Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 00:58:51.718 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:50228 10 6452 1 2025-11-15 00:59:33.753 00:00:10.335 TCP 23.104.0.1:44954 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:59:51.898 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52750 10 6452 1 2025-11-15 01:00:34.129 00:00:10.375 TCP 23.104.0.1:45900 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:00:52.126 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39564 10 6452 1 2025-11-15 01:01:34.545 00:00:10.326 TCP 23.104.0.1:60760 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:01:52.341 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48576 10 6452 1 2025-11-15 01:02:38.750 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:02:38.938 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 01:02:34.911 00:00:10.365 TCP 23.104.0.1:55202 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:02:52.561 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53830 10 6452 1 2025-11-15 01:03:35.313 00:00:10.360 TCP 23.104.0.1:52302 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:59:57.274 00:05:04.499 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 01:03:52.776 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60310 10 6452 1 2025-11-15 00:59:57.272 00:05:04.504 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 01:04:35.712 00:00:10.379 TCP 23.104.0.1:35032 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:04:52.949 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37632 10 6452 1 2025-11-15 01:05:36.131 00:00:10.392 TCP 23.104.0.1:35260 -> 1.101.0.1:3000 15 1926 1 2025-11-15 01:05:53.178 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:34550 12 10369 1 2025-11-15 01:06:36.566 00:00:10.361 TCP 23.104.0.1:48626 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:06:53.426 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33624 10 6452 1 2025-11-15 01:07:38.948 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 01:07:39.045 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:07:36.970 00:00:10.556 TCP 23.104.0.1:52440 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:07:53.658 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43674 10 6452 1 2025-11-15 01:08:37.566 00:00:10.364 TCP 23.104.0.1:49322 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:08:53.871 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58794 10 6452 1 2025-11-15 01:09:37.967 00:00:10.367 TCP 23.104.0.1:43572 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:05:57.275 00:05:04.510 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 01:05:57.272 00:05:04.515 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 01:09:54.073 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53154 10 6452 1 2025-11-15 01:10:38.370 00:00:10.369 TCP 23.104.0.1:40938 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:10:54.298 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56144 10 6452 1 2025-11-15 01:11:38.774 00:00:10.369 TCP 23.104.0.1:59854 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:11:54.526 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52884 10 6452 1 2025-11-15 01:12:38.739 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:12:38.828 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 01:12:39.183 00:00:10.323 TCP 23.104.0.1:56280 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:12:54.741 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53452 10 6452 1 2025-11-15 01:13:39.545 00:00:10.445 TCP 23.104.0.1:37214 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:13:54.922 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58584 10 6452 1 2025-11-15 01:14:40.024 00:00:10.361 TCP 23.104.0.1:55420 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:14:55.147 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40150 10 6452 1 2025-11-15 01:15:40.423 00:00:10.366 TCP 23.104.0.1:45906 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:11:57.275 00:05:04.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 01:15:55.355 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47386 10 6452 1 2025-11-15 01:11:57.273 00:05:04.516 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 01:16:40.831 00:00:10.347 TCP 23.104.0.1:37306 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:16:55.580 00:00:10.816 TCP 1.101.0.1:3000 -> 22.102.0.1:33586 10 6452 1 2025-11-15 01:17:38.858 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 01:17:38.815 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:17:41.216 00:00:10.369 TCP 23.104.0.1:39248 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:17:56.447 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46636 10 6452 1 2025-11-15 01:18:41.621 00:00:10.365 TCP 23.104.0.1:32860 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:18:56.675 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:39406 10 6452 1 2025-11-15 01:19:42.021 00:00:10.327 TCP 23.104.0.1:38082 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:19:56.868 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:54594 10 6452 1 2025-11-15 01:20:42.384 00:00:10.365 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:20:57.069 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49696 10 6452 1 2025-11-15 01:21:42.786 00:00:10.368 TCP 23.104.0.1:53068 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:17:57.277 00:05:04.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 01:17:57.274 00:05:04.517 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 01:21:57.296 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33112 10 6452 1 2025-11-15 01:22:39.201 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 01:22:39.035 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:22:43.194 00:00:10.370 TCP 23.104.0.1:59954 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:22:57.520 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47702 10 6452 1 2025-11-15 01:23:43.596 00:00:10.331 TCP 23.104.0.1:60776 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:23:57.739 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54868 10 6452 1 2025-11-15 01:24:43.961 00:00:15.587 TCP 23.104.0.1:49650 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:24:57.960 00:00:11.502 TCP 1.101.0.1:3000 -> 22.102.0.1:51366 10 6452 1 2025-11-15 01:25:49.590 00:00:15.628 TCP 23.104.0.1:33078 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:25:59.515 00:00:10.386 TCP 1.101.0.1:3000 -> 22.102.0.1:52044 10 6452 1 2025-11-15 01:26:55.275 00:00:10.360 TCP 23.104.0.1:48418 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:26:59.936 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:34670 10 6452 1 2025-11-15 01:27:39.590 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 01:27:39.777 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:23:57.277 00:05:04.517 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 01:27:55.677 00:00:11.041 TCP 23.104.0.1:51004 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:23:57.279 00:05:04.