Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 05:58:51.875 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:53222 10 6452 1 2025-11-13 05:59:18.088 00:00:10.384 TCP 23.104.0.1:34626 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:59:52.107 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49058 10 6452 1 2025-11-13 06:00:18.511 00:00:10.373 TCP 23.104.0.1:56202 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:00:52.316 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42234 10 6452 1 2025-11-13 06:01:18.927 00:00:10.401 TCP 23.104.0.1:35228 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:01:46.944 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 06:01:47.158 00:00:00.011 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 06:01:52.534 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46096 10 6452 1 2025-11-13 06:02:19.368 00:00:10.329 TCP 23.104.0.1:52736 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:02:52.748 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43128 10 6452 1 2025-11-13 06:03:19.736 00:00:10.371 TCP 23.104.0.1:41046 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:59:56.442 00:05:04.042 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 05:59:56.440 00:05:04.047 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 06:03:52.920 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52632 10 6452 1 2025-11-13 06:04:20.144 00:00:10.369 TCP 23.104.0.1:54008 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:04:53.138 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51868 10 6452 1 2025-11-13 06:05:20.548 00:00:10.366 TCP 23.104.0.1:43772 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:05:53.309 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51510 10 6452 1 2025-11-13 06:06:20.949 00:00:10.371 TCP 23.104.0.1:40226 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:06:47.264 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 06:06:47.202 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 06:06:53.526 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:49136 10 6452 1 2025-11-13 06:07:21.359 00:00:10.367 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:07:53.699 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47720 10 6452 1 2025-11-13 06:08:21.767 00:00:10.371 TCP 23.104.0.1:57136 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:08:53.922 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51962 10 6452 1 2025-11-13 06:09:22.176 00:00:10.750 TCP 23.104.0.1:59734 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:05:56.443 00:05:04.043 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 06:05:56.440 00:05:04.048 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 06:09:54.133 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33842 10 6452 1 2025-11-13 06:10:22.964 00:00:10.379 TCP 23.104.0.1:56626 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:10:54.309 00:00:19.779 TCP 1.101.0.1:3000 -> 22.102.0.1:41998 10 6452 1 2025-11-13 06:11:23.377 00:00:10.366 TCP 23.104.0.1:41140 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:11:47.269 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 06:11:47.396 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 06:12:04.128 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51468 10 6452 1 2025-11-13 06:12:23.781 00:00:10.454 TCP 23.104.0.1:34640 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:13:04.344 00:00:11.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45026 10 6452 1 2025-11-13 06:13:24.277 00:00:10.363 TCP 23.104.0.1:55768 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:14:05.518 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53578 10 6452 1 2025-11-13 06:14:24.676 00:00:10.322 TCP 23.104.0.1:56268 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:15:05.727 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57776 10 6452 1 2025-11-13 06:15:25.058 00:00:10.324 TCP 23.104.0.1:53512 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:11:56.442 00:05:04.049 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 06:11:56.446 00:05:04.043 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 06:16:05.944 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44358 10 6452 1 2025-11-13 06:16:25.418 00:00:10.374 TCP 23.104.0.1:46428 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:16:47.109 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 06:16:47.668 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 06:17:06.171 00:00:10.375 TCP 1.101.0.1:3000 -> 22.102.0.1:41642 10 6452 1 2025-11-13 06:17:25.834 00:00:10.397 TCP 23.104.0.1:45454 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:18:06.586 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54196 10 6452 1 2025-11-13 06:18:26.273 00:00:10.374 TCP 23.104.0.1:33520 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:19:06.812 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38174 10 6452 1 2025-11-13 06:19:26.681 00:00:10.370 TCP 23.104.0.1:56816 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:20:07.036 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39640 10 6452 1 2025-11-13 06:20:27.106 00:00:10.321 TCP 23.104.0.1:48602 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:21:07.260 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50948 10 6452 1 2025-11-13 06:21:27.465 00:00:10.367 TCP 23.104.0.1:44806 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:21:47.445 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 06:21:47.556 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 06:17:56.444 00:05:04.063 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 06:17:56.446 00:05:04.048 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 06:22:07.486 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50302 10 6452 1 2025-11-13 06:22:27.866 00:00:10.371 TCP 23.104.0.1:33112 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:23:07.694 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43536 10 6452 1 2025-11-13 06:23:28.285 00:00:10.323 TCP 23.104.0.1:50690 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:24:07.913 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33364 10 6452 1 2025-11-13 06:24:28.648 00:00:10.370 TCP 23.104.0.1:48594 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:25:08.130 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33724 10 6452 1 2025-11-13 06:25:29.059 00:00:10.325 TCP 23.104.0.1:33340 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:26:08.342 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48628 10 6452 1 2025-11-13 06:26:29.422 00:00:10.371 TCP 23.104.0.1:58380 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:26:47.537 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 06:26:47.642 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 06:27:08.554 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43394 10 6452 1 2025-11-13 06:27:29.827 00:00:10.360 TCP 23.104.0.1:37588 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:23:56.444 00:05:04.056 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 06:23:56.447 00:05:04.050 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 06:28:08.767 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32960 10 6452 1 2025-11-13 06:28:30.227 00:00:10.322 TCP 23.104.0.1:40634 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:29:08.976 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:57664 