Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-19 11:58:50.015 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42622 10 6452 1 2025-11-19 11:58:51.417 00:00:10.373 TCP 23.104.0.1:56010 -> 1.101.0.1:3000 11 1507 1 2025-11-19 11:59:48.502 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 11:59:48.354 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 11:59:50.228 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54414 10 6452 1 2025-11-19 11:59:51.828 00:00:10.375 TCP 23.104.0.1:33544 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:00:50.396 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33858 10 6452 1 2025-11-19 12:00:52.242 00:00:10.365 TCP 23.104.0.1:56532 -> 1.101.0.1:3000 11 1507 1 2025-11-19 11:57:04.713 00:05:55.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 12:01:50.603 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60176 10 6452 1 2025-11-19 12:01:52.646 00:00:10.325 TCP 23.104.0.1:32914 -> 1.101.0.1:3000 11 1507 1 2025-11-19 11:58:04.714 00:05:55.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 12:02:50.822 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:42930 12 10375 1 2025-11-19 12:02:53.010 00:00:10.441 TCP 23.104.0.1:50344 -> 1.101.0.1:3000 15 1926 1 2025-11-19 12:03:51.025 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42028 10 6452 1 2025-11-19 12:03:53.487 00:00:20.676 TCP 23.104.0.1:33676 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:04:47.457 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 12:04:47.470 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 12:04:51.236 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37088 10 6452 1 2025-11-19 12:05:04.203 00:00:10.368 TCP 23.104.0.1:52650 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:05:51.447 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50494 10 6452 1 2025-11-19 12:06:04.612 00:00:10.361 TCP 23.104.0.1:43330 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:06:51.660 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42750 10 6452 1 2025-11-19 12:07:05.014 00:00:10.323 TCP 23.104.0.1:60044 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:03:04.716 00:05:55.408 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 12:07:51.874 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42674 10 6452 1 2025-11-19 12:08:05.378 00:00:10.363 TCP 23.104.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:04:04.715 00:05:55.411 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 12:08:52.097 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60206 10 6452 1 2025-11-19 12:09:05.780 00:00:10.364 TCP 23.104.0.1:58284 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:09:47.601 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 12:09:47.592 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 12:09:52.313 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55630 10 6452 1 2025-11-19 12:10:06.184 00:00:10.366 TCP 23.104.0.1:50746 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:10:52.532 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46256 10 6452 1 2025-11-19 12:11:06.591 00:00:10.362 TCP 23.104.0.1:54108 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:11:52.746 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55270 10 6452 1 2025-11-19 12:12:06.996 00:00:10.320 TCP 23.104.0.1:52716 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:12:52.955 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:45140 10 6452 1 2025-11-19 12:13:07.358 00:00:10.369 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:09:04.718 00:05:55.406 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 12:13:53.198 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57160 10 6452 1 2025-11-19 12:14:07.763 00:00:10.379 TCP 23.104.0.1:51906 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:14:47.549 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 12:14:47.831 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 12:10:04.717 00:05:55.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 12:14:53.413 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39236 10 6452 1 2025-11-19 12:15:08.180 00:00:10.370 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:15:53.627 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59236 10 6452 1 2025-11-19 12:16:08.584 00:00:10.364 TCP 23.104.0.1:45754 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:16:53.796 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44412 10 6452 1 2025-11-19 12:17:08.990 00:00:10.334 TCP 23.104.0.1:37506 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:17:54.009 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48206 10 6452 1 2025-11-19 12:18:09.359 00:00:10.363 TCP 23.104.0.1:57992 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:18:54.190 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42542 10 6452 1 2025-11-19 12:19:09.759 00:00:10.333 TCP 23.104.0.1:37042 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:19:47.794 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 12:19:47.822 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 12:15:04.721 00:05:55.411 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 12:19:54.404 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57486 10 6452 1 2025-11-19 12:20:10.135 00:00:10.365 TCP 23.104.0.1:59676 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:16:04.719 00:05:55.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 12:20:54.618 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48734 10 6452 1 2025-11-19 12:21:10.537 00:00:10.367 TCP 23.104.0.1:37838 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:21:54.829 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33422 10 6452 1 2025-11-19 12:22:10.942 00:00:10.374 TCP 23.104.0.1:57382 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:22:55.072 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48932 10 6452 1 2025-11-19 12:23:11.355 00:00:10.363 TCP 23.104.0.1:49014 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:23:55.286 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60130 10 6452 1 2025-11-19 12:24:11.759 00:00:10.373 TCP 23.104.0.1:42148 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:24:47.850 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 12:24:47.887 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 12:24:55.497 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50008 10 6452 1 2025-11-19 12:25:12.168 00:00:10.365 TCP 23.104.0.1:46906 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:21:04.726 00:05:55.407 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 12:25:55.706 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58048 10 6452 1 2025-11-19 12:26:12.571 00:00:10.362 TCP 23.104.0.1:44462 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:22:04.724 00:05:55.