Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 15:59:06.505 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38284 10 6452 1 2025-11-12 15:59:22.283 00:00:10.360 TCP 23.104.0.1:42138 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:00:06.680 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37930 10 6452 1 2025-11-12 16:00:22.682 00:00:10.328 TCP 23.104.0.1:52234 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:01:06.895 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46564 10 6452 1 2025-11-12 16:01:29.940 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 16:01:30.284 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 16:01:23.053 00:00:10.369 TCP 23.104.0.1:45220 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:02:07.124 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51580 10 6452 1 2025-11-12 16:02:23.459 00:00:10.326 TCP 23.104.0.1:45836 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:03:07.345 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59400 10 6452 1 2025-11-12 16:03:23.823 00:00:10.359 TCP 23.104.0.1:50612 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:59:56.187 00:05:03.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 15:59:56.188 00:05:03.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 16:04:07.567 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39842 10 6452 1 2025-11-12 16:04:24.219 00:00:10.367 TCP 23.104.0.1:50540 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:05:07.733 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54392 10 6452 1 2025-11-12 16:05:24.627 00:00:10.364 TCP 23.104.0.1:56800 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:06:07.948 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45880 10 6452 1 2025-11-12 16:06:30.209 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 16:06:30.344 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 16:06:25.031 00:00:10.365 TCP 23.104.0.1:60148 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:07:08.182 00:00:10.423 TCP 1.101.0.1:3000 -> 22.102.0.1:44466 10 6452 1 2025-11-12 16:07:25.436 00:00:10.361 TCP 23.104.0.1:52120 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:08:08.647 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44154 10 6452 1 2025-11-12 16:08:25.840 00:00:10.384 TCP 23.104.0.1:59926 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:09:08.869 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54668 10 6452 1 2025-11-12 16:09:26.267 00:00:10.364 TCP 23.104.0.1:51400 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:05:56.189 00:05:03.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 16:05:56.188 00:05:03.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 16:10:09.089 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57286 10 6452 1 2025-11-12 16:10:26.674 00:00:10.373 TCP 23.104.0.1:36612 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:11:09.300 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44124 10 6452 1 2025-11-12 16:11:30.459 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 16:11:30.403 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 16:11:27.115 00:00:10.364 TCP 23.104.0.1:50972 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:12:09.470 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48386 10 6452 1 2025-11-12 16:12:27.520 00:00:10.363 TCP 23.104.0.1:59924 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:13:09.686 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60332 12 6556 1 2025-11-12 16:13:27.915 00:00:10.808 TCP 23.104.0.1:49656 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:14:09.913 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46406 10 6452 1 2025-11-12 16:14:28.761 00:00:10.382 TCP 23.104.0.1:50594 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:15:10.134 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47564 10 6452 1 2025-11-12 16:15:29.183 00:00:10.365 TCP 23.104.0.1:44212 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:11:56.188 00:05:03.870 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 16:11:56.190 00:05:03.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 16:16:10.345 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47482 10 6452 1 2025-11-12 16:16:30.421 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 16:16:30.521 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 16:16:29.583 00:00:10.328 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:17:10.565 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41136 10 6452 1 2025-11-12 16:17:29.952 00:00:10.375 TCP 23.104.0.1:46452 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:18:10.788 00:00:10.655 TCP 1.101.0.1:3000 -> 22.102.0.1:59328 10 6452 1 2025-11-12 16:18:30.359 00:00:11.982 TCP 23.104.0.1:51270 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:19:11.478 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51572 10 6452 1 2025-11-12 16:19:32.382 00:00:10.361 TCP 23.104.0.1:34134 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:20:11.687 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46182 10 6452 1 2025-11-12 16:20:32.787 00:00:10.369 TCP 23.104.0.1:37552 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:21:11.913 00:00:10.260 TCP 1.101.0.1:3000 -> 22.102.0.1:47390 10 6452 1 2025-11-12 16:21:30.617 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 16:21:30.581 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 16:21:33.196 00:00:10.367 TCP 23.104.0.1:40378 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:17:56.189 00:05:03.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 16:17:56.191 00:05:03.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 16:22:12.232 00:00:10.755 TCP 1.101.0.1:3000 -> 22.102.0.1:44564 10 6452 1 2025-11-12 16:22:33.601 00:00:10.368 TCP 23.104.0.1:33194 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:23:13.038 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42682 10 6452 1 2025-11-12 16:23:34.005 00:00:10.514 TCP 23.104.0.1:57912 -> 1.101.0.1:3000 17 2241 1 2025-11-12 16:24:13.253 00:00:10.498 TCP 1.101.0.1:3000 -> 22.102.0.1:41540 14 14292 1 2025-11-12 16:24:34.556 00:00:10.365 TCP 23.104.0.1:60006 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:25:13.795 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55642 10 6452 1 2025-11-12 16:25:34.964 00:00:10.363 TCP 23.104.0.1:56514 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:26:14.017 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:55110 10 6452 1 2025-11-12 16:26:31.612 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 16:26:31.705 00:00:00.017 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 16:26:35.360 00:00:10.370 TCP 23.104.0.1:51000 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:27:14.273 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 10 6452 1 2025-11-12 16:27:35.765 00:00:10.378 TCP 23.104.0.1:34490 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:23:56.190 00:05:03.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 16:23:56.194 00:05:03.