Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-06 07:58:50.525 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41690 10 6452 1 2025-11-06 07:54:53.360 00:05:03.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 07:59:05.302 00:00:10.366 TCP 23.104.0.1:41092 -> 1.101.0.1:3000 11 1507 1 2025-11-06 07:55:53.364 00:05:03.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 07:59:50.760 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:35450 10 6452 1 2025-11-06 08:00:05.702 00:00:10.321 TCP 23.104.0.1:55610 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:00:50.946 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46892 10 6452 1 2025-11-06 08:01:06.088 00:00:10.326 TCP 23.104.0.1:37374 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:01:51.163 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34520 10 6452 1 2025-11-06 08:02:06.460 00:00:10.522 TCP 23.104.0.1:57708 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:02:51.383 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52488 10 6452 1 2025-11-06 08:03:07.021 00:00:10.361 TCP 23.104.0.1:33650 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:03:27.259 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 08:03:27.503 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 08:03:51.601 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37132 10 6452 1 2025-11-06 08:04:07.416 00:00:10.370 TCP 23.104.0.1:46766 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:00:53.362 00:05:03.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 08:04:51.808 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34838 10 6452 1 2025-11-06 08:05:07.823 00:00:10.325 TCP 23.104.0.1:50018 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:01:53.365 00:05:03.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 08:05:52.033 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38228 10 6452 1 2025-11-06 08:06:08.186 00:00:10.365 TCP 23.104.0.1:47050 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:06:52.243 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54026 10 6452 1 2025-11-06 08:07:08.582 00:00:10.328 TCP 23.104.0.1:42098 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:07:52.411 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6452 1 2025-11-06 08:08:08.957 00:00:10.324 TCP 23.104.0.1:43550 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:08:27.524 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 08:08:27.330 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 08:08:52.627 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35848 10 6452 1 2025-11-06 08:09:09.325 00:00:10.367 TCP 23.104.0.1:44796 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:09:52.840 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56732 10 6452 1 2025-11-06 08:10:09.732 00:00:10.373 TCP 23.104.0.1:59524 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:06:53.364 00:05:03.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 08:10:53.083 00:00:10.730 TCP 1.101.0.1:3000 -> 22.102.0.1:55310 10 6452 1 2025-11-06 08:11:10.153 00:00:10.366 TCP 23.104.0.1:58548 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:07:53.365 00:05:03.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 08:11:53.850 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52236 10 6452 1 2025-11-06 08:12:10.557 00:00:10.370 TCP 23.104.0.1:39784 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:12:54.082 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55120 12 6556 1 2025-11-06 08:13:10.967 00:00:10.339 TCP 23.104.0.1:45998 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:13:27.296 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 08:13:27.475 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 08:13:54.303 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45264 10 6452 1 2025-11-06 08:14:11.347 00:00:10.805 TCP 23.104.0.1:60168 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:14:54.526 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38056 10 6452 1 2025-11-06 08:15:12.185 00:00:10.327 TCP 23.104.0.1:42906 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:15:54.742 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38116 10 6452 1 2025-11-06 08:16:12.547 00:00:10.369 TCP 23.104.0.1:50418 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:12:53.364 00:05:03.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 08:16:54.957 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36544 12 6556 1 2025-11-06 08:17:12.954 00:00:10.325 TCP 23.104.0.1:34482 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:13:53.368 00:05:03.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 08:17:55.197 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47582 10 6452 1 2025-11-06 08:18:13.317 00:00:10.374 TCP 23.104.0.1:53126 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:18:27.691 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 08:18:27.446 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 08:18:55.406 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40456 10 6452 1 2025-11-06 08:19:13.728 00:00:10.378 TCP 23.104.0.1:60068 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:19:55.620 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60130 10 6452 1 2025-11-06 08:20:14.142 00:00:10.364 TCP 23.104.0.1:46458 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:20:55.833 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43018 10 6452 1 2025-11-06 08:21:14.546 00:00:10.366 TCP 23.104.0.1:50890 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:21:56.009 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34796 10 6452 1 2025-11-06 08:22:14.953 00:00:10.367 TCP 23.104.0.1:35904 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:18:53.367 00:05:03.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 08:22:56.223 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44968 10 6452 1 2025-11-06 08:23:15.359 00:00:10.365 TCP 23.104.0.1:36666 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:23:27.856 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 08:23:27.949 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 08:19:53.368 00:05:03.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 08:23:56.439 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35678 10 6452 1 2025-11-06 08:24:15.761 00:00:10.325 TCP 23.104.0.1:49196 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:24:56.656 00:00:10.306 TCP 1.101.0.1:3000 -> 22.102.0.1:57326 10 6452 1 2025-11-06 08:25:16.124 00:00:10.361 TCP 23.104.0.1:36190 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:25:57.001 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44036 10 6452 1 2025-11-06 08:26:16.524 00:00:10.366 TCP 23.104.0.1:43808 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:26:57.223 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41568 10 6452 1 2025-11-06 08:27:16.933 00:00:10.382 TCP 23.104.0.1:43318 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:27:57.471 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35736 10 6452 1 2025-11-06 08:28:27.885 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 08:28:17.357 00:00:10.373 TCP 23.104.0.1:41710 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:28:27.857 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 08:24:53.368 00:05:03.