Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 21:58:45.945 00:00:14.872 TCP 1.101.0.1:3000 -> 22.102.0.1:46822 10 6452 1 2025-11-12 21:59:07.510 00:00:10.895 TCP 23.104.0.1:56342 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:59:50.856 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52654 10 6452 1 2025-11-12 22:00:08.457 00:00:10.364 TCP 23.104.0.1:45132 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:00:51.080 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54456 10 6452 1 2025-11-12 22:01:08.862 00:00:10.369 TCP 23.104.0.1:40032 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:01:37.348 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 22:01:37.239 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 22:01:51.296 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35130 10 6452 1 2025-11-12 22:02:09.267 00:00:10.363 TCP 23.104.0.1:60968 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:02:51.504 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49470 10 6452 1 2025-11-12 22:03:09.670 00:00:10.427 TCP 23.104.0.1:47434 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:03:51.714 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39032 12 6556 1 2025-11-12 21:59:56.292 00:05:03.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 21:59:56.295 00:05:03.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 22:04:10.143 00:00:10.363 TCP 23.104.0.1:45074 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:04:51.930 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:42946 10 6452 1 2025-11-12 22:05:10.543 00:00:10.326 TCP 23.104.0.1:57656 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:05:52.172 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46196 10 6452 1 2025-11-12 22:06:10.906 00:00:10.325 TCP 23.104.0.1:59536 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:06:37.571 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 22:06:37.171 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 22:06:52.395 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56822 10 6452 1 2025-11-12 22:07:11.276 00:00:10.365 TCP 23.104.0.1:44440 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:07:52.622 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35826 10 6452 1 2025-11-12 22:08:11.682 00:00:10.374 TCP 23.104.0.1:49546 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:08:52.837 00:00:10.851 TCP 1.101.0.1:3000 -> 22.102.0.1:37572 10 6452 1 2025-11-12 22:09:12.107 00:00:11.107 TCP 23.104.0.1:39928 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:05:56.294 00:05:03.978 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 22:05:56.296 00:05:03.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 22:09:53.725 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46726 10 6452 1 2025-11-12 22:10:13.256 00:00:10.363 TCP 23.104.0.1:59882 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:10:53.950 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:41868 10 6452 1 2025-11-12 22:11:13.659 00:00:10.365 TCP 23.104.0.1:46794 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:11:37.299 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 22:11:37.710 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 22:11:54.193 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60894 10 6452 1 2025-11-12 22:12:14.082 00:00:10.319 TCP 23.104.0.1:43570 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:12:54.420 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58886 10 6452 1 2025-11-12 22:13:14.442 00:00:10.375 TCP 23.104.0.1:51222 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:13:54.643 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36338 12 6556 1 2025-11-12 22:14:14.845 00:00:10.381 TCP 23.104.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:14:54.865 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49570 10 6452 1 2025-11-12 22:15:15.266 00:00:10.329 TCP 23.104.0.1:34390 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:11:56.295 00:05:03.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 22:11:56.297 00:05:03.974 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 22:15:55.095 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53324 10 6452 1 2025-11-12 22:16:15.631 00:00:10.365 TCP 23.104.0.1:51878 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:16:37.685 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 22:16:37.761 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 22:16:55.267 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56922 10 6452 1 2025-11-12 22:17:16.031 00:00:10.372 TCP 23.104.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:17:55.499 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47032 10 6452 1 2025-11-12 22:18:16.439 00:00:10.364 TCP 23.104.0.1:58750 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:18:55.714 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59568 10 6452 1 2025-11-12 22:19:16.846 00:00:10.384 TCP 23.104.0.1:43580 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:19:55.941 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:45316 10 6452 1 2025-11-12 22:20:17.268 00:00:10.366 TCP 23.104.0.1:59902 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:20:56.190 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40812 10 6452 1 2025-11-12 22:21:17.672 00:00:10.366 TCP 23.104.0.1:36666 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:21:37.938 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 22:21:37.897 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 22:17:56.297 00:05:03.975 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 22:17:56.295 00:05:03.980 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 22:21:56.410 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59256 10 6452 1 2025-11-12 22:22:18.108 00:00:10.365 TCP 23.104.0.1:42744 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:22:56.625 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43478 10 6452 1 2025-11-12 22:23:18.521 00:00:10.323 TCP 23.104.0.1:59462 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:23:56.849 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:58820 12 10369 1 2025-11-12 22:24:18.882 00:00:10.444 TCP 23.104.0.1:35732 -> 1.101.0.1:3000 15 1926 1 2025-11-12 22:24:57.098 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40020 10 6452 1 2025-11-12 22:25:19.367 00:00:10.325 TCP 23.104.0.1:57972 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:25:57.313 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51956 10 6452 1 2025-11-12 22:26:19.729 00:00:10.324 TCP 23.104.0.1:42746 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:26:37.914 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 22:26:37.924 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 22:26:57.524 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53186 10 6452 1 2025-11-12 22:27:20.101 00:00:10.368 TCP 23.104.0.1:57786 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:23:56.297 00:05:03.