Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 14:58:41.894 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36052 10 6452 1 2025-11-12 14:58:43.799 00:00:10.369 TCP 23.104.0.1:51704 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:59:42.109 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54596 10 6452 1 2025-11-12 14:59:44.207 00:00:10.364 TCP 23.104.0.1:49974 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:00:44.608 00:00:10.363 TCP 23.104.0.1:36680 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:00:42.329 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42934 10 6452 1 2025-11-12 15:01:28.829 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 15:01:28.885 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 15:01:45.009 00:00:10.418 TCP 23.104.0.1:35354 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:01:42.539 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:41620 10 6452 1 2025-11-12 15:02:42.721 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39144 10 6452 1 2025-11-12 15:02:45.467 00:00:10.364 TCP 23.104.0.1:36090 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:03:45.872 00:00:12.507 TCP 23.104.0.1:49968 -> 1.101.0.1:3000 11 1507 1 2025-11-12 14:59:56.165 00:05:03.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 15:03:42.934 00:00:15.353 TCP 1.101.0.1:3000 -> 22.102.0.1:39590 10 6452 1 2025-11-12 14:59:56.161 00:05:03.874 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 15:04:48.461 00:00:10.359 TCP 23.104.0.1:52492 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:04:48.346 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53136 10 6452 1 2025-11-12 15:05:48.863 00:00:10.326 TCP 23.104.0.1:53750 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:05:48.556 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46442 10 6452 1 2025-11-12 15:06:28.979 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 15:06:28.999 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 15:06:49.227 00:00:10.365 TCP 23.104.0.1:50884 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:06:48.770 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40232 10 6452 1 2025-11-12 15:07:49.633 00:00:14.422 TCP 23.104.0.1:39908 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:07:48.988 00:00:14.973 TCP 1.101.0.1:3000 -> 22.102.0.1:57212 10 6452 1 2025-11-12 15:08:54.004 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:32940 10 6452 1 2025-11-12 15:08:54.114 00:00:10.362 TCP 23.104.0.1:38062 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:05:56.166 00:05:03.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 15:05:56.168 00:05:03.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 15:09:54.233 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49832 10 6452 1 2025-11-12 15:09:54.516 00:00:10.362 TCP 23.104.0.1:39868 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:10:54.446 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34492 10 6452 1 2025-11-12 15:10:54.933 00:00:10.383 TCP 23.104.0.1:55264 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:11:28.776 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 15:11:29.253 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 15:11:54.665 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52220 10 6452 1 2025-11-12 15:11:55.359 00:00:10.362 TCP 23.104.0.1:47920 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:12:54.884 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54894 10 6452 1 2025-11-12 15:12:55.758 00:00:10.378 TCP 23.104.0.1:49084 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:13:56.177 00:00:10.326 TCP 23.104.0.1:46496 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:13:55.121 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37588 10 6452 1 2025-11-12 15:14:55.343 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50256 10 6452 1 2025-11-12 15:14:56.542 00:00:10.364 TCP 23.104.0.1:49136 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:11:56.173 00:05:03.864 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 15:11:56.171 00:05:03.868 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 15:15:55.564 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 2025-11-12 15:15:56.943 00:00:10.369 TCP 23.104.0.1:59474 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:16:29.140 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 15:16:29.377 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 15:16:55.778 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33420 10 6452 1 2025-11-12 15:16:57.347 00:00:10.372 TCP 23.104.0.1:60212 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:17:55.953 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38160 10 6452 1 2025-11-12 15:17:57.748 00:00:10.389 TCP 23.104.0.1:52442 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:18:56.170 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:47992 12 10375 1 2025-11-12 15:18:58.175 00:00:10.438 TCP 23.104.0.1:42166 -> 1.101.0.1:3000 15 1926 1 2025-11-12 15:19:56.411 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44116 10 6452 1 2025-11-12 15:19:58.653 00:00:10.370 TCP 23.104.0.1:54026 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:20:56.586 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41764 10 6452 1 2025-11-12 15:20:59.086 00:00:10.367 TCP 23.104.0.1:45942 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:21:29.408 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 15:21:29.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 15:17:56.173 00:05:03.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 15:17:56.176 00:05:03.864 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 15:21:56.758 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55406 10 6452 1 2025-11-12 15:21:59.495 00:00:10.363 TCP 23.104.0.1:33486 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:22:56.971 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:35244 10 6452 1 2025-11-12 15:22:59.897 00:00:10.334 TCP 23.104.0.1:57342 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:24:00.273 00:00:10.365 TCP 23.104.0.1:34502 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:23:57.211 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51882 10 6452 1 2025-11-12 15:25:00.677 00:00:10.324 TCP 23.104.0.1:44924 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:24:57.425 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38516 10 6452 1 2025-11-12 15:26:01.036 00:00:10.364 TCP 23.104.0.1:39152 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:25:57.599 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58546 10 6452 1 2025-11-12 15:26:29.652 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 15:26:29.608 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 15:27:01.436 00:00:10.326 TCP 23.104.0.1:34376 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:26:57.810 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54042 10 6452 1 2025-11-12 15:23:56.173 00:05:03.869 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 15:23:56.176 00:05:03.864 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 15:27:58.036 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37566 10 6452 1 2025-11-12 15:28:01.796 00:00:10.364 TCP 23.104.0.1:59596 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:28:58.217 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44884 10 6452 1 2025-11-12 15:29:02.200 00:00:10.358 TCP 23.104.0.1:44814 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:29:58.435 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33862 10 6452 1 2025-11-12 15:30:02.597 00:00:10.372 TCP 23.104.0.1:39254 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:30:58.651 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:32822 10 6452 1 2025-11-12 15:31:03.005 00:00:10.368 TCP 23.104.0.1:49984 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:31:29.587 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 15:31:29.436 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 15:31:58.840 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56828 10 6452 1 2025-11-12 15:32:03.417 00:00:10.367 TCP 23.104.0.1:55008 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:32:59.078 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:37426 10 6452 1 2025-11-12 15:33:03.823 00:00:10.350 TCP 23.104.0.1:43208 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:29:56.173 00:05:03.