Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 11:58:42.950 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39820 10 6452 1 2025-11-13 11:59:13.029 00:00:10.361 TCP 23.104.0.1:59792 -> 1.101.0.1:3000 11 1507 1 2025-11-13 11:59:43.133 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34188 10 6452 1 2025-11-13 12:00:13.432 00:00:10.372 TCP 23.104.0.1:46734 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:00:43.347 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51730 10 6452 1 2025-11-13 12:01:13.838 00:00:10.390 TCP 23.104.0.1:50960 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:01:43.577 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51884 10 6452 1 2025-11-13 12:01:54.276 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 12:01:54.204 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 12:02:14.265 00:00:13.826 TCP 23.104.0.1:41494 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:02:43.758 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54990 10 6452 1 2025-11-13 12:03:18.179 00:00:10.316 TCP 23.104.0.1:49014 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:03:43.966 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56386 12 6556 1 2025-11-13 11:59:56.550 00:05:04.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 11:59:56.548 00:05:04.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 12:04:18.533 00:00:10.434 TCP 23.104.0.1:53748 -> 1.101.0.1:3000 15 1926 1 2025-11-13 12:04:44.186 00:00:10.254 TCP 1.101.0.1:3000 -> 22.102.0.1:36010 14 14001 1 2025-11-13 12:05:19.012 00:00:10.968 TCP 23.104.0.1:37696 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:05:44.488 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55312 10 6452 1 2025-11-13 12:06:20.028 00:00:10.360 TCP 23.104.0.1:41488 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:06:54.485 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 12:06:44.658 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53144 10 6452 1 2025-11-13 12:06:54.555 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 12:07:20.431 00:00:10.360 TCP 23.104.0.1:47298 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:07:44.869 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35916 10 6452 1 2025-11-13 12:08:20.829 00:00:10.363 TCP 23.104.0.1:60138 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:08:45.088 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39250 10 6452 1 2025-11-13 12:09:21.230 00:00:10.362 TCP 23.104.0.1:49520 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:09:45.313 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38568 10 6452 1 2025-11-13 12:05:56.549 00:05:04.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 12:05:56.552 00:05:04.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 12:10:21.632 00:00:10.357 TCP 23.104.0.1:58560 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:10:45.537 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33540 10 6452 1 2025-11-13 12:11:22.031 00:00:10.326 TCP 23.104.0.1:41114 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:11:54.319 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 12:11:45.763 00:00:10.576 TCP 1.101.0.1:3000 -> 22.102.0.1:33380 10 6452 1 2025-11-13 12:11:54.428 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 12:12:22.391 00:00:10.366 TCP 23.104.0.1:55492 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:12:46.371 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46888 10 6452 1 2025-11-13 12:13:22.790 00:00:10.364 TCP 23.104.0.1:36026 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:13:46.581 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36812 10 6452 1 2025-11-13 12:14:23.195 00:00:10.496 TCP 23.104.0.1:58100 -> 1.101.0.1:3000 15 1926 1 2025-11-13 12:14:46.800 00:00:10.303 TCP 1.101.0.1:3000 -> 22.102.0.1:54046 12 10375 1 2025-11-13 12:15:23.730 00:00:10.365 TCP 23.104.0.1:43690 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:11:56.552 00:05:04.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 12:15:47.143 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37240 10 6452 1 2025-11-13 12:11:56.550 00:05:04.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 12:16:24.146 00:00:10.360 TCP 23.104.0.1:60098 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:16:54.505 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 12:16:54.712 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 12:16:47.354 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38566 10 6452 1 2025-11-13 12:17:24.549 00:00:10.366 TCP 23.104.0.1:45560 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:17:47.562 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49808 10 6452 1 2025-11-13 12:18:24.947 00:00:10.364 TCP 23.104.0.1:47558 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:18:47.773 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48754 10 6452 1 2025-11-13 12:19:25.352 00:00:10.362 TCP 23.104.0.1:60010 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:19:47.990 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57398 10 6452 1 2025-11-13 12:20:25.760 00:00:10.376 TCP 23.104.0.1:40796 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:20:48.207 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52428 10 6452 1 2025-11-13 12:21:26.171 00:00:11.087 TCP 23.104.0.1:58910 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:21:54.656 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 12:21:54.628 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 12:21:48.428 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40998 10 6452 1 2025-11-13 12:17:56.551 00:05:04.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 12:17:56.553 00:05:04.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 12:22:27.303 00:00:10.364 TCP 23.104.0.1:55902 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:22:48.644 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59310 10 6452 1 2025-11-13 12:23:27.710 00:00:10.364 TCP 23.104.0.1:42210 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:23:48.864 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52346 10 6452 1 2025-11-13 12:24:28.113 00:00:10.366 TCP 23.104.0.1:45806 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:24:49.091 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42604 10 6452 1 2025-11-13 12:25:28.519 00:00:10.367 TCP 23.104.0.1:33036 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:25:49.302 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35988 10 6452 1 2025-11-13 12:26:28.931 00:00:10.385 TCP 23.104.0.1:43428 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:26:55.013 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 12:26:54.884 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 12:26:49.512 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47540 10 6452 1 2025-11-13 12:27:29.357 00:00:10.366 TCP 23.104.0.1:53938 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:23:56.558 00:05:04.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 12:23:56.553 00:05:04.