Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-11 22:58:46.251 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60612 10 6452 1 2025-11-11 22:59:16.529 00:00:10.367 TCP 23.104.0.1:32964 -> 1.101.0.1:3000 11 1507 1 2025-11-11 22:59:46.464 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:39114 11 6504 1 2025-11-11 23:00:16.932 00:00:10.384 TCP 23.104.0.1:39200 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:00:46.730 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56926 10 6452 1 2025-11-11 23:01:09.661 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-11 23:01:09.768 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-11 23:01:17.356 00:00:10.366 TCP 23.104.0.1:43218 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:01:46.945 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:36918 10 6452 1 2025-11-11 23:02:17.761 00:00:10.334 TCP 23.104.0.1:60248 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:02:47.180 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33020 10 6452 1 2025-11-11 23:03:18.134 00:00:10.366 TCP 23.104.0.1:50728 -> 1.101.0.1:3000 11 1507 1 2025-11-11 22:58:59.591 00:05:56.256 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-11 22:59:55.849 00:05:03.740 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-11 23:03:47.392 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56950 10 6452 1 2025-11-11 23:04:18.543 00:00:10.371 TCP 23.104.0.1:60826 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:04:47.605 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54918 10 6452 1 2025-11-11 23:05:18.955 00:00:10.374 TCP 23.104.0.1:45078 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:05:47.825 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55838 10 6452 1 2025-11-11 23:06:09.933 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-11 23:06:09.928 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-11 23:06:19.368 00:00:10.485 TCP 23.104.0.1:40900 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:06:48.007 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45146 10 6452 1 2025-11-11 23:07:19.894 00:00:10.326 TCP 23.104.0.1:34540 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:07:48.231 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45662 10 6452 1 2025-11-11 23:08:20.261 00:00:10.364 TCP 23.104.0.1:50432 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:08:48.448 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35344 10 6452 1 2025-11-11 23:09:20.667 00:00:10.385 TCP 23.104.0.1:57020 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:04:59.592 00:05:56.260 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-11 23:09:48.661 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59718 10 6452 1 2025-11-11 23:05:55.852 00:05:03.739 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-11 23:10:21.099 00:00:10.369 TCP 23.104.0.1:55604 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:10:48.878 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37304 10 6452 1 2025-11-11 23:11:09.894 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-11 23:11:09.834 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-11 23:11:21.511 00:00:10.365 TCP 23.104.0.1:45328 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:11:49.101 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34736 10 6452 1 2025-11-11 23:12:21.918 00:00:10.327 TCP 23.104.0.1:39698 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:12:49.315 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46574 12 6556 1 2025-11-11 23:13:22.280 00:00:10.439 TCP 23.104.0.1:47570 -> 1.101.0.1:3000 15 1926 1 2025-11-11 23:13:49.532 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:38684 12 10369 1 2025-11-11 23:14:22.754 00:00:10.319 TCP 23.104.0.1:49222 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:14:49.733 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40632 10 6452 1 2025-11-11 23:15:23.111 00:00:10.373 TCP 23.104.0.1:50600 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:11:55.854 00:05:03.743 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-11 23:10:59.593 00:05:56.261 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-11 23:15:49.946 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39746 10 6452 1 2025-11-11 23:16:09.998 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-11 23:16:09.839 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-11 23:16:23.523 00:00:10.320 TCP 23.104.0.1:44834 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:16:50.178 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41428 10 6452 1 2025-11-11 23:17:23.880 00:00:10.344 TCP 23.104.0.1:35080 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:17:50.391 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42660 10 6452 1 2025-11-11 23:18:24.264 00:00:10.589 TCP 23.104.0.1:41128 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:18:50.559 00:00:10.651 TCP 1.101.0.1:3000 -> 22.102.0.1:35600 10 6452 1 2025-11-11 23:19:24.892 00:00:10.370 TCP 23.104.0.1:33338 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:19:51.249 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36720 10 6452 1 2025-11-11 23:20:25.301 00:00:10.366 TCP 23.104.0.1:57044 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:20:51.419 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54800 10 6452 1 2025-11-11 23:21:10.210 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-11 23:21:10.116 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-11 23:21:25.707 00:00:10.325 TCP 23.104.0.1:42908 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:16:59.599 00:05:56.264 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-11 23:21:51.633 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56814 10 6452 1 2025-11-11 23:17:55.856 00:05:03.738 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-11 23:22:26.091 00:00:10.364 TCP 23.104.0.1:33936 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:22:51.844 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35032 10 6452 1 2025-11-11 23:23:26.496 00:00:10.366 TCP 23.104.0.1:57968 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:23:52.092 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50888 12 6556 1 2025-11-11 23:24:26.903 00:00:10.369 TCP 23.104.0.1:48738 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:24:52.316 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55824 10 6452 1 2025-11-11 23:25:27.307 00:00:10.364 TCP 23.104.0.1:47048 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:25:52.534 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52822 10 6452 1 2025-11-11 23:26:10.280 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-11 23:26:10.003 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-11 23:26:27.711 00:00:10.386 TCP 23.104.0.1:36626 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:26:52.754 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38402 10 6452 1 2025-11-11 23:27:28.141 00:00:10.369 TCP 23.104.0.1:52326 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:22:59.597 00:05:56.267 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-11 23:23:55.865 00:05:03.