Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 05:59:03.704 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55988 10 6452 1 2025-11-22 05:59:07.760 00:00:10.374 TCP 23.104.0.1:59390 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:00:03.926 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:60564 10 6452 1 2025-11-22 06:00:08.174 00:00:10.363 TCP 23.104.0.1:43320 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:01:08.499 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 06:01:08.579 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 06:01:04.171 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55462 10 6452 1 2025-11-22 06:01:08.578 00:00:10.321 TCP 23.104.0.1:33174 -> 1.101.0.1:3000 11 1507 1 2025-11-22 05:58:02.084 00:05:04.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 05:58:02.089 00:05:04.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 06:02:04.342 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:50172 10 6452 1 2025-11-22 06:02:08.937 00:00:10.335 TCP 23.104.0.1:55168 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:03:04.582 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:33664 10 6452 1 2025-11-22 06:03:09.309 00:00:10.366 TCP 23.104.0.1:41838 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:04:04.768 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:42860 10 6452 1 2025-11-22 06:04:09.714 00:00:10.334 TCP 23.104.0.1:35736 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:05:05.027 00:00:11.530 TCP 1.101.0.1:3000 -> 22.102.0.1:44222 10 6452 1 2025-11-22 06:05:10.130 00:00:10.362 TCP 23.104.0.1:54086 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:06:08.545 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 06:06:08.672 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 06:06:06.613 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40996 10 6452 1 2025-11-22 06:06:10.532 00:00:10.365 TCP 23.104.0.1:52004 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:07:10.933 00:00:10.373 TCP 23.104.0.1:45394 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:07:06.828 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56550 10 6452 1 2025-11-22 06:04:02.085 00:05:04.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 06:04:02.088 00:05:04.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 06:08:07.072 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42938 10 6452 1 2025-11-22 06:08:11.350 00:00:10.328 TCP 23.104.0.1:45860 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:09:07.284 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58480 10 6452 1 2025-11-22 06:09:11.715 00:00:10.371 TCP 23.104.0.1:52746 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:10:07.508 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49814 10 6452 1 2025-11-22 06:10:12.125 00:00:10.364 TCP 23.104.0.1:34682 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:11:08.842 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 06:11:08.762 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 06:11:07.730 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59130 10 6452 1 2025-11-22 06:11:12.528 00:00:10.367 TCP 23.104.0.1:47614 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:12:07.942 00:00:10.242 TCP 1.101.0.1:3000 -> 22.102.0.1:46212 10 6452 1 2025-11-22 06:12:12.932 00:00:10.340 TCP 23.104.0.1:45652 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:13:08.226 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45132 10 6452 1 2025-11-22 06:13:13.310 00:00:10.365 TCP 23.104.0.1:44520 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:10:02.088 00:05:04.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 06:10:02.086 00:05:04.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 06:14:08.441 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54924 10 6452 1 2025-11-22 06:14:13.712 00:00:10.319 TCP 23.104.0.1:34256 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:15:08.657 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45554 10 6452 1 2025-11-22 06:15:14.094 00:00:10.365 TCP 23.104.0.1:56162 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:16:08.933 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 06:16:08.878 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 06:16:08.874 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41344 10 6452 1 2025-11-22 06:16:14.497 00:00:10.372 TCP 23.104.0.1:56806 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:17:09.103 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43832 10 6452 1 2025-11-22 06:17:14.907 00:00:10.362 TCP 23.104.0.1:57142 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:18:09.320 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36750 10 6452 1 2025-11-22 06:18:15.313 00:00:10.368 TCP 23.104.0.1:52958 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:19:09.557 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43092 10 6452 1 2025-11-22 06:19:15.719 00:00:10.371 TCP 23.104.0.1:49554 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:16:02.087 00:05:04.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 06:16:02.089 00:05:04.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 06:20:09.787 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50824 12 6556 1 2025-11-22 06:20:16.129 00:00:10.367 TCP 23.104.0.1:48486 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:21:08.984 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 06:21:09.010 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 06:21:10.000 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56684 10 6452 1 2025-11-22 06:21:16.539 00:00:10.344 TCP 23.104.0.1:44706 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:22:10.182 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58756 10 6452 1 2025-11-22 06:22:16.939 00:00:10.381 TCP 23.104.0.1:53562 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:23:10.400 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48394 10 6452 1 2025-11-22 06:23:17.357 00:00:10.364 TCP 23.104.0.1:58454 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:24:10.570 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60842 10 6452 1 2025-11-22 06:24:17.762 00:00:10.380 TCP 23.104.0.1:59616 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:25:10.795 00:00:10.389 TCP 1.101.0.1:3000 -> 22.102.0.1:41864 10 6452 1 2025-11-22 06:25:18.181 00:00:10.409 TCP 23.104.0.1:46498 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:22:02.093 00:05:04.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 06:26:09.101 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 06:22:02.092 00:05:04.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 06:26:09.155 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 06:26:11.224 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40452 10 6452 1 2025-11-22 06:26:18.626 00:00:10.330 TCP 23.104.0.1:38924 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:27:11.437 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58662 10 6452 1 2025-11-22 06:27:18.993 00:00:10.365 TCP 23.104.0.1:58090 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:28:11.651 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40512 10 6452 1 2025-11-22 06:28:19.398 00:00:10.366 TCP 23.104.0.1:54894 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:29:11.829 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33184 10 6452 1 2025-11-22 06:29:19.807 00:00:10.410 TCP 23.104.0.1:54424 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:30:12.052 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45014 10 6452 1 2025-11-22 06:30:20.256 00:00:10.362 TCP 23.104.0.1:49372 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:31:09.326 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 06:31:09.276 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 06:31:12.263 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51822 10 6452 1 2025-11-22 06:31:20.665 00:00:10.371 TCP 23.104.0.1:55746 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:28:02.094 00:05:04.