Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 00:59:11.548 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51508 10 6452 1 2025-11-20 00:59:19.104 00:00:10.367 TCP 23.104.0.1:39660 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:00:02.821 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 01:00:03.071 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:00:11.768 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34368 10 6452 1 2025-11-20 01:00:19.509 00:00:10.369 TCP 23.104.0.1:43384 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:01:11.994 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36842 10 6452 1 2025-11-20 01:01:19.916 00:00:10.381 TCP 23.104.0.1:48636 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:57:04.968 00:05:55.510 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 01:02:12.227 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44674 10 6452 1 2025-11-20 01:02:20.333 00:00:10.367 TCP 23.104.0.1:36052 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:58:04.966 00:05:55.515 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 01:03:12.446 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58826 10 6452 1 2025-11-20 01:03:20.739 00:00:10.370 TCP 23.104.0.1:40254 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:04:12.622 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55042 10 6452 1 2025-11-20 01:04:21.156 00:00:10.359 TCP 23.104.0.1:42886 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:05:03.374 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:05:02.925 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 01:05:12.839 00:00:10.343 TCP 1.101.0.1:3000 -> 22.102.0.1:48538 10 6452 1 2025-11-20 01:05:21.553 00:00:10.364 TCP 23.104.0.1:55802 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:06:13.221 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51598 10 6452 1 2025-11-20 01:06:21.957 00:00:10.379 TCP 23.104.0.1:33978 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:07:13.427 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35802 10 6452 1 2025-11-20 01:07:22.391 00:00:10.364 TCP 23.104.0.1:33974 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:03:04.973 00:05:55.506 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 01:08:13.641 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60486 10 6452 1 2025-11-20 01:08:22.791 00:00:10.366 TCP 23.104.0.1:43288 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:04:04.969 00:05:55.514 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 01:09:13.860 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45818 10 6452 1 2025-11-20 01:09:23.197 00:00:10.319 TCP 23.104.0.1:48872 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:10:03.241 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:10:03.354 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 01:10:14.084 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33080 10 6452 1 2025-11-20 01:10:23.552 00:00:10.323 TCP 23.104.0.1:48132 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:11:14.296 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46872 10 6452 1 2025-11-20 01:11:23.916 00:00:10.369 TCP 23.104.0.1:45948 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:12:14.508 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36588 10 6452 1 2025-11-20 01:12:24.321 00:00:10.357 TCP 23.104.0.1:33046 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:13:14.720 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55524 10 6452 1 2025-11-20 01:13:24.713 00:00:10.368 TCP 23.104.0.1:46152 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:09:04.972 00:05:55.512 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 01:14:14.931 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56602 10 6452 1 2025-11-20 01:14:25.129 00:00:10.327 TCP 23.104.0.1:53398 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:10:04.969 00:05:55.517 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 01:15:03.525 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:15:03.532 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 01:15:15.173 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59424 10 6452 1 2025-11-20 01:15:25.497 00:00:10.422 TCP 23.104.0.1:59986 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:16:15.387 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58640 10 6452 1 2025-11-20 01:16:25.953 00:00:10.330 TCP 23.104.0.1:43710 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:17:15.610 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42478 10 6452 1 2025-11-20 01:17:26.320 00:00:10.367 TCP 23.104.0.1:38474 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:18:15.825 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56602 10 6452 1 2025-11-20 01:18:26.720 00:00:13.656 TCP 23.104.0.1:56012 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:19:16.057 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52968 10 6452 1 2025-11-20 01:19:30.431 00:00:10.363 TCP 23.104.0.1:39662 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:15:04.977 00:05:55.510 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 01:20:03.666 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:20:03.681 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 01:20:16.277 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58410 10 6452 1 2025-11-20 01:20:30.829 00:00:10.363 TCP 23.104.0.1:48486 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:16:04.970 00:05:55.518 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 01:21:16.487 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38636 10 6452 1 2025-11-20 01:21:31.229 00:00:10.369 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:22:16.699 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51488 10 6452 1 2025-11-20 01:22:31.634 00:00:10.850 TCP 23.104.0.1:60214 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:23:16.912 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50584 10 6452 1 2025-11-20 01:23:32.518 00:00:10.363 TCP 23.104.0.1:40366 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:24:17.132 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35754 10 6452 1 2025-11-20 01:24:32.922 00:00:10.374 TCP 23.104.0.1:33780 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:25:03.464 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 01:25:03.712 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:25:17.346 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49538 10 6452 1 2025-11-20 01:25:33.336 00:00:10.323 TCP 23.104.0.1:51052 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:21:04.976 00:05:55.513 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 01:26:17.555 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43108 10 6452 1 2025-11-20 01:26:33.694 00:00:10.366 TCP 23.104.0.1:56762 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:22:04.974 00:05:55.518 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 01:27:17.780 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35984 10 6452 1 2025-11-20 01:27:34.107 00:00:10.324 TCP 23.104.0.1:41696 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:28:17.986 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:52860 10 6452 1 2025-11-20 01:28:34.464 00:00:10.360 TCP 23.104.0.1:51414 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:29:18.225 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48142 