Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 15:59:03.960 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:39130 10 6452 1 2025-11-13 15:59:33.150 00:00:10.364 TCP 23.104.0.1:34150 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:00:04.148 00:00:10.427 TCP 1.101.0.1:3000 -> 22.102.0.1:42988 10 6452 1 2025-11-13 16:00:33.552 00:00:10.363 TCP 23.104.0.1:60970 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:01:04.616 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51130 10 6452 1 2025-11-13 16:01:33.952 00:00:10.364 TCP 23.104.0.1:37824 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:01:59.031 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:01:59.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 16:02:04.829 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54744 10 6452 1 2025-11-13 16:02:34.354 00:00:10.364 TCP 23.104.0.1:57638 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:03:05.076 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49868 10 6452 1 2025-11-13 16:03:34.757 00:00:10.392 TCP 23.104.0.1:42450 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:59:56.616 00:05:04.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 15:59:56.619 00:05:04.160 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 16:04:05.257 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58640 10 6452 1 2025-11-13 16:04:35.182 00:00:10.334 TCP 23.104.0.1:60106 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:05:05.470 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56176 10 6452 1 2025-11-13 16:05:35.552 00:00:10.361 TCP 23.104.0.1:36384 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:06:05.683 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33662 10 6452 1 2025-11-13 16:06:35.950 00:00:10.371 TCP 23.104.0.1:53038 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:06:59.021 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:06:58.951 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 16:07:05.901 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42050 10 6452 1 2025-11-13 16:07:36.356 00:00:10.369 TCP 23.104.0.1:49002 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:08:06.120 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:56650 10 6452 1 2025-11-13 16:08:36.765 00:00:10.374 TCP 23.104.0.1:37498 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:09:06.290 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42528 10 6452 1 2025-11-13 16:09:37.175 00:00:10.361 TCP 23.104.0.1:52882 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:05:56.617 00:05:04.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 16:05:56.621 00:05:04.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 16:10:06.505 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46732 10 6452 1 2025-11-13 16:10:37.573 00:00:10.366 TCP 23.104.0.1:56464 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:11:06.716 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58124 10 6452 1 2025-11-13 16:11:37.977 00:00:10.366 TCP 23.104.0.1:60036 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:11:59.180 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 16:11:58.927 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:12:06.940 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:38064 10 6452 1 2025-11-13 16:12:38.384 00:00:10.372 TCP 23.104.0.1:40452 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:13:07.179 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56764 10 6452 1 2025-11-13 16:13:38.822 00:00:10.364 TCP 23.104.0.1:49102 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:14:07.410 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33672 10 6452 1 2025-11-13 16:14:39.225 00:00:10.620 TCP 23.104.0.1:47142 -> 1.101.0.1:3000 15 1926 1 2025-11-13 16:15:07.599 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39236 12 10375 1 2025-11-13 16:15:39.886 00:00:10.335 TCP 23.104.0.1:48658 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:11:56.621 00:05:04.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 16:11:56.619 00:05:04.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 16:16:07.831 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57014 10 6452 1 2025-11-13 16:16:40.260 00:00:10.375 TCP 23.104.0.1:36922 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:16:59.373 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:16:59.370 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 16:17:08.070 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56398 10 6452 1 2025-11-13 16:17:40.676 00:00:10.373 TCP 23.104.0.1:41414 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:18:08.286 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49846 10 6452 1 2025-11-13 16:18:41.103 00:00:10.328 TCP 23.104.0.1:54538 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:19:08.501 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52244 10 6452 1 2025-11-13 16:19:41.466 00:00:10.367 TCP 23.104.0.1:40538 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:20:08.711 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59980 10 6452 1 2025-11-13 16:20:41.870 00:00:10.323 TCP 23.104.0.1:41462 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:21:08.915 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48036 10 6452 1 2025-11-13 16:21:42.232 00:00:10.785 TCP 23.104.0.1:54184 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:21:59.301 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:17:56.621 00:05:04.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 16:21:59.468 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 16:17:56.618 00:05:04.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 16:22:09.132 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35048 10 6452 1 2025-11-13 16:22:43.057 00:00:10.364 TCP 23.104.0.1:56800 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:23:09.353 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47396 10 6452 1 2025-11-13 16:23:43.461 00:00:10.323 TCP 23.104.0.1:59324 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:24:09.564 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57598 10 6452 1 2025-11-13 16:24:43.825 00:00:10.364 TCP 23.104.0.1:40546 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:25:09.786 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37778 10 6452 1 2025-11-13 16:25:44.234 00:00:10.363 TCP 23.104.0.1:41550 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:26:10.000 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45190 10 6452 1 2025-11-13 16:26:44.635 00:00:10.366 TCP 23.104.0.1:38358 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:26:59.454 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 16:26:59.534 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:27:10.218 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53836 10 6452 1 2025-11-13 16:27:45.063 00:00:10.360 TCP 23.104.0.1:45424 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:23:56.620 00:05:04.177 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 16:23:56.622 00:05:04.172 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 16:28:10.390 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35422 10 6452 1 2025-11-13 16:28:45.464 00:00:10.326 TCP 23.104.0.1:54356 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:29:10.609 00:00:10.123 TCP 1.101.0.1:3000 -> 22.102.0.1:46424 