Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 13:59:11.584 00:00:10.373 TCP 1.101.0.1:3000 -> 22.102.0.1:47380 10 6452 1 2025-11-12 13:59:16.682 00:00:10.375 TCP 23.104.0.1:38550 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:00:11.997 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:36734 10 6452 1 2025-11-12 14:00:17.100 00:00:10.361 TCP 23.104.0.1:37042 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:01:12.201 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44644 10 6452 1 2025-11-12 14:01:28.059 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 14:01:17.500 00:00:10.325 TCP 23.104.0.1:55268 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:01:27.744 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 14:02:12.411 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39608 10 6452 1 2025-11-12 14:02:17.862 00:00:10.371 TCP 23.104.0.1:37184 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:03:12.636 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50340 10 6452 1 2025-11-12 14:03:18.271 00:00:10.363 TCP 23.104.0.1:35014 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:59:56.149 00:05:03.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 13:59:56.146 00:05:03.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 14:04:12.853 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:59142 10 6452 1 2025-11-12 14:04:18.669 00:00:10.365 TCP 23.104.0.1:55534 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:05:13.094 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50984 10 6452 1 2025-11-12 14:05:19.096 00:00:10.376 TCP 23.104.0.1:50042 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:06:13.304 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55142 10 6452 1 2025-11-12 14:06:27.827 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 14:06:27.891 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 14:06:19.510 00:00:10.368 TCP 23.104.0.1:55244 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:07:13.535 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35230 10 6452 1 2025-11-12 14:07:19.910 00:00:10.405 TCP 23.104.0.1:56536 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:08:13.753 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55278 10 6452 1 2025-11-12 14:08:20.353 00:00:10.367 TCP 23.104.0.1:60640 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:09:13.962 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:40944 10 6452 1 2025-11-12 14:09:20.762 00:00:10.377 TCP 23.104.0.1:41554 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:05:56.150 00:05:03.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 14:05:56.147 00:05:03.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 14:10:14.199 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58318 10 6452 1 2025-11-12 14:10:21.174 00:00:10.364 TCP 23.104.0.1:37602 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:11:27.743 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 14:11:27.990 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 14:11:14.413 00:00:19.028 TCP 1.101.0.1:3000 -> 22.102.0.1:39792 10 6452 1 2025-11-12 14:11:21.576 00:00:11.956 TCP 23.104.0.1:45218 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:12:23.573 00:00:10.367 TCP 23.104.0.1:46666 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:12:23.485 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50670 10 6452 1 2025-11-12 14:13:23.973 00:00:10.363 TCP 23.104.0.1:42254 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:13:23.702 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52702 10 6452 1 2025-11-12 14:14:24.378 00:00:10.368 TCP 23.104.0.1:34088 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:14:23.922 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:46954 10 6452 1 2025-11-12 14:15:24.783 00:00:10.366 TCP 23.104.0.1:38496 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:15:24.123 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45988 10 6452 1 2025-11-12 14:11:56.149 00:05:03.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 14:11:56.152 00:05:03.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 14:16:28.060 00:00:00.052 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 14:16:24.345 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38204 10 6452 1 2025-11-12 14:16:28.042 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 14:16:25.187 00:00:10.366 TCP 23.104.0.1:37612 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:17:25.589 00:00:10.364 TCP 23.104.0.1:36828 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:17:24.561 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51508 10 6452 1 2025-11-12 14:18:24.773 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35618 10 6452 1 2025-11-12 14:18:25.992 00:00:10.363 TCP 23.104.0.1:34248 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:19:25.000 00:00:10.406 TCP 1.101.0.1:3000 -> 22.102.0.1:50102 10 6452 1 2025-11-12 14:19:26.392 00:00:10.366 TCP 23.104.0.1:42938 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:20:25.443 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57006 10 6452 1 2025-11-12 14:20:26.798 00:00:10.365 TCP 23.104.0.1:53994 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:21:28.341 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 14:21:28.249 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 14:21:25.662 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40040 10 6452 1 2025-11-12 14:21:27.203 00:00:10.364 TCP 23.104.0.1:58374 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:17:56.153 00:05:03.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 14:17:56.151 00:05:03.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 14:22:25.887 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51846 10 6452 1 2025-11-12 14:22:27.601 00:00:10.368 TCP 23.104.0.1:36108 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:23:26.117 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:50068 10 6452 1 2025-11-12 14:23:28.006 00:00:11.151 TCP 23.104.0.1:48674 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:24:26.360 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:53388 10 6452 1 2025-11-12 14:24:29.204 00:00:10.366 TCP 23.104.0.1:44202 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:25:26.602 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47028 10 6452 1 2025-11-12 14:25:29.610 00:00:10.321 TCP 23.104.0.1:45102 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:26:28.163 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 14:26:27.959 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 14:26:26.782 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44470 10 6452 1 2025-11-12 14:26:29.974 00:00:10.391 TCP 23.104.0.1:38116 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:27:26.997 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:57878 10 6452 1 2025-11-12 14:27:30.413 00:00:10.377 TCP 23.104.0.1:38410 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:23:56.153 00:05:03.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 14:23:56.156 00:05:03.