Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 10:59:30.466 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39228 10 6452 1 2025-11-12 10:59:33.367 00:00:10.418 TCP 23.104.0.1:34120 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:00:30.689 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57304 10 6452 1 2025-11-12 11:00:33.824 00:00:10.364 TCP 23.104.0.1:47318 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:01:24.669 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 11:01:24.477 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 11:01:30.903 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40936 10 6452 1 2025-11-12 11:01:34.220 00:00:10.369 TCP 23.104.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:02:31.115 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52866 10 6452 1 2025-11-12 11:02:34.621 00:00:10.368 TCP 23.104.0.1:36082 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:03:31.337 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41828 10 6452 1 2025-11-12 11:03:35.029 00:00:10.371 TCP 23.104.0.1:47384 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:59:56.100 00:05:03.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 10:59:56.098 00:05:03.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 11:04:31.511 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34930 10 6452 1 2025-11-12 11:04:35.443 00:00:10.369 TCP 23.104.0.1:40314 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:05:31.733 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:34000 10 6452 1 2025-11-12 11:05:35.851 00:00:10.375 TCP 23.104.0.1:42336 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:06:24.158 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 11:06:24.186 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 11:06:36.266 00:00:10.366 TCP 23.104.0.1:45536 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:06:31.941 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:34508 10 6452 1 2025-11-12 11:07:32.188 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57820 10 6452 1 2025-11-12 11:07:36.675 00:00:10.376 TCP 23.104.0.1:45782 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:08:32.402 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58432 10 6452 1 2025-11-12 11:08:37.106 00:00:10.320 TCP 23.104.0.1:41872 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:09:32.578 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49324 10 6452 1 2025-11-12 11:09:37.461 00:00:10.365 TCP 23.104.0.1:50830 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:05:56.100 00:05:03.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 11:05:56.098 00:05:03.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 11:10:32.791 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36824 10 6452 1 2025-11-12 11:10:37.867 00:00:10.372 TCP 23.104.0.1:48394 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:11:24.453 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 11:11:24.303 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 11:11:33.009 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39622 10 6452 1 2025-11-12 11:11:38.278 00:00:10.370 TCP 23.104.0.1:59896 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:12:33.228 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58116 10 6452 1 2025-11-12 11:12:38.686 00:00:10.323 TCP 23.104.0.1:55802 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:13:33.447 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:35098 12 10375 1 2025-11-12 11:13:39.061 00:00:10.440 TCP 23.104.0.1:57500 -> 1.101.0.1:3000 15 1926 1 2025-11-12 11:14:33.692 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44194 10 6452 1 2025-11-12 11:14:39.538 00:00:10.364 TCP 23.104.0.1:40664 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:15:33.929 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:53732 10 6452 1 2025-11-12 11:11:56.102 00:05:03.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 11:15:39.944 00:00:17.841 TCP 23.104.0.1:37330 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:11:56.100 00:05:03.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 11:16:24.535 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 11:16:24.466 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 11:16:34.123 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59132 10 6452 1 2025-11-12 11:16:47.840 00:00:10.388 TCP 23.104.0.1:42720 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:17:34.335 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48736 10 6452 1 2025-11-12 11:17:48.264 00:00:10.321 TCP 23.104.0.1:34768 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:18:34.544 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43950 10 6452 1 2025-11-12 11:18:48.623 00:00:10.327 TCP 23.104.0.1:58752 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:19:34.718 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60914 10 6452 1 2025-11-12 11:19:48.999 00:00:10.365 TCP 23.104.0.1:37462 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:20:34.937 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:59446 10 6452 1 2025-11-12 11:20:49.399 00:00:10.362 TCP 23.104.0.1:44298 -> 1.101.0.1:3000 12 1559 1 2025-11-12 11:21:24.455 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 11:21:24.513 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 11:21:35.214 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:35064 10 6452 1 2025-11-12 11:21:49.798 00:00:10.330 TCP 23.104.0.1:46280 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:17:56.103 00:05:03.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 11:17:56.101 00:05:03.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 11:22:35.389 00:00:10.393 TCP 1.101.0.1:3000 -> 22.102.0.1:45876 10 6452 1 2025-11-12 11:22:50.161 00:00:11.310 TCP 23.104.0.1:57714 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:23:35.819 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36476 10 6452 1 2025-11-12 11:23:51.510 00:00:10.363 TCP 23.104.0.1:48440 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:24:36.033 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44510 10 6452 1 2025-11-12 11:24:51.911 00:00:10.361 TCP 23.104.0.1:51080 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:25:36.239 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:57482 10 6452 1 2025-11-12 11:25:52.312 00:00:10.325 TCP 23.104.0.1:56428 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:26:24.713 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 11:26:24.596 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 11:26:36.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33052 10 6452 1 2025-11-12 11:26:52.674 00:00:10.364 TCP 23.104.0.1:46336 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:27:36.639 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-11-12 11:23:56.104 00:05:03.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 11:23:56.101 00:05:03.