Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 02:58:48.517 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43124 10 6452 1 2025-11-16 02:59:40.029 00:00:10.372 TCP 23.104.0.1:50152 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:59:48.687 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54134 10 6452 1 2025-11-16 03:00:40.443 00:00:10.379 TCP 23.104.0.1:45102 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:00:48.900 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52576 10 6452 1 2025-11-16 03:01:40.864 00:00:10.371 TCP 23.104.0.1:41212 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:01:49.116 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59544 10 6452 1 2025-11-16 03:02:41.275 00:00:10.331 TCP 23.104.0.1:60472 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:02:49.336 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44622 10 6452 1 2025-11-16 03:03:09.951 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 03:03:10.015 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 03:03:41.646 00:00:10.367 TCP 23.104.0.1:38542 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:03:49.549 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59948 10 6452 1 2025-11-16 02:59:57.783 00:05:04.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 02:59:57.781 00:05:04.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 03:04:42.052 00:00:10.339 TCP 23.104.0.1:52150 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:04:49.758 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55214 10 6452 1 2025-11-16 03:05:42.427 00:00:10.369 TCP 23.104.0.1:59254 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:05:49.935 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:39732 10 6452 1 2025-11-16 03:06:42.836 00:00:10.349 TCP 23.104.0.1:46988 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:06:50.175 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54060 10 6452 1 2025-11-16 03:07:43.221 00:00:10.363 TCP 23.104.0.1:41860 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:07:50.400 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:40552 10 6452 1 2025-11-16 03:08:10.245 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 03:08:10.174 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 03:08:43.622 00:00:10.366 TCP 23.104.0.1:55624 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:08:50.597 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44228 10 6452 1 2025-11-16 03:09:44.023 00:00:10.328 TCP 23.104.0.1:56018 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:09:50.806 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43596 10 6452 1 2025-11-16 03:05:57.796 00:05:04.728 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 03:05:57.797 00:05:04.723 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 03:10:44.387 00:00:10.372 TCP 23.104.0.1:38206 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:10:51.056 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45474 10 6452 1 2025-11-16 03:11:44.798 00:00:10.369 TCP 23.104.0.1:53324 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:11:51.267 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42868 10 6452 1 2025-11-16 03:12:45.207 00:00:10.327 TCP 23.104.0.1:41882 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:12:51.442 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40232 10 6452 1 2025-11-16 03:13:10.216 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 03:13:10.269 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 03:13:45.572 00:00:10.529 TCP 23.104.0.1:54408 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:13:51.654 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:59716 10 6452 1 2025-11-16 03:14:46.139 00:00:10.364 TCP 23.104.0.1:47320 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:14:51.896 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45964 10 6452 1 2025-11-16 03:15:46.544 00:00:10.361 TCP 23.104.0.1:58674 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:15:52.112 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52546 10 6452 1 2025-11-16 03:11:57.797 00:05:04.726 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 03:11:57.800 00:05:04.721 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 03:16:46.948 00:00:10.372 TCP 23.104.0.1:51568 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:16:52.332 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43828 10 6452 1 2025-11-16 03:17:47.358 00:00:10.363 TCP 23.104.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:17:52.506 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37042 10 6452 1 2025-11-16 03:18:10.593 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 03:18:10.193 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 03:18:47.762 00:00:10.374 TCP 23.104.0.1:55960 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:18:52.726 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39624 10 6452 1 2025-11-16 03:19:48.168 00:00:10.322 TCP 23.104.0.1:49406 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:19:52.937 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:47424 10 6452 1 2025-11-16 03:20:48.523 00:00:10.329 TCP 23.104.0.1:56934 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:20:53.171 00:00:10.611 TCP 1.101.0.1:3000 -> 22.102.0.1:60022 10 6452 1 2025-11-16 03:21:48.890 00:00:10.377 TCP 23.104.0.1:51624 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:17:57.802 00:05:04.720 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 03:21:53.816 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43430 10 6452 1 2025-11-16 03:17:57.801 00:05:04.725 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 03:22:49.303 00:00:10.366 TCP 23.104.0.1:57710 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:23:10.413 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 03:22:54.035 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:42290 10 6452 1 2025-11-16 03:23:10.340 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 03:23:49.707 00:00:10.367 TCP 23.104.0.1:46502 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:23:54.310 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55090 10 6452 1 2025-11-16 03:24:50.109 00:00:10.321 TCP 23.104.0.1:39440 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:24:54.518 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57298 10 6452 1 2025-11-16 03:25:50.469 00:00:10.362 TCP 23.104.0.1:59634 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:25:54.689 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54390 10 6452 1 2025-11-16 03:26:50.869 00:00:10.367 TCP 23.104.0.1:55360 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:26:54.907 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60376 10 6452 1 2025-11-16 03:27:51.275 00:00:10.370 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:23:57.803 00:05:04.720 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 03:28:10.638 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 03:23:57.801 00:05:04.725 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 03:27:55.124 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54842 10 6452 1 2025-11-16 03:28:10.704 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 03:28:55.332 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40102 10 6452 1 2025-11-16 03:28:51.684 00:00:10.562 TCP 23.104.0.1:55364 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:29:52.285 00:00:10.334 TCP 23.104.0.1:48912 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:29:55.543 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43122 10 6452 1 2025-11-16 03:30:52.655 00:00:10.326 TCP 23.104.