Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 01:59:40.844 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58490 10 6870 1 2025-11-21 01:59:37.685 00:00:10.362 TCP 23.104.0.1:54022 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:00:34.681 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 02:00:34.615 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 02:00:41.022 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51318 10 6870 1 2025-11-21 02:00:38.102 00:00:10.363 TCP 23.104.0.1:53680 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:01:38.512 00:00:10.391 TCP 23.104.0.1:57966 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:01:41.237 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39822 10 6870 1 2025-11-21 01:58:01.276 00:05:04.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 01:58:01.278 00:05:04.267 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 02:02:38.955 00:00:10.405 TCP 23.104.0.1:57236 -> 1.101.0.1:3000 15 1926 1 2025-11-21 02:02:41.461 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40640 12 11002 1 2025-11-21 02:03:39.395 00:00:10.371 TCP 23.104.0.1:35402 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:03:41.680 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50226 10 7079 1 2025-11-21 02:04:39.805 00:00:10.367 TCP 23.104.0.1:35674 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:04:41.894 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54574 10 7079 1 2025-11-21 02:05:34.890 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 02:05:34.971 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 02:05:40.206 00:00:10.363 TCP 23.104.0.1:58406 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:05:42.113 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60740 10 7079 1 2025-11-21 02:06:40.610 00:00:10.367 TCP 23.104.0.1:34060 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:06:42.329 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39934 10 7079 1 2025-11-21 02:07:41.013 00:00:10.326 TCP 23.104.0.1:53638 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:07:42.536 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49130 10 7079 1 2025-11-21 02:04:01.288 00:05:04.258 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 02:04:01.285 00:05:04.264 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 02:08:41.377 00:00:10.363 TCP 23.104.0.1:41540 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:08:42.745 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52602 10 7079 1 2025-11-21 02:09:41.777 00:00:10.332 TCP 23.104.0.1:33358 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:09:42.970 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34150 10 7079 1 2025-11-21 02:10:34.980 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 02:10:34.992 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 02:10:42.142 00:00:10.366 TCP 23.104.0.1:55214 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:10:43.185 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54824 10 7079 1 2025-11-21 02:11:43.401 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52810 10 7079 1 2025-11-21 02:11:42.543 00:00:10.339 TCP 23.104.0.1:52724 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:12:43.582 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47610 10 7079 1 2025-11-21 02:12:42.911 00:00:10.366 TCP 23.104.0.1:53234 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:13:43.316 00:00:10.358 TCP 23.104.0.1:57416 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:13:43.758 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42582 10 7079 1 2025-11-21 02:10:01.288 00:05:04.261 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 02:10:01.291 00:05:04.256 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 02:14:43.711 00:00:10.323 TCP 23.104.0.1:47746 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:14:43.970 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:33650 10 7079 1 2025-11-21 02:15:34.871 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 02:15:35.014 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 02:15:44.101 00:00:10.362 TCP 23.104.0.1:60816 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:15:44.157 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36110 10 7079 1 2025-11-21 02:16:44.499 00:00:10.360 TCP 23.104.0.1:48756 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:16:44.371 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49454 10 7079 1 2025-11-21 02:17:44.895 00:00:10.376 TCP 23.104.0.1:42870 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:17:44.542 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57082 10 7079 1 2025-11-21 02:18:45.307 00:00:10.363 TCP 23.104.0.1:56490 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:18:44.759 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47630 10 7079 1 2025-11-21 02:19:45.711 00:00:10.387 TCP 23.104.0.1:33514 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:19:44.968 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33678 10 7079 1 2025-11-21 02:16:01.292 00:05:04.258 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 02:16:01.296 00:05:04.253 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 02:20:35.292 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 02:20:35.144 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 02:20:45.194 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33070 10 7079 1 2025-11-21 02:20:46.134 00:00:10.361 TCP 23.104.0.1:50286 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:21:46.532 00:00:10.363 TCP 23.104.0.1:42324 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:21:45.416 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33880 10 7079 1 2025-11-21 02:22:45.648 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37368 10 7079 1 2025-11-21 02:22:46.939 00:00:10.391 TCP 23.104.0.1:52246 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:23:45.819 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41902 10 7079 1 2025-11-21 02:23:47.369 00:00:10.366 TCP 23.104.0.1:58972 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:24:46.042 00:00:10.465 TCP 1.101.0.1:3000 -> 22.102.0.1:33236 10 7079 1 2025-11-21 02:24:47.776 00:00:10.333 TCP 23.104.0.1:55966 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:25:35.490 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 02:25:35.344 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 02:25:46.547 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39906 10 7079 1 2025-11-21 02:25:48.144 00:00:10.369 TCP 23.104.0.1:45234 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:22:01.297 00:05:04.256 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 02:22:01.300 00:05:04.251 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 02:26:46.765 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41146 10 7079 1 2025-11-21 02:26:48.548 00:00:10.363 TCP 23.104.0.1:42998 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:27:48.946 00:00:10.371 TCP 23.104.0.1:54764 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:27:46.985 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42066 10 7079 1 2025-11-21 02:28:47.207 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48094 10 7079 1 2025-11-21 02:28:49.352 00:00:10.363 TCP 23.104.0.1:35020 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:29:49.752 