Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 09:58:46.334 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54802 10 6452 1 2025-11-09 09:54:54.772 00:05:03.288 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 09:58:51.722 00:00:10.378 TCP 23.104.0.1:56874 -> 1.101.0.1:3000 11 1507 1 2025-11-09 09:59:46.557 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49932 10 6452 1 2025-11-09 09:59:56.337 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 09:59:56.235 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 09:59:52.141 00:00:10.369 TCP 23.104.0.1:55210 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:00:46.791 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52958 10 6452 1 2025-11-09 10:00:52.562 00:00:10.362 TCP 23.104.0.1:41412 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:01:47.003 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:41368 10 6452 1 2025-11-09 10:01:52.959 00:00:10.370 TCP 23.104.0.1:54358 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:02:47.253 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50586 10 6452 1 2025-11-09 10:02:53.367 00:00:10.366 TCP 23.104.0.1:41884 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:03:47.463 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59444 10 6452 1 2025-11-09 09:59:54.771 00:05:03.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 10:03:53.772 00:00:10.368 TCP 23.104.0.1:60906 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:04:56.312 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:04:56.252 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 10:00:54.772 00:05:03.289 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 10:04:47.674 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55062 10 6452 1 2025-11-09 10:04:54.180 00:00:10.362 TCP 23.104.0.1:60466 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:05:47.844 00:00:11.285 TCP 1.101.0.1:3000 -> 22.102.0.1:54666 10 6452 1 2025-11-09 10:05:54.582 00:00:10.366 TCP 23.104.0.1:47704 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:06:49.170 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53006 10 6452 1 2025-11-09 10:06:54.985 00:00:10.371 TCP 23.104.0.1:48140 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:07:49.389 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47908 10 6452 1 2025-11-09 10:07:55.395 00:00:10.370 TCP 23.104.0.1:43120 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:08:49.604 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50124 10 6452 1 2025-11-09 10:08:55.801 00:00:10.338 TCP 23.104.0.1:47346 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:09:56.338 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 10:09:56.531 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:09:49.816 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44616 10 6452 1 2025-11-09 10:05:54.771 00:05:03.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 10:09:56.181 00:00:10.362 TCP 23.104.0.1:49298 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:10:50.037 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54454 10 6452 1 2025-11-09 10:06:54.774 00:05:03.296 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 10:10:56.581 00:00:10.369 TCP 23.104.0.1:55556 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:11:50.209 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57040 10 6452 1 2025-11-09 10:11:56.984 00:00:10.363 TCP 23.104.0.1:37008 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:12:50.421 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:34938 10 6452 1 2025-11-09 10:12:57.391 00:00:10.366 TCP 23.104.0.1:48146 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:13:50.624 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:32806 10 6452 1 2025-11-09 10:13:57.797 00:00:10.362 TCP 23.104.0.1:57024 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:14:56.574 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 10:14:56.462 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:14:50.809 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48836 10 6452 1 2025-11-09 10:14:58.223 00:00:10.368 TCP 23.104.0.1:56726 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:15:51.039 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47788 10 6452 1 2025-11-09 10:11:54.771 00:05:03.302 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 10:15:58.635 00:00:10.360 TCP 23.104.0.1:48842 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:16:51.260 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48384 10 6452 1 2025-11-09 10:12:54.773 00:05:03.297 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 10:16:59.033 00:00:10.364 TCP 23.104.0.1:52370 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:17:51.499 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58070 10 6452 1 2025-11-09 10:17:59.442 00:00:10.322 TCP 23.104.0.1:59972 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:18:51.713 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33922 10 6452 1 2025-11-09 10:18:59.803 00:00:10.334 TCP 23.104.0.1:34488 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:19:56.582 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 10:19:56.705 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:19:51.923 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43314 10 6452 1 2025-11-09 10:20:00.174 00:00:10.388 TCP 23.104.0.1:39720 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:20:52.158 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50982 10 6452 1 2025-11-09 10:21:00.606 00:00:10.364 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:17:54.772 00:05:03.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 10:21:52.365 00:00:10.845 TCP 1.101.0.1:3000 -> 22.102.0.1:53566 10 6452 1 2025-11-09 10:22:01.014 00:00:10.326 TCP 23.104.0.1:56012 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:18:54.774 00:05:03.297 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 10:22:53.246 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51708 10 6452 1 2025-11-09 10:23:01.384 00:00:10.365 TCP 23.104.0.1:53232 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:23:53.473 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55080 10 6452 1 2025-11-09 10:24:01.790 00:00:10.321 TCP 23.104.0.1:49840 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:24:56.745 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 10:24:56.625 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:24:53.692 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52246 10 6452 1 2025-11-09 10:25:02.148 00:00:10.370 TCP 23.104.0.1:55568 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:25:53.916 00:00:10.573 TCP 1.101.0.1:3000 -> 22.102.0.1:44146 10 6452 1 2025-11-09 10:26:02.551 00:00:10.370 TCP 23.104.0.1:51400 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:26:54.532 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50716 10 6452 1 2025-11-09 10:27:02.955 00:00:10.367 TCP 23.104.0.1:42026 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:23:54.774 00:05:03.302 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 10:27:54.755 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42842 10 6452 1 2025-11-09 10:28:03.364 00:00:10.363 TCP 23.104.0.1:35548 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:24:54.777 00:05:03.296 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 10:28:54.982 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:38008 10 6452 1 2025-11-09 10:29:03.767 00:00:10.374 TCP 23.104.