Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 23:59:24.253 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43174 10 6452 1 2025-11-13 23:59:32.129 00:00:10.373 TCP 23.104.0.1:44222 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:00:24.428 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52084 10 6452 1 2025-11-14 00:00:32.540 00:00:10.327 TCP 23.104.0.1:41006 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:01:24.639 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51824 10 6452 1 2025-11-14 00:01:32.905 00:00:10.320 TCP 23.104.0.1:59668 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:02:08.801 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 00:02:08.560 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 00:02:24.859 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51598 10 6452 1 2025-11-14 00:02:33.264 00:00:10.364 TCP 23.104.0.1:45666 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:03:25.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60638 10 6452 1 2025-11-14 00:03:33.663 00:00:10.364 TCP 23.104.0.1:43586 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:59:56.761 00:05:04.330 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 23:59:56.764 00:05:04.324 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 00:04:25.299 00:00:10.315 TCP 1.101.0.1:3000 -> 22.102.0.1:34592 10 6452 1 2025-11-14 00:04:34.086 00:00:10.421 TCP 23.104.0.1:35458 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:05:25.657 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49644 10 6452 1 2025-11-14 00:05:34.547 00:00:10.366 TCP 23.104.0.1:44488 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:06:25.874 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58046 10 6452 1 2025-11-14 00:06:34.951 00:00:10.368 TCP 23.104.0.1:35942 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:07:08.910 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 00:07:08.883 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 00:07:26.107 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39684 10 6452 1 2025-11-14 00:07:35.359 00:00:10.363 TCP 23.104.0.1:54466 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:08:26.324 00:00:10.504 TCP 1.101.0.1:3000 -> 22.102.0.1:37084 10 6452 1 2025-11-14 00:08:35.759 00:00:14.465 TCP 23.104.0.1:51268 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:09:26.869 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39552 10 6452 1 2025-11-14 00:09:40.288 00:00:10.365 TCP 23.104.0.1:40720 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:05:56.765 00:05:04.325 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 00:05:56.762 00:05:04.330 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 00:10:27.102 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60750 10 6452 1 2025-11-14 00:10:40.686 00:00:10.331 TCP 23.104.0.1:47946 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:11:27.333 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55646 10 6452 1 2025-11-14 00:11:41.057 00:00:10.375 TCP 23.104.0.1:52364 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:12:08.788 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 00:12:08.855 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 00:12:27.546 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45472 10 6452 1 2025-11-14 00:12:41.467 00:00:11.946 TCP 23.104.0.1:36118 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:13:27.756 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60922 10 6452 1 2025-11-14 00:13:43.449 00:00:10.363 TCP 23.104.0.1:55612 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:14:27.968 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59384 10 6452 1 2025-11-14 00:14:43.849 00:00:10.378 TCP 23.104.0.1:60120 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:15:28.191 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51442 10 6452 1 2025-11-14 00:15:44.267 00:00:10.366 TCP 23.104.0.1:35108 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:11:56.763 00:05:04.330 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 00:11:56.765 00:05:04.325 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 00:16:28.363 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41902 10 6452 1 2025-11-14 00:16:44.673 00:00:10.372 TCP 23.104.0.1:49262 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:17:08.858 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 00:17:08.837 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 00:17:28.574 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39122 10 6452 1 2025-11-14 00:17:45.110 00:00:10.365 TCP 23.104.0.1:40130 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:18:28.785 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56014 10 6452 1 2025-11-14 00:18:45.516 00:00:10.365 TCP 23.104.0.1:50058 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:19:28.997 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45762 10 6452 1 2025-11-14 00:19:45.922 00:00:10.390 TCP 23.104.0.1:34640 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:20:29.230 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52316 10 6452 1 2025-11-14 00:20:46.351 00:00:10.378 TCP 23.104.0.1:42492 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:21:29.469 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57722 10 6452 1 2025-11-14 00:21:46.767 00:00:10.376 TCP 23.104.0.1:45676 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:17:56.766 00:05:04.327 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 00:17:56.763 00:05:04.332 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 00:22:08.775 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 00:22:08.987 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 00:22:29.685 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42140 10 6452 1 2025-11-14 00:22:47.178 00:00:10.326 TCP 23.104.0.1:42202 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:23:29.905 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56794 10 6452 1 2025-11-14 00:23:47.538 00:00:10.364 TCP 23.104.0.1:52520 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:24:30.144 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38900 10 6452 1 2025-11-14 00:24:47.935 00:00:10.381 TCP 23.104.0.1:47566 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:25:30.364 00:00:10.269 TCP 1.101.0.1:3000 -> 22.102.0.1:38040 10 6452 1 2025-11-14 00:25:48.354 00:00:10.360 TCP 23.104.0.1:60798 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:26:30.674 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58950 10 6452 1 2025-11-14 00:26:48.756 00:00:10.383 TCP 23.104.0.1:41146 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:27:09.315 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 00:27:09.221 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 00:27:30.894 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44788 10 6452 1 2025-11-14 00:27:49.181 00:00:10.324 TCP 23.104.0.1:51772 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:23:56.766 00:05:04.333 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 00:23:56.767 00:05:04.327 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 00:28:31.116 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49894 10 6452 1 2025-11-14 00:28:49.544 00:00:10.362 TCP 23.104.0.1:40200 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:29:31.293 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:53234 