Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 12:59:21.546 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49224 10 6452 1 2025-11-22 12:59:31.209 00:00:10.366 TCP 23.104.0.1:50808 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:00:21.773 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37854 10 6452 1 2025-11-22 13:00:31.610 00:00:10.338 TCP 23.104.0.1:45318 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:01:16.853 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 13:01:17.026 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 13:01:21.993 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33768 10 6452 1 2025-11-22 13:01:31.994 00:00:10.364 TCP 23.104.0.1:34858 -> 1.101.0.1:3000 11 1507 1 2025-11-22 12:58:02.234 00:05:04.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 12:58:02.231 00:05:04.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 13:02:22.224 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58726 10 6452 1 2025-11-22 13:02:32.399 00:00:10.325 TCP 23.104.0.1:54266 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:03:22.391 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33372 10 6452 1 2025-11-22 13:03:32.761 00:00:10.366 TCP 23.104.0.1:40814 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:04:22.603 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56144 10 6452 1 2025-11-22 13:04:33.167 00:00:10.364 TCP 23.104.0.1:42902 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:05:22.822 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60620 10 6452 1 2025-11-22 13:05:33.572 00:00:10.361 TCP 23.104.0.1:37796 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:06:17.206 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 13:06:17.197 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 13:06:23.039 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-11-22 13:06:33.971 00:00:10.363 TCP 23.104.0.1:48286 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:07:23.254 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41984 10 6452 1 2025-11-22 13:07:34.376 00:00:10.324 TCP 23.104.0.1:53036 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:04:02.241 00:05:04.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 13:04:02.238 00:05:04.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 13:08:23.425 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48846 10 6452 1 2025-11-22 13:08:34.740 00:00:10.365 TCP 23.104.0.1:52228 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:09:23.644 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39758 10 6452 1 2025-11-22 13:09:35.145 00:00:10.362 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:10:23.866 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41604 10 6452 1 2025-11-22 13:10:35.543 00:00:10.356 TCP 23.104.0.1:43806 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:11:17.551 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 13:11:17.142 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 13:11:24.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55730 10 6452 1 2025-11-22 13:11:35.939 00:00:10.337 TCP 23.104.0.1:43298 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:12:24.296 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57456 10 6452 1 2025-11-22 13:12:36.314 00:00:10.331 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:13:24.520 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:50128 10 6452 1 2025-11-22 13:13:36.681 00:00:10.325 TCP 23.104.0.1:35638 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:10:02.241 00:05:04.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 13:10:02.240 00:05:04.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 13:14:24.705 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40296 10 6452 1 2025-11-22 13:14:37.045 00:00:10.363 TCP 23.104.0.1:39866 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:15:24.920 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:57136 10 6452 1 2025-11-22 13:15:37.447 00:00:10.360 TCP 23.104.0.1:35400 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:16:16.954 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 13:16:17.148 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 13:16:25.177 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52350 10 6452 1 2025-11-22 13:16:37.846 00:00:10.386 TCP 23.104.0.1:53764 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:17:25.393 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:54070 10 6452 1 2025-11-22 13:17:38.268 00:00:10.882 TCP 23.104.0.1:51856 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:18:25.646 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51590 10 6452 1 2025-11-22 13:18:39.186 00:00:10.324 TCP 23.104.0.1:35728 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:19:25.863 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:37144 12 10369 1 2025-11-22 13:19:39.547 00:00:10.438 TCP 23.104.0.1:42012 -> 1.101.0.1:3000 15 1926 1 2025-11-22 13:16:02.241 00:05:04.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 13:16:02.242 00:05:04.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 13:20:26.119 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54958 10 6452 1 2025-11-22 13:20:40.050 00:00:10.423 TCP 23.104.0.1:48948 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:21:17.471 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 13:21:17.415 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 13:21:26.340 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41882 10 6452 1 2025-11-22 13:21:40.515 00:00:10.326 TCP 23.104.0.1:40502 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:22:26.555 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:53634 10 6452 1 2025-11-22 13:22:40.881 00:00:10.340 TCP 23.104.0.1:39478 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:23:26.791 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54562 10 6452 1 2025-11-22 13:23:41.262 00:00:10.364 TCP 23.104.0.1:47042 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:24:27.009 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56838 10 6452 1 2025-11-22 13:24:41.662 00:00:10.359 TCP 23.104.0.1:42132 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:25:27.239 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55320 10 6452 1 2025-11-22 13:25:42.092 00:00:10.324 TCP 23.104.0.1:52834 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:22:02.245 00:05:04.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 13:22:02.247 00:05:04.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 13:26:17.717 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 13:26:17.648 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 13:26:27.458 00:00:10.452 TCP 1.101.0.1:3000 -> 22.102.0.1:46390 10 6452 1 2025-11-22 13:26:42.455 00:00:10.361 TCP 23.104.0.1:59776 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:27:27.945 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:42916 10 6452 1 2025-11-22 13:27:42.859 00:00:10.375 TCP 23.104.0.1:47136 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:28:28.142 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35296 10 6452 1 2025-11-22 13:28:43.277 00:00:10.373 TCP 23.104.0.1:50082 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:29:28.365 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40062 10 6452 1 2025-11-22 13:29:43.692 00:00:10.369 TCP 23.104.0.1:35802 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:30:28.592 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54150 10 6452 1 2025-11-22 13:30:44.104 00:00:10.323 TCP 23.104.0.1:41034 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:31:17.547 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 13:31:17.782 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 13:31:28.812 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39988 10 6452 1 2025-11-22 13:31:44.467 00:00:10.362 TCP 23.104.0.1:43830 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:28:02.247 00:05:04.096 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 13:28:02.250 00:05:04.