Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 11:58:43.301 00:00:10.948 TCP 1.101.0.1:3000 -> 22.102.0.1:45898 10 6452 1 2025-11-12 11:59:05.961 00:00:10.367 TCP 23.104.0.1:50042 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:59:44.282 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:47116 11 6504 1 2025-11-12 12:00:06.365 00:00:10.363 TCP 23.104.0.1:50544 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:00:44.557 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50622 10 6452 1 2025-11-12 12:01:06.770 00:00:10.379 TCP 23.104.0.1:38838 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:01:25.166 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 12:01:25.162 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 12:01:44.780 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40694 10 6452 1 2025-11-12 12:02:07.190 00:00:23.403 TCP 23.104.0.1:47920 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:02:44.996 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:34032 10 6452 1 2025-11-12 12:03:20.642 00:00:10.370 TCP 23.104.0.1:35542 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:03:45.225 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34420 10 6452 1 2025-11-12 11:59:56.115 00:05:03.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 11:59:56.118 00:05:03.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 12:04:21.059 00:00:10.362 TCP 23.104.0.1:55160 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:04:45.449 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51816 10 6452 1 2025-11-12 12:05:21.462 00:00:10.361 TCP 23.104.0.1:54518 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:05:45.672 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36912 10 6452 1 2025-11-12 12:06:25.579 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 12:06:25.437 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 12:06:21.860 00:00:10.362 TCP 23.104.0.1:42822 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:06:45.894 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40628 10 6452 1 2025-11-12 12:07:22.262 00:00:19.715 TCP 23.104.0.1:57230 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:07:46.121 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44628 10 6452 1 2025-11-12 12:08:32.047 00:00:10.367 TCP 23.104.0.1:56936 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:08:46.336 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40798 10 6452 1 2025-11-12 12:09:32.450 00:00:10.370 TCP 23.104.0.1:50090 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:09:46.551 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34804 10 6452 1 2025-11-12 12:05:56.119 00:05:03.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 12:05:56.116 00:05:03.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 12:10:32.855 00:00:10.385 TCP 23.104.0.1:48886 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:10:46.732 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41424 10 6452 1 2025-11-12 12:11:25.758 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 12:11:25.706 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 12:11:33.281 00:00:10.368 TCP 23.104.0.1:52050 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:11:46.950 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:46204 10 6452 1 2025-11-12 12:12:33.682 00:00:10.384 TCP 23.104.0.1:39720 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:12:47.193 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47218 10 6452 1 2025-11-12 12:13:34.101 00:00:10.369 TCP 23.104.0.1:32874 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:13:47.407 00:00:10.459 TCP 1.101.0.1:3000 -> 22.102.0.1:35180 10 6452 1 2025-11-12 12:14:34.503 00:00:10.368 TCP 23.104.0.1:57758 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:14:47.911 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55670 10 6452 1 2025-11-12 12:15:34.908 00:00:10.329 TCP 23.104.0.1:53892 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:11:56.121 00:05:03.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 12:11:56.119 00:05:03.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 12:15:48.136 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57006 10 6452 1 2025-11-12 12:16:25.481 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 12:16:25.692 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 12:16:35.272 00:00:10.362 TCP 23.104.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:16:48.346 00:00:10.550 TCP 1.101.0.1:3000 -> 22.102.0.1:39328 10 6452 1 2025-11-12 12:17:35.666 00:00:10.365 TCP 23.104.0.1:37728 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:17:48.946 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54232 10 6452 1 2025-11-12 12:18:36.095 00:00:10.371 TCP 23.104.0.1:48398 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:18:49.176 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54588 10 6452 1 2025-11-12 12:19:36.499 00:00:10.319 TCP 23.104.0.1:57108 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:19:49.404 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41266 10 6452 1 2025-11-12 12:20:36.859 00:00:10.374 TCP 23.104.0.1:35882 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:20:49.617 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37332 10 6452 1 2025-11-12 12:21:25.964 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 12:21:26.019 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 12:21:37.269 00:00:10.424 TCP 23.104.0.1:48772 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:17:56.123 00:05:03.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 12:17:56.119 00:05:03.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 12:21:49.833 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55442 10 6452 1 2025-11-12 12:22:37.732 00:00:10.364 TCP 23.104.0.1:46346 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:22:50.078 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59714 10 6452 1 2025-11-12 12:23:38.138 00:00:10.358 TCP 23.104.0.1:46040 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:23:50.288 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38784 10 6452 1 2025-11-12 12:24:38.536 00:00:10.365 TCP 23.104.0.1:45432 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:24:50.496 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53472 10 6452 1 2025-11-12 12:25:38.947 00:00:10.396 TCP 23.104.0.1:44052 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:25:50.665 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45326 10 6452 1 2025-11-12 12:26:25.633 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 12:26:25.921 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 12:26:39.409 00:00:10.371 TCP 23.104.0.1:44532 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:26:50.875 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60988 10 6452 1 2025-11-12 12:27:39.818 00:00:10.363 TCP 23.104.0.1:49526 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:23:56.123 00:05:03.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 12:27:51.102 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:45910 10 6452 1 2025-11-12 12:23:56.121 00:05:03.