Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 01:59:01.632 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:45058 10 6452 1 2025-11-22 01:59:26.763 00:00:10.324 TCP 23.104.0.1:50196 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:00:01.803 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:39460 10 6452 1 2025-11-22 02:00:27.127 00:00:10.364 TCP 23.104.0.1:43818 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:01:04.439 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 02:01:04.196 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:01:01.971 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57912 10 6452 1 2025-11-22 02:01:27.529 00:00:10.367 TCP 23.104.0.1:51264 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:58:01.932 00:05:04.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 01:58:01.930 00:05:04.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 02:02:02.201 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44158 10 6452 1 2025-11-22 02:02:27.937 00:00:10.395 TCP 23.104.0.1:40690 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:03:02.428 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45214 10 6452 1 2025-11-22 02:03:28.369 00:00:10.364 TCP 23.104.0.1:38898 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:04:02.651 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39932 10 6452 1 2025-11-22 02:04:28.781 00:00:10.367 TCP 23.104.0.1:33154 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:05:02.824 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55170 10 6452 1 2025-11-22 02:05:29.186 00:00:10.326 TCP 23.104.0.1:57370 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:06:03.817 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 02:06:03.753 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:06:03.065 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55990 10 6452 1 2025-11-22 02:06:29.549 00:00:10.361 TCP 23.104.0.1:53484 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:07:03.284 00:00:10.327 TCP 1.101.0.1:3000 -> 22.102.0.1:56664 10 6452 1 2025-11-22 02:07:29.947 00:00:10.327 TCP 23.104.0.1:52032 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:04:01.933 00:05:04.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 02:04:01.936 00:05:04.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 02:08:03.648 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44656 10 6452 1 2025-11-22 02:08:30.315 00:00:10.362 TCP 23.104.0.1:36790 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:09:03.859 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:46456 10 6452 1 2025-11-22 02:09:30.716 00:00:10.374 TCP 23.104.0.1:38820 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:10:04.067 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35202 10 6452 1 2025-11-22 02:10:31.128 00:00:10.328 TCP 23.104.0.1:53250 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:11:03.937 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 02:11:04.199 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:11:04.239 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43530 10 6452 1 2025-11-22 02:11:31.489 00:00:10.366 TCP 23.104.0.1:43074 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:12:04.454 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33324 10 6452 1 2025-11-22 02:12:31.894 00:00:10.374 TCP 23.104.0.1:34426 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:13:04.670 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46992 10 6452 1 2025-11-22 02:13:32.310 00:00:10.363 TCP 23.104.0.1:34616 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:10:01.937 00:05:04.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 02:10:01.934 00:05:04.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 02:14:04.888 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43466 10 6452 1 2025-11-22 02:14:32.713 00:00:10.384 TCP 23.104.0.1:45678 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:15:05.108 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49278 10 6452 1 2025-11-22 02:15:33.133 00:00:10.568 TCP 23.104.0.1:51392 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:16:04.080 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 02:16:04.217 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:16:05.283 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33630 10 6452 1 2025-11-22 02:16:33.731 00:00:10.372 TCP 23.104.0.1:47418 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:17:05.451 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34794 10 6452 1 2025-11-22 02:17:34.144 00:00:10.334 TCP 23.104.0.1:41102 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:18:05.666 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57730 10 6452 1 2025-11-22 02:18:34.526 00:00:10.363 TCP 23.104.0.1:57314 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:19:05.876 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35486 10 6452 1 2025-11-22 02:19:34.934 00:00:10.375 TCP 23.104.0.1:44118 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:16:01.936 00:05:04.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 02:16:01.937 00:05:04.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 02:20:06.090 00:00:10.961 TCP 1.101.0.1:3000 -> 22.102.0.1:45838 10 6452 1 2025-11-22 02:20:35.350 00:00:10.338 TCP 23.104.0.1:40156 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:21:04.632 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:21:04.472 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 02:21:07.083 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33740 10 6452 1 2025-11-22 02:21:35.734 00:00:10.350 TCP 23.104.0.1:58538 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:22:07.259 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:59418 10 6452 1 2025-11-22 02:22:36.122 00:00:10.365 TCP 23.104.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:23:07.480 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50656 10 6452 1 2025-11-22 02:23:36.521 00:00:10.364 TCP 23.104.0.1:59336 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:24:07.650 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60668 10 6452 1 2025-11-22 02:24:36.927 00:00:10.917 TCP 23.104.0.1:57406 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:25:07.889 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56012 10 6452 1 2025-11-22 02:25:37.888 00:00:10.382 TCP 23.104.0.1:45568 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:26:04.313 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 02:22:01.940 00:05:04.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 02:26:04.285 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:22:01.944 00:05:04.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 02:26:08.109 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35548 10 6452 1 2025-11-22 02:26:38.305 00:00:10.367 TCP 23.104.0.1:34186 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:27:08.324 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39612 10 6452 1 2025-11-22 02:27:38.710 00:00:10.380 TCP 23.104.0.1:56952 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:28:08.535 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33628 10 6452 1 2025-11-22 02:28:39.128 00:00:10.323 TCP 23.104.0.1:54504 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:29:08.750 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33930 10 6452 1 2025-11-22 02:29:39.489 00:00:10.329 TCP 23.104.0.1:36034 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:30:08.963 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:59782 12 6556 1 2025-11-22 02:30:39.855 00:00:10.378 TCP 23.104.0.1:56612 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:31:04.380 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 02:31:04.404 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:31:09.209 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43060 10 6452 1 2025-11-22 02:31:40.270 00:00:10.320 TCP 23.104.0.1:48954 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:28:01.952 00:05:04.