Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 11:59:21.887 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44866 10 6452 1 2025-11-16 11:59:38.098 00:00:10.362 TCP 23.104.0.1:55314 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:00:22.109 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35896 10 6452 1 2025-11-16 12:00:38.505 00:00:10.367 TCP 23.104.0.1:46838 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:01:22.317 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44624 10 6452 1 2025-11-16 12:01:38.913 00:00:10.359 TCP 23.104.0.1:41742 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:02:22.533 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42716 10 6452 1 2025-11-16 12:02:39.313 00:00:10.325 TCP 23.104.0.1:35050 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:03:21.016 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 12:03:20.995 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 12:03:22.749 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34996 10 6452 1 2025-11-16 12:03:39.673 00:00:10.365 TCP 23.104.0.1:43802 -> 1.101.0.1:3000 11 1507 1 2025-11-16 11:59:02.770 00:05:55.291 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 11:59:58.063 00:05:04.706 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 12:04:22.969 00:00:10.609 TCP 1.101.0.1:3000 -> 22.102.0.1:47760 10 6452 1 2025-11-16 12:04:40.103 00:00:10.367 TCP 23.104.0.1:60472 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:05:23.616 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36058 10 6452 1 2025-11-16 12:05:40.511 00:00:10.367 TCP 23.104.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:06:23.834 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51472 10 6452 1 2025-11-16 12:06:40.918 00:00:10.375 TCP 23.104.0.1:50810 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:07:24.081 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47678 10 6452 1 2025-11-16 12:07:41.334 00:00:10.328 TCP 23.104.0.1:51536 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:08:21.194 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 12:08:21.232 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 12:08:24.253 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34074 10 6452 1 2025-11-16 12:08:41.694 00:00:10.366 TCP 23.104.0.1:52048 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:09:24.478 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47684 10 6452 1 2025-11-16 12:09:42.108 00:00:10.362 TCP 23.104.0.1:54278 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:05:02.770 00:05:55.292 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 12:05:58.065 00:05:04.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 12:10:24.655 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49354 10 6452 1 2025-11-16 12:10:42.509 00:00:10.369 TCP 23.104.0.1:39250 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:11:24.872 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35266 10 6452 1 2025-11-16 12:11:42.917 00:00:10.338 TCP 23.104.0.1:43910 -> 1.101.0.1:3000 12 1559 1 2025-11-16 12:12:25.088 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33042 10 6452 1 2025-11-16 12:12:43.336 00:00:10.334 TCP 23.104.0.1:53828 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:13:21.026 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 12:13:20.743 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 12:13:25.265 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33202 10 6452 1 2025-11-16 12:13:43.712 00:00:10.360 TCP 23.104.0.1:59498 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:14:25.482 00:00:10.862 TCP 1.101.0.1:3000 -> 22.102.0.1:33248 10 6452 1 2025-11-16 12:14:44.114 00:00:10.365 TCP 23.104.0.1:47330 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:15:26.389 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44164 10 6452 1 2025-11-16 12:15:44.518 00:00:10.358 TCP 23.104.0.1:47478 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:11:02.772 00:05:55.291 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 12:11:58.064 00:05:04.706 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 12:16:26.603 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47448 10 6452 1 2025-11-16 12:16:44.917 00:00:10.341 TCP 23.104.0.1:33754 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:17:26.817 00:00:10.732 TCP 1.101.0.1:3000 -> 22.102.0.1:33242 10 6452 1 2025-11-16 12:17:45.301 00:00:10.366 TCP 23.104.0.1:54984 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:18:21.567 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 12:18:21.423 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 12:18:27.583 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60278 10 6452 1 2025-11-16 12:18:45.701 00:00:10.332 TCP 23.104.0.1:46246 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:19:27.775 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52086 10 6452 1 2025-11-16 12:19:46.075 00:00:10.327 TCP 23.104.0.1:33222 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:20:27.989 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57326 10 6452 1 2025-11-16 12:20:46.436 00:00:10.374 TCP 23.104.0.1:47526 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:21:28.207 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37136 10 6452 1 2025-11-16 12:21:46.850 00:00:10.387 TCP 23.104.0.1:49562 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:17:02.773 00:05:55.293 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 12:17:58.065 00:05:04.709 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 12:22:28.391 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43618 10 6452 1 2025-11-16 12:22:47.273 00:00:10.360 TCP 23.104.0.1:54080 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:23:21.315 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 12:23:20.965 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 12:23:28.601 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51256 10 6452 1 2025-11-16 12:23:47.672 00:00:10.327 TCP 23.104.0.1:47790 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:24:28.836 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52544 10 6452 1 2025-11-16 12:24:48.035 00:00:10.362 TCP 23.104.0.1:55940 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:25:29.082 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57332 10 6452 1 2025-11-16 12:25:48.434 00:00:10.363 TCP 23.104.0.1:36816 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:26:29.311 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56424 10 6452 1 2025-11-16 12:26:48.840 00:00:10.340 TCP 23.104.0.1:60180 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:27:29.522 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41756 10 6452 1 2025-11-16 12:27:49.216 00:00:10.360 TCP 23.104.0.1:49290 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:23:02.777 00:05:55.292 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 12:23:58.070 00:05:04.708 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 12:28:21.282 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 12:28:21.291 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 12:28:29.741 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44800 10 6452 1 2025-11-16 12:28:49.615 00:00:10.322 TCP 23.104.0.1:47706 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:29:29.914 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60568 