Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 01:58:52.887 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53970 10 6452 1 2025-11-12 01:58:53.701 00:00:10.370 TCP 23.104.0.1:49544 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:59:53.105 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54998 10 6452 1 2025-11-12 01:59:54.113 00:00:10.370 TCP 23.104.0.1:33408 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:00:53.277 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57880 10 6452 1 2025-11-12 02:00:54.517 00:00:10.367 TCP 23.104.0.1:45518 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:01:13.374 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 02:01:13.363 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 02:01:54.922 00:00:10.388 TCP 23.104.0.1:56858 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:01:53.495 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42950 10 6452 1 2025-11-12 02:02:53.712 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35558 10 6452 1 2025-11-12 02:02:55.351 00:00:10.363 TCP 23.104.0.1:45998 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:58:59.672 00:05:56.229 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 01:59:55.901 00:05:03.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 02:03:55.753 00:00:10.692 TCP 23.104.0.1:52292 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:03:53.928 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44918 10 6452 1 2025-11-12 02:04:56.481 00:00:10.365 TCP 23.104.0.1:49562 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:04:54.171 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39106 10 6452 1 2025-11-12 02:05:54.383 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51494 10 6452 1 2025-11-12 02:05:56.890 00:00:10.331 TCP 23.104.0.1:39880 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:06:13.592 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 02:06:13.653 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 02:06:54.558 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49928 10 6452 1 2025-11-12 02:06:57.259 00:00:10.362 TCP 23.104.0.1:52308 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:07:54.772 00:00:14.473 TCP 1.101.0.1:3000 -> 22.102.0.1:55088 10 6452 1 2025-11-12 02:07:57.661 00:00:11.679 TCP 23.104.0.1:51490 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:08:59.293 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33968 10 6452 1 2025-11-12 02:08:59.381 00:00:10.317 TCP 23.104.0.1:47600 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:04:59.683 00:05:56.220 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 02:05:55.904 00:05:03.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 02:09:59.519 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57454 10 6452 1 2025-11-12 02:09:59.741 00:00:10.370 TCP 23.104.0.1:56202 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:11:00.146 00:00:10.861 TCP 23.104.0.1:36094 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:10:59.733 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36004 10 6452 1 2025-11-12 02:11:13.316 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 02:11:13.622 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 02:12:01.048 00:00:10.361 TCP 23.104.0.1:36192 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:11:59.948 00:00:10.250 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 11 6504 1 2025-11-12 02:13:00.240 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42036 10 6452 1 2025-11-12 02:13:01.450 00:00:10.365 TCP 23.104.0.1:33230 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:14:00.454 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43740 10 6452 1 2025-11-12 02:14:01.855 00:00:10.378 TCP 23.104.0.1:52198 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:15:00.664 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43210 10 6452 1 2025-11-12 02:15:02.270 00:00:10.363 TCP 23.104.0.1:41108 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:10:59.682 00:05:56.225 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 02:11:55.905 00:05:03.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 02:16:00.878 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60092 10 6452 1 2025-11-12 02:16:02.670 00:00:10.363 TCP 23.104.0.1:58380 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:16:13.722 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 02:16:13.719 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 02:17:01.102 00:00:10.327 TCP 1.101.0.1:3000 -> 22.102.0.1:44458 10 6452 1 2025-11-12 02:17:03.105 00:00:10.518 TCP 23.104.0.1:41396 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:18:01.470 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:52366 10 6452 1 2025-11-12 02:18:03.664 00:00:10.363 TCP 23.104.0.1:51320 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:19:01.677 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36116 10 6452 1 2025-11-12 02:19:04.092 00:00:10.320 TCP 23.104.0.1:36374 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:20:04.449 00:00:10.368 TCP 23.104.0.1:58856 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:20:01.902 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49092 10 6452 1 2025-11-12 02:21:13.550 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 02:21:04.852 00:00:10.376 TCP 23.104.0.1:42726 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:21:02.110 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50444 10 6452 1 2025-11-12 02:21:13.582 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 02:16:59.684 00:05:56.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 02:17:55.911 00:05:03.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 02:22:05.269 00:00:10.375 TCP 23.104.0.1:53552 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:22:02.331 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45938 10 6452 1 2025-11-12 02:23:05.688 00:00:10.370 TCP 23.104.0.1:52618 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:23:02.553 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47282 10 6452 1 2025-11-12 02:24:06.103 00:00:10.367 TCP 23.104.0.1:46874 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:24:02.773 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34586 10 6452 1 2025-11-12 02:25:06.509 00:00:10.370 TCP 23.104.0.1:38214 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:25:02.992 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60998 10 6452 1 2025-11-12 02:26:03.218 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46870 10 6452 1 2025-11-12 02:26:13.798 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 02:26:13.774 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 02:26:06.916 00:00:10.373 TCP 23.104.0.1:37180 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:27:03.436 00:00:10.473 TCP 1.101.0.1:3000 -> 22.102.0.1:36530 10 6452 1 2025-11-12 02:27:07.333 00:00:10.363 TCP 23.104.0.1:43512 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:22:59.684 00:05:56.225 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 02:23:55.910 00:05:03.