Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 17:59:00.541 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48308 10 6452 1 2025-11-21 17:59:05.963 00:00:10.366 TCP 23.104.0.1:47328 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:00:00.759 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:50842 10 6452 1 2025-11-21 18:00:06.369 00:00:10.370 TCP 23.104.0.1:45596 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:00:53.965 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 18:00:54.268 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:01:00.926 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:60454 10 6452 1 2025-11-21 18:01:06.779 00:00:10.368 TCP 23.104.0.1:38768 -> 1.101.0.1:3000 11 1507 1 2025-11-21 17:58:01.708 00:05:04.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 17:58:01.707 00:05:04.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 18:02:01.126 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58950 10 6452 1 2025-11-21 18:02:07.185 00:00:10.367 TCP 23.104.0.1:36336 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:03:01.334 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51782 10 6452 1 2025-11-21 18:03:07.594 00:00:10.326 TCP 23.104.0.1:34770 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:04:01.553 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46170 12 6556 1 2025-11-21 18:04:07.960 00:00:10.362 TCP 23.104.0.1:43936 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:05:01.781 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:32988 10 6452 1 2025-11-21 18:05:08.362 00:00:10.366 TCP 23.104.0.1:59908 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:05:54.324 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:05:54.105 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 18:06:01.988 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54820 10 6452 1 2025-11-21 18:06:08.767 00:00:10.376 TCP 23.104.0.1:53760 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:07:02.218 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37228 10 6452 1 2025-11-21 18:07:09.182 00:00:10.363 TCP 23.104.0.1:54580 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:04:01.718 00:05:04.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 18:04:01.716 00:05:04.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 18:08:02.434 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45724 10 6452 1 2025-11-21 18:08:09.584 00:00:10.365 TCP 23.104.0.1:58252 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:09:02.643 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36218 10 6452 1 2025-11-21 18:09:09.996 00:00:10.364 TCP 23.104.0.1:57026 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:10:02.818 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42340 10 6452 1 2025-11-21 18:10:10.400 00:00:10.368 TCP 23.104.0.1:37434 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:10:55.213 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 18:10:55.266 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:11:03.043 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46276 10 6452 1 2025-11-21 18:11:10.803 00:00:10.377 TCP 23.104.0.1:33072 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:12:03.250 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50718 10 6452 1 2025-11-21 18:12:11.210 00:00:10.325 TCP 23.104.0.1:50056 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:13:03.465 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:45690 12 10375 1 2025-11-21 18:13:11.577 00:00:10.401 TCP 23.104.0.1:33382 -> 1.101.0.1:3000 15 1926 1 2025-11-21 18:10:01.730 00:05:04.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 18:10:01.729 00:05:04.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 18:14:03.707 00:00:11.580 TCP 1.101.0.1:3000 -> 22.102.0.1:42242 10 6452 1 2025-11-21 18:14:12.021 00:00:10.330 TCP 23.104.0.1:37840 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:15:05.334 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60978 10 6452 1 2025-11-21 18:15:12.388 00:00:10.365 TCP 23.104.0.1:39080 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:15:54.368 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 18:15:54.426 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:16:05.554 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38010 10 6452 1 2025-11-21 18:16:12.797 00:00:10.337 TCP 23.104.0.1:57104 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:17:05.777 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45192 10 6452 1 2025-11-21 18:17:13.176 00:00:10.371 TCP 23.104.0.1:47188 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:18:06.001 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33066 10 6452 1 2025-11-21 18:18:13.584 00:00:10.360 TCP 23.104.0.1:50386 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:19:06.217 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40816 10 6452 1 2025-11-21 18:19:13.983 00:00:10.369 TCP 23.104.0.1:36614 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:16:01.731 00:05:04.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 18:16:01.729 00:05:04.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 18:20:06.442 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49506 10 6452 1 2025-11-21 18:20:14.402 00:00:10.370 TCP 23.104.0.1:42922 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:20:54.339 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 18:20:54.654 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:21:06.664 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53382 10 6452 1 2025-11-21 18:21:14.816 00:00:10.375 TCP 23.104.0.1:38106 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:22:06.881 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56508 10 6452 1 2025-11-21 18:22:15.235 00:00:10.367 TCP 23.104.0.1:37528 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:23:07.109 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35170 10 6452 1 2025-11-21 18:23:15.642 00:00:10.366 TCP 23.104.0.1:43382 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:24:07.336 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51572 10 6452 1 2025-11-21 18:24:16.055 00:00:10.368 TCP 23.104.0.1:35956 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:25:07.528 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33668 10 6452 1 2025-11-21 18:25:16.460 00:00:10.362 TCP 23.104.0.1:46532 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:25:55.539 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 18:25:55.480 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:22:01.732 00:05:04.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 18:22:01.736 00:05:04.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 18:26:07.748 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56896 10 6452 1 2025-11-21 18:26:16.862 00:00:10.374 TCP 23.104.0.1:60750 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:27:07.958 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35462 12 6556 1 2025-11-21 18:27:17.280 00:00:10.365 TCP 23.104.0.1:46088 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:28:08.186 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35020 10 6452 1 2025-11-21 18:28:17.683 00:00:10.328 TCP 23.104.0.1:58408 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:29:08.359 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50688 10 6452 1 2025-11-21 18:29:18.056 00:00:10.379 TCP 23.104.0.1:47042 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:30:08.575 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40144 10 6452 1 2025-11-21 18:30:18.474 00:00:10.364 TCP 23.104.0.1:36464 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:30:55.001 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:30:54.819 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 18:31:08.787 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54306 10 6452 1 2025-11-21 18:31:18.879 00:00:10.326 TCP 23.104.0.1:57494 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:28:01.738 00:05:04.