Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 04:58:52.466 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47082 10 6452 1 2025-11-14 04:59:23.930 00:00:10.384 TCP 23.104.0.1:44062 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:59:52.649 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56082 10 6452 1 2025-11-14 05:00:24.353 00:00:10.366 TCP 23.104.0.1:54546 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:00:52.859 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33236 10 6452 1 2025-11-14 05:01:24.760 00:00:10.379 TCP 23.104.0.1:55422 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:01:53.085 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43958 10 6452 1 2025-11-14 05:02:14.670 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 05:02:14.633 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 05:02:25.178 00:00:10.365 TCP 23.104.0.1:50838 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:02:53.308 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40778 10 6452 1 2025-11-14 05:03:25.590 00:00:10.364 TCP 23.104.0.1:46398 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:59:56.858 00:05:04.409 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 05:03:53.531 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:49602 10 6452 1 2025-11-14 04:59:56.861 00:05:04.404 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 05:04:25.994 00:00:10.323 TCP 23.104.0.1:60472 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:04:53.715 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45818 10 6452 1 2025-11-14 05:05:26.363 00:00:10.323 TCP 23.104.0.1:37208 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:05:53.926 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:59302 10 6452 1 2025-11-14 05:06:26.727 00:00:10.328 TCP 23.104.0.1:43936 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:06:54.118 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41866 10 6452 1 2025-11-14 05:07:14.694 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 05:07:14.832 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 05:07:27.111 00:00:10.367 TCP 23.104.0.1:58124 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:07:54.331 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57246 10 6452 1 2025-11-14 05:08:27.519 00:00:10.319 TCP 23.104.0.1:42970 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:08:54.553 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:44614 10 6452 1 2025-11-14 05:09:27.877 00:00:10.363 TCP 23.104.0.1:47090 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:05:56.863 00:05:04.405 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 05:09:54.736 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46044 10 6452 1 2025-11-14 05:05:56.861 00:05:04.410 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 05:10:28.281 00:00:10.364 TCP 23.104.0.1:45362 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:10:54.960 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:52822 12 6556 1 2025-11-14 05:11:28.690 00:00:10.369 TCP 23.104.0.1:53942 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:11:55.200 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54840 10 6452 1 2025-11-14 05:12:14.959 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 05:12:14.874 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 05:12:29.099 00:00:10.361 TCP 23.104.0.1:60252 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:12:55.429 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56986 10 6452 1 2025-11-14 05:13:29.497 00:00:10.364 TCP 23.104.0.1:42130 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:13:55.643 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40820 10 6452 1 2025-11-14 05:14:29.900 00:00:10.370 TCP 23.104.0.1:51010 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:14:55.859 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60628 10 6452 1 2025-11-14 05:15:30.309 00:00:10.361 TCP 23.104.0.1:46044 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:11:56.865 00:05:04.411 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 05:15:56.082 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46028 10 6452 1 2025-11-14 05:11:56.867 00:05:04.405 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 05:16:30.710 00:00:10.340 TCP 23.104.0.1:34496 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:16:56.254 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34260 10 6452 1 2025-11-14 05:17:14.907 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 05:17:14.826 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 05:17:31.103 00:00:10.366 TCP 23.104.0.1:59922 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:17:56.426 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49522 10 6452 1 2025-11-14 05:18:31.515 00:00:10.372 TCP 23.104.0.1:55548 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:18:56.601 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53006 10 6452 1 2025-11-14 05:19:31.923 00:00:10.389 TCP 23.104.0.1:37604 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:19:56.775 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41790 10 6452 1 2025-11-14 05:20:32.348 00:00:10.365 TCP 23.104.0.1:42648 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:20:56.994 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:43082 10 6452 1 2025-11-14 05:21:32.750 00:00:10.386 TCP 23.104.0.1:56704 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:17:56.868 00:05:04.404 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 05:17:56.868 00:05:04.408 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 05:21:57.178 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46394 10 6452 1 2025-11-14 05:22:14.968 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 05:22:14.975 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 05:22:33.176 00:00:10.361 TCP 23.104.0.1:53720 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:22:57.396 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57534 10 6452 1 2025-11-14 05:23:33.573 00:00:10.371 TCP 23.104.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:23:57.617 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38718 10 6452 1 2025-11-14 05:24:33.987 00:00:10.368 TCP 23.104.0.1:40760 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:24:57.824 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37846 10 6452 1 2025-11-14 05:25:34.398 00:00:10.361 TCP 23.104.0.1:49442 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:25:58.048 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51768 10 6452 1 2025-11-14 05:26:34.803 00:00:10.371 TCP 23.104.0.1:47920 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:27:15.438 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 05:26:58.260 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32804 10 6452 1 2025-11-14 05:27:15.207 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 05:27:35.215 00:00:10.375 TCP 23.104.0.1:50438 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:23:56.869 00:05:04.412 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 05:23:56.871 00:05:04.407 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 05:27:58.473 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59342 10 6452 1 2025-11-14 05:28:35.629 00:00:10.329 TCP 23.104.0.1:36360 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:28:58.689 