10 6452 1 2025-11-16 12:29:49.978 00:00:11.163 TCP 23.104.0.1:54848 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:30:30.131 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51034 10 6452 1 2025-11-16 12:30:51.177 00:00:10.321 TCP 23.104.0.1:53292 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:31:30.353 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34450 10 6452 1 2025-11-16 12:31:51.539 00:00:10.361 TCP 23.104.0.1:44366 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:32:30.578 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44872 10 6452 1 2025-11-16 12:32:51.945 00:00:10.368 TCP 23.104.0.1:41290 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:33:21.899 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 12:33:22.058 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 12:33:30.800 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34510 10 6452 1 2025-11-16 12:29:02.780 00:05:55.290 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 12:33:52.354 00:00:10.334 TCP 23.104.0.1:32998 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:29:58.073 00:05:04.706 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 12:34:31.070 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37262 10 6452 1 2025-11-16 12:34:52.728 00:00:10.336 TCP 23.104.0.1:42372 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:35:31.291 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36208 10 6452 1 2025-11-16 12:35:53.113 00:00:10.362 TCP 23.104.0.1:57450 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:36:31.513 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:48552 12 10375 1 2025-11-16 12:36:53.515 00:00:10.444 TCP 23.104.0.1:52622 -> 1.101.0.1:3000 15 1926 1 2025-11-16 12:37:31.759 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51240 10 6452 1 2025-11-16 12:37:53.996 00:00:10.370 TCP 23.104.0.1:45896 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:38:21.460 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 12:38:21.505 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 12:38:31.977 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:50702 10 6452 1 2025-11-16 12:38:54.411 00:00:10.367 TCP 23.104.0.1:33534 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:39:32.220 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37104 10 6452 1 2025-11-16 12:35:02.781 00:05:55.295 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 12:39:54.816 00:00:10.363 TCP 23.104.0.1:53348 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:35:58.074 00:05:04.708 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 12:40:32.441 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54226 10 6452 1 2025-11-16 12:40:55.217 00:00:10.378 TCP 23.104.0.1:45582 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:41:32.660 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:43438 10 6452 1 2025-11-16 12:41:55.636 00:00:10.368 TCP 23.104.0.1:41934 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:42:32.911 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43628 10 6452 1 2025-11-16 12:42:56.047 00:00:10.367 TCP 23.104.0.1:54660 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:43:21.423 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 12:43:21.568 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 12:43:33.131 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55126 10 6452 1 2025-11-16 12:43:56.446 00:00:10.359 TCP 23.104.0.1:43290 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:44:33.316 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51630 10 6452 1 2025-11-16 12:44:56.845 00:00:10.351 TCP 23.104.0.1:39908 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:45:33.532 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48284 10 6452 1 2025-11-16 12:41:02.784 00:05:55.293 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 12:41:58.079 00:05:04.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 12:45:57.228 00:00:10.399 TCP 23.104.0.1:40772 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:46:33.751 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38636 10 6452 1 2025-11-16 12:46:57.663 00:00:10.372 TCP 23.104.0.1:51130 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:47:33.970 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33358 10 6452 1 2025-11-16 12:47:58.097 00:00:10.377 TCP 23.104.0.1:57130 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:48:21.541 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 12:48:21.859 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 12:48:34.191 00:00:10.968 TCP 1.101.0.1:3000 -> 22.102.0.1:45930 10 6452 1 2025-11-16 12:48:58.511 00:00:10.368 TCP 23.104.0.1:60396 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:49:35.201 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37364 10 6452 1 2025-11-16 12:49:58.920 00:00:10.325 TCP 23.104.0.1:57406 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:50:35.370 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51588 10 6452 1 2025-11-16 12:50:59.286 00:00:10.361 TCP 23.104.0.1:33286 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:51:35.544 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47692 10 6452 1 2025-11-16 12:47:02.786 00:05:55.291 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 12:47:58.079 00:05:04.711 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 12:51:59.688 00:00:10.369 TCP 23.104.0.1:47940 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:52:35.759 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41044 10 6452 1 2025-11-16 12:53:00.114 00:00:10.326 TCP 23.104.0.1:60538 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:53:21.862 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 12:53:21.871 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 12:53:35.975 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:38994 10 6452 1 2025-11-16 12:54:00.476 00:00:10.362 TCP 23.104.0.1:34348 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:54:36.229 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59600 10 6452 1 2025-11-16 12:55:00.877 00:00:10.383 TCP 23.104.0.1:39860 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:55:36.446 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6452 1 2025-11-16 12:56:01.302 00:00:10.324 TCP 23.104.0.1:53428 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:56:36.665 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57750 10 6452 1 2025-11-16 12:57:01.665 00:00:10.368 TCP 23.104.0.1:41216 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:57:36.892 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44534 10 6452 1 2025-11-16 12:53:02.793 00:05:55.288 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 12:53:58.080 00:05:04.715 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 12:58:02.097 00:00:10.361 TCP 23.104.0.1:56698 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:58:22.068 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 12:58:22.308 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 12:58:37.081 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46390 10 6452 1 Summary: total flows: 163, total bytes: 501235, total packets: 1568, avg bps: 1113, avg pps: 0, avg bpp: 319 Time window: 2025-11-16 11:59:02 - 2025-11-16 12:59:02 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0026s Wall: 0.0022s flows/second: 74086.6 Runtime: 0.0022s