10 6452 1 2025-11-13 16:29:45.830 00:00:10.351 TCP 23.104.0.1:34512 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:30:10.773 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50996 10 6452 1 2025-11-13 16:30:46.221 00:00:10.373 TCP 23.104.0.1:44082 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:31:10.984 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45418 10 6452 1 2025-11-13 16:31:46.623 00:00:10.361 TCP 23.104.0.1:38178 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:31:59.681 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 16:31:59.564 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:32:11.227 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50612 10 6452 1 2025-11-13 16:32:47.021 00:00:10.364 TCP 23.104.0.1:48856 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:33:11.443 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46942 10 6452 1 2025-11-13 16:29:56.621 00:05:04.179 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 16:33:47.427 00:00:10.367 TCP 23.104.0.1:57794 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:29:56.624 00:05:04.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 16:34:11.663 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40058 10 6452 1 2025-11-13 16:34:47.829 00:00:10.373 TCP 23.104.0.1:55820 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:35:11.879 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34734 10 6452 1 2025-11-13 16:35:48.243 00:00:10.359 TCP 23.104.0.1:50078 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:36:12.102 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57484 10 6452 1 2025-11-13 16:36:59.622 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 16:36:59.702 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:36:48.643 00:00:10.365 TCP 23.104.0.1:37740 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:37:12.330 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:53728 10 6452 1 2025-11-13 16:37:49.058 00:00:10.368 TCP 23.104.0.1:45418 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:38:12.535 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45580 10 6452 1 2025-11-13 16:38:49.465 00:00:10.365 TCP 23.104.0.1:60406 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:39:12.756 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:60854 10 6452 1 2025-11-13 16:35:56.624 00:05:04.177 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 16:35:56.627 00:05:04.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 16:39:49.866 00:00:10.325 TCP 23.104.0.1:45672 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:40:12.987 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39316 10 6452 1 2025-11-13 16:40:50.233 00:00:10.360 TCP 23.104.0.1:53512 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:41:13.165 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32818 10 6452 1 2025-11-13 16:41:59.859 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 16:41:59.730 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:41:50.640 00:00:10.326 TCP 23.104.0.1:55114 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:42:13.377 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52970 10 6452 1 2025-11-13 16:42:51.005 00:00:10.318 TCP 23.104.0.1:50972 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:43:13.583 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37048 10 6452 1 2025-11-13 16:43:51.361 00:00:10.365 TCP 23.104.0.1:54506 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:44:13.798 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49354 10 6452 1 2025-11-13 16:44:51.768 00:00:10.386 TCP 23.104.0.1:56590 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:45:14.012 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49718 10 6452 1 2025-11-13 16:41:56.629 00:05:04.175 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 16:41:56.632 00:05:04.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 16:45:52.184 00:00:10.366 TCP 23.104.0.1:52776 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:46:14.224 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34144 10 6452 1 2025-11-13 16:46:59.788 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 16:46:59.737 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:46:52.587 00:00:10.364 TCP 23.104.0.1:48170 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:47:14.439 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53386 10 6452 1 2025-11-13 16:47:52.988 00:00:10.366 TCP 23.104.0.1:44968 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:48:14.649 00:00:18.399 TCP 1.101.0.1:3000 -> 22.102.0.1:59304 10 6452 1 2025-11-13 16:48:53.392 00:00:10.360 TCP 23.104.0.1:52068 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:49:23.088 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53128 10 6452 1 2025-11-13 16:49:53.794 00:00:10.364 TCP 23.104.0.1:44980 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:50:23.311 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58624 10 6452 1 2025-11-13 16:50:54.193 00:00:10.364 TCP 23.104.0.1:36714 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:51:23.520 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53226 10 6452 1 2025-11-13 16:52:00.038 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:47:56.634 00:05:04.169 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 16:47:56.632 00:05:04.175 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 16:52:00.044 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 16:51:54.593 00:00:10.366 TCP 23.104.0.1:38556 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:52:23.732 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37630 10 6452 1 2025-11-13 16:52:54.993 00:00:10.368 TCP 23.104.0.1:46106 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:53:23.946 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33542 10 6452 1 2025-11-13 16:53:55.405 00:00:10.365 TCP 23.104.0.1:43830 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:54:24.173 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43910 10 6452 1 2025-11-13 16:54:55.806 00:00:10.365 TCP 23.104.0.1:49482 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:55:24.378 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39590 10 6452 1 2025-11-13 16:55:56.214 00:00:10.364 TCP 23.104.0.1:43802 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:56:24.590 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60046 10 6452 1 2025-11-13 16:56:59.957 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 16:57:00.059 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 16:56:56.616 00:00:10.365 TCP 23.104.0.1:49960 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:57:24.808 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47854 10 6452 1 2025-11-13 16:53:56.631 00:05:04.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 16:53:56.633 00:05:04.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 16:57:57.020 00:00:10.326 TCP 23.104.0.1:42544 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:58:25.040 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43252 10 6452 1 Summary: total flows: 163, total bytes: 501183, total packets: 1567, avg bps: 1114, avg pps: 0, avg bpp: 319 Time window: 2025-11-13 15:59:03 - 2025-11-13 16:59:00 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0022s Wall: 0.0021s flows/second: 77434.8 Runtime: 0.0021s