Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 05:58:58.221 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43846 10 6452 1 2025-11-12 05:59:07.135 00:00:10.324 TCP 23.104.0.1:46958 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:59:58.427 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37954 10 6452 1 2025-11-12 06:00:07.492 00:00:10.369 TCP 23.104.0.1:53472 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:00:58.641 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60844 10 6452 1 2025-11-12 06:01:18.281 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 06:01:07.902 00:00:10.361 TCP 23.104.0.1:57524 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:01:18.119 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 06:01:58.845 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56792 10 6452 1 2025-11-12 06:02:08.306 00:00:10.367 TCP 23.104.0.1:42956 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:02:59.032 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:50398 10 6452 1 2025-11-12 06:03:08.711 00:00:10.366 TCP 23.104.0.1:57802 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:58:59.793 00:05:56.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 05:59:55.968 00:05:03.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 06:03:59.273 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49240 10 6452 1 2025-11-12 06:04:09.116 00:00:10.364 TCP 23.104.0.1:33388 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:04:59.493 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57892 10 6452 1 2025-11-12 06:05:09.519 00:00:10.365 TCP 23.104.0.1:39184 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:05:59.708 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46176 10 6452 1 2025-11-12 06:06:17.982 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 06:06:18.298 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 06:06:09.923 00:00:10.347 TCP 23.104.0.1:56308 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:06:59.883 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:42818 10 6452 1 2025-11-12 06:07:10.311 00:00:10.373 TCP 23.104.0.1:37084 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:08:00.124 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59824 10 6452 1 2025-11-12 06:08:10.722 00:00:10.372 TCP 23.104.0.1:58436 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:09:00.342 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55404 10 6452 1 2025-11-12 06:09:11.135 00:00:10.365 TCP 23.104.0.1:47314 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:04:59.801 00:05:56.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 06:05:55.967 00:05:03.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 06:10:00.559 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38520 10 6452 1 2025-11-12 06:10:11.537 00:00:10.381 TCP 23.104.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:11:00.785 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52860 10 6452 1 2025-11-12 06:11:18.291 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 06:11:18.295 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 06:11:11.963 00:00:10.370 TCP 23.104.0.1:39918 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:12:01.004 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57910 10 6452 1 2025-11-12 06:12:12.371 00:00:10.365 TCP 23.104.0.1:37338 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:13:01.228 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47212 10 6452 1 2025-11-12 06:13:12.776 00:00:10.368 TCP 23.104.0.1:36872 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:14:01.442 00:00:10.961 TCP 1.101.0.1:3000 -> 22.102.0.1:51296 10 6452 1 2025-11-12 06:14:13.183 00:00:10.370 TCP 23.104.0.1:49462 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:15:02.444 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43778 10 6452 1 2025-11-12 06:15:13.591 00:00:10.368 TCP 23.104.0.1:46176 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:10:59.801 00:05:56.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 06:11:55.968 00:05:03.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 06:16:02.663 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56732 10 6452 1 2025-11-12 06:16:18.602 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 06:16:18.360 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 06:16:14.008 00:00:10.366 TCP 23.104.0.1:60440 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:17:02.881 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54756 10 6452 1 2025-11-12 06:17:14.412 00:00:10.325 TCP 23.104.0.1:48104 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:18:03.108 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51246 10 6452 1 2025-11-12 06:18:14.779 00:00:10.368 TCP 23.104.0.1:56044 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:19:03.322 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52660 10 6452 1 2025-11-12 06:19:15.184 00:00:10.721 TCP 23.104.0.1:57982 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:20:03.537 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33444 10 6452 1 2025-11-12 06:20:15.939 00:00:10.378 TCP 23.104.0.1:41830 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:21:03.763 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57254 10 6452 1 2025-11-12 06:21:18.486 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 06:21:18.553 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 06:21:16.354 00:00:10.364 TCP 23.104.0.1:54404 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:16:59.802 00:05:56.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 06:17:55.970 00:05:03.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 06:22:03.981 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:44512 10 6452 1 2025-11-12 06:22:16.762 00:00:10.381 TCP 23.104.0.1:47604 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:23:04.232 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46172 10 6452 1 2025-11-12 06:23:17.184 00:00:10.326 TCP 23.104.0.1:43242 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:24:04.446 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:49592 10 6452 1 2025-11-12 06:24:17.547 00:00:10.369 TCP 23.104.0.1:32770 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:25:04.628 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34582 10 6452 1 2025-11-12 06:25:17.951 00:00:10.370 TCP 23.104.0.1:59516 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:26:04.851 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57238 10 6452 1 2025-11-12 06:26:18.784 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 06:26:18.524 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 06:26:18.354 00:00:10.321 TCP 23.104.0.1:38658 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:27:05.083 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38644 10 6452 1 2025-11-12 06:27:18.715 00:00:10.378 TCP 23.104.0.1:60246 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:22:59.803 00:05:56.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 06:23:55.973 00:05:03.