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 12:28:40.221 00:00:10.326 TCP 23.104.0.1:59926 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:28:51.265 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57850 10 6452 1 2025-11-12 12:29:40.581 00:00:10.364 TCP 23.104.0.1:44726 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:29:51.478 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46528 10 6452 1 2025-11-12 12:30:40.980 00:00:10.370 TCP 23.104.0.1:47544 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:30:51.698 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51688 10 6452 1 2025-11-12 12:31:25.918 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 12:31:25.938 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 12:31:41.391 00:00:10.367 TCP 23.104.0.1:45474 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:31:51.919 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:43974 10 6452 1 2025-11-12 12:32:41.790 00:00:10.371 TCP 23.104.0.1:58728 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:32:52.154 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46944 10 6452 1 2025-11-12 12:33:42.202 00:00:10.364 TCP 23.104.0.1:44188 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:29:56.122 00:05:03.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 12:29:56.124 00:05:03.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 12:33:52.364 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36506 10 6452 1 2025-11-12 12:34:42.612 00:00:10.362 TCP 23.104.0.1:45266 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:34:52.579 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54610 10 6452 1 2025-11-12 12:35:43.016 00:00:10.361 TCP 23.104.0.1:45168 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:35:52.800 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60744 10 6452 1 2025-11-12 12:36:26.287 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 12:36:26.234 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 12:36:43.420 00:00:10.343 TCP 23.104.0.1:38414 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:36:52.980 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:46794 10 6452 1 2025-11-12 12:37:43.806 00:00:10.366 TCP 23.104.0.1:46228 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:37:53.225 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50842 9 6412 1 2025-11-12 12:38:44.212 00:00:10.376 TCP 23.104.0.1:55728 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:38:53.404 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57048 10 6452 1 2025-11-12 12:39:44.624 00:00:10.364 TCP 23.104.0.1:40272 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:35:56.124 00:05:03.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 12:35:56.122 00:05:03.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 12:39:53.627 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36510 10 6452 1 2025-11-12 12:40:45.029 00:00:10.364 TCP 23.104.0.1:57922 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:40:53.838 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43158 10 6452 1 2025-11-12 12:41:26.001 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 12:41:26.110 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 12:41:45.431 00:00:10.367 TCP 23.104.0.1:58588 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:41:54.070 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45930 10 6452 1 2025-11-12 12:42:45.835 00:00:10.392 TCP 23.104.0.1:58276 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:42:54.290 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35284 10 6452 1 2025-11-12 12:43:46.265 00:00:10.439 TCP 23.104.0.1:47198 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:43:54.506 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57314 10 6452 1 2025-11-12 12:44:46.739 00:00:10.367 TCP 23.104.0.1:52080 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:44:54.719 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59586 10 6452 1 2025-11-12 12:45:47.147 00:00:10.327 TCP 23.104.0.1:54356 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:41:56.126 00:05:03.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 12:41:56.123 00:05:03.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 12:45:54.935 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:56580 10 6452 1 2025-11-12 12:46:26.301 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 12:46:26.351 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 12:46:47.511 00:00:10.368 TCP 23.104.0.1:42868 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:46:55.191 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42180 10 6452 1 2025-11-12 12:47:47.917 00:00:10.334 TCP 23.104.0.1:42996 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:47:55.405 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53706 10 6452 1 2025-11-12 12:48:48.289 00:00:10.320 TCP 23.104.0.1:35174 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:48:55.616 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53196 10 6452 1 2025-11-12 12:49:48.649 00:00:10.364 TCP 23.104.0.1:40192 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:49:55.833 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57620 10 6452 1 2025-11-12 12:50:49.058 00:00:10.322 TCP 23.104.0.1:42056 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:50:56.000 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47794 10 6452 1 2025-11-12 12:51:26.404 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 12:51:26.055 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 12:51:49.416 00:00:10.362 TCP 23.104.0.1:53310 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:47:56.126 00:05:03.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 12:47:56.125 00:05:03.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 12:51:56.223 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34832 10 6452 1 2025-11-12 12:52:49.824 00:00:10.382 TCP 23.104.0.1:40798 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:52:56.428 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50470 10 6452 1 2025-11-12 12:53:50.245 00:00:10.364 TCP 23.104.0.1:36092 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:53:56.639 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54272 10 6452 1 2025-11-12 12:54:50.645 00:00:10.368 TCP 23.104.0.1:33804 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:54:56.849 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52074 10 6452 1 2025-11-12 12:55:51.058 00:00:10.364 TCP 23.104.0.1:59500 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:55:57.081 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47802 10 6452 1 2025-11-12 12:56:26.602 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 12:56:26.743 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 12:56:51.461 00:00:10.368 TCP 23.104.0.1:53316 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:56:57.295 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34190 10 6452 1 2025-11-12 12:53:56.127 00:05:03.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 12:53:56.125 00:05:03.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 12:57:51.869 00:00:10.364 TCP 23.104.0.1:35492 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:57:57.468 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43662 10 6452 1 Summary: total flows: 163, total bytes: 496853, total packets: 1561, avg bps: 1099, avg pps: 0, avg bpp: 318 Time window: 2025-11-12 11:58:43 - 2025-11-12 12:58:59 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0012s Wall: 0.0022s flows/second: 74498.4 Runtime: 0.0022s