Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 10:59:20.669 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59150 10 6452 1 2025-11-14 10:59:29.036 00:00:10.325 TCP 23.104.0.1:50932 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:00:20.878 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44998 10 6452 1 2025-11-14 11:00:29.397 00:00:10.364 TCP 23.104.0.1:50466 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:01:21.108 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42534 10 6452 1 2025-11-14 11:01:29.798 00:00:10.341 TCP 23.104.0.1:56374 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:02:22.019 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 11:02:22.119 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 11:02:21.335 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35260 10 6452 1 2025-11-14 11:02:30.175 00:00:10.325 TCP 23.104.0.1:38346 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:03:21.550 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:45786 10 6452 1 2025-11-14 11:03:30.539 00:00:10.961 TCP 23.104.0.1:57874 -> 1.101.0.1:3000 11 1507 1 2025-11-14 10:59:56.995 00:05:04.446 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 10:59:56.998 00:05:04.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 11:04:21.796 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34964 10 6452 1 2025-11-14 11:04:31.539 00:00:10.366 TCP 23.104.0.1:39058 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:05:22.021 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58044 10 6452 1 2025-11-14 11:05:31.943 00:00:10.369 TCP 23.104.0.1:36060 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:06:22.241 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:54768 10 6452 1 2025-11-14 11:06:32.350 00:00:11.274 TCP 23.104.0.1:49924 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:07:21.913 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 11:07:21.911 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 11:07:22.427 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60292 10 6452 1 2025-11-14 11:07:33.659 00:00:10.321 TCP 23.104.0.1:42110 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:08:22.645 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33128 10 6452 1 2025-11-14 11:08:34.015 00:00:10.370 TCP 23.104.0.1:49328 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:09:22.854 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54036 10 6452 1 2025-11-14 11:09:34.419 00:00:10.368 TCP 23.104.0.1:53612 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:05:56.996 00:05:00.005 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 686 1 2025-11-14 11:05:57.000 00:05:04.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 11:10:23.082 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42692 10 6452 1 2025-11-14 11:10:34.849 00:00:10.406 TCP 23.104.0.1:33786 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:11:23.254 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34072 10 6452 1 2025-11-14 11:11:35.343 00:00:10.368 TCP 23.104.0.1:40430 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:12:21.940 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 11:12:22.134 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 11:12:23.466 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35284 10 6452 1 2025-11-14 11:12:35.749 00:00:10.362 TCP 23.104.0.1:45490 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:13:23.675 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56256 10 6452 1 2025-11-14 11:13:36.149 00:00:10.369 TCP 23.104.0.1:60902 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:14:23.889 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56620 10 6452 1 2025-11-14 11:14:36.557 00:00:10.363 TCP 23.104.0.1:38128 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:15:24.078 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:54630 12 10375 1 2025-11-14 11:15:36.960 00:00:10.440 TCP 23.104.0.1:46808 -> 1.101.0.1:3000 15 1926 1 2025-11-14 11:11:01.442 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-11-14 11:11:57.001 00:05:04.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 11:16:24.316 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35946 10 6452 1 2025-11-14 11:16:37.441 00:00:10.325 TCP 23.104.0.1:37352 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:17:22.206 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 11:17:22.154 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 11:17:24.494 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50614 10 6452 1 2025-11-14 11:17:37.817 00:00:10.360 TCP 23.104.0.1:51252 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:18:24.707 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-11-14 11:18:38.212 00:00:10.358 TCP 23.104.0.1:32944 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:19:24.918 00:00:11.316 TCP 1.101.0.1:3000 -> 22.102.0.1:33516 10 6452 1 2025-11-14 11:19:38.611 00:00:11.163 TCP 23.104.0.1:47656 -> 1.101.0.1:3000 13 1611 1 2025-11-14 11:20:26.272 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59310 10 6452 1 2025-11-14 11:20:39.814 00:00:10.331 TCP 23.104.0.1:33408 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:21:26.499 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52834 10 6452 1 2025-11-14 11:21:40.184 00:00:10.363 TCP 23.104.0.1:43424 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:17:57.002 00:05:04.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 11:17:57.000 00:05:04.445 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 11:22:22.019 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 11:22:22.279 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 11:22:26.718 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53854 10 6452 1 2025-11-14 11:22:40.593 00:00:10.793 TCP 23.104.0.1:39698 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:23:26.900 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59520 10 6452 1 2025-11-14 11:23:41.428 00:00:10.363 TCP 23.104.0.1:57036 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:24:27.119 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57990 10 6452 1 2025-11-14 11:24:41.835 00:00:10.852 TCP 23.104.0.1:52524 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:25:27.338 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34278 10 6452 1 2025-11-14 11:25:42.726 00:00:10.373 TCP 23.104.0.1:36246 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:26:27.560 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48594 10 6452 1 2025-11-14 11:26:43.135 00:00:10.370 TCP 23.104.0.1:42880 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:27:22.171 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 11:27:22.155 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 11:27:27.777 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45694 10 6452 1 2025-11-14 11:27:43.542 00:00:10.367 TCP 23.104.0.1:40478 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:23:57.001 00:05:04.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 11:23:57.005 00:05:04.