Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-19 08:58:50.161 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56058 10 6452 1 2025-11-19 08:59:21.311 00:00:10.365 TCP 23.104.0.1:46852 -> 1.101.0.1:3000 11 1507 1 2025-11-19 08:59:43.907 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 08:59:43.891 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 08:59:50.372 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38240 10 6452 1 2025-11-19 09:00:21.717 00:00:10.374 TCP 23.104.0.1:59504 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:00:50.589 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50052 10 6452 1 2025-11-19 09:01:22.130 00:00:10.372 TCP 23.104.0.1:56226 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:01:50.761 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60222 10 6452 1 2025-11-19 08:57:59.979 00:05:04.671 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 09:02:22.539 00:00:10.368 TCP 23.104.0.1:41600 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:02:50.942 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:37680 10 6452 1 2025-11-19 08:58:59.982 00:05:04.665 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 09:03:22.937 00:00:10.343 TCP 23.104.0.1:48502 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:03:51.186 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56100 10 6452 1 2025-11-19 09:04:23.322 00:00:10.373 TCP 23.104.0.1:51510 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:04:43.821 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 09:04:44.064 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 09:04:51.402 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47656 10 6452 1 2025-11-19 09:05:23.734 00:00:10.374 TCP 23.104.0.1:37558 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:05:51.621 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42760 10 6452 1 2025-11-19 09:06:24.142 00:00:10.373 TCP 23.104.0.1:54208 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:06:51.840 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47914 10 6452 1 2025-11-19 09:07:24.548 00:00:10.367 TCP 23.104.0.1:33656 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:07:52.024 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35446 10 6452 1 2025-11-19 09:03:59.991 00:05:04.663 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 09:08:24.949 00:00:10.369 TCP 23.104.0.1:45682 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:08:52.236 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54476 10 6452 1 2025-11-19 09:04:59.993 00:05:04.657 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 09:09:25.358 00:00:10.365 TCP 23.104.0.1:58540 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:09:43.735 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 09:09:43.960 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 09:09:52.459 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43848 10 6452 1 2025-11-19 09:10:25.772 00:00:10.330 TCP 23.104.0.1:52494 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:10:52.675 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36786 10 6452 1 2025-11-19 09:11:26.144 00:00:10.326 TCP 23.104.0.1:54294 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:11:52.897 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33072 10 6452 1 2025-11-19 09:12:26.509 00:00:10.364 TCP 23.104.0.1:59300 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:12:53.122 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44812 10 6452 1 2025-11-19 09:13:26.913 00:00:10.365 TCP 23.104.0.1:52818 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:13:53.333 00:00:10.765 TCP 1.101.0.1:3000 -> 22.102.0.1:49338 10 6452 1 2025-11-19 09:09:59.993 00:05:04.666 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 09:14:27.310 00:00:10.368 TCP 23.104.0.1:44066 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:14:43.995 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 09:14:44.214 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 09:14:54.136 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57042 10 6452 1 2025-11-19 09:10:59.997 00:05:04.660 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 09:15:27.718 00:00:10.337 TCP 23.104.0.1:46044 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:15:54.318 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59098 10 6452 1 2025-11-19 09:16:28.108 00:00:10.366 TCP 23.104.0.1:49128 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:16:54.531 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46144 10 6452 1 2025-11-19 09:17:28.510 00:00:10.324 TCP 23.104.0.1:46534 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:17:54.743 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53644 10 6452 1 2025-11-19 09:18:28.873 00:00:11.730 TCP 23.104.0.1:41384 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:18:54.957 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59320 10 6452 1 2025-11-19 09:19:44.049 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 09:19:30.644 00:00:10.366 TCP 23.104.0.1:38280 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:19:44.248 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 09:19:55.190 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54012 10 6452 1 2025-11-19 09:15:59.994 00:05:04.665 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 09:20:31.051 00:00:10.367 TCP 23.104.0.1:41022 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:20:55.446 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42792 10 6452 1 2025-11-19 09:16:59.997 00:05:04.659 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 09:21:31.456 00:00:10.364 TCP 23.104.0.1:40458 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:21:55.663 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45352 10 6452 1 2025-11-19 09:22:31.856 00:00:10.380 TCP 23.104.0.1:46702 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:22:55.878 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53012 10 6452 1 2025-11-19 09:23:32.275 00:00:10.360 TCP 23.104.0.1:37072 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:23:56.106 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33120 10 6452 1 2025-11-19 09:24:44.324 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 09:24:44.311 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 09:24:32.676 00:00:10.377 TCP 23.104.0.1:34752 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:24:56.328 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40766 10 6452 1 2025-11-19 09:25:33.121 00:00:10.371 TCP 23.104.0.1:45180 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:25:56.561 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:50272 10 6452 1 2025-11-19 09:21:59.995 00:05:04.666 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 09:26:33.531 00:00:10.346 TCP 23.104.0.1:39502 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:26:56.725 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42346 10 6452 1 2025-11-19 09:22:59.998 00:05:04.661 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 09:27:33.931 00:00:10.387 TCP 23.104.0.1:49548 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:27:56.940 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55532 10 6452 1 2025-11-19 09:28:34.361 00:00:10.367 TCP 23.104.0.1:36720 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:28:57.175 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53360 