Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 19:59:19.414 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57198 10 6452 1 2025-11-22 19:59:41.671 00:00:10.319 TCP 23.104.0.1:35454 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:00:19.622 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45108 10 6452 1 2025-11-22 20:00:42.033 00:00:10.363 TCP 23.104.0.1:41820 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:01:25.058 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 20:01:25.588 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:01:19.838 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34252 10 6452 1 2025-11-22 20:01:42.439 00:00:10.325 TCP 23.104.0.1:34580 -> 1.101.0.1:3000 11 1507 1 2025-11-22 19:58:02.361 00:05:04.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 19:58:02.359 00:05:04.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 20:02:20.080 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49504 10 6452 1 2025-11-22 20:02:42.803 00:00:10.374 TCP 23.104.0.1:37134 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:03:20.298 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49026 10 6452 1 2025-11-22 20:03:43.243 00:00:10.368 TCP 23.104.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:04:20.509 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44724 10 6452 1 2025-11-22 20:04:43.651 00:00:10.372 TCP 23.104.0.1:47834 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:05:20.720 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43750 10 6452 1 2025-11-22 20:05:44.094 00:00:10.324 TCP 23.104.0.1:48774 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:06:25.606 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 20:06:25.229 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:06:20.932 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60004 10 6452 1 2025-11-22 20:06:44.459 00:00:10.321 TCP 23.104.0.1:37052 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:07:21.164 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56138 10 6452 1 2025-11-22 20:07:44.824 00:00:10.348 TCP 23.104.0.1:53198 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:04:02.359 00:05:04.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 20:04:02.361 00:05:04.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 20:08:21.382 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55564 10 6452 1 2025-11-22 20:08:45.217 00:00:10.318 TCP 23.104.0.1:54212 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:09:21.558 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53882 10 6452 1 2025-11-22 20:09:45.574 00:00:10.359 TCP 23.104.0.1:35664 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:10:21.766 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60132 10 6452 1 2025-11-22 20:10:45.976 00:00:10.371 TCP 23.104.0.1:56370 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:11:26.008 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:11:25.814 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 20:11:21.982 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:54266 10 6452 1 2025-11-22 20:11:46.379 00:00:10.362 TCP 23.104.0.1:53434 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:12:22.184 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:32952 11 6504 1 2025-11-22 20:12:46.779 00:00:10.373 TCP 23.104.0.1:40736 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:13:22.472 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58872 10 6452 1 2025-11-22 20:13:47.178 00:00:10.365 TCP 23.104.0.1:60410 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:10:02.360 00:05:04.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 20:10:02.363 00:05:04.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 20:14:22.691 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57648 10 6452 1 2025-11-22 20:14:47.586 00:00:10.375 TCP 23.104.0.1:52408 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:15:22.914 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:49040 10 6452 1 2025-11-22 20:15:48.002 00:00:10.327 TCP 23.104.0.1:59762 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:16:25.612 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:16:25.566 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 20:16:23.105 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55392 10 6452 1 2025-11-22 20:16:48.367 00:00:10.364 TCP 23.104.0.1:58552 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:17:23.317 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42484 10 6452 1 2025-11-22 20:17:48.765 00:00:10.495 TCP 23.104.0.1:56022 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:18:23.540 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49858 10 6452 1 2025-11-22 20:18:49.295 00:00:10.364 TCP 23.104.0.1:34926 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:19:23.747 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58196 10 6452 1 2025-11-22 20:19:49.695 00:00:10.334 TCP 23.104.0.1:60516 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:16:02.361 00:05:04.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 20:16:02.364 00:05:04.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 20:20:23.960 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:59922 10 6452 1 2025-11-22 20:20:50.060 00:00:10.362 TCP 23.104.0.1:50542 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:21:25.871 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:21:25.913 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 20:21:24.153 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52216 10 6452 1 2025-11-22 20:21:50.468 00:00:10.317 TCP 23.104.0.1:54588 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:22:24.361 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47918 10 6452 1 2025-11-22 20:22:50.831 00:00:10.398 TCP 23.104.0.1:46694 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:23:24.572 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60470 10 6452 1 2025-11-22 20:23:51.266 00:00:10.366 TCP 23.104.0.1:51862 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:24:24.806 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57144 10 6452 1 2025-11-22 20:24:51.669 00:00:10.327 TCP 23.104.0.1:48414 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:25:25.032 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45738 10 6452 1 2025-11-22 20:22:02.362 00:05:04.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 20:25:52.032 00:00:10.328 TCP 23.104.0.1:42478 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:22:02.364 00:05:04.121 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 20:26:25.887 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:26:25.630 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 20:26:25.252 00:00:17.411 TCP 1.101.0.1:3000 -> 22.102.0.1:35002 10 6452 1 2025-11-22 20:26:52.403 00:00:10.366 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:27:32.710 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48142 10 6452 1 2025-11-22 20:27:52.807 00:00:10.368 TCP 23.104.0.1:60614 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:28:32.930 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:52628 10 6452 1 2025-11-22 20:28:53.217 00:00:10.364 TCP 23.104.0.1:52150 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:29:33.123 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47020 10 6452 1 2025-11-22 20:29:53.622 00:00:10.367 TCP 23.104.0.1:35222 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:30:33.333 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40122 10 6452 1 2025-11-22 20:30:54.030 00:00:10.360 TCP 23.104.0.1:46542 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:31:26.024 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 20:31:25.743 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:31:33.552 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48574 10 6452 1 2025-11-22 20:28:02.366 00:05:04.