00:00:10.368 TCP 23.104.0.1:37144 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:29:47.429 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49780 10 7079 1 2025-11-21 02:30:35.573 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 02:30:35.455 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 02:30:50.159 00:00:10.372 TCP 23.104.0.1:38830 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:30:47.639 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51106 10 7079 1 2025-11-21 02:31:50.576 00:00:10.365 TCP 23.104.0.1:57410 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:28:01.301 00:05:04.250 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 02:31:47.827 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39018 10 7079 1 2025-11-21 02:28:01.299 00:05:04.254 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 02:32:50.977 00:00:10.366 TCP 23.104.0.1:57260 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:32:48.065 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47904 10 7079 1 2025-11-21 02:33:48.291 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37514 10 7079 1 2025-11-21 02:33:51.380 00:00:10.368 TCP 23.104.0.1:59072 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:34:48.509 00:00:11.227 TCP 1.101.0.1:3000 -> 22.102.0.1:60916 10 7079 1 2025-11-21 02:34:51.791 00:00:10.371 TCP 23.104.0.1:46066 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:35:35.775 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 02:35:35.687 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 02:35:49.768 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36436 10 7079 1 2025-11-21 02:35:52.203 00:00:10.370 TCP 23.104.0.1:56820 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:36:49.987 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:53502 11 8067 1 2025-11-21 02:36:52.620 00:00:10.362 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:37:50.173 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60264 10 7079 1 2025-11-21 02:34:01.303 00:05:04.249 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 02:37:53.025 00:00:10.322 TCP 23.104.0.1:35606 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:34:01.300 00:05:04.254 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 02:38:50.382 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54966 10 7079 1 2025-11-21 02:38:53.388 00:00:10.364 TCP 23.104.0.1:44408 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:39:50.596 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59852 10 7079 1 2025-11-21 02:39:53.791 00:00:10.367 TCP 23.104.0.1:36246 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:40:35.687 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 02:40:35.629 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 02:40:50.811 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35770 10 7079 1 2025-11-21 02:40:54.194 00:00:10.325 TCP 23.104.0.1:51032 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:41:51.036 00:00:10.714 TCP 1.101.0.1:3000 -> 22.102.0.1:47614 10 7079 1 2025-11-21 02:41:54.555 00:00:10.867 TCP 23.104.0.1:35590 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:42:51.793 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32980 10 7079 1 2025-11-21 02:42:55.460 00:00:10.362 TCP 23.104.0.1:58678 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:43:52.006 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38790 10 7079 1 2025-11-21 02:40:01.309 00:05:04.247 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 02:43:55.862 00:00:10.374 TCP 23.104.0.1:39944 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:40:01.312 00:05:04.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 02:44:56.269 00:00:10.368 TCP 23.104.0.1:58886 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:44:52.215 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51010 10 7079 1 2025-11-21 02:45:36.205 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 02:45:36.046 00:00:00.052 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 02:45:52.437 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46642 10 7079 1 2025-11-21 02:45:56.679 00:00:10.365 TCP 23.104.0.1:34326 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:46:52.652 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54124 10 7079 1 2025-11-21 02:46:57.099 00:00:10.368 TCP 23.104.0.1:35430 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:47:52.828 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50036 10 7079 1 2025-11-21 02:47:57.507 00:00:10.327 TCP 23.104.0.1:39518 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:48:53.002 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34574 10 7079 1 2025-11-21 02:48:57.874 00:00:10.326 TCP 23.104.0.1:33566 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:46:01.313 00:05:04.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 02:49:53.221 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54556 10 7079 1 2025-11-21 02:46:01.311 00:05:04.246 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 02:49:58.239 00:00:10.368 TCP 23.104.0.1:56104 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:50:35.771 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 02:50:35.957 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 02:50:53.431 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41486 10 7079 1 2025-11-21 02:50:58.644 00:00:10.365 TCP 23.104.0.1:49202 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:51:53.603 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42812 10 7079 1 2025-11-21 02:51:59.049 00:00:10.365 TCP 23.104.0.1:39042 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:52:53.816 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:32908 12 10578 1 2025-11-21 02:52:59.447 00:00:10.403 TCP 23.104.0.1:40852 -> 1.101.0.1:3000 15 1926 1 2025-11-21 02:53:54.082 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46976 10 6661 1 2025-11-21 02:53:59.889 00:00:10.333 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:54:54.292 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59096 10 6661 1 2025-11-21 02:55:00.263 00:00:10.365 TCP 23.104.0.1:52390 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:55:35.909 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 02:55:36.025 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 02:52:01.315 00:05:04.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 02:55:54.505 00:00:10.622 TCP 1.101.0.1:3000 -> 22.102.0.1:52866 10 6661 1 2025-11-21 02:52:01.313 00:05:04.246 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 02:56:00.668 00:00:10.327 TCP 23.104.0.1:55618 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:56:55.169 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57306 10 6661 1 2025-11-21 02:57:01.032 00:00:10.366 TCP 23.104.0.1:52602 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:58:01.433 00:00:13.555 TCP 23.104.0.1:54952 -> 1.101.0.1:3000 11 1507 1 2025-11-21 02:57:55.390 00:00:19.439 TCP 1.101.0.1:3000 -> 22.102.0.1:44900 10 6661 1 Summary: total flows: 162, total bytes: 533913, total packets: 1564, avg bps: 1181, avg pps: 0, avg bpp: 341 Time window: 2025-11-21 01:58:01 - 2025-11-21 02:58:14 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0048s User: 0.0012s Wall: 0.0031s flows/second: 52039.3 Runtime: 0.0031s