Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 23:58:41.966 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:36194 10 6452 1 2025-11-12 23:59:10.865 00:00:10.368 TCP 23.104.0.1:52694 -> 1.101.0.1:3000 11 1507 1 2025-11-12 23:59:42.205 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34568 10 6452 1 2025-11-13 00:00:11.270 00:00:10.361 TCP 23.104.0.1:35360 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:00:42.425 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50534 12 6556 1 2025-11-13 00:01:11.671 00:00:10.365 TCP 23.104.0.1:51504 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:01:39.911 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:01:39.849 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 00:01:42.642 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60128 10 6452 1 2025-11-13 00:02:12.099 00:00:10.324 TCP 23.104.0.1:49430 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:02:42.861 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45026 10 6452 1 2025-11-13 00:03:12.461 00:00:10.366 TCP 23.104.0.1:57548 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:03:43.088 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58810 10 6452 1 2025-11-12 23:59:56.320 00:05:03.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 23:59:56.318 00:05:03.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 00:04:12.869 00:00:10.324 TCP 23.104.0.1:50878 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:04:43.303 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38780 10 6452 1 2025-11-13 00:05:13.232 00:00:10.366 TCP 23.104.0.1:43668 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:05:43.514 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38166 10 6452 1 2025-11-13 00:06:39.779 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 00:06:13.640 00:00:21.924 TCP 23.104.0.1:59806 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:06:39.833 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:06:43.744 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57662 10 6452 1 2025-11-13 00:07:25.600 00:00:10.320 TCP 23.104.0.1:50608 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:07:43.918 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52948 10 6452 1 2025-11-13 00:08:25.957 00:00:10.364 TCP 23.104.0.1:58382 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:08:44.127 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47278 10 6452 1 2025-11-13 00:09:26.362 00:00:10.361 TCP 23.104.0.1:50032 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:09:44.346 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:60960 10 6452 1 2025-11-13 00:05:56.321 00:05:03.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 00:05:56.323 00:05:03.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 00:10:26.760 00:00:10.377 TCP 23.104.0.1:53262 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:10:44.532 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59094 10 6452 1 2025-11-13 00:11:40.191 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 00:11:40.319 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:11:27.175 00:00:10.365 TCP 23.104.0.1:33504 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:11:44.746 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46066 10 6452 1 2025-11-13 00:12:27.577 00:00:10.362 TCP 23.104.0.1:53566 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:12:44.915 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:45546 10 6452 1 2025-11-13 00:13:27.980 00:00:10.363 TCP 23.104.0.1:59986 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:13:45.098 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38366 10 6452 1 2025-11-13 00:14:28.389 00:00:10.371 TCP 23.104.0.1:35866 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:14:45.317 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41134 10 6452 1 2025-11-13 00:15:28.796 00:00:10.366 TCP 23.104.0.1:54376 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:15:45.537 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52210 10 6452 1 2025-11-13 00:11:56.322 00:05:03.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 00:11:56.324 00:05:03.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 00:16:39.892 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 00:16:29.210 00:00:10.369 TCP 23.104.0.1:59368 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:16:40.403 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:16:45.777 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56002 10 6452 1 2025-11-13 00:17:29.617 00:00:10.365 TCP 23.104.0.1:45136 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:17:45.997 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:33752 10 6452 1 2025-11-13 00:18:30.023 00:00:11.036 TCP 23.104.0.1:59046 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:18:46.236 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43568 10 6452 1 2025-11-13 00:19:31.105 00:00:10.367 TCP 23.104.0.1:48452 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:19:46.478 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34666 10 6452 1 2025-11-13 00:20:31.508 00:00:10.370 TCP 23.104.0.1:45296 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:20:46.702 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44004 10 6452 1 2025-11-13 00:21:40.373 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 00:21:40.203 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:21:31.913 00:00:10.366 TCP 23.104.0.1:37050 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:21:46.945 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:57728 10 6452 1 2025-11-13 00:17:56.326 00:05:03.993 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 00:17:56.329 00:05:03.988 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 00:22:32.315 00:00:10.362 TCP 23.104.0.1:60034 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:22:47.193 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33660 10 6452 1 2025-11-13 00:23:32.715 00:00:10.391 TCP 23.104.0.1:37794 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:23:47.413 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35330 10 6452 1 2025-11-13 00:24:33.149 00:00:10.362 TCP 23.104.0.1:59534 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:24:47.629 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50140 10 6452 1 2025-11-13 00:25:33.549 00:00:10.325 TCP 23.104.0.1:48044 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:25:47.849 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50828 10 6452 1 2025-11-13 00:26:40.350 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 00:26:40.442 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:26:33.909 00:00:11.970 TCP 23.104.0.1:49372 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:26:48.032 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50240 10 6452 1 2025-11-13 00:27:35.915 00:00:10.365 TCP 23.104.0.1:42294 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:23:56.333 00:05:03.