Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 08:58:46.992 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53638 10 6452 1 2025-11-22 08:59:36.624 00:00:10.367 TCP 23.104.0.1:40326 -> 1.101.0.1:3000 11 1507 1 2025-11-22 08:59:47.174 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:38926 10 6452 1 2025-11-22 09:00:37.029 00:00:10.319 TCP 23.104.0.1:58666 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:00:47.361 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48370 10 6452 1 2025-11-22 09:01:12.257 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 09:01:12.338 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 09:01:37.386 00:00:10.325 TCP 23.104.0.1:41186 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:01:47.603 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48402 10 6452 1 2025-11-22 08:58:02.159 00:05:04.089 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 08:58:02.155 00:05:04.094 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 09:02:37.748 00:00:10.384 TCP 23.104.0.1:38454 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:02:47.819 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49820 10 6452 1 2025-11-22 09:03:38.171 00:00:10.369 TCP 23.104.0.1:50636 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:03:48.038 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54530 10 6452 1 2025-11-22 09:04:38.577 00:00:10.438 TCP 23.104.0.1:45480 -> 1.101.0.1:3000 15 1926 1 2025-11-22 09:04:48.256 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:51972 12 10369 1 2025-11-22 09:05:39.063 00:00:10.321 TCP 23.104.0.1:55568 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:05:48.503 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59432 10 6452 1 2025-11-22 09:06:12.208 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 09:06:12.298 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 09:06:39.422 00:00:10.336 TCP 23.104.0.1:38768 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:06:48.719 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49334 10 6452 1 2025-11-22 09:07:39.799 00:00:10.370 TCP 23.104.0.1:46146 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:07:48.884 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59580 10 6452 1 2025-11-22 09:04:02.159 00:05:04.092 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 09:04:02.161 00:05:04.088 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 09:08:40.209 00:00:10.363 TCP 23.104.0.1:57418 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:08:49.103 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53218 10 6452 1 2025-11-22 09:09:40.616 00:00:10.325 TCP 23.104.0.1:46588 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:09:49.272 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49756 10 6452 1 2025-11-22 09:10:40.984 00:00:10.366 TCP 23.104.0.1:60174 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:10:49.498 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53720 10 6452 1 2025-11-22 09:11:12.333 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 09:11:12.484 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 09:11:41.387 00:00:10.365 TCP 23.104.0.1:46828 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:11:49.710 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33572 10 6452 1 2025-11-22 09:12:41.790 00:00:10.338 TCP 23.104.0.1:35096 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:12:49.919 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:56370 10 6452 1 2025-11-22 09:13:42.168 00:00:10.326 TCP 23.104.0.1:53728 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:13:50.102 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43116 10 6452 1 2025-11-22 09:10:02.160 00:05:04.093 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 09:10:02.162 00:05:04.088 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 09:14:42.526 00:00:10.366 TCP 23.104.0.1:49050 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:14:50.317 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45548 10 6452 1 2025-11-22 09:15:42.934 00:00:10.384 TCP 23.104.0.1:42200 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:15:50.532 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54376 10 6452 1 2025-11-22 09:16:12.600 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 09:16:12.518 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 09:16:43.353 00:00:10.359 TCP 23.104.0.1:36084 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:16:50.703 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37604 10 6452 1 2025-11-22 09:17:43.755 00:00:10.321 TCP 23.104.0.1:35548 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:17:50.877 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34202 10 6452 1 2025-11-22 09:18:44.114 00:00:10.365 TCP 23.104.0.1:60126 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:18:51.099 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56408 10 6452 1 2025-11-22 09:19:44.518 00:00:10.386 TCP 23.104.0.1:33452 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:19:51.316 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35510 10 6452 1 2025-11-22 09:16:02.162 00:05:04.094 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 09:16:02.165 00:05:04.089 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 09:20:44.948 00:00:10.375 TCP 23.104.0.1:53024 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:20:51.530 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58552 10 6452 1 2025-11-22 09:21:13.046 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 09:21:12.989 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 09:21:45.366 00:00:10.361 TCP 23.104.0.1:39372 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:21:51.705 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37028 10 6452 1 2025-11-22 09:22:45.768 00:00:10.867 TCP 23.104.0.1:43474 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:22:51.877 00:00:10.884 TCP 1.101.0.1:3000 -> 22.102.0.1:54618 10 6452 1 2025-11-22 09:23:46.672 00:00:10.361 TCP 23.104.0.1:56032 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:23:52.795 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60700 10 6452 1 2025-11-22 09:24:47.097 00:00:10.367 TCP 23.104.0.1:53068 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:24:53.014 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41020 10 6452 1 2025-11-22 09:25:47.501 00:00:10.370 TCP 23.104.0.1:54604 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:25:53.229 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52372 10 6452 1 2025-11-22 09:22:02.163 00:05:04.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 09:22:02.167 00:05:04.