Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 16:58:45.870 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47900 10 6452 1 2025-11-21 16:59:33.980 00:00:10.376 TCP 23.104.0.1:35454 -> 1.101.0.1:3000 11 1507 1 2025-11-21 16:59:46.100 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59736 10 6452 1 2025-11-21 17:00:34.389 00:00:10.367 TCP 23.104.0.1:54968 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:00:46.320 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52414 10 6452 1 2025-11-21 17:00:53.056 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 17:00:52.690 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 17:01:34.796 00:00:10.333 TCP 23.104.0.1:48908 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:01:46.532 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40090 10 6452 1 2025-11-21 16:58:01.687 00:05:04.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 16:58:01.685 00:05:04.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 17:02:35.167 00:00:10.334 TCP 23.104.0.1:32836 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:02:46.745 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:45498 10 6452 1 2025-11-21 17:03:35.539 00:00:10.368 TCP 23.104.0.1:60100 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:03:46.926 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58896 10 6452 1 2025-11-21 17:04:35.943 00:00:10.372 TCP 23.104.0.1:60950 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:04:47.157 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50956 10 6452 1 2025-11-21 17:05:36.354 00:00:10.367 TCP 23.104.0.1:52982 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:05:53.080 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 17:05:53.010 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 17:05:47.368 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46424 10 6452 1 2025-11-21 17:06:36.769 00:00:10.323 TCP 23.104.0.1:44720 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:06:47.577 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36956 10 6452 1 2025-11-21 17:07:37.139 00:00:10.331 TCP 23.104.0.1:38176 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:07:47.788 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38662 10 6452 1 2025-11-21 17:04:01.689 00:05:04.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 17:04:01.686 00:05:04.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 17:08:37.509 00:00:15.212 TCP 23.104.0.1:59908 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:08:48.006 00:00:10.315 TCP 1.101.0.1:3000 -> 22.102.0.1:55356 10 6452 1 2025-11-21 17:09:42.771 00:00:10.366 TCP 23.104.0.1:52500 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:09:48.363 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47988 10 6452 1 2025-11-21 17:10:53.263 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 17:10:52.940 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 17:10:43.177 00:00:10.322 TCP 23.104.0.1:34910 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:10:48.569 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44820 12 6556 1 2025-11-21 17:11:43.537 00:00:10.357 TCP 23.104.0.1:58120 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:11:48.798 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:42364 10 6452 1 2025-11-21 17:12:43.933 00:00:10.340 TCP 23.104.0.1:34636 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:12:49.073 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59566 10 6452 1 2025-11-21 17:13:44.310 00:00:10.326 TCP 23.104.0.1:46224 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:13:49.248 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37356 10 6452 1 2025-11-21 17:10:01.687 00:05:04.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 17:10:01.691 00:05:04.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 17:14:44.678 00:00:10.363 TCP 23.104.0.1:42384 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:14:49.457 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60720 10 6452 1 2025-11-21 17:15:53.333 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 17:15:45.103 00:00:10.326 TCP 23.104.0.1:41308 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:15:53.328 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 17:15:49.680 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48562 10 6452 1 2025-11-21 17:16:45.468 00:00:10.322 TCP 23.104.0.1:50476 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:16:49.900 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49500 10 6452 1 2025-11-21 17:17:45.833 00:00:10.392 TCP 23.104.0.1:42472 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:17:50.127 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38572 10 6452 1 2025-11-21 17:18:46.264 00:00:10.565 TCP 23.104.0.1:59722 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:18:50.349 00:00:11.016 TCP 1.101.0.1:3000 -> 22.102.0.1:53732 10 6452 1 2025-11-21 17:19:46.870 00:00:10.365 TCP 23.104.0.1:38582 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:19:51.409 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44668 10 6452 1 2025-11-21 17:16:01.692 00:05:04.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 17:16:01.689 00:05:04.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 17:20:53.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 17:20:53.203 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 17:20:51.625 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57054 10 6452 1 2025-11-21 17:20:47.274 00:00:10.334 TCP 23.104.0.1:46976 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:21:47.644 00:00:10.366 TCP 23.104.0.1:60746 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:21:51.831 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35268 10 6452 1 2025-11-21 17:22:48.062 00:00:10.366 TCP 23.104.0.1:36698 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:22:52.067 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42146 10 6452 1 2025-11-21 17:23:48.466 00:00:10.322 TCP 23.104.0.1:35580 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:23:52.286 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44004 10 6452 1 2025-11-21 17:24:48.831 00:00:10.332 TCP 23.104.0.1:55472 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:24:52.491 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59550 10 6452 1 2025-11-21 17:25:53.583 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 17:25:53.320 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 17:25:49.204 00:00:11.867 TCP 23.104.0.1:40392 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:25:52.703 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33140 10 6452 1 2025-11-21 17:22:01.690 00:05:04.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 17:22:01.693 00:05:04.