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 11:28:27.993 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:42372 10 6452 1 2025-11-14 11:28:43.949 00:00:12.009 TCP 23.104.0.1:35976 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:29:28.180 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58198 10 6452 1 2025-11-14 11:29:46.089 00:00:10.367 TCP 23.104.0.1:51902 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:30:28.395 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58732 10 6452 1 2025-11-14 11:30:46.496 00:00:10.365 TCP 23.104.0.1:51452 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:31:28.604 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37582 10 6452 1 2025-11-14 11:31:46.898 00:00:10.373 TCP 23.104.0.1:42144 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:32:22.661 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 11:32:22.385 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 11:32:28.824 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36918 10 6452 1 2025-11-14 11:32:47.315 00:00:10.361 TCP 23.104.0.1:41326 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:33:29.066 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55262 10 6452 1 2025-11-14 11:33:47.714 00:00:10.374 TCP 23.104.0.1:41468 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:29:57.005 00:05:04.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 11:29:57.004 00:05:04.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 11:34:29.281 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54320 12 6556 1 2025-11-14 11:34:48.131 00:00:15.245 TCP 23.104.0.1:34768 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:35:29.506 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59120 10 6452 1 2025-11-14 11:35:53.417 00:00:10.370 TCP 23.104.0.1:37930 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:36:29.737 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51536 10 6452 1 2025-11-14 11:36:53.825 00:00:10.363 TCP 23.104.0.1:45488 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:37:22.560 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 11:37:22.672 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 11:37:29.947 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:39370 10 6452 1 2025-11-14 11:37:54.232 00:00:10.367 TCP 23.104.0.1:50644 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:38:30.211 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59896 10 6452 1 2025-11-14 11:38:54.637 00:00:10.413 TCP 23.104.0.1:52774 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:39:30.433 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57162 10 6452 1 2025-11-14 11:35:57.034 00:05:04.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 11:39:55.103 00:00:10.363 TCP 23.104.0.1:48270 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:35:57.035 00:05:04.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 11:40:30.663 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36152 10 6452 1 2025-11-14 11:40:55.506 00:00:10.371 TCP 23.104.0.1:36954 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:41:30.881 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:33614 10 6452 1 2025-11-14 11:41:55.918 00:00:10.383 TCP 23.104.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:42:22.557 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 11:42:22.689 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 11:42:31.082 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47358 10 6452 1 2025-11-14 11:42:56.339 00:00:10.369 TCP 23.104.0.1:46596 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:43:31.299 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60932 10 6452 1 2025-11-14 11:43:56.751 00:00:10.382 TCP 23.104.0.1:48636 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:44:31.527 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47048 10 6452 1 2025-11-14 11:44:57.172 00:00:10.418 TCP 23.104.0.1:45388 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:45:31.747 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33400 10 6452 1 2025-11-14 11:41:57.041 00:05:04.406 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 11:41:57.038 00:05:04.412 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 11:45:57.623 00:00:10.368 TCP 23.104.0.1:53466 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:46:31.962 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45100 12 6556 1 2025-11-14 11:46:58.032 00:00:10.366 TCP 23.104.0.1:55838 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:47:22.953 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 11:47:22.886 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 11:47:32.190 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52740 10 6452 1 2025-11-14 11:47:58.431 00:00:10.324 TCP 23.104.0.1:51886 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:48:32.406 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41076 10 6452 1 2025-11-14 11:48:58.798 00:00:10.375 TCP 23.104.0.1:53040 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:49:32.628 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:33194 10 6452 1 2025-11-14 11:49:59.207 00:00:10.359 TCP 23.104.0.1:34210 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:50:32.948 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:57578 10 6452 1 2025-11-14 11:50:59.605 00:00:10.365 TCP 23.104.0.1:39436 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:51:33.134 00:00:10.696 TCP 1.101.0.1:3000 -> 22.102.0.1:50246 10 6452 1 2025-11-14 11:47:57.042 00:05:04.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 11:47:57.039 00:05:04.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 11:52:00.006 00:00:10.365 TCP 23.104.0.1:47996 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:52:22.539 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 11:52:22.873 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 11:52:33.869 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42396 10 6452 1 2025-11-14 11:53:00.408 00:00:10.367 TCP 23.104.0.1:57574 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:53:34.102 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49736 10 6452 1 2025-11-14 11:54:00.813 00:00:10.370 TCP 23.104.0.1:36600 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:54:34.274 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55814 10 6452 1 2025-11-14 11:55:01.220 00:00:10.333 TCP 23.104.0.1:44170 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:55:34.483 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44510 12 10375 1 2025-11-14 11:56:01.590 00:00:10.442 TCP 23.104.0.1:52196 -> 1.101.0.1:3000 15 1926 1 2025-11-14 11:56:34.691 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50498 10 6452 1 2025-11-14 11:57:02.090 00:00:10.365 TCP 23.104.0.1:41710 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:57:23.046 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 11:57:22.893 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 11:57:34.913 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51856 10 6452 1 2025-11-14 11:53:57.042 00:05:04.413 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 11:53:57.044 00:05:04.408 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 11:58:02.494 00:00:10.417 TCP 23.104.0.1:39302 -> 1.101.0.1:3000 11 1507 1 2025-11-14 11:58:35.131 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57476 10 6452 1 Summary: total flows: 163, total bytes: 505837, total packets: 1579, avg bps: 1130, avg pps: 0, avg bpp: 320 Time window: 2025-11-14 10:59:20 - 2025-11-14 11:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0048s User: 0.0010s Wall: 0.0025s flows/second: 64020.2 Runtime: 0.0026s