Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 17:58:45.661 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40610 10 6452 1 2025-11-12 17:59:20.810 00:00:10.365 TCP 23.104.0.1:57864 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:59:45.900 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41858 10 6452 1 2025-11-12 18:00:21.211 00:00:10.410 TCP 23.104.0.1:41308 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:00:46.129 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45738 10 6452 1 2025-11-12 18:01:32.663 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 18:01:32.715 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 18:01:21.661 00:00:10.390 TCP 23.104.0.1:41032 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:01:46.352 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49274 10 6452 1 2025-11-12 18:02:22.131 00:00:10.369 TCP 23.104.0.1:52380 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:02:46.574 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33316 10 6452 1 2025-11-12 18:03:22.540 00:00:10.326 TCP 23.104.0.1:35804 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:03:46.787 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58410 10 6452 1 2025-11-12 17:59:56.226 00:05:03.878 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 17:59:56.229 00:05:03.874 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 18:04:22.902 00:00:10.702 TCP 23.104.0.1:44280 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:04:47.010 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37146 10 6452 1 2025-11-12 18:05:23.638 00:00:10.371 TCP 23.104.0.1:43404 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:05:47.187 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35874 10 6452 1 2025-11-12 18:06:33.127 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 18:06:24.051 00:00:10.372 TCP 23.104.0.1:35284 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:06:32.806 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 18:06:47.406 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52562 10 6452 1 2025-11-12 18:07:24.460 00:00:10.368 TCP 23.104.0.1:34040 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:07:47.636 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55650 10 6452 1 2025-11-12 18:08:24.860 00:00:10.373 TCP 23.104.0.1:47044 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:08:47.856 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55108 10 6452 1 2025-11-12 18:09:25.268 00:00:10.322 TCP 23.104.0.1:35800 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:05:56.229 00:05:03.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 18:09:48.084 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34226 10 6452 1 2025-11-12 18:05:56.227 00:05:03.923 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 18:10:25.627 00:00:10.364 TCP 23.104.0.1:52216 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:10:48.253 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44654 10 6452 1 2025-11-12 18:11:32.607 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 18:11:32.523 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 18:11:26.032 00:00:10.366 TCP 23.104.0.1:54398 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:11:48.468 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40388 10 6452 1 2025-11-12 18:12:26.434 00:00:10.365 TCP 23.104.0.1:33698 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:12:48.653 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33726 10 6452 1 2025-11-12 18:13:26.836 00:00:10.387 TCP 23.104.0.1:50542 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:13:48.864 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:38580 10 6452 1 2025-11-12 18:14:27.262 00:00:10.364 TCP 23.104.0.1:40526 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:14:49.094 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59806 10 6452 1 2025-11-12 18:15:27.665 00:00:10.376 TCP 23.104.0.1:43278 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:11:56.229 00:05:03.908 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 18:15:49.311 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35460 10 6452 1 2025-11-12 18:11:56.232 00:05:03.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 18:16:32.813 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 18:16:32.981 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 18:16:28.102 00:00:10.375 TCP 23.104.0.1:49542 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:16:49.491 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:41320 10 6452 1 2025-11-12 18:17:28.514 00:00:10.366 TCP 23.104.0.1:51548 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:17:49.659 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57602 10 6452 1 2025-11-12 18:18:28.916 00:00:10.353 TCP 23.104.0.1:37978 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:18:49.831 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55290 10 6452 1 2025-11-12 18:19:29.322 00:00:10.364 TCP 23.104.0.1:53008 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:19:50.008 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39606 10 6452 1 2025-11-12 18:20:29.723 00:00:10.377 TCP 23.104.0.1:43802 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:20:50.221 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34110 10 6452 1 2025-11-12 18:21:32.972 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 18:21:32.916 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 18:21:30.134 00:00:10.322 TCP 23.104.0.1:43852 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:17:56.236 00:05:03.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 18:21:50.439 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37520 10 6452 1 2025-11-12 18:17:56.233 00:05:03.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 18:22:30.493 00:00:10.391 TCP 23.104.0.1:39728 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:22:50.651 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56686 10 6452 1 2025-11-12 18:23:30.948 00:00:10.369 TCP 23.104.0.1:42606 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:23:50.863 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38540 10 6452 1 2025-11-12 18:24:31.355 00:00:10.366 TCP 23.104.0.1:57044 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:24:51.085 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38142 10 6452 1 2025-11-12 18:25:31.763 00:00:10.374 TCP 23.104.0.1:48740 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:25:51.252 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43036 10 6452 1 2025-11-12 18:26:33.256 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 18:26:32.913 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 18:26:32.173 00:00:10.370 TCP 23.104.0.1:51052 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:26:51.462 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60810 10 6452 1 2025-11-12 18:27:32.578 00:00:10.368 TCP 23.104.0.1:41796 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:27:51.682 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34266 10 6452 1 2025-11-12 18:23:56.237 00:05:03.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 18:23:56.240 00:05:03.