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 13:32:29.030 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51016 10 6452 1 2025-11-22 13:32:44.877 00:00:10.401 TCP 23.104.0.1:43044 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:33:29.250 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38062 10 6452 1 2025-11-22 13:33:45.319 00:00:10.364 TCP 23.104.0.1:53446 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:34:29.468 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60168 12 6556 1 2025-11-22 13:34:45.725 00:00:10.371 TCP 23.104.0.1:60360 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:35:29.697 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58870 10 6452 1 2025-11-22 13:35:46.130 00:00:10.322 TCP 23.104.0.1:48850 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:36:17.661 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 13:36:17.642 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 13:36:29.919 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60602 10 6452 1 2025-11-22 13:36:46.492 00:00:10.367 TCP 23.104.0.1:49556 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:37:30.135 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:43366 10 6452 1 2025-11-22 13:37:46.900 00:00:10.340 TCP 23.104.0.1:37398 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:34:02.251 00:05:04.090 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 13:34:02.249 00:05:04.095 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 13:38:30.310 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32954 10 6452 1 2025-11-22 13:38:47.276 00:00:10.322 TCP 23.104.0.1:40916 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:39:30.532 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56972 10 6452 1 2025-11-22 13:39:47.639 00:00:10.406 TCP 23.104.0.1:41142 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:40:30.751 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52912 10 6452 1 2025-11-22 13:40:48.061 00:00:10.365 TCP 23.104.0.1:54108 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:41:17.600 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 13:41:17.518 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 13:41:30.970 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:37502 10 6452 1 2025-11-22 13:41:48.465 00:00:10.372 TCP 23.104.0.1:41450 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:42:31.211 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42762 10 6452 1 2025-11-22 13:42:48.877 00:00:10.363 TCP 23.104.0.1:34440 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:43:31.430 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53082 10 6452 1 2025-11-22 13:43:49.279 00:00:10.364 TCP 23.104.0.1:39542 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:40:02.249 00:05:04.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 13:40:02.253 00:05:04.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 13:44:31.644 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:35486 12 10375 1 2025-11-22 13:44:49.680 00:00:10.454 TCP 23.104.0.1:55910 -> 1.101.0.1:3000 15 1926 1 2025-11-22 13:45:31.849 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45728 10 6452 1 2025-11-22 13:45:50.173 00:00:10.364 TCP 23.104.0.1:57416 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:46:18.248 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 13:46:18.059 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 13:46:32.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48876 10 6452 1 2025-11-22 13:46:50.577 00:00:19.414 TCP 23.104.0.1:40950 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:47:32.296 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50922 10 6452 1 2025-11-22 13:48:00.052 00:00:10.365 TCP 23.104.0.1:56988 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:48:32.471 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49370 10 6452 1 2025-11-22 13:49:00.453 00:00:10.362 TCP 23.104.0.1:60972 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:49:32.696 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59300 10 6452 1 2025-11-22 13:46:02.250 00:05:04.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 13:46:02.254 00:05:04.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 13:50:00.862 00:00:10.366 TCP 23.104.0.1:41720 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:50:32.924 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:48396 10 6452 1 2025-11-22 13:51:01.261 00:00:10.327 TCP 23.104.0.1:45108 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:51:18.210 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 13:51:18.279 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 13:51:33.170 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51018 10 6452 1 2025-11-22 13:52:01.628 00:00:10.321 TCP 23.104.0.1:33354 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:52:33.393 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36264 10 6452 1 2025-11-22 13:53:01.992 00:00:10.363 TCP 23.104.0.1:40242 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:53:33.600 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36072 10 6452 1 2025-11-22 13:54:02.395 00:00:14.054 TCP 23.104.0.1:54936 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:54:33.815 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56952 10 6452 1 2025-11-22 13:55:06.500 00:00:10.365 TCP 23.104.0.1:50194 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:55:33.984 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:38990 10 6452 1 2025-11-22 13:52:02.254 00:05:04.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 13:52:02.252 00:05:04.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 13:56:17.998 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 13:56:17.955 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 13:56:06.909 00:00:10.327 TCP 23.104.0.1:35734 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:56:34.214 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41846 10 6452 1 2025-11-22 13:57:07.272 00:00:10.368 TCP 23.104.0.1:40532 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:57:34.435 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50388 10 6452 1 2025-11-22 13:58:07.686 00:00:10.326 TCP 23.104.0.1:57604 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:58:34.660 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:44758 10 6452 1 Summary: total flows: 163, total bytes: 505623, total packets: 1575, avg bps: 1110, avg pps: 0, avg bpp: 321 Time window: 2025-11-22 12:58:02 - 2025-11-22 13:58:44 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0034s User: 0.0017s Wall: 0.0020s flows/second: 82909.5 Runtime: 0.0020s