Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 16:58:44.078 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59682 10 6452 1 2025-11-09 16:54:54.895 00:05:03.314 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 16:58:47.720 00:00:10.368 TCP 23.104.0.1:40522 -> 1.101.0.1:3000 11 1507 1 2025-11-09 16:59:44.292 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47724 10 6452 1 2025-11-09 16:59:48.125 00:00:10.387 TCP 23.104.0.1:43712 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:00:04.659 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 17:00:04.777 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 17:00:44.502 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60088 10 6452 1 2025-11-09 17:00:48.569 00:00:10.366 TCP 23.104.0.1:44908 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:01:44.724 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43108 10 6452 1 2025-11-09 17:01:48.974 00:00:10.364 TCP 23.104.0.1:44326 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:02:44.943 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:41352 10 6452 1 2025-11-09 17:02:49.379 00:00:10.365 TCP 23.104.0.1:33678 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:03:45.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42292 10 6452 1 2025-11-09 16:59:54.895 00:05:03.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 17:03:49.779 00:00:10.366 TCP 23.104.0.1:59792 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:04:45.390 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58258 10 6452 1 2025-11-09 17:00:54.897 00:05:03.314 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 17:04:50.181 00:00:10.366 TCP 23.104.0.1:47158 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:05:04.849 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 17:05:04.802 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 17:05:45.598 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44124 10 6452 1 2025-11-09 17:05:50.589 00:00:10.368 TCP 23.104.0.1:40822 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:06:45.815 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60144 10 6452 1 2025-11-09 17:06:51.002 00:00:10.363 TCP 23.104.0.1:50624 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:07:46.048 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:43014 12 10375 1 2025-11-09 17:07:51.411 00:00:10.440 TCP 23.104.0.1:59564 -> 1.101.0.1:3000 15 1926 1 2025-11-09 17:08:46.250 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45810 10 6452 1 2025-11-09 17:08:51.891 00:00:10.376 TCP 23.104.0.1:36960 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:09:46.421 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52124 10 6452 1 2025-11-09 17:05:54.895 00:05:03.319 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 17:10:05.218 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 17:10:05.094 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 17:09:52.309 00:00:10.364 TCP 23.104.0.1:39160 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:10:46.628 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41740 10 6452 1 2025-11-09 17:06:54.898 00:05:03.316 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 17:10:52.717 00:00:10.372 TCP 23.104.0.1:42742 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:11:46.804 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:35382 10 6452 1 2025-11-09 17:11:53.127 00:00:10.364 TCP 23.104.0.1:53750 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:12:47.066 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49774 10 6452 1 2025-11-09 17:12:53.532 00:00:10.721 TCP 23.104.0.1:49476 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:13:47.284 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44466 10 6452 1 2025-11-09 17:13:54.293 00:00:10.365 TCP 23.104.0.1:45370 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:14:47.497 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:58104 10 6452 1 2025-11-09 17:15:05.030 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 17:14:54.694 00:00:10.370 TCP 23.104.0.1:38666 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:15:05.125 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 17:15:47.735 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45198 10 6452 1 2025-11-09 17:11:54.896 00:05:03.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 17:15:55.103 00:00:10.680 TCP 23.104.0.1:39624 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:16:47.916 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34398 10 6452 1 2025-11-09 17:12:54.898 00:05:03.316 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 17:16:55.825 00:00:10.352 TCP 23.104.0.1:46390 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:17:48.132 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60446 10 6452 1 2025-11-09 17:17:56.214 00:00:10.370 TCP 23.104.0.1:37824 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:18:48.356 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:54520 10 6452 1 2025-11-09 17:18:56.620 00:00:10.365 TCP 23.104.0.1:42354 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:19:48.564 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41860 10 6452 1 2025-11-09 17:20:05.275 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 17:20:05.224 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 17:19:57.023 00:00:10.364 TCP 23.104.0.1:35806 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:20:48.801 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:33472 10 6452 1 2025-11-09 17:20:57.427 00:00:10.366 TCP 23.104.0.1:57578 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:21:48.991 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36484 10 6452 1 2025-11-09 17:17:54.898 00:05:03.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 17:21:57.832 00:00:10.347 TCP 23.104.0.1:38022 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:18:54.901 00:05:03.315 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 17:22:49.232 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42338 10 6452 1 2025-11-09 17:22:58.233 00:00:10.364 TCP 23.104.0.1:32778 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:23:49.442 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51526 10 6452 1 2025-11-09 17:23:58.640 00:00:10.364 TCP 23.104.0.1:47308 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:24:49.658 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57528 10 6452 1 2025-11-09 17:25:05.271 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 17:25:05.223 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 17:24:59.058 00:00:10.319 TCP 23.104.0.1:37184 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:25:49.874 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55696 10 6452 1 2025-11-09 17:25:59.416 00:00:10.358 TCP 23.104.0.1:46692 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:26:50.073 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43400 10 6452 1 2025-11-09 17:26:59.811 00:00:10.369 TCP 23.104.0.1:34348 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:27:50.293 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42758 10 6452 1 2025-11-09 17:23:54.901 00:05:03.