Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 06:58:47.865 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33842 10 6452 1 2025-11-14 06:59:23.517 00:00:10.363 TCP 23.104.0.1:44112 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:59:48.097 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48144 10 6452 1 2025-11-14 07:00:23.919 00:00:10.391 TCP 23.104.0.1:60258 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:00:48.307 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45484 10 6452 1 2025-11-14 07:01:24.350 00:00:10.322 TCP 23.104.0.1:60902 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:01:48.534 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41750 10 6452 1 2025-11-14 07:02:17.066 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 07:02:17.115 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 07:02:24.709 00:00:10.366 TCP 23.104.0.1:55588 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:02:48.755 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47380 10 6452 1 2025-11-14 07:03:25.114 00:00:10.375 TCP 23.104.0.1:56626 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:59:56.920 00:05:04.396 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 07:03:48.979 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:43126 10 6452 1 2025-11-14 06:59:56.918 00:05:04.401 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 07:04:25.523 00:00:10.324 TCP 23.104.0.1:53560 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:04:49.222 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54516 12 10369 1 2025-11-14 07:05:25.889 00:00:10.445 TCP 23.104.0.1:45408 -> 1.101.0.1:3000 15 1926 1 2025-11-14 07:05:49.430 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42750 10 6452 1 2025-11-14 07:06:26.377 00:00:10.361 TCP 23.104.0.1:34590 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:06:49.643 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:43820 10 6452 1 2025-11-14 07:07:17.003 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 07:07:17.152 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 07:07:26.770 00:00:10.376 TCP 23.104.0.1:58798 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:07:49.822 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42946 10 6452 1 2025-11-14 07:08:27.175 00:00:10.325 TCP 23.104.0.1:57596 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:08:49.992 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51202 10 6452 1 2025-11-14 07:09:27.539 00:00:10.363 TCP 23.104.0.1:42740 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:09:50.220 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48302 10 6452 1 2025-11-14 07:05:56.919 00:05:04.403 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 07:05:56.921 00:05:04.398 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 07:10:27.941 00:00:10.373 TCP 23.104.0.1:41322 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:10:50.401 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55914 10 6452 1 2025-11-14 07:11:28.356 00:00:10.370 TCP 23.104.0.1:56932 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:11:50.613 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36254 10 6452 1 2025-11-14 07:12:17.212 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 07:12:17.333 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 07:12:28.756 00:00:10.386 TCP 23.104.0.1:46092 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:12:50.835 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42268 10 6452 1 2025-11-14 07:13:29.170 00:00:10.324 TCP 23.104.0.1:54556 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:13:51.049 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44210 10 6452 1 2025-11-14 07:14:29.529 00:00:10.873 TCP 23.104.0.1:55668 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:14:51.286 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:44804 12 10369 1 2025-11-14 07:15:30.433 00:00:10.439 TCP 23.104.0.1:38470 -> 1.101.0.1:3000 15 1926 1 2025-11-14 07:15:51.551 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50584 10 6452 1 2025-11-14 07:11:56.923 00:05:04.398 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 07:11:56.921 00:05:04.402 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 07:16:30.908 00:00:10.327 TCP 23.104.0.1:41182 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:16:51.728 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:43680 10 6452 1 2025-11-14 07:17:17.290 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 07:17:17.373 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 07:17:31.275 00:00:10.363 TCP 23.104.0.1:59224 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:17:51.936 00:00:13.090 TCP 1.101.0.1:3000 -> 22.102.0.1:57628 10 6452 1 2025-11-14 07:18:31.675 00:00:10.341 TCP 23.104.0.1:52644 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:18:55.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34844 10 6452 1 2025-11-14 07:19:32.088 00:00:10.364 TCP 23.104.0.1:48134 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:19:55.295 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53570 10 6452 1 2025-11-14 07:20:32.488 00:00:10.364 TCP 23.104.0.1:59050 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:20:55.468 00:00:10.655 TCP 1.101.0.1:3000 -> 22.102.0.1:44882 10 6452 1 2025-11-14 07:21:32.890 00:00:10.337 TCP 23.104.0.1:36094 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:17:56.924 00:05:04.400 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 07:21:56.162 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:36676 10 6452 1 2025-11-14 07:17:56.927 00:05:04.395 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 07:22:17.334 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 07:22:17.582 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 07:22:33.263 00:00:10.364 TCP 23.104.0.1:54702 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:22:56.330 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54462 10 6452 1 2025-11-14 07:23:33.663 00:00:10.365 TCP 23.104.0.1:38898 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:23:56.542 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34240 10 6452 1 2025-11-14 07:24:34.095 00:00:10.363 TCP 23.104.0.1:50276 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:24:56.760 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44418 10 6452 1 2025-11-14 07:25:34.502 00:00:10.326 TCP 23.104.0.1:44470 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:25:56.971 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52750 10 6452 1 2025-11-14 07:26:34.879 00:00:10.351 TCP 23.104.0.1:58784 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:26:57.204 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45540 10 6452 1 2025-11-14 07:27:17.519 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 07:27:17.653 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 07:27:35.277 00:00:10.329 TCP 23.104.0.1:49032 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:23:56.928 00:05:04.395 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 07:23:56.927 00:05:04.