Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 09:58:52.681 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44370 10 6452 1 2025-11-21 09:59:21.369 00:00:10.325 TCP 23.104.0.1:59236 -> 1.101.0.1:3000 11 1507 1 2025-11-21 09:59:52.899 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48368 10 6452 1 2025-11-21 10:00:21.738 00:00:10.367 TCP 23.104.0.1:46234 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:00:44.496 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 10:00:44.553 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 10:00:53.115 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50426 10 6452 1 2025-11-21 10:01:22.144 00:00:10.365 TCP 23.104.0.1:56824 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:01:53.291 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48550 10 6452 1 2025-11-21 09:58:01.504 00:05:04.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 09:58:01.508 00:05:04.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 10:02:22.559 00:00:10.363 TCP 23.104.0.1:40694 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:02:53.505 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45258 10 6452 1 2025-11-21 10:03:22.966 00:00:10.322 TCP 23.104.0.1:48756 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:03:53.719 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39306 10 6452 1 2025-11-21 10:04:23.332 00:00:10.329 TCP 23.104.0.1:41200 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:04:53.927 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58032 10 6452 1 2025-11-21 10:05:23.691 00:00:10.374 TCP 23.104.0.1:40308 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:05:44.659 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 10:05:44.627 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 10:05:54.158 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60244 10 6452 1 2025-11-21 10:06:24.109 00:00:10.367 TCP 23.104.0.1:42492 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:06:54.372 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44538 10 6452 1 2025-11-21 10:07:24.516 00:00:10.325 TCP 23.104.0.1:57552 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:04:01.508 00:05:04.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 10:07:54.580 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40126 10 6452 1 2025-11-21 10:04:01.510 00:05:04.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 10:08:24.882 00:00:10.390 TCP 23.104.0.1:48694 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:08:54.797 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50730 10 6452 1 2025-11-21 10:09:25.312 00:00:10.368 TCP 23.104.0.1:38768 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:09:55.014 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49884 10 6452 1 2025-11-21 10:10:25.718 00:00:10.374 TCP 23.104.0.1:60182 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:10:44.664 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 10:10:44.596 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 10:10:55.228 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46652 10 6452 1 2025-11-21 10:11:26.129 00:00:10.370 TCP 23.104.0.1:34432 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:11:55.448 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37796 10 6452 1 2025-11-21 10:12:26.529 00:00:10.359 TCP 23.104.0.1:50116 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:12:55.664 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55374 10 6452 1 2025-11-21 10:13:26.926 00:00:10.370 TCP 23.104.0.1:47250 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:10:01.507 00:05:04.200 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 10:10:01.511 00:05:04.194 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 10:13:55.873 00:00:12.557 TCP 1.101.0.1:3000 -> 22.102.0.1:49170 10 6452 1 2025-11-21 10:14:27.334 00:00:10.366 TCP 23.104.0.1:53032 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:14:58.464 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38882 10 6452 1 2025-11-21 10:15:27.738 00:00:10.367 TCP 23.104.0.1:42384 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:15:44.728 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 10:15:44.793 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 10:15:58.687 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35266 10 6452 1 2025-11-21 10:16:28.143 00:00:10.366 TCP 23.104.0.1:45640 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:16:58.907 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51494 10 6452 1 2025-11-21 10:17:28.545 00:00:10.367 TCP 23.104.0.1:39670 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:17:59.134 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:58074 10 6452 1 2025-11-21 10:18:28.942 00:00:10.373 TCP 23.104.0.1:36888 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:18:59.318 00:00:10.881 TCP 1.101.0.1:3000 -> 22.102.0.1:40152 10 6452 1 2025-11-21 10:19:29.352 00:00:10.322 TCP 23.104.0.1:49134 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:16:01.509 00:05:04.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 10:16:01.511 00:05:04.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 10:20:00.228 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42410 10 6452 1 2025-11-21 10:20:29.711 00:00:10.371 TCP 23.104.0.1:44466 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:20:45.012 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 10:20:44.932 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 10:21:00.448 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:43820 10 6452 1 2025-11-21 10:21:30.122 00:00:10.368 TCP 23.104.0.1:36420 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:22:00.643 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58200 10 6452 1 2025-11-21 10:22:30.525 00:00:10.907 TCP 23.104.0.1:57246 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:23:00.857 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:35234 12 10369 1 2025-11-21 10:23:31.467 00:00:10.442 TCP 23.104.0.1:60524 -> 1.101.0.1:3000 15 1926 1 2025-11-21 10:24:01.121 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39526 10 6452 1 2025-11-21 10:24:31.948 00:00:11.459 TCP 23.104.0.1:33900 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:25:01.302 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53176 10 6452 1 2025-11-21 10:25:44.817 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 10:25:33.445 00:00:10.362 TCP 23.104.0.1:52240 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:25:44.882 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 10:22:01.520 00:05:04.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 10:22:01.523 00:05:04.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 10:26:01.519 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55008 10 6452 1 2025-11-21 10:26:33.846 00:00:10.381 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:27:01.740 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51540 10 6452 1 2025-11-21 10:27:34.270 00:00:10.364 TCP 23.104.0.1:60372 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:28:01.962 00:00:10.871 TCP 1.101.0.1:3000 -> 22.102.0.1:54428 10 6452 1 2025-11-21 10:28:34.674 00:00:10.370 TCP 23.104.0.1:47244 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:29:02.871 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51544 10 6452 1 2025-11-21 10:29:35.112 00:00:10.367 TCP 23.104.0.1:41600 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:30:03.088 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:33544 10 6452 1 2025-11-21 10:30:45.165 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 10:30:45.043 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 10:30:35.517 00:00:10.368 TCP 23.104.0.1:45322 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:31:03.350 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36718 10 6452 1 2025-11-21 10:31:35.928 00:00:15.986 TCP 23.104.0.1:41476 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:28:01.520 00:05:04.