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 02:28:03.947 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40882 10 6452 1 2025-11-12 02:28:07.731 00:00:10.369 TCP 23.104.0.1:58822 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:29:04.181 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49796 10 6452 1 2025-11-12 02:29:08.140 00:00:10.366 TCP 23.104.0.1:51772 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:30:04.401 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43318 10 6452 1 2025-11-12 02:30:08.547 00:00:10.364 TCP 23.104.0.1:40404 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:31:13.794 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 02:31:04.627 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44318 10 6452 1 2025-11-12 02:31:13.628 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 02:31:08.948 00:00:10.370 TCP 23.104.0.1:54412 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:32:04.844 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41038 10 6452 1 2025-11-12 02:32:09.357 00:00:10.362 TCP 23.104.0.1:49124 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:33:05.087 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45550 10 6452 1 2025-11-12 02:33:09.762 00:00:10.374 TCP 23.104.0.1:56828 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:28:59.687 00:05:56.225 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 02:29:55.912 00:05:03.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 02:34:05.312 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57084 10 6452 1 2025-11-12 02:34:10.175 00:00:10.326 TCP 23.104.0.1:51040 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:35:05.533 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38324 10 6452 1 2025-11-12 02:35:10.546 00:00:10.365 TCP 23.104.0.1:51342 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:36:05.746 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51964 10 6452 1 2025-11-12 02:36:13.946 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 02:36:14.065 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 02:36:10.940 00:00:10.374 TCP 23.104.0.1:51740 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:37:05.964 00:00:10.484 TCP 1.101.0.1:3000 -> 22.102.0.1:48890 10 6452 1 2025-11-12 02:37:11.348 00:00:10.373 TCP 23.104.0.1:44848 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:38:06.484 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56516 10 6452 1 2025-11-12 02:38:11.760 00:00:10.329 TCP 23.104.0.1:42116 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:39:06.656 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41024 10 6452 1 2025-11-12 02:39:12.128 00:00:10.365 TCP 23.104.0.1:45302 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:34:59.689 00:05:56.224 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 02:35:55.916 00:05:03.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 02:40:06.872 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52336 10 6452 1 2025-11-12 02:40:12.532 00:00:11.135 TCP 23.104.0.1:55038 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:41:14.031 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 02:41:13.859 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 02:41:07.105 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:48734 10 6452 1 2025-11-12 02:41:13.705 00:00:10.361 TCP 23.104.0.1:41456 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:42:07.315 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42704 10 6452 1 2025-11-12 02:42:14.109 00:00:10.363 TCP 23.104.0.1:54776 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:43:07.537 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37698 10 6452 1 2025-11-12 02:43:14.513 00:00:10.326 TCP 23.104.0.1:57944 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:44:07.759 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60982 10 6452 1 2025-11-12 02:44:14.878 00:00:10.366 TCP 23.104.0.1:45314 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:45:07.980 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:37980 10 6452 1 2025-11-12 02:45:15.281 00:00:10.374 TCP 23.104.0.1:57724 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:40:59.692 00:05:56.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 02:41:55.917 00:05:03.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 02:46:14.161 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 02:46:14.013 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 02:46:08.228 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:60376 10 6452 1 2025-11-12 02:46:15.704 00:00:10.367 TCP 23.104.0.1:34920 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:47:08.410 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:35960 10 6452 1 2025-11-12 02:47:16.112 00:00:10.365 TCP 23.104.0.1:39964 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:48:08.588 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34850 10 6452 1 2025-11-12 02:48:16.517 00:00:10.364 TCP 23.104.0.1:58836 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:49:08.801 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44958 10 6452 1 2025-11-12 02:49:16.918 00:00:10.379 TCP 23.104.0.1:34446 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:50:09.012 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39462 10 6452 1 2025-11-12 02:50:17.337 00:00:10.367 TCP 23.104.0.1:48064 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:51:14.314 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 02:51:14.464 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 02:51:09.231 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33996 10 6452 1 2025-11-12 02:51:17.739 00:00:10.374 TCP 23.104.0.1:37724 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:46:59.693 00:05:56.226 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 02:47:55.919 00:05:03.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 02:52:09.458 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57554 11 6504 1 2025-11-12 02:52:18.152 00:00:10.371 TCP 23.104.0.1:56534 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:53:09.673 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51406 10 6452 1 2025-11-12 02:53:18.558 00:00:10.362 TCP 23.104.0.1:47890 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:54:09.890 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55168 10 6452 1 2025-11-12 02:54:18.957 00:00:10.366 TCP 23.104.0.1:37204 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:55:10.106 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49618 10 6452 1 2025-11-12 02:55:19.360 00:00:10.368 TCP 23.104.0.1:59512 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:56:15.056 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 02:56:14.948 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 02:56:10.277 00:00:11.920 TCP 1.101.0.1:3000 -> 22.102.0.1:59074 10 6452 1 2025-11-12 02:56:19.761 00:00:10.387 TCP 23.104.0.1:52060 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:57:12.272 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55528 10 6452 1 2025-11-12 02:57:20.182 00:00:10.369 TCP 23.104.0.1:57600 -> 1.101.0.1:3000 11 1507 1 2025-11-12 02:52:59.695 00:05:56.225 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 02:53:55.923 00:05:03.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 02:58:12.487 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52304 10 6452 1 2025-11-12 02:58:20.589 00:00:10.370 TCP 23.104.0.1:56294 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1105, avg pps: 0, avg bpp: 316 Time window: 2025-11-12 01:58:52 - 2025-11-12 02:58:59 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0054s User: 0.0009s Wall: 0.0024s flows/second: 68451.2 Runtime: 0.0024s