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 09:26:12.862 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 09:26:12.650 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 09:26:47.906 00:00:10.363 TCP 23.104.0.1:57780 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:26:53.450 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48238 10 6452 1 2025-11-22 09:27:48.317 00:00:10.371 TCP 23.104.0.1:56776 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:27:53.664 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39596 10 6452 1 2025-11-22 09:28:48.725 00:00:10.369 TCP 23.104.0.1:39058 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:28:53.841 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41398 10 6452 1 2025-11-22 09:29:49.132 00:00:10.367 TCP 23.104.0.1:55896 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:29:54.085 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58926 10 6452 1 2025-11-22 09:30:49.536 00:00:10.371 TCP 23.104.0.1:53362 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:30:54.299 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38136 10 6452 1 2025-11-22 09:31:12.860 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 09:31:12.819 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 09:31:49.946 00:00:10.370 TCP 23.104.0.1:42382 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:31:54.530 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47016 10 6452 1 2025-11-22 09:28:02.168 00:05:04.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 09:28:02.165 00:05:04.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 09:32:50.355 00:00:10.363 TCP 23.104.0.1:40746 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:32:54.742 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51842 10 6452 1 2025-11-22 09:33:50.756 00:00:10.388 TCP 23.104.0.1:54840 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:33:54.967 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:51222 10 6452 1 2025-11-22 09:34:51.181 00:00:10.366 TCP 23.104.0.1:36044 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:34:55.202 00:00:10.479 TCP 1.101.0.1:3000 -> 22.102.0.1:57300 10 6452 1 2025-11-22 09:35:51.583 00:00:10.365 TCP 23.104.0.1:50308 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:35:55.728 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47124 10 6452 1 2025-11-22 09:36:12.971 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 09:36:12.770 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 09:36:51.987 00:00:10.323 TCP 23.104.0.1:39706 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:36:55.944 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:42398 10 6452 1 2025-11-22 09:37:52.350 00:00:10.361 TCP 23.104.0.1:47284 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:34:02.171 00:05:04.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 09:37:56.146 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39988 10 6452 1 2025-11-22 09:34:02.168 00:05:04.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 09:38:52.749 00:00:10.368 TCP 23.104.0.1:35482 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:38:56.362 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37042 10 6452 1 2025-11-22 09:39:56.541 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43084 10 6452 1 2025-11-22 09:39:53.152 00:00:10.367 TCP 23.104.0.1:47556 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:40:56.752 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33332 10 6452 1 2025-11-22 09:40:53.562 00:00:10.368 TCP 23.104.0.1:53668 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:41:13.301 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 09:41:13.172 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 09:41:53.969 00:00:10.370 TCP 23.104.0.1:40388 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:41:56.968 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:48068 10 6452 1 2025-11-22 09:42:54.377 00:00:10.361 TCP 23.104.0.1:39496 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:42:57.152 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49770 10 6452 1 2025-11-22 09:40:02.170 00:05:04.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 09:43:57.366 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:32996 10 6452 1 2025-11-22 09:43:54.780 00:00:10.384 TCP 23.104.0.1:53266 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:40:02.172 00:05:04.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 09:44:55.203 00:00:10.328 TCP 23.104.0.1:58698 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:44:57.572 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52550 10 6452 1 2025-11-22 09:45:55.567 00:00:10.369 TCP 23.104.0.1:51026 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:45:57.782 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35900 10 6452 1 2025-11-22 09:46:12.965 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 09:46:13.052 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 09:46:55.967 00:00:10.376 TCP 23.104.0.1:57696 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:46:57.956 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57234 12 6556 1 2025-11-22 09:47:56.381 00:00:10.360 TCP 23.104.0.1:54138 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:47:58.190 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42846 10 6452 1 2025-11-22 09:48:58.401 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35888 10 6452 1 2025-11-22 09:48:56.779 00:00:10.617 TCP 23.104.0.1:57872 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:46:02.174 00:05:04.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 09:46:02.173 00:05:04.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 09:49:58.614 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39850 10 6452 1 2025-11-22 09:49:57.429 00:00:10.321 TCP 23.104.0.1:53010 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:50:58.786 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37752 10 6452 1 2025-11-22 09:50:57.789 00:00:10.353 TCP 23.104.0.1:44106 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:51:13.049 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 09:51:13.307 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 09:51:59.002 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35118 10 6452 1 2025-11-22 09:51:58.180 00:00:10.363 TCP 23.104.0.1:47274 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:52:59.240 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34990 10 6452 1 2025-11-22 09:52:58.578 00:00:10.383 TCP 23.104.0.1:37466 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:53:59.007 00:00:10.366 TCP 23.104.0.1:35546 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:53:59.420 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34926 10 6452 1 2025-11-22 09:54:59.592 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46774 12 10375 1 2025-11-22 09:54:59.408 00:00:10.407 TCP 23.104.0.1:42094 -> 1.101.0.1:3000 15 1926 1 2025-11-22 09:55:59.827 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58028 10 6452 1 2025-11-22 09:52:02.173 00:05:04.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 09:52:02.175 00:05:04.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 09:55:59.853 00:00:10.385 TCP 23.104.0.1:45596 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:56:13.439 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 09:56:13.442 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 09:57:00.055 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43362 10 6452 1 2025-11-22 09:57:00.281 00:00:10.413 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:58:00.224 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43108 10 6452 1 2025-11-22 09:58:00.733 00:00:10.324 TCP 23.104.0.1:52804 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505623, total packets: 1575, avg bps: 1120, avg pps: 0, avg bpp: 321 Time window: 2025-11-22 08:58:02 - 2025-11-22 09:58:11 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0009s Wall: 0.0016s flows/second: 100554.7 Runtime: 0.0016s