Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 14:58:47.794 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60236 10 6661 1 2025-11-22 14:59:38.722 00:00:10.374 TCP 23.104.0.1:43574 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:59:48.008 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33370 10 6661 1 2025-11-22 15:00:39.141 00:00:10.370 TCP 23.104.0.1:53132 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:00:48.219 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58386 10 6661 1 2025-11-22 15:01:19.425 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 15:01:19.437 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 15:01:39.554 00:00:10.365 TCP 23.104.0.1:37858 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:01:48.428 00:00:10.950 TCP 1.101.0.1:3000 -> 22.102.0.1:45804 10 6661 1 2025-11-22 14:58:02.277 00:05:04.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 14:58:02.275 00:05:04.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 15:02:39.961 00:00:10.374 TCP 23.104.0.1:59280 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:02:49.421 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47288 10 6661 1 2025-11-22 15:03:40.374 00:00:10.367 TCP 23.104.0.1:54910 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:03:49.651 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59762 10 6661 1 2025-11-22 15:04:40.774 00:00:10.326 TCP 23.104.0.1:47534 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:04:49.866 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47170 10 6661 1 2025-11-22 15:05:41.141 00:00:10.364 TCP 23.104.0.1:42516 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:05:50.092 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54924 10 6661 1 2025-11-22 15:06:19.633 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 15:06:19.380 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 15:06:41.539 00:00:10.323 TCP 23.104.0.1:48472 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:06:50.307 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48078 10 6661 1 2025-11-22 15:07:41.899 00:00:10.370 TCP 23.104.0.1:39224 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:07:50.528 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44068 10 6661 1 2025-11-22 15:04:02.276 00:05:04.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 15:04:02.274 00:05:04.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 15:08:42.325 00:00:10.363 TCP 23.104.0.1:34894 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:08:50.749 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44034 10 6661 1 2025-11-22 15:09:42.729 00:00:10.322 TCP 23.104.0.1:51336 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:09:50.962 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45784 10 6661 1 2025-11-22 15:10:43.104 00:00:10.322 TCP 23.104.0.1:32778 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:10:51.190 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41636 10 6661 1 2025-11-22 15:11:19.581 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 15:11:19.817 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 15:11:43.464 00:00:10.362 TCP 23.104.0.1:60128 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:11:51.418 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41354 10 6661 1 2025-11-22 15:12:43.867 00:00:10.376 TCP 23.104.0.1:53560 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:12:51.600 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53292 10 6661 1 2025-11-22 15:13:44.281 00:00:10.364 TCP 23.104.0.1:42366 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:13:51.821 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:58502 10 6661 1 2025-11-22 15:10:02.279 00:05:04.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 15:10:02.276 00:05:04.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 15:14:44.685 00:00:10.333 TCP 23.104.0.1:58400 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:14:52.091 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42110 10 6661 1 2025-11-22 15:15:45.053 00:00:10.360 TCP 23.104.0.1:51826 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:15:52.308 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53756 10 6661 1 2025-11-22 15:16:19.714 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 15:16:19.464 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 15:16:45.450 00:00:10.366 TCP 23.104.0.1:53850 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:16:52.526 00:00:21.741 TCP 1.101.0.1:3000 -> 22.102.0.1:57136 10 6661 1 2025-11-22 15:17:45.852 00:00:10.379 TCP 23.104.0.1:37114 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:18:04.326 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52502 10 6661 1 2025-11-22 15:18:46.270 00:00:10.364 TCP 23.104.0.1:40750 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:19:04.537 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57508 10 6661 1 2025-11-22 15:19:46.677 00:00:10.381 TCP 23.104.0.1:52352 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:16:02.276 00:05:04.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 15:16:02.279 00:05:04.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 15:20:04.758 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57298 10 6661 1 2025-11-22 15:20:47.105 00:00:10.414 TCP 23.104.0.1:45716 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:21:04.981 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:55978 10 6661 1 2025-11-22 15:21:19.822 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 15:21:19.750 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 15:21:47.557 00:00:10.361 TCP 23.104.0.1:36294 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:22:05.223 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 10 6661 1 2025-11-22 15:22:47.956 00:00:10.365 TCP 23.104.0.1:35550 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:23:05.448 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43808 10 6661 1 2025-11-22 15:23:48.361 00:00:10.423 TCP 23.104.0.1:39646 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:24:05.673 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56290 10 6661 1 2025-11-22 15:24:48.820 00:00:10.329 TCP 23.104.0.1:51600 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:25:05.894 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60356 10 6661 1 2025-11-22 15:25:49.195 00:00:10.330 TCP 23.104.0.1:36022 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:22:02.282 00:05:04.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 15:22:02.280 00:05:04.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 15:26:06.115 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47150 10 6661 1 2025-11-22 15:26:19.796 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 15:26:19.966 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 15:26:49.559 00:00:10.366 TCP 23.104.0.1:33858 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:27:06.330 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40428 10 6661 1 2025-11-22 15:27:49.968 00:00:10.424 TCP 23.104.0.1:57680 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:28:06.543 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47494 10 6661 1 2025-11-22 15:28:50.433 00:00:10.368 TCP 23.104.0.1:47816 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:29:06.710 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45136 10 6661 1 2025-11-22 15:29:50.846 00:00:10.380 TCP 23.104.0.1:44952 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:30:06.931 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34168 10 6661 1 2025-11-22 15:30:51.264 00:00:10.434 TCP 23.104.0.1:53046 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:31:19.823 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 15:31:07.159 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46078 10 6661 1 2025-11-22 15:31:19.924 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 15:28:02.283 00:05:04.