Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 13:59:16.521 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:37018 12 10375 1 2025-11-13 13:59:21.355 00:00:10.447 TCP 23.104.0.1:51186 -> 1.101.0.1:3000 15 1926 1 2025-11-13 14:00:16.757 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35210 10 6452 1 2025-11-13 14:00:21.839 00:00:10.388 TCP 23.104.0.1:46580 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:01:16.975 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:33582 10 6452 1 2025-11-13 14:01:22.266 00:00:10.327 TCP 23.104.0.1:58842 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:01:56.575 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 14:01:56.863 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 14:02:17.175 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54272 10 6452 1 2025-11-13 14:02:22.629 00:00:10.368 TCP 23.104.0.1:41112 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:03:17.388 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52336 10 6452 1 2025-11-13 14:03:23.032 00:00:10.419 TCP 23.104.0.1:56040 -> 1.101.0.1:3000 11 1507 1 2025-11-13 13:59:56.575 00:05:04.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 13:59:56.578 00:05:04.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 14:04:17.603 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42738 10 6452 1 2025-11-13 14:04:23.495 00:00:10.363 TCP 23.104.0.1:37324 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:05:17.818 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42820 10 6452 1 2025-11-13 14:05:23.901 00:00:10.364 TCP 23.104.0.1:33660 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:06:18.039 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42150 10 6452 1 2025-11-13 14:06:24.304 00:00:10.366 TCP 23.104.0.1:49962 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:06:56.671 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 14:06:56.757 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 14:07:18.259 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58272 10 6452 1 2025-11-13 14:07:24.709 00:00:10.361 TCP 23.104.0.1:52054 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:08:18.476 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47874 10 6452 1 2025-11-13 14:08:25.113 00:00:10.533 TCP 23.104.0.1:43460 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:09:18.688 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39554 10 6452 1 2025-11-13 14:09:25.692 00:00:10.370 TCP 23.104.0.1:58222 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:05:56.580 00:05:04.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 14:05:56.578 00:05:04.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 14:10:18.910 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34628 10 6452 1 2025-11-13 14:10:26.100 00:00:10.326 TCP 23.104.0.1:54840 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:11:19.131 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44994 10 6452 1 2025-11-13 14:11:26.467 00:00:10.369 TCP 23.104.0.1:49882 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:11:56.819 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 14:11:57.037 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 14:12:19.352 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37006 10 6452 1 2025-11-13 14:12:26.896 00:00:10.374 TCP 23.104.0.1:58420 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:13:19.576 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52484 10 6452 1 2025-11-13 14:13:27.309 00:00:10.363 TCP 23.104.0.1:39588 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:14:19.792 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38922 10 6452 1 2025-11-13 14:14:27.718 00:00:10.374 TCP 23.104.0.1:40398 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:15:20.020 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36982 10 6452 1 2025-11-13 14:15:28.130 00:00:10.368 TCP 23.104.0.1:40526 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:11:56.581 00:05:04.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 14:11:56.580 00:05:04.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 14:16:20.234 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50780 10 6452 1 2025-11-13 14:16:28.539 00:00:10.327 TCP 23.104.0.1:43918 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:16:56.792 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 14:16:56.711 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 14:17:20.438 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58494 10 6452 1 2025-11-13 14:17:28.903 00:00:10.324 TCP 23.104.0.1:56376 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:18:20.658 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41070 10 6452 1 2025-11-13 14:18:29.266 00:00:10.327 TCP 23.104.0.1:57000 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:19:20.894 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45990 12 6556 1 2025-11-13 14:19:29.633 00:00:10.363 TCP 23.104.0.1:58934 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:20:21.112 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47868 10 6452 1 2025-11-13 14:20:30.036 00:00:10.361 TCP 23.104.0.1:60536 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:21:21.285 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:60278 10 6452 1 2025-11-13 14:21:30.436 00:00:10.364 TCP 23.104.0.1:38746 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:21:56.726 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 14:17:56.581 00:05:04.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 14:21:57.074 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 14:17:56.585 00:05:04.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 14:22:21.563 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36752 10 6452 1 2025-11-13 14:22:30.838 00:00:10.347 TCP 23.104.0.1:39178 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:23:21.737 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38016 10 6452 1 2025-11-13 14:23:31.223 00:00:10.365 TCP 23.104.0.1:47500 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:24:21.954 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:44210 12 6556 1 2025-11-13 14:24:31.629 00:00:10.369 TCP 23.104.0.1:36942 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:25:22.195 00:00:10.902 TCP 1.101.0.1:3000 -> 22.102.0.1:54908 10 6452 1 2025-11-13 14:25:32.032 00:00:10.433 TCP 23.104.0.1:44042 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:26:23.133 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55934 10 6452 1 2025-11-13 14:26:32.510 00:00:10.325 TCP 23.104.0.1:39394 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:26:56.958 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 14:26:57.019 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 14:27:23.345 00:00:10.594 TCP 1.101.0.1:3000 -> 22.102.0.1:55980 10 6452 1 2025-11-13 14:27:32.878 00:00:10.325 TCP 23.104.0.1:48412 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:23:56.587 00:05:04.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 14:23:56.584 00:05:04.