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 20:31:54.429 00:00:10.364 TCP 23.104.0.1:42636 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:28:02.363 00:05:04.126 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 20:32:33.780 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:52526 10 6452 1 2025-11-22 20:32:54.832 00:00:10.387 TCP 23.104.0.1:50284 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:33:34.029 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49496 10 6452 1 2025-11-22 20:33:55.259 00:00:10.361 TCP 23.104.0.1:36474 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:34:34.253 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54524 10 6452 1 2025-11-22 20:34:55.657 00:00:10.373 TCP 23.104.0.1:45990 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:35:34.478 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50350 10 6452 1 2025-11-22 20:35:56.117 00:00:10.361 TCP 23.104.0.1:44290 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:36:25.803 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:36:26.022 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 20:36:34.698 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50360 10 6452 1 2025-11-22 20:36:56.524 00:00:10.364 TCP 23.104.0.1:44792 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:37:34.920 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52406 10 6452 1 2025-11-22 20:34:02.366 00:05:04.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 20:34:02.363 00:05:04.135 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 20:37:56.926 00:00:10.389 TCP 23.104.0.1:45582 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:38:35.133 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53158 10 6452 1 2025-11-22 20:38:57.356 00:00:10.364 TCP 23.104.0.1:43388 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:39:35.346 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57186 10 6452 1 2025-11-22 20:39:57.765 00:00:10.378 TCP 23.104.0.1:36046 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:40:35.555 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36386 12 6556 1 2025-11-22 20:40:58.184 00:00:10.370 TCP 23.104.0.1:41284 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:41:26.075 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:41:26.167 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 20:41:35.775 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:56254 10 6452 1 2025-11-22 20:41:58.585 00:00:10.364 TCP 23.104.0.1:51752 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:42:36.067 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36760 10 6452 1 2025-11-22 20:42:58.987 00:00:10.376 TCP 23.104.0.1:58656 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:43:36.285 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47038 10 6452 1 2025-11-22 20:40:02.366 00:05:04.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 20:43:59.398 00:00:10.357 TCP 23.104.0.1:57368 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:40:02.369 00:05:04.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 20:44:36.503 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50448 10 6452 1 2025-11-22 20:44:59.797 00:00:12.565 TCP 23.104.0.1:38708 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:45:36.719 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57436 10 6452 1 2025-11-22 20:46:02.419 00:00:10.373 TCP 23.104.0.1:53580 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:46:26.270 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:46:25.988 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 20:46:36.929 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:43146 10 6452 1 2025-11-22 20:47:02.832 00:00:10.385 TCP 23.104.0.1:52520 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:47:37.125 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38946 10 6452 1 2025-11-22 20:48:03.262 00:00:10.363 TCP 23.104.0.1:40484 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:48:37.338 00:00:10.433 TCP 1.101.0.1:3000 -> 22.102.0.1:48124 10 6452 1 2025-11-22 20:49:03.663 00:00:10.320 TCP 23.104.0.1:47126 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:49:37.810 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35094 10 6452 1 2025-11-22 20:46:02.371 00:05:04.126 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 20:46:02.368 00:05:04.132 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 20:50:04.023 00:00:10.361 TCP 23.104.0.1:39552 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:50:38.035 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33898 10 6452 1 2025-11-22 20:51:04.421 00:00:10.368 TCP 23.104.0.1:60550 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:51:26.345 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:51:26.193 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 20:51:38.255 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44562 10 6452 1 2025-11-22 20:52:04.829 00:00:10.389 TCP 23.104.0.1:60984 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:52:38.471 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42882 10 6452 1 2025-11-22 20:53:05.257 00:00:10.325 TCP 23.104.0.1:53558 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:53:38.691 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34894 10 6452 1 2025-11-22 20:54:05.617 00:00:10.360 TCP 23.104.0.1:33160 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:54:38.897 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:55008 10 6452 1 2025-11-22 20:55:06.021 00:00:10.369 TCP 23.104.0.1:40728 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:55:39.088 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60858 10 6452 1 2025-11-22 20:52:02.373 00:05:04.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 20:52:02.377 00:05:04.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 20:56:06.433 00:00:10.372 TCP 23.104.0.1:59302 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:56:26.649 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 20:56:26.574 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 20:56:39.295 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52386 10 6452 1 2025-11-22 20:57:06.846 00:00:10.383 TCP 23.104.0.1:56120 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:57:39.476 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36302 10 6452 1 2025-11-22 20:58:07.270 00:00:10.358 TCP 23.104.0.1:49686 -> 1.101.0.1:3000 11 1507 1 2025-11-22 20:58:39.662 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34426 10 6452 1 Summary: total flows: 163, total bytes: 496997, total packets: 1564, avg bps: 1090, avg pps: 0, avg bpp: 317 Time window: 2025-11-22 19:58:02 - 2025-11-22 20:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0009s Wall: 0.0019s flows/second: 84980.9 Runtime: 0.0019s