:00:10.324 TCP 23.104.0.1:52244 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:01:54.347 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42644 10 6452 1 2025-11-19 05:57:59.881 00:05:04.710 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 06:02:00.574 00:00:10.364 TCP 23.104.0.1:34972 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:58:59.883 00:05:04.708 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 06:02:54.559 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57394 10 6452 1 2025-11-19 06:03:00.979 00:00:10.367 TCP 23.104.0.1:60296 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:03:54.773 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:56042 10 6452 1 2025-11-19 06:04:01.388 00:00:10.365 TCP 23.104.0.1:58138 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:04:40.390 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 06:04:40.078 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 06:04:54.953 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:32904 10 6452 1 2025-11-19 06:05:01.790 00:00:10.325 TCP 23.104.0.1:43890 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:05:55.179 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55718 10 6452 1 2025-11-19 06:06:02.150 00:00:10.370 TCP 23.104.0.1:56694 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:06:55.393 00:00:10.272 TCP 1.101.0.1:3000 -> 22.102.0.1:35184 10 6452 1 2025-11-19 06:07:02.561 00:00:10.366 TCP 23.104.0.1:35784 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:07:55.710 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42898 10 6452 1 2025-11-19 06:03:59.881 00:05:04.714 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 06:08:02.966 00:00:10.366 TCP 23.104.0.1:34188 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:08:55.931 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:39798 10 6452 1 2025-11-19 06:04:59.884 00:05:04.709 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 06:09:03.376 00:00:10.365 TCP 23.104.0.1:49082 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:09:40.241 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 06:09:40.496 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 06:09:56.125 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41212 10 6452 1 2025-11-19 06:10:03.778 00:00:10.367 TCP 23.104.0.1:46522 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:10:56.334 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37858 10 6452 1 2025-11-19 06:11:04.184 00:00:10.368 TCP 23.104.0.1:38012 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:11:56.507 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38964 10 6452 1 2025-11-19 06:12:04.587 00:00:10.360 TCP 23.104.0.1:59066 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:12:56.717 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37494 10 6452 1 2025-11-19 06:13:04.981 00:00:10.326 TCP 23.104.0.1:60712 -> 1.101.0.1:3000 12 1559 1 2025-11-19 06:09:59.883 00:05:04.714 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 06:13:56.932 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42778 10 6452 1 2025-11-19 06:14:05.349 00:00:10.364 TCP 23.104.0.1:45010 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:14:40.486 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 06:14:40.380 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 06:10:59.888 00:05:04.707 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 06:14:57.166 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38622 10 6452 1 2025-11-19 06:15:05.757 00:00:10.382 TCP 23.104.0.1:53322 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:15:57.375 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44788 10 6452 1 2025-11-19 06:16:06.179 00:00:10.366 TCP 23.104.0.1:41860 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:16:57.584 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36154 10 6452 1 2025-11-19 06:17:06.586 00:00:10.553 TCP 23.104.0.1:42400 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:17:57.800 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:39506 10 6452 1 2025-11-19 06:18:07.192 00:00:10.323 TCP 23.104.0.1:44340 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:18:57.967 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43082 10 6452 1 2025-11-19 06:19:07.554 00:00:10.366 TCP 23.104.0.1:38250 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:19:40.928 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 06:19:41.207 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 06:15:59.884 00:05:04.713 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 06:19:58.141 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38432 10 6452 1 2025-11-19 06:20:07.957 00:00:10.371 TCP 23.104.0.1:58078 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:16:59.887 00:05:04.709 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 06:20:58.322 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48700 10 6452 1 2025-11-19 06:21:08.365 00:00:10.358 TCP 23.104.0.1:46884 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:21:58.534 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47262 10 6452 1 2025-11-19 06:22:08.761 00:00:10.378 TCP 23.104.0.1:50622 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:22:58.707 00:00:21.028 TCP 1.101.0.1:3000 -> 22.102.0.1:37854 11 6504 1 2025-11-19 06:23:09.184 00:00:10.702 TCP 23.104.0.1:33408 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:24:09.777 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59428 10 6452 1 2025-11-19 06:24:09.924 00:00:10.351 TCP 23.104.0.1:37564 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:24:40.616 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 06:24:40.570 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 06:25:10.314 00:00:11.229 TCP 23.104.0.1:57128 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:25:09.990 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43096 10 6452 1 2025-11-19 06:21:59.887 00:05:04.713 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 06:26:10.209 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33804 10 6452 1 2025-11-19 06:26:11.585 00:00:10.322 TCP 23.104.0.1:34456 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:22:59.889 00:05:04.709 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 06:27:10.421 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37914 10 6452 1 2025-11-19 06:27:11.949 00:00:10.371 TCP 23.104.0.1:37880 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:28:10.634 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:44746 12 10375 1 2025-11-19 06:28:12.356 00:00:10.442 TCP 23.104.0.1:54500 -> 1.101.0.1:3000 15 1926 1 2025-11-19 06:29:10.880 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53376 10 6452 1 2025-11-19 06:29:12.834 00:00:10.389 TCP 23.104.0.1:48028 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:29:40.633 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 06:29:40.674 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 06:30:11.108 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58658 10 6452 1 2025-11-19 06:30:13.260 