Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 16:58:37.975 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:49038 10 6452 1 2025-11-01 16:54:50.904 00:05:03.316 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 16:59:23.506 00:00:10.450 TCP 23.104.0.1:52612 -> 1.101.0.1:3000 15 1926 1 2025-11-01 16:54:54.216 00:05:56.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 16:59:38.226 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:52240 12 10369 1 2025-11-01 17:00:23.995 00:00:10.368 TCP 23.104.0.1:57382 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:00:38.473 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50944 10 6452 1 2025-11-01 17:01:13.789 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 17:01:13.755 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 17:01:24.399 00:00:10.324 TCP 23.104.0.1:49770 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:01:38.698 00:00:10.687 TCP 1.101.0.1:3000 -> 22.102.0.1:34626 10 6452 1 2025-11-01 17:02:24.755 00:00:10.377 TCP 23.104.0.1:35852 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:02:39.417 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54408 12 6556 1 2025-11-01 17:03:25.168 00:00:10.364 TCP 23.104.0.1:36038 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:03:39.636 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:33420 10 6452 1 2025-11-01 17:04:25.578 00:00:10.326 TCP 23.104.0.1:38738 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:04:39.829 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56752 10 6452 1 2025-11-01 17:00:50.906 00:05:03.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 17:05:25.944 00:00:10.373 TCP 23.104.0.1:50598 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:00:54.216 00:05:56.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 17:05:40.068 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60390 10 6452 1 2025-11-01 17:06:13.748 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 17:06:13.939 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 17:06:26.364 00:00:10.322 TCP 23.104.0.1:42564 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:06:40.284 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59316 10 6452 1 2025-11-01 17:07:26.724 00:00:10.505 TCP 23.104.0.1:38622 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:07:40.504 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33482 10 6452 1 2025-11-01 17:08:27.266 00:00:10.364 TCP 23.104.0.1:38558 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:08:40.714 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59420 10 6452 1 2025-11-01 17:09:27.670 00:00:10.369 TCP 23.104.0.1:38186 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:09:40.929 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:34870 10 6452 1 2025-11-01 17:10:28.108 00:00:10.370 TCP 23.104.0.1:56334 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:10:41.168 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50426 10 6452 1 2025-11-01 17:06:50.908 00:05:03.314 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 17:11:13.718 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 17:11:13.755 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 17:11:28.514 00:00:10.368 TCP 23.104.0.1:44648 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:06:54.218 00:05:56.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 17:11:41.381 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49350 10 6452 1 2025-11-01 17:12:28.918 00:00:10.381 TCP 23.104.0.1:42994 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:12:41.593 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56116 10 6452 1 2025-11-01 17:13:29.337 00:00:10.368 TCP 23.104.0.1:48374 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:13:41.805 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40386 10 6452 1 2025-11-01 17:14:29.743 00:00:10.326 TCP 23.104.0.1:39936 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:14:42.032 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51426 10 6452 1 2025-11-01 17:15:30.107 00:00:10.360 TCP 23.104.0.1:60952 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:15:42.242 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37816 10 6452 1 2025-11-01 17:16:13.808 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 17:16:13.660 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 17:16:30.511 00:00:10.327 TCP 23.104.0.1:41212 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:16:42.460 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44270 10 6452 1 2025-11-01 17:12:50.910 00:05:03.323 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 17:17:30.881 00:00:10.384 TCP 23.104.0.1:43550 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:12:54.221 00:05:56.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 17:17:42.708 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34698 10 6452 1 2025-11-01 17:18:31.305 00:00:10.365 TCP 23.104.0.1:58678 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:18:42.931 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:42194 10 6452 1 2025-11-01 17:19:31.710 00:00:10.382 TCP 23.104.0.1:57464 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:19:43.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40036 10 6452 1 2025-11-01 17:20:32.127 00:00:10.361 TCP 23.104.0.1:49814 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:20:43.339 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47254 10 6452 1 2025-11-01 17:21:14.218 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 17:21:14.348 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 17:21:32.531 00:00:10.356 TCP 23.104.0.1:60376 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:21:43.566 00:00:10.719 TCP 1.101.0.1:3000 -> 22.102.0.1:33202 10 6452 1 2025-11-01 17:22:32.926 00:00:10.382 TCP 23.104.0.1:49548 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:22:44.333 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57262 10 6452 1 2025-11-01 17:18:50.909 00:05:03.323 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 17:23:33.354 00:00:10.364 TCP 23.104.0.1:54670 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:18:54.229 00:05:56.687 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 17:23:44.548 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56004 10 6452 1 2025-11-01 17:24:33.760 00:00:10.384 TCP 23.104.0.1:42654 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:24:44.798 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45544 10 6452 1 2025-11-01 17:25:34.185 00:00:11.785 TCP 23.104.0.1:45036 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:25:45.032 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58188 11 6492 1 2025-11-01 17:26:14.108 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 17:26:14.100 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 17:26:36.016 00:00:10.325 TCP 23.104.0.1:46218 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:26:45.254 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53878 10 6452 1 2025-11-01 17:27:36.379 00:00:10.374 TCP 23.104.0.1:59154 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:27:45.430 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47976 10 6452 1 2025-11-01 17:28:36.788 00:00:10.346 TCP 23.104.0.1:52232 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:28:45.603 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59682 10 6452 1 2025-11-01 17:24:50.913 00:05:03.321 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 17:24:54.231 00:05:56.