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 22:23:56.300 00:05:03.974 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 22:27:57.699 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42412 10 6452 1 2025-11-12 22:28:20.511 00:00:10.368 TCP 23.104.0.1:49974 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:28:57.911 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59440 10 6452 1 2025-11-12 22:29:20.922 00:00:10.396 TCP 23.104.0.1:46944 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:29:58.126 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:48502 10 6452 1 2025-11-12 22:30:21.360 00:00:10.365 TCP 23.104.0.1:36988 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:30:58.295 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58974 10 6452 1 2025-11-12 22:31:37.926 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 22:31:21.764 00:00:10.371 TCP 23.104.0.1:56754 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:31:37.704 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 22:31:58.510 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33720 10 6452 1 2025-11-12 22:32:22.172 00:00:10.328 TCP 23.104.0.1:40100 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:32:58.718 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47270 10 6452 1 2025-11-12 22:33:22.538 00:00:10.323 TCP 23.104.0.1:42528 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:29:56.300 00:05:03.980 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 22:29:56.302 00:05:03.975 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 22:33:58.937 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:36744 10 6452 1 2025-11-12 22:34:22.904 00:00:22.015 TCP 23.104.0.1:41654 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:34:59.189 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36058 10 6452 1 2025-11-12 22:35:34.969 00:00:10.368 TCP 23.104.0.1:57324 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:35:59.361 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47680 10 6452 1 2025-11-12 22:36:38.131 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 22:36:37.929 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 22:36:35.373 00:00:10.394 TCP 23.104.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:36:59.580 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53220 10 6452 1 2025-11-12 22:37:35.809 00:00:10.369 TCP 23.104.0.1:36716 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:37:59.793 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41628 10 6452 1 2025-11-12 22:38:36.216 00:00:10.362 TCP 23.104.0.1:59888 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:38:59.999 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40508 10 6452 1 2025-11-12 22:39:36.621 00:00:10.321 TCP 23.104.0.1:42948 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:35:56.300 00:05:03.981 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 22:35:56.303 00:05:03.975 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 22:40:00.216 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58998 10 6452 1 2025-11-12 22:40:36.984 00:00:10.365 TCP 23.104.0.1:43398 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:41:00.428 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52556 10 6452 1 2025-11-12 22:41:37.881 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 22:41:38.335 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 22:41:37.391 00:00:10.856 TCP 23.104.0.1:47964 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:42:00.638 00:00:13.928 TCP 1.101.0.1:3000 -> 22.102.0.1:42776 10 6452 1 2025-11-12 22:42:38.287 00:00:10.363 TCP 23.104.0.1:55678 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:43:04.618 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55692 10 6452 1 2025-11-12 22:43:38.692 00:00:10.399 TCP 23.104.0.1:53640 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:44:04.847 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:39780 12 10375 1 2025-11-12 22:44:39.160 00:00:10.407 TCP 23.104.0.1:39436 -> 1.101.0.1:3000 15 1926 1 2025-11-12 22:45:05.106 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42668 10 6452 1 2025-11-12 22:45:39.607 00:00:10.378 TCP 23.104.0.1:50378 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:41:56.303 00:05:03.977 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 22:41:56.302 00:05:03.981 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 22:46:05.319 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54364 10 6452 1 2025-11-12 22:46:38.336 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 22:46:38.538 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 22:46:40.024 00:00:10.366 TCP 23.104.0.1:59400 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:47:05.529 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58164 10 6452 1 2025-11-12 22:47:40.431 00:00:10.367 TCP 23.104.0.1:54694 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:48:05.738 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55870 10 6452 1 2025-11-12 22:48:40.833 00:00:10.383 TCP 23.104.0.1:60830 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:49:05.922 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36532 10 6452 1 2025-11-12 22:49:41.255 00:00:10.366 TCP 23.104.0.1:57072 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:50:06.141 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46126 10 6452 1 2025-11-12 22:50:41.661 00:00:10.365 TCP 23.104.0.1:58166 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:51:06.350 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34574 10 6452 1 2025-11-12 22:51:38.435 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 22:51:38.505 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 22:51:42.102 00:00:10.365 TCP 23.104.0.1:49522 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:47:56.305 00:05:03.977 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 22:47:56.303 00:05:03.982 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 22:52:06.520 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56738 10 6452 1 2025-11-12 22:52:42.512 00:00:10.322 TCP 23.104.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:53:06.737 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43912 10 6452 1 2025-11-12 22:53:42.877 00:00:10.363 TCP 23.104.0.1:43330 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:54:06.943 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40312 10 6452 1 2025-11-12 22:54:43.278 00:00:10.324 TCP 23.104.0.1:60664 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:55:07.170 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55922 10 6452 1 2025-11-12 22:55:43.645 00:00:10.366 TCP 23.104.0.1:40674 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:56:07.344 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52120 10 6452 1 2025-11-12 22:56:38.803 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 22:56:38.567 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 22:56:44.062 00:00:10.362 TCP 23.104.0.1:36444 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:57:07.560 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52264 11 6492 1 2025-11-12 22:57:44.463 00:00:10.319 TCP 23.104.0.1:58714 -> 1.101.0.1:3000 11 1507 1 2025-11-12 22:53:56.302 00:05:03.983 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 22:53:56.305 00:05:03.978 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 22:58:07.773 00:00:10.555 TCP 1.101.0.1:3000 -> 22.102.0.1:37914 10 6452 1 Summary: total flows: 163, total bytes: 505767, total packets: 1578, avg bps: 1119, avg pps: 0, avg bpp: 320 Time window: 2025-11-12 21:58:45 - 2025-11-12 22:59:00 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0030s Wall: 0.0022s flows/second: 74062.6 Runtime: 0.0022s