Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 14:59:28.755 00:00:13.324 TCP 1.101.0.1:3000 -> 22.102.0.1:45854 10 6452 1 2025-11-14 14:59:20.033 00:00:22.027 TCP 23.104.0.1:48776 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:00:32.128 00:00:10.359 TCP 23.104.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:00:32.134 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38298 10 6452 1 2025-11-14 15:01:32.355 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44538 10 6452 1 2025-11-14 15:01:32.528 00:00:10.375 TCP 23.104.0.1:56052 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:02:26.696 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 15:02:26.833 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 15:02:32.944 00:00:10.373 TCP 23.104.0.1:40740 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:02:32.577 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38674 10 6452 1 2025-11-14 15:03:33.357 00:00:10.327 TCP 23.104.0.1:35588 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:03:32.795 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:54510 10 6452 1 2025-11-14 14:59:57.097 00:05:04.450 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 14:59:57.095 00:05:04.454 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 15:04:33.718 00:00:10.382 TCP 23.104.0.1:46796 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:04:32.974 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58962 10 6452 1 2025-11-14 15:05:34.135 00:00:10.324 TCP 23.104.0.1:48532 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:05:33.208 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:41524 10 6452 1 2025-11-14 15:06:34.490 00:00:10.365 TCP 23.104.0.1:59962 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:06:33.411 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37404 10 6452 1 2025-11-14 15:07:26.920 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 15:07:27.005 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 15:07:33.628 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53570 10 6452 1 2025-11-14 15:07:34.897 00:00:10.377 TCP 23.104.0.1:48418 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:08:35.314 00:00:10.363 TCP 23.104.0.1:33636 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:08:33.849 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35794 10 6452 1 2025-11-14 15:09:35.718 00:00:10.368 TCP 23.104.0.1:40346 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:09:34.079 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51396 10 6452 1 2025-11-14 15:05:57.097 00:05:04.459 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 15:05:57.098 00:05:04.454 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 15:10:34.304 00:00:10.630 TCP 1.101.0.1:3000 -> 22.102.0.1:43410 10 6452 1 2025-11-14 15:10:36.138 00:00:10.363 TCP 23.104.0.1:42654 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:11:34.974 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:43012 10 6452 1 2025-11-14 15:11:36.543 00:00:10.526 TCP 23.104.0.1:36996 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:12:26.886 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 15:12:26.744 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 15:12:35.221 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44430 10 6452 1 2025-11-14 15:12:37.113 00:00:10.369 TCP 23.104.0.1:41394 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:13:35.396 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53226 10 6452 1 2025-11-14 15:13:37.516 00:00:10.366 TCP 23.104.0.1:41268 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:14:35.617 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49844 10 6452 1 2025-11-14 15:14:37.923 00:00:10.388 TCP 23.104.0.1:55488 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:15:35.826 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55456 10 6452 1 2025-11-14 15:15:38.347 00:00:10.360 TCP 23.104.0.1:54666 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:11:57.099 00:05:04.456 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 15:11:57.096 00:05:04.461 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 15:16:36.079 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58600 10 6452 1 2025-11-14 15:16:38.749 00:00:10.373 TCP 23.104.0.1:51116 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:17:26.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 15:17:26.989 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 15:17:36.295 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:40884 10 6452 1 2025-11-14 15:17:39.159 00:00:10.363 TCP 23.104.0.1:47434 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:18:36.537 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46194 10 6452 1 2025-11-14 15:18:39.560 00:00:10.358 TCP 23.104.0.1:46328 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:19:36.712 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51596 10 6452 1 2025-11-14 15:19:39.958 00:00:10.373 TCP 23.104.0.1:36708 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:20:36.923 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50250 10 6452 1 2025-11-14 15:20:40.370 00:00:10.368 TCP 23.104.0.1:33960 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:21:40.777 00:00:10.326 TCP 23.104.0.1:44762 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:21:37.150 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51136 10 6452 1 2025-11-14 15:17:57.098 00:05:04.461 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 15:17:57.100 00:05:04.456 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 15:22:26.990 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 15:22:27.260 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 15:22:41.142 00:00:10.363 TCP 23.104.0.1:48340 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:22:37.320 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56214 10 6452 1 2025-11-14 15:23:37.525 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:44254 10 6452 1 2025-11-14 15:23:41.545 00:00:10.358 TCP 23.104.0.1:47276 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:24:37.706 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57478 10 6452 1 2025-11-14 15:24:41.943 00:00:10.371 TCP 23.104.0.1:59744 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:25:37.925 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51634 10 6452 1 2025-11-14 15:25:42.353 00:00:10.363 TCP 23.104.0.1:35846 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:26:38.134 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58408 10 6452 1 2025-11-14 15:26:42.764 00:00:10.375 TCP 23.104.0.1:49380 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:27:27.736 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 15:27:27.767 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 15:27:38.342 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53080 10 6452 1 2025-11-14 15:27:43.174 00:00:10.366 TCP 23.104.0.1:57614 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:23:57.101 00:05:04.456 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 15:23:57.099 00:05:04.462 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 15:28:38.567 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36828 10 6452 1 2025-11-14 15:28:43.581 00:00:10.367 TCP 23.104.0.1:44240 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:29:38.779 