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 06:28:02.091 00:05:04.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 06:32:12.488 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60056 10 6452 1 2025-11-22 06:32:21.098 00:00:10.373 TCP 23.104.0.1:42922 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:33:12.657 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53050 10 6452 1 2025-11-22 06:33:21.505 00:00:10.371 TCP 23.104.0.1:47692 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:34:12.829 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43474 10 6452 1 2025-11-22 06:34:21.912 00:00:10.368 TCP 23.104.0.1:44682 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:35:13.068 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55636 10 6452 1 2025-11-22 06:35:22.318 00:00:10.366 TCP 23.104.0.1:59060 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:36:09.075 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 06:36:09.015 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 06:36:13.276 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40180 10 6452 1 2025-11-22 06:36:22.720 00:00:10.376 TCP 23.104.0.1:59526 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:37:13.491 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44874 10 6452 1 2025-11-22 06:37:23.134 00:00:10.325 TCP 23.104.0.1:50930 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:34:02.101 00:05:04.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 06:34:02.098 00:05:04.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 06:38:13.667 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50798 10 6452 1 2025-11-22 06:38:23.497 00:00:11.330 TCP 23.104.0.1:41804 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:39:13.843 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59202 10 6452 1 2025-11-22 06:39:24.864 00:00:10.373 TCP 23.104.0.1:60968 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:40:14.077 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50776 10 6452 1 2025-11-22 06:40:25.274 00:00:10.370 TCP 23.104.0.1:36760 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:41:09.679 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 06:41:09.435 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 06:41:14.286 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33008 10 6452 1 2025-11-22 06:41:25.684 00:00:10.371 TCP 23.104.0.1:43110 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:42:14.502 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42464 10 6452 1 2025-11-22 06:42:26.105 00:00:10.366 TCP 23.104.0.1:58874 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:43:14.675 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41216 10 6452 1 2025-11-22 06:43:26.505 00:00:10.715 TCP 23.104.0.1:33082 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:40:02.098 00:05:04.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 06:40:02.101 00:05:04.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 06:44:14.896 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:56014 10 6452 1 2025-11-22 06:44:27.267 00:00:10.800 TCP 23.104.0.1:33704 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:45:15.088 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46316 10 6452 1 2025-11-22 06:45:28.107 00:00:10.364 TCP 23.104.0.1:43498 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:46:09.565 00:00:00.013 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 06:46:09.572 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 06:46:15.300 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49848 10 6452 1 2025-11-22 06:46:28.508 00:00:10.515 TCP 23.104.0.1:43290 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:47:15.525 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40950 10 6452 1 2025-11-22 06:47:29.090 00:00:10.363 TCP 23.104.0.1:54444 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:48:15.741 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:60438 10 6452 1 2025-11-22 06:48:29.501 00:00:10.366 TCP 23.104.0.1:46298 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:49:15.945 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42538 10 6452 1 2025-11-22 06:49:29.907 00:00:10.365 TCP 23.104.0.1:56744 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:46:02.101 00:05:04.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 06:46:02.103 00:05:04.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 06:50:16.167 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35796 10 6452 1 2025-11-22 06:50:30.311 00:00:10.365 TCP 23.104.0.1:53960 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:51:09.735 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 06:51:09.694 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 06:51:16.381 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56454 10 6452 1 2025-11-22 06:51:30.713 00:00:10.331 TCP 23.104.0.1:45900 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:52:16.594 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53432 10 6452 1 2025-11-22 06:52:31.100 00:00:10.366 TCP 23.104.0.1:44442 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:53:16.816 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53418 10 6452 1 2025-11-22 06:53:31.504 00:00:10.360 TCP 23.104.0.1:33994 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:54:17.039 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44474 10 6452 1 2025-11-22 06:54:31.900 00:00:10.369 TCP 23.104.0.1:41360 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:55:17.249 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37148 10 6452 1 2025-11-22 06:55:32.312 00:00:10.328 TCP 23.104.0.1:51002 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:52:02.106 00:05:04.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 06:52:02.104 00:05:04.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 06:56:09.503 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 06:56:09.628 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 06:56:17.466 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54168 10 6452 1 2025-11-22 06:56:32.690 00:00:10.324 TCP 23.104.0.1:35074 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:57:17.690 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49320 10 6452 1 2025-11-22 06:57:33.058 00:00:10.699 TCP 23.104.0.1:34394 -> 1.101.0.1:3000 11 1507 1 2025-11-22 06:58:17.907 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48994 10 6452 1 2025-11-22 06:58:33.816 00:00:10.333 TCP 23.104.0.1:51128 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1094, avg pps: 0, avg bpp: 316 Time window: 2025-11-22 05:58:02 - 2025-11-22 06:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0019s User: 0.0028s Wall: 0.0021s flows/second: 78883.7 Runtime: 0.0021s