Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 09:58:57.629 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53096 10 6452 1 2025-11-14 09:59:00.695 00:00:10.370 TCP 23.104.0.1:45450 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:59:57.848 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59696 10 6452 1 2025-11-14 10:00:01.119 00:00:10.375 TCP 23.104.0.1:45488 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:00:58.075 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39430 10 6452 1 2025-11-14 10:01:01.559 00:00:10.333 TCP 23.104.0.1:53378 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:01:58.285 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39312 10 6452 1 2025-11-14 10:02:01.929 00:00:10.382 TCP 23.104.0.1:55096 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:02:20.619 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 10:02:20.541 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 10:02:58.461 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44372 10 6452 1 2025-11-14 10:03:02.351 00:00:10.334 TCP 23.104.0.1:48862 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:59:56.985 00:05:04.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 09:59:56.987 00:05:04.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 10:03:58.677 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56396 10 6452 1 2025-11-14 10:04:02.721 00:00:10.381 TCP 23.104.0.1:35366 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:04:58.892 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51134 10 6452 1 2025-11-14 10:05:03.141 00:00:10.363 TCP 23.104.0.1:32896 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:05:59.104 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38138 10 6452 1 2025-11-14 10:06:03.544 00:00:10.363 TCP 23.104.0.1:34730 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:06:59.313 00:00:11.331 TCP 1.101.0.1:3000 -> 22.102.0.1:48756 10 6452 1 2025-11-14 10:07:03.948 00:00:10.371 TCP 23.104.0.1:36884 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:07:20.889 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 10:07:20.872 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 10:08:00.685 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60744 10 6452 1 2025-11-14 10:08:04.355 00:00:10.359 TCP 23.104.0.1:40912 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:09:00.905 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56526 10 6452 1 2025-11-14 10:09:04.749 00:00:10.327 TCP 23.104.0.1:38250 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:05:56.985 00:05:04.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 10:05:56.988 00:05:04.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 10:10:01.129 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45620 10 6452 1 2025-11-14 10:10:05.114 00:00:10.363 TCP 23.104.0.1:52964 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:11:01.348 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:53126 10 6452 1 2025-11-14 10:11:05.514 00:00:10.368 TCP 23.104.0.1:39574 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:12:01.604 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:54194 10 6452 1 2025-11-14 10:12:05.918 00:00:10.394 TCP 23.104.0.1:49542 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:12:20.772 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 10:12:20.656 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 10:13:01.788 00:00:19.082 TCP 1.101.0.1:3000 -> 22.102.0.1:51274 10 6452 1 2025-11-14 10:13:06.349 00:00:14.590 TCP 23.104.0.1:37290 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:14:10.962 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:60956 10 6452 1 2025-11-14 10:14:10.998 00:00:10.322 TCP 23.104.0.1:57108 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:15:11.362 00:00:10.367 TCP 23.104.0.1:58252 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:15:11.202 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46946 10 6452 1 2025-11-14 10:11:56.987 00:05:04.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 10:11:56.991 00:05:04.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 10:16:11.428 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53552 10 6452 1 2025-11-14 10:16:11.767 00:00:10.369 TCP 23.104.0.1:45990 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:17:21.655 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 10:17:11.637 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38250 10 6452 1 2025-11-14 10:17:21.519 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 10:17:12.174 00:00:10.359 TCP 23.104.0.1:58930 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:18:12.569 00:00:10.363 TCP 23.104.0.1:36366 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:18:11.855 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39022 10 6452 1 2025-11-14 10:19:12.973 00:00:10.330 TCP 23.104.0.1:40568 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:19:12.080 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42024 10 6452 1 2025-11-14 10:20:13.338 00:00:10.364 TCP 23.104.0.1:47310 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:20:12.294 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37984 10 6452 1 2025-11-14 10:21:13.740 00:00:10.373 TCP 23.104.0.1:50094 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:21:12.509 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53492 10 6452 1 2025-11-14 10:17:56.991 00:05:04.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 10:17:56.988 00:05:04.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 10:22:21.037 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 10:22:14.153 00:00:10.326 TCP 23.104.0.1:59312 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:22:20.856 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 10:22:12.724 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40768 10 6452 1 2025-11-14 10:23:14.518 00:00:10.362 TCP 23.104.0.1:56070 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:23:12.931 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39104 10 6452 1 2025-11-14 10:24:14.917 00:00:10.330 TCP 23.104.0.1:58208 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:24:13.168 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39298 10 6452 1 2025-11-14 10:25:13.385 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:55702 12 10375 1 2025-11-14 10:25:15.285 00:00:10.444 TCP 23.104.0.1:38232 -> 1.101.0.1:3000 15 1926 1 2025-11-14 10:26:13.637 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38136 10 6452 1 2025-11-14 10:26:15.768 00:00:10.371 TCP 23.104.0.1:33872 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:27:21.262 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 10:27:21.114 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 10:27:16.178 00:00:10.374 TCP 23.104.0.1:57700 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:27:13.806 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55942 10 6452 1 2025-11-14 10:23:56.992 00:05:04.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 10:23:56.990 00:05:04.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 10:28:14.022 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49784 10 6452 1 2025-11-14 10:28:16.591 00:00:10.367 TCP 23.104.0.1:54076 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:29:14.229 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56580 10 6452 1 2025-11-14 10:29:16.994 00:00:10.369 TCP 23.104.0.1:50920 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:30:14.448 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:39804 10 6452 1 2025-11-14 10:30:17.399 00:00:10.360 TCP 23.104.