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 00:27:48.267 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36946 10 6452 1 2025-11-13 00:23:56.330 00:05:03.990 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 00:28:36.325 00:00:10.364 TCP 23.104.0.1:35812 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:28:48.475 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35726 10 6452 1 2025-11-13 00:29:36.726 00:00:10.369 TCP 23.104.0.1:39468 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:29:48.652 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40330 10 6452 1 2025-11-13 00:30:37.134 00:00:10.366 TCP 23.104.0.1:48232 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:30:48.823 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51048 10 6452 1 2025-11-13 00:31:40.206 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:31:40.411 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 00:31:37.542 00:00:10.347 TCP 23.104.0.1:37394 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:31:49.050 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59056 10 6452 1 2025-11-13 00:32:37.926 00:00:10.353 TCP 23.104.0.1:41354 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:32:49.262 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51956 10 6452 1 2025-11-13 00:33:38.326 00:00:10.364 TCP 23.104.0.1:33868 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:33:49.467 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46612 10 6452 1 2025-11-13 00:29:56.332 00:05:03.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 00:29:56.333 00:05:03.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 00:34:38.733 00:00:10.366 TCP 23.104.0.1:40958 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:34:49.676 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:32930 10 6452 1 2025-11-13 00:35:39.141 00:00:10.366 TCP 23.104.0.1:33752 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:35:49.847 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52896 10 6452 1 2025-11-13 00:36:40.744 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 00:36:40.440 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:36:39.545 00:00:10.335 TCP 23.104.0.1:53190 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:36:50.082 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33138 10 6452 1 2025-11-13 00:37:39.921 00:00:10.387 TCP 23.104.0.1:60558 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:37:50.307 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59282 10 6452 1 2025-11-13 00:38:40.350 00:00:10.365 TCP 23.104.0.1:52130 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:38:50.479 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36548 10 6452 1 2025-11-13 00:39:40.749 00:00:10.394 TCP 23.104.0.1:41340 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:39:50.694 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50606 10 6452 1 2025-11-13 00:35:56.335 00:05:03.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 00:35:56.338 00:05:03.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 00:40:41.185 00:00:10.324 TCP 23.104.0.1:58314 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:40:50.913 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:55188 10 6452 1 2025-11-13 00:41:40.606 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:41:40.545 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 00:41:41.547 00:00:10.363 TCP 23.104.0.1:33050 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:41:51.100 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50132 10 6452 1 2025-11-13 00:42:41.949 00:00:10.370 TCP 23.104.0.1:53100 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:42:51.342 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35544 10 6452 1 2025-11-13 00:43:42.359 00:00:10.367 TCP 23.104.0.1:58690 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:43:51.566 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37596 10 6452 1 2025-11-13 00:44:42.767 00:00:10.329 TCP 23.104.0.1:54050 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:44:51.792 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:33396 10 6452 1 2025-11-13 00:45:43.132 00:00:10.368 TCP 23.104.0.1:59812 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:41:56.343 00:05:03.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 00:41:56.345 00:05:03.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 00:45:51.994 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41170 10 6452 1 2025-11-13 00:46:40.826 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:46:40.807 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 00:46:43.540 00:00:10.365 TCP 23.104.0.1:58866 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:46:52.175 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58604 10 6452 1 2025-11-13 00:47:43.944 00:00:10.374 TCP 23.104.0.1:53716 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:47:52.389 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45568 10 6452 1 2025-11-13 00:48:44.354 00:00:10.328 TCP 23.104.0.1:56650 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:48:52.596 00:00:19.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38292 10 6452 1 2025-11-13 00:49:44.718 00:00:10.333 TCP 23.104.0.1:58890 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:50:01.855 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52150 10 6452 1 2025-11-13 00:50:45.107 00:00:10.334 TCP 23.104.0.1:35530 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:51:02.044 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37616 10 6452 1 2025-11-13 00:51:40.957 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 00:51:40.975 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:47:56.349 00:05:03.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 00:51:45.482 00:00:10.365 TCP 23.104.0.1:35186 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:47:56.352 00:05:03.980 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 00:52:02.262 00:00:10.651 TCP 1.101.0.1:3000 -> 22.102.0.1:45592 10 6452 1 2025-11-13 00:52:45.884 00:00:10.391 TCP 23.104.0.1:33374 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:53:02.956 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:60074 10 6452 1 2025-11-13 00:53:46.313 00:00:10.327 TCP 23.104.0.1:45096 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:54:03.195 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36070 10 6452 1 2025-11-13 00:54:46.674 00:00:10.383 TCP 23.104.0.1:58964 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:55:03.407 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54074 10 6452 1 2025-11-13 00:55:47.103 00:00:10.330 TCP 23.104.0.1:42142 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:56:03.628 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39316 10 6452 1 2025-11-13 00:56:40.763 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 00:56:40.882 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 00:56:47.467 00:00:10.362 TCP 23.104.0.1:42662 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:57:03.839 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46764 10 6452 1 2025-11-13 00:53:56.349 00:05:03.986 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 00:57:47.878 00:00:10.403 TCP 23.104.0.1:51870 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:53:56.352 00:05:03.981 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 00:58:04.080 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55788 10 6452 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1098, avg pps: 0, avg bpp: 317 Time window: 2025-11-12 23:58:41 - 2025-11-13 00:59:00 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0010s Wall: 0.0015s flows/second: 107091.4 Runtime: 0.0015s