Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 11:58:56.231 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42570 10 6452 1 2025-11-22 11:59:06.132 00:00:10.368 TCP 23.104.0.1:38280 -> 1.101.0.1:3000 11 1507 1 2025-11-22 11:59:56.444 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38418 10 6452 1 2025-11-22 12:00:06.550 00:00:10.370 TCP 23.104.0.1:39890 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:00:56.663 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33376 10 6452 1 2025-11-22 12:01:15.904 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 12:01:15.678 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 12:01:06.960 00:00:10.329 TCP 23.104.0.1:58064 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:01:56.883 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52316 10 6452 1 2025-11-22 11:58:02.220 00:05:04.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 11:58:02.222 00:05:04.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 12:02:07.335 00:00:10.370 TCP 23.104.0.1:39496 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:02:57.117 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36438 10 6452 1 2025-11-22 12:03:07.748 00:00:10.356 TCP 23.104.0.1:43936 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:03:57.288 00:00:10.484 TCP 1.101.0.1:3000 -> 22.102.0.1:36162 10 6452 1 2025-11-22 12:04:08.114 00:00:10.341 TCP 23.104.0.1:44628 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:04:57.809 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45200 10 6452 1 2025-11-22 12:05:08.495 00:00:10.363 TCP 23.104.0.1:59030 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:05:58.030 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54676 10 6452 1 2025-11-22 12:06:16.227 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 12:06:16.239 00:00:00.011 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 12:06:08.901 00:00:10.371 TCP 23.104.0.1:41416 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:06:58.238 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36332 10 6452 1 2025-11-22 12:07:09.308 00:00:10.364 TCP 23.104.0.1:45080 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:04:02.220 00:05:04.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 12:04:02.223 00:05:04.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 12:07:58.415 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56338 10 6452 1 2025-11-22 12:08:09.703 00:00:10.364 TCP 23.104.0.1:33358 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:08:58.627 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43014 10 6452 1 2025-11-22 12:09:10.114 00:00:10.395 TCP 23.104.0.1:51098 -> 1.101.0.1:3000 15 1926 1 2025-11-22 12:09:58.838 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:54868 12 10375 1 2025-11-22 12:10:10.549 00:00:10.366 TCP 23.104.0.1:58200 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:10:59.094 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55026 10 6452 1 2025-11-22 12:11:16.125 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 12:11:15.923 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 12:11:10.951 00:00:10.370 TCP 23.104.0.1:59026 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:11:59.317 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54722 10 6452 1 2025-11-22 12:12:11.361 00:00:10.358 TCP 23.104.0.1:60558 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:12:59.535 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42892 10 6452 1 2025-11-22 12:13:11.760 00:00:10.385 TCP 23.104.0.1:34028 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:10:02.224 00:05:04.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 12:13:59.762 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38648 10 6452 1 2025-11-22 12:10:02.221 00:05:04.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 12:14:12.181 00:00:10.363 TCP 23.104.0.1:52594 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:14:59.984 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:60000 10 6452 1 2025-11-22 12:15:12.585 00:00:10.361 TCP 23.104.0.1:57400 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:16:00.221 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38164 10 6452 1 2025-11-22 12:16:16.322 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 12:16:16.056 00:00:00.051 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 12:16:12.982 00:00:10.328 TCP 23.104.0.1:42040 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:17:00.443 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46400 10 6452 1 2025-11-22 12:17:13.355 00:00:10.364 TCP 23.104.0.1:33428 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:18:00.660 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36746 10 6452 1 2025-11-22 12:18:13.768 00:00:10.370 TCP 23.104.0.1:36542 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:19:00.897 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45012 10 6452 1 2025-11-22 12:19:14.174 00:00:10.372 TCP 23.104.0.1:39642 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:16:02.226 00:05:04.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 12:16:02.223 00:05:04.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 12:20:01.114 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43384 10 6452 1 2025-11-22 12:20:14.583 00:00:10.365 TCP 23.104.0.1:54820 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:21:01.330 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46490 10 6452 1 2025-11-22 12:21:16.287 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 12:21:16.153 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 12:21:14.990 00:00:10.320 TCP 23.104.0.1:39450 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:22:01.542 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44796 10 6452 1 2025-11-22 12:22:15.354 00:00:10.323 TCP 23.104.0.1:56204 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:23:01.760 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42742 10 6452 1 2025-11-22 12:23:15.718 00:00:10.380 TCP 23.104.0.1:41248 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:24:01.986 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48000 10 6452 1 2025-11-22 12:24:16.141 00:00:10.379 TCP 23.104.0.1:45390 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:25:02.215 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52532 10 6452 1 2025-11-22 12:25:16.560 00:00:10.367 TCP 23.104.0.1:33564 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:22:02.226 00:05:04.095 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 12:22:02.225 00:05:04.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 12:26:16.270 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 12:26:02.437 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53268 10 6452 1 2025-11-22 12:26:16.279 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 12:26:16.979 00:00:10.378 TCP 23.104.0.1:33076 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:27:02.655 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56594 10 6452 1 2025-11-22 12:27:17.391 00:00:10.379 TCP 23.104.0.1:57678 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:28:02.878 00:00:21.031 TCP 1.101.0.1:3000 -> 22.102.0.1:56436 10 6452 1 2025-11-22 12:28:17.811 00:00:10.860 TCP 23.104.0.1:52718 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:29:13.950 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:59330 10 6452 1 2025-11-22 12:29:18.707 00:00:10.381 TCP 23.104.0.1:53408 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:30:14.148 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58114 10 6452 1 2025-11-22 12:30:19.128 00:00:10.366 TCP 23.104.0.1:37520 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:31:16.430 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 12:31:16.314 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 12:31:14.365 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6452 1 2025-11-22 12:31:19.532 00:00:10.362 TCP 23.104.0.1:43278 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:28:02.228 00:05:04.