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 16:28:14.493 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57198 10 6452 1 2025-11-12 16:28:36.178 00:00:10.439 TCP 23.104.0.1:57116 -> 1.101.0.1:3000 15 1926 1 2025-11-12 16:29:14.715 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:52468 12 10369 1 2025-11-12 16:29:36.656 00:00:10.326 TCP 23.104.0.1:40708 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:30:14.965 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37768 10 6452 1 2025-11-12 16:30:37.019 00:00:10.361 TCP 23.104.0.1:37860 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:31:15.181 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43520 10 6452 1 2025-11-12 16:31:30.821 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 16:31:30.872 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 16:31:37.416 00:00:11.575 TCP 23.104.0.1:34878 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:32:15.391 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44434 10 6452 1 2025-11-12 16:32:39.029 00:00:10.362 TCP 23.104.0.1:55796 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:33:15.564 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44648 10 6452 1 2025-11-12 16:33:39.429 00:00:10.364 TCP 23.104.0.1:60706 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:29:56.193 00:05:03.879 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 16:29:56.195 00:05:03.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 16:34:15.788 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35662 10 6452 1 2025-11-12 16:34:39.833 00:00:10.375 TCP 23.104.0.1:54482 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:35:16.009 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58520 10 6452 1 2025-11-12 16:35:40.253 00:00:10.855 TCP 23.104.0.1:37894 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:36:16.219 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58720 10 6452 1 2025-11-12 16:36:30.825 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 16:36:30.754 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 16:36:41.145 00:00:10.371 TCP 23.104.0.1:60074 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:37:16.387 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51452 10 6452 1 2025-11-12 16:37:41.557 00:00:10.366 TCP 23.104.0.1:39366 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:38:16.597 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47414 10 6452 1 2025-11-12 16:38:41.965 00:00:10.332 TCP 23.104.0.1:49650 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:39:16.807 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33580 10 6452 1 2025-11-12 16:39:42.351 00:00:10.737 TCP 23.104.0.1:38508 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:35:56.194 00:05:03.880 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 16:35:56.193 00:05:03.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 16:40:17.025 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34592 10 6452 1 2025-11-12 16:40:43.129 00:00:10.366 TCP 23.104.0.1:44694 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:41:30.664 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 16:41:17.237 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52078 10 6452 1 2025-11-12 16:41:31.062 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 16:41:43.532 00:00:10.371 TCP 23.104.0.1:42738 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:42:17.461 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51372 10 6452 1 2025-11-12 16:42:43.936 00:00:10.335 TCP 23.104.0.1:58222 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:43:17.680 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:50178 10 6452 1 2025-11-12 16:43:44.314 00:00:10.774 TCP 23.104.0.1:35958 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:44:17.863 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:35180 10 6452 1 2025-11-12 16:44:45.132 00:00:10.377 TCP 23.104.0.1:50488 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:45:18.113 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54692 10 6452 1 2025-11-12 16:45:45.551 00:00:10.365 TCP 23.104.0.1:47432 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:41:56.194 00:05:03.881 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 16:41:56.194 00:05:03.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 16:46:30.924 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 16:46:18.333 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55772 10 6452 1 2025-11-12 16:46:31.159 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 16:46:45.951 00:00:10.326 TCP 23.104.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:47:18.512 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52964 10 6452 1 2025-11-12 16:47:46.317 00:00:10.366 TCP 23.104.0.1:47242 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:48:18.727 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:41020 10 6452 1 2025-11-12 16:48:46.719 00:00:10.379 TCP 23.104.0.1:41954 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:49:18.933 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:46390 10 6452 1 2025-11-12 16:49:47.139 00:00:10.366 TCP 23.104.0.1:59568 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:50:19.131 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54666 10 6452 1 2025-11-12 16:50:47.545 00:00:10.359 TCP 23.104.0.1:56970 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:51:31.480 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 16:51:19.348 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49306 10 6452 1 2025-11-12 16:51:31.056 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 16:47:56.193 00:05:03.886 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 16:47:56.196 00:05:03.881 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 16:51:47.942 00:00:10.989 TCP 23.104.0.1:54464 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:52:19.567 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58538 10 6452 1 2025-11-12 16:52:48.970 00:00:10.371 TCP 23.104.0.1:36222 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:53:19.738 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:46746 10 6452 1 2025-11-12 16:53:49.381 00:00:10.359 TCP 23.104.0.1:50248 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:54:19.971 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:37328 10 6452 1 2025-11-12 16:54:49.776 00:00:10.328 TCP 23.104.0.1:43862 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:55:20.218 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45762 10 6452 1 2025-11-12 16:55:50.142 00:00:10.650 TCP 23.104.0.1:59870 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:56:20.388 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48712 10 6452 1 2025-11-12 16:56:31.254 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 16:56:31.269 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 16:56:50.833 00:00:10.388 TCP 23.104.0.1:55970 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:57:20.597 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40458 10 6452 1 2025-11-12 16:53:56.198 00:05:03.884 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 16:57:51.264 00:00:10.367 TCP 23.104.0.1:52924 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:53:56.194 00:05:03.889 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 16:58:20.805 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54874 10 6452 1 Summary: total flows: 163, total bytes: 509855, total packets: 1579, avg bps: 1135, avg pps: 0, avg bpp: 322 Time window: 2025-11-12 15:59:06 - 2025-11-12 16:59:00 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0016s Wall: 0.0023s flows/second: 70105.8 Runtime: 0.0023s