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 06:28:05.303 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34558 10 6452 1 2025-11-12 06:28:19.143 00:00:10.374 TCP 23.104.0.1:34296 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:29:05.525 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:40084 10 6452 1 2025-11-12 06:29:19.561 00:00:10.364 TCP 23.104.0.1:39052 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:30:05.779 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52670 10 6452 1 2025-11-12 06:30:19.972 00:00:10.372 TCP 23.104.0.1:53272 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:31:05.950 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:44324 10 6452 1 2025-11-12 06:31:18.731 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 06:31:18.816 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 06:31:20.382 00:00:10.365 TCP 23.104.0.1:58282 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:32:06.138 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54552 10 6452 1 2025-11-12 06:32:20.783 00:00:10.366 TCP 23.104.0.1:53452 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:33:06.358 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48770 10 6452 1 2025-11-12 06:33:21.186 00:00:10.438 TCP 23.104.0.1:37944 -> 1.101.0.1:3000 15 1926 1 2025-11-12 06:28:59.807 00:05:56.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 06:29:55.973 00:05:03.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 06:34:06.567 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:41224 12 10375 1 2025-11-12 06:34:21.660 00:00:10.367 TCP 23.104.0.1:41478 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:35:06.816 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49734 10 6452 1 2025-11-12 06:35:22.094 00:00:10.357 TCP 23.104.0.1:43566 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:36:07.050 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42428 10 6452 1 2025-11-12 06:36:18.760 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 06:36:18.942 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 06:36:22.492 00:00:10.367 TCP 23.104.0.1:54668 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:37:07.268 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37164 10 6452 1 2025-11-12 06:37:22.903 00:00:10.369 TCP 23.104.0.1:44310 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:38:07.486 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39812 10 6452 1 2025-11-12 06:38:23.313 00:00:10.375 TCP 23.104.0.1:59062 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:39:07.707 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38140 10 6452 1 2025-11-12 06:39:23.729 00:00:10.371 TCP 23.104.0.1:37248 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:34:59.807 00:05:56.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 06:35:55.973 00:05:03.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 06:40:07.928 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56186 10 6452 1 2025-11-12 06:40:24.139 00:00:10.368 TCP 23.104.0.1:48726 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:41:19.113 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 06:41:18.901 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 06:41:08.168 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36152 10 6452 1 2025-11-12 06:41:24.568 00:00:10.362 TCP 23.104.0.1:34226 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:42:08.349 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51242 10 6452 1 2025-11-12 06:42:24.968 00:00:10.368 TCP 23.104.0.1:36778 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:43:08.561 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49010 10 6452 1 2025-11-12 06:43:25.378 00:00:10.363 TCP 23.104.0.1:51364 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:44:08.786 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55456 10 6452 1 2025-11-12 06:44:25.779 00:00:10.369 TCP 23.104.0.1:34872 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:45:09.040 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47260 10 6452 1 2025-11-12 06:45:26.185 00:00:10.364 TCP 23.104.0.1:59300 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:40:59.808 00:05:56.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 06:41:55.976 00:05:03.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 06:46:19.216 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 06:46:09.252 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6452 1 2025-11-12 06:46:18.860 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 06:46:26.584 00:00:10.327 TCP 23.104.0.1:51708 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:47:09.465 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40856 10 6452 1 2025-11-12 06:47:26.948 00:00:10.371 TCP 23.104.0.1:45162 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:48:09.679 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54028 10 6452 1 2025-11-12 06:48:27.360 00:00:10.369 TCP 23.104.0.1:44100 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:49:09.892 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51844 10 6452 1 2025-11-12 06:49:27.767 00:00:10.367 TCP 23.104.0.1:35128 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:50:10.114 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38124 10 6452 1 2025-11-12 06:50:28.171 00:00:10.365 TCP 23.104.0.1:42742 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:51:10.322 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52678 10 6452 1 2025-11-12 06:51:19.032 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 06:51:19.134 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 06:51:28.580 00:00:10.364 TCP 23.104.0.1:49130 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:46:59.810 00:05:56.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 06:47:55.978 00:05:03.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 06:52:10.494 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54414 10 6452 1 2025-11-12 06:52:28.984 00:00:10.370 TCP 23.104.0.1:35134 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:53:10.717 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59464 10 6452 1 2025-11-12 06:53:29.396 00:00:10.362 TCP 23.104.0.1:43292 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:54:10.898 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:56122 10 6452 1 2025-11-12 06:54:29.811 00:00:10.369 TCP 23.104.0.1:51668 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:55:11.104 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50804 10 6452 1 2025-11-12 06:55:30.218 00:00:10.367 TCP 23.104.0.1:49408 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:56:11.320 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42644 10 6452 1 2025-11-12 06:56:19.428 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 06:56:19.109 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 06:56:30.619 00:00:10.366 TCP 23.104.0.1:34242 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:57:11.532 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44452 10 6452 1 2025-11-12 06:57:31.036 00:00:10.325 TCP 23.104.0.1:35776 -> 1.101.0.1:3000 11 1507 1 2025-11-12 06:52:59.812 00:05:56.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 06:53:55.981 00:05:03.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 06:58:11.756 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:57058 11 6504 1 2025-11-12 06:58:31.404 00:00:10.369 TCP 23.104.0.1:59110 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502742, total packets: 1579, avg bps: 1116, avg pps: 0, avg bpp: 318 Time window: 2025-11-12 05:58:58 - 2025-11-12 06:58:59 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0020s Wall: 0.0022s flows/second: 75374.3 Runtime: 0.0022s