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 12:28:02.225 00:05:04.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 12:32:14.582 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35676 10 6452 1 2025-11-22 12:32:19.935 00:00:10.374 TCP 23.104.0.1:38902 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:33:14.749 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59596 10 6452 1 2025-11-22 12:33:20.351 00:00:10.321 TCP 23.104.0.1:49610 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:34:14.964 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36206 10 6452 1 2025-11-22 12:34:20.716 00:00:10.374 TCP 23.104.0.1:52398 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:35:15.202 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46896 10 6452 1 2025-11-22 12:35:21.133 00:00:10.371 TCP 23.104.0.1:50346 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:36:16.612 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 12:36:16.459 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 12:36:15.428 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56124 10 6452 1 2025-11-22 12:36:21.533 00:00:10.365 TCP 23.104.0.1:33030 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:37:15.645 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54292 10 6452 1 2025-11-22 12:37:21.937 00:00:10.375 TCP 23.104.0.1:46382 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:34:02.226 00:05:04.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 12:34:02.229 00:05:04.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 12:38:15.860 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49268 10 6452 1 2025-11-22 12:38:22.354 00:00:10.364 TCP 23.104.0.1:54030 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:39:16.088 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:38278 12 10375 1 2025-11-22 12:39:22.755 00:00:10.459 TCP 23.104.0.1:33802 -> 1.101.0.1:3000 15 1926 1 2025-11-22 12:40:16.331 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 10 6452 1 2025-11-22 12:40:23.253 00:00:10.367 TCP 23.104.0.1:40706 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:41:16.895 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 12:41:16.772 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 12:41:16.545 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55614 10 6452 1 2025-11-22 12:41:23.662 00:00:10.366 TCP 23.104.0.1:38206 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:42:16.714 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42300 10 6452 1 2025-11-22 12:42:24.103 00:00:10.358 TCP 23.104.0.1:58400 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:43:16.935 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:33680 10 6452 1 2025-11-22 12:43:24.500 00:00:10.360 TCP 23.104.0.1:50044 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:40:02.231 00:05:04.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 12:40:02.229 00:05:04.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 12:44:17.219 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56146 10 6452 1 2025-11-22 12:44:24.901 00:00:10.329 TCP 23.104.0.1:42596 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:45:17.427 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35272 10 6452 1 2025-11-22 12:45:25.270 00:00:10.425 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:46:16.956 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 12:46:17.136 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 12:46:17.635 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55960 10 6452 1 2025-11-22 12:46:25.735 00:00:10.369 TCP 23.104.0.1:52450 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:47:17.849 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:53644 10 6452 1 2025-11-22 12:47:26.140 00:00:10.366 TCP 23.104.0.1:45060 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:48:18.093 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47718 10 6452 1 2025-11-22 12:48:26.542 00:00:10.328 TCP 23.104.0.1:49268 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:49:18.315 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45374 10 6452 1 2025-11-22 12:49:26.903 00:00:10.364 TCP 23.104.0.1:56744 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:46:02.232 00:05:04.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 12:46:02.229 00:05:04.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 12:50:18.493 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59400 10 6452 1 2025-11-22 12:50:27.300 00:00:10.370 TCP 23.104.0.1:43642 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:51:16.994 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 12:51:17.011 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 12:51:18.723 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41568 10 6452 1 2025-11-22 12:51:27.705 00:00:10.364 TCP 23.104.0.1:34804 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:52:18.935 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:45106 10 6452 1 2025-11-22 12:52:28.109 00:00:10.371 TCP 23.104.0.1:41632 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:53:19.212 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39358 10 6452 1 2025-11-22 12:53:28.514 00:00:10.659 TCP 23.104.0.1:43404 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:54:19.427 00:00:10.710 TCP 1.101.0.1:3000 -> 22.102.0.1:55594 10 6452 1 2025-11-22 12:54:29.216 00:00:10.364 TCP 23.104.0.1:34160 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:55:20.187 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57492 10 6452 1 2025-11-22 12:55:29.620 00:00:10.367 TCP 23.104.0.1:34790 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:52:02.233 00:05:04.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 12:52:02.231 00:05:04.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 12:56:16.845 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 12:56:16.767 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 12:56:20.404 00:00:10.670 TCP 1.101.0.1:3000 -> 22.102.0.1:34540 10 6452 1 2025-11-22 12:56:30.031 00:00:10.325 TCP 23.104.0.1:46340 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:57:21.110 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53994 12 6556 1 2025-11-22 12:57:30.400 00:00:10.366 TCP 23.104.0.1:50676 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:58:21.330 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60582 10 6452 1 2025-11-22 12:58:30.803 00:00:10.364 TCP 23.104.0.1:53980 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507136, total packets: 1586, avg bps: 1114, avg pps: 0, avg bpp: 319 Time window: 2025-11-22 11:58:02 - 2025-11-22 12:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0022s Wall: 0.0033s flows/second: 48968.9 Runtime: 0.0034s