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 11:27:53.103 00:00:10.365 TCP 23.104.0.1:45142 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:28:36.855 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:38204 12 10375 1 2025-11-12 11:28:53.507 00:00:10.441 TCP 23.104.0.1:45794 -> 1.101.0.1:3000 15 1926 1 2025-11-12 11:29:37.110 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57382 10 6452 1 2025-11-12 11:29:53.986 00:00:10.367 TCP 23.104.0.1:54576 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:30:37.326 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48812 10 6452 1 2025-11-12 11:30:54.394 00:00:10.365 TCP 23.104.0.1:37460 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:31:24.687 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 11:31:25.236 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 11:31:37.535 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52964 10 6452 1 2025-11-12 11:31:54.794 00:00:10.377 TCP 23.104.0.1:39398 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:32:37.710 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37682 10 6452 1 2025-11-12 11:32:55.227 00:00:10.371 TCP 23.104.0.1:51780 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:33:37.937 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:56560 10 6452 1 2025-11-12 11:29:56.106 00:05:03.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 11:29:56.102 00:05:03.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 11:33:55.632 00:00:10.612 TCP 23.104.0.1:59122 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:34:38.137 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41086 10 6452 1 2025-11-12 11:34:56.285 00:00:10.369 TCP 23.104.0.1:39180 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:35:38.349 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36528 10 6452 1 2025-11-12 11:35:56.693 00:00:10.365 TCP 23.104.0.1:42720 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:36:24.771 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 11:36:24.780 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 11:36:38.527 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:49042 11 6504 1 2025-11-12 11:36:57.105 00:00:10.327 TCP 23.104.0.1:53212 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:37:38.794 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47288 10 6452 1 2025-11-12 11:37:57.470 00:00:10.329 TCP 23.104.0.1:35654 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:38:39.005 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45520 10 6452 1 2025-11-12 11:38:57.842 00:00:10.392 TCP 23.104.0.1:37934 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:39:39.226 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:44876 10 6452 1 2025-11-12 11:35:56.108 00:05:03.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 11:35:56.106 00:05:03.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 11:39:58.273 00:00:10.370 TCP 23.104.0.1:56314 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:40:39.407 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51850 10 6452 1 2025-11-12 11:40:58.678 00:00:10.366 TCP 23.104.0.1:44742 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:41:24.785 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 11:41:25.002 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 11:41:39.615 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:56070 10 6452 1 2025-11-12 11:41:59.108 00:00:10.377 TCP 23.104.0.1:52216 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:42:39.809 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33956 10 6452 1 2025-11-12 11:42:59.526 00:00:10.361 TCP 23.104.0.1:51728 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:43:40.036 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40278 10 6452 1 2025-11-12 11:43:59.921 00:00:10.352 TCP 23.104.0.1:35604 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:44:40.248 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42548 10 6452 1 2025-11-12 11:45:00.315 00:00:10.373 TCP 23.104.0.1:40886 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:45:40.467 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33626 10 6452 1 2025-11-12 11:41:56.107 00:05:03.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 11:41:56.110 00:05:03.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 11:46:00.723 00:00:10.375 TCP 23.104.0.1:46232 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:46:25.012 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 11:46:25.225 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 11:46:40.682 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33166 10 6452 1 2025-11-12 11:47:01.136 00:00:10.368 TCP 23.104.0.1:60680 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:47:40.895 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48340 10 6452 1 2025-11-12 11:48:01.543 00:00:10.362 TCP 23.104.0.1:40376 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:48:41.114 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45352 10 6452 1 2025-11-12 11:49:01.945 00:00:10.374 TCP 23.104.0.1:36762 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:49:41.327 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47320 10 6452 1 2025-11-12 11:50:02.359 00:00:10.367 TCP 23.104.0.1:46542 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:50:41.542 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38300 10 6452 1 2025-11-12 11:51:02.766 00:00:10.338 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:51:25.305 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 11:51:25.374 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 11:51:41.758 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37100 10 6452 1 2025-11-12 11:47:56.111 00:05:03.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 11:47:56.108 00:05:03.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 11:52:03.140 00:00:10.326 TCP 23.104.0.1:46222 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:52:41.979 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60872 10 6452 1 2025-11-12 11:53:03.511 00:00:10.368 TCP 23.104.0.1:48372 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:53:42.215 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:40506 11 6504 1 2025-11-12 11:54:03.916 00:00:10.384 TCP 23.104.0.1:52270 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:54:42.491 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37692 10 6452 1 2025-11-12 11:55:04.338 00:00:10.365 TCP 23.104.0.1:33348 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:55:42.708 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38582 10 6452 1 2025-11-12 11:56:04.743 00:00:10.364 TCP 23.104.0.1:46632 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:56:25.346 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 11:56:25.392 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 11:56:42.879 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56758 10 6452 1 2025-11-12 11:57:05.144 00:00:10.375 TCP 23.104.0.1:59478 -> 1.101.0.1:3000 11 1507 1 2025-11-12 11:57:43.090 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52196 10 6452 1 2025-11-12 11:53:56.114 00:05:03.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 11:53:56.112 00:05:03.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 11:58:05.557 00:00:10.369 TCP 23.104.0.1:59386 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499229, total packets: 1566, avg bps: 1118, avg pps: 0, avg bpp: 318 Time window: 2025-11-12 10:59:30 - 2025-11-12 11:58:59 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0053s User: 0.0000s Wall: 0.0024s flows/second: 66667.7 Runtime: 0.0024s