Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 20:59:18.119 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53872 10 6452 1 2025-11-24 20:59:24.533 00:00:10.366 TCP 23.104.0.1:59008 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:00:18.292 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57400 10 6452 1 2025-11-24 21:00:24.939 00:00:10.379 TCP 23.104.0.1:46578 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:01:18.512 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59636 12 10375 1 2025-11-24 21:01:25.357 00:00:10.445 TCP 23.104.0.1:53224 -> 1.101.0.1:3000 15 1926 1 2025-11-24 20:57:07.541 00:05:55.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 20:57:07.538 00:05:55.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 21:02:24.461 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 21:02:24.243 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 21:02:18.746 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52344 10 6452 1 2025-11-24 21:02:25.838 00:00:10.388 TCP 23.104.0.1:50482 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:03:18.970 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37248 10 6452 1 2025-11-24 21:03:26.264 00:00:10.364 TCP 23.104.0.1:49290 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:04:19.206 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54220 10 6452 1 2025-11-24 21:04:26.670 00:00:10.371 TCP 23.104.0.1:37174 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:05:19.424 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54012 10 6452 1 2025-11-24 21:05:27.106 00:00:10.367 TCP 23.104.0.1:48566 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:06:19.646 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50690 10 6452 1 2025-11-24 21:06:27.515 00:00:10.327 TCP 23.104.0.1:59656 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:07:24.555 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 21:07:24.370 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 21:07:19.862 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48566 10 6452 1 2025-11-24 21:07:27.884 00:00:10.333 TCP 23.104.0.1:43654 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:03:07.542 00:05:55.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 21:03:07.540 00:05:55.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 21:08:20.055 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40494 10 6452 1 2025-11-24 21:08:28.256 00:00:10.364 TCP 23.104.0.1:50152 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:09:20.263 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50720 10 6452 1 2025-11-24 21:09:28.659 00:00:10.364 TCP 23.104.0.1:38370 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:10:20.473 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38660 10 6452 1 2025-11-24 21:10:29.095 00:00:10.362 TCP 23.104.0.1:41710 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:11:20.680 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:43824 12 10375 1 2025-11-24 21:11:29.491 00:00:10.441 TCP 23.104.0.1:39012 -> 1.101.0.1:3000 15 1926 1 2025-11-24 21:12:24.632 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 21:12:24.625 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 21:12:20.923 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:41796 10 6452 1 2025-11-24 21:12:29.970 00:00:10.367 TCP 23.104.0.1:54626 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:13:21.179 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45880 10 6452 1 2025-11-24 21:13:30.377 00:00:10.331 TCP 23.104.0.1:56690 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:09:07.543 00:05:55.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 21:09:07.546 00:05:55.776 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 21:14:21.401 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40488 10 6452 1 2025-11-24 21:14:30.746 00:00:10.365 TCP 23.104.0.1:52542 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:15:21.581 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40928 10 6452 1 2025-11-24 21:15:31.150 00:00:10.365 TCP 23.104.0.1:44650 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:16:21.796 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36388 10 6452 1 2025-11-24 21:16:31.558 00:00:10.367 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:17:24.563 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 21:17:24.747 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 21:17:22.024 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42918 10 6452 1 2025-11-24 21:17:31.958 00:00:10.372 TCP 23.104.0.1:44602 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:18:22.235 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57018 10 6452 1 2025-11-24 21:18:32.366 00:00:10.365 TCP 23.104.0.1:53882 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:19:22.447 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39996 10 6452 1 2025-11-24 21:19:32.767 00:00:10.378 TCP 23.104.0.1:37592 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:15:07.549 00:05:55.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 21:15:07.548 00:05:55.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 21:20:22.626 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55850 10 6452 1 2025-11-24 21:20:33.184 00:00:10.363 TCP 23.104.0.1:60372 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:21:22.834 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41830 10 6452 1 2025-11-24 21:21:33.582 00:00:13.675 TCP 23.104.0.1:42880 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:22:24.798 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 21:22:24.766 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 21:22:23.073 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:32996 10 6452 1 2025-11-24 21:22:37.298 00:00:10.372 TCP 23.104.0.1:49732 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:23:23.307 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39816 10 6452 1 2025-11-24 21:23:37.706 00:00:10.367 TCP 23.104.0.1:44892 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:24:23.520 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46114 10 6452 1 2025-11-24 21:24:38.111 00:00:10.365 TCP 23.104.0.1:36428 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:25:23.741 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57028 10 6452 1 2025-11-24 21:25:38.510 00:00:10.367 TCP 23.104.0.1:53334 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:21:07.552 00:05:55.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 21:21:07.548 00:05:55.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 21:26:23.955 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52712 10 6452 1 2025-11-24 21:26:38.913 00:00:10.336 TCP 23.104.0.1:43698 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:27:25.022 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 21:27:25.020 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 21:27:24.175 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34342 10 6452 1 2025-11-24 21:27:39.296 00:00:10.364 TCP 23.104.0.1:48086 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:28:24.384 00:00:10.635 TCP 1.101.0.1:3000 -> 22.102.0.1:49328 10 6452 1 2025-11-24 21:28:39.695 00:00:10.361 TCP 23.104.0.1:38784 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:29:25.082 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35868 10 6452 1 2025-11-24 21:29:40.102 00:00:10.365 TCP 23.104.0.1:38056 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:30:25.296 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58318 10 6452 1 2025-11-24 21:30:40.501 00:00:10.366 TCP 23.104.0.1:55984 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:31:25.525 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 10 6452 1 2025-11-24 21:31:40.904 00:00:10.327 TCP 23.104.0.1:46354 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:27:07.548 00:05:55.