Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-19 17:58:52.014 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42878 10 6452 1 2025-11-19 17:59:05.347 00:00:10.381 TCP 23.104.0.1:45822 -> 1.101.0.1:3000 11 1507 1 2025-11-19 17:59:54.784 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 17:59:54.739 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 17:59:52.232 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46388 10 6452 1 2025-11-19 18:00:05.764 00:00:10.335 TCP 23.104.0.1:36542 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:00:52.405 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48036 10 6452 1 2025-11-19 18:01:06.138 00:00:10.365 TCP 23.104.0.1:55202 -> 1.101.0.1:3000 11 1507 1 2025-11-19 17:57:04.823 00:05:55.460 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 18:01:52.619 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46662 10 6452 1 2025-11-19 18:02:06.540 00:00:10.368 TCP 23.104.0.1:60232 -> 1.101.0.1:3000 11 1507 1 2025-11-19 17:58:04.821 00:05:55.465 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 18:02:52.834 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41842 10 6452 1 2025-11-19 18:03:06.938 00:00:10.378 TCP 23.104.0.1:60276 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:03:53.067 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33010 10 6452 1 2025-11-19 18:04:07.353 00:00:10.330 TCP 23.104.0.1:47742 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:04:55.278 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 18:04:55.401 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 18:04:53.286 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46462 10 6452 1 2025-11-19 18:05:07.715 00:00:10.379 TCP 23.104.0.1:37100 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:05:53.527 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34006 10 6452 1 2025-11-19 18:06:08.130 00:00:10.862 TCP 23.104.0.1:39870 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:06:53.741 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33412 10 6452 1 2025-11-19 18:07:09.030 00:00:10.362 TCP 23.104.0.1:34512 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:03:04.825 00:05:55.462 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 18:07:53.966 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:55590 10 6452 1 2025-11-19 18:08:09.435 00:00:10.364 TCP 23.104.0.1:42862 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:04:04.823 00:05:55.468 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 18:08:54.157 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54358 10 6452 1 2025-11-19 18:09:09.840 00:00:10.393 TCP 23.104.0.1:34976 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:09:54.782 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 18:09:55.081 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 18:09:54.332 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51044 10 6452 1 2025-11-19 18:10:10.271 00:00:10.322 TCP 23.104.0.1:50262 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:10:54.558 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36144 10 6452 1 2025-11-19 18:11:10.629 00:00:10.361 TCP 23.104.0.1:56968 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:11:54.771 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52604 10 6452 1 2025-11-19 18:12:11.029 00:00:10.321 TCP 23.104.0.1:54068 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:12:54.984 00:00:21.636 TCP 1.101.0.1:3000 -> 22.102.0.1:56292 10 6452 1 2025-11-19 18:13:11.389 00:00:10.557 TCP 23.104.0.1:56866 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:09:04.827 00:05:55.462 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 18:14:06.668 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52248 10 6452 1 2025-11-19 18:14:11.987 00:00:10.368 TCP 23.104.0.1:47630 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:14:54.891 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 18:14:54.786 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 18:10:04.825 00:05:55.467 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 18:15:06.891 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41342 10 6452 1 2025-11-19 18:15:12.392 00:00:14.381 TCP 23.104.0.1:37510 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:16:07.113 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37970 10 6452 1 2025-11-19 18:16:16.810 00:00:10.370 TCP 23.104.0.1:57052 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:17:07.323 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34940 10 6452 1 2025-11-19 18:17:17.215 00:00:10.319 TCP 23.104.0.1:51302 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:18:07.542 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47740 10 6452 1 2025-11-19 18:18:17.572 00:00:10.369 TCP 23.104.0.1:56078 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:19:07.753 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33592 10 6452 1 2025-11-19 18:19:17.981 00:00:10.367 TCP 23.104.0.1:50212 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:19:55.207 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 18:19:55.120 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 18:15:04.830 00:05:55.461 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 18:20:07.972 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48458 10 6452 1 2025-11-19 18:20:18.384 00:00:10.366 TCP 23.104.0.1:37514 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:16:04.830 00:05:55.465 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 18:21:08.200 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52306 10 6452 1 2025-11-19 18:21:18.789 00:00:10.365 TCP 23.104.0.1:51406 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:22:08.434 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41504 10 6452 1 2025-11-19 18:22:19.208 00:00:10.365 TCP 23.104.0.1:50096 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:23:08.656 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51246 10 6452 1 2025-11-19 18:23:19.613 00:00:10.359 TCP 23.104.0.1:59812 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:24:08.872 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33860 10 6452 1 2025-11-19 18:24:20.011 00:00:10.358 TCP 23.104.0.1:42714 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:24:54.954 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 18:24:55.222 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 18:25:09.105 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:37934 10 6452 1 2025-11-19 18:25:20.409 00:00:10.370 TCP 23.104.0.1:36630 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:21:04.833 00:05:55.459 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 18:26:09.295 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40334 10 6452 1 2025-11-19 18:26:20.822 00:00:10.323 TCP 23.104.0.1:57622 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:22:04.830 00:05:55.465 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 18:27:09.500 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38518 10 6452 1 2025-11-19 18:27:21.183 00:00:10.367 TCP 23.104.0.1:42920 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:28:09.710 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57846 10 6452 1 2025-11-19 18:28:21.593 00:00:10.340 TCP 23.104.0.1:36590 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:29:09.920 00:00:12.578 TCP 1.101.0.1:3000 -> 22.102.0.1:34790 10 6452 1 2025-11-19 