Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 08:59:16.015 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42550 10 6452 1 2025-11-16 08:59:19.613 00:00:10.362 TCP 23.104.0.1:60774 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:00:16.238 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41212 10 6452 1 2025-11-16 09:00:20.012 00:00:10.368 TCP 23.104.0.1:44152 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:01:16.450 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39604 10 6452 1 2025-11-16 09:01:20.420 00:00:10.386 TCP 23.104.0.1:39520 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:02:16.663 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57072 10 6452 1 2025-11-16 09:02:20.848 00:00:10.388 TCP 23.104.0.1:42618 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:03:17.170 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 09:03:17.256 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 09:03:21.273 00:00:10.363 TCP 23.104.0.1:59500 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:03:16.879 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55944 10 6452 1 2025-11-16 08:59:57.947 00:05:04.729 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 08:59:57.948 00:05:04.724 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 09:04:17.104 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36804 10 6452 1 2025-11-16 09:04:21.676 00:00:10.375 TCP 23.104.0.1:45874 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:05:17.317 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53026 10 6452 1 2025-11-16 09:05:22.103 00:00:10.360 TCP 23.104.0.1:42060 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:06:17.528 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:38864 12 10375 1 2025-11-16 09:06:22.503 00:00:10.435 TCP 23.104.0.1:35602 -> 1.101.0.1:3000 15 1926 1 2025-11-16 09:07:17.769 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43610 10 6452 1 2025-11-16 09:07:22.978 00:00:10.322 TCP 23.104.0.1:36142 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:08:17.081 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 09:08:17.368 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 09:08:17.979 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50004 10 6452 1 2025-11-16 09:08:23.338 00:00:10.324 TCP 23.104.0.1:60112 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:09:18.207 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38334 10 6452 1 2025-11-16 09:09:23.699 00:00:10.365 TCP 23.104.0.1:51872 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:05:57.961 00:05:04.713 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 09:05:57.959 00:05:04.718 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 09:10:18.418 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57004 10 6452 1 2025-11-16 09:10:24.108 00:00:10.365 TCP 23.104.0.1:56256 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:11:18.629 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46462 10 6452 1 2025-11-16 09:11:24.510 00:00:10.363 TCP 23.104.0.1:33212 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:12:18.849 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34242 10 6452 1 2025-11-16 09:12:24.913 00:00:10.412 TCP 23.104.0.1:56874 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:13:17.630 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 09:13:17.572 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 09:13:19.083 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46596 10 6452 1 2025-11-16 09:13:25.365 00:00:10.362 TCP 23.104.0.1:45062 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:14:19.255 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46476 10 6452 1 2025-11-16 09:14:25.765 00:00:10.376 TCP 23.104.0.1:32866 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:15:19.473 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42374 10 6452 1 2025-11-16 09:15:26.176 00:00:10.365 TCP 23.104.0.1:33206 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:11:57.961 00:05:04.715 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 09:11:57.963 00:05:04.711 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 09:16:19.696 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46990 10 6452 1 2025-11-16 09:16:26.574 00:00:10.366 TCP 23.104.0.1:38362 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:17:19.867 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52360 10 6452 1 2025-11-16 09:17:26.982 00:00:10.325 TCP 23.104.0.1:54146 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:18:17.575 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 09:18:17.645 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 09:18:20.095 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46338 10 6452 1 2025-11-16 09:18:27.345 00:00:10.392 TCP 23.104.0.1:34796 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:19:20.267 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43142 10 6452 1 2025-11-16 09:19:27.750 00:00:10.395 TCP 23.104.0.1:58836 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:20:20.442 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45132 10 6452 1 2025-11-16 09:20:28.184 00:00:10.365 TCP 23.104.0.1:35788 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:21:20.655 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39944 10 6452 1 2025-11-16 09:21:28.585 00:00:10.364 TCP 23.104.0.1:53230 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:17:57.964 00:05:04.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 09:17:57.962 00:05:04.717 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 09:22:20.874 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36068 10 6452 1 2025-11-16 09:22:28.987 00:00:10.375 TCP 23.104.0.1:60880 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:23:17.623 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 09:23:17.821 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 09:23:21.105 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40700 10 6452 1 2025-11-16 09:23:29.414 00:00:10.368 TCP 23.104.0.1:51554 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:24:21.275 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56208 10 6452 1 2025-11-16 09:24:29.817 00:00:10.327 TCP 23.104.0.1:48404 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:25:21.489 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35818 10 6452 1 2025-11-16 09:25:30.183 00:00:10.365 TCP 23.104.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:26:21.703 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44904 10 6452 1 2025-11-16 09:26:30.593 00:00:10.363 TCP 23.104.0.1:38292 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:27:21.916 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55856 10 6452 1 2025-11-16 09:27:30.994 00:00:10.321 TCP 23.104.0.1:45698 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:23:57.967 00:05:04.