10 6452 1 2025-11-19 09:29:44.404 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 09:29:34.760 00:00:10.344 TCP 23.104.0.1:51890 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:29:44.230 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 09:29:57.388 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49362 10 6452 1 2025-11-19 09:30:35.143 00:00:10.367 TCP 23.104.0.1:48388 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:30:57.602 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40982 10 6452 1 2025-11-19 09:31:35.550 00:00:10.393 TCP 23.104.0.1:51358 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:27:59.996 00:05:04.667 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 09:31:57.813 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49208 10 6452 1 2025-11-19 09:32:35.980 00:00:10.365 TCP 23.104.0.1:52860 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:28:59.998 00:05:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 667 1 2025-11-19 09:32:58.045 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50584 10 6452 1 2025-11-19 09:33:36.382 00:00:10.361 TCP 23.104.0.1:33228 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:33:58.250 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46036 10 6452 1 2025-11-19 09:34:44.524 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 09:34:44.689 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 09:34:36.778 00:00:10.380 TCP 23.104.0.1:54226 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:34:58.466 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58782 10 6452 1 2025-11-19 09:35:37.194 00:00:10.360 TCP 23.104.0.1:40074 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:35:58.680 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:59914 10 6452 1 2025-11-19 09:36:37.592 00:00:10.361 TCP 23.104.0.1:44418 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:36:58.890 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59598 10 6452 1 2025-11-19 09:37:37.991 00:00:10.371 TCP 23.104.0.1:36542 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:33:59.997 00:05:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 686 1 2025-11-19 09:37:59.111 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41068 10 6452 1 2025-11-19 09:38:38.396 00:00:10.364 TCP 23.104.0.1:33802 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:34:04.660 00:05:55.343 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 09:38:59.326 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52534 10 6452 1 2025-11-19 09:39:44.520 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 09:39:44.757 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 09:39:38.797 00:00:10.342 TCP 23.104.0.1:36546 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:39:59.540 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45292 10 6452 1 2025-11-19 09:40:39.179 00:00:10.320 TCP 23.104.0.1:34970 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:40:59.755 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60548 10 6452 1 2025-11-19 09:41:39.542 00:00:10.368 TCP 23.104.0.1:49422 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:41:59.970 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:49812 10 6452 1 2025-11-19 09:42:39.947 00:00:10.368 TCP 23.104.0.1:57756 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:43:00.172 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50034 10 6452 1 2025-11-19 09:43:40.355 00:00:10.363 TCP 23.104.0.1:39250 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:39:04.663 00:05:55.353 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 09:44:00.407 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46956 10 6452 1 2025-11-19 09:44:44.792 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 09:44:44.617 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 09:44:40.757 00:00:10.374 TCP 23.104.0.1:56958 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:40:04.661 00:05:55.369 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 09:45:00.589 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39524 10 6452 1 2025-11-19 09:45:41.174 00:00:10.364 TCP 23.104.0.1:32882 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:46:00.807 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38674 10 6452 1 2025-11-19 09:46:41.578 00:00:10.364 TCP 23.104.0.1:34466 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:47:01.043 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45120 10 6452 1 2025-11-19 09:47:41.988 00:00:10.369 TCP 23.104.0.1:56152 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:48:01.254 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53116 10 6452 1 2025-11-19 09:48:42.391 00:00:10.331 TCP 23.104.0.1:35632 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:49:01.474 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50912 10 6452 1 2025-11-19 09:49:44.844 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 09:49:44.614 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 09:49:42.762 00:00:10.373 TCP 23.104.0.1:55110 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:45:04.668 00:05:55.368 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 09:50:01.685 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50744 10 6452 1 2025-11-19 09:50:43.174 00:00:10.322 TCP 23.104.0.1:35994 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:46:04.670 00:05:55.369 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 09:51:01.893 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60148 10 6452 1 2025-11-19 09:51:43.536 00:00:10.376 TCP 23.104.0.1:56894 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:52:02.111 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40892 10 6452 1 2025-11-19 09:52:43.954 00:00:10.384 TCP 23.104.0.1:53968 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:53:02.281 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58164 10 6452 1 2025-11-19 09:53:44.381 00:00:10.368 TCP 23.104.0.1:55734 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:54:02.506 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34870 10 6452 1 2025-11-19 09:54:44.975 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 09:54:45.199 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 09:54:44.783 00:00:10.576 TCP 23.104.0.1:41698 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:55:02.732 00:00:10.600 TCP 1.101.0.1:3000 -> 22.102.0.1:57378 10 6452 1 2025-11-19 09:55:45.411 00:00:10.363 TCP 23.104.0.1:38346 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:51:04.676 00:05:55.363 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 09:56:03.371 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58014 10 6452 1 2025-11-19 09:56:45.814 00:00:10.364 TCP 23.104.0.1:35424 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:52:04.674 00:05:55.367 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 09:57:03.593 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51294 10 6452 1 2025-11-19 09:57:46.218 00:00:10.368 TCP 23.104.0.1:50500 -> 1.101.0.1:3000 11 1507 1 2025-11-19 09:58:03.806 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60240 10 6452 1 Summary: total flows: 163, total bytes: 496718, total packets: 1559, avg bps: 1099, avg pps: 0, avg bpp: 318 Time window: 2025-11-19 08:57:59 - 2025-11-19 09:58:13 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0020s Wall: 0.0022s flows/second: 73088.7 Runtime: 0.0022s