Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 06:58:49.642 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46576 10 6452 1 2025-11-15 06:58:55.730 00:00:10.365 TCP 23.104.0.1:59732 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:59:49.865 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51732 10 6452 1 2025-11-15 06:59:56.135 00:00:10.365 TCP 23.104.0.1:34568 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:00:50.095 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42714 10 6452 1 2025-11-15 07:00:56.541 00:00:10.325 TCP 23.104.0.1:45310 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:01:50.315 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35768 10 6452 1 2025-11-15 07:01:56.902 00:00:10.370 TCP 23.104.0.1:44674 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:02:46.048 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 07:02:45.911 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 07:02:50.533 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39092 10 6452 1 2025-11-15 07:02:57.312 00:00:10.370 TCP 23.104.0.1:41840 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:03:50.757 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42034 10 6452 1 2025-11-15 06:59:57.360 00:05:04.579 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 06:59:57.362 00:05:04.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 07:03:57.718 00:00:10.375 TCP 23.104.0.1:35630 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:04:50.977 00:00:11.651 TCP 1.101.0.1:3000 -> 22.102.0.1:59716 10 6452 1 2025-11-15 07:04:58.133 00:00:10.363 TCP 23.104.0.1:50004 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:05:52.663 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56146 10 6452 1 2025-11-15 07:05:58.530 00:00:10.419 TCP 23.104.0.1:47792 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:06:52.876 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58230 10 6452 1 2025-11-15 07:06:58.987 00:00:10.367 TCP 23.104.0.1:45854 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:07:46.091 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 07:07:45.913 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 07:07:53.102 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39220 10 6452 1 2025-11-15 07:07:59.393 00:00:10.364 TCP 23.104.0.1:49622 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:08:53.280 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41980 10 6452 1 2025-11-15 07:08:59.797 00:00:10.839 TCP 23.104.0.1:41930 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:05:57.361 00:05:04.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 07:09:53.453 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44186 10 6452 1 2025-11-15 07:05:57.363 00:05:04.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 07:10:00.669 00:00:10.371 TCP 23.104.0.1:42384 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:10:53.666 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36086 10 6452 1 2025-11-15 07:11:01.108 00:00:10.369 TCP 23.104.0.1:33498 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:11:53.881 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41746 10 6452 1 2025-11-15 07:12:01.513 00:00:10.325 TCP 23.104.0.1:39054 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:12:46.067 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 07:12:46.333 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 07:12:54.116 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40422 10 6452 1 2025-11-15 07:13:01.874 00:00:11.220 TCP 23.104.0.1:38366 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:13:54.286 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55250 10 6452 1 2025-11-15 07:14:03.133 00:00:10.363 TCP 23.104.0.1:58180 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:14:54.461 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59694 10 6452 1 2025-11-15 07:15:03.533 00:00:10.367 TCP 23.104.0.1:36370 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:11:57.368 00:05:04.572 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 07:15:54.680 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46030 10 6452 1 2025-11-15 07:11:57.365 00:05:04.577 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 07:16:03.934 00:00:10.377 TCP 23.104.0.1:42426 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:16:54.907 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34884 10 6452 1 2025-11-15 07:17:04.348 00:00:10.369 TCP 23.104.0.1:34252 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:17:46.244 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 07:17:46.376 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 07:17:55.125 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50292 10 6452 1 2025-11-15 07:18:04.757 00:00:10.371 TCP 23.104.0.1:55802 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:18:55.351 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57884 10 6452 1 2025-11-15 07:19:05.165 00:00:10.367 TCP 23.104.0.1:57272 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:19:55.562 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58278 10 6452 1 2025-11-15 07:20:05.578 00:00:10.331 TCP 23.104.0.1:50898 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:20:55.737 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33702 10 6452 1 2025-11-15 07:21:05.952 00:00:19.871 TCP 23.104.0.1:50282 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:17:57.368 00:05:04.572 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 07:17:57.366 00:05:04.577 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 07:21:55.920 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50424 10 6452 1 2025-11-15 07:22:15.875 00:00:10.365 TCP 23.104.0.1:44972 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:22:46.332 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 07:22:46.358 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 07:22:56.135 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54172 10 6452 1 2025-11-15 07:23:16.279 00:00:10.320 TCP 23.104.0.1:52470 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:23:56.343 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38662 10 6452 1 2025-11-15 07:24:16.637 00:00:10.318 TCP 23.104.0.1:49936 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:24:56.554 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49152 10 6452 1 2025-11-15 07:25:16.992 00:00:10.367 TCP 23.104.0.1:42050 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:25:56.739 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58512 10 6452 1 2025-11-15 07:26:17.398 00:00:11.078 TCP 23.104.0.1:60184 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:26:56.955 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:57706 12 6556 1 2025-11-15 07:27:18.514 00:00:10.359 TCP 23.104.0.1:34078 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:27:46.456 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 07:27:46.614 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 07:23:57.376 00:05:04.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 07:23:57.373 00:05:04.