Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 04:59:03.221 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33324 10 6452 1 2025-11-15 04:59:05.790 00:00:10.365 TCP 23.104.0.1:36620 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:00:03.441 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45614 10 6452 1 2025-11-15 05:00:06.196 00:00:10.374 TCP 23.104.0.1:41978 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:01:06.599 00:00:10.366 TCP 23.104.0.1:52790 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:01:03.656 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54958 10 6452 1 2025-11-15 05:02:03.863 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43230 10 6452 1 2025-11-15 05:02:07.009 00:00:10.853 TCP 23.104.0.1:33500 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:02:43.476 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 05:02:43.584 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 05:03:04.092 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38282 10 6452 1 2025-11-15 05:03:07.897 00:00:10.337 TCP 23.104.0.1:47634 -> 1.101.0.1:3000 11 1507 1 2025-11-15 04:59:57.331 00:05:04.539 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 04:59:57.330 00:05:04.544 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 05:04:04.262 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58406 10 6452 1 2025-11-15 05:04:08.274 00:00:10.371 TCP 23.104.0.1:56678 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:05:04.475 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54088 10 6452 1 2025-11-15 05:05:08.681 00:00:10.325 TCP 23.104.0.1:50586 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:06:04.684 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:59610 14 14292 1 2025-11-15 05:06:09.056 00:00:10.651 TCP 23.104.0.1:46630 -> 1.101.0.1:3000 17 2241 1 2025-11-15 05:07:04.956 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38828 10 6452 1 2025-11-15 05:07:09.745 00:00:10.372 TCP 23.104.0.1:53204 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:07:43.772 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 05:07:43.329 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 05:08:05.181 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34488 10 6452 1 2025-11-15 05:08:10.146 00:00:10.367 TCP 23.104.0.1:43024 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:09:10.547 00:00:10.363 TCP 23.104.0.1:42156 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:09:05.392 00:00:13.698 TCP 1.101.0.1:3000 -> 22.102.0.1:54602 10 6452 1 2025-11-15 05:05:57.333 00:05:04.538 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 05:05:57.330 00:05:04.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 05:10:10.946 00:00:10.372 TCP 23.104.0.1:45374 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:10:09.127 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44904 10 6452 1 2025-11-15 05:11:11.351 00:00:10.332 TCP 23.104.0.1:41698 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:11:09.346 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:55558 10 6452 1 2025-11-15 05:12:09.529 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42448 10 6452 1 2025-11-15 05:12:11.721 00:00:10.376 TCP 23.104.0.1:47036 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:12:43.823 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 05:12:43.840 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 05:13:09.748 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35520 10 6452 1 2025-11-15 05:13:12.134 00:00:10.366 TCP 23.104.0.1:44024 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:14:09.962 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51588 10 6452 1 2025-11-15 05:14:12.536 00:00:10.368 TCP 23.104.0.1:42746 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:15:10.190 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60624 10 6452 1 2025-11-15 05:15:12.942 00:00:10.400 TCP 23.104.0.1:51008 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:11:57.334 00:05:04.542 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 05:11:57.335 00:05:04.536 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 05:16:10.398 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39746 10 6452 1 2025-11-15 05:16:13.379 00:00:10.324 TCP 23.104.0.1:57628 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:17:10.612 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40672 10 6452 1 2025-11-15 05:17:13.745 00:00:10.324 TCP 23.104.0.1:36322 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:17:43.696 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 05:17:43.767 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 05:18:10.831 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:46106 10 6452 1 2025-11-15 05:18:14.122 00:00:10.327 TCP 23.104.0.1:41876 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:19:11.036 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53034 10 6452 1 2025-11-15 05:19:14.485 00:00:10.367 TCP 23.104.0.1:37360 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:20:11.246 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58624 10 6452 1 2025-11-15 05:20:14.884 00:00:10.396 TCP 23.104.0.1:56028 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:21:11.468 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50160 10 6452 1 2025-11-15 05:21:15.317 00:00:10.395 TCP 23.104.0.1:59282 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:17:57.333 00:05:04.542 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 05:17:57.337 00:05:04.537 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 05:22:11.685 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39996 10 6452 1 2025-11-15 05:22:15.759 00:00:10.373 TCP 23.104.0.1:46906 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:22:43.871 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 05:22:43.957 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 05:23:16.169 00:00:10.373 TCP 23.104.0.1:58780 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:23:11.906 00:00:10.552 TCP 1.101.0.1:3000 -> 22.102.0.1:54044 10 6452 1 2025-11-15 05:24:12.492 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:53148 11 6504 1 2025-11-15 05:24:16.579 00:00:10.363 TCP 23.104.0.1:60594 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:25:12.771 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56752 10 6452 1 2025-11-15 05:25:16.977 00:00:21.519 TCP 23.104.0.1:52070 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:26:12.992 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36742 10 6452 1 2025-11-15 05:26:28.535 00:00:10.363 TCP 23.104.0.1:40698 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:27:13.216 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60718 10 6452 1 2025-11-15 05:27:28.934 00:00:10.377 TCP 23.104.0.1:48802 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:27:44.835 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 05:27:44.847 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 05:23:57.338 00:05:04.538 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 05:23:57.336 00:05:04.