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-11 23:27:52.969 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47218 12 6556 1 2025-11-11 23:28:28.551 00:00:10.441 TCP 23.104.0.1:38128 -> 1.101.0.1:3000 15 1926 1 2025-11-11 23:28:53.188 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:35078 12 10375 1 2025-11-11 23:29:29.036 00:00:10.369 TCP 23.104.0.1:42344 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:29:53.383 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57164 10 6452 1 2025-11-11 23:30:29.453 00:00:10.328 TCP 23.104.0.1:48496 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:30:53.598 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34514 10 6452 1 2025-11-11 23:31:10.273 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-11 23:31:10.490 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-11 23:31:29.825 00:00:10.343 TCP 23.104.0.1:33432 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:31:53.815 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47936 10 6452 1 2025-11-11 23:32:30.209 00:00:10.365 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:32:54.040 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58054 10 6452 1 2025-11-11 23:33:30.616 00:00:10.359 TCP 23.104.0.1:45538 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:28:59.601 00:05:56.266 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-11 23:29:55.867 00:05:03.736 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-11 23:33:54.257 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49516 10 6452 1 2025-11-11 23:34:31.015 00:00:10.370 TCP 23.104.0.1:53288 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:34:54.468 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35958 10 6452 1 2025-11-11 23:35:31.422 00:00:10.364 TCP 23.104.0.1:60310 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:35:54.681 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49508 10 6452 1 2025-11-11 23:36:10.979 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-11 23:36:11.178 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-11 23:36:31.825 00:00:10.400 TCP 23.104.0.1:60306 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:36:54.895 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:51870 10 6452 1 2025-11-11 23:37:32.264 00:00:10.361 TCP 23.104.0.1:58646 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:37:55.092 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39962 10 6452 1 2025-11-11 23:38:32.668 00:00:10.460 TCP 23.104.0.1:59594 -> 1.101.0.1:3000 15 1926 1 2025-11-11 23:38:55.306 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47390 13 13949 1 2025-11-11 23:39:33.164 00:00:15.466 TCP 23.104.0.1:47934 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:34:59.606 00:05:56.259 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-11 23:35:55.868 00:05:03.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-11 23:39:55.545 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60394 10 6452 1 2025-11-11 23:40:38.670 00:00:10.324 TCP 23.104.0.1:32948 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:40:55.762 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43084 10 6452 1 2025-11-11 23:41:10.309 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-11 23:41:10.711 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-11 23:41:39.035 00:00:10.364 TCP 23.104.0.1:35090 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:41:55.978 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:50590 13 6608 1 2025-11-11 23:42:39.442 00:00:10.368 TCP 23.104.0.1:45940 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:42:56.228 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58412 10 6452 1 2025-11-11 23:43:39.851 00:00:10.430 TCP 23.104.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:43:56.408 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33002 10 6452 1 2025-11-11 23:44:40.330 00:00:10.369 TCP 23.104.0.1:58970 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:44:56.622 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44884 10 6452 1 2025-11-11 23:45:40.735 00:00:10.367 TCP 23.104.0.1:55120 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:40:59.609 00:05:56.260 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-11 23:41:55.869 00:05:03.738 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-11 23:46:10.475 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-11 23:45:56.834 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33650 10 6452 1 2025-11-11 23:46:10.741 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-11 23:46:41.143 00:00:10.366 TCP 23.104.0.1:52426 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:46:57.070 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56692 10 6452 1 2025-11-11 23:47:41.549 00:00:10.367 TCP 23.104.0.1:56774 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:47:57.295 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51584 10 6452 1 2025-11-11 23:48:41.951 00:00:10.366 TCP 23.104.0.1:53328 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:48:57.512 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51022 10 6452 1 2025-11-11 23:49:42.358 00:00:10.365 TCP 23.104.0.1:41812 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:49:57.724 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54926 10 6452 1 2025-11-11 23:50:42.756 00:00:10.388 TCP 23.104.0.1:52596 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:51:10.914 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-11 23:50:57.904 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55846 10 6452 1 2025-11-11 23:51:10.817 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-11 23:46:59.615 00:05:56.254 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-11 23:51:43.179 00:00:10.370 TCP 23.104.0.1:33422 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:47:55.871 00:05:03.738 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-11 23:51:58.122 00:00:34.152 TCP 1.101.0.1:3000 -> 22.102.0.1:57996 10 6452 1 2025-11-11 23:52:43.584 00:00:10.322 TCP 23.104.0.1:44102 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:53:22.329 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34586 10 6452 1 2025-11-11 23:53:43.944 00:00:10.367 TCP 23.104.0.1:41118 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:54:22.539 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59092 10 6452 1 2025-11-11 23:54:44.352 00:00:10.365 TCP 23.104.0.1:41840 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:55:22.754 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52642 10 6452 1 2025-11-11 23:55:44.757 00:00:10.378 TCP 23.104.0.1:36642 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:56:10.811 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-11 23:56:10.788 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-11 23:56:22.984 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49000 10 6452 1 2025-11-11 23:56:45.173 00:00:10.371 TCP 23.104.0.1:45110 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:57:23.213 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40216 10 6452 1 2025-11-11 23:57:45.577 00:00:10.361 TCP 23.104.0.1:38510 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:52:59.613 00:05:56.260 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-11 23:53:55.871 00:05:03.745 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-11 23:58:23.423 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56302 10 6452 1 Summary: total flows: 163, total bytes: 513955, total packets: 1590, avg bps: 1137, avg pps: 0, avg bpp: 323 Time window: 2025-11-11 22:58:46 - 2025-11-11 23:58:59 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0026s Wall: 0.0017s flows/second: 96563.8 Runtime: 0.0017s