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 01:28:00.183 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56620 10 6452 1 2025-11-15 01:29:00.405 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48278 10 6452 1 2025-11-15 01:28:56.751 00:00:10.331 TCP 23.104.0.1:46940 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:29:57.119 00:00:10.368 TCP 23.104.0.1:40008 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:30:00.620 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54878 10 6452 1 2025-11-15 01:30:57.527 00:00:10.368 TCP 23.104.0.1:57874 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:31:00.830 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57614 10 6452 1 2025-11-15 01:32:00.996 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39940 10 6452 1 2025-11-15 01:31:57.931 00:00:10.391 TCP 23.104.0.1:57194 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:32:39.216 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:32:39.754 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 01:33:01.224 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41108 10 6452 1 2025-11-15 01:32:58.353 00:00:10.361 TCP 23.104.0.1:49126 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:29:57.283 00:05:04.510 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 01:29:57.280 00:05:04.515 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 01:34:01.397 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51770 10 6452 1 2025-11-15 01:33:58.757 00:00:10.332 TCP 23.104.0.1:33250 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:35:01.612 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:56664 10 6452 1 2025-11-15 01:34:59.130 00:00:10.363 TCP 23.104.0.1:45466 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:35:59.534 00:00:10.360 TCP 23.104.0.1:46398 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:36:01.816 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:54136 10 6452 1 2025-11-15 01:36:59.931 00:00:10.379 TCP 23.104.0.1:33988 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:37:02.075 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45580 10 6452 1 2025-11-15 01:37:39.422 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 01:37:39.418 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:38:00.349 00:00:10.363 TCP 23.104.0.1:59308 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:38:02.286 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35160 10 6452 1 2025-11-15 01:39:00.757 00:00:10.371 TCP 23.104.0.1:52454 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:39:02.506 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34166 10 6452 1 2025-11-15 01:35:57.282 00:05:04.514 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 01:35:57.286 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 01:40:01.168 00:00:10.364 TCP 23.104.0.1:60076 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:40:02.727 00:00:10.750 TCP 1.101.0.1:3000 -> 22.102.0.1:52522 10 6452 1 2025-11-15 01:41:03.514 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:49356 12 10369 1 2025-11-15 01:41:01.572 00:00:10.436 TCP 23.104.0.1:45414 -> 1.101.0.1:3000 15 1926 1 2025-11-15 01:42:02.059 00:00:10.360 TCP 23.104.0.1:36032 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:42:03.763 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:47084 10 6452 1 2025-11-15 01:42:39.568 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:42:39.544 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 01:43:02.461 00:00:10.362 TCP 23.104.0.1:36196 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:43:03.950 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49466 10 6452 1 2025-11-15 01:44:02.858 00:00:10.337 TCP 23.104.0.1:33516 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:44:04.179 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:42292 10 6452 1 2025-11-15 01:45:03.237 00:00:10.366 TCP 23.104.0.1:56256 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:45:04.429 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46264 10 6452 1 2025-11-15 01:41:57.286 00:05:04.510 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 01:41:57.284 00:05:04.515 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 01:46:03.647 00:00:10.372 TCP 23.104.0.1:46818 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:46:04.644 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54090 10 6452 1 2025-11-15 01:47:04.068 00:00:10.328 TCP 23.104.0.1:47142 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:47:04.856 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:43000 10 6452 1 2025-11-15 01:47:39.904 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:47:39.881 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 01:48:04.444 00:00:10.370 TCP 23.104.0.1:46022 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:48:05.092 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34808 10 6452 1 2025-11-15 01:49:05.324 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48454 10 6452 1 2025-11-15 01:49:04.848 00:00:10.383 TCP 23.104.0.1:36336 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:50:05.273 00:00:10.321 TCP 23.104.0.1:45884 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:50:05.539 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:39280 10 6452 1 2025-11-15 01:51:05.723 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56072 10 6452 1 2025-11-15 01:51:05.630 00:00:10.370 TCP 23.104.0.1:52944 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:47:57.289 00:05:04.510 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 01:47:57.286 00:05:04.516 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 01:52:05.942 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52124 10 6452 1 2025-11-15 01:52:06.049 00:00:10.368 TCP 23.104.0.1:52384 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:52:39.862 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:52:39.705 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 01:53:06.179 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46958 10 6452 1 2025-11-15 01:53:06.455 00:00:10.327 TCP 23.104.0.1:56120 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:54:06.391 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37468 10 6452 1 2025-11-15 01:54:06.818 00:00:10.365 TCP 23.104.0.1:58570 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:55:06.602 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55114 10 6452 1 2025-11-15 01:55:07.218 00:00:10.329 TCP 23.104.0.1:38056 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:56:06.811 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46420 10 6452 1 2025-11-15 01:56:07.582 00:00:10.368 TCP 23.104.0.1:56342 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:57:07.989 00:00:10.364 TCP 23.104.0.1:57942 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:57:07.040 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56974 10 6452 1 2025-11-15 01:57:39.950 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 01:57:39.959 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 01:53:57.293 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 01:53:57.290 00:05:04.514 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 01:58:08.395 00:00:10.373 TCP 23.104.0.1:41760 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:58:07.263 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33408 10 6452 1 Summary: total flows: 163, total bytes: 505513, total packets: 1573, avg bps: 1120, avg pps: 0, avg bpp: 321 Time window: 2025-11-15 00:58:51 - 2025-11-15 01:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0036s User: 0.0012s Wall: 0.0022s flows/second: 72862.8 Runtime: 0.0023s