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 07:27:57.423 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:50560 10 6452 1 2025-11-14 07:28:35.646 00:00:10.369 TCP 23.104.0.1:39292 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:28:57.629 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47236 10 6452 1 2025-11-14 07:29:36.055 00:00:10.398 TCP 23.104.0.1:59582 -> 1.101.0.1:3000 15 1926 1 2025-11-14 07:29:57.840 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:52838 12 10578 1 2025-11-14 07:30:36.493 00:00:10.896 TCP 23.104.0.1:44002 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:30:58.088 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45812 10 6661 1 2025-11-14 07:31:37.423 00:00:10.373 TCP 23.104.0.1:46252 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:31:58.262 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57116 10 6661 1 2025-11-14 07:32:17.866 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 07:32:17.762 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 07:32:37.828 00:00:10.393 TCP 23.104.0.1:32842 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:32:58.474 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44278 10 6661 1 2025-11-14 07:33:38.259 00:00:10.361 TCP 23.104.0.1:36286 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:29:56.928 00:05:04.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 07:29:56.931 00:05:04.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 07:33:58.647 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:47152 10 6661 1 2025-11-14 07:34:38.663 00:00:10.363 TCP 23.104.0.1:46538 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:34:58.826 00:00:13.396 TCP 1.101.0.1:3000 -> 22.102.0.1:58166 10 6661 1 2025-11-14 07:35:39.089 00:00:10.368 TCP 23.104.0.1:45308 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:36:02.286 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34380 10 6661 1 2025-11-14 07:36:39.492 00:00:10.365 TCP 23.104.0.1:41644 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:37:02.505 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53832 10 6661 1 2025-11-14 07:37:17.606 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 07:37:17.688 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 07:37:39.912 00:00:10.360 TCP 23.104.0.1:43570 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:38:02.681 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60380 10 6661 1 2025-11-14 07:38:40.331 00:00:10.378 TCP 23.104.0.1:52368 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:39:02.896 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54728 10 6661 1 2025-11-14 07:39:40.745 00:00:10.327 TCP 23.104.0.1:38638 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:35:56.935 00:05:04.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 07:35:56.932 00:05:04.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 07:40:03.126 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:47606 10 6661 1 2025-11-14 07:40:41.106 00:00:10.327 TCP 23.104.0.1:46816 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:41:03.333 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46720 10 6661 1 2025-11-14 07:41:41.484 00:00:10.329 TCP 23.104.0.1:43896 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:42:03.543 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6661 1 2025-11-14 07:42:18.006 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 07:42:18.097 00:00:00.062 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 07:42:41.851 00:00:10.382 TCP 23.104.0.1:59106 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:43:03.757 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49622 10 6661 1 2025-11-14 07:43:42.274 00:00:10.368 TCP 23.104.0.1:52170 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:44:03.923 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:54600 10 6661 1 2025-11-14 07:44:42.682 00:00:10.368 TCP 23.104.0.1:37948 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:45:04.171 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50422 10 6661 1 2025-11-14 07:45:43.111 00:00:10.369 TCP 23.104.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:41:56.934 00:05:04.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 07:41:56.936 00:05:04.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 07:46:04.390 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45906 10 6661 1 2025-11-14 07:46:43.511 00:00:11.630 TCP 23.104.0.1:48196 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:47:18.063 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 07:47:18.082 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 07:47:04.608 00:00:17.732 TCP 1.101.0.1:3000 -> 22.102.0.1:53448 10 6661 1 2025-11-14 07:47:45.184 00:00:10.370 TCP 23.104.0.1:50758 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:48:12.381 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48570 10 6661 1 2025-11-14 07:48:45.597 00:00:10.367 TCP 23.104.0.1:52762 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:49:12.612 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45152 10 6661 1 2025-11-14 07:49:46.002 00:00:10.361 TCP 23.104.0.1:45400 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:50:12.824 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57628 10 6661 1 2025-11-14 07:50:46.414 00:00:10.319 TCP 23.104.0.1:40326 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:51:13.073 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46862 10 6661 1 2025-11-14 07:51:46.771 00:00:10.369 TCP 23.104.0.1:40304 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:47:56.945 00:05:04.388 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 07:47:56.935 00:05:04.400 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 07:52:17.982 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 07:52:17.976 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 07:52:13.282 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47660 11 7231 1 2025-11-14 07:52:47.176 00:00:10.369 TCP 23.104.0.1:46088 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:53:13.532 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52776 10 6661 1 2025-11-14 07:53:47.581 00:00:10.360 TCP 23.104.0.1:35830 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:54:13.743 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55086 10 6661 1 2025-11-14 07:54:47.979 00:00:10.368 TCP 23.104.0.1:40884 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:55:13.965 00:00:10.500 TCP 1.101.0.1:3000 -> 22.102.0.1:34178 10 6661 1 2025-11-14 07:55:48.383 00:00:10.369 TCP 23.104.0.1:34164 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:56:14.505 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:42608 10 6661 1 2025-11-14 07:56:48.789 00:00:10.368 TCP 23.104.0.1:34012 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:57:18.159 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 07:57:18.162 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 07:57:14.690 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43500 10 6661 1 2025-11-14 07:57:49.194 00:00:10.323 TCP 23.104.0.1:34844 -> 1.101.0.1:3000 11 1507 1 2025-11-14 07:53:56.941 00:05:04.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 07:53:56.937 00:05:04.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 07:58:14.911 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45128 10 6661 1 Summary: total flows: 163, total bytes: 516480, total packets: 1580, avg bps: 1143, avg pps: 0, avg bpp: 326 Time window: 2025-11-14 06:58:47 - 2025-11-14 07:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0008s Wall: 0.0025s flows/second: 63924.4 Runtime: 0.0026s