Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 13:59:00.000 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49782 10 6452 1 2025-11-21 13:59:15.677 00:00:10.321 TCP 23.104.0.1:34230 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:00:00.220 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51876 10 6452 1 2025-11-21 14:00:16.043 00:00:10.367 TCP 23.104.0.1:46328 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:00:49.416 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 14:00:49.335 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 14:01:00.436 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40016 10 6452 1 2025-11-21 14:01:16.448 00:00:10.362 TCP 23.104.0.1:56476 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:58:01.623 00:05:04.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 13:58:01.620 00:05:04.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 14:02:00.653 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36272 10 6452 1 2025-11-21 14:02:16.850 00:00:10.375 TCP 23.104.0.1:48126 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:03:00.869 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:37138 12 10369 1 2025-11-21 14:03:17.269 00:00:10.436 TCP 23.104.0.1:59730 -> 1.101.0.1:3000 15 1926 1 2025-11-21 14:04:01.111 00:00:10.784 TCP 1.101.0.1:3000 -> 22.102.0.1:43922 10 6452 1 2025-11-21 14:04:17.745 00:00:10.388 TCP 23.104.0.1:41284 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:05:01.936 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42844 10 6452 1 2025-11-21 14:05:18.175 00:00:10.373 TCP 23.104.0.1:49788 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:05:49.792 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 14:05:49.635 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 14:06:02.164 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58460 10 6452 1 2025-11-21 14:06:18.592 00:00:10.370 TCP 23.104.0.1:36674 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:07:02.381 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52456 10 6452 1 2025-11-21 14:07:19.005 00:00:10.363 TCP 23.104.0.1:39888 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:04:01.622 00:05:04.180 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 14:04:01.624 00:05:04.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 14:08:02.554 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34414 10 6452 1 2025-11-21 14:08:19.404 00:00:10.361 TCP 23.104.0.1:35184 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:09:02.759 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58756 10 6452 1 2025-11-21 14:09:19.808 00:00:10.370 TCP 23.104.0.1:47378 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:10:02.973 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:41788 10 6452 1 2025-11-21 14:10:20.217 00:00:10.359 TCP 23.104.0.1:44366 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:10:49.570 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 14:10:49.582 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 14:11:03.209 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37076 10 6452 1 2025-11-21 14:11:20.618 00:00:10.365 TCP 23.104.0.1:57792 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:12:03.418 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57552 10 6452 1 2025-11-21 14:12:21.024 00:00:10.368 TCP 23.104.0.1:53526 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:13:03.587 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35756 10 6452 1 2025-11-21 14:13:21.431 00:00:10.325 TCP 23.104.0.1:56218 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:10:01.624 00:05:04.179 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 14:10:01.626 00:05:04.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 14:14:03.797 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35476 10 6452 1 2025-11-21 14:14:21.799 00:00:10.374 TCP 23.104.0.1:34330 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:15:04.016 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40204 10 6452 1 2025-11-21 14:15:22.214 00:00:10.360 TCP 23.104.0.1:33520 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:15:49.500 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 14:15:49.558 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 14:16:04.232 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42088 10 6452 1 2025-11-21 14:16:22.612 00:00:10.365 TCP 23.104.0.1:39098 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:17:04.444 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60938 10 6452 1 2025-11-21 14:17:23.019 00:00:10.360 TCP 23.104.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:18:04.654 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52538 10 6452 1 2025-11-21 14:18:23.416 00:00:10.328 TCP 23.104.0.1:40632 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:19:04.873 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41314 10 6452 1 2025-11-21 14:19:23.781 00:00:10.332 TCP 23.104.0.1:35206 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:16:01.628 00:05:04.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 14:16:01.625 00:05:04.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 14:20:05.103 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45612 10 6452 1 2025-11-21 14:20:24.153 00:00:10.365 TCP 23.104.0.1:50936 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:20:50.016 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 14:20:49.956 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 14:21:05.325 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49288 10 6452 1 2025-11-21 14:21:24.559 00:00:10.362 TCP 23.104.0.1:49480 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:22:05.535 00:00:11.608 TCP 1.101.0.1:3000 -> 22.102.0.1:57652 10 6452 1 2025-11-21 14:22:24.960 00:00:10.367 TCP 23.104.0.1:49122 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:23:07.199 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56212 10 6452 1 2025-11-21 14:23:25.365 00:00:10.368 TCP 23.104.0.1:60884 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:24:07.373 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36468 10 6452 1 2025-11-21 14:24:25.775 00:00:10.331 TCP 23.104.0.1:39624 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:25:07.585 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36442 10 6452 1 2025-11-21 14:25:26.146 00:00:10.361 TCP 23.104.0.1:58406 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:25:49.756 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 14:25:49.843 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 14:22:01.628 00:05:04.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 14:22:01.627 00:05:04.180 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 14:26:07.793 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48380 10 6452 1 2025-11-21 14:26:26.545 00:00:10.363 TCP 23.104.0.1:45390 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:27:08.007 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51166 10 6452 1 2025-11-21 14:27:26.953 00:00:10.363 TCP 23.104.0.1:37012 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:28:08.226 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37076 12 10375 1 2025-11-21 14:28:27.366 00:00:10.438 TCP 23.104.0.1:39526 -> 1.101.0.1:3000 15 1926 1 2025-11-21 14:29:08.469 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55544 10 6452 1 2025-11-21 14:29:27.851 00:00:10.338 TCP 23.104.0.1:56376 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:30:08.684 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56320 10 6452 1 2025-11-21 14:30:28.226 00:00:10.361 TCP 23.104.0.1:37436 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:30:49.734 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 14:30:49.977 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 14:31:08.901 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39300 10 6452 1 2025-11-21 14:31:28.628 00:00:10.368 TCP 23.104.0.1:52804 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:28:01.629 00:05:04.