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 18:28:32.983 00:00:10.375 TCP 23.104.0.1:47476 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:28:51.894 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51492 10 6452 1 2025-11-12 18:29:33.398 00:00:10.365 TCP 23.104.0.1:43494 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:29:52.108 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45580 10 6452 1 2025-11-12 18:30:33.799 00:00:10.367 TCP 23.104.0.1:51254 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:30:52.279 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47580 10 6452 1 2025-11-12 18:31:33.286 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 18:31:33.242 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 18:31:34.203 00:00:10.364 TCP 23.104.0.1:58976 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:31:52.499 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42954 10 6452 1 2025-11-12 18:32:34.603 00:00:10.371 TCP 23.104.0.1:58534 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:32:52.718 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40750 10 6452 1 2025-11-12 18:33:35.009 00:00:10.361 TCP 23.104.0.1:57696 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:29:56.241 00:05:03.902 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 18:29:56.239 00:05:03.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 18:33:52.935 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:40854 10 6452 1 2025-11-12 18:34:35.404 00:00:10.364 TCP 23.104.0.1:44160 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:34:53.170 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53724 10 6452 1 2025-11-12 18:35:35.806 00:00:10.365 TCP 23.104.0.1:49428 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:35:53.392 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58222 10 6452 1 2025-11-12 18:36:33.273 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 18:36:33.354 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 18:36:36.210 00:00:10.365 TCP 23.104.0.1:37340 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:36:53.607 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46768 10 6452 1 2025-11-12 18:37:36.613 00:00:10.324 TCP 23.104.0.1:57744 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:37:53.817 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58736 10 6452 1 2025-11-12 18:38:36.978 00:00:10.324 TCP 23.104.0.1:40934 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:38:54.063 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49468 10 6452 1 2025-11-12 18:39:37.343 00:00:16.535 TCP 23.104.0.1:53674 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:35:56.240 00:05:03.910 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 18:35:56.241 00:05:03.905 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 18:39:54.288 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34414 10 6452 1 2025-11-12 18:40:43.918 00:00:10.348 TCP 23.104.0.1:37528 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:40:54.506 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43422 10 6452 1 2025-11-12 18:41:33.528 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 18:41:33.484 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 18:41:44.308 00:00:10.361 TCP 23.104.0.1:35314 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:41:54.725 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46200 10 6452 1 2025-11-12 18:42:44.703 00:00:10.325 TCP 23.104.0.1:34158 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:42:54.937 00:00:10.725 TCP 1.101.0.1:3000 -> 22.102.0.1:33182 10 6452 1 2025-11-12 18:43:45.094 00:00:10.502 TCP 23.104.0.1:46562 -> 1.101.0.1:3000 17 2241 1 2025-11-12 18:43:55.704 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:57866 14 14298 1 2025-11-12 18:44:45.635 00:00:10.369 TCP 23.104.0.1:49834 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:44:55.980 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:47908 10 6452 1 2025-11-12 18:41:56.241 00:05:03.908 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 18:45:46.045 00:00:10.368 TCP 23.104.0.1:46038 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:41:56.243 00:05:03.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 18:45:56.223 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60102 10 6452 1 2025-11-12 18:46:33.604 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 18:46:33.562 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 18:46:46.452 00:00:10.361 TCP 23.104.0.1:47358 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:46:56.408 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60218 10 6452 1 2025-11-12 18:47:46.851 00:00:10.378 TCP 23.104.0.1:43342 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:47:56.620 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46402 10 6452 1 2025-11-12 18:48:47.265 00:00:10.393 TCP 23.104.0.1:59800 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:48:56.830 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41682 10 6452 1 2025-11-12 18:49:47.691 00:00:10.366 TCP 23.104.0.1:60290 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:49:57.005 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51356 10 6452 1 2025-11-12 18:50:48.101 00:00:10.367 TCP 23.104.0.1:60648 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:50:57.227 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54870 10 6452 1 2025-11-12 18:51:33.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 18:51:33.512 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 18:47:56.244 00:05:03.909 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 18:51:48.506 00:00:10.360 TCP 23.104.0.1:35602 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:47:56.246 00:05:03.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 18:51:57.440 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47284 10 6452 1 2025-11-12 18:52:48.908 00:00:10.365 TCP 23.104.0.1:47202 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:52:57.652 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43830 10 6452 1 2025-11-12 18:53:49.307 00:00:10.362 TCP 23.104.0.1:43302 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:53:57.875 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44442 10 6452 1 2025-11-12 18:54:49.709 00:00:10.323 TCP 23.104.0.1:42984 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:54:58.112 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33306 10 6452 1 2025-11-12 18:55:50.104 00:00:10.373 TCP 23.104.0.1:51714 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:55:58.335 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36798 10 6452 1 2025-11-12 18:56:33.778 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 18:56:33.517 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 18:56:50.517 00:00:10.361 TCP 23.104.0.1:39194 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:56:58.560 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36740 10 6452 1 2025-11-12 18:57:50.918 00:00:10.394 TCP 23.104.0.1:57304 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:53:56.249 00:05:03.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 18:53:56.245 00:05:03.909 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 18:57:58.777 00:00:10.549 TCP 1.101.0.1:3000 -> 22.102.0.1:54122 10 6452 1 Summary: total flows: 163, total bytes: 505421, total packets: 1571, avg bps: 1118, avg pps: 0, avg bpp: 321 Time window: 2025-11-12 17:58:45 - 2025-11-12 18:59:00 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0032s Wall: 0.0024s flows/second: 66667.1 Runtime: 0.0025s