Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 15:58:43.253 00:00:10.502 TCP 1.101.0.1:3000 -> 22.102.0.1:55328 10 6452 1 2025-11-05 15:54:52.996 00:05:03.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 15:59:36.876 00:00:10.366 TCP 23.104.0.1:33688 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:59:43.794 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54820 10 6452 1 2025-11-05 15:55:52.999 00:05:03.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 16:00:37.286 00:00:11.315 TCP 23.104.0.1:49030 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:00:44.010 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58510 10 6452 1 2025-11-05 16:01:38.638 00:00:10.376 TCP 23.104.0.1:60626 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:01:44.186 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48000 10 6452 1 2025-11-05 16:02:39.051 00:00:10.362 TCP 23.104.0.1:51304 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:02:44.394 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60150 10 6452 1 2025-11-05 16:03:08.289 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:03:07.954 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 16:03:39.448 00:00:10.329 TCP 23.104.0.1:59518 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:03:44.605 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:47036 10 6452 1 2025-11-05 16:04:39.818 00:00:10.414 TCP 23.104.0.1:53340 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:00:52.998 00:05:03.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 16:04:44.809 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:59278 10 6452 1 2025-11-05 16:05:44.995 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41778 10 6452 1 2025-11-05 16:05:40.275 00:00:10.365 TCP 23.104.0.1:56878 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:01:53.000 00:05:03.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 16:06:40.678 00:00:10.364 TCP 23.104.0.1:48718 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:06:45.217 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47648 10 6452 1 2025-11-05 16:07:41.103 00:00:10.361 TCP 23.104.0.1:38172 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:07:45.432 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48174 10 6452 1 2025-11-05 16:08:08.099 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 16:08:08.054 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:08:41.504 00:00:10.380 TCP 23.104.0.1:34610 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:08:45.646 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50484 10 6452 1 2025-11-05 16:09:41.927 00:00:10.383 TCP 23.104.0.1:37326 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:09:45.819 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60304 10 6452 1 2025-11-05 16:10:42.346 00:00:10.387 TCP 23.104.0.1:38376 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:10:46.048 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55928 10 6452 1 2025-11-05 16:06:53.000 00:05:03.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 16:11:46.256 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34258 10 6452 1 2025-11-05 16:11:42.779 00:00:10.370 TCP 23.104.0.1:48270 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:07:53.004 00:05:03.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 16:12:43.186 00:00:10.369 TCP 23.104.0.1:54576 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:12:46.469 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55672 10 6452 1 2025-11-05 16:13:08.440 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 16:13:08.431 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:13:46.685 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:51030 10 6452 1 2025-11-05 16:13:43.594 00:00:10.330 TCP 23.104.0.1:43112 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:14:43.963 00:00:10.378 TCP 23.104.0.1:42650 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:14:46.870 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42666 10 6452 1 2025-11-05 16:15:44.378 00:00:10.370 TCP 23.104.0.1:49700 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:15:47.105 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36334 10 6452 1 2025-11-05 16:16:44.783 00:00:10.436 TCP 23.104.0.1:57528 -> 1.101.0.1:3000 15 1926 1 2025-11-05 16:12:53.004 00:05:03.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 16:16:47.320 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42938 12 10375 1 2025-11-05 16:17:45.258 00:00:10.362 TCP 23.104.0.1:39626 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:17:47.557 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35028 10 6452 1 2025-11-05 16:13:53.005 00:05:03.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 16:18:08.210 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 16:18:08.293 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:18:45.655 00:00:10.361 TCP 23.104.0.1:45502 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:18:47.726 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58246 10 6452 1 2025-11-05 16:19:46.063 00:00:10.365 TCP 23.104.0.1:44142 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:19:47.938 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:48760 10 6452 1 2025-11-05 16:20:46.470 00:00:10.362 TCP 23.104.0.1:33666 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:20:48.135 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46564 10 6452 1 2025-11-05 16:21:48.306 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56776 10 6452 1 2025-11-05 16:21:46.869 00:00:10.371 TCP 23.104.0.1:39614 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:18:53.029 00:05:03.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 16:22:47.283 00:00:10.533 TCP 23.104.0.1:53586 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:22:48.483 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60922 10 6452 1 2025-11-05 16:23:09.649 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:23:09.385 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 16:19:53.034 00:05:03.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 16:23:47.852 00:00:10.379 TCP 23.104.0.1:32794 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:23:48.694 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38198 10 6452 1 2025-11-05 16:24:48.908 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51694 10 6452 1 2025-11-05 16:24:48.270 00:00:10.364 TCP 23.104.0.1:50348 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:25:49.120 00:00:10.504 TCP 1.101.0.1:3000 -> 22.102.0.1:40280 10 6452 1 2025-11-05 16:25:48.679 00:00:11.038 TCP 23.104.0.1:53294 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:26:49.661 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37624 10 6452 1 2025-11-05 16:26:49.752 00:00:10.362 TCP 23.104.0.1:35076 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:27:49.871 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59942 10 6452 1 2025-11-05 16:27:50.149 00:00:10.363 TCP 23.104.0.1:33860 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:28:08.585 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:28:08.713 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 16:24:53.037 00:05:03.