Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-19 23:58:49.085 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56000 10 6452 1 2025-11-19 23:58:53.179 00:00:10.324 TCP 23.104.0.1:36510 -> 1.101.0.1:3000 11 1507 1 2025-11-19 23:59:49.261 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40018 10 6452 1 2025-11-20 00:00:01.863 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 00:00:01.860 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 23:59:53.541 00:00:10.370 TCP 23.104.0.1:43436 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:00:49.476 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45992 10 6452 1 2025-11-20 00:00:53.951 00:00:10.367 TCP 23.104.0.1:32772 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:01:49.690 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57328 10 6452 1 2025-11-19 23:57:04.956 00:05:55.497 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 00:01:54.353 00:00:10.380 TCP 23.104.0.1:50318 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:02:49.899 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47288 10 6452 1 2025-11-19 23:58:04.953 00:05:55.502 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 00:02:54.768 00:00:10.370 TCP 23.104.0.1:44844 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:03:50.116 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34162 10 6452 1 2025-11-20 00:03:55.180 00:00:10.370 TCP 23.104.0.1:59672 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:04:50.326 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40374 10 6452 1 2025-11-20 00:05:01.891 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 00:05:01.997 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 00:04:55.595 00:00:10.371 TCP 23.104.0.1:60258 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:05:50.542 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42860 10 6452 1 2025-11-20 00:05:56.010 00:00:10.358 TCP 23.104.0.1:59588 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:06:50.712 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42174 10 6452 1 2025-11-20 00:06:56.409 00:00:10.365 TCP 23.104.0.1:45944 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:07:50.922 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49728 10 6452 1 2025-11-20 00:03:04.957 00:05:55.501 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 00:07:56.812 00:00:10.363 TCP 23.104.0.1:59304 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:04:04.956 00:05:55.518 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 00:08:51.130 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33994 10 6452 1 2025-11-20 00:08:57.213 00:00:10.367 TCP 23.104.0.1:50060 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:09:51.342 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41440 10 6452 1 2025-11-20 00:10:02.179 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 00:10:02.014 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 00:09:57.619 00:00:10.364 TCP 23.104.0.1:36096 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:10:51.555 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59534 10 6452 1 2025-11-20 00:10:58.019 00:00:10.362 TCP 23.104.0.1:52056 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:11:51.767 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56338 12 6556 1 2025-11-20 00:11:58.422 00:00:10.360 TCP 23.104.0.1:54116 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:12:51.983 00:00:18.457 TCP 1.101.0.1:3000 -> 22.102.0.1:51774 10 6452 1 2025-11-20 00:12:58.824 00:00:11.667 TCP 23.104.0.1:47020 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:09:04.958 00:05:55.500 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 00:14:00.536 00:00:10.363 TCP 23.104.0.1:51126 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:14:00.481 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33162 10 6452 1 2025-11-20 00:10:04.956 00:05:55.504 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 00:15:02.285 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 00:15:00.943 00:00:10.371 TCP 23.104.0.1:40614 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:15:02.231 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 00:15:00.702 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36192 10 6452 1 2025-11-20 00:16:00.921 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:35992 10 6452 1 2025-11-20 00:16:01.354 00:00:10.362 TCP 23.104.0.1:41734 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:17:01.170 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34558 10 6452 1 2025-11-20 00:17:01.757 00:00:10.373 TCP 23.104.0.1:56870 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:18:01.384 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47756 10 6452 1 2025-11-20 00:18:02.166 00:00:10.323 TCP 23.104.0.1:53440 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:19:01.599 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51820 10 6452 1 2025-11-20 00:19:02.525 00:00:10.365 TCP 23.104.0.1:54700 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:15:04.959 00:05:55.500 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 00:20:02.211 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 00:20:02.290 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 00:20:01.821 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:36562 10 6452 1 2025-11-20 00:20:02.929 00:00:10.382 TCP 23.104.0.1:34534 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:16:04.958 00:05:55.505 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 00:21:03.349 00:00:10.357 TCP 23.104.0.1:42196 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:21:02.033 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57096 10 6452 1 2025-11-20 00:22:03.746 00:00:10.901 TCP 23.104.0.1:57442 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:22:02.245 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43396 10 6452 1 2025-11-20 00:23:04.686 00:00:10.445 TCP 23.104.0.1:57954 -> 1.101.0.1:3000 15 1926 1 2025-11-20 00:23:02.454 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:51510 12 10369 1 2025-11-20 00:24:05.171 00:00:10.360 TCP 23.104.0.1:55660 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:24:02.692 00:00:10.445 TCP 1.101.0.1:3000 -> 22.102.0.1:38170 10 6452 1 2025-11-20 00:25:02.201 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 00:25:02.554 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 00:25:05.570 00:00:10.321 TCP 23.104.0.1:37564 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:25:03.184 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54046 10 6452 1 2025-11-20 00:21:04.960 00:05:55.499 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 00:26:05.928 00:00:10.357 TCP 23.104.0.1:59538 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:26:03.387 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55152 10 6452 1 2025-11-20 00:22:04.958 00:05:55.505 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 00:27:06.325 00:00:10.363 TCP 23.104.0.1:57106 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:27:03.591 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:37634 10 6452 1 2025-11-20 00:28:03.772 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47738 10 6452 1 2025-11-20 00:28:06.733 00:00:10.324 TCP 23.104.0.1:52062 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:29:03.998 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54246 10 6452 1 2025-11-20 00:29:07.109 00:00:10.370 TCP 23.104.0.1:40972 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:30:02.654 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 00:30:02.809 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 00:30:04.208 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58066 10 6452 1 2025-11-20 00:30:07.515 00:00:10.366 TCP 23.104.0.1:53360 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:31:04.430 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56850 12 6556 1 2025-11-20 00:31:07.917 00:00:10.378 TCP 23.104.0.1:34746 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:27:04.962 00:05:55.501 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 00:32:04.648 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55352 10 6452 1 2025-11-20 00:32:08.335 00:00:10.325 TCP 23.104.0.1:39292 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:28:04.960 00:05:55.506 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 00:33:04.871 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52650 10 6452 1 2025-11-20 00:33:08.701 00:00:10.363 TCP 23.104.0.1:58456 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:34:05.074 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54056 10 6452 1 2025-11-20 00:34:09.108 00:00:10.362 TCP 23.104.0.1:49988 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:35:02.633 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 00:35:02.734 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 00:35:05.281 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45844 10 6452 1 2025-11-20 00:35:09.508 00:00:10.317 TCP 23.104.0.1:37196 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:36:05.500 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34004 10 6452 1 2025-11-20 00:36:09.869 00:00:10.380 TCP 23.104.0.1:41840 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:37:05.737 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47954 10 6452 1 2025-11-20 00:37:10.296 00:00:10.321 TCP 23.104.0.1:53262 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:33:04.963 00:05:55.500 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 00:38:05.966 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37664 10 6452 1 2025-11-20 00:38:10.664 00:00:10.365 TCP 23.104.0.1:37506 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:34:04.962 00:05:55.505 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 00:39:06.149 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40642 10 6452 1 2025-11-20 00:