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 14:28:30.827 00:00:10.362 TCP 23.104.0.1:35662 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:28:27.190 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34982 10 6452 1 2025-11-12 14:29:31.226 00:00:10.364 TCP 23.104.0.1:58070 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:29:27.407 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39294 10 6452 1 2025-11-12 14:30:31.629 00:00:10.365 TCP 23.104.0.1:52354 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:30:27.625 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37580 10 6452 1 2025-11-12 14:31:28.205 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 14:31:28.407 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 14:31:27.834 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39858 10 6452 1 2025-11-12 14:31:32.032 00:00:10.366 TCP 23.104.0.1:51234 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:32:28.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43952 10 6452 1 2025-11-12 14:32:32.438 00:00:10.913 TCP 23.104.0.1:44370 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:33:28.291 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:45258 12 10369 1 2025-11-12 14:33:33.390 00:00:10.438 TCP 23.104.0.1:44834 -> 1.101.0.1:3000 15 1926 1 2025-11-12 14:29:56.154 00:05:03.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 14:29:56.156 00:05:03.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 14:34:28.541 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58610 10 6452 1 2025-11-12 14:34:33.871 00:00:10.363 TCP 23.104.0.1:50614 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:35:28.766 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53912 10 6452 1 2025-11-12 14:35:34.273 00:00:10.317 TCP 23.104.0.1:52746 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:36:28.522 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 14:36:28.549 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 14:36:28.988 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39762 10 6452 1 2025-11-12 14:36:34.635 00:00:10.369 TCP 23.104.0.1:52682 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:37:29.212 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59214 10 6452 1 2025-11-12 14:37:35.036 00:00:10.364 TCP 23.104.0.1:47112 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:38:29.426 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56900 10 6452 1 2025-11-12 14:38:35.440 00:00:10.366 TCP 23.104.0.1:44420 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:39:29.643 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54028 10 6452 1 2025-11-12 14:39:35.858 00:00:10.376 TCP 23.104.0.1:56620 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:35:56.154 00:05:03.841 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 14:35:56.157 00:05:03.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 14:40:29.866 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:52114 10 6452 1 2025-11-12 14:40:36.267 00:00:10.365 TCP 23.104.0.1:60966 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:41:28.776 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 14:41:28.535 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 14:41:30.104 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50226 10 6452 1 2025-11-12 14:41:36.668 00:00:10.362 TCP 23.104.0.1:47026 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:42:30.312 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38042 10 6452 1 2025-11-12 14:42:37.095 00:00:10.361 TCP 23.104.0.1:36910 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:43:30.527 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48394 10 6452 1 2025-11-12 14:43:37.498 00:00:10.368 TCP 23.104.0.1:41832 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:44:30.739 00:00:10.724 TCP 1.101.0.1:3000 -> 22.102.0.1:38654 10 6452 1 2025-11-12 14:44:37.903 00:00:10.364 TCP 23.104.0.1:60946 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:45:31.503 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56998 10 6452 1 2025-11-12 14:45:38.307 00:00:10.367 TCP 23.104.0.1:41884 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:41:56.158 00:05:03.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 14:41:56.155 00:05:03.842 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 14:46:28.500 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 14:46:28.681 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 14:46:31.713 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39072 12 6556 1 2025-11-12 14:46:38.709 00:00:10.379 TCP 23.104.0.1:43394 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:47:31.960 00:00:17.716 TCP 1.101.0.1:3000 -> 22.102.0.1:50116 12 6556 1 2025-11-12 14:47:39.127 00:00:10.644 TCP 23.104.0.1:59290 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:48:39.858 00:00:10.330 TCP 23.104.0.1:40110 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:48:39.729 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49070 10 6452 1 2025-11-12 14:49:40.227 00:00:10.361 TCP 23.104.0.1:33538 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:49:39.905 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:39464 10 6452 1 2025-11-12 14:50:40.104 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48170 10 6452 1 2025-11-12 14:50:40.630 00:00:10.365 TCP 23.104.0.1:48026 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:51:28.924 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 14:51:28.644 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 14:51:41.034 00:00:10.373 TCP 23.104.0.1:55428 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:51:40.314 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36226 10 6452 1 2025-11-12 14:47:56.156 00:05:03.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 14:47:56.158 00:05:03.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 14:52:41.443 00:00:10.324 TCP 23.104.0.1:36516 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:52:40.530 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58760 10 6452 1 2025-11-12 14:53:40.754 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48716 10 6452 1 2025-11-12 14:53:41.808 00:00:10.330 TCP 23.104.0.1:40976 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:54:40.968 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:43298 10 6452 1 2025-11-12 14:54:42.175 00:00:10.368 TCP 23.104.0.1:50382 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:55:41.216 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43108 10 6452 1 2025-11-12 14:55:42.584 00:00:10.366 TCP 23.104.0.1:38094 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:56:28.955 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 14:56:28.863 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 14:56:41.463 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54332 10 6452 1 2025-11-12 14:56:42.991 00:00:10.363 TCP 23.104.0.1:35360 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:57:41.672 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35140 10 6452 1 2025-11-12 14:57:43.391 00:00:10.367 TCP 23.104.0.1:37810 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:53:56.162 00:05:03.869 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 14:53:56.159 00:05:03.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 162, total bytes: 494933, total packets: 1561, avg bps: 1103, avg pps: 0, avg bpp: 317 Time window: 2025-11-12 13:59:11 - 2025-11-12 14:59:00 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0026s User: 0.0026s Wall: 0.0026s flows/second: 62234.6 Runtime: 0.0026s