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 12:27:49.728 00:00:12.659 TCP 1.101.0.1:3000 -> 22.102.0.1:34532 10 6452 1 2025-11-13 12:28:29.764 00:00:10.329 TCP 23.104.0.1:56972 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:28:52.421 00:00:10.308 TCP 1.101.0.1:3000 -> 22.102.0.1:48256 10 6452 1 2025-11-13 12:29:30.137 00:00:10.383 TCP 23.104.0.1:43766 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:29:52.769 00:00:10.584 TCP 1.101.0.1:3000 -> 22.102.0.1:53670 10 6452 1 2025-11-13 12:30:30.571 00:00:10.368 TCP 23.104.0.1:33692 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:30:53.395 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34742 10 6452 1 2025-11-13 12:31:30.980 00:00:10.366 TCP 23.104.0.1:34114 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:31:54.895 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 12:31:54.892 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 12:31:53.609 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56294 10 6452 1 2025-11-13 12:32:31.383 00:00:10.363 TCP 23.104.0.1:33914 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:32:53.828 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60242 10 6452 1 2025-11-13 12:33:31.798 00:00:10.340 TCP 23.104.0.1:44852 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:29:56.556 00:05:04.116 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 12:29:56.554 00:05:04.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 12:33:54.062 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37714 10 6452 1 2025-11-13 12:34:32.175 00:00:10.366 TCP 23.104.0.1:52278 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:34:54.276 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48224 10 6452 1 2025-11-13 12:35:32.579 00:00:10.362 TCP 23.104.0.1:33128 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:35:54.501 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33450 10 6452 1 2025-11-13 12:36:32.983 00:00:10.324 TCP 23.104.0.1:47926 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:36:54.925 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 12:36:54.799 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 12:36:54.719 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39306 10 6452 1 2025-11-13 12:37:33.347 00:00:10.320 TCP 23.104.0.1:55116 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:37:54.935 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:43118 10 6452 1 2025-11-13 12:38:33.705 00:00:10.326 TCP 23.104.0.1:33148 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:38:55.177 00:00:10.457 TCP 1.101.0.1:3000 -> 22.102.0.1:51750 10 6452 1 2025-11-13 12:39:34.099 00:00:10.364 TCP 23.104.0.1:38146 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:35:56.555 00:05:04.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 12:35:56.558 00:05:04.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 12:39:55.673 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:55074 10 6452 1 2025-11-13 12:40:34.503 00:00:10.363 TCP 23.104.0.1:48088 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:40:55.859 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60042 10 6452 1 2025-11-13 12:41:34.909 00:00:10.327 TCP 23.104.0.1:50842 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:41:54.877 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 12:41:54.852 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 12:41:56.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54510 10 6452 1 2025-11-13 12:42:35.279 00:00:10.328 TCP 23.104.0.1:42226 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:42:56.293 00:00:10.468 TCP 1.101.0.1:3000 -> 22.102.0.1:59324 10 6452 1 2025-11-13 12:43:35.648 00:00:10.366 TCP 23.104.0.1:56966 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:43:56.806 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34706 10 6452 1 2025-11-13 12:44:36.056 00:00:10.331 TCP 23.104.0.1:44448 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:44:57.038 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46832 10 6452 1 2025-11-13 12:45:36.423 00:00:10.326 TCP 23.104.0.1:60216 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:41:56.560 00:05:04.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 12:41:56.557 00:05:04.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 12:45:57.246 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48226 10 6452 1 2025-11-13 12:46:36.786 00:00:10.324 TCP 23.104.0.1:58554 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:46:55.268 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 12:46:54.861 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 12:46:57.471 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39914 10 6452 1 2025-11-13 12:47:37.140 00:00:10.366 TCP 23.104.0.1:37466 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:47:57.694 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56344 10 6452 1 2025-11-13 12:48:37.544 00:00:10.363 TCP 23.104.0.1:34602 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:48:57.909 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46262 10 6452 1 2025-11-13 12:49:37.941 00:00:10.374 TCP 23.104.0.1:49102 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:49:58.128 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40094 10 6452 1 2025-11-13 12:50:38.352 00:00:10.325 TCP 23.104.0.1:35002 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:50:58.357 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:38938 10 6452 1 2025-11-13 12:51:38.721 00:00:10.336 TCP 23.104.0.1:40494 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:51:55.024 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 12:51:55.347 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 12:47:56.557 00:05:04.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 12:47:56.562 00:05:04.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 12:51:58.609 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36170 10 6452 1 2025-11-13 12:52:39.121 00:00:10.366 TCP 23.104.0.1:36402 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:52:58.831 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50976 10 6452 1 2025-11-13 12:53:39.520 00:00:10.366 TCP 23.104.0.1:49246 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:53:59.080 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:36506 10 6452 1 2025-11-13 12:54:39.924 00:00:10.461 TCP 23.104.0.1:45508 -> 1.101.0.1:3000 15 1926 1 2025-11-13 12:54:59.317 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57710 12 10584 1 2025-11-13 12:55:40.428 00:00:10.322 TCP 23.104.0.1:52732 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:55:59.535 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50378 10 6661 1 2025-11-13 12:56:40.795 00:00:10.370 TCP 23.104.0.1:42064 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:56:55.414 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 12:56:55.364 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 12:56:59.744 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39788 10 6661 1 2025-11-13 12:57:41.206 00:00:10.366 TCP 23.104.0.1:47414 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:53:56.560 00:05:04.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 12:53:56.558 00:05:04.130 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 12:57:59.967 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52116 10 6661 1 2025-11-13 12:58:41.610 00:00:10.364 TCP 23.104.0.1:47344 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 515940, total packets: 1594, avg bps: 1140, avg pps: 0, avg bpp: 323 Time window: 2025-11-13 11:58:42 - 2025-11-13 12:59:00 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0027s Wall: 0.0024s flows/second: 67656.7 Runtime: 0.0024s