Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 20:59:32.836 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50344 10 6452 1 2025-11-12 20:59:41.541 00:00:10.326 TCP 23.104.0.1:41866 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:00:33.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49082 10 6452 1 2025-11-12 21:00:41.906 00:00:10.373 TCP 23.104.0.1:51274 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:01:36.177 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 21:01:36.287 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 21:01:33.296 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44112 10 6452 1 2025-11-12 21:01:42.312 00:00:10.368 TCP 23.104.0.1:48958 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:02:33.505 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44484 10 6452 1 2025-11-12 21:02:42.720 00:00:10.376 TCP 23.104.0.1:56708 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:03:33.713 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33412 10 6452 1 2025-11-12 21:03:43.132 00:00:10.364 TCP 23.104.0.1:47358 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:59:56.286 00:05:03.955 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 20:59:56.284 00:05:03.960 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 21:04:33.934 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47622 10 6452 1 2025-11-12 21:04:43.534 00:00:10.362 TCP 23.104.0.1:56190 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:05:34.173 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33822 10 6452 1 2025-11-12 21:05:43.935 00:00:10.380 TCP 23.104.0.1:47958 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:06:36.298 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 21:06:36.077 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 21:06:34.345 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46602 10 6452 1 2025-11-12 21:06:44.353 00:00:10.324 TCP 23.104.0.1:57376 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:07:34.554 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57846 10 6452 1 2025-11-12 21:07:44.720 00:00:10.379 TCP 23.104.0.1:53424 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:08:34.774 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46008 10 6452 1 2025-11-12 21:08:45.132 00:00:10.366 TCP 23.104.0.1:51400 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:09:34.985 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:44118 10 6452 1 2025-11-12 21:09:45.534 00:00:10.322 TCP 23.104.0.1:33704 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:05:56.284 00:05:03.970 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 21:05:56.285 00:05:03.957 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 21:10:35.174 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42746 10 6452 1 2025-11-12 21:10:45.895 00:00:10.370 TCP 23.104.0.1:36886 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:11:36.249 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 21:11:36.544 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 21:11:35.381 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40154 10 6452 1 2025-11-12 21:11:46.306 00:00:10.329 TCP 23.104.0.1:42210 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:12:35.602 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53558 12 6556 1 2025-11-12 21:12:46.673 00:00:10.380 TCP 23.104.0.1:51388 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:13:35.828 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43658 10 6452 1 2025-11-12 21:13:47.107 00:00:10.398 TCP 23.104.0.1:60892 -> 1.101.0.1:3000 15 1926 1 2025-11-12 21:14:36.066 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:54882 12 10375 1 2025-11-12 21:14:47.544 00:00:10.322 TCP 23.104.0.1:38610 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:15:36.310 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59982 10 6452 1 2025-11-12 21:15:47.904 00:00:10.369 TCP 23.104.0.1:46886 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:11:56.286 00:05:03.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 21:11:56.284 00:05:03.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 21:16:36.242 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 21:16:36.564 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 21:16:36.530 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39034 10 6452 1 2025-11-12 21:16:48.312 00:00:10.368 TCP 23.104.0.1:51374 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:17:36.710 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35270 10 6452 1 2025-11-12 21:17:48.719 00:00:10.378 TCP 23.104.0.1:34862 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:18:36.878 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56602 10 6452 1 2025-11-12 21:18:49.133 00:00:10.739 TCP 23.104.0.1:56438 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:19:37.109 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55284 10 6452 1 2025-11-12 21:19:49.910 00:00:10.362 TCP 23.104.0.1:43838 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:20:37.323 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42198 10 6452 1 2025-11-12 21:20:50.311 00:00:10.365 TCP 23.104.0.1:38300 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:21:36.733 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 21:21:36.721 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 21:21:37.530 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39524 10 6452 1 2025-11-12 21:17:56.288 00:05:03.956 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 21:21:50.713 00:00:11.264 TCP 23.104.0.1:40824 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:17:56.286 00:05:03.961 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 21:22:37.748 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52822 10 6452 1 2025-11-12 21:22:52.019 00:00:10.366 TCP 23.104.0.1:32936 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:23:37.958 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37772 10 6452 1 2025-11-12 21:23:52.426 00:00:10.379 TCP 23.104.0.1:33258 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:24:38.181 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:45838 10 6452 1 2025-11-12 21:24:52.846 00:00:10.361 TCP 23.104.0.1:60532 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:25:38.457 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54064 10 6452 1 2025-11-12 21:25:53.249 00:00:10.364 TCP 23.104.0.1:43814 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:26:36.700 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 21:26:36.530 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 21:26:38.675 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54988 10 6452 1 2025-11-12 21:26:53.657 00:00:10.370 TCP 23.104.0.1:55778 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:27:38.897 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51330 10 6452 1 2025-11-12 21:23:56.288 00:05:03.