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:29:56.863 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:29:56.688 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 10:29:55.235 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52640 10 6452 1 2025-11-09 10:30:04.178 00:00:10.359 TCP 23.104.0.1:45782 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:30:55.451 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42932 10 6452 1 2025-11-09 10:31:04.579 00:00:10.375 TCP 23.104.0.1:39244 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:31:55.672 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48394 10 6452 1 2025-11-09 10:32:04.996 00:00:10.362 TCP 23.104.0.1:34528 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:32:55.841 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43788 10 6452 1 2025-11-09 10:33:05.400 00:00:10.359 TCP 23.104.0.1:36922 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:29:54.778 00:05:03.298 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 10:33:56.072 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53088 10 6452 1 2025-11-09 10:34:05.799 00:00:10.332 TCP 23.104.0.1:38866 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:34:56.939 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:34:56.897 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 10:30:54.781 00:05:03.293 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 10:34:56.284 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43176 10 6452 1 2025-11-09 10:35:06.169 00:00:10.324 TCP 23.104.0.1:34342 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:35:56.498 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47738 10 6452 1 2025-11-09 10:36:06.529 00:00:10.321 TCP 23.104.0.1:50870 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:36:56.725 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42972 10 6452 1 2025-11-09 10:37:06.892 00:00:10.433 TCP 23.104.0.1:60138 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:37:56.932 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:59918 12 10375 1 2025-11-09 10:38:07.367 00:00:10.435 TCP 23.104.0.1:33016 -> 1.101.0.1:3000 15 1926 1 2025-11-09 10:38:57.213 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37394 10 6452 1 2025-11-09 10:39:07.840 00:00:10.346 TCP 23.104.0.1:50494 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:39:56.990 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:39:57.435 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 10:35:54.780 00:05:03.299 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 10:39:57.432 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42008 10 6452 1 2025-11-09 10:40:08.219 00:00:10.370 TCP 23.104.0.1:45342 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:36:54.783 00:05:03.294 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 10:40:57.663 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:55898 10 6452 1 2025-11-09 10:41:08.626 00:00:10.365 TCP 23.104.0.1:60714 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:41:57.916 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60194 10 6452 1 2025-11-09 10:42:09.027 00:00:10.323 TCP 23.104.0.1:37080 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:42:58.137 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44082 10 6452 1 2025-11-09 10:43:09.393 00:00:10.364 TCP 23.104.0.1:47782 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:43:58.354 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44210 10 6452 1 2025-11-09 10:44:09.793 00:00:10.365 TCP 23.104.0.1:57940 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:44:57.099 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 10:44:57.193 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:44:58.580 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42652 10 6452 1 2025-11-09 10:45:10.193 00:00:10.361 TCP 23.104.0.1:43490 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:41:54.783 00:05:03.313 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 10:45:58.815 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46944 10 6452 1 2025-11-09 10:46:10.592 00:00:10.323 TCP 23.104.0.1:44082 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:42:54.785 00:05:03.308 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 10:46:59.044 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38666 10 6452 1 2025-11-09 10:47:10.951 00:00:10.418 TCP 23.104.0.1:49626 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:47:59.262 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33840 10 6452 1 2025-11-09 10:48:11.415 00:00:10.879 TCP 23.104.0.1:55152 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:48:59.471 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55344 10 6452 1 2025-11-09 10:49:12.325 00:00:10.327 TCP 23.104.0.1:49082 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:49:57.247 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 10:49:57.287 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:49:59.692 00:00:10.801 TCP 1.101.0.1:3000 -> 22.102.0.1:35622 10 6452 1 2025-11-09 10:50:12.691 00:00:10.365 TCP 23.104.0.1:51918 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:51:00.528 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54224 10 6452 1 2025-11-09 10:51:13.104 00:00:10.372 TCP 23.104.0.1:37776 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:47:54.782 00:05:03.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 10:52:00.747 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38268 10 6452 1 2025-11-09 10:52:13.510 00:00:10.324 TCP 23.104.0.1:36634 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:48:54.786 00:05:03.309 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 10:53:00.967 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44302 10 6452 1 2025-11-09 10:53:13.874 00:00:10.322 TCP 23.104.0.1:55132 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:54:01.192 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54164 10 6452 1 2025-11-09 10:54:14.235 00:00:10.360 TCP 23.104.0.1:33314 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:54:57.207 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 10:54:57.167 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 10:55:01.409 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46788 10 6452 1 2025-11-09 10:55:14.633 00:00:10.368 TCP 23.104.0.1:60456 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:56:01.621 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37310 10 6452 1 2025-11-09 10:56:15.049 00:00:10.325 TCP 23.104.0.1:53040 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:57:01.838 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43180 10 6452 1 2025-11-09 10:57:15.412 00:00:10.363 TCP 23.104.0.1:43670 -> 1.101.0.1:3000 11 1507 1 2025-11-09 10:53:54.784 00:05:03.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 10:58:02.070 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59510 10 6452 1 2025-11-09 10:58:15.821 00:00:10.361 TCP 23.104.0.1:58132 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1046, avg pps: 0, avg bpp: 318 Time window: 2025-11-09 09:54:54 - 2025-11-09 10:58:58 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0041s User: 0.0010s Wall: 0.0049s flows/second: 33765.3 Runtime: 0.0049s