Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 12:58:47.398 00:00:17.961 TCP 1.101.0.1:3000 -> 22.102.0.1:38546 10 6452 1 2025-11-20 12:59:02.512 00:00:10.330 TCP 23.104.0.1:55842 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:59:55.405 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56188 10 6452 1 2025-11-20 13:00:02.885 00:00:10.351 TCP 23.104.0.1:41588 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:00:19.282 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 13:00:19.332 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 13:00:55.623 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53756 10 6452 1 2025-11-20 13:01:03.301 00:00:10.370 TCP 23.104.0.1:60672 -> 1.101.0.1:3000 11 1507 1 2025-11-20 12:57:05.247 00:05:55.633 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 13:01:55.840 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60472 10 6452 1 2025-11-20 12:58:00.880 00:05:04.366 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 13:02:03.709 00:00:10.322 TCP 23.104.0.1:33290 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:02:56.074 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51596 10 6452 1 2025-11-20 13:03:04.096 00:00:10.319 TCP 23.104.0.1:50354 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:03:56.289 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47648 10 6452 1 2025-11-20 13:04:04.456 00:00:10.372 TCP 23.104.0.1:38776 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:04:56.507 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38614 10 6452 1 2025-11-20 13:05:04.864 00:00:10.371 TCP 23.104.0.1:39950 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:05:19.434 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 13:05:19.361 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 13:05:56.726 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59762 10 6452 1 2025-11-20 13:06:05.273 00:00:10.366 TCP 23.104.0.1:37214 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:06:56.942 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54320 10 6452 1 2025-11-20 13:07:05.683 00:00:10.379 TCP 23.104.0.1:42638 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:03:05.249 00:05:55.632 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 13:04:00.884 00:05:04.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 13:07:57.179 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50964 10 6452 1 2025-11-20 13:08:06.108 00:00:10.367 TCP 23.104.0.1:45162 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:08:57.397 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43444 10 6452 1 2025-11-20 13:09:06.514 00:00:10.701 TCP 23.104.0.1:57528 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:09:57.615 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57862 10 6452 1 2025-11-20 13:10:07.251 00:00:10.371 TCP 23.104.0.1:50926 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:10:19.365 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 13:10:19.548 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 13:10:57.848 00:00:10.932 TCP 1.101.0.1:3000 -> 22.102.0.1:49586 10 6452 1 2025-11-20 13:11:07.660 00:00:10.368 TCP 23.104.0.1:39712 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:11:58.833 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60510 10 6452 1 2025-11-20 13:12:08.096 00:00:10.358 TCP 23.104.0.1:57016 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:12:59.020 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35850 10 6452 1 2025-11-20 13:13:08.496 00:00:10.374 TCP 23.104.0.1:46104 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:09:05.252 00:05:55.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 13:10:00.885 00:05:04.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 13:13:59.234 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57064 10 6452 1 2025-11-20 13:14:08.907 00:00:10.328 TCP 23.104.0.1:60916 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:14:59.452 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36718 10 6452 1 2025-11-20 13:15:19.538 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 13:15:09.287 00:00:10.364 TCP 23.104.0.1:35768 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:15:19.381 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 13:15:59.670 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56168 10 6452 1 2025-11-20 13:16:09.693 00:00:10.364 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:16:59.886 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57128 10 6452 1 2025-11-20 13:17:10.116 00:00:10.328 TCP 23.104.0.1:58884 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:18:00.106 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:40978 10 6452 1 2025-11-20 13:18:10.484 00:00:10.367 TCP 23.104.0.1:49184 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:19:00.312 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37102 10 6452 1 2025-11-20 13:19:10.902 00:00:10.361 TCP 23.104.0.1:39698 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:15:05.252 00:05:55.642 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 13:16:00.895 00:05:04.355 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 13:20:00.529 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51024 10 6452 1 2025-11-20 13:20:19.597 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 13:20:19.591 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 13:20:11.304 00:00:10.362 TCP 23.104.0.1:48682 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:21:00.698 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36240 10 6452 1 2025-11-20 13:21:11.704 00:00:10.365 TCP 23.104.0.1:58368 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:22:00.917 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36570 10 6452 1 2025-11-20 13:22:12.118 00:00:10.365 TCP 23.104.0.1:33658 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:23:01.132 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58044 10 6452 1 2025-11-20 13:23:12.527 00:00:10.363 TCP 23.104.0.1:38906 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:24:01.305 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40372 10 6452 1 2025-11-20 13:24:12.926 00:00:10.389 TCP 23.104.0.1:52658 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:25:01.519 00:00:11.039 TCP 1.101.0.1:3000 -> 22.102.0.1:60590 10 6452 1 2025-11-20 13:25:19.813 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 13:25:19.810 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 13:25:13.353 00:00:10.368 TCP 23.104.0.1:35868 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:21:05.253 00:05:55.642 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 13:22:00.897 00:05:04.356 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 13:26:02.592 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:46826 10 6452 1 2025-11-20 13:26:13.763 00:00:10.381 TCP 23.104.0.1:35008 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:27:02.766 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:54832 10 6452 1 2025-11-20 13:27:14.185 00:00:10.360 TCP 23.104.0.1:39386 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:28:03.008 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35204 10 6452 1 2025-11-20 13:28:14.582 00:00:10.363 TCP 23.104.0.1:46138 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:29:03.230 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47718 10 6452 1 2025-11-20 