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 21:23:56.286 00:05:03.974 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 21:27:54.094 00:00:10.357 TCP 23.104.0.1:52210 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:28:39.110 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39992 10 6452 1 2025-11-12 21:28:54.495 00:00:10.363 TCP 23.104.0.1:50744 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:29:39.326 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34994 10 6452 1 2025-11-12 21:29:54.891 00:00:10.379 TCP 23.104.0.1:49856 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:30:39.538 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56852 10 6452 1 2025-11-12 21:30:55.307 00:00:10.369 TCP 23.104.0.1:37638 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:31:36.922 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 21:31:36.739 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 21:31:39.754 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60262 10 6452 1 2025-11-12 21:31:55.707 00:00:10.358 TCP 23.104.0.1:36756 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:32:39.977 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:56550 10 6452 1 2025-11-12 21:32:56.109 00:00:10.369 TCP 23.104.0.1:56596 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:33:40.221 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40252 10 6452 1 2025-11-12 21:29:56.289 00:05:03.970 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 21:29:56.286 00:05:03.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 21:33:56.522 00:00:10.368 TCP 23.104.0.1:56108 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:34:40.433 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46846 10 6452 1 2025-11-12 21:34:56.922 00:00:10.386 TCP 23.104.0.1:41912 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:35:40.646 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53548 10 6452 1 2025-11-12 21:35:57.348 00:00:10.324 TCP 23.104.0.1:47042 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:36:36.905 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 21:36:37.291 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 21:36:40.820 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-11-12 21:36:57.708 00:00:10.324 TCP 23.104.0.1:50566 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:37:41.079 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40886 10 6452 1 2025-11-12 21:37:58.097 00:00:10.360 TCP 23.104.0.1:58054 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:38:41.321 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40684 10 6452 1 2025-11-12 21:38:58.493 00:00:10.379 TCP 23.104.0.1:45420 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:39:41.555 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34458 10 6452 1 2025-11-12 21:35:56.287 00:05:03.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 21:35:56.289 00:05:03.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 21:39:58.894 00:00:10.674 TCP 23.104.0.1:52586 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:40:41.783 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52746 10 6452 1 2025-11-12 21:40:59.612 00:00:10.325 TCP 23.104.0.1:52068 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:41:37.013 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 21:41:37.061 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 21:41:42.005 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44340 10 6452 1 2025-11-12 21:41:59.973 00:00:10.374 TCP 23.104.0.1:60710 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:42:42.221 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47258 10 6452 1 2025-11-12 21:43:00.384 00:00:10.366 TCP 23.104.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:43:42.443 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51358 10 6452 1 2025-11-12 21:44:00.781 00:00:10.325 TCP 23.104.0.1:41438 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:44:42.660 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49396 10 6452 1 2025-11-12 21:45:01.141 00:00:10.365 TCP 23.104.0.1:41048 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:45:42.880 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57422 10 6452 1 2025-11-12 21:41:56.291 00:05:03.972 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 21:41:56.289 00:05:03.977 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 21:46:01.544 00:00:10.366 TCP 23.104.0.1:50940 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:46:36.979 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 21:46:36.988 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 21:46:43.082 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45998 10 6452 1 2025-11-12 21:47:01.943 00:00:10.379 TCP 23.104.0.1:43394 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:47:43.290 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:51348 10 6452 1 2025-11-12 21:48:02.361 00:00:11.038 TCP 23.104.0.1:59718 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:48:43.476 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47406 11 6492 1 2025-11-12 21:49:03.444 00:00:10.363 TCP 23.104.0.1:46886 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:49:43.682 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52370 10 6452 1 2025-11-12 21:50:03.844 00:00:10.385 TCP 23.104.0.1:59136 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:50:43.903 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45164 10 6452 1 2025-11-12 21:51:04.267 00:00:10.361 TCP 23.104.0.1:46328 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:51:37.082 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 21:51:37.280 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 21:51:44.121 00:00:10.503 TCP 1.101.0.1:3000 -> 22.102.0.1:58364 10 6452 1 2025-11-12 21:47:56.291 00:05:03.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 21:47:56.287 00:05:03.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 21:52:04.672 00:00:10.365 TCP 23.104.0.1:47300 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:52:44.663 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34714 10 6452 1 2025-11-12 21:53:05.101 00:00:10.362 TCP 23.104.0.1:43330 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:53:44.876 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34316 10 6452 1 2025-11-12 21:54:05.518 00:00:10.360 TCP 23.104.0.1:42730 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:54:45.106 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37612 10 6452 1 2025-11-12 21:55:05.921 00:00:10.388 TCP 23.104.0.1:53804 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:55:45.325 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33116 10 6452 1 2025-11-12 21:56:06.350 00:00:10.341 TCP 23.104.0.1:39052 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:56:36.957 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 21:56:37.360 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 21:56:45.546 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:58348 10 6452 1 2025-11-12 21:57:06.738 00:00:10.325 TCP 23.104.0.1:38930 -> 1.101.0.1:3000 11 1507 1 2025-11-12 21:57:45.732 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35834 10 6452 1 2025-11-12 21:53:56.294 00:05:03.971 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 21:53:56.291 00:05:03.976 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 21:58:07.110 00:00:10.360 TCP 23.104.0.1:39252 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494875, total packets: 1560, avg bps: 1109, avg pps: 0, avg bpp: 317 Time window: 2025-11-12 20:59:32 - 2025-11-12 21:59:00 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0043s User: 0.0011s Wall: 0.0027s flows/second: 60602.7 Runtime: 0.0027s