Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 13:58:57.208 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59464 10 6452 1 2025-11-16 13:59:28.696 00:00:10.366 TCP 23.104.0.1:58872 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:59:57.381 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52870 10 6452 1 2025-11-16 14:00:29.114 00:00:10.369 TCP 23.104.0.1:44888 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:00:57.602 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34700 10 6452 1 2025-11-16 14:01:29.522 00:00:10.440 TCP 23.104.0.1:38824 -> 1.101.0.1:3000 15 1926 1 2025-11-16 14:01:57.819 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60210 12 10369 1 2025-11-16 14:02:30.002 00:00:10.558 TCP 23.104.0.1:34486 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:02:58.086 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38986 10 6452 1 2025-11-16 14:03:23.200 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 14:03:23.201 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 14:03:30.597 00:00:10.367 TCP 23.104.0.1:39968 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:59:02.825 00:05:55.283 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 13:59:58.109 00:05:04.714 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 14:03:58.299 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39884 10 6452 1 2025-11-16 14:04:31.005 00:00:10.363 TCP 23.104.0.1:32768 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:04:58.522 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38730 10 6452 1 2025-11-16 14:05:31.404 00:00:10.367 TCP 23.104.0.1:35396 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:05:58.697 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39246 10 6452 1 2025-11-16 14:06:31.812 00:00:10.365 TCP 23.104.0.1:58682 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:06:58.914 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39870 10 6452 1 2025-11-16 14:07:32.224 00:00:10.325 TCP 23.104.0.1:44106 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:07:59.139 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48974 10 6452 1 2025-11-16 14:08:23.525 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 14:08:23.639 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 14:08:32.588 00:00:10.364 TCP 23.104.0.1:39828 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:08:59.357 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36308 10 6452 1 2025-11-16 14:09:32.992 00:00:10.363 TCP 23.104.0.1:58146 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:05:02.825 00:05:55.283 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 14:05:58.111 00:05:04.715 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 14:09:59.574 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51304 10 6452 1 2025-11-16 14:10:33.417 00:00:10.374 TCP 23.104.0.1:52086 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:10:59.792 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:38452 10 6452 1 2025-11-16 14:11:33.831 00:00:10.406 TCP 23.104.0.1:50606 -> 1.101.0.1:3000 15 1926 1 2025-11-16 14:12:00.043 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:41266 12 10375 1 2025-11-16 14:12:34.275 00:00:10.368 TCP 23.104.0.1:45060 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:13:00.248 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35300 10 6452 1 2025-11-16 14:13:23.548 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 14:13:23.304 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 14:13:34.679 00:00:10.368 TCP 23.104.0.1:56914 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:14:00.475 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32986 10 6452 1 2025-11-16 14:14:35.103 00:00:10.365 TCP 23.104.0.1:40712 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:15:00.686 00:00:10.448 TCP 1.101.0.1:3000 -> 22.102.0.1:40998 10 6452 1 2025-11-16 14:15:35.506 00:00:10.368 TCP 23.104.0.1:53126 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:11:02.830 00:05:55.282 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 14:11:58.111 00:05:04.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 14:16:01.184 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43894 10 6452 1 2025-11-16 14:16:35.907 00:00:10.441 TCP 23.104.0.1:49512 -> 1.101.0.1:3000 15 1926 1 2025-11-16 14:17:01.406 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:50234 12 10369 1 2025-11-16 14:17:36.391 00:00:10.368 TCP 23.104.0.1:48482 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:18:01.659 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45254 10 6452 1 2025-11-16 14:18:23.560 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 14:18:23.576 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 14:18:36.792 00:00:10.347 TCP 23.104.0.1:58280 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:19:01.865 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56552 10 6452 1 2025-11-16 14:19:37.176 00:00:10.365 TCP 23.104.0.1:55908 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:20:02.087 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47164 10 6452 1 2025-11-16 14:20:37.579 00:00:10.370 TCP 23.104.0.1:55912 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:21:02.302 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45126 10 6452 1 2025-11-16 14:21:37.997 00:00:10.371 TCP 23.104.0.1:55498 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:17:02.840 00:05:55.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 14:17:58.113 00:05:04.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 14:22:02.520 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55358 10 6452 1 2025-11-16 14:22:38.407 00:00:10.422 TCP 23.104.0.1:35568 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:23:02.734 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56866 10 6452 1 2025-11-16 14:23:23.530 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 14:23:23.661 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 14:23:38.863 00:00:10.371 TCP 23.104.0.1:45686 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:24:02.946 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60842 10 6452 1 2025-11-16 14:24:39.278 00:00:10.363 TCP 23.104.0.1:52054 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:25:03.180 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45088 10 6452 1 2025-11-16 14:25:39.676 00:00:10.462 TCP 23.104.0.1:46180 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:26:03.387 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41502 10 6452 1 2025-11-16 14:26:40.180 00:00:10.369 TCP 23.104.0.1:34396 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:27:03.602 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50964 10 6452 1 2025-11-16 14:27:40.587 00:00:10.795 TCP 23.104.0.1:46730 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:23:02.840 00:05:55.