00:00:10.365 TCP 23.104.0.1:56876 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:31:11.320 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57364 10 6452 1 2025-11-19 06:31:13.661 00:00:10.362 TCP 23.104.0.1:52854 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:27:59.894 00:05:04.708 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 06:32:11.532 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33960 10 6452 1 2025-11-19 06:32:14.063 00:00:10.364 TCP 23.104.0.1:45998 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:28:59.897 00:05:04.703 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 06:33:11.750 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37938 10 6452 1 2025-11-19 06:33:14.465 00:00:10.368 TCP 23.104.0.1:41342 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:34:14.868 00:00:10.380 TCP 23.104.0.1:43170 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:34:11.933 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58118 10 6452 1 2025-11-19 06:34:41.108 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 06:34:41.171 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 06:35:15.278 00:00:10.365 TCP 23.104.0.1:48080 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:35:12.164 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46820 12 6556 1 2025-11-19 06:36:12.382 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38860 10 6452 1 2025-11-19 06:36:15.685 00:00:10.360 TCP 23.104.0.1:42202 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:37:16.109 00:00:10.367 TCP 23.104.0.1:43828 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:37:12.616 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33118 10 6452 1 2025-11-19 06:33:59.895 00:05:04.710 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 06:38:12.835 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:32818 10 6452 1 2025-11-19 06:38:16.514 00:00:10.512 TCP 23.104.0.1:51550 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:34:59.898 00:05:04.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 06:39:13.038 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43582 10 6452 1 2025-11-19 06:39:17.092 00:00:10.365 TCP 23.104.0.1:52814 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:39:41.105 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 06:39:40.979 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 06:40:13.255 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:42140 10 6452 1 2025-11-19 06:40:17.494 00:00:10.330 TCP 23.104.0.1:43712 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:41:13.504 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40978 10 6452 1 2025-11-19 06:41:17.871 00:00:10.323 TCP 23.104.0.1:55048 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:42:13.719 00:00:10.473 TCP 1.101.0.1:3000 -> 22.102.0.1:35228 10 6452 1 2025-11-19 06:42:18.234 00:00:10.530 TCP 23.104.0.1:40276 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:43:14.231 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41474 10 6452 1 2025-11-19 06:43:18.804 00:00:10.338 TCP 23.104.0.1:50082 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:39:59.907 00:05:04.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 06:44:14.407 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35926 10 6452 1 2025-11-19 06:44:19.182 00:00:10.366 TCP 23.104.0.1:51572 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:44:41.190 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 06:44:41.179 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 06:40:59.910 00:05:04.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 06:45:14.622 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54042 10 6452 1 2025-11-19 06:45:19.604 00:00:10.366 TCP 23.104.0.1:44070 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:46:14.839 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57688 10 6452 1 2025-11-19 06:46:20.009 00:00:10.366 TCP 23.104.0.1:60076 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:47:15.070 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54698 10 6452 1 2025-11-19 06:47:20.413 00:00:10.363 TCP 23.104.0.1:52466 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:48:15.282 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46092 10 6452 1 2025-11-19 06:48:20.817 00:00:10.326 TCP 23.104.0.1:43004 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:49:15.491 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53050 10 6452 1 2025-11-19 06:49:21.181 00:00:10.360 TCP 23.104.0.1:36742 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:49:41.195 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 06:49:41.412 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 06:45:59.910 00:05:04.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 06:50:15.716 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33656 10 6452 1 2025-11-19 06:50:21.584 00:00:10.367 TCP 23.104.0.1:36986 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:46:59.912 00:05:04.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 06:51:15.948 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53526 10 6452 1 2025-11-19 06:51:21.991 00:00:10.363 TCP 23.104.0.1:50306 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:52:16.187 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40314 10 6452 1 2025-11-19 06:52:22.397 00:00:10.360 TCP 23.104.0.1:47392 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:53:16.401 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55134 10 6452 1 2025-11-19 06:53:22.794 00:00:10.372 TCP 23.104.0.1:58928 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:54:16.610 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51598 10 6452 1 2025-11-19 06:54:23.205 00:00:10.364 TCP 23.104.0.1:58896 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:54:41.391 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 06:54:41.325 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 06:55:16.828 00:00:10.637 TCP 1.101.0.1:3000 -> 22.102.0.1:50016 10 6452 1 2025-11-19 06:55:23.613 00:00:10.363 TCP 23.104.0.1:59000 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:51:59.913 00:05:04.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 06:56:17.507 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50934 10 6452 1 2025-11-19 06:56:24.019 00:00:10.327 TCP 23.104.0.1:60634 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:52:59.915 00:05:04.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 06:57:17.727 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:55188 10 6452 1 2025-11-19 06:57:24.385 00:00:10.363 TCP 23.104.0.1:51894 -> 1.101.0.1:3000 11 1507 1 2025-11-19 06:58:17.999 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:47672 10 6452 1 2025-11-19 06:58:24.794 00:00:10.369 TCP 23.104.0.1:49210 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502898, total packets: 1582, avg bps: 1106, avg pps: 0, avg bpp: 317 Time window: 2025-11-19 05:57:59 - 2025-11-19 06:58:35 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0049s User: 0.0010s Wall: 0.0017s flows/second: 97972.6 Runtime: 0.0017s