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 15:31:51.715 00:00:10.376 TCP 23.104.0.1:51692 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:28:02.282 00:05:04.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 15:32:07.379 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46780 10 6661 1 2025-11-22 15:32:52.131 00:00:10.365 TCP 23.104.0.1:34146 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:33:07.595 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51298 10 6661 1 2025-11-22 15:33:52.540 00:00:10.326 TCP 23.104.0.1:46030 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:34:07.805 00:00:10.706 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 12 10584 1 2025-11-22 15:34:52.905 00:00:10.451 TCP 23.104.0.1:36992 -> 1.101.0.1:3000 15 1926 1 2025-11-22 15:35:08.557 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57588 10 6661 1 2025-11-22 15:35:53.390 00:00:10.367 TCP 23.104.0.1:43712 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:36:19.886 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 15:36:08.766 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51258 10 6661 1 2025-11-22 15:36:20.129 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 15:36:53.798 00:00:10.366 TCP 23.104.0.1:38532 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:37:08.984 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:51206 10 6661 1 2025-11-22 15:34:02.282 00:05:04.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 15:34:02.284 00:05:04.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 15:37:54.205 00:00:10.322 TCP 23.104.0.1:45958 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:38:09.222 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54750 10 6661 1 2025-11-22 15:38:54.572 00:00:10.321 TCP 23.104.0.1:49030 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:39:09.402 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46770 10 6661 1 2025-11-22 15:39:54.937 00:00:10.385 TCP 23.104.0.1:43382 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:40:09.625 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55254 10 6661 1 2025-11-22 15:40:55.364 00:00:10.369 TCP 23.104.0.1:48860 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:41:20.305 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 15:41:09.871 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:55286 10 6661 1 2025-11-22 15:41:20.040 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 15:41:55.775 00:00:10.322 TCP 23.104.0.1:58342 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:42:10.163 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35982 10 6661 1 2025-11-22 15:42:56.132 00:00:10.367 TCP 23.104.0.1:40434 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:43:10.381 00:00:14.538 TCP 1.101.0.1:3000 -> 22.102.0.1:50184 10 6661 1 2025-11-22 15:43:56.541 00:00:10.364 TCP 23.104.0.1:48980 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:40:02.285 00:05:04.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 15:40:02.284 00:05:04.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 15:44:14.974 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:42144 10 6661 1 2025-11-22 15:44:56.943 00:00:10.367 TCP 23.104.0.1:55948 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:45:15.212 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59376 10 6661 1 2025-11-22 15:45:57.351 00:00:10.367 TCP 23.104.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:46:20.155 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 15:46:20.387 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 15:46:15.380 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49358 10 6661 1 2025-11-22 15:46:57.757 00:00:10.344 TCP 23.104.0.1:39882 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:47:15.548 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46104 10 6661 1 2025-11-22 15:47:58.159 00:00:10.364 TCP 23.104.0.1:38946 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:48:15.769 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46904 10 6661 1 2025-11-22 15:48:58.558 00:00:10.326 TCP 23.104.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:49:15.942 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:56310 10 6661 1 2025-11-22 15:46:02.288 00:05:04.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 15:46:02.284 00:05:04.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 15:49:58.923 00:00:10.407 TCP 23.104.0.1:51144 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:50:16.193 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53710 10 6661 1 2025-11-22 15:50:59.378 00:00:10.364 TCP 23.104.0.1:55888 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:51:20.141 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 15:51:20.380 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 15:51:16.413 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39644 10 6661 1 2025-11-22 15:51:59.782 00:00:10.366 TCP 23.104.0.1:51962 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:52:16.632 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44482 10 6661 1 2025-11-22 15:53:00.187 00:00:10.321 TCP 23.104.0.1:59988 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:53:16.846 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45088 10 6661 1 2025-11-22 15:54:00.545 00:00:10.361 TCP 23.104.0.1:37268 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:54:17.072 00:00:10.757 TCP 1.101.0.1:3000 -> 22.102.0.1:50708 10 6661 1 2025-11-22 15:55:00.954 00:00:10.371 TCP 23.104.0.1:34272 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:55:17.868 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59208 10 6661 1 2025-11-22 15:56:01.363 00:00:10.368 TCP 23.104.0.1:51628 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:52:02.291 00:05:04.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 15:52:02.287 00:05:04.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 15:56:20.430 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 15:56:20.376 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 15:56:18.112 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47698 10 6661 1 2025-11-22 15:57:01.768 00:00:10.375 TCP 23.104.0.1:34142 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:57:18.322 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46836 10 6661 1 2025-11-22 15:58:02.181 00:00:10.367 TCP 23.104.0.1:39912 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:58:18.543 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51630 10 6661 1 Summary: total flows: 163, total bytes: 513723, total packets: 1567, avg bps: 1133, avg pps: 0, avg bpp: 327 Time window: 2025-11-22 14:58:02 - 2025-11-22 15:58:28 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0018s Wall: 0.0027s flows/second: 59553.3 Runtime: 0.0028s