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 17:29:37.168 00:00:14.518 TCP 23.104.0.1:41938 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:29:45.773 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54990 12 6556 1 2025-11-01 17:30:41.720 00:00:10.378 TCP 23.104.0.1:52710 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:30:45.989 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:53262 10 6452 1 2025-11-01 17:31:14.555 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 17:31:14.676 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 17:31:46.246 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53594 10 6452 1 2025-11-01 17:31:42.133 00:00:10.362 TCP 23.104.0.1:36232 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:32:46.462 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57892 10 6452 1 2025-11-01 17:32:42.536 00:00:10.361 TCP 23.104.0.1:54810 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:33:46.684 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46716 10 6452 1 2025-11-01 17:33:42.935 00:00:10.377 TCP 23.104.0.1:47502 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:34:43.348 00:00:10.363 TCP 23.104.0.1:50632 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:30:50.916 00:05:03.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 17:34:46.903 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55700 10 6452 1 2025-11-01 17:30:54.232 00:05:56.687 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 17:35:43.741 00:00:10.328 TCP 23.104.0.1:41004 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:35:47.119 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54732 10 6452 1 2025-11-01 17:36:14.567 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 17:36:14.474 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 17:36:44.107 00:00:10.326 TCP 23.104.0.1:55416 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:36:47.292 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45766 10 6452 1 2025-11-01 17:37:44.468 00:00:10.365 TCP 23.104.0.1:35596 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:37:47.507 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38900 10 6452 1 2025-11-01 17:38:44.868 00:00:10.370 TCP 23.104.0.1:34028 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:38:47.684 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42622 10 6452 1 2025-11-01 17:39:45.274 00:00:10.444 TCP 23.104.0.1:58834 -> 1.101.0.1:3000 15 1926 1 2025-11-01 17:39:47.896 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 12 10375 1 2025-11-01 17:40:45.764 00:00:10.370 TCP 23.104.0.1:50624 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:36:50.916 00:05:03.323 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 17:40:48.145 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39936 10 6452 1 2025-11-01 17:41:14.381 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 17:41:14.449 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 17:36:54.236 00:05:56.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 17:41:46.189 00:00:10.370 TCP 23.104.0.1:59118 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:41:48.317 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50342 11 6492 1 2025-11-01 17:42:46.596 00:00:10.368 TCP 23.104.0.1:54570 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:42:48.533 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38522 10 6452 1 2025-11-01 17:43:47.002 00:00:10.359 TCP 23.104.0.1:47248 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:43:48.743 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55268 10 6452 1 2025-11-01 17:44:48.957 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:41852 10 6452 1 2025-11-01 17:44:47.401 00:00:10.364 TCP 23.104.0.1:41834 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:45:49.147 00:00:10.306 TCP 1.101.0.1:3000 -> 22.102.0.1:44614 10 6452 1 2025-11-01 17:45:47.803 00:00:10.364 TCP 23.104.0.1:45212 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:46:14.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 17:46:14.729 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 17:42:50.922 00:05:03.319 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 17:46:49.485 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51548 10 6452 1 2025-11-01 17:46:48.207 00:00:10.367 TCP 23.104.0.1:35178 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:42:54.236 00:05:56.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 17:47:49.702 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44796 10 6452 1 2025-11-01 17:47:48.612 00:00:10.367 TCP 23.104.0.1:45944 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:48:49.018 00:00:10.325 TCP 23.104.0.1:58402 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:48:49.924 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35180 10 6452 1 2025-11-01 17:49:50.163 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56066 10 6452 1 2025-11-01 17:49:49.382 00:00:10.365 TCP 23.104.0.1:59616 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:50:49.781 00:00:10.369 TCP 23.104.0.1:60540 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:50:50.386 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:44798 10 6452 1 2025-11-01 17:51:14.943 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 17:51:14.881 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 17:51:50.574 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36826 10 6452 1 2025-11-01 17:51:50.190 00:00:10.375 TCP 23.104.0.1:58994 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:48:50.923 00:05:03.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 17:52:50.800 00:00:19.048 TCP 1.101.0.1:3000 -> 22.102.0.1:58562 10 6452 1 2025-11-01 17:52:50.594 00:00:19.348 TCP 23.104.0.1:50522 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:48:54.239 00:05:56.687 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 17:54:00.011 00:00:10.363 TCP 23.104.0.1:47044 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:53:59.904 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40532 10 6452 1 2025-11-01 17:55:00.123 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57264 10 6452 1 2025-11-01 17:55:00.411 00:00:10.324 TCP 23.104.0.1:41152 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:56:00.338 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55466 10 6452 1 2025-11-01 17:56:00.768 00:00:10.333 TCP 23.104.0.1:47626 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:56:15.023 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 17:56:14.912 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 17:57:00.513 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35822 10 6452 1 2025-11-01 17:57:01.142 00:00:10.365 TCP 23.104.0.1:35256 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:58:01.547 00:00:10.363 TCP 23.104.0.1:55586 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:58:00.736 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33874 10 6452 1 Summary: total flows: 163, total bytes: 505807, total packets: 1579, avg bps: 1064, avg pps: 0, avg bpp: 320 Time window: 2025-11-01 16:54:50 - 2025-11-01 17:58:11 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0022s Wall: 0.0024s flows/second: 68456.1 Runtime: 0.0024s