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 09:23:57.966 00:05:04.717 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 09:28:17.976 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 09:28:17.828 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 09:28:22.129 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38224 10 6452 1 2025-11-16 09:28:31.356 00:00:10.366 TCP 23.104.0.1:35304 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:29:22.342 00:00:10.426 TCP 1.101.0.1:3000 -> 22.102.0.1:36824 10 6452 1 2025-11-16 09:29:31.764 00:00:13.657 TCP 23.104.0.1:58314 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:30:22.808 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38046 10 6452 1 2025-11-16 09:30:35.470 00:00:10.364 TCP 23.104.0.1:37972 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:31:23.016 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59528 10 6452 1 2025-11-16 09:31:35.870 00:00:10.317 TCP 23.104.0.1:55246 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:32:23.236 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40090 10 6452 1 2025-11-16 09:32:36.226 00:00:10.362 TCP 23.104.0.1:39466 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:33:17.663 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 09:33:17.688 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 09:33:23.450 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48212 10 6452 1 2025-11-16 09:33:36.625 00:00:10.364 TCP 23.104.0.1:40132 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:29:57.964 00:05:04.718 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 09:29:57.966 00:05:04.714 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 09:34:23.677 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41006 10 6452 1 2025-11-16 09:34:37.029 00:00:10.361 TCP 23.104.0.1:43740 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:35:23.897 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41776 10 6452 1 2025-11-16 09:35:37.431 00:00:10.318 TCP 23.104.0.1:54290 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:36:24.116 00:00:10.398 TCP 1.101.0.1:3000 -> 22.102.0.1:50310 10 6452 1 2025-11-16 09:36:37.791 00:00:10.364 TCP 23.104.0.1:48190 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:37:24.547 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58436 10 6452 1 2025-11-16 09:37:38.193 00:00:10.416 TCP 23.104.0.1:54428 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:38:17.996 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 09:38:17.928 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 09:38:24.763 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42422 10 6452 1 2025-11-16 09:38:38.653 00:00:10.371 TCP 23.104.0.1:39292 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:39:24.974 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37660 10 6452 1 2025-11-16 09:39:39.087 00:00:10.369 TCP 23.104.0.1:36648 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:35:57.965 00:05:04.718 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 09:35:57.968 00:05:04.713 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 09:40:25.207 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:38654 10 6452 1 2025-11-16 09:40:39.492 00:00:10.365 TCP 23.104.0.1:34304 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:41:25.384 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:60896 12 10375 1 2025-11-16 09:41:39.897 00:00:10.442 TCP 23.104.0.1:33704 -> 1.101.0.1:3000 15 1926 1 2025-11-16 09:42:25.632 00:00:11.329 TCP 1.101.0.1:3000 -> 22.102.0.1:39782 11 6504 1 2025-11-16 09:42:40.383 00:00:10.362 TCP 23.104.0.1:57500 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:43:18.094 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 09:43:17.940 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 09:43:27.006 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37126 10 6452 1 2025-11-16 09:43:40.784 00:00:10.366 TCP 23.104.0.1:44566 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:44:27.223 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53878 10 6452 1 2025-11-16 09:44:41.190 00:00:10.322 TCP 23.104.0.1:33730 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:45:27.433 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47946 10 6452 1 2025-11-16 09:45:41.553 00:00:10.326 TCP 23.104.0.1:47672 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:41:57.970 00:05:04.714 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 09:41:57.969 00:05:04.719 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 09:46:27.648 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35992 10 6452 1 2025-11-16 09:46:41.924 00:00:10.372 TCP 23.104.0.1:39012 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:47:27.863 00:00:10.653 TCP 1.101.0.1:3000 -> 22.102.0.1:57172 10 6452 1 2025-11-16 09:47:42.339 00:00:10.367 TCP 23.104.0.1:41450 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:48:18.241 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 09:48:18.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 09:48:28.555 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53986 10 6452 1 2025-11-16 09:48:42.745 00:00:10.361 TCP 23.104.0.1:45662 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:49:28.772 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46464 10 6452 1 2025-11-16 09:49:43.145 00:00:10.369 TCP 23.104.0.1:53662 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:50:28.990 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39178 10 6452 1 2025-11-16 09:50:43.548 00:00:10.364 TCP 23.104.0.1:60786 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:51:29.222 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51274 10 6452 1 2025-11-16 09:51:43.945 00:00:10.750 TCP 23.104.0.1:45712 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:47:57.971 00:05:04.715 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 09:47:57.968 00:05:04.720 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 09:52:29.443 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36100 10 6452 1 2025-11-16 09:52:44.736 00:00:10.367 TCP 23.104.0.1:41100 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:53:18.325 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 09:53:18.083 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 09:53:29.667 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:35698 10 6452 1 2025-11-16 09:53:45.141 00:00:10.322 TCP 23.104.0.1:47672 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:54:29.847 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:48728 10 6452 1 2025-11-16 09:54:45.503 00:00:10.363 TCP 23.104.0.1:34386 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:55:30.090 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33222 10 6452 1 2025-11-16 09:55:45.909 00:00:10.369 TCP 23.104.0.1:51086 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:56:30.322 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47652 10 6452 1 2025-11-16 09:56:46.311 00:00:10.370 TCP 23.104.0.1:44730 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:57:30.540 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46846 10 6452 1 2025-11-16 09:57:46.719 00:00:10.722 TCP 23.104.0.1:48318 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:53:57.969 00:05:04.721 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 09:53:57.972 00:05:04.716 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 09:58:18.216 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 09:58:18.352 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 09:58:30.760 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37848 10 6452 1 Summary: total flows: 163, total bytes: 505577, total packets: 1574, avg bps: 1127, avg pps: 0, avg bpp: 321 Time window: 2025-11-16 08:59:16 - 2025-11-16 09:59:02 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0021s Wall: 0.0029s flows/second: 56324.9 Runtime: 0.0029s