Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 16:59:11.863 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44038 10 6452 1 2025-11-14 16:59:31.416 00:00:10.363 TCP 23.104.0.1:54594 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:00:12.089 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50248 10 6452 1 2025-11-14 17:00:31.819 00:00:10.367 TCP 23.104.0.1:41906 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:01:12.302 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60238 10 6452 1 2025-11-14 17:01:32.219 00:00:10.361 TCP 23.104.0.1:46408 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:02:12.524 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35394 10 6452 1 2025-11-14 17:02:29.260 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 17:02:29.251 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 17:02:32.622 00:00:10.361 TCP 23.104.0.1:59472 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:03:12.736 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50658 10 6452 1 2025-11-14 17:03:33.024 00:00:10.364 TCP 23.104.0.1:59074 -> 1.101.0.1:3000 11 1507 1 2025-11-14 16:59:57.123 00:05:04.462 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 16:59:57.121 00:05:04.466 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 17:04:12.949 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60366 10 6452 1 2025-11-14 17:04:33.428 00:00:10.321 TCP 23.104.0.1:40024 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:05:13.176 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41060 10 6452 1 2025-11-14 17:05:33.787 00:00:10.434 TCP 23.104.0.1:59476 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:06:13.385 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58272 10 6452 1 2025-11-14 17:06:34.260 00:00:10.325 TCP 23.104.0.1:35086 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:07:13.558 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52190 10 6452 1 2025-11-14 17:07:29.274 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 17:07:29.074 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 17:07:34.624 00:00:11.093 TCP 23.104.0.1:36760 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:08:13.771 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57374 10 6452 1 2025-11-14 17:08:35.755 00:00:10.386 TCP 23.104.0.1:48332 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:09:13.989 00:00:11.206 TCP 1.101.0.1:3000 -> 22.102.0.1:58540 10 6452 1 2025-11-14 17:09:36.180 00:00:10.389 TCP 23.104.0.1:42364 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:05:57.122 00:05:04.466 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 17:05:57.125 00:05:04.461 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 17:10:15.234 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39026 10 6452 1 2025-11-14 17:10:36.592 00:00:10.368 TCP 23.104.0.1:48990 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:11:15.451 00:00:20.462 TCP 1.101.0.1:3000 -> 22.102.0.1:41442 10 6452 1 2025-11-14 17:11:36.997 00:00:10.755 TCP 23.104.0.1:59734 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:12:29.409 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 17:12:29.339 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 17:12:25.946 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37422 10 6452 1 2025-11-14 17:12:37.792 00:00:10.352 TCP 23.104.0.1:48058 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:13:26.177 00:00:10.830 TCP 1.101.0.1:3000 -> 22.102.0.1:35004 10 6452 1 2025-11-14 17:13:38.186 00:00:10.363 TCP 23.104.0.1:40816 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:14:27.067 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41050 10 6452 1 2025-11-14 17:14:38.588 00:00:10.367 TCP 23.104.0.1:59054 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:15:27.278 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:36426 10 6452 1 2025-11-14 17:15:39.001 00:00:10.369 TCP 23.104.0.1:33044 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:11:57.128 00:05:04.468 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 17:11:57.125 00:05:04.473 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 17:16:27.445 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45426 10 6452 1 2025-11-14 17:16:39.411 00:00:10.480 TCP 23.104.0.1:44626 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:17:29.301 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 17:17:29.512 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 17:17:27.659 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:32968 10 6452 1 2025-11-14 17:17:39.936 00:00:10.391 TCP 23.104.0.1:40574 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:18:27.870 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:36100 10 6452 1 2025-11-14 17:18:40.364 00:00:10.370 TCP 23.104.0.1:45328 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:19:28.103 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49970 10 6452 1 2025-11-14 17:19:40.772 00:00:10.328 TCP 23.104.0.1:53032 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:20:28.337 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39006 10 6452 1 2025-11-14 17:20:41.140 00:00:10.372 TCP 23.104.0.1:38674 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:21:28.555 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47630 10 6452 1 2025-11-14 17:21:41.553 00:00:10.376 TCP 23.104.0.1:51420 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:17:57.130 00:05:04.470 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 17:17:57.126 00:05:04.475 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 17:22:29.587 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 17:22:29.519 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 17:22:28.767 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48992 10 6452 1 2025-11-14 17:22:41.966 00:00:10.374 TCP 23.104.0.1:44598 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:23:28.979 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:42398 10 6452 1 2025-11-14 17:23:42.380 00:00:10.359 TCP 23.104.0.1:43148 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:24:29.178 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34870 10 6452 1 2025-11-14 17:24:42.779 00:00:10.331 TCP 23.104.0.1:46270 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:25:29.391 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:46922 10 6452 1 2025-11-14 17:25:43.152 00:00:10.368 TCP 23.104.0.1:48174 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:26:29.571 00:00:10.645 TCP 1.101.0.1:3000 -> 22.102.0.1:32890 10 6452 1 2025-11-14 17:26:43.560 00:00:10.323 TCP 23.104.0.1:47054 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:27:29.644 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 17:27:29.554 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 17:27:30.253 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38566 10 6452 1 2025-11-14 17:27:43.922 00:00:10.390 TCP 23.104.0.1:58574 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:23:57.126 00:05:04.480 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 17:23:57.129 00:05:04.475 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 17:28:30.475 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38610 10 6452 1 2025-11-14 17:28:44.350 00:00:10.321 TCP 23.104.0.1:40160 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:29:30.696 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55758 