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 14:28:01.626 00:05:04.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 14:32:09.116 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:32804 10 6452 1 2025-11-21 14:32:29.035 00:00:10.364 TCP 23.104.0.1:50428 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:33:09.293 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58974 10 6452 1 2025-11-21 14:33:29.435 00:00:10.368 TCP 23.104.0.1:45736 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:34:09.507 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46266 10 6452 1 2025-11-21 14:34:29.844 00:00:10.389 TCP 23.104.0.1:57262 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:35:09.735 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52926 10 6452 1 2025-11-21 14:35:30.265 00:00:10.367 TCP 23.104.0.1:56638 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:35:49.683 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 14:35:50.019 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 14:36:09.952 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:37078 10 6452 1 2025-11-21 14:36:30.670 00:00:10.364 TCP 23.104.0.1:58646 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:37:10.153 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52522 10 6452 1 2025-11-21 14:37:31.098 00:00:10.332 TCP 23.104.0.1:50550 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:34:01.626 00:05:04.182 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 14:34:01.630 00:05:04.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 14:38:10.371 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52890 10 6452 1 2025-11-21 14:38:31.473 00:00:10.365 TCP 23.104.0.1:46292 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:39:10.579 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37190 10 6452 1 2025-11-21 14:39:31.874 00:00:10.371 TCP 23.104.0.1:39400 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:40:10.750 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45390 10 6452 1 2025-11-21 14:40:32.281 00:00:10.370 TCP 23.104.0.1:34476 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:40:50.191 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 14:40:50.171 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 14:41:10.958 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:41134 10 6452 1 2025-11-21 14:41:32.690 00:00:10.831 TCP 23.104.0.1:36508 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:42:11.196 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42138 10 6452 1 2025-11-21 14:42:33.561 00:00:10.365 TCP 23.104.0.1:59622 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:43:11.374 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:38670 10 6452 1 2025-11-21 14:43:33.968 00:00:10.335 TCP 23.104.0.1:42450 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:40:01.627 00:05:04.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 14:40:01.630 00:05:04.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 14:44:11.565 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60144 10 6452 1 2025-11-21 14:44:34.342 00:00:10.375 TCP 23.104.0.1:36866 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:45:11.781 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43704 10 6452 1 2025-11-21 14:45:34.753 00:00:10.327 TCP 23.104.0.1:42096 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:45:50.083 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 14:45:50.159 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 14:46:11.992 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35824 10 6452 1 2025-11-21 14:46:35.113 00:00:10.316 TCP 23.104.0.1:46646 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:47:12.210 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58852 10 6452 1 2025-11-21 14:47:35.468 00:00:10.324 TCP 23.104.0.1:34022 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:48:12.379 00:00:10.976 TCP 1.101.0.1:3000 -> 22.102.0.1:51048 12 6556 1 2025-11-21 14:48:35.833 00:00:10.391 TCP 23.104.0.1:37888 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:49:13.398 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56064 10 6452 1 2025-11-21 14:49:36.261 00:00:10.370 TCP 23.104.0.1:59928 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:46:01.632 00:05:04.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 14:46:01.629 00:05:04.182 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 14:50:13.609 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54288 10 6452 1 2025-11-21 14:50:50.013 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 14:50:36.670 00:00:10.366 TCP 23.104.0.1:60058 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:50:50.354 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 14:51:13.779 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45272 10 6452 1 2025-11-21 14:51:37.093 00:00:10.514 TCP 23.104.0.1:56514 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:52:14.002 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40484 10 6452 1 2025-11-21 14:52:37.650 00:00:10.365 TCP 23.104.0.1:52546 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:53:14.218 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35994 10 6452 1 2025-11-21 14:53:38.055 00:00:10.359 TCP 23.104.0.1:51346 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:54:14.390 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36652 10 6452 1 2025-11-21 14:54:38.455 00:00:10.365 TCP 23.104.0.1:58900 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:55:14.597 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45350 10 6452 1 2025-11-21 14:55:50.742 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 14:55:50.614 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 14:55:38.862 00:00:10.330 TCP 23.104.0.1:36390 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:52:01.631 00:05:04.182 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 14:52:01.634 00:05:04.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 14:56:14.810 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60454 10 6452 1 2025-11-21 14:56:39.230 00:00:10.374 TCP 23.104.0.1:54152 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:57:15.031 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48674 10 6452 1 2025-11-21 14:57:39.647 00:00:10.366 TCP 23.104.0.1:56838 -> 1.101.0.1:3000 11 1507 1 2025-11-21 14:58:15.240 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47128 10 6452 1 2025-11-21 14:58:40.056 00:00:10.376 TCP 23.104.0.1:42762 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507130, total packets: 1586, avg bps: 1111, avg pps: 0, avg bpp: 319 Time window: 2025-11-21 13:58:01 - 2025-11-21 14:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0021s Wall: 0.0020s flows/second: 80744.9 Runtime: 0.0020s