Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 08:58:45.581 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37114 10 6452 1 2025-11-13 08:59:34.241 00:00:10.326 TCP 23.104.0.1:46442 -> 1.101.0.1:3000 11 1507 1 2025-11-13 08:59:45.787 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56908 10 6452 1 2025-11-13 09:00:34.607 00:00:10.369 TCP 23.104.0.1:38454 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:00:45.994 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52820 10 6452 1 2025-11-13 09:01:35.015 00:00:10.365 TCP 23.104.0.1:35102 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:01:50.500 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:01:50.686 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 09:01:46.215 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43712 10 6452 1 2025-11-13 09:02:35.418 00:00:10.420 TCP 23.104.0.1:43428 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:02:46.429 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57328 10 6452 1 2025-11-13 09:03:35.886 00:00:10.378 TCP 23.104.0.1:59384 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:03:46.642 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:40716 10 6452 1 2025-11-13 08:59:56.492 00:05:04.072 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 08:59:56.494 00:05:04.067 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 09:04:36.304 00:00:10.364 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:04:46.877 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55910 10 6452 1 2025-11-13 09:05:36.706 00:00:10.392 TCP 23.104.0.1:49248 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:05:47.074 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51396 10 6452 1 2025-11-13 09:06:50.835 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 09:06:50.807 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:06:37.141 00:00:15.827 TCP 23.104.0.1:52370 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:06:47.242 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53304 10 6452 1 2025-11-13 09:07:43.021 00:00:10.373 TCP 23.104.0.1:44428 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:07:47.454 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39414 10 6452 1 2025-11-13 09:08:43.426 00:00:10.360 TCP 23.104.0.1:45418 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:08:47.634 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34990 10 6452 1 2025-11-13 09:09:43.827 00:00:10.363 TCP 23.104.0.1:56414 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:05:56.496 00:05:04.067 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 09:09:47.852 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:36290 10 6452 1 2025-11-13 09:05:56.494 00:05:04.072 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 09:10:44.234 00:00:10.363 TCP 23.104.0.1:46322 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:10:48.068 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39714 10 6452 1 2025-11-13 09:11:50.877 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:11:50.966 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 09:11:44.639 00:00:10.359 TCP 23.104.0.1:53100 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:11:48.303 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43786 10 6452 1 2025-11-13 09:12:45.034 00:00:10.362 TCP 23.104.0.1:56136 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:12:48.523 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36500 10 6452 1 2025-11-13 09:13:45.438 00:00:10.323 TCP 23.104.0.1:43586 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:13:48.743 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48578 10 6452 1 2025-11-13 09:14:45.799 00:00:10.820 TCP 23.104.0.1:54384 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:14:48.959 00:00:10.593 TCP 1.101.0.1:3000 -> 22.102.0.1:34014 12 6556 1 2025-11-13 09:15:49.589 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37176 10 6452 1 2025-11-13 09:11:56.495 00:05:04.073 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 09:15:46.660 00:00:10.364 TCP 23.104.0.1:37682 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:11:56.497 00:05:04.067 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 09:16:50.897 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 09:16:50.839 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:16:47.090 00:00:10.365 TCP 23.104.0.1:46356 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:16:49.805 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40044 10 6452 1 2025-11-13 09:17:47.488 00:00:10.330 TCP 23.104.0.1:43120 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:17:50.021 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47044 10 6452 1 2025-11-13 09:18:50.241 00:00:10.618 TCP 1.101.0.1:3000 -> 22.102.0.1:42004 10 6452 1 2025-11-13 09:18:47.855 00:00:10.838 TCP 23.104.0.1:36486 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:19:50.896 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39756 10 6452 1 2025-11-13 09:19:48.731 00:00:10.328 TCP 23.104.0.1:40750 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:20:49.102 00:00:10.365 TCP 23.104.0.1:56156 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:20:51.119 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37254 10 6452 1 2025-11-13 09:21:50.892 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 09:21:50.949 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:17:56.497 00:05:04.075 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 09:21:49.509 00:00:10.409 TCP 23.104.0.1:53670 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:17:56.499 00:05:04.070 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 09:21:51.329 00:00:10.685 TCP 1.101.0.1:3000 -> 22.102.0.1:52742 10 6452 1 2025-11-13 09:22:49.961 00:00:10.401 TCP 23.104.0.1:35688 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:22:52.073 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52158 10 6452 1 2025-11-13 09:23:50.416 00:00:10.367 TCP 23.104.0.1:45998 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:23:52.297 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60030 10 6452 1 2025-11-13 09:24:50.818 00:00:10.330 TCP 23.104.0.1:37292 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:24:52.520 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44542 10 6452 1 2025-11-13 09:25:51.187 00:00:10.363 TCP 23.104.0.1:41678 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:25:52.748 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57320 10 6452 1 2025-11-13 09:26:51.059 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 09:26:51.057 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:26:51.586 00:00:10.370 TCP 23.104.0.1:50862 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:26:52.973 00:00:10.842 TCP 1.101.0.1:3000 -> 22.102.0.1:40058 13 6608 1 2025-11-13 09:23:56.499 00:05:04.087 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 09:27:53.855 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58704 10 6452 1 2025-11-13 09:23:56.502 00:05:04.082 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 09:27:51.991 00:00:10.363 TCP 23.104.0.1:37808 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:28:54.085 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40362 10 6452 1 2025-11-13 09:28:52.399 00:00:10.361 TCP 23.104.0.1:44036 