10 6452 1 2025-11-14 17:29:44.707 00:00:10.362 TCP 23.104.0.1:38130 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:30:30.870 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39586 10 6452 1 2025-11-14 17:30:45.110 00:00:10.360 TCP 23.104.0.1:42834 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:31:31.098 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34504 10 6452 1 2025-11-14 17:31:45.510 00:00:10.364 TCP 23.104.0.1:43208 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:32:29.863 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 17:32:29.657 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 17:32:31.317 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52912 10 6452 1 2025-11-14 17:32:45.915 00:00:10.363 TCP 23.104.0.1:37368 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:33:31.536 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36552 10 6452 1 2025-11-14 17:33:46.314 00:00:10.364 TCP 23.104.0.1:37068 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:29:57.130 00:05:04.476 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 17:29:57.128 00:05:04.481 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 17:34:31.763 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41690 10 6452 1 2025-11-14 17:34:46.719 00:00:10.322 TCP 23.104.0.1:60184 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:35:31.982 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:56444 10 6452 1 2025-11-14 17:35:47.103 00:00:10.364 TCP 23.104.0.1:49414 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:36:32.259 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43772 10 6452 1 2025-11-14 17:36:47.506 00:00:10.366 TCP 23.104.0.1:42836 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:37:29.917 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 17:37:29.882 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 17:37:32.500 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52322 10 6452 1 2025-11-14 17:37:47.907 00:00:10.363 TCP 23.104.0.1:54632 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:38:32.676 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52692 10 6452 1 2025-11-14 17:38:48.306 00:00:10.365 TCP 23.104.0.1:42266 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:39:32.890 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58328 10 6452 1 2025-11-14 17:39:48.706 00:00:10.372 TCP 23.104.0.1:35016 -> 1.101.0.1:3000 12 1559 1 2025-11-14 17:35:57.131 00:05:04.479 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 17:35:57.133 00:05:04.473 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 17:40:33.112 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57174 10 6452 1 2025-11-14 17:40:49.113 00:00:10.364 TCP 23.104.0.1:52980 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:41:33.323 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43998 10 6452 1 2025-11-14 17:41:49.516 00:00:10.360 TCP 23.104.0.1:36688 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:42:29.787 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 17:42:29.897 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 17:42:33.537 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58870 10 6452 1 2025-11-14 17:42:49.910 00:00:22.625 TCP 23.104.0.1:35528 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:43:33.749 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34912 10 6452 1 2025-11-14 17:44:02.571 00:00:10.988 TCP 23.104.0.1:32880 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:44:33.963 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42886 12 6556 1 2025-11-14 17:45:03.595 00:00:10.484 TCP 23.104.0.1:45340 -> 1.101.0.1:3000 12 1559 1 2025-11-14 17:45:34.197 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53554 10 6452 1 2025-11-14 17:41:57.135 00:05:04.481 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 17:41:57.131 00:05:04.487 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 17:46:04.116 00:00:10.367 TCP 23.104.0.1:40834 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:46:34.367 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51422 10 6452 1 2025-11-14 17:47:04.523 00:00:10.364 TCP 23.104.0.1:60408 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:47:30.052 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 17:47:29.912 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 17:47:34.537 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36410 10 6452 1 2025-11-14 17:48:04.929 00:00:10.390 TCP 23.104.0.1:38170 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:48:34.755 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41860 10 6452 1 2025-11-14 17:49:05.362 00:00:10.381 TCP 23.104.0.1:56664 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:49:34.993 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:52530 10 6452 1 2025-11-14 17:50:05.781 00:00:10.444 TCP 23.104.0.1:59646 -> 1.101.0.1:3000 15 1926 1 2025-11-14 17:50:35.179 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:43244 12 10369 1 2025-11-14 17:51:06.263 00:00:10.323 TCP 23.104.0.1:37640 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:51:35.423 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35448 10 6452 1 2025-11-14 17:47:57.134 00:05:04.485 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 17:47:57.136 00:05:04.480 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 17:52:06.627 00:00:10.366 TCP 23.104.0.1:34112 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:52:30.054 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 17:52:30.201 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 17:52:35.635 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59780 10 6452 1 2025-11-14 17:53:07.034 00:00:10.366 TCP 23.104.0.1:41438 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:53:35.851 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40384 10 6452 1 2025-11-14 17:54:07.435 00:00:10.321 TCP 23.104.0.1:56244 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:54:36.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42082 10 6452 1 2025-11-14 17:55:07.791 00:00:10.440 TCP 23.104.0.1:47902 -> 1.101.0.1:3000 15 1926 1 2025-11-14 17:55:36.298 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 12 10375 1 2025-11-14 17:56:08.274 00:00:10.366 TCP 23.104.0.1:56200 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:56:36.538 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32920 10 6452 1 2025-11-14 17:57:08.676 00:00:10.364 TCP 23.104.0.1:52682 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:57:30.164 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 17:57:30.204 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 17:57:36.751 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46092 10 6452 1 2025-11-14 17:53:57.146 00:05:04.471 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 17:53:57.143 00:05:04.476 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 17:58:09.108 00:00:10.366 TCP 23.104.0.1:48332 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:58:36.962 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42750 12 6556 1 Summary: total flows: 163, total bytes: 505831, total packets: 1579, avg bps: 1127, avg pps: 0, avg bpp: 320 Time window: 2025-11-14 16:59:11 - 2025-11-14 17:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0045s User: 0.0009s Wall: 0.0028s flows/second: 57514.2 Runtime: 0.0029s