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52502 10 6452 1 2025-11-14 15:29:43.996 00:00:10.367 TCP 23.104.0.1:40722 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:30:38.990 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51674 10 6452 1 2025-11-14 15:30:44.398 00:00:10.364 TCP 23.104.0.1:49708 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:31:39.219 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59302 10 6452 1 2025-11-14 15:31:44.803 00:00:10.367 TCP 23.104.0.1:50914 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:32:27.501 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 15:32:27.506 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 15:32:39.428 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:33998 12 6544 1 2025-11-14 15:32:45.209 00:00:10.324 TCP 23.104.0.1:42658 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:33:45.570 00:00:10.484 TCP 23.104.0.1:36240 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:33:39.692 00:00:16.264 TCP 1.101.0.1:3000 -> 22.102.0.1:53262 10 6452 1 2025-11-14 15:29:57.101 00:05:04.461 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 15:29:57.103 00:05:04.456 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 15:34:46.005 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52206 10 6452 1 2025-11-14 15:34:46.123 00:00:10.360 TCP 23.104.0.1:47000 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:35:46.221 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42182 10 6452 1 2025-11-14 15:35:46.524 00:00:10.323 TCP 23.104.0.1:54522 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:36:46.437 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52364 10 6452 1 2025-11-14 15:36:46.886 00:00:10.325 TCP 23.104.0.1:46400 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:37:27.588 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 15:37:27.709 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 15:37:46.653 00:00:10.431 TCP 1.101.0.1:3000 -> 22.102.0.1:41542 10 6452 1 2025-11-14 15:37:47.251 00:00:10.323 TCP 23.104.0.1:59818 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:38:47.125 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48434 10 6452 1 2025-11-14 15:38:47.614 00:00:10.367 TCP 23.104.0.1:47570 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:35:57.105 00:05:04.458 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 15:39:48.016 00:00:10.365 TCP 23.104.0.1:52416 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:39:47.344 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46786 10 6452 1 2025-11-14 15:35:57.103 00:05:04.463 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 15:40:47.559 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42694 10 6452 1 2025-11-14 15:40:48.421 00:00:10.363 TCP 23.104.0.1:53428 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:41:48.824 00:00:10.322 TCP 23.104.0.1:60798 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:41:47.773 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:46354 10 6452 1 2025-11-14 15:42:27.599 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 15:42:27.606 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 15:42:49.186 00:00:10.365 TCP 23.104.0.1:50288 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:42:47.958 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50930 10 6452 1 2025-11-14 15:43:49.586 00:00:10.363 TCP 23.104.0.1:34570 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:43:48.182 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40274 10 6452 1 2025-11-14 15:44:49.992 00:00:10.367 TCP 23.104.0.1:45456 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:44:48.402 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49154 10 6452 1 2025-11-14 15:45:50.402 00:00:10.523 TCP 23.104.0.1:34960 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:45:48.624 00:00:10.758 TCP 1.101.0.1:3000 -> 22.102.0.1:41286 10 6452 1 2025-11-14 15:41:57.102 00:05:04.464 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 15:41:57.107 00:05:04.458 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 15:46:50.967 00:00:10.360 TCP 23.104.0.1:34722 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:46:49.422 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50350 10 6452 1 2025-11-14 15:47:27.410 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 15:47:27.522 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 15:47:49.646 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48814 10 6452 1 2025-11-14 15:47:51.374 00:00:10.361 TCP 23.104.0.1:33542 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:48:49.816 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35818 10 6452 1 2025-11-14 15:48:51.781 00:00:10.376 TCP 23.104.0.1:54708 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:49:50.042 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39136 10 6452 1 2025-11-14 15:49:52.190 00:00:10.366 TCP 23.104.0.1:50748 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:50:50.263 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38388 10 6452 1 2025-11-14 15:50:52.596 00:00:10.366 TCP 23.104.0.1:52818 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:47:57.105 00:05:04.464 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 15:51:50.481 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53912 10 6452 1 2025-11-14 15:47:57.106 00:05:04.459 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 15:51:53.002 00:00:10.331 TCP 23.104.0.1:43168 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:52:27.587 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 15:52:27.825 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 15:52:50.663 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58564 10 6452 1 2025-11-14 15:52:53.377 00:00:10.391 TCP 23.104.0.1:50642 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:53:50.879 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55486 10 6452 1 2025-11-14 15:53:53.817 00:00:10.502 TCP 23.104.0.1:50754 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:54:51.084 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36392 10 6452 1 2025-11-14 15:54:54.358 00:00:10.363 TCP 23.104.0.1:47598 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:55:51.294 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60100 10 6452 1 2025-11-14 15:55:54.758 00:00:10.616 TCP 23.104.0.1:59348 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:56:51.506 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58678 10 6452 1 2025-11-14 15:56:55.412 00:00:10.328 TCP 23.104.0.1:58964 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:57:27.835 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 15:57:27.851 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 15:53:57.108 00:05:04.460 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 15:57:55.779 00:00:10.364 TCP 23.104.0.1:33222 -> 1.101.0.1:3000 11 1507 1 2025-11-14 15:57:51.679 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34896 10 6452 1 2025-11-14 15:53:57.105 00:05:04.465 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 162, total bytes: 490481, total packets: 1553, avg bps: 1095, avg pps: 0, avg bpp: 315 Time window: 2025-11-14 14:59:20 - 2025-11-14 15:59:01 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0044s User: 0.0011s Wall: 0.0015s flows/second: 105133.4 Runtime: 0.0016s