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 14:28:23.988 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58238 10 6452 1 2025-11-13 14:28:33.240 00:00:10.366 TCP 23.104.0.1:58052 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:29:24.221 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35644 10 6452 1 2025-11-13 14:29:33.642 00:00:10.369 TCP 23.104.0.1:53776 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:30:24.431 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57606 10 6452 1 2025-11-13 14:30:34.058 00:00:10.332 TCP 23.104.0.1:53894 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:31:24.641 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48690 10 6452 1 2025-11-13 14:31:34.421 00:00:10.376 TCP 23.104.0.1:42614 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:31:56.997 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 14:31:57.212 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 14:32:24.857 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37700 10 6452 1 2025-11-13 14:32:34.832 00:00:10.350 TCP 23.104.0.1:52346 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:33:25.079 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51522 10 6452 1 2025-11-13 14:33:35.218 00:00:10.369 TCP 23.104.0.1:38260 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:29:56.585 00:05:04.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 14:29:56.587 00:05:04.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 14:34:25.286 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46144 10 6452 1 2025-11-13 14:34:35.625 00:00:10.363 TCP 23.104.0.1:46694 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:35:25.502 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55610 10 6452 1 2025-11-13 14:35:36.024 00:00:10.360 TCP 23.104.0.1:39744 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:36:25.714 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43982 10 6452 1 2025-11-13 14:36:36.419 00:00:10.371 TCP 23.104.0.1:54868 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:36:57.422 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 14:36:57.366 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 14:37:25.933 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:57292 10 6452 1 2025-11-13 14:37:36.830 00:00:10.389 TCP 23.104.0.1:44014 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:38:26.177 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35498 10 6452 1 2025-11-13 14:38:37.260 00:00:10.361 TCP 23.104.0.1:46086 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:39:26.360 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59954 10 6452 1 2025-11-13 14:39:37.665 00:00:10.363 TCP 23.104.0.1:52066 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:35:56.587 00:05:04.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 14:35:56.589 00:05:04.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 14:40:26.581 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33236 10 6452 1 2025-11-13 14:40:38.088 00:00:10.365 TCP 23.104.0.1:53452 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:41:26.794 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56564 10 6452 1 2025-11-13 14:41:38.492 00:00:10.364 TCP 23.104.0.1:38536 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:41:57.356 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 14:41:57.331 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 14:42:27.019 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44926 10 6452 1 2025-11-13 14:42:38.901 00:00:10.369 TCP 23.104.0.1:32888 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:43:27.229 00:00:10.292 TCP 1.101.0.1:3000 -> 22.102.0.1:54706 10 6452 1 2025-11-13 14:43:39.310 00:00:20.704 TCP 23.104.0.1:45922 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:44:27.563 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58488 10 6452 1 2025-11-13 14:44:50.064 00:00:10.330 TCP 23.104.0.1:59076 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:45:27.779 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53274 10 6452 1 2025-11-13 14:41:56.592 00:05:04.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 14:45:50.431 00:00:10.368 TCP 23.104.0.1:45308 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:41:56.589 00:05:04.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 14:46:27.950 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:60066 10 6452 1 2025-11-13 14:46:57.412 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 14:46:57.561 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 14:46:50.836 00:00:10.386 TCP 23.104.0.1:35902 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:47:28.193 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47440 10 6452 1 2025-11-13 14:47:51.261 00:00:10.368 TCP 23.104.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:48:28.398 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42344 10 6452 1 2025-11-13 14:48:51.671 00:00:10.359 TCP 23.104.0.1:37714 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:49:28.604 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37892 10 6452 1 2025-11-13 14:49:52.094 00:00:10.359 TCP 23.104.0.1:35356 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:50:28.778 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36922 10 6452 1 2025-11-13 14:50:52.495 00:00:10.364 TCP 23.104.0.1:44066 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:51:28.948 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59106 12 6556 1 2025-11-13 14:51:57.517 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 14:47:56.594 00:05:04.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 14:51:57.765 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 14:47:56.592 00:05:04.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 14:51:52.897 00:00:10.366 TCP 23.104.0.1:55004 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:52:29.180 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41916 10 6452 1 2025-11-13 14:52:53.299 00:00:10.370 TCP 23.104.0.1:52922 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:53:29.394 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44230 10 6452 1 2025-11-13 14:53:53.709 00:00:10.327 TCP 23.104.0.1:58602 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:54:29.609 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44680 10 6452 1 2025-11-13 14:54:54.100 00:00:10.370 TCP 23.104.0.1:42930 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:55:29.822 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54796 10 6452 1 2025-11-13 14:55:54.501 00:00:10.371 TCP 23.104.0.1:43472 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:56:30.053 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56938 10 6452 1 2025-11-13 14:56:57.655 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 14:56:57.957 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 14:56:54.911 00:00:10.358 TCP 23.104.0.1:53596 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:57:30.265 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49198 10 6452 1 2025-11-13 14:53:56.599 00:05:04.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 14:53:56.597 00:05:04.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 14:57:55.311 00:00:10.364 TCP 23.104.0.1:39572 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:58:30.481 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55198 10 6452 1 Summary: total flows: 163, total bytes: 501495, total packets: 1573, avg bps: 1119, avg pps: 0, avg bpp: 318 Time window: 2025-11-13 13:59:16 - 2025-11-13 14:59:00 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0058s User: 0.0000s Wall: 0.0021s flows/second: 79395.1 Runtime: 0.0021s