Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 19:59:12.217 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43224 10 6452 1 2025-11-12 19:59:17.046 00:00:10.367 TCP 23.104.0.1:44932 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:00:12.424 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42800 10 6452 1 2025-11-12 20:00:17.457 00:00:10.361 TCP 23.104.0.1:50982 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:01:12.632 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54308 10 6452 1 2025-11-12 20:01:17.860 00:00:10.382 TCP 23.104.0.1:42584 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:01:34.817 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 20:01:34.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 20:02:12.846 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33746 10 6452 1 2025-11-12 20:02:18.288 00:00:10.367 TCP 23.104.0.1:57252 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:03:13.082 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47782 10 6452 1 2025-11-12 20:03:18.696 00:00:10.529 TCP 23.104.0.1:56086 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:59:56.262 00:05:03.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 19:59:56.260 00:05:03.930 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 20:04:13.290 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50272 10 6452 1 2025-11-12 20:04:19.266 00:00:10.363 TCP 23.104.0.1:37838 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:05:13.460 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36476 10 6452 1 2025-11-12 20:05:19.674 00:00:10.367 TCP 23.104.0.1:54914 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:06:13.631 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53816 10 6452 1 2025-11-12 20:06:20.107 00:00:10.366 TCP 23.104.0.1:58938 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:06:34.936 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 20:06:35.107 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 20:07:13.809 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58842 10 6452 1 2025-11-12 20:07:20.515 00:00:10.320 TCP 23.104.0.1:35618 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:08:14.037 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58372 10 6452 1 2025-11-12 20:08:20.873 00:00:10.371 TCP 23.104.0.1:45426 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:09:14.249 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59876 10 6452 1 2025-11-12 20:09:21.283 00:00:10.367 TCP 23.104.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:05:56.264 00:05:03.923 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 20:05:56.262 00:05:03.928 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 20:10:14.455 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36926 10 6452 1 2025-11-12 20:10:21.688 00:00:10.326 TCP 23.104.0.1:56620 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:11:14.666 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52180 10 6452 1 2025-11-12 20:11:35.341 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 20:11:22.059 00:00:10.359 TCP 23.104.0.1:44400 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:11:35.316 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 20:12:14.886 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50482 10 6452 1 2025-11-12 20:12:22.454 00:00:10.362 TCP 23.104.0.1:54986 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:13:15.112 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47894 10 6452 1 2025-11-12 20:13:22.853 00:00:10.376 TCP 23.104.0.1:47592 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:14:15.324 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33218 10 6452 1 2025-11-12 20:14:23.268 00:00:10.368 TCP 23.104.0.1:53190 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:15:15.494 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40262 10 6452 1 2025-11-12 20:15:23.674 00:00:10.320 TCP 23.104.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:11:56.271 00:05:03.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 20:11:56.273 00:05:03.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 20:16:15.708 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:45074 10 6452 1 2025-11-12 20:16:35.249 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 20:16:24.032 00:00:10.366 TCP 23.104.0.1:37690 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:16:35.247 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 20:17:15.961 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:34264 12 6556 1 2025-11-12 20:17:24.438 00:00:10.367 TCP 23.104.0.1:32896 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:18:16.192 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40034 10 6452 1 2025-11-12 20:18:24.844 00:00:10.386 TCP 23.104.0.1:41068 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:19:16.399 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56952 10 6452 1 2025-11-12 20:19:25.273 00:00:10.325 TCP 23.104.0.1:46928 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:20:16.626 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59132 10 6452 1 2025-11-12 20:20:25.635 00:00:10.367 TCP 23.104.0.1:56008 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:21:16.848 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:36814 10 6452 1 2025-11-12 20:21:35.361 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 20:21:26.041 00:00:10.364 TCP 23.104.0.1:52958 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:21:35.272 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 20:17:56.274 00:05:03.927 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 20:17:56.278 00:05:03.922 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 20:22:17.038 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59646 10 6452 1 2025-11-12 20:22:26.443 00:00:10.365 TCP 23.104.0.1:43012 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:23:17.255 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60400 10 6452 1 2025-11-12 20:23:26.849 00:00:10.382 TCP 23.104.0.1:41268 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:24:17.470 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:42540 10 6452 1 2025-11-12 20:24:27.270 00:00:10.340 TCP 23.104.0.1:34116 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:25:17.659 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44598 10 6452 1 2025-11-12 20:25:27.656 00:00:10.371 TCP 23.104.0.1:50784 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:26:17.874 00:00:10.649 TCP 1.101.0.1:3000 -> 22.102.0.1:37456 10 6452 1 2025-11-12 20:26:35.562 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 20:26:35.476 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 20:26:28.091 00:00:10.358 TCP 23.104.0.1:47518 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:27:18.563 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39314 10 6452 1 2025-11-12 20:27:28.536 00:00:10.367 TCP 23.104.0.1:51354 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:23:56.274 00:05:03.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 20:23:56.275 00:05:03.