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 07:27:57.192 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42612 10 6452 1 2025-11-15 07:28:18.911 00:00:10.366 TCP 23.104.0.1:52352 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:28:57.370 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44020 10 6452 1 2025-11-15 07:29:19.314 00:00:10.365 TCP 23.104.0.1:47682 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:29:57.546 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44334 10 6452 1 2025-11-15 07:30:19.715 00:00:10.326 TCP 23.104.0.1:50682 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:30:57.768 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52818 10 6452 1 2025-11-15 07:31:20.098 00:00:10.355 TCP 23.104.0.1:57174 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:31:57.944 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54828 10 6452 1 2025-11-15 07:32:20.495 00:00:10.332 TCP 23.104.0.1:54756 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:32:46.317 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 07:32:46.292 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 07:32:58.175 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:32838 10 6452 1 2025-11-15 07:33:20.868 00:00:10.367 TCP 23.104.0.1:39768 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:29:57.376 00:05:04.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 07:29:57.374 00:05:04.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 07:33:58.358 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:49336 10 6452 1 2025-11-15 07:34:21.276 00:00:10.384 TCP 23.104.0.1:40088 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:34:58.563 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52580 10 6452 1 2025-11-15 07:35:21.723 00:00:10.374 TCP 23.104.0.1:53054 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:35:58.773 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39158 10 6452 1 2025-11-15 07:36:22.136 00:00:10.390 TCP 23.104.0.1:34974 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:36:58.997 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:55784 10 6452 1 2025-11-15 07:37:22.563 00:00:10.329 TCP 23.104.0.1:52394 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:37:46.662 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 07:37:46.753 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 07:37:59.182 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45854 10 6452 1 2025-11-15 07:38:22.933 00:00:10.393 TCP 23.104.0.1:44918 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:38:59.401 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36888 10 6452 1 2025-11-15 07:39:23.341 00:00:10.367 TCP 23.104.0.1:47344 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:35:57.378 00:05:04.571 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 07:35:57.376 00:05:04.576 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 07:39:59.613 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34768 10 6452 1 2025-11-15 07:40:23.747 00:00:10.372 TCP 23.104.0.1:52246 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:40:59.864 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50100 10 6452 1 2025-11-15 07:41:24.157 00:00:10.361 TCP 23.104.0.1:45216 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:42:00.087 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56476 10 6452 1 2025-11-15 07:42:24.556 00:00:10.360 TCP 23.104.0.1:34940 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:42:46.871 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 07:42:46.844 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 07:43:00.308 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37634 10 6452 1 2025-11-15 07:43:24.972 00:00:10.370 TCP 23.104.0.1:43098 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:44:00.535 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50858 10 6452 1 2025-11-15 07:44:25.373 00:00:10.367 TCP 23.104.0.1:54172 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:45:00.745 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48978 10 6452 1 2025-11-15 07:45:25.774 00:00:10.367 TCP 23.104.0.1:35894 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:41:57.381 00:05:04.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 07:41:57.379 00:05:04.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 07:46:00.921 00:00:10.337 TCP 1.101.0.1:3000 -> 22.102.0.1:56662 10 6452 1 2025-11-15 07:46:26.177 00:00:10.367 TCP 23.104.0.1:41850 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:47:01.300 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46142 12 6556 1 2025-11-15 07:47:26.576 00:00:10.363 TCP 23.104.0.1:43756 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:47:46.760 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 07:47:47.013 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 07:48:01.515 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49064 10 6452 1 2025-11-15 07:48:26.979 00:00:10.367 TCP 23.104.0.1:39422 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:49:01.687 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46344 10 6452 1 2025-11-15 07:49:27.381 00:00:10.558 TCP 23.104.0.1:55012 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:50:01.916 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:55856 10 6452 1 2025-11-15 07:50:27.977 00:00:10.363 TCP 23.104.0.1:44472 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:51:02.109 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53382 10 6452 1 2025-11-15 07:51:28.383 00:00:10.377 TCP 23.104.0.1:35460 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:47:57.379 00:05:04.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 07:47:57.383 00:05:04.569 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 07:52:02.347 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46904 10 6452 1 2025-11-15 07:52:28.807 00:00:10.362 TCP 23.104.0.1:47864 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:52:46.919 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 07:52:46.911 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 07:53:02.522 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55218 10 6452 1 2025-11-15 07:53:29.204 00:00:10.330 TCP 23.104.0.1:57462 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:54:02.738 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59722 10 6452 1 2025-11-15 07:54:29.574 00:00:10.707 TCP 23.104.0.1:38704 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:55:02.948 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60242 10 6452 1 2025-11-15 07:55:30.326 00:00:10.332 TCP 23.104.0.1:41752 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:56:03.176 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34538 10 6452 1 2025-11-15 07:56:30.694 00:00:10.329 TCP 23.104.0.1:34716 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:57:03.388 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59418 10 6452 1 2025-11-15 07:57:31.089 00:00:10.376 TCP 23.104.0.1:53118 -> 1.101.0.1:3000 11 1507 1 2025-11-15 07:57:46.848 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 07:57:47.103 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 07:53:57.386 00:05:04.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 07:53:57.389 00:05:04.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 07:58:03.622 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50950 10 6452 1 2025-11-15 07:58:31.505 00:00:10.363 TCP 23.104.0.1:39778 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498556, total packets: 1576, avg bps: 1104, avg pps: 0, avg bpp: 316 Time window: 2025-11-15 06:58:49 - 2025-11-15 07:59:01 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0009s Wall: 0.0016s flows/second: 99632.9 Runtime: 0.0017s