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 15:29:56.177 00:05:03.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 15:33:59.320 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38402 10 6452 1 2025-11-12 15:34:04.210 00:00:10.320 TCP 23.104.0.1:38234 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:34:59.540 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37948 10 6452 1 2025-11-12 15:35:04.570 00:00:10.373 TCP 23.104.0.1:52798 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:35:59.758 00:00:10.969 TCP 1.101.0.1:3000 -> 22.102.0.1:36964 10 6452 1 2025-11-12 15:36:04.976 00:00:11.133 TCP 23.104.0.1:35964 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:36:29.568 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 15:36:29.768 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 15:37:00.770 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44598 10 6452 1 2025-11-12 15:37:06.144 00:00:10.362 TCP 23.104.0.1:44132 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:38:00.980 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:40054 10 6452 1 2025-11-12 15:38:06.549 00:00:10.360 TCP 23.104.0.1:51856 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:39:01.169 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50630 10 6452 1 2025-11-12 15:39:06.949 00:00:10.331 TCP 23.104.0.1:37646 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:35:56.179 00:05:03.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 15:35:56.177 00:05:03.870 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 15:40:01.388 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46976 10 6452 1 2025-11-12 15:40:07.331 00:00:10.365 TCP 23.104.0.1:56876 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:41:01.597 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48406 10 6452 1 2025-11-12 15:41:07.736 00:00:10.370 TCP 23.104.0.1:33570 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:41:29.652 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 15:41:29.753 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 15:42:01.814 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55026 10 6452 1 2025-11-12 15:42:08.143 00:00:10.366 TCP 23.104.0.1:59676 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:43:02.043 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57058 10 6452 1 2025-11-12 15:43:08.548 00:00:10.361 TCP 23.104.0.1:41052 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:44:02.258 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:53152 12 10375 1 2025-11-12 15:44:08.947 00:00:10.407 TCP 23.104.0.1:43144 -> 1.101.0.1:3000 15 1926 1 2025-11-12 15:45:02.495 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35832 10 6452 1 2025-11-12 15:45:09.389 00:00:10.363 TCP 23.104.0.1:51926 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:41:56.184 00:05:03.863 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 15:41:56.186 00:05:03.859 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 15:46:02.672 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41540 10 6452 1 2025-11-12 15:46:09.785 00:00:10.328 TCP 23.104.0.1:56566 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:46:30.036 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 15:46:29.854 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 15:47:02.888 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36234 10 6452 1 2025-11-12 15:47:10.149 00:00:10.332 TCP 23.104.0.1:55438 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:48:03.106 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51918 10 6452 1 2025-11-12 15:48:10.514 00:00:10.327 TCP 23.104.0.1:54232 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:49:03.279 00:00:11.323 TCP 1.101.0.1:3000 -> 22.102.0.1:33350 10 6452 1 2025-11-12 15:49:10.880 00:00:17.511 TCP 23.104.0.1:39178 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:50:04.642 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33482 10 6452 1 2025-11-12 15:50:18.428 00:00:10.362 TCP 23.104.0.1:34708 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:51:04.815 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44430 10 6452 1 2025-11-12 15:51:29.968 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 15:51:18.832 00:00:10.392 TCP 23.104.0.1:58062 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:51:29.883 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 15:47:56.183 00:05:03.867 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 15:47:56.186 00:05:03.862 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 15:52:05.044 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45834 10 6452 1 2025-11-12 15:52:19.265 00:00:10.362 TCP 23.104.0.1:44020 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:53:05.259 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55380 10 6452 1 2025-11-12 15:53:19.668 00:00:10.361 TCP 23.104.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:54:05.472 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57154 10 6452 1 2025-11-12 15:54:20.096 00:00:10.505 TCP 23.104.0.1:55710 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:55:05.681 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33404 10 6452 1 2025-11-12 15:55:20.641 00:00:10.362 TCP 23.104.0.1:41340 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:56:05.855 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40154 10 6452 1 2025-11-12 15:56:30.135 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 15:56:30.047 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 15:56:21.063 00:00:10.365 TCP 23.104.0.1:50096 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:57:06.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52262 10 6452 1 2025-11-12 15:57:21.470 00:00:10.366 TCP 23.104.0.1:52206 -> 1.101.0.1:3000 11 1507 1 2025-11-12 15:53:56.185 00:05:03.870 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 15:53:56.187 00:05:03.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 15:58:06.294 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40462 10 6452 1 2025-11-12 15:58:21.875 00:00:10.367 TCP 23.104.0.1:57108 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507032, total packets: 1584, avg bps: 1121, avg pps: 0, avg bpp: 320 Time window: 2025-11-12 14:58:41 - 2025-11-12 15:59:00 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0015s Wall: 0.0022s flows/second: 75333.0 Runtime: 0.0022s