Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 12:59:00.200 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39684 10 6661 1 2025-11-13 12:59:42.011 00:00:10.365 TCP 23.104.0.1:35766 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:00:00.420 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48824 10 6661 1 2025-11-13 13:00:42.417 00:00:10.374 TCP 23.104.0.1:35956 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:01:00.640 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57026 10 6661 1 2025-11-13 13:01:55.432 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 13:01:55.534 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 13:01:42.834 00:00:10.346 TCP 23.104.0.1:42344 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:02:00.861 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42268 10 6661 1 2025-11-13 13:02:43.218 00:00:10.362 TCP 23.104.0.1:36654 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:03:01.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37220 10 6661 1 2025-11-13 12:59:56.558 00:05:04.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 13:03:43.617 00:00:10.362 TCP 23.104.0.1:52406 -> 1.101.0.1:3000 11 1507 1 2025-11-13 12:59:56.562 00:05:04.127 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 13:04:01.295 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59538 10 6661 1 2025-11-13 13:04:44.016 00:00:10.365 TCP 23.104.0.1:44110 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:05:01.511 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51548 10 6661 1 2025-11-13 13:05:44.429 00:00:10.367 TCP 23.104.0.1:48192 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:06:01.728 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51198 10 6661 1 2025-11-13 13:06:44.841 00:00:10.338 TCP 23.104.0.1:55316 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:06:55.779 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 13:06:55.766 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 13:07:01.950 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55558 10 6661 1 2025-11-13 13:07:45.216 00:00:10.368 TCP 23.104.0.1:35764 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:08:02.179 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6661 1 2025-11-13 13:08:45.614 00:00:10.326 TCP 23.104.0.1:56234 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:09:02.406 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43622 10 6661 1 2025-11-13 13:09:45.975 00:00:10.371 TCP 23.104.0.1:53650 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:05:56.565 00:05:04.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 13:05:56.563 00:05:04.130 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 13:10:02.631 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47282 10 6661 1 2025-11-13 13:10:46.382 00:00:10.379 TCP 23.104.0.1:58230 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:11:02.840 00:00:10.491 TCP 1.101.0.1:3000 -> 22.102.0.1:35394 10 6661 1 2025-11-13 13:11:55.830 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 13:11:55.772 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 13:11:46.792 00:00:10.373 TCP 23.104.0.1:41486 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:12:03.367 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54874 10 6661 1 2025-11-13 13:12:47.202 00:00:23.741 TCP 23.104.0.1:36314 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:13:03.586 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:40974 10 6661 1 2025-11-13 13:14:00.987 00:00:10.366 TCP 23.104.0.1:38114 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:14:03.789 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34176 10 6661 1 2025-11-13 13:15:01.397 00:00:10.367 TCP 23.104.0.1:45554 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:15:04.006 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53118 10 6661 1 2025-11-13 13:11:56.565 00:05:04.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 13:11:56.564 00:05:04.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 13:16:04.182 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40052 10 6661 1 2025-11-13 13:16:01.804 00:00:10.362 TCP 23.104.0.1:32958 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:16:55.753 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 13:16:55.629 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 13:17:04.393 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60712 10 6661 1 2025-11-13 13:17:02.210 00:00:10.362 TCP 23.104.0.1:43676 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:18:04.618 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34898 10 6661 1 2025-11-13 13:18:02.613 00:00:10.362 TCP 23.104.0.1:41502 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:19:03.012 00:00:10.365 TCP 23.104.0.1:40646 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:19:04.799 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56118 10 6661 1 2025-11-13 13:20:03.415 00:00:10.366 TCP 23.104.0.1:40816 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:20:05.038 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40048 10 6661 1 2025-11-13 13:21:03.816 00:00:10.328 TCP 23.104.0.1:57088 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:21:05.263 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35536 10 6661 1 2025-11-13 13:21:55.982 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 13:21:55.820 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 13:17:56.568 00:05:04.127 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 13:17:56.565 00:05:04.132 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 13:22:05.475 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48450 10 6661 1 2025-11-13 13:22:04.178 00:00:10.372 TCP 23.104.0.1:34342 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:23:04.591 00:00:10.327 TCP 23.104.0.1:36352 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:23:05.693 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35934 10 6661 1 2025-11-13 13:24:04.956 00:00:10.367 TCP 23.104.0.1:43326 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:24:05.907 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45712 10 6661 1 2025-11-13 13:25:05.365 00:00:10.487 TCP 23.104.0.1:37960 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:25:06.131 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56160 10 6661 1 2025-11-13 13:26:05.891 00:00:10.379 TCP 23.104.0.1:48478 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:26:06.351 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47874 10 6661 1 2025-11-13 13:26:55.977 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 13:26:56.202 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 13:27:06.533 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:51906 10 6661 1 2025-11-13 13:27:06.328 00:00:10.391 TCP 23.104.0.1:34882 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:23:56.570 00:05:04.125 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 13:23:56.568 00:05:04.130 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 13:28:06.799 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58744 10 6661 1 2025-11-13 13:28:06.786 00:00:10.326 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:29:07.156 00:00:10.378 TCP 23.104.0.1:58766 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:29:07.018 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59004 10 