Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 11:59:13.297 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:45006 10 6452 1 2025-11-15 11:59:26.145 00:00:10.364 TCP 23.104.0.1:41580 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:00:13.546 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36256 10 6452 1 2025-11-15 12:00:26.545 00:00:10.366 TCP 23.104.0.1:43468 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:01:13.775 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46722 10 6452 1 2025-11-15 12:01:26.951 00:00:10.339 TCP 23.104.0.1:49732 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:02:13.995 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35706 10 6452 1 2025-11-15 12:02:27.343 00:00:10.368 TCP 23.104.0.1:48002 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:02:51.909 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 12:02:51.976 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 12:03:14.230 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50492 10 6452 1 2025-11-15 12:03:27.751 00:00:10.336 TCP 23.104.0.1:49834 -> 1.101.0.1:3000 11 1507 1 2025-11-15 11:59:57.475 00:05:04.621 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 11:59:57.473 00:05:04.626 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 12:04:14.438 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38328 10 6452 1 2025-11-15 12:04:28.123 00:00:10.394 TCP 23.104.0.1:35838 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:05:14.662 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59470 10 6452 1 2025-11-15 12:05:28.524 00:00:10.366 TCP 23.104.0.1:52334 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:06:14.876 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57620 10 6452 1 2025-11-15 12:06:28.927 00:00:10.387 TCP 23.104.0.1:43348 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:07:15.102 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35946 10 6452 1 2025-11-15 12:07:29.352 00:00:10.366 TCP 23.104.0.1:44106 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:07:51.974 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 12:07:52.046 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 12:08:15.322 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42182 10 6452 1 2025-11-15 12:08:29.756 00:00:10.336 TCP 23.104.0.1:58450 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:09:15.548 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53040 10 6452 1 2025-11-15 12:09:30.126 00:00:10.368 TCP 23.104.0.1:57210 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:05:57.476 00:05:04.621 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 12:05:57.474 00:05:04.626 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 12:10:15.770 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52084 10 6452 1 2025-11-15 12:10:30.532 00:00:10.362 TCP 23.104.0.1:59746 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:11:15.978 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:41696 10 6452 1 2025-11-15 12:11:30.934 00:00:10.372 TCP 23.104.0.1:40378 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:12:16.173 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34370 10 6452 1 2025-11-15 12:12:31.346 00:00:10.410 TCP 23.104.0.1:52872 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:12:52.234 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 12:12:52.219 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 12:13:16.386 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56320 10 6452 1 2025-11-15 12:13:31.796 00:00:10.339 TCP 23.104.0.1:47432 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:14:16.595 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42042 10 6452 1 2025-11-15 12:14:32.172 00:00:10.368 TCP 23.104.0.1:42280 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:15:16.811 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44534 10 6452 1 2025-11-15 12:15:32.581 00:00:10.367 TCP 23.104.0.1:59628 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:11:57.478 00:05:04.623 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 12:11:57.482 00:05:04.618 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 12:16:17.065 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47516 10 6452 1 2025-11-15 12:16:32.984 00:00:10.365 TCP 23.104.0.1:42104 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:17:17.285 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:38036 10 6452 1 2025-11-15 12:17:33.383 00:00:10.371 TCP 23.104.0.1:44204 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:17:52.378 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 12:17:52.315 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 12:18:17.472 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56130 10 6452 1 2025-11-15 12:18:33.799 00:00:10.362 TCP 23.104.0.1:39726 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:19:17.644 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51814 10 6452 1 2025-11-15 12:19:34.201 00:00:10.368 TCP 23.104.0.1:52026 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:20:17.851 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36704 10 6452 1 2025-11-15 12:20:34.603 00:00:10.321 TCP 23.104.0.1:54736 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:21:18.084 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55678 10 6452 1 2025-11-15 12:21:34.963 00:00:10.369 TCP 23.104.0.1:55060 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:17:57.482 00:05:04.618 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 12:17:57.478 00:05:04.623 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 12:22:18.314 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:53956 10 6452 1 2025-11-15 12:22:35.367 00:00:10.359 TCP 23.104.0.1:58070 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:22:52.083 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 12:22:52.054 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 12:23:18.533 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37532 10 6452 1 2025-11-15 12:23:35.764 00:00:10.374 TCP 23.104.0.1:48938 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:24:18.739 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43226 10 6452 1 2025-11-15 12:24:36.175 00:00:10.358 TCP 23.104.0.1:35390 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:25:18.947 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:58134 10 6452 1 2025-11-15 12:25:36.574 00:00:11.483 TCP 23.104.0.1:47284 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:26:19.192 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37206 10 6452 1 2025-11-15 12:26:38.106 00:00:10.366 TCP 23.104.0.1:44056 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:27:19.403 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46128 10 6452 1 2025-11-15 12:27:38.511 00:00:10.366 TCP 23.104.0.1:39380 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:27:52.394 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 12:27:52.612 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 12:23:57.480 00:05:04.630 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 12:23:57.482 00:05:04.625 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 12:28:19.623 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:43070 10 6452 1 2025-11-15 12:28:38.917 00:00:10.365 TCP 23.104.0.1:36902 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:29:19.815 00:00:10.742 TCP 1.101.0.1:3000 -> 22.102.0.1:55616 10 6452 1 2025-11-15 12:29:39.316 00:00:10.364 TCP 23.104.0.1:55082 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:30:20.597 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55344 10 6452 1 2025-11-15 12:30:39.721 00:00:10.370 TCP 23.104.0.1:55366 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:31:20.815 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40748 10 6452 1 2025-11-15 12:31:40.129 00:00:10.366 TCP 23.104.0.1:35374 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:32:21.062 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58548 10 6452 1 2025-11-15 12:32:52.540 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 12:32:40.537 00:00:10.368 TCP 23.104.0.1:55662 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:32:52.361 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 12:33:21.275 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52686 10 6452 1 2025-11-15 12:33:40.949 00:00:10.369 TCP 23.104.0.1:37892 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:29:57.482 00:05:04.629 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 12:29:57.484 00:05:04.624 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 12:34:21.504 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55588 10 6452 1 2025-11-15 12:34:41.353 00:00:10.378 TCP 23.104.0.1:54012 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:35:21.725 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33108 10 6452 1 2025-11-15 12:35:41.774 00:00:10.368 TCP 23.104.0.1:42596 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:36:21.934 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38070 10 6452 1 2025-11-15 12:36:42.188 00:00:10.372 TCP 23.104.0.1:37762 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:37:22.166 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38424 10 6452 1 2025-11-15 12:37:52.566 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 12:37:42.608 00:00:10.358 TCP 23.104.0.1:58700 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:37:52.412 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 12:38:22.361 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43872 10 6452 1 2025-11-15 12:38:43.010 00:00:10.412 TCP 23.104.0.1:50802 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:39:22.587 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56464 10 6452 1 2025-11-15 12:39:43.461 00:00:10.427 TCP 23.104.0.1:44936 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:35:57.484 00:05:04.633 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 12:35:57.487 00:05:04.628 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 12:40:22.762 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39500 10 6452 1 2025-11-15 12:40:43.926 00:00:10.382 TCP 23.104.0.1:40654 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:41:22.983 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:46222 10 6452 1 2025-11-15 12:41:44.347 00:00:10.362 TCP 23.104.0.1:57896 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:42:23.225 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38110 10 6452 1 2025-11-15 12:42:52.835 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 12:42:44.748 00:00:10.361 TCP 23.104.0.1:55300 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:42:52.847 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 12:43:23.434 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46032 10 6452 1 2025-11-15 12:43:45.149 00:00:10.367 TCP 23.104.0.1:42528 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:44:23.670 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41916 10 6452 1 2025-11-15 12:44:45.552 00:00:10.371 TCP 23.104.0.1:49034 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:45:23.882 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60104 10 6452 1 2025-11-15 12:45:45.958 00:00:10.367 TCP 23.104.0.1:48166 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:41:57.485 00:05:04.635 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 12:41:57.487 00:05:04.631 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 12:46:24.102 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47884 10 6452 1 2025-11-15 12:46:46.361 00:00:10.333 TCP 23.104.0.1:51644 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:47:24.315 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34454 10 6452 1 2025-11-15 12:47:52.885 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 12:47:52.991 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 12:47:46.728 00:00:10.331 TCP 23.104.0.1:37280 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:48:24.531 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43046 10 6452 1 2025-11-15 12:48:47.111 00:00:10.379 TCP 23.104.0.1:42630 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:49:24.745 00:00:10.710 TCP 1.101.0.1:3000 -> 22.102.0.1:59442 10 6452 1 2025-11-15 12:49:47.535 00:00:10.362 TCP 23.104.0.1:55102 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:50:25.495 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36562 10 6452 1 2025-11-15 12:50:47.938 00:00:10.378 TCP 23.104.0.1:55928 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:51:25.707 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47996 10 6452 1 2025-11-15 12:51:48.352 00:00:10.365 TCP 23.104.0.1:47152 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:47:57.486 00:05:04.638 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 12:47:57.489 00:05:04.632 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 12:52:25.885 00:00:10.838 TCP 1.101.0.1:3000 -> 22.102.0.1:43340 10 6452 1 2025-11-15 12:52:53.046 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 12:52:52.970 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 12:52:48.758 00:00:10.336 TCP 23.104.0.1:42148 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:53:26.756 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44682 10 6452 1 2025-11-15 12:53:49.135 00:00:10.364 TCP 23.104.0.1:49710 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:54:26.972 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:33266 10 6452 1 2025-11-15 12:54:49.534 00:00:10.361 TCP 23.104.0.1:56300 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:55:27.214 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42408 10 6452 1 2025-11-15 12:55:49.935 00:00:10.780 TCP 23.104.0.1:59858 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:56:27.431 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44846 12 6556 1 2025-11-15 12:56:50.758 00:00:10.383 TCP 23.104.0.1:49282 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:57:27.654 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33856 10 6452 1 2025-11-15 12:57:52.979 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 12:57:53.162 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 12:57:51.176 00:00:10.333 TCP 23.104.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:53:57.490 00:05:04.633 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 12:53:57.489 00:05:04.638 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 12:58:27.877 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38230 10 6452 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1107, avg pps: 0, avg bpp: 317 Time window: 2025-11-15 11:59:13 - 2025-11-15 12:59:02 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0064s User: 0.0009s Wall: 0.0024s flows/second: 68953.3 Runtime: 0.0024s