11 6504 1 2025-11-14 00:29:49.944 00:00:10.380 TCP 23.104.0.1:40988 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:30:31.572 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36182 10 6452 1 2025-11-14 00:30:50.356 00:00:10.321 TCP 23.104.0.1:49528 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:31:31.792 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37266 10 6452 1 2025-11-14 00:31:50.729 00:00:10.370 TCP 23.104.0.1:56862 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:32:09.184 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 00:32:09.338 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 00:32:31.964 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53094 12 6556 1 2025-11-14 00:32:51.139 00:00:10.366 TCP 23.104.0.1:33800 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:33:32.186 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42826 10 6452 1 2025-11-14 00:29:56.765 00:05:04.333 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 00:29:56.768 00:05:04.328 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 00:33:51.560 00:00:10.323 TCP 23.104.0.1:34068 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:34:32.396 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:56166 10 6452 1 2025-11-14 00:34:51.919 00:00:10.379 TCP 23.104.0.1:34120 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:35:32.585 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37888 10 6452 1 2025-11-14 00:35:52.332 00:00:10.323 TCP 23.104.0.1:36588 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:36:32.798 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46502 10 6452 1 2025-11-14 00:36:52.689 00:00:10.361 TCP 23.104.0.1:43624 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:37:09.250 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 00:37:09.433 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 00:37:33.008 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34358 10 6452 1 2025-11-14 00:37:53.110 00:00:10.321 TCP 23.104.0.1:47528 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:38:33.228 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37912 10 6452 1 2025-11-14 00:38:53.470 00:00:10.386 TCP 23.104.0.1:36550 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:39:33.440 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55428 10 6452 1 2025-11-14 00:35:56.770 00:05:04.327 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 00:35:56.766 00:05:04.333 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 00:39:53.895 00:00:10.377 TCP 23.104.0.1:56008 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:40:33.660 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44248 11 6492 1 2025-11-14 00:40:54.315 00:00:10.369 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:41:33.873 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50204 10 6452 1 2025-11-14 00:41:54.726 00:00:10.323 TCP 23.104.0.1:35176 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:42:09.498 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 00:42:09.448 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 00:42:34.074 00:00:10.817 TCP 1.101.0.1:3000 -> 22.102.0.1:47636 10 6452 1 2025-11-14 00:42:55.106 00:00:10.369 TCP 23.104.0.1:39236 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:43:34.928 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36200 10 6452 1 2025-11-14 00:43:55.510 00:00:10.324 TCP 23.104.0.1:50186 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:44:35.140 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39840 10 6452 1 2025-11-14 00:44:55.874 00:00:10.337 TCP 23.104.0.1:33040 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:45:35.324 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49506 10 6452 1 2025-11-14 00:41:56.767 00:05:04.335 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 00:41:56.770 00:05:04.330 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 00:45:56.249 00:00:10.366 TCP 23.104.0.1:52220 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:46:35.569 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51762 10 6452 1 2025-11-14 00:47:09.840 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 00:47:09.690 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 00:46:56.655 00:00:10.365 TCP 23.104.0.1:52000 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:47:35.749 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:38372 10 6452 1 2025-11-14 00:47:57.082 00:00:10.367 TCP 23.104.0.1:60854 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:48:35.937 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49030 10 6452 1 2025-11-14 00:48:57.488 00:00:10.363 TCP 23.104.0.1:50888 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:49:36.159 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53806 10 6452 1 2025-11-14 00:49:57.891 00:00:10.379 TCP 23.104.0.1:49210 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:50:36.392 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53138 10 6452 1 2025-11-14 00:50:58.308 00:00:10.367 TCP 23.104.0.1:45320 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:51:36.562 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58758 10 6452 1 2025-11-14 00:47:56.772 00:05:04.329 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 00:47:56.771 00:05:04.334 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 00:51:58.710 00:00:10.631 TCP 23.104.0.1:44846 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:52:09.341 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 00:52:09.902 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 00:52:36.776 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50518 10 6452 1 2025-11-14 00:52:59.377 00:00:10.370 TCP 23.104.0.1:42072 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:53:36.987 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55302 10 6452 1 2025-11-14 00:53:59.784 00:00:10.361 TCP 23.104.0.1:46936 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:54:37.207 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44704 10 6452 1 2025-11-14 00:55:00.185 00:00:10.359 TCP 23.104.0.1:35314 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:55:37.420 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56928 10 6452 1 2025-11-14 00:56:00.603 00:00:10.345 TCP 23.104.0.1:54712 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:56:37.636 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60038 10 6452 1 2025-11-14 00:57:09.759 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 00:57:09.823 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 00:57:00.998 00:00:10.371 TCP 23.104.0.1:32818 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:57:37.848 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45174 10 6452 1 2025-11-14 00:53:56.773 00:05:04.328 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 00:53:56.770 00:05:04.334 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 00:58:01.408 00:00:10.377 TCP 23.104.0.1:39742 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:58:38.037 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45286 10 6452 1 Summary: total flows: 163, total bytes: 497037, total packets: 1565, avg bps: 1111, avg pps: 0, avg bpp: 317 Time window: 2025-11-13 23:59:24 - 2025-11-14 00:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0043s User: 0.0000s Wall: 0.0014s flows/second: 119942.4 Runtime: 0.0014s