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 18:28:01.737 00:05:04.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 18:32:09.002 00:00:10.991 TCP 1.101.0.1:3000 -> 22.102.0.1:57676 10 6452 1 2025-11-21 18:32:19.242 00:00:10.368 TCP 23.104.0.1:38762 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:33:10.040 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44634 10 6452 1 2025-11-21 18:33:19.647 00:00:10.370 TCP 23.104.0.1:44510 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:34:10.264 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60502 10 6452 1 2025-11-21 18:34:20.065 00:00:10.364 TCP 23.104.0.1:55960 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:35:10.481 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51664 10 6452 1 2025-11-21 18:35:20.473 00:00:10.361 TCP 23.104.0.1:42938 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:35:54.759 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:35:54.919 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 18:36:10.655 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49704 10 6452 1 2025-11-21 18:36:20.871 00:00:10.334 TCP 23.104.0.1:46986 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:37:10.867 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44450 10 6452 1 2025-11-21 18:37:21.241 00:00:10.365 TCP 23.104.0.1:43102 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:34:01.739 00:05:04.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 18:34:01.742 00:05:04.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 18:38:11.100 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57890 10 6452 1 2025-11-21 18:38:21.646 00:00:10.363 TCP 23.104.0.1:57462 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:39:11.310 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:47054 10 6452 1 2025-11-21 18:39:22.060 00:00:10.363 TCP 23.104.0.1:55864 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:40:11.568 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47952 10 6452 1 2025-11-21 18:40:22.461 00:00:10.323 TCP 23.104.0.1:37460 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:40:55.139 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 18:40:55.019 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:41:11.785 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 10 6452 1 2025-11-21 18:41:22.823 00:00:10.358 TCP 23.104.0.1:49700 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:42:12.009 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51766 10 6452 1 2025-11-21 18:42:23.218 00:00:10.368 TCP 23.104.0.1:57534 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:43:12.238 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47348 10 6452 1 2025-11-21 18:43:23.625 00:00:10.324 TCP 23.104.0.1:46230 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:40:01.742 00:05:04.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 18:40:01.745 00:05:04.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 18:44:12.461 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:58388 10 6452 1 2025-11-21 18:44:23.988 00:00:10.362 TCP 23.104.0.1:38344 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:45:12.644 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52562 10 6452 1 2025-11-21 18:45:24.389 00:00:23.937 TCP 23.104.0.1:60474 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:45:55.046 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 18:45:54.998 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:46:12.827 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55574 10 6452 1 2025-11-21 18:46:38.370 00:00:10.361 TCP 23.104.0.1:34150 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:47:13.072 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34406 10 6452 1 2025-11-21 18:47:38.771 00:00:10.396 TCP 23.104.0.1:48810 -> 1.101.0.1:3000 15 1926 1 2025-11-21 18:48:13.290 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:41734 12 10375 1 2025-11-21 18:48:39.208 00:00:10.362 TCP 23.104.0.1:33696 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:49:13.493 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39226 10 6452 1 2025-11-21 18:49:39.610 00:00:10.362 TCP 23.104.0.1:60380 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:46:01.747 00:05:04.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 18:46:01.745 00:05:04.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 18:50:13.704 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:45016 10 6452 1 2025-11-21 18:50:40.006 00:00:10.367 TCP 23.104.0.1:56542 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:50:55.148 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:50:55.015 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 18:51:13.953 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47944 10 6452 1 2025-11-21 18:51:40.413 00:00:10.372 TCP 23.104.0.1:57050 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:52:14.192 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47424 10 6452 1 2025-11-21 18:52:40.825 00:00:10.365 TCP 23.104.0.1:37812 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:53:14.413 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47882 10 6452 1 2025-11-21 18:53:41.226 00:00:10.365 TCP 23.104.0.1:33924 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:54:14.627 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:33308 10 6452 1 2025-11-21 18:54:41.630 00:00:10.366 TCP 23.104.0.1:50040 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:55:14.807 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43914 10 6452 1 2025-11-21 18:55:55.128 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 18:55:42.035 00:00:10.370 TCP 23.104.0.1:42236 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:55:55.243 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 18:52:01.748 00:05:04.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 18:52:01.746 00:05:04.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 18:56:15.016 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39238 10 6452 1 2025-11-21 18:56:42.445 00:00:10.328 TCP 23.104.0.1:59996 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:57:15.237 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48754 10 6452 1 2025-11-21 18:57:42.809 00:00:10.334 TCP 23.104.0.1:43188 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:58:15.455 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43112 10 6452 1 Summary: total flows: 163, total bytes: 505733, total packets: 1577, avg bps: 1116, avg pps: 0, avg bpp: 320 Time window: 2025-11-21 17:58:01 - 2025-11-21 18:58:25 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0046s User: 0.0018s Wall: 0.0023s flows/second: 70474.3 Runtime: 0.0023s