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 14:23:58.114 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 14:28:03.815 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52454 10 6452 1 2025-11-16 14:28:23.886 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 14:28:23.780 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 14:28:41.426 00:00:10.358 TCP 23.104.0.1:42090 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:29:04.034 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:51056 10 6452 1 2025-11-16 14:29:41.819 00:00:10.366 TCP 23.104.0.1:57876 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:30:04.200 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56054 10 6452 1 2025-11-16 14:30:42.220 00:00:10.359 TCP 23.104.0.1:40860 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:31:04.415 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60948 10 6452 1 2025-11-16 14:31:42.618 00:00:10.324 TCP 23.104.0.1:40208 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:32:04.586 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58622 10 6452 1 2025-11-16 14:32:42.983 00:00:10.333 TCP 23.104.0.1:59214 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:33:04.758 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46304 10 6452 1 2025-11-16 14:33:23.628 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 14:33:23.925 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 14:33:43.357 00:00:10.360 TCP 23.104.0.1:51346 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:29:02.845 00:05:55.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 14:29:58.117 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 14:34:04.965 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:60426 10 6452 1 2025-11-16 14:34:43.754 00:00:10.381 TCP 23.104.0.1:57136 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:35:05.152 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53040 10 6452 1 2025-11-16 14:35:44.181 00:00:10.319 TCP 23.104.0.1:44614 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:36:05.374 00:00:10.384 TCP 1.101.0.1:3000 -> 22.102.0.1:52696 10 6452 1 2025-11-16 14:36:44.540 00:00:10.329 TCP 23.104.0.1:50784 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:37:05.795 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37230 10 6452 1 2025-11-16 14:37:44.903 00:00:10.370 TCP 23.104.0.1:55454 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:38:06.005 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54854 10 6452 1 2025-11-16 14:38:23.935 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 14:38:23.832 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 14:38:45.311 00:00:10.367 TCP 23.104.0.1:43654 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:39:06.246 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:55896 10 6452 1 2025-11-16 14:39:45.719 00:00:10.966 TCP 23.104.0.1:37088 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:35:02.847 00:05:55.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 14:35:58.121 00:05:04.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 14:40:06.425 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60708 10 6452 1 2025-11-16 14:40:46.725 00:00:10.425 TCP 23.104.0.1:41648 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:41:06.664 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36502 10 6452 1 2025-11-16 14:41:47.191 00:00:10.442 TCP 23.104.0.1:42758 -> 1.101.0.1:3000 15 1926 1 2025-11-16 14:42:06.879 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:42410 12 10375 1 2025-11-16 14:42:47.668 00:00:10.375 TCP 23.104.0.1:58698 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:43:07.133 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 10 6452 1 2025-11-16 14:43:23.940 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 14:43:23.983 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 14:43:48.093 00:00:10.362 TCP 23.104.0.1:43274 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:44:07.355 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37604 10 6452 1 2025-11-16 14:44:48.498 00:00:10.360 TCP 23.104.0.1:43098 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:45:07.566 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52762 10 6452 1 2025-11-16 14:45:48.898 00:00:10.379 TCP 23.104.0.1:36986 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:41:02.848 00:05:55.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 14:41:58.122 00:05:04.724 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 14:46:07.758 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:40954 10 6452 1 2025-11-16 14:46:49.313 00:00:10.420 TCP 23.104.0.1:55368 -> 1.101.0.1:3000 15 1926 1 2025-11-16 14:47:07.926 00:00:10.242 TCP 1.101.0.1:3000 -> 22.102.0.1:58462 12 10375 1 2025-11-16 14:47:49.782 00:00:10.367 TCP 23.104.0.1:34972 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:48:08.204 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50846 10 6452 1 2025-11-16 14:48:24.261 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 14:48:24.110 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 14:48:50.189 00:00:10.377 TCP 23.104.0.1:36286 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:49:08.420 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58614 10 6452 1 2025-11-16 14:49:50.609 00:00:10.323 TCP 23.104.0.1:40338 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:50:08.644 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50698 10 6452 1 2025-11-16 14:50:50.971 00:00:10.367 TCP 23.104.0.1:50438 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:51:08.864 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50292 10 6452 1 2025-11-16 14:47:02.848 00:05:55.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 14:51:51.375 00:00:10.373 TCP 23.104.0.1:45448 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:47:58.124 00:05:04.726 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 14:52:09.037 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:42540 10 6452 1 2025-11-16 14:52:51.784 00:00:10.369 TCP 23.104.0.1:57928 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:53:24.066 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 14:53:09.201 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50992 10 6452 1 2025-11-16 14:53:24.188 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 14:53:52.188 00:00:10.363 TCP 23.104.0.1:53924 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:54:09.408 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55668 10 6452 1 2025-11-16 14:54:52.586 00:00:10.368 TCP 23.104.0.1:60430 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:55:09.626 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38438 10 6452 1 2025-11-16 14:55:52.988 00:00:11.069 TCP 23.104.0.1:43070 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:56:09.836 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52382 10 6452 1 2025-11-16 14:56:54.109 00:00:10.367 TCP 23.104.0.1:41170 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:57:10.078 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45546 10 6452 1 2025-11-16 14:53:02.853 00:05:55.271 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 14:57:54.512 00:00:10.363 TCP 23.104.0.1:44794 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:53:58.125 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 14:58:10.291 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54768 10 6452 1 2025-11-16 14:58:24.444 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 14:58:24.390 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 518539, total packets: 1591, avg bps: 1150, avg pps: 0, avg bpp: 325 Time window: 2025-11-16 13:58:57 - 2025-11-16 14:59:02 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0019s Wall: 0.0022s flows/second: 72568.9 Runtime: 0.0023s