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 10:28:01.523 00:05:04.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 10:32:03.565 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37484 10 6452 1 2025-11-21 10:32:41.996 00:00:10.366 TCP 23.104.0.1:41246 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:33:03.787 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34678 10 6452 1 2025-11-21 10:33:42.400 00:00:10.369 TCP 23.104.0.1:56168 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:34:03.997 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54690 10 6452 1 2025-11-21 10:34:42.807 00:00:10.371 TCP 23.104.0.1:37344 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:35:04.224 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:40628 10 6452 1 2025-11-21 10:35:45.144 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 10:35:45.107 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 10:35:43.217 00:00:10.364 TCP 23.104.0.1:48852 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:36:04.432 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52326 10 6452 1 2025-11-21 10:36:43.612 00:00:10.363 TCP 23.104.0.1:40728 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:37:04.601 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56584 10 6452 1 2025-11-21 10:37:44.016 00:00:10.359 TCP 23.104.0.1:35228 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:34:01.534 00:05:04.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 10:34:01.530 00:05:04.180 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 10:38:04.814 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:40214 10 6452 1 2025-11-21 10:38:44.415 00:00:10.371 TCP 23.104.0.1:37258 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:39:04.987 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:45578 10 6452 1 2025-11-21 10:39:44.828 00:00:10.392 TCP 23.104.0.1:44160 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:40:05.272 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58040 10 6452 1 2025-11-21 10:40:45.232 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 10:40:45.340 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 10:40:45.256 00:00:10.369 TCP 23.104.0.1:48282 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:41:05.485 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50674 10 6452 1 2025-11-21 10:41:45.655 00:00:10.365 TCP 23.104.0.1:45782 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:42:05.697 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:37640 11 6504 1 2025-11-21 10:42:46.094 00:00:10.366 TCP 23.104.0.1:32898 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:43:05.962 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55558 10 6452 1 2025-11-21 10:43:46.506 00:00:10.371 TCP 23.104.0.1:43408 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:40:01.531 00:05:04.180 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 10:40:01.533 00:05:04.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 10:44:06.181 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38744 10 6452 1 2025-11-21 10:44:46.914 00:00:10.365 TCP 23.104.0.1:51798 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:45:06.395 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54320 10 6452 1 2025-11-21 10:45:45.557 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 10:45:45.631 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 10:45:47.317 00:00:10.373 TCP 23.104.0.1:60208 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:46:06.607 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45076 10 6452 1 2025-11-21 10:46:47.733 00:00:10.370 TCP 23.104.0.1:54192 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:47:06.819 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44072 10 6452 1 2025-11-21 10:47:48.139 00:00:10.366 TCP 23.104.0.1:36766 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:48:07.040 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33574 10 6452 1 2025-11-21 10:48:48.541 00:00:10.383 TCP 23.104.0.1:55232 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:49:07.250 00:00:20.240 TCP 1.101.0.1:3000 -> 22.102.0.1:50724 10 6452 1 2025-11-21 10:49:48.966 00:00:12.962 TCP 23.104.0.1:37140 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:46:01.534 00:05:04.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 10:46:01.531 00:05:04.180 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 10:50:17.545 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59764 10 6452 1 2025-11-21 10:50:45.591 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 10:50:45.661 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 10:50:51.997 00:00:10.370 TCP 23.104.0.1:44434 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:51:17.781 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55376 10 6452 1 2025-11-21 10:51:52.412 00:00:10.370 TCP 23.104.0.1:49800 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:52:17.989 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55708 10 6452 1 2025-11-21 10:52:52.822 00:00:10.361 TCP 23.104.0.1:53602 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:53:18.213 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34334 10 6452 1 2025-11-21 10:53:53.225 00:00:10.362 TCP 23.104.0.1:40088 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:54:18.439 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55554 10 6452 1 2025-11-21 10:54:53.629 00:00:10.367 TCP 23.104.0.1:51858 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:55:18.669 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34056 10 6452 1 2025-11-21 10:55:45.453 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 10:55:45.710 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 10:52:01.533 00:05:04.180 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 10:55:54.034 00:00:10.366 TCP 23.104.0.1:45082 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:52:01.537 00:05:04.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 10:56:18.840 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-11-21 10:56:54.439 00:00:10.369 TCP 23.104.0.1:34564 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:57:19.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40014 10 6452 1 2025-11-21 10:57:54.845 00:00:10.378 TCP 23.104.0.1:49296 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:58:19.290 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45272 10 6452 1 Summary: total flows: 163, total bytes: 501229, total packets: 1568, avg bps: 1105, avg pps: 0, avg bpp: 319 Time window: 2025-11-21 09:58:01 - 2025-11-21 10:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0020s Wall: 0.0019s flows/second: 84196.0 Runtime: 0.0020s