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 20:28:18.772 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49708 10 6452 1 2025-11-12 20:28:28.944 00:00:10.370 TCP 23.104.0.1:56952 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:29:18.988 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:57622 10 6452 1 2025-11-12 20:29:29.349 00:00:10.361 TCP 23.104.0.1:52934 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:30:19.222 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49790 10 6452 1 2025-11-12 20:30:29.751 00:00:10.390 TCP 23.104.0.1:33674 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:31:19.436 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54938 10 6452 1 2025-11-12 20:31:35.671 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 20:31:35.749 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 20:31:30.177 00:00:10.396 TCP 23.104.0.1:44578 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:32:19.648 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47690 10 6452 1 2025-11-12 20:32:30.606 00:00:10.368 TCP 23.104.0.1:43428 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:33:19.858 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42484 10 6452 1 2025-11-12 20:33:31.013 00:00:10.366 TCP 23.104.0.1:37366 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:29:56.276 00:05:03.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 20:29:56.280 00:05:03.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 20:34:20.088 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45306 10 6452 1 2025-11-12 20:34:31.416 00:00:10.363 TCP 23.104.0.1:56398 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:35:20.299 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52680 10 6452 1 2025-11-12 20:35:31.814 00:00:10.366 TCP 23.104.0.1:47810 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:36:20.526 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:33008 10 6452 1 2025-11-12 20:36:35.803 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 20:36:35.619 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 20:36:32.218 00:00:10.370 TCP 23.104.0.1:50410 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:37:20.695 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43492 10 6452 1 2025-11-12 20:37:32.618 00:00:10.363 TCP 23.104.0.1:58408 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:38:20.918 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38324 10 6452 1 2025-11-12 20:38:33.020 00:00:10.369 TCP 23.104.0.1:40958 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:39:21.137 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:37792 12 10369 1 2025-11-12 20:39:33.425 00:00:10.438 TCP 23.104.0.1:54840 -> 1.101.0.1:3000 15 1926 1 2025-11-12 20:35:56.278 00:05:03.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 20:35:56.281 00:05:03.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 20:40:21.379 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52256 10 6452 1 2025-11-12 20:40:33.901 00:00:10.367 TCP 23.104.0.1:39304 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:41:21.598 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38738 10 6452 1 2025-11-12 20:41:35.731 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 20:41:35.642 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 20:41:34.303 00:00:10.361 TCP 23.104.0.1:59696 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:42:21.820 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:34918 10 6452 1 2025-11-12 20:42:34.700 00:00:10.370 TCP 23.104.0.1:48226 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:43:22.082 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35912 10 6452 1 2025-11-12 20:43:35.109 00:00:10.324 TCP 23.104.0.1:58468 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:44:22.313 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6452 1 2025-11-12 20:44:35.465 00:00:10.363 TCP 23.104.0.1:36794 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:45:22.523 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40132 10 6452 1 2025-11-12 20:45:35.866 00:00:10.327 TCP 23.104.0.1:60734 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:41:56.280 00:05:03.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 20:41:56.284 00:05:03.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 20:46:22.705 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44762 10 6452 1 2025-11-12 20:46:35.768 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 20:46:35.933 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 20:46:36.231 00:00:10.367 TCP 23.104.0.1:37826 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:47:22.914 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51162 10 6452 1 2025-11-12 20:47:36.633 00:00:10.369 TCP 23.104.0.1:35192 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:48:23.130 00:00:17.443 TCP 1.101.0.1:3000 -> 22.102.0.1:44656 10 6452 1 2025-11-12 20:48:37.059 00:00:10.324 TCP 23.104.0.1:57614 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:49:30.617 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:40798 12 10375 1 2025-11-12 20:49:37.422 00:00:10.403 TCP 23.104.0.1:59182 -> 1.101.0.1:3000 15 1926 1 2025-11-12 20:50:30.859 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50552 10 6452 1 2025-11-12 20:50:37.860 00:00:10.330 TCP 23.104.0.1:40552 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:51:35.821 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 20:51:36.163 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 20:51:31.085 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42038 10 6452 1 2025-11-12 20:51:38.236 00:00:10.357 TCP 23.104.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:47:56.281 00:05:03.956 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 20:47:56.283 00:05:03.951 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 20:52:31.301 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50110 10 6452 1 2025-11-12 20:52:38.724 00:00:10.379 TCP 23.104.0.1:49194 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:53:31.518 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51948 10 6452 1 2025-11-12 20:53:39.143 00:00:10.373 TCP 23.104.0.1:49218 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:54:31.735 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39336 10 6452 1 2025-11-12 20:54:39.555 00:00:10.372 TCP 23.104.0.1:46292 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:55:31.944 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54490 10 6452 1 2025-11-12 20:55:39.965 00:00:10.370 TCP 23.104.0.1:58434 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:56:36.012 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 20:56:36.170 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 20:56:32.180 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59398 10 6452 1 2025-11-12 20:56:40.371 00:00:10.368 TCP 23.104.0.1:44206 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:57:32.398 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47770 10 6452 1 2025-11-12 20:57:40.777 00:00:10.323 TCP 23.104.0.1:50854 -> 1.101.0.1:3000 11 1507 1 2025-11-12 20:53:56.285 00:05:03.954 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 20:53:56.282 00:05:03.959 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 20:58:32.619 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36400 10 6452 1 2025-11-12 20:58:41.139 00:00:10.367 TCP 23.104.0.1:50626 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507130, total packets: 1586, avg bps: 1130, avg pps: 0, avg bpp: 319 Time window: 2025-11-12 19:59:12 - 2025-11-12 20:59:00 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0063s User: 0.0010s Wall: 0.0062s flows/second: 26584.2 Runtime: 0.0062s