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 21:27:07.552 00:05:55.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 21:32:25.032 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 21:32:25.026 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 21:32:25.740 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32834 10 6452 1 2025-11-24 21:32:41.272 00:00:16.907 TCP 23.104.0.1:52164 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:33:25.962 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:51522 12 6556 1 2025-11-24 21:33:48.243 00:00:10.325 TCP 23.104.0.1:46632 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:34:26.198 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54198 10 6452 1 2025-11-24 21:34:48.604 00:00:10.368 TCP 23.104.0.1:57276 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:35:26.370 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60988 10 6452 1 2025-11-24 21:35:49.011 00:00:11.032 TCP 23.104.0.1:42152 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:36:26.579 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58796 11 6492 1 2025-11-24 21:36:50.113 00:00:10.324 TCP 23.104.0.1:53846 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:37:25.239 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 21:37:25.060 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 21:37:26.797 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44678 10 6452 1 2025-11-24 21:37:50.478 00:00:10.369 TCP 23.104.0.1:60578 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:33:07.559 00:05:55.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 21:33:07.562 00:05:55.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 21:38:27.036 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60680 10 6452 1 2025-11-24 21:38:50.885 00:00:10.378 TCP 23.104.0.1:49356 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:39:27.258 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37092 10 6452 1 2025-11-24 21:39:51.298 00:00:10.363 TCP 23.104.0.1:33960 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:40:27.468 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43064 10 6452 1 2025-11-24 21:40:51.697 00:00:10.451 TCP 23.104.0.1:36158 -> 1.101.0.1:3000 15 1926 1 2025-11-24 21:41:27.647 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35230 12 10369 1 2025-11-24 21:41:52.195 00:00:10.320 TCP 23.104.0.1:42540 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:42:25.152 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 21:42:25.207 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 21:42:27.887 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36980 10 6452 1 2025-11-24 21:42:52.556 00:00:10.325 TCP 23.104.0.1:41776 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:43:28.080 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41050 10 6452 1 2025-11-24 21:39:07.562 00:05:55.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 21:39:07.561 00:05:55.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 21:43:52.920 00:00:10.367 TCP 23.104.0.1:39874 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:44:28.293 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37996 10 6452 1 2025-11-24 21:44:53.320 00:00:10.360 TCP 23.104.0.1:54142 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:45:28.502 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46816 10 6452 1 2025-11-24 21:45:53.724 00:00:10.334 TCP 23.104.0.1:33202 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:46:28.712 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49700 10 6452 1 2025-11-24 21:46:54.103 00:00:10.365 TCP 23.104.0.1:50150 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:47:25.548 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 21:47:25.403 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 21:47:28.925 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37978 10 6452 1 2025-11-24 21:47:54.510 00:00:10.363 TCP 23.104.0.1:47580 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:48:29.149 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59078 10 6452 1 2025-11-24 21:48:54.908 00:00:10.367 TCP 23.104.0.1:58280 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:49:29.362 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44242 10 6452 1 2025-11-24 21:45:07.564 00:05:55.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 21:45:07.561 00:05:55.770 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 21:49:55.314 00:00:16.044 TCP 23.104.0.1:42118 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:50:29.575 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55750 10 6452 1 2025-11-24 21:51:01.400 00:00:10.383 TCP 23.104.0.1:34678 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:51:29.787 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48672 10 6452 1 2025-11-24 21:52:01.815 00:00:10.367 TCP 23.104.0.1:59686 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:52:25.439 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 21:52:25.452 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 21:52:29.952 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37672 10 6452 1 2025-11-24 21:53:02.220 00:00:10.362 TCP 23.104.0.1:51494 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:53:30.133 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57574 10 6452 1 2025-11-24 21:54:02.626 00:00:10.326 TCP 23.104.0.1:59590 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:54:30.298 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35914 10 6452 1 2025-11-24 21:55:02.989 00:00:10.370 TCP 23.104.0.1:53536 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:55:30.471 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:50400 10 6452 1 2025-11-24 21:51:07.562 00:05:55.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 21:51:07.564 00:05:55.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 21:56:03.396 00:00:10.321 TCP 23.104.0.1:35820 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:56:30.730 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48762 10 6452 1 2025-11-24 21:57:03.760 00:00:10.391 TCP 23.104.0.1:52960 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:57:25.690 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 21:57:25.590 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 21:57:30.948 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40022 10 6452 1 2025-11-24 21:58:04.190 00:00:10.365 TCP 23.104.0.1:33932 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:58:31.180 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34754 10 6452 1 Summary: total flows: 163, total bytes: 510005, total packets: 1582, avg bps: 1104, avg pps: 0, avg bpp: 322 Time window: 2025-11-24 20:57:07 - 2025-11-24 21:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0029s Wall: 0.0018s flows/second: 88973.4 Runtime: 0.0019s