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46546 10 6452 1 2025-11-14 05:29:35.996 00:00:10.366 TCP 23.104.0.1:45234 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:29:58.899 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35120 10 6452 1 2025-11-14 05:30:36.398 00:00:10.365 TCP 23.104.0.1:40112 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:30:59.114 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50442 10 6452 1 2025-11-14 05:31:36.801 00:00:10.585 TCP 23.104.0.1:60902 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:31:59.287 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36332 10 6452 1 2025-11-14 05:32:15.144 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 05:32:15.618 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 05:32:37.433 00:00:10.326 TCP 23.104.0.1:33534 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:32:59.501 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46272 10 6452 1 2025-11-14 05:33:37.796 00:00:10.363 TCP 23.104.0.1:42382 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:29:56.872 00:05:04.407 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 05:29:56.870 00:05:04.412 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 05:33:59.716 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40784 10 6452 1 2025-11-14 05:34:38.197 00:00:10.367 TCP 23.104.0.1:43308 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:34:59.926 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:50040 10 6452 1 2025-11-14 05:35:38.602 00:00:16.033 TCP 23.104.0.1:50800 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:36:00.162 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59610 10 6452 1 2025-11-14 05:36:44.678 00:00:10.367 TCP 23.104.0.1:36060 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:37:00.373 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44496 10 6452 1 2025-11-14 05:37:15.437 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 05:37:15.420 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 05:37:45.104 00:00:10.362 TCP 23.104.0.1:43748 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:38:00.589 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54452 10 6452 1 2025-11-14 05:38:45.505 00:00:10.330 TCP 23.104.0.1:55128 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:39:00.804 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60546 10 6452 1 2025-11-14 05:39:45.878 00:00:10.365 TCP 23.104.0.1:45300 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:35:56.875 00:05:04.404 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 05:35:56.873 00:05:04.409 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 05:40:01.055 00:00:10.698 TCP 1.101.0.1:3000 -> 22.102.0.1:48480 10 6452 1 2025-11-14 05:40:46.314 00:00:10.361 TCP 23.104.0.1:44458 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:41:01.796 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36534 10 6452 1 2025-11-14 05:41:46.711 00:00:10.376 TCP 23.104.0.1:55230 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:42:15.595 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 05:42:02.017 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60104 10 6452 1 2025-11-14 05:42:15.422 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 05:42:47.126 00:00:10.321 TCP 23.104.0.1:41702 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:43:02.227 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58286 10 6452 1 2025-11-14 05:43:47.482 00:00:10.364 TCP 23.104.0.1:50644 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:44:02.444 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58142 10 6452 1 2025-11-14 05:44:47.881 00:00:10.378 TCP 23.104.0.1:36604 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:45:02.667 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33540 10 6452 1 2025-11-14 05:41:56.874 00:05:04.412 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 05:45:48.304 00:00:10.362 TCP 23.104.0.1:58266 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:41:56.877 00:05:04.406 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 05:46:02.883 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53562 10 6452 1 2025-11-14 05:46:48.702 00:00:10.577 TCP 23.104.0.1:49436 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:47:15.504 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 05:47:03.081 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48728 10 6452 1 2025-11-14 05:47:15.335 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 05:47:49.319 00:00:10.363 TCP 23.104.0.1:37138 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:48:03.297 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55452 10 6452 1 2025-11-14 05:48:49.719 00:00:10.381 TCP 23.104.0.1:40354 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:49:03.514 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44332 10 6452 1 2025-11-14 05:49:50.139 00:00:10.442 TCP 23.104.0.1:59276 -> 1.101.0.1:3000 15 1926 1 2025-11-14 05:50:03.745 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:35104 12 10375 1 2025-11-14 05:50:50.622 00:00:10.361 TCP 23.104.0.1:37080 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:51:03.993 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:35108 10 6452 1 2025-11-14 05:47:56.878 00:05:04.407 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 05:51:51.022 00:00:10.369 TCP 23.104.0.1:51594 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:47:56.875 00:05:04.413 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 05:52:15.838 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 05:52:15.816 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 05:52:04.190 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42778 10 6452 1 2025-11-14 05:52:51.430 00:00:10.377 TCP 23.104.0.1:49684 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:53:04.400 00:00:10.680 TCP 1.101.0.1:3000 -> 22.102.0.1:39240 10 6452 1 2025-11-14 05:53:51.841 00:00:10.383 TCP 23.104.0.1:42706 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:54:05.118 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42754 10 6452 1 2025-11-14 05:54:52.261 00:00:10.328 TCP 23.104.0.1:40310 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:55:05.333 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43796 10 6452 1 2025-11-14 05:55:52.627 00:00:10.374 TCP 23.104.0.1:50472 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:56:05.545 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37168 10 6452 1 2025-11-14 05:56:53.053 00:00:10.360 TCP 23.104.0.1:50968 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:57:05.764 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53012 10 6452 1 2025-11-14 05:57:15.915 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 05:57:15.823 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 05:53:56.876 00:05:04.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 05:53:56.878 00:05:04.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 05:57:53.451 00:00:10.372 TCP 23.104.0.1:44188 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:58:05.984 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:53444 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1111, avg pps: 0, avg bpp: 319 Time window: 2025-11-14 04:58:52 - 2025-11-14 05:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0049s User: 0.0010s Wall: 0.0026s flows/second: 61859.5 Runtime: 0.0027s