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:31:14.659 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35066 10 6452 1 2025-11-14 10:31:17.795 00:00:10.370 TCP 23.104.0.1:44542 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:32:21.172 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 10:32:21.415 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 10:32:14.875 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56580 10 6452 1 2025-11-14 10:32:18.198 00:00:10.366 TCP 23.104.0.1:45272 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:33:15.099 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53204 10 6452 1 2025-11-14 10:33:18.601 00:00:10.366 TCP 23.104.0.1:57190 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:29:56.991 00:05:04.436 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 10:29:56.994 00:05:04.431 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 10:34:15.307 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59140 10 6452 1 2025-11-14 10:34:19.006 00:00:10.362 TCP 23.104.0.1:48888 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:35:15.520 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33002 10 6452 1 2025-11-14 10:35:19.408 00:00:10.370 TCP 23.104.0.1:33308 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:36:15.741 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48982 10 6452 1 2025-11-14 10:36:19.812 00:00:10.361 TCP 23.104.0.1:37140 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:37:21.376 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 10:37:21.524 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 10:37:15.957 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58478 10 6452 1 2025-11-14 10:37:20.213 00:00:10.364 TCP 23.104.0.1:37524 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:38:16.180 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34660 10 6452 1 2025-11-14 10:38:20.614 00:00:10.324 TCP 23.104.0.1:45644 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:39:16.391 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60466 10 6452 1 2025-11-14 10:39:20.977 00:00:10.365 TCP 23.104.0.1:33834 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:35:56.993 00:05:04.433 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 10:35:56.992 00:05:04.437 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 10:40:16.568 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55620 10 6452 1 2025-11-14 10:40:21.380 00:00:10.374 TCP 23.104.0.1:40730 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:41:16.792 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58300 10 6452 1 2025-11-14 10:41:21.787 00:00:10.366 TCP 23.104.0.1:47896 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:42:21.583 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 10:42:21.725 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 10:42:17.026 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60890 10 6452 1 2025-11-14 10:42:22.187 00:00:10.363 TCP 23.104.0.1:50084 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:43:17.247 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:37406 10 6452 1 2025-11-14 10:43:22.584 00:00:10.380 TCP 23.104.0.1:39494 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:44:17.446 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53932 10 6452 1 2025-11-14 10:44:22.992 00:00:10.363 TCP 23.104.0.1:36008 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:45:17.663 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49954 10 6452 1 2025-11-14 10:45:23.395 00:00:10.371 TCP 23.104.0.1:49634 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:41:56.991 00:05:04.438 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 10:41:56.995 00:05:04.433 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 10:46:17.875 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48228 10 6452 1 2025-11-14 10:46:23.814 00:00:10.373 TCP 23.104.0.1:57956 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:47:21.756 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 10:47:21.588 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 10:47:18.101 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35358 10 6452 1 2025-11-14 10:47:24.234 00:00:10.330 TCP 23.104.0.1:36902 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:48:18.308 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33088 10 6452 1 2025-11-14 10:48:24.604 00:00:10.376 TCP 23.104.0.1:47142 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:49:18.526 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37754 10 6452 1 2025-11-14 10:49:25.015 00:00:10.365 TCP 23.104.0.1:34896 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:50:18.739 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46862 10 6452 1 2025-11-14 10:50:25.424 00:00:10.382 TCP 23.104.0.1:41000 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:51:18.952 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57696 10 6452 1 2025-11-14 10:51:25.839 00:00:10.394 TCP 23.104.0.1:52052 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:47:56.995 00:05:04.437 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 10:47:56.993 00:05:04.442 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 10:52:21.702 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 10:52:21.761 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 10:52:19.175 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47366 10 6452 1 2025-11-14 10:52:26.270 00:00:10.330 TCP 23.104.0.1:46204 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:53:19.385 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36044 10 6452 1 2025-11-14 10:53:26.644 00:00:10.364 TCP 23.104.0.1:55084 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:54:19.593 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38778 10 6452 1 2025-11-14 10:54:27.054 00:00:10.369 TCP 23.104.0.1:54174 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:55:19.811 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49772 10 6452 1 2025-11-14 10:55:27.462 00:00:10.326 TCP 23.104.0.1:59056 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:56:20.026 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34696 10 6452 1 2025-11-14 10:56:27.821 00:00:10.369 TCP 23.104.0.1:37106 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:57:21.535 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 10:57:21.626 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 10:57:20.238 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46650 10 6452 1 2025-11-14 10:57:28.230 00:00:10.369 TCP 23.104.0.1:36652 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:53:56.994 00:05:04.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 10:53:56.997 00:05:04.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 10:58:20.454 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38996 10 6452 1 2025-11-14 10:58:28.632 00:00:10.366 TCP 23.104.0.1:52366 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1115, avg pps: 0, avg bpp: 318 Time window: 2025-11-14 09:58:57 - 2025-11-14 10:59:01 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0048s User: 0.0016s Wall: 0.0031s flows/second: 52496.8 Runtime: 0.0031s