18:29:21.988 00:00:10.368 TCP 23.104.0.1:60816 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:29:55.099 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 18:29:55.481 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 18:30:12.540 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35864 10 6452 1 2025-11-19 18:30:22.392 00:00:10.368 TCP 23.104.0.1:51010 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:31:12.753 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58706 10 6452 1 2025-11-19 18:31:22.806 00:00:10.375 TCP 23.104.0.1:58872 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:27:04.833 00:05:55.460 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 18:32:12.925 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36980 10 6452 1 2025-11-19 18:32:23.219 00:00:10.367 TCP 23.104.0.1:58164 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:28:04.832 00:05:55.465 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 18:33:13.124 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51360 10 6452 1 2025-11-19 18:33:23.623 00:00:11.891 TCP 23.104.0.1:36962 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:34:13.335 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48152 10 6452 1 2025-11-19 18:34:25.559 00:00:10.364 TCP 23.104.0.1:36062 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:34:55.110 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 18:34:55.553 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 18:35:13.543 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33470 10 6452 1 2025-11-19 18:35:25.962 00:00:10.360 TCP 23.104.0.1:37010 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:36:13.765 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41652 10 6452 1 2025-11-19 18:36:26.362 00:00:10.376 TCP 23.104.0.1:38114 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:37:13.978 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54324 10 6452 1 2025-11-19 18:37:26.779 00:00:10.329 TCP 23.104.0.1:46444 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:33:04.837 00:05:55.459 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 18:38:14.201 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42248 10 6452 1 2025-11-19 18:38:27.142 00:00:10.332 TCP 23.104.0.1:51636 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:34:04.833 00:05:55.465 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 18:39:14.377 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53956 10 6452 1 2025-11-19 18:39:27.516 00:00:10.371 TCP 23.104.0.1:54322 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:39:55.570 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 18:39:55.587 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 18:40:14.593 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51098 10 6452 1 2025-11-19 18:40:27.927 00:00:10.390 TCP 23.104.0.1:49014 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:41:14.806 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43502 10 6452 1 2025-11-19 18:41:28.353 00:00:10.368 TCP 23.104.0.1:43462 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:42:15.041 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53092 10 6452 1 2025-11-19 18:42:28.759 00:00:10.448 TCP 23.104.0.1:49858 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:43:15.264 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36782 10 6452 1 2025-11-19 18:43:29.248 00:00:10.368 TCP 23.104.0.1:43518 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:39:04.836 00:05:55.460 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 18:44:15.480 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39266 10 6452 1 2025-11-19 18:44:29.657 00:00:10.365 TCP 23.104.0.1:52504 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:44:55.452 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 18:44:55.522 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 18:40:04.833 00:05:55.465 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 18:45:15.691 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48728 10 6452 1 2025-11-19 18:45:30.094 00:00:10.363 TCP 23.104.0.1:52924 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:46:15.866 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48546 10 6452 1 2025-11-19 18:46:30.496 00:00:10.332 TCP 23.104.0.1:48858 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:47:16.097 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42490 10 6452 1 2025-11-19 18:47:30.879 00:00:10.397 TCP 23.104.0.1:59876 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:48:16.268 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50918 10 6452 1 2025-11-19 18:48:31.332 00:00:10.373 TCP 23.104.0.1:33892 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:49:16.477 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46562 10 6452 1 2025-11-19 18:49:31.749 00:00:10.394 TCP 23.104.0.1:46010 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:49:55.778 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 18:49:55.794 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 18:45:04.838 00:05:55.462 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 18:50:16.690 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53372 10 6452 1 2025-11-19 18:50:32.179 00:00:10.416 TCP 23.104.0.1:51858 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:46:04.836 00:05:55.467 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 18:51:16.900 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50464 10 6452 1 2025-11-19 18:51:32.638 00:00:10.324 TCP 23.104.0.1:59592 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:52:17.114 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57658 10 6452 1 2025-11-19 18:52:33.001 00:00:10.363 TCP 23.104.0.1:60352 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:53:17.331 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53128 10 6452 1 2025-11-19 18:53:33.394 00:00:10.367 TCP 23.104.0.1:60634 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:54:17.502 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56876 10 6452 1 2025-11-19 18:54:33.798 00:00:10.348 TCP 23.104.0.1:43934 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:54:55.686 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 18:54:55.521 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 18:55:17.723 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44594 10 6452 1 2025-11-19 18:55:34.186 00:00:10.324 TCP 23.104.0.1:46092 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:51:04.840 00:05:55.462 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 18:56:17.985 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46878 10 6452 1 2025-11-19 18:56:34.554 00:00:10.322 TCP 23.104.0.1:54702 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:52:04.835 00:05:55.467 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 18:57:18.220 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40776 10 6452 1 2025-11-19 18:57:34.918 00:00:10.327 TCP 23.104.0.1:40590 -> 1.101.0.1:3000 11 1507 1 2025-11-19 18:58:18.390 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39540 10 6452 1 2025-11-19 18:58:35.284 00:00:10.365 TCP 23.104.0.1:60212 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1077, avg pps: 0, avg bpp: 317 Time window: 2025-11-19 17:57:04 - 2025-11-19 18:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0052s User: 0.0010s Wall: 0.0018s flows/second: 88688.2 Runtime: 0.0019s