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 17:26:51.119 00:00:10.368 TCP 23.104.0.1:44084 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:26:52.913 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59308 10 6452 1 2025-11-21 17:27:51.524 00:00:10.325 TCP 23.104.0.1:44124 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:27:53.124 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56110 10 6452 1 2025-11-21 17:28:53.338 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:39316 10 6452 1 2025-11-21 17:28:51.888 00:00:10.379 TCP 23.104.0.1:44506 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:29:53.510 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56510 10 6452 1 2025-11-21 17:29:52.311 00:00:10.363 TCP 23.104.0.1:46718 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:30:53.581 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 17:30:53.281 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 17:30:53.731 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51444 10 6452 1 2025-11-21 17:30:52.712 00:00:10.380 TCP 23.104.0.1:44556 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:31:53.944 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37112 10 6452 1 2025-11-21 17:28:01.694 00:05:04.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 17:31:53.131 00:00:10.367 TCP 23.104.0.1:49394 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:28:01.697 00:05:04.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 17:32:54.173 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38020 10 6452 1 2025-11-21 17:32:53.535 00:00:10.371 TCP 23.104.0.1:44760 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:33:54.384 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55150 10 6452 1 2025-11-21 17:33:53.942 00:00:10.365 TCP 23.104.0.1:53102 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:34:54.345 00:00:10.366 TCP 23.104.0.1:58400 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:34:54.601 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37872 10 6452 1 2025-11-21 17:35:53.644 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 17:35:54.425 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 17:35:54.753 00:00:10.385 TCP 23.104.0.1:55676 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:35:54.828 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49920 10 6452 1 2025-11-21 17:36:55.193 00:00:10.415 TCP 23.104.0.1:45192 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:36:55.009 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:38962 10 6452 1 2025-11-21 17:37:55.669 00:00:10.916 TCP 23.104.0.1:53914 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:34:01.697 00:05:04.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 17:37:55.222 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56370 10 6452 1 2025-11-21 17:34:01.695 00:05:04.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 17:38:55.433 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51562 10 6452 1 2025-11-21 17:38:56.649 00:00:10.367 TCP 23.104.0.1:45846 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:39:55.651 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52356 10 6452 1 2025-11-21 17:39:57.058 00:00:10.326 TCP 23.104.0.1:55356 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:40:53.834 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 17:40:53.709 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 17:40:55.867 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36790 10 6452 1 2025-11-21 17:40:57.423 00:00:10.363 TCP 23.104.0.1:60982 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:41:56.093 00:00:10.415 TCP 1.101.0.1:3000 -> 22.102.0.1:52998 10 6452 1 2025-11-21 17:41:57.825 00:00:11.041 TCP 23.104.0.1:52952 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:42:56.543 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35994 10 6452 1 2025-11-21 17:42:58.902 00:00:10.367 TCP 23.104.0.1:56134 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:40:01.699 00:05:04.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 17:43:56.782 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55512 10 6452 1 2025-11-21 17:40:01.696 00:05:04.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 17:43:59.305 00:00:10.326 TCP 23.104.0.1:58106 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:44:59.671 00:00:10.364 TCP 23.104.0.1:37888 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:44:56.996 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45484 10 6452 1 2025-11-21 17:45:53.833 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 17:45:53.759 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 17:45:57.225 00:00:10.638 TCP 1.101.0.1:3000 -> 22.102.0.1:46040 10 6452 1 2025-11-21 17:46:00.098 00:00:10.368 TCP 23.104.0.1:60046 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:47:00.506 00:00:10.366 TCP 23.104.0.1:37830 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:46:57.901 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:49270 10 6452 1 2025-11-21 17:48:00.912 00:00:10.603 TCP 23.104.0.1:60674 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:47:58.084 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46868 10 6452 1 2025-11-21 17:49:01.556 00:00:10.367 TCP 23.104.0.1:51732 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:48:58.306 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33366 10 6452 1 2025-11-21 17:46:01.705 00:05:04.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 17:46:01.703 00:05:04.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 17:49:58.531 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53206 10 6452 1 2025-11-21 17:50:01.959 00:00:10.328 TCP 23.104.0.1:39846 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:50:53.960 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 17:50:53.975 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 17:50:58.743 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49612 10 6452 1 2025-11-21 17:51:02.323 00:00:10.368 TCP 23.104.0.1:37416 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:51:58.961 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:60412 10 6452 1 2025-11-21 17:52:02.729 00:00:10.764 TCP 23.104.0.1:42042 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:52:59.199 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:45774 12 10375 1 2025-11-21 17:53:03.530 00:00:10.438 TCP 23.104.0.1:52800 -> 1.101.0.1:3000 15 1926 1 2025-11-21 17:53:59.442 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54644 10 6452 1 2025-11-21 17:54:04.007 00:00:10.323 TCP 23.104.0.1:60424 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:54:59.655 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34870 10 6452 1 2025-11-21 17:55:04.367 00:00:10.367 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:55:53.950 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 17:55:53.965 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 17:52:01.708 00:05:04.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 17:52:01.705 00:05:04.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 17:55:59.875 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37262 10 6452 1 2025-11-21 17:56:04.776 00:00:10.366 TCP 23.104.0.1:33896 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:57:00.115 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32950 10 6452 1 2025-11-21 17:57:05.184 00:00:10.325 TCP 23.104.0.1:36612 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:58:00.331 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34974 10 6452 1 2025-11-21 17:58:05.550 00:00:10.374 TCP 23.104.0.1:58820 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1109, avg pps: 0, avg bpp: 319 Time window: 2025-11-21 16:58:01 - 2025-11-21 17:58:15 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0062s User: 0.0000s Wall: 0.0023s flows/second: 70343.8 Runtime: 0.0023s