10 6452 1 2025-11-20 01:29:34.865 00:00:10.371 TCP 23.104.0.1:57756 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:30:03.895 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:30:03.843 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 01:30:18.438 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41022 10 6452 1 2025-11-20 01:30:35.271 00:00:10.376 TCP 23.104.0.1:54086 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:31:18.608 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46302 10 6452 1 2025-11-20 01:31:35.686 00:00:10.361 TCP 23.104.0.1:45838 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:27:04.978 00:05:55.512 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 01:32:18.838 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42846 10 6452 1 2025-11-20 01:32:36.105 00:00:10.364 TCP 23.104.0.1:35654 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:28:04.977 00:05:55.515 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 01:33:19.072 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37270 10 6452 1 2025-11-20 01:33:36.506 00:00:10.368 TCP 23.104.0.1:44048 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:34:19.279 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35448 10 6452 1 2025-11-20 01:34:36.912 00:00:10.364 TCP 23.104.0.1:45698 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:35:03.899 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 01:35:03.892 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:35:19.489 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56850 10 6452 1 2025-11-20 01:35:37.314 00:00:10.323 TCP 23.104.0.1:47090 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:36:19.698 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56386 10 6452 1 2025-11-20 01:36:37.675 00:00:10.364 TCP 23.104.0.1:45484 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:37:19.902 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51078 10 6452 1 2025-11-20 01:37:38.100 00:00:10.467 TCP 23.104.0.1:56158 -> 1.101.0.1:3000 15 1926 1 2025-11-20 01:33:04.979 00:05:55.514 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 01:38:20.119 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:48428 12 10375 1 2025-11-20 01:38:38.612 00:00:10.368 TCP 23.104.0.1:40814 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:34:04.977 00:05:55.519 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 01:39:20.356 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34606 10 6452 1 2025-11-20 01:39:39.017 00:00:10.361 TCP 23.104.0.1:54854 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:40:03.652 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 01:40:03.890 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:40:20.532 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33808 10 6452 1 2025-11-20 01:40:39.415 00:00:10.370 TCP 23.104.0.1:49514 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:41:20.708 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51990 10 6452 1 2025-11-20 01:41:39.826 00:00:10.370 TCP 23.104.0.1:53444 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:42:20.878 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:41780 10 6452 1 2025-11-20 01:42:40.224 00:00:10.373 TCP 23.104.0.1:46970 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:43:21.113 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35748 10 6452 1 2025-11-20 01:43:40.636 00:00:10.368 TCP 23.104.0.1:36014 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:39:04.980 00:05:55.515 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 01:44:21.326 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43122 10 6452 1 2025-11-20 01:44:41.053 00:00:10.368 TCP 23.104.0.1:52260 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:40:04.977 00:05:55.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 01:45:03.828 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:45:03.748 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 01:45:21.540 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41476 10 6452 1 2025-11-20 01:45:41.456 00:00:10.332 TCP 23.104.0.1:57282 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:46:21.763 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48182 10 6452 1 2025-11-20 01:46:41.823 00:00:10.324 TCP 23.104.0.1:51856 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:47:21.979 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33138 10 6452 1 2025-11-20 01:47:42.186 00:00:10.386 TCP 23.104.0.1:55102 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:48:22.198 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35560 10 6452 1 2025-11-20 01:48:42.609 00:00:10.374 TCP 23.104.0.1:36704 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:49:22.372 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41832 10 6452 1 2025-11-20 01:49:43.030 00:00:10.326 TCP 23.104.0.1:39566 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:45:04.980 00:05:55.526 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 01:50:04.283 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:50:03.910 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 01:50:22.548 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46492 10 6452 1 2025-11-20 01:50:43.396 00:00:10.326 TCP 23.104.0.1:54116 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:46:04.979 00:05:55.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 01:51:22.773 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:56552 10 6452 1 2025-11-20 01:51:43.759 00:00:10.375 TCP 23.104.0.1:36212 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:52:22.943 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:39702 10 6452 1 2025-11-20 01:52:44.173 00:00:10.363 TCP 23.104.0.1:34764 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:53:23.135 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47288 10 6452 1 2025-11-20 01:53:44.577 00:00:10.364 TCP 23.104.0.1:38864 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:54:23.358 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41740 10 6452 1 2025-11-20 01:54:44.983 00:00:10.361 TCP 23.104.0.1:44402 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:55:04.163 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 01:55:04.070 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 01:55:23.534 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38130 10 6452 1 2025-11-20 01:55:45.382 00:00:10.366 TCP 23.104.0.1:42050 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:51:04.987 00:05:55.524 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 01:56:23.761 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47220 10 6452 1 2025-11-20 01:56:45.788 00:00:10.369 TCP 23.104.0.1:47148 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:52:04.983 00:05:55.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 01:57:23.976 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58420 10 6452 1 2025-11-20 01:57:46.198 00:00:10.361 TCP 23.104.0.1:54488 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:58:24.210 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39998 10 6452 1 Summary: total flows: 163, total bytes: 501183, total packets: 1567, avg bps: 1086, avg pps: 0, avg bpp: 319 Time window: 2025-11-20 00:57:04 - 2025-11-20 01:58:34 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0046s User: 0.0023s Wall: 0.0025s flows/second: 64321.3 Runtime: 0.0026s