Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 06:58:46.598 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:32808 10 6452 1 2025-11-16 06:59:19.355 00:00:18.307 TCP 23.104.0.1:40492 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:59:46.764 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54624 10 6452 1 2025-11-16 07:00:27.733 00:00:10.371 TCP 23.104.0.1:37338 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:00:46.977 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:57696 10 6452 1 2025-11-16 07:01:28.143 00:00:10.323 TCP 23.104.0.1:32906 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:01:47.215 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33668 10 6452 1 2025-11-16 07:02:28.506 00:00:10.364 TCP 23.104.0.1:49686 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:02:47.430 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58340 10 6452 1 2025-11-16 07:03:14.774 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 07:03:14.892 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 07:03:28.910 00:00:10.366 TCP 23.104.0.1:54016 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:03:47.609 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35328 10 6452 1 2025-11-16 06:59:57.875 00:05:04.727 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 06:59:57.877 00:05:04.722 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 07:04:29.318 00:00:10.368 TCP 23.104.0.1:52856 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:04:47.774 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47252 10 6452 1 2025-11-16 07:05:29.726 00:00:10.373 TCP 23.104.0.1:50934 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:05:47.981 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35148 10 6452 1 2025-11-16 07:06:30.135 00:00:10.366 TCP 23.104.0.1:47366 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:06:48.214 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56818 10 6452 1 2025-11-16 07:07:30.543 00:00:10.366 TCP 23.104.0.1:40776 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:07:48.458 00:00:10.705 TCP 1.101.0.1:3000 -> 22.102.0.1:37284 10 6452 1 2025-11-16 07:08:15.061 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 07:08:15.068 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 07:08:30.945 00:00:10.373 TCP 23.104.0.1:33654 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:08:49.196 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33602 10 6452 1 2025-11-16 07:09:31.359 00:00:10.330 TCP 23.104.0.1:55090 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:09:49.407 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38890 10 6452 1 2025-11-16 07:05:57.877 00:05:04.728 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 07:05:57.880 00:05:04.722 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 07:10:31.727 00:00:10.370 TCP 23.104.0.1:41284 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:10:49.621 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33446 10 6452 1 2025-11-16 07:11:32.138 00:00:10.362 TCP 23.104.0.1:33006 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:11:49.831 00:00:11.584 TCP 1.101.0.1:3000 -> 22.102.0.1:46664 10 6452 1 2025-11-16 07:12:32.536 00:00:10.364 TCP 23.104.0.1:42042 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:12:51.461 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:32868 10 6452 1 2025-11-16 07:13:14.962 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 07:13:14.994 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 07:13:32.939 00:00:10.398 TCP 23.104.0.1:56996 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:13:51.637 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46732 10 6452 1 2025-11-16 07:14:33.388 00:00:10.375 TCP 23.104.0.1:55164 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:14:51.855 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49418 10 6452 1 2025-11-16 07:15:33.816 00:00:10.367 TCP 23.104.0.1:50968 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:11:57.884 00:05:04.722 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 07:11:57.883 00:05:04.727 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 07:15:52.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42960 10 6452 1 2025-11-16 07:16:34.223 00:00:10.382 TCP 23.104.0.1:49130 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:16:52.293 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50872 10 6452 1 2025-11-16 07:17:34.639 00:00:10.367 TCP 23.104.0.1:36812 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:17:52.505 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36044 10 6452 1 2025-11-16 07:18:15.060 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 07:18:15.149 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 07:18:35.049 00:00:10.370 TCP 23.104.0.1:52960 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:18:52.727 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56684 10 6452 1 2025-11-16 07:19:35.459 00:00:10.366 TCP 23.104.0.1:48900 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:19:52.939 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 10 6452 1 2025-11-16 07:20:35.864 00:00:10.329 TCP 23.104.0.1:39918 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:20:53.177 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53700 10 6452 1 2025-11-16 07:21:36.232 00:00:10.365 TCP 23.104.0.1:54416 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:17:57.884 00:05:04.726 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 07:21:53.396 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53570 10 6452 1 2025-11-16 07:17:57.887 00:05:04.721 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 07:22:36.637 00:00:10.365 TCP 23.104.0.1:56022 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:22:53.610 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47168 10 6452 1 2025-11-16 07:23:15.416 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 07:23:15.661 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 07:23:37.036 00:00:10.365 TCP 23.104.0.1:40620 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:23:53.819 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33018 10 6452 1 2025-11-16 07:24:37.438 00:00:10.329 TCP 23.104.0.1:41814 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:24:53.991 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38828 10 6452 1 2025-11-16 07:25:37.803 00:00:10.370 TCP 23.104.0.1:59786 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:25:54.219 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34198 10 6452 1 2025-11-16 07:26:38.209 00:00:10.373 TCP 23.104.0.1:40320 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:26:54.432 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48798 10 6452 1 2025-11-16 07:27:38.615 00:00:10.362 TCP 23.104.0.1:43178 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:27:54.601 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55394 10 6452 1 2025-11-16 07:23:57.885 00:05:04.725 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 07:23:57.887 00:05:04.720 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 07:28:15.125 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 07:28:15.451 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 07:28:39.021 00:00:10.367 TCP 23.104.0.1:36630 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:28:54.825 