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:30:55.765 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57498 10 6452 1 2025-11-16 03:31:53.023 00:00:10.365 TCP 23.104.0.1:40296 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:31:55.975 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:44098 10 6452 1 2025-11-16 03:32:53.427 00:00:10.372 TCP 23.104.0.1:38334 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:32:56.225 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:51118 10 6452 1 2025-11-16 03:33:10.684 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 03:33:10.479 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 03:33:53.840 00:00:10.450 TCP 23.104.0.1:35182 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:29:57.802 00:05:04.723 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 03:33:56.460 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35404 10 6452 1 2025-11-16 03:29:57.799 00:05:04.728 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 03:34:56.686 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42608 10 6452 1 2025-11-16 03:34:54.331 00:00:10.360 TCP 23.104.0.1:55128 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:35:54.734 00:00:10.364 TCP 23.104.0.1:42804 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:35:56.899 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:56744 10 6452 1 2025-11-16 03:36:55.138 00:00:10.362 TCP 23.104.0.1:56668 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:36:57.094 00:00:10.431 TCP 1.101.0.1:3000 -> 22.102.0.1:35594 10 6452 1 2025-11-16 03:37:57.568 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48922 10 6452 1 2025-11-16 03:38:10.631 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 03:37:55.544 00:00:10.362 TCP 23.104.0.1:37730 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:38:10.773 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 03:38:55.945 00:00:10.371 TCP 23.104.0.1:59818 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:38:57.749 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42188 10 6452 1 2025-11-16 03:39:56.349 00:00:10.362 TCP 23.104.0.1:51394 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:35:57.803 00:05:04.723 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 03:35:57.801 00:05:04.728 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 03:39:57.963 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:45570 11 6504 1 2025-11-16 03:40:56.747 00:00:10.383 TCP 23.104.0.1:56964 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:40:58.235 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36822 10 6452 1 2025-11-16 03:41:57.171 00:00:10.324 TCP 23.104.0.1:45404 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:41:58.413 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53854 10 6452 1 2025-11-16 03:42:58.628 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50014 10 6452 1 2025-11-16 03:43:11.184 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 03:43:10.952 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 03:42:57.532 00:00:10.324 TCP 23.104.0.1:60352 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:43:57.897 00:00:10.375 TCP 23.104.0.1:44110 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:43:58.838 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60144 10 6452 1 2025-11-16 03:44:59.012 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40502 10 6452 1 2025-11-16 03:44:58.306 00:00:10.370 TCP 23.104.0.1:57298 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:41:57.807 00:05:04.722 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 03:41:57.803 00:05:04.727 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 03:45:58.716 00:00:10.380 TCP 23.104.0.1:60768 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:45:59.237 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57860 10 6452 1 2025-11-16 03:46:59.128 00:00:10.364 TCP 23.104.0.1:34560 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:46:59.448 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:49224 11 6504 1 2025-11-16 03:47:59.716 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40334 10 6452 1 2025-11-16 03:48:10.792 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 03:47:59.525 00:00:10.364 TCP 23.104.0.1:51338 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:48:10.949 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 03:48:59.926 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56718 10 6452 1 2025-11-16 03:48:59.924 00:00:10.352 TCP 23.104.0.1:43158 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:50:00.312 00:00:10.361 TCP 23.104.0.1:47670 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:50:00.146 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34462 10 6452 1 2025-11-16 03:51:00.359 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36660 10 6452 1 2025-11-16 03:51:00.718 00:00:10.372 TCP 23.104.0.1:45496 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:47:57.803 00:05:04.728 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 03:47:57.806 00:05:04.723 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 03:52:01.123 00:00:10.368 TCP 23.104.0.1:39210 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:52:00.574 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54786 10 6452 1 2025-11-16 03:53:10.883 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 03:53:01.531 00:00:10.363 TCP 23.104.0.1:53276 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:53:11.348 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 03:53:00.790 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47192 10 6452 1 2025-11-16 03:54:00.959 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58894 12 6556 1 2025-11-16 03:54:01.930 00:00:10.351 TCP 23.104.0.1:39060 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:55:01.186 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40180 10 6452 1 2025-11-16 03:55:02.314 00:00:10.364 TCP 23.104.0.1:60170 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:56:01.404 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49086 10 6452 1 2025-11-16 03:56:02.718 00:00:10.369 TCP 23.104.0.1:37764 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:57:01.626 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39676 10 6452 1 2025-11-16 03:57:03.131 00:00:10.369 TCP 23.104.0.1:60982 -> 1.101.0.1:3000 11 1507 1 2025-11-16 03:53:57.809 00:05:04.722 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 03:58:11.232 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 03:53:57.806 00:05:04.727 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 03:58:11.037 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 03:58:01.846 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43798 10 6452 1 2025-11-16 03:58:03.538 00:00:10.323 TCP 23.104.0.1:58008 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 497049, total packets: 1565, avg bps: 1100, avg pps: 0, avg bpp: 317 Time window: 2025-11-16 02:58:48 - 2025-11-16 03:59:02 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0048s User: 0.0009s Wall: 0.0022s flows/second: 75677.6 Runtime: 0.0022s