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 12:26:55.874 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48216 10 6452 1 2025-11-19 12:27:12.978 00:00:10.361 TCP 23.104.0.1:41452 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:27:56.070 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:33658 12 10375 1 2025-11-19 12:28:13.378 00:00:10.439 TCP 23.104.0.1:51148 -> 1.101.0.1:3000 15 1926 1 2025-11-19 12:28:56.274 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:35624 10 6452 1 2025-11-19 12:29:13.857 00:00:10.378 TCP 23.104.0.1:38908 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:29:47.995 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 12:29:47.917 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 12:29:56.475 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58006 10 6452 1 2025-11-19 12:30:14.274 00:00:11.056 TCP 23.104.0.1:47068 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:30:56.689 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43622 10 6452 1 2025-11-19 12:31:15.370 00:00:10.362 TCP 23.104.0.1:59202 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:27:04.727 00:05:55.406 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 12:31:56.900 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36532 10 6452 1 2025-11-19 12:32:15.771 00:00:10.367 TCP 23.104.0.1:55402 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:28:04.725 00:05:55.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 12:32:57.119 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55334 12 10375 1 2025-11-19 12:33:16.177 00:00:10.437 TCP 23.104.0.1:36580 -> 1.101.0.1:3000 15 1926 1 2025-11-19 12:33:57.359 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52558 10 6452 1 2025-11-19 12:34:16.656 00:00:10.366 TCP 23.104.0.1:58272 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:34:48.802 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 12:34:49.049 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 12:34:57.569 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47542 10 6452 1 2025-11-19 12:35:17.094 00:00:10.367 TCP 23.104.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:35:57.786 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48504 10 6452 1 2025-11-19 12:36:17.497 00:00:10.363 TCP 23.104.0.1:43476 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:36:57.995 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34232 10 6452 1 2025-11-19 12:37:17.899 00:00:10.373 TCP 23.104.0.1:54838 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:33:04.728 00:05:55.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 12:37:58.220 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39964 10 6452 1 2025-11-19 12:38:18.315 00:00:10.326 TCP 23.104.0.1:40988 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:34:04.725 00:05:55.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 12:38:58.436 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37488 10 6452 1 2025-11-19 12:39:18.674 00:00:10.366 TCP 23.104.0.1:35016 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:39:48.055 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 12:39:48.132 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 12:39:58.652 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34192 10 6452 1 2025-11-19 12:40:19.105 00:00:10.360 TCP 23.104.0.1:54808 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:40:58.861 00:00:10.844 TCP 1.101.0.1:3000 -> 22.102.0.1:51892 10 6452 1 2025-11-19 12:41:19.506 00:00:10.327 TCP 23.104.0.1:58186 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:41:59.747 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41812 10 6452 1 2025-11-19 12:42:19.870 00:00:10.334 TCP 23.104.0.1:59998 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:42:59.958 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:34012 12 6556 1 2025-11-19 12:43:20.250 00:00:10.363 TCP 23.104.0.1:54436 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:39:04.728 00:05:55.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 12:44:00.196 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58432 10 6452 1 2025-11-19 12:44:20.652 00:00:10.363 TCP 23.104.0.1:44158 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:44:48.230 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 12:44:48.097 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 12:40:04.726 00:05:55.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 12:45:00.407 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-11-19 12:45:21.056 00:00:10.368 TCP 23.104.0.1:47484 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:46:00.626 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32930 10 6452 1 2025-11-19 12:46:21.461 00:00:10.363 TCP 23.104.0.1:49334 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:47:00.838 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44514 10 6452 1 2025-11-19 12:47:21.858 00:00:10.374 TCP 23.104.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:48:01.073 00:00:10.429 TCP 1.101.0.1:3000 -> 22.102.0.1:46416 10 6452 1 2025-11-19 12:48:22.270 00:00:10.355 TCP 23.104.0.1:52472 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:49:01.550 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34660 10 6452 1 2025-11-19 12:49:22.662 00:00:10.358 TCP 23.104.0.1:55448 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:49:48.484 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 12:49:48.374 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 12:45:04.728 00:05:55.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 12:50:01.763 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56986 10 6452 1 2025-11-19 12:50:23.065 00:00:10.363 TCP 23.104.0.1:36474 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:46:04.727 00:05:55.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 12:51:01.992 00:00:10.720 TCP 1.101.0.1:3000 -> 22.102.0.1:38248 10 6452 1 2025-11-19 12:51:23.467 00:00:10.434 TCP 23.104.0.1:35518 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:52:02.764 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45516 10 6452 1 2025-11-19 12:52:23.939 00:00:10.453 TCP 23.104.0.1:52138 -> 1.101.0.1:3000 15 1926 1 2025-11-19 12:53:02.990 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:59624 12 10375 1 2025-11-19 12:53:24.433 00:00:10.366 TCP 23.104.0.1:40462 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:54:03.245 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35684 10 6452 1 2025-11-19 12:54:24.840 00:00:10.672 TCP 23.104.0.1:36530 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:54:48.391 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 12:54:48.493 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 12:55:03.468 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39622 10 6452 1 2025-11-19 12:55:25.555 00:00:10.366 TCP 23.104.0.1:60880 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:51:04.734 00:05:55.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 12:56:03.687 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49114 10 6452 1 2025-11-19 12:56:25.961 00:00:10.325 TCP 23.104.0.1:43838 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:52:04.742 00:05:55.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 12:57:03.915 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40548 10 6452 1 2025-11-19 12:57:26.321 00:00:10.366 TCP 23.104.0.1:53892 -> 1.101.0.1:3000 11 1507 1 2025-11-19 12:58:04.135 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:45220 10 6452 1 2025-11-19 12:58:26.723 00:00:10.328 TCP 23.104.0.1:40544 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 515820, total packets: 1598, avg bps: 1117, avg pps: 0, avg bpp: 322 Time window: 2025-11-19 11:57:04 - 2025-11-19 12:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0037s Wall: 0.0023s flows/second: 70420.3 Runtime: 0.0023s