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50666 10 6452 1 2025-11-16 07:29:39.425 00:00:10.366 TCP 23.104.0.1:33242 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:29:55.000 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48296 10 6452 1 2025-11-16 07:30:39.831 00:00:10.382 TCP 23.104.0.1:40522 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:30:55.233 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36504 10 6452 1 2025-11-16 07:31:40.252 00:00:10.372 TCP 23.104.0.1:39390 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:31:55.455 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54198 10 6452 1 2025-11-16 07:32:40.661 00:00:10.369 TCP 23.104.0.1:38522 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:32:55.664 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38436 10 6452 1 2025-11-16 07:33:15.376 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 07:33:15.064 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 07:33:41.094 00:00:10.361 TCP 23.104.0.1:43944 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:29:57.890 00:05:04.721 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 07:33:55.880 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40384 10 6452 1 2025-11-16 07:29:57.888 00:05:04.726 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 07:34:41.498 00:00:10.363 TCP 23.104.0.1:56912 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:34:56.100 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54356 10 6452 1 2025-11-16 07:35:41.897 00:00:10.348 TCP 23.104.0.1:57308 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:35:56.321 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47620 10 6452 1 2025-11-16 07:36:42.314 00:00:10.367 TCP 23.104.0.1:45530 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:36:56.530 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52786 10 6452 1 2025-11-16 07:37:42.722 00:00:10.381 TCP 23.104.0.1:59246 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:37:56.747 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59498 10 6452 1 2025-11-16 07:38:15.611 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 07:38:15.734 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 07:38:43.133 00:00:10.328 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:38:56.966 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49414 12 6556 1 2025-11-16 07:39:43.502 00:00:10.362 TCP 23.104.0.1:47538 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:35:57.893 00:05:04.722 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 07:35:57.895 00:05:04.717 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 07:39:57.185 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56162 10 6452 1 2025-11-16 07:40:43.905 00:00:10.366 TCP 23.104.0.1:57726 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:40:57.396 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50368 10 6452 1 2025-11-16 07:41:44.303 00:00:10.365 TCP 23.104.0.1:43374 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:41:57.606 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47950 10 6452 1 2025-11-16 07:42:44.710 00:00:10.323 TCP 23.104.0.1:45868 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:42:57.822 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51556 10 6452 1 2025-11-16 07:43:15.571 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 07:43:15.778 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 07:43:45.106 00:00:10.363 TCP 23.104.0.1:59974 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:43:58.038 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41590 10 6452 1 2025-11-16 07:44:45.511 00:00:10.372 TCP 23.104.0.1:48448 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:44:58.249 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46298 10 6452 1 2025-11-16 07:45:45.921 00:00:10.373 TCP 23.104.0.1:36110 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:41:57.904 00:05:04.709 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 07:41:57.902 00:05:04.714 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 07:45:58.465 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47198 10 6452 1 2025-11-16 07:46:46.330 00:00:10.367 TCP 23.104.0.1:33334 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:46:58.678 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33960 10 6452 1 2025-11-16 07:47:46.736 00:00:10.372 TCP 23.104.0.1:45380 -> 1.101.0.1:3000 12 1559 1 2025-11-16 07:47:58.894 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40990 10 6452 1 2025-11-16 07:48:15.878 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 07:48:15.958 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 07:48:47.139 00:00:10.371 TCP 23.104.0.1:36730 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:48:59.094 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:59048 10 6452 1 2025-11-16 07:49:47.550 00:00:10.367 TCP 23.104.0.1:56948 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:49:59.345 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52144 10 6452 1 2025-11-16 07:50:47.958 00:00:10.534 TCP 23.104.0.1:53924 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:50:59.568 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47508 10 6452 1 2025-11-16 07:51:48.539 00:00:10.321 TCP 23.104.0.1:51030 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:47:57.906 00:05:04.712 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 07:47:57.910 00:05:04.708 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 07:51:59.783 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38418 10 6452 1 2025-11-16 07:52:48.897 00:00:10.377 TCP 23.104.0.1:53302 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:53:00.009 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54432 10 6452 1 2025-11-16 07:53:15.747 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 07:53:15.809 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 07:53:49.311 00:00:10.363 TCP 23.104.0.1:48866 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:54:00.231 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54944 10 6452 1 2025-11-16 07:54:49.713 00:00:10.374 TCP 23.104.0.1:38430 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:55:00.450 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49504 10 6452 1 2025-11-16 07:55:50.127 00:00:10.361 TCP 23.104.0.1:50112 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:56:00.663 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50876 10 6452 1 2025-11-16 07:56:50.527 00:00:10.362 TCP 23.104.0.1:35932 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:57:00.886 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:44138 10 6452 1 2025-11-16 07:57:50.932 00:00:10.384 TCP 23.104.0.1:39374 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:53:57.929 00:05:04.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 07:53:57.927 00:05:04.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 07:58:01.082 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38510 10 6452 1 2025-11-16 07:58:16.016 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 07:58:16.014 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 496997, total packets: 1564, avg bps: 1099, avg pps: 0, avg bpp: 317 Time window: 2025-11-16 06:58:46 - 2025-11-16 07:59:02 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0018s Wall: 0.0025s flows/second: 65279.4 Runtime: 0.0025s