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 02:28:01.954 00:05:04.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 02:32:09.416 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33170 10 6452 1 2025-11-22 02:32:40.629 00:00:10.324 TCP 23.104.0.1:46650 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:33:09.631 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50598 10 6452 1 2025-11-22 02:33:40.991 00:00:10.362 TCP 23.104.0.1:50080 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:34:09.804 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55182 10 6452 1 2025-11-22 02:34:41.392 00:00:10.333 TCP 23.104.0.1:57270 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:35:10.035 00:00:12.600 TCP 1.101.0.1:3000 -> 22.102.0.1:48914 10 6452 1 2025-11-22 02:35:41.758 00:00:10.341 TCP 23.104.0.1:43542 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:36:04.527 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 02:36:04.516 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:36:12.674 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58584 10 6452 1 2025-11-22 02:36:42.138 00:00:10.365 TCP 23.104.0.1:57480 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:37:12.854 00:00:10.256 TCP 1.101.0.1:3000 -> 22.102.0.1:46750 10 6452 1 2025-11-22 02:37:42.542 00:00:10.366 TCP 23.104.0.1:33056 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:34:01.957 00:05:04.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 02:34:01.954 00:05:04.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 02:38:13.148 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38890 10 6452 1 2025-11-22 02:38:42.946 00:00:10.333 TCP 23.104.0.1:49292 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:39:13.359 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44044 10 6452 1 2025-11-22 02:39:43.313 00:00:10.362 TCP 23.104.0.1:52744 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:40:13.575 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37352 10 6452 1 2025-11-22 02:40:43.716 00:00:10.381 TCP 23.104.0.1:49952 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:41:04.383 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:41:04.570 00:00:00.049 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 02:41:13.787 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58242 10 6452 1 2025-11-22 02:41:44.135 00:00:10.359 TCP 23.104.0.1:50362 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:42:14.005 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35404 10 6452 1 2025-11-22 02:42:44.535 00:00:10.438 TCP 23.104.0.1:49650 -> 1.101.0.1:3000 15 1926 1 2025-11-22 02:43:14.233 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51870 12 10375 1 2025-11-22 02:43:45.017 00:00:10.360 TCP 23.104.0.1:54432 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:40:01.982 00:05:04.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 02:40:01.971 00:05:04.136 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 02:44:14.441 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38288 10 6452 1 2025-11-22 02:44:45.415 00:00:10.364 TCP 23.104.0.1:46850 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:45:14.656 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36452 12 6556 1 2025-11-22 02:45:45.813 00:00:10.329 TCP 23.104.0.1:52908 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:46:04.566 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 02:46:04.525 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:46:14.874 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:59490 10 6452 1 2025-11-22 02:46:46.190 00:00:10.351 TCP 23.104.0.1:48048 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:47:15.111 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35740 10 6452 1 2025-11-22 02:47:46.583 00:00:10.369 TCP 23.104.0.1:47440 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:48:15.347 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58940 10 6452 1 2025-11-22 02:48:46.992 00:00:10.378 TCP 23.104.0.1:53618 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:49:15.570 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42210 10 6452 1 2025-11-22 02:49:47.419 00:00:10.371 TCP 23.104.0.1:49226 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:46:01.965 00:05:04.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 02:46:01.963 00:05:04.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 02:50:15.789 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45290 10 6452 1 2025-11-22 02:50:47.829 00:00:10.364 TCP 23.104.0.1:40528 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:51:04.688 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:51:04.923 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 02:51:15.998 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37702 10 6452 1 2025-11-22 02:51:48.228 00:00:10.388 TCP 23.104.0.1:48356 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:52:16.226 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48750 10 6452 1 2025-11-22 02:52:48.655 00:00:10.366 TCP 23.104.0.1:44814 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:53:16.449 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48394 10 6452 1 2025-11-22 02:53:49.066 00:00:10.365 TCP 23.104.0.1:60734 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:54:16.666 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41500 10 6452 1 2025-11-22 02:54:49.470 00:00:10.339 TCP 23.104.0.1:54860 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:55:16.884 00:00:12.386 TCP 1.101.0.1:3000 -> 22.102.0.1:55880 10 6452 1 2025-11-22 02:55:49.843 00:00:10.391 TCP 23.104.0.1:45862 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:52:01.964 00:05:04.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 02:56:04.979 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 02:56:05.034 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 02:52:01.966 00:05:04.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 02:56:19.315 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46966 10 6452 1 2025-11-22 02:56:50.272 00:00:10.325 TCP 23.104.0.1:59466 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:57:19.540 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53298 10 6452 1 2025-11-22 02:57:50.639 00:00:10.360 TCP 23.104.0.1:52412 -> 1.101.0.1:3000 11 1507 1 2025-11-22 02:58:19.760 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59092 10 6452 1 Summary: total flows: 163, total bytes: 501391, total packets: 1571, avg bps: 1105, avg pps: 0, avg bpp: 319 Time window: 2025-11-22 01:58:01 - 2025-11-22 02:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0019s Wall: 0.0030s flows/second: 54423.8 Runtime: 0.0030s