Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 20:58:56.788 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38858 10 6452 1 2025-11-27 20:59:37.103 00:00:10.369 TCP 23.104.0.1:53390 -> 1.101.0.1:3000 11 1507 1 2025-11-27 20:56:04.649 00:05:04.537 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 20:59:57.001 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43058 10 6452 1 2025-11-27 20:56:04.645 00:05:04.542 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 21:00:37.507 00:00:10.363 TCP 23.104.0.1:51416 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:00:57.181 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58962 10 6452 1 2025-11-27 21:01:37.910 00:00:10.367 TCP 23.104.0.1:60254 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:01:57.394 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44662 10 6452 1 2025-11-27 21:02:38.316 00:00:10.365 TCP 23.104.0.1:60256 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:02:57.611 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45320 10 6452 1 2025-11-27 21:03:50.983 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 21:03:38.719 00:00:10.321 TCP 23.104.0.1:37838 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:03:51.129 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 21:03:57.828 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39342 10 6452 1 2025-11-27 21:04:39.099 00:00:10.370 TCP 23.104.0.1:58906 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:04:58.078 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53268 10 6452 1 2025-11-27 21:05:39.511 00:00:10.366 TCP 23.104.0.1:45990 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:05:58.251 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57042 10 6452 1 2025-11-27 21:02:04.647 00:05:04.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 21:02:04.648 00:05:04.537 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 21:06:39.914 00:00:10.362 TCP 23.104.0.1:46640 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:06:58.469 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39980 10 6452 1 2025-11-27 21:07:40.309 00:00:10.364 TCP 23.104.0.1:33206 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:07:58.698 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37088 10 6452 1 2025-11-27 21:08:51.214 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 21:08:40.715 00:00:10.373 TCP 23.104.0.1:44826 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:08:51.360 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 21:08:58.912 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55170 10 6452 1 2025-11-27 21:09:41.132 00:00:10.369 TCP 23.104.0.1:58978 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:09:59.126 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34442 10 6452 1 2025-11-27 21:10:41.539 00:00:10.374 TCP 23.104.0.1:44286 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:10:59.335 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58680 10 6452 1 2025-11-27 21:11:41.954 00:00:10.364 TCP 23.104.0.1:42490 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:11:59.545 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36230 10 6452 1 2025-11-27 21:08:04.650 00:05:04.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 21:08:04.653 00:05:04.537 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 21:12:42.355 00:00:11.103 TCP 23.104.0.1:55916 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:12:59.722 00:00:14.266 TCP 1.101.0.1:3000 -> 22.102.0.1:59560 10 6452 1 2025-11-27 21:13:51.263 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 21:13:50.933 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 21:13:43.491 00:00:10.363 TCP 23.104.0.1:52404 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:14:04.039 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45522 10 6452 1 2025-11-27 21:14:43.892 00:00:10.374 TCP 23.104.0.1:59366 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:15:04.256 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53110 10 6452 1 2025-11-27 21:15:44.308 00:00:10.326 TCP 23.104.0.1:34240 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:16:04.466 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33696 10 6452 1 2025-11-27 21:16:44.680 00:00:10.414 TCP 23.104.0.1:36590 -> 1.101.0.1:3000 15 1926 1 2025-11-27 21:17:04.674 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:34552 12 10584 1 2025-11-27 21:17:45.134 00:00:10.320 TCP 23.104.0.1:33042 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:14:04.652 00:05:04.542 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 21:14:04.655 00:05:04.538 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 21:18:04.879 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57840 10 6661 1 2025-11-27 21:18:51.519 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 21:18:51.466 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 21:18:45.495 00:00:10.369 TCP 23.104.0.1:41402 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:19:05.103 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54540 10 6661 1 2025-11-27 21:19:45.901 00:00:10.372 TCP 23.104.0.1:34896 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:20:05.281 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58356 10 6661 1 2025-11-27 21:20:46.309 00:00:10.366 TCP 23.104.0.1:45582 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:21:05.492 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50194 10 6661 1 2025-11-27 21:21:46.713 00:00:10.461 TCP 23.104.0.1:41410 -> 1.101.0.1:3000 15 1926 1 2025-11-27 21:22:05.709 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:49954 12 10793 1 2025-11-27 21:22:47.206 00:00:10.366 TCP 23.104.0.1:33144 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:23:05.951 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:52184 12 6974 1 2025-11-27 21:23:51.225 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 21:23:51.444 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 21:23:47.612 00:00:10.323 TCP 23.104.0.1:40638 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:20:04.652 00:05:04.544 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 21:20:04.655 00:05:04.539 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 21:24:06.204 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59304 10 6870 1 2025-11-27 21:24:47.977 00:00:10.365 TCP 23.104.0.1:57566 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:25:06.420 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34034 10 6870 1 2025-11-27 21:25:48.383 00:00:10.365 TCP 23.104.0.1:58750 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:26:06.633 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39276 10 6870 1 2025-11-27 21:26:48.788 00:00:10.935 TCP 23.104.0.1:39992 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:27:06.851 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34092 10 6870 1 2025-11-27 21:27:49.760 00:00:10.374 TCP 23.104.0.1:52462 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:28:07.072 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47390 10 6870 1 2025-11-27 21:28:51.618 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 21:28:51.432 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 21:28:50.169 00:00:10.367 TCP 23.104.0.1:35572 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:29:07.287 