10 6452 1 2025-11-13 06:29:30.585 00:00:10.369 TCP 23.104.0.1:59290 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:30:09.173 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:54180 10 6452 1 2025-11-13 06:30:30.993 00:00:10.366 TCP 23.104.0.1:59296 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:31:09.424 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:45850 10 6452 1 2025-11-13 06:31:31.397 00:00:10.382 TCP 23.104.0.1:50010 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:31:47.780 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 06:31:47.645 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 06:32:09.666 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46468 10 6452 1 2025-11-13 06:32:31.816 00:00:10.362 TCP 23.104.0.1:53138 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:33:09.885 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56592 10 6452 1 2025-11-13 06:33:32.217 00:00:10.324 TCP 23.104.0.1:38936 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:29:56.446 00:05:04.057 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 06:29:56.449 00:05:04.051 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 06:34:10.109 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50530 10 6452 1 2025-11-13 06:34:32.579 00:00:10.382 TCP 23.104.0.1:35876 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:35:10.331 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44554 10 6452 1 2025-11-13 06:35:32.991 00:00:10.369 TCP 23.104.0.1:38240 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:36:10.515 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41626 10 6452 1 2025-11-13 06:36:33.399 00:00:10.369 TCP 23.104.0.1:33986 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:36:47.882 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 06:36:47.912 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 06:37:10.728 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40148 10 6452 1 2025-11-13 06:37:33.799 00:00:10.368 TCP 23.104.0.1:49424 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:38:10.940 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:57114 10 6452 1 2025-11-13 06:38:34.203 00:00:10.324 TCP 23.104.0.1:59932 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:39:11.191 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36630 12 10375 1 2025-11-13 06:39:34.566 00:00:10.442 TCP 23.104.0.1:33554 -> 1.101.0.1:3000 15 1926 1 2025-11-13 06:35:56.450 00:05:04.052 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 06:35:56.448 00:05:04.057 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 06:40:11.403 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36292 10 6452 1 2025-11-13 06:40:35.052 00:00:10.347 TCP 23.104.0.1:35588 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:41:11.617 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54554 10 6452 1 2025-11-13 06:41:35.431 00:00:10.325 TCP 23.104.0.1:49230 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:41:47.838 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 06:41:48.038 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 06:42:11.830 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57980 10 6452 1 2025-11-13 06:42:35.791 00:00:10.368 TCP 23.104.0.1:40080 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:43:12.071 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55164 10 6452 1 2025-11-13 06:43:36.193 00:00:10.367 TCP 23.104.0.1:60392 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:44:12.288 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47620 10 6452 1 2025-11-13 06:44:36.599 00:00:10.367 TCP 23.104.0.1:50880 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:45:12.502 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36042 10 6452 1 2025-11-13 06:45:37.008 00:00:10.363 TCP 23.104.0.1:42474 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:41:56.450 00:05:04.056 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 06:41:56.452 00:05:04.051 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 06:46:12.727 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49046 10 6452 1 2025-11-13 06:46:47.836 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 06:46:47.779 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 06:46:37.411 00:00:10.363 TCP 23.104.0.1:36268 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:47:12.947 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:35158 10 6452 1 2025-11-13 06:47:37.805 00:00:10.330 TCP 23.104.0.1:57210 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:48:13.143 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51160 10 6452 1 2025-11-13 06:48:38.173 00:00:10.368 TCP 23.104.0.1:33758 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:49:13.315 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:58556 10 6452 1 2025-11-13 06:49:38.578 00:00:10.364 TCP 23.104.0.1:46962 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:50:13.503 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42526 10 6452 1 2025-11-13 06:50:38.983 00:00:10.328 TCP 23.104.0.1:48688 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:51:13.715 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37406 10 6452 1 2025-11-13 06:51:48.033 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 06:51:47.852 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 06:51:39.352 00:00:10.327 TCP 23.104.0.1:35924 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:47:56.451 00:05:04.056 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 06:47:56.454 00:05:04.051 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 06:52:13.929 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:44832 10 6452 1 2025-11-13 06:52:39.722 00:00:10.377 TCP 23.104.0.1:42250 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:53:14.168 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39078 10 6452 1 2025-11-13 06:53:40.138 00:00:10.330 TCP 23.104.0.1:35108 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:54:14.342 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36974 10 6452 1 2025-11-13 06:54:40.518 00:00:10.331 TCP 23.104.0.1:40920 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:55:14.554 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51240 10 6452 1 2025-11-13 06:55:40.880 00:00:10.388 TCP 23.104.0.1:45922 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:56:14.766 00:00:12.981 TCP 1.101.0.1:3000 -> 22.102.0.1:46384 11 6504 1 2025-11-13 06:56:48.178 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 06:56:47.995 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 06:56:41.307 00:00:10.334 TCP 23.104.0.1:45450 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:57:17.787 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59134 10 6452 1 2025-11-13 06:57:41.677 00:00:10.370 TCP 23.104.0.1:33270 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:53:56.459 00:05:04.047 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 06:53:56.457 00:05:04.052 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 06:58:18.007 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49710 10 6452 1 Summary: total flows: 163, total bytes: 501235, total packets: 1568, avg bps: 1111, avg pps: 0, avg bpp: 319 Time window: 2025-11-13 05:58:51 - 2025-11-13 06:59:00 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0020s Wall: 0.0025s flows/second: 64218.6 Runtime: 0.0026s