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 17:28:00.224 00:00:10.368 TCP 23.104.0.1:41608 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:24:54.902 00:05:03.316 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 17:28:50.506 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57858 10 6452 1 2025-11-09 17:29:00.630 00:00:10.368 TCP 23.104.0.1:39176 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:29:50.724 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56810 10 6452 1 2025-11-09 17:30:05.237 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 17:30:05.326 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 17:30:01.054 00:00:10.364 TCP 23.104.0.1:51582 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:30:50.966 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 10 6452 1 2025-11-09 17:31:01.456 00:00:10.363 TCP 23.104.0.1:43700 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:31:51.154 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:60828 10 6452 1 2025-11-09 17:32:01.859 00:00:10.331 TCP 23.104.0.1:33066 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:32:51.404 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58974 10 6452 1 2025-11-09 17:33:02.226 00:00:10.364 TCP 23.104.0.1:38896 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:33:51.623 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 10 6452 1 2025-11-09 17:29:54.901 00:05:03.319 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 17:34:02.629 00:00:10.323 TCP 23.104.0.1:44180 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:30:54.904 00:05:03.314 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 17:34:51.834 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46724 10 6452 1 2025-11-09 17:35:05.461 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 17:35:05.457 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 17:35:02.988 00:00:10.370 TCP 23.104.0.1:43808 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:35:52.076 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34468 10 6452 1 2025-11-09 17:36:03.400 00:00:10.328 TCP 23.104.0.1:36126 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:36:52.301 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51148 10 6452 1 2025-11-09 17:37:03.766 00:00:10.368 TCP 23.104.0.1:39036 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:37:52.473 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:45608 10 6452 1 2025-11-09 17:38:04.175 00:00:10.321 TCP 23.104.0.1:47582 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:38:52.713 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52876 10 6452 1 2025-11-09 17:39:04.541 00:00:10.365 TCP 23.104.0.1:56302 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:35:54.902 00:05:03.321 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 17:40:05.458 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 17:39:52.927 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55784 10 6452 1 2025-11-09 17:40:05.440 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 17:40:04.949 00:00:10.372 TCP 23.104.0.1:55190 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:36:54.906 00:05:03.315 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 17:40:53.143 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42732 10 6452 1 2025-11-09 17:41:05.361 00:00:10.360 TCP 23.104.0.1:44390 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:41:53.356 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56374 10 6452 1 2025-11-09 17:42:05.765 00:00:10.371 TCP 23.104.0.1:47276 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:42:53.528 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55828 10 6452 1 2025-11-09 17:43:06.190 00:00:10.365 TCP 23.104.0.1:38272 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:43:53.744 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55892 10 6452 1 2025-11-09 17:44:06.592 00:00:10.365 TCP 23.104.0.1:52258 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:45:05.448 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 17:44:53.959 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36642 10 6452 1 2025-11-09 17:45:05.467 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 17:45:06.993 00:00:10.367 TCP 23.104.0.1:35704 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:41:54.906 00:05:03.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 17:45:54.180 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41178 10 6452 1 2025-11-09 17:46:07.393 00:00:10.362 TCP 23.104.0.1:37152 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:42:54.908 00:05:03.315 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 17:46:54.407 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46116 10 6452 1 2025-11-09 17:47:07.795 00:00:10.370 TCP 23.104.0.1:38770 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:47:54.619 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38368 10 6452 1 2025-11-09 17:48:08.205 00:00:10.368 TCP 23.104.0.1:60418 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:48:54.833 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33438 10 6452 1 2025-11-09 17:49:08.609 00:00:10.364 TCP 23.104.0.1:36212 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:50:05.681 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 17:50:05.493 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 17:49:55.071 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33084 10 6452 1 2025-11-09 17:50:09.016 00:00:10.325 TCP 23.104.0.1:56118 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:50:55.294 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60216 10 6452 1 2025-11-09 17:51:09.382 00:00:10.374 TCP 23.104.0.1:39520 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:47:54.907 00:05:03.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 17:51:55.514 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51496 10 6452 1 2025-11-09 17:52:09.791 00:00:10.363 TCP 23.104.0.1:58300 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:48:54.909 00:05:03.315 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 17:52:55.738 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51772 10 6452 1 2025-11-09 17:53:10.195 00:00:10.366 TCP 23.104.0.1:50560 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:53:55.957 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:40000 12 6556 1 2025-11-09 17:54:10.600 00:00:10.365 TCP 23.104.0.1:33206 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:54:56.210 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49474 10 6452 1 2025-11-09 17:55:05.722 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 17:55:05.733 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 17:55:11.004 00:00:10.360 TCP 23.104.0.1:45762 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:55:56.425 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:58164 10 6452 1 2025-11-09 17:56:11.401 00:00:10.329 TCP 23.104.0.1:37542 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:56:56.617 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48472 10 6452 1 2025-11-09 17:57:11.768 00:00:10.331 TCP 23.104.0.1:50444 -> 1.101.0.1:3000 11 1507 1 2025-11-09 17:53:54.906 00:05:03.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 17:57:56.826 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:43108 11 6504 1 2025-11-09 17:58:12.139 00:00:11.036 TCP 23.104.0.1:44196 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502846, total packets: 1581, avg bps: 1046, avg pps: 0, avg bpp: 318 Time window: 2025-11-09 16:54:54 - 2025-11-09 17:58:58 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0028s Wall: 0.0075s flows/second: 21984.3 Runtime: 0.0075s