6661 1 2025-11-13 13:30:07.247 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46802 10 6661 1 2025-11-13 13:30:07.570 00:00:10.368 TCP 23.104.0.1:46292 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:31:07.473 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60800 10 6661 1 2025-11-13 13:31:07.974 00:00:10.381 TCP 23.104.0.1:37514 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:31:56.211 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 13:31:55.974 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 13:32:07.686 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41448 10 6661 1 2025-11-13 13:32:08.391 00:00:10.369 TCP 23.104.0.1:48486 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:33:08.813 00:00:10.365 TCP 23.104.0.1:42172 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:33:07.855 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:41668 10 6661 1 2025-11-13 13:29:56.569 00:05:04.132 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 13:29:56.572 00:05:04.126 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 13:34:08.095 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33278 10 6661 1 2025-11-13 13:34:09.215 00:00:10.365 TCP 23.104.0.1:53158 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:35:08.314 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:44356 10 6661 1 2025-11-13 13:35:09.615 00:00:10.368 TCP 23.104.0.1:59404 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:36:08.601 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49516 10 6661 1 2025-11-13 13:36:10.020 00:00:10.326 TCP 23.104.0.1:42116 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:36:56.009 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 13:36:56.092 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 13:37:10.380 00:00:10.366 TCP 23.104.0.1:39846 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:37:08.825 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44466 10 6661 1 2025-11-13 13:38:09.040 00:00:13.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34884 10 6661 1 2025-11-13 13:38:10.785 00:00:11.530 TCP 23.104.0.1:41130 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:39:12.353 00:00:10.367 TCP 23.104.0.1:34676 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:39:12.260 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34232 10 6661 1 2025-11-13 13:35:56.570 00:05:04.132 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 13:35:56.572 00:05:04.127 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 13:40:12.758 00:00:10.385 TCP 23.104.0.1:33664 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:40:12.449 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:47728 10 6661 1 2025-11-13 13:41:12.630 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:53804 10 6661 1 2025-11-13 13:41:13.188 00:00:10.959 TCP 23.104.0.1:48042 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:41:56.230 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 13:41:56.601 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 13:42:14.183 00:00:10.328 TCP 23.104.0.1:55760 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:42:12.818 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50172 10 6661 1 2025-11-13 13:43:14.549 00:00:10.363 TCP 23.104.0.1:36320 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:43:13.040 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47086 10 6661 1 2025-11-13 13:44:13.255 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51146 10 6661 1 2025-11-13 13:44:14.947 00:00:10.372 TCP 23.104.0.1:37212 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:45:13.434 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33476 10 6661 1 2025-11-13 13:45:15.362 00:00:10.369 TCP 23.104.0.1:47606 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:41:56.570 00:05:04.135 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 13:41:56.572 00:05:04.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 13:46:13.604 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47706 10 6661 1 2025-11-13 13:46:15.759 00:00:10.386 TCP 23.104.0.1:44754 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:46:56.005 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 13:46:56.187 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 13:47:13.818 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43188 10 6661 1 2025-11-13 13:47:16.184 00:00:10.329 TCP 23.104.0.1:43384 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:48:14.070 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:42578 10 6661 1 2025-11-13 13:48:16.545 00:00:10.370 TCP 23.104.0.1:57746 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:49:14.341 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43316 10 6661 1 2025-11-13 13:49:16.961 00:00:10.726 TCP 23.104.0.1:34054 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:50:14.577 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33154 10 6661 1 2025-11-13 13:50:17.745 00:00:10.331 TCP 23.104.0.1:37064 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:51:14.796 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60806 10 6661 1 2025-11-13 13:51:18.125 00:00:10.369 TCP 23.104.0.1:41884 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:51:56.506 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 13:51:56.653 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 13:47:56.574 00:05:04.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 13:47:56.572 00:05:04.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 13:52:15.016 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44264 10 6661 1 2025-11-13 13:52:18.536 00:00:10.377 TCP 23.104.0.1:55604 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:53:15.230 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56348 10 6661 1 2025-11-13 13:53:18.991 00:00:10.326 TCP 23.104.0.1:36530 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:54:15.463 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40142 10 6661 1 2025-11-13 13:54:19.356 00:00:10.368 TCP 23.104.0.1:34870 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:55:15.679 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45628 10 6661 1 2025-11-13 13:55:19.763 00:00:10.381 TCP 23.104.0.1:34552 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:56:15.897 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:36090 10 6661 1 2025-11-13 13:56:20.183 00:00:10.323 TCP 23.104.0.1:40704 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:56:57.306 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 13:56:57.124 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 13:57:16.093 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40820 10 6661 1 2025-11-13 13:57:20.539 00:00:10.371 TCP 23.104.0.1:37000 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:53:56.574 00:05:04.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 13:53:56.577 00:05:04.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 13:58:16.307 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59072 10 6661 1 2025-11-13 13:58:20.943 00:00:10.376 TCP 23.104.0.1:59604 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 509381, total packets: 1561, avg bps: 1131, avg pps: 0, avg bpp: 326 Time window: 2025-11-13 12:59:00 - 2025-11-13 13:59:00 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0008s Wall: 0.0021s flows/second: 78142.8 Runtime: 0.0021s