Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 09:59:14.139 00:00:10.363 TCP 23.104.0.1:60016 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:59:11.974 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:39580 10 6452 1 2025-11-13 10:00:14.538 00:00:10.363 TCP 23.104.0.1:39614 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:00:12.169 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58856 10 6452 1 2025-11-13 10:01:12.386 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36670 10 6452 1 2025-11-13 10:01:14.945 00:00:10.367 TCP 23.104.0.1:52572 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:01:51.898 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 10:01:51.901 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 10:02:12.613 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60096 10 6452 1 2025-11-13 10:02:15.351 00:00:10.360 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:03:12.834 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38860 10 6452 1 2025-11-13 10:03:15.755 00:00:10.375 TCP 23.104.0.1:45572 -> 1.101.0.1:3000 11 1507 1 2025-11-13 09:59:56.514 00:05:04.077 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 09:59:56.511 00:05:04.082 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 10:04:13.072 00:00:11.605 TCP 1.101.0.1:3000 -> 22.102.0.1:34322 10 6452 1 2025-11-13 10:04:16.169 00:00:11.242 TCP 23.104.0.1:58574 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:05:14.713 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50572 10 6452 1 2025-11-13 10:05:17.447 00:00:10.363 TCP 23.104.0.1:37164 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:06:14.928 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:58010 10 6452 1 2025-11-13 10:06:17.847 00:00:10.377 TCP 23.104.0.1:50470 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:06:52.033 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 10:06:52.102 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 10:07:15.175 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43398 10 6452 1 2025-11-13 10:07:18.266 00:00:10.366 TCP 23.104.0.1:39014 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:08:15.408 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43690 10 6452 1 2025-11-13 10:08:18.675 00:00:10.320 TCP 23.104.0.1:40862 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:09:15.622 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35872 10 6452 1 2025-11-13 10:09:19.033 00:00:10.361 TCP 23.104.0.1:41536 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:05:56.512 00:05:04.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 10:05:56.515 00:05:04.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 10:10:15.846 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59290 10 6452 1 2025-11-13 10:10:19.433 00:00:10.364 TCP 23.104.0.1:48264 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:11:16.032 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49658 10 6452 1 2025-11-13 10:11:19.838 00:00:10.390 TCP 23.104.0.1:57594 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:11:52.120 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 10:11:52.009 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 10:12:16.242 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34204 10 6452 1 2025-11-13 10:12:20.268 00:00:10.321 TCP 23.104.0.1:58816 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:13:16.459 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45112 10 6452 1 2025-11-13 10:13:20.629 00:00:10.319 TCP 23.104.0.1:45092 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:14:16.686 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48884 11 6492 1 2025-11-13 10:14:20.993 00:00:10.367 TCP 23.104.0.1:57334 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:15:21.401 00:00:10.329 TCP 23.104.0.1:45342 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:15:16.907 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53854 10 6452 1 2025-11-13 10:11:56.516 00:05:04.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 10:11:56.515 00:05:04.096 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 10:16:17.119 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34088 10 6452 1 2025-11-13 10:16:21.768 00:00:10.374 TCP 23.104.0.1:38402 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:16:52.353 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 10:16:52.257 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 10:17:17.332 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54424 10 6452 1 2025-11-13 10:17:22.178 00:00:10.369 TCP 23.104.0.1:39238 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:18:17.500 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:58820 10 6452 1 2025-11-13 10:18:22.583 00:00:10.322 TCP 23.104.0.1:54850 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:19:17.776 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33426 10 6452 1 2025-11-13 10:19:22.943 00:00:10.382 TCP 23.104.0.1:41530 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:20:17.985 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51986 10 6452 1 2025-11-13 10:20:23.362 00:00:10.325 TCP 23.104.0.1:41592 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:21:18.194 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54910 10 6452 1 2025-11-13 10:21:23.727 00:00:10.368 TCP 23.104.0.1:39242 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:21:52.114 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 10:21:52.383 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 10:17:56.519 00:05:04.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 10:17:56.518 00:05:04.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 10:22:18.414 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60880 10 6452 1 2025-11-13 10:22:24.132 00:00:10.376 TCP 23.104.0.1:39530 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:23:18.592 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46432 10 6452 1 2025-11-13 10:23:24.546 00:00:10.363 TCP 23.104.0.1:33654 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:24:18.806 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46488 10 6452 1 2025-11-13 10:24:24.950 00:00:10.377 TCP 23.104.0.1:36728 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:25:18.979 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:40990 10 6452 1 2025-11-13 10:25:25.366 00:00:10.361 TCP 23.104.0.1:33302 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:26:19.183 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47402 10 6452 1 2025-11-13 10:26:25.764 00:00:10.371 TCP 23.104.0.1:45864 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:26:52.442 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 10:26:52.301 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 10:27:19.396 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53606 10 6452 1 2025-11-13 10:27:26.175 00:00:10.364 TCP 23.104.0.1:51806 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:23:56.520 00:05:04.095 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 10:23:56.517 00:05:04.