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 08:28:57.689 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57760 10 6452 1 2025-11-06 08:29:17.772 00:00:10.369 TCP 23.104.0.1:41112 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:25:53.373 00:05:03.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 08:29:57.911 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33064 10 6452 1 2025-11-06 08:30:18.181 00:00:10.365 TCP 23.104.0.1:43664 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:30:58.126 00:00:11.034 TCP 1.101.0.1:3000 -> 22.102.0.1:50266 10 6452 1 2025-11-06 08:31:18.587 00:00:10.367 TCP 23.104.0.1:37084 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:31:59.203 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55976 10 6452 1 2025-11-06 08:32:18.995 00:00:10.363 TCP 23.104.0.1:52826 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:32:59.371 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59598 10 6452 1 2025-11-06 08:33:27.691 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 08:33:27.819 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 08:33:19.395 00:00:10.322 TCP 23.104.0.1:32964 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:33:59.587 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60246 10 6452 1 2025-11-06 08:34:19.757 00:00:10.368 TCP 23.104.0.1:59826 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:30:53.370 00:05:03.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 08:34:59.802 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51692 10 6452 1 2025-11-06 08:35:20.166 00:00:10.370 TCP 23.104.0.1:46464 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:31:53.373 00:05:03.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 08:36:00.012 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47874 10 6452 1 2025-11-06 08:36:20.574 00:00:10.361 TCP 23.104.0.1:57582 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:37:00.182 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47630 10 6452 1 2025-11-06 08:37:20.970 00:00:10.327 TCP 23.104.0.1:46552 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:38:00.393 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54214 10 6452 1 2025-11-06 08:38:27.816 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 08:38:27.689 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 08:38:21.336 00:00:10.365 TCP 23.104.0.1:54512 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:39:00.602 00:00:10.472 TCP 1.101.0.1:3000 -> 22.102.0.1:60326 11 6504 1 2025-11-06 08:39:21.739 00:00:10.368 TCP 23.104.0.1:58746 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:40:01.109 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51284 10 6452 1 2025-11-06 08:40:22.141 00:00:10.326 TCP 23.104.0.1:38756 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:36:53.392 00:05:03.093 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 08:41:01.330 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36518 10 6452 1 2025-11-06 08:41:22.507 00:00:10.367 TCP 23.104.0.1:47512 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:37:53.395 00:05:03.088 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 08:42:01.542 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47300 10 6452 1 2025-11-06 08:42:22.905 00:00:10.330 TCP 23.104.0.1:36532 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:43:01.715 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-11-06 08:43:28.056 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 08:43:27.850 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 08:43:23.271 00:00:10.368 TCP 23.104.0.1:50400 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:44:01.931 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47672 10 6452 1 2025-11-06 08:44:23.680 00:00:10.328 TCP 23.104.0.1:43014 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:45:02.163 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57526 10 6452 1 2025-11-06 08:45:24.053 00:00:10.325 TCP 23.104.0.1:49628 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:46:02.335 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36570 10 6452 1 2025-11-06 08:46:24.414 00:00:10.620 TCP 23.104.0.1:52788 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:42:53.393 00:05:03.093 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 08:47:02.548 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39896 10 6452 1 2025-11-06 08:47:25.099 00:00:10.364 TCP 23.104.0.1:49410 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:43:53.395 00:05:03.089 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 08:48:02.722 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56654 10 6452 1 2025-11-06 08:48:28.160 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 08:48:28.047 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 08:48:25.505 00:00:10.364 TCP 23.104.0.1:52384 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:49:02.945 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56350 10 6452 1 2025-11-06 08:49:25.911 00:00:10.328 TCP 23.104.0.1:41988 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:50:03.124 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53492 10 6452 1 2025-11-06 08:50:26.276 00:00:10.365 TCP 23.104.0.1:49536 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:51:03.343 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35714 10 6452 1 2025-11-06 08:51:26.685 00:00:10.336 TCP 23.104.0.1:51770 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:52:03.552 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59350 10 6452 1 2025-11-06 08:52:27.057 00:00:10.367 TCP 23.104.0.1:43190 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:48:53.396 00:05:03.094 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-06 08:53:03.740 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47542 10 6452 1 2025-11-06 08:53:28.454 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 08:53:28.110 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 08:53:27.464 00:00:10.363 TCP 23.104.0.1:59952 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:49:53.399 00:05:03.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-06 08:54:03.952 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:56610 10 6452 1 2025-11-06 08:54:27.868 00:00:10.366 TCP 23.104.0.1:36308 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:55:04.183 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33506 10 6452 1 2025-11-06 08:55:28.270 00:00:10.360 TCP 23.104.0.1:57040 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:56:04.411 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39188 10 6452 1 2025-11-06 08:56:28.671 00:00:10.363 TCP 23.104.0.1:48156 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:57:04.632 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53928 10 6452 1 2025-11-06 08:57:29.102 00:00:10.367 TCP 23.104.0.1:50552 -> 1.101.0.1:3000 11 1507 1 2025-11-06 08:58:04.849 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48410 10 6452 1 2025-11-06 08:58:28.393 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-06 08:58:28.280 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-06 08:58:29.510 00:00:10.369 TCP 23.104.0.1:57852 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498608, total packets: 1577, avg bps: 1042, avg pps: 0, avg bpp: 316 Time window: 2025-11-06 07:54:53 - 2025-11-06 08:58:39 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0046s User: 0.0008s Wall: 0.0030s flows/second: 54467.2 Runtime: 0.0030s