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 16:28:50.067 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60190 10 6452 1 2025-11-05 16:28:50.546 00:00:10.370 TCP 23.104.0.1:53692 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:29:50.281 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56832 10 6452 1 2025-11-05 16:25:53.039 00:05:03.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 16:29:50.957 00:00:10.370 TCP 23.104.0.1:35748 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:30:51.367 00:00:10.370 TCP 23.104.0.1:40178 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:30:50.492 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46136 10 6452 1 2025-11-05 16:31:50.702 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48086 10 6452 1 2025-11-05 16:31:51.775 00:00:10.368 TCP 23.104.0.1:52034 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:32:50.911 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42570 10 6452 1 2025-11-05 16:32:52.179 00:00:10.366 TCP 23.104.0.1:41542 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:33:08.563 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:33:08.752 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 16:33:51.119 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60672 10 6452 1 2025-11-05 16:33:52.578 00:00:10.369 TCP 23.104.0.1:44998 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:30:53.037 00:05:03.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 16:34:51.324 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59960 10 6452 1 2025-11-05 16:34:52.983 00:00:10.366 TCP 23.104.0.1:45284 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:31:53.041 00:05:03.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 16:35:51.532 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49952 10 6452 1 2025-11-05 16:35:53.389 00:00:10.366 TCP 23.104.0.1:35832 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:36:51.711 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43660 10 6452 1 2025-11-05 16:36:53.790 00:00:10.375 TCP 23.104.0.1:43136 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:37:54.208 00:00:10.365 TCP 23.104.0.1:40568 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:38:08.684 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:37:51.923 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38626 10 6452 1 2025-11-05 16:38:08.890 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 16:38:54.612 00:00:10.366 TCP 23.104.0.1:40666 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:38:52.141 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:41494 10 6452 1 2025-11-05 16:39:55.022 00:00:10.380 TCP 23.104.0.1:45802 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:39:52.305 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33824 10 6452 1 2025-11-05 16:36:53.060 00:05:03.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 16:40:52.481 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34978 10 6452 1 2025-11-05 16:40:55.445 00:00:10.366 TCP 23.104.0.1:57520 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:37:53.059 00:05:03.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 16:41:55.849 00:00:10.455 TCP 23.104.0.1:47564 -> 1.101.0.1:3000 15 1926 1 2025-11-05 16:41:52.691 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:38956 12 10375 1 2025-11-05 16:42:52.935 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:41492 10 6452 1 2025-11-05 16:43:08.957 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 16:43:08.731 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:42:56.342 00:00:11.275 TCP 23.104.0.1:54288 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:43:53.128 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40170 10 6452 1 2025-11-05 16:43:57.661 00:00:10.367 TCP 23.104.0.1:33764 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:44:53.344 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41302 10 6452 1 2025-11-05 16:44:58.086 00:00:10.365 TCP 23.104.0.1:34182 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:45:53.550 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:42562 10 6452 1 2025-11-05 16:45:58.487 00:00:10.362 TCP 23.104.0.1:56146 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:42:53.057 00:05:03.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 16:46:53.730 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57668 10 6452 1 2025-11-05 16:46:58.884 00:00:10.377 TCP 23.104.0.1:39492 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:43:53.061 00:05:03.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 16:47:53.943 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57260 10 6452 1 2025-11-05 16:48:09.166 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 16:48:09.184 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:47:59.300 00:00:10.328 TCP 23.104.0.1:33544 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:48:54.174 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55438 10 6452 1 2025-11-05 16:48:59.664 00:00:10.373 TCP 23.104.0.1:60570 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:49:54.349 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43648 10 6452 1 2025-11-05 16:50:00.101 00:00:10.377 TCP 23.104.0.1:60336 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:50:54.554 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55176 10 6452 1 2025-11-05 16:51:00.514 00:00:10.368 TCP 23.104.0.1:41096 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:51:54.762 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51612 10 6452 1 2025-11-05 16:52:00.917 00:00:10.325 TCP 23.104.0.1:42830 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:48:53.059 00:05:03.126 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 16:52:54.974 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:32970 10 6452 1 2025-11-05 16:53:08.781 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:53:01.277 00:00:10.372 TCP 23.104.0.1:54266 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:53:08.912 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 16:49:53.062 00:05:03.121 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 16:53:55.210 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53912 10 6452 1 2025-11-05 16:54:01.685 00:00:10.330 TCP 23.104.0.1:47326 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:54:55.379 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33200 10 6452 1 2025-11-05 16:55:02.057 00:00:10.364 TCP 23.104.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:55:55.555 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45814 10 6452 1 2025-11-05 16:56:02.457 00:00:10.368 TCP 23.104.0.1:49406 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:56:55.764 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41556 10 6452 1 2025-11-05 16:57:02.863 00:00:10.370 TCP 23.104.0.1:49694 -> 1.101.0.1:3000 11 1507 1 2025-11-05 16:58:09.141 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 16:57:55.979 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47642 10 6452 1 2025-11-05 16:58:09.175 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 16:58:03.272 00:00:10.369 TCP 23.104.0.1:36754 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505525, total packets: 1573, avg bps: 1064, avg pps: 0, avg bpp: 321 Time window: 2025-11-05 15:54:52 - 2025-11-05 16:58:13 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0033s User: 0.0022s Wall: 0.0027s flows/second: 61004.0 Runtime: 0.0027s