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:29:54.294 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60876 10 6452 1 2025-11-13 09:29:52.809 00:00:10.370 TCP 23.104.0.1:56364 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:30:53.212 00:00:10.371 TCP 23.104.0.1:52524 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:30:54.513 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36898 10 6452 1 2025-11-13 09:31:51.223 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:31:51.209 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 09:31:54.732 00:00:10.611 TCP 1.101.0.1:3000 -> 22.102.0.1:49260 10 6452 1 2025-11-13 09:31:53.616 00:00:11.819 TCP 23.104.0.1:46010 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:32:55.382 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50754 10 6452 1 2025-11-13 09:32:55.475 00:00:10.366 TCP 23.104.0.1:50342 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:29:56.500 00:05:04.078 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 09:33:55.600 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52890 10 6452 1 2025-11-13 09:29:56.504 00:05:04.072 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 09:33:55.878 00:00:10.367 TCP 23.104.0.1:59494 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:34:56.280 00:00:10.370 TCP 23.104.0.1:52750 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:34:55.813 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49784 10 6452 1 2025-11-13 09:35:56.035 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33068 10 6452 1 2025-11-13 09:35:56.683 00:00:10.369 TCP 23.104.0.1:32952 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:36:51.425 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 09:36:51.236 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:36:56.245 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38632 10 6452 1 2025-11-13 09:36:57.094 00:00:10.368 TCP 23.104.0.1:33578 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:37:56.456 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35974 10 6452 1 2025-11-13 09:37:57.496 00:00:10.365 TCP 23.104.0.1:37738 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:38:56.634 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58754 10 6452 1 2025-11-13 09:38:57.896 00:00:10.767 TCP 23.104.0.1:58470 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:35:56.503 00:05:04.076 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 09:35:56.505 00:05:04.071 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 09:39:56.861 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36120 10 6452 1 2025-11-13 09:39:58.698 00:00:10.361 TCP 23.104.0.1:47070 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:40:59.103 00:00:10.365 TCP 23.104.0.1:53654 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:40:57.084 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36124 10 6452 1 2025-11-13 09:41:51.523 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:41:51.502 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 09:41:59.504 00:00:18.000 TCP 23.104.0.1:50826 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:41:57.286 00:00:20.127 TCP 1.101.0.1:3000 -> 22.102.0.1:44518 10 6452 1 2025-11-13 09:43:07.552 00:00:10.372 TCP 23.104.0.1:57164 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:43:07.474 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48588 10 6452 1 2025-11-13 09:44:07.959 00:00:10.373 TCP 23.104.0.1:54146 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:44:07.691 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47882 10 6452 1 2025-11-13 09:45:08.372 00:00:10.362 TCP 23.104.0.1:43572 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:45:07.863 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35722 10 6452 1 2025-11-13 09:41:56.506 00:05:04.077 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 09:41:56.508 00:05:04.072 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 09:46:08.043 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:47968 10 6452 1 2025-11-13 09:46:08.772 00:00:10.369 TCP 23.104.0.1:59844 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:46:51.562 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 09:46:51.517 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:47:08.249 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44016 10 6452 1 2025-11-13 09:47:09.180 00:00:10.361 TCP 23.104.0.1:55126 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:48:09.581 00:00:10.323 TCP 23.104.0.1:40274 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:48:08.469 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58800 10 6452 1 2025-11-13 09:49:08.695 00:00:10.290 TCP 1.101.0.1:3000 -> 22.102.0.1:43026 10 6452 1 2025-11-13 09:49:09.944 00:00:10.368 TCP 23.104.0.1:34096 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:50:09.036 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47020 10 6452 1 2025-11-13 09:50:10.354 00:00:10.363 TCP 23.104.0.1:52184 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:51:09.247 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:59856 10 6452 1 2025-11-13 09:51:10.757 00:00:10.336 TCP 23.104.0.1:35860 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:51:51.801 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:51:51.645 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 09:47:56.506 00:05:04.080 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 09:47:56.510 00:05:04.076 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 09:52:09.536 00:00:10.542 TCP 1.101.0.1:3000 -> 22.102.0.1:57510 10 6452 1 2025-11-13 09:52:11.137 00:00:10.385 TCP 23.104.0.1:34298 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:53:11.566 00:00:10.367 TCP 23.104.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:53:10.126 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45520 10 6452 1 2025-11-13 09:54:10.369 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55018 10 6452 1 2025-11-13 09:54:11.978 00:00:10.334 TCP 23.104.0.1:50320 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:55:10.578 00:00:10.741 TCP 1.101.0.1:3000 -> 22.102.0.1:52470 10 6452 1 2025-11-13 09:55:12.356 00:00:10.329 TCP 23.104.0.1:48504 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:56:11.363 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42824 10 6452 1 2025-11-13 09:56:12.725 00:00:10.374 TCP 23.104.0.1:58978 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:56:51.615 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 09:56:51.916 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 09:57:11.583 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40252 10 6452 1 2025-11-13 09:57:13.136 00:00:10.363 TCP 23.104.0.1:43294 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:53:56.512 00:05:04.075 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 09:53:56.508 00:05:04.081 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 09:58:11.802 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35362 10 6452 1 2025-11-13 09:58:13.532 00:00:10.570 TCP 23.104.0.1:44816 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 497101, total packets: 1566, avg bps: 1100, avg pps: 0, avg bpp: 317 Time window: 2025-11-13 08:58:45 - 2025-11-13 09:59:00 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0043s User: 0.0011s Wall: 0.0022s flows/second: 74054.5 Runtime: 0.0022s