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35498 10 6870 1 2025-11-27 21:29:50.575 00:00:10.332 TCP 23.104.0.1:49128 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:26:04.659 00:05:04.539 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 21:26:04.658 00:05:04.544 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 21:30:07.498 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43510 10 6870 1 2025-11-27 21:30:50.945 00:00:10.370 TCP 23.104.0.1:40026 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:31:07.667 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47128 10 6870 1 2025-11-27 21:31:51.357 00:00:10.326 TCP 23.104.0.1:51504 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:32:07.881 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47398 10 6870 1 2025-11-27 21:32:51.722 00:00:10.376 TCP 23.104.0.1:55130 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:33:08.097 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39758 12 6974 1 2025-11-27 21:33:52.615 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 21:33:52.476 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 21:33:52.139 00:00:10.369 TCP 23.104.0.1:60684 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:34:08.300 00:00:10.318 TCP 1.101.0.1:3000 -> 22.102.0.1:43780 10 6870 1 2025-11-27 21:34:52.544 00:00:10.320 TCP 23.104.0.1:44658 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:35:08.655 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49428 10 6870 1 2025-11-27 21:32:04.657 00:05:04.544 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 21:35:52.908 00:00:11.109 TCP 23.104.0.1:43878 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:32:04.660 00:05:04.539 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 21:36:08.869 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34920 10 6870 1 2025-11-27 21:36:54.069 00:00:10.321 TCP 23.104.0.1:43584 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:37:09.092 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56724 10 6870 1 2025-11-27 21:37:54.437 00:00:10.480 TCP 23.104.0.1:53784 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:38:09.305 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:50896 10 6870 1 2025-11-27 21:38:51.877 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 21:38:51.612 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 21:38:54.960 00:00:10.358 TCP 23.104.0.1:55912 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:39:09.542 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56388 10 6870 1 2025-11-27 21:39:55.369 00:00:10.360 TCP 23.104.0.1:44610 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:40:09.718 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60690 10 6870 1 2025-11-27 21:40:55.766 00:00:10.332 TCP 23.104.0.1:58484 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:41:09.933 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45694 10 6870 1 2025-11-27 21:41:56.136 00:00:10.366 TCP 23.104.0.1:42694 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:38:04.661 00:05:04.539 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 21:38:04.659 00:05:04.544 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 21:42:10.167 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45824 10 6870 1 2025-11-27 21:42:56.539 00:00:10.370 TCP 23.104.0.1:56988 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:43:10.383 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47770 10 6870 1 2025-11-27 21:43:51.945 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 21:43:51.889 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 21:43:56.948 00:00:10.327 TCP 23.104.0.1:44864 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:44:10.592 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50422 10 6870 1 2025-11-27 21:44:57.313 00:00:10.367 TCP 23.104.0.1:45584 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:45:10.805 00:00:10.816 TCP 1.101.0.1:3000 -> 22.102.0.1:57184 10 6870 1 2025-11-27 21:45:57.720 00:00:10.376 TCP 23.104.0.1:42252 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:46:11.660 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34664 10 6870 1 2025-11-27 21:46:58.129 00:00:10.322 TCP 23.104.0.1:38380 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:47:11.870 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52154 10 6870 1 2025-11-27 21:44:04.661 00:05:04.545 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 21:47:58.491 00:00:10.362 TCP 23.104.0.1:40088 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:44:04.665 00:05:04.540 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 21:48:12.083 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48812 10 6870 1 2025-11-27 21:48:52.088 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 21:48:52.165 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 21:48:58.898 00:00:10.364 TCP 23.104.0.1:41812 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:49:12.295 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58804 10 6870 1 2025-11-27 21:49:59.299 00:00:10.361 TCP 23.104.0.1:56780 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:50:12.517 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40846 10 6870 1 2025-11-27 21:50:59.696 00:00:10.326 TCP 23.104.0.1:59196 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:51:12.684 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52950 10 6870 1 2025-11-27 21:52:00.092 00:00:10.316 TCP 23.104.0.1:42566 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:52:12.892 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59032 10 6870 1 2025-11-27 21:53:00.452 00:00:10.362 TCP 23.104.0.1:37660 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:53:13.110 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42194 10 6870 1 2025-11-27 21:53:52.194 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 21:53:52.351 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 21:54:00.854 00:00:10.375 TCP 23.104.0.1:56278 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:50:04.665 00:05:04.542 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 21:50:04.662 00:05:04.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 21:54:13.328 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55398 10 6870 1 2025-11-27 21:55:01.270 00:00:10.365 TCP 23.104.0.1:32810 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:55:13.504 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47198 10 6870 1 2025-11-27 21:56:01.676 00:00:10.370 TCP 23.104.0.1:33892 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:56:13.720 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51250 10 6870 1 2025-11-27 21:57:02.108 00:00:10.363 TCP 23.104.0.1:40650 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:57:13.893 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45818 10 6870 1 2025-11-27 21:58:02.514 00:00:10.319 TCP 23.104.0.1:59062 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:58:14.112 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60228 10 6870 1 Summary: total flows: 161, total bytes: 521740, total packets: 1571, avg bps: 1116, avg pps: 0, avg bpp: 332 Time window: 2025-11-27 20:56:04 - 2025-11-27 21:58:24 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0057s User: 0.0008s Wall: 0.0030s flows/second: 52996.6 Runtime: 0.0031s