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 10:28:19.610 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48628 10 6452 1 2025-11-13 10:28:26.575 00:00:10.367 TCP 23.104.0.1:37090 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:29:19.826 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:60702 10 6452 1 2025-11-13 10:29:26.980 00:00:10.368 TCP 23.104.0.1:44424 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:30:19.996 00:00:10.396 TCP 1.101.0.1:3000 -> 22.102.0.1:42904 10 6452 1 2025-11-13 10:30:27.384 00:00:10.367 TCP 23.104.0.1:37746 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:31:20.433 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36238 10 6452 1 2025-11-13 10:31:27.785 00:00:10.362 TCP 23.104.0.1:53606 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:31:52.135 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 10:31:52.352 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 10:32:20.664 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45988 10 6452 1 2025-11-13 10:32:28.186 00:00:10.364 TCP 23.104.0.1:37330 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:33:20.884 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45222 10 6452 1 2025-11-13 10:33:28.587 00:00:10.321 TCP 23.104.0.1:59554 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:29:56.521 00:05:04.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 10:29:56.518 00:05:04.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 10:34:21.110 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55076 10 6452 1 2025-11-13 10:34:28.943 00:00:10.366 TCP 23.104.0.1:40176 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:35:21.279 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40336 10 6452 1 2025-11-13 10:35:29.350 00:00:10.365 TCP 23.104.0.1:51014 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:36:21.493 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33524 10 6452 1 2025-11-13 10:36:29.761 00:00:10.381 TCP 23.104.0.1:40446 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:36:52.877 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 10:36:52.853 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 10:37:21.713 00:00:10.856 TCP 1.101.0.1:3000 -> 22.102.0.1:39792 10 6452 1 2025-11-13 10:37:30.179 00:00:10.366 TCP 23.104.0.1:38320 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:38:22.620 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41914 10 6452 1 2025-11-13 10:38:30.584 00:00:10.364 TCP 23.104.0.1:39750 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:39:22.827 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55838 10 6452 1 2025-11-13 10:39:30.985 00:00:10.370 TCP 23.104.0.1:53092 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:35:56.519 00:05:04.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 10:35:56.522 00:05:04.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 10:40:23.079 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34314 10 6452 1 2025-11-13 10:40:31.392 00:00:10.364 TCP 23.104.0.1:50054 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:41:23.292 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53344 10 6452 1 2025-11-13 10:41:31.792 00:00:10.366 TCP 23.104.0.1:35512 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:41:52.540 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 10:41:52.787 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 10:42:23.506 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59936 10 6452 1 2025-11-13 10:42:32.198 00:00:10.368 TCP 23.104.0.1:37426 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:43:23.717 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56558 10 6452 1 2025-11-13 10:43:32.606 00:00:10.359 TCP 23.104.0.1:60026 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:44:23.933 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58122 10 6452 1 2025-11-13 10:44:33.007 00:00:10.362 TCP 23.104.0.1:52304 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:45:24.142 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46588 10 6452 1 2025-11-13 10:45:33.407 00:00:10.367 TCP 23.104.0.1:32950 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:41:56.522 00:05:04.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 10:41:56.520 00:05:04.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 10:46:24.359 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41776 10 6452 1 2025-11-13 10:46:33.810 00:00:10.366 TCP 23.104.0.1:48986 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:46:53.114 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 10:46:53.050 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 10:47:24.571 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48984 10 6452 1 2025-11-13 10:47:34.221 00:00:10.365 TCP 23.104.0.1:51320 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:48:24.785 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59260 10 6452 1 2025-11-13 10:48:34.625 00:00:10.322 TCP 23.104.0.1:43726 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:49:24.997 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51740 10 6452 1 2025-11-13 10:49:34.985 00:00:10.368 TCP 23.104.0.1:56014 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:50:25.218 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36578 10 6452 1 2025-11-13 10:50:35.390 00:00:10.366 TCP 23.104.0.1:45772 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:51:25.431 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54672 10 6452 1 2025-11-13 10:51:35.798 00:00:10.363 TCP 23.104.0.1:44910 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:51:52.791 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 10:51:52.991 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 10:47:56.521 00:05:04.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 10:47:56.524 00:05:04.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 10:52:25.648 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54406 10 6452 1 2025-11-13 10:52:36.201 00:00:10.365 TCP 23.104.0.1:44146 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:53:25.861 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52492 10 6452 1 2025-11-13 10:53:36.606 00:00:10.363 TCP 23.104.0.1:39532 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:54:26.090 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50718 10 6452 1 2025-11-13 10:54:37.011 00:00:10.316 TCP 23.104.0.1:37758 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:55:26.321 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54548 10 6452 1 2025-11-13 10:55:37.366 00:00:10.360 TCP 23.104.0.1:53414 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:56:26.494 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:56796 10 6452 1 2025-11-13 10:56:37.766 00:00:11.171 TCP 23.104.0.1:56988 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:56:52.877 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 10:56:52.673 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 10:57:26.656 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56326 12 6556 1 2025-11-13 10:57:38.975 00:00:10.364 TCP 23.104.0.1:54858 -> 1.101.0.1:3000 11 1507 1 2025-11-13 10:53:56.525 00:05:04.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 10:53:56.523 00:05:04.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 10:58:26.884 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39306 10 6452 1 2025-11-13 10:58:39.379 00:00:10.370 TCP 23.104.0.1:47010 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498492, total packets: 1575, avg bps: 1111, avg pps: 0, avg bpp: 316 Time window: 2025-11-13 09:59:11 - 2025-11-13 10:59:00 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0048s User: 0.0016s Wall: 0.0024s flows/second: 67292.7 Runtime: 0.0025s