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 05:28:13.437 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33736 10 6452 1 2025-11-15 05:28:29.356 00:00:10.323 TCP 23.104.0.1:39612 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:29:13.668 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60664 10 6452 1 2025-11-15 05:29:29.717 00:00:41.121 TCP 23.104.0.1:36866 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:30:13.887 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58584 10 6452 1 2025-11-15 05:31:00.890 00:00:10.324 TCP 23.104.0.1:35004 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:31:14.109 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44580 10 6452 1 2025-11-15 05:32:01.247 00:00:10.362 TCP 23.104.0.1:57792 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:32:14.314 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39092 10 6452 1 2025-11-15 05:32:44.219 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 05:32:44.254 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 05:33:01.649 00:00:10.362 TCP 23.104.0.1:49414 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:33:14.532 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44166 10 6452 1 2025-11-15 05:29:57.337 00:05:04.544 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 05:29:57.339 00:05:04.538 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 05:34:02.062 00:00:10.362 TCP 23.104.0.1:55360 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:34:14.744 00:00:10.553 TCP 1.101.0.1:3000 -> 22.102.0.1:54922 10 6452 1 2025-11-15 05:35:02.464 00:00:10.374 TCP 23.104.0.1:47720 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:35:15.335 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55670 10 6452 1 2025-11-15 05:36:02.876 00:00:10.350 TCP 23.104.0.1:52144 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:36:15.540 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:33878 10 6452 1 2025-11-15 05:37:03.237 00:00:10.358 TCP 23.104.0.1:41666 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:37:15.726 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:54450 10 6452 1 2025-11-15 05:37:44.100 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 05:37:44.444 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 05:38:03.634 00:00:10.371 TCP 23.104.0.1:35612 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:38:15.983 00:00:19.595 TCP 1.101.0.1:3000 -> 22.102.0.1:49870 10 6452 1 2025-11-15 05:39:04.054 00:00:10.367 TCP 23.104.0.1:51720 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:39:25.641 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36736 10 6452 1 2025-11-15 05:35:57.339 00:05:04.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 05:35:57.343 00:05:04.535 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 05:40:04.459 00:00:10.363 TCP 23.104.0.1:58818 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:40:25.852 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44076 10 6452 1 2025-11-15 05:41:04.863 00:00:10.370 TCP 23.104.0.1:52948 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:41:26.078 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44022 10 6452 1 2025-11-15 05:42:05.272 00:00:10.365 TCP 23.104.0.1:43286 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:42:26.296 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38636 10 6452 1 2025-11-15 05:42:44.332 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 05:42:44.447 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 05:43:05.678 00:00:10.385 TCP 23.104.0.1:36212 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:43:26.512 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53742 10 6452 1 2025-11-15 05:44:06.117 00:00:10.323 TCP 23.104.0.1:53816 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:44:26.730 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56690 10 6452 1 2025-11-15 05:45:06.482 00:00:10.360 TCP 23.104.0.1:39196 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:45:26.961 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:33786 10 6452 1 2025-11-15 05:41:57.345 00:05:04.549 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 05:41:57.343 00:05:04.554 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 05:46:06.887 00:00:10.381 TCP 23.104.0.1:43908 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:46:27.137 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52554 10 6452 1 2025-11-15 05:47:07.305 00:00:10.360 TCP 23.104.0.1:33358 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:47:27.354 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59396 10 6452 1 2025-11-15 05:47:44.606 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 05:47:44.659 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 05:48:07.704 00:00:10.362 TCP 23.104.0.1:43430 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:48:27.588 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40280 10 6452 1 2025-11-15 05:49:08.107 00:00:10.363 TCP 23.104.0.1:50116 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:49:27.761 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60412 10 6452 1 2025-11-15 05:50:08.508 00:00:10.370 TCP 23.104.0.1:37816 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:50:27.982 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:37598 10 6452 1 2025-11-15 05:51:08.910 00:00:10.370 TCP 23.104.0.1:60074 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:51:28.224 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39362 10 6452 1 2025-11-15 05:47:57.346 00:05:04.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 05:47:57.343 00:05:04.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 05:52:09.307 00:00:10.368 TCP 23.104.0.1:46506 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:52:28.448 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50534 10 6452 1 2025-11-15 05:52:44.680 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 05:52:44.562 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 05:53:09.710 00:00:10.361 TCP 23.104.0.1:51228 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:53:28.666 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51148 10 6452 1 2025-11-15 05:54:10.114 00:00:10.364 TCP 23.104.0.1:57120 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:54:28.889 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:53600 10 6452 1 2025-11-15 05:55:10.521 00:00:10.371 TCP 23.104.0.1:45180 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:55:29.086 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49828 10 6452 1 2025-11-15 05:56:10.928 00:00:10.384 TCP 23.104.0.1:51838 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:56:29.305 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34792 10 6452 1 2025-11-15 05:57:11.350 00:00:10.362 TCP 23.104.0.1:49128 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:57:29.521 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49594 10 6452 1 2025-11-15 05:57:44.773 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 05:57:44.643 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 05:53:57.345 00:05:04.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 05:53:57.347 00:05:04.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 05:58:11.751 00:00:22.628 TCP 23.104.0.1:33056 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:58:29.735 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42500 10 6452 1 Summary: total flows: 163, total bytes: 505467, total packets: 1572, avg bps: 1123, avg pps: 0, avg bpp: 321 Time window: 2025-11-15 04:59:03 - 2025-11-15 05:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0053s User: 0.0011s Wall: 0.0025s flows/second: 64454.8 Runtime: 0.0025s