13:29:14.982 00:00:10.365 TCP 23.104.0.1:36032 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:30:03.452 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49274 10 6452 1 2025-11-20 13:30:19.656 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 13:30:19.790 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 13:30:15.387 00:00:10.367 TCP 23.104.0.1:36308 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:31:03.688 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56824 10 6452 1 2025-11-20 13:31:15.789 00:00:10.369 TCP 23.104.0.1:33732 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:27:05.255 00:05:55.656 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 13:28:00.897 00:05:04.357 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 13:32:03.909 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54576 10 6452 1 2025-11-20 13:32:16.196 00:00:10.364 TCP 23.104.0.1:44232 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:33:04.121 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35374 10 6452 1 2025-11-20 13:33:16.600 00:00:10.323 TCP 23.104.0.1:38398 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:34:04.347 00:00:11.017 TCP 1.101.0.1:3000 -> 22.102.0.1:54842 10 6452 1 2025-11-20 13:34:16.962 00:00:10.372 TCP 23.104.0.1:57288 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:35:05.406 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37676 10 6452 1 2025-11-20 13:35:19.985 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 13:35:20.116 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 13:35:17.388 00:00:10.369 TCP 23.104.0.1:38422 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:36:05.621 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52696 10 6452 1 2025-11-20 13:36:17.800 00:00:10.371 TCP 23.104.0.1:56912 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:37:05.792 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56842 10 6452 1 2025-11-20 13:37:18.210 00:00:10.324 TCP 23.104.0.1:47682 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:33:05.256 00:05:55.658 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 13:34:00.913 00:05:04.346 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 13:38:06.034 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38926 10 6452 1 2025-11-20 13:38:18.572 00:00:10.846 TCP 23.104.0.1:57548 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:39:06.255 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43796 10 6452 1 2025-11-20 13:39:19.461 00:00:10.362 TCP 23.104.0.1:52594 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:40:06.474 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44850 10 6452 1 2025-11-20 13:40:19.889 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 13:40:20.339 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 13:40:19.857 00:00:10.375 TCP 23.104.0.1:52648 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:41:06.695 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37000 10 6452 1 2025-11-20 13:41:20.269 00:00:10.321 TCP 23.104.0.1:50858 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:42:06.907 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43722 10 6452 1 2025-11-20 13:42:20.628 00:00:10.361 TCP 23.104.0.1:38244 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:43:07.130 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48138 10 6452 1 2025-11-20 13:43:21.027 00:00:10.367 TCP 23.104.0.1:54126 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:39:05.262 00:05:55.656 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 13:40:00.918 00:05:04.344 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 13:44:07.347 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54016 10 6452 1 2025-11-20 13:44:21.430 00:00:10.332 TCP 23.104.0.1:57106 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:45:07.554 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40544 10 6452 1 2025-11-20 13:45:20.188 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 13:45:20.258 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 13:45:21.801 00:00:10.367 TCP 23.104.0.1:37130 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:46:07.770 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38858 10 6452 1 2025-11-20 13:46:22.210 00:00:10.361 TCP 23.104.0.1:37422 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:47:07.941 00:00:10.499 TCP 1.101.0.1:3000 -> 22.102.0.1:44260 10 6452 1 2025-11-20 13:47:22.612 00:00:10.358 TCP 23.104.0.1:35642 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:48:08.479 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52028 10 6452 1 2025-11-20 13:48:23.011 00:00:10.321 TCP 23.104.0.1:47024 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:49:08.696 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54852 10 6452 1 2025-11-20 13:49:23.374 00:00:10.362 TCP 23.104.0.1:42366 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:45:05.264 00:05:55.657 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 13:46:00.923 00:05:04.341 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 13:50:19.959 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 13:50:08.917 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47796 10 6452 1 2025-11-20 13:50:20.390 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 13:50:23.779 00:00:10.329 TCP 23.104.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:51:09.145 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36058 10 6452 1 2025-11-20 13:51:24.151 00:00:10.362 TCP 23.104.0.1:52652 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:52:09.366 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42122 10 6452 1 2025-11-20 13:52:24.557 00:00:10.367 TCP 23.104.0.1:60994 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:53:09.592 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43076 10 6452 1 2025-11-20 13:53:24.962 00:00:10.369 TCP 23.104.0.1:36462 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:54:09.815 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47496 10 6452 1 2025-11-20 13:54:25.368 00:00:10.366 TCP 23.104.0.1:36864 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:55:09.988 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59142 10 6452 1 2025-11-20 13:55:20.311 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 13:55:20.389 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 13:55:25.770 00:00:10.371 TCP 23.104.0.1:52138 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:51:05.265 00:05:55.654 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 13:52:00.922 00:05:04.342 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 13:56:10.209 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41986 10 6452 1 2025-11-20 13:56:26.177 00:00:10.367 TCP 23.104.0.1:45664 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:57:10.426 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40142 10 6452 1 2025-11-20 13:57:26.582 00:00:10.360 TCP 23.104.0.1:59746 -> 1.101.0.1:3000 11 1507 1 2025-11-20 13:58:10.646 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:56290 10 6452 1 2025-11-20 13:58:26.982 00:00:10.370 TCP 23.104.0.1:35296 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1079, avg pps: 0, avg bpp: 317 Time window: 2025-11-20 12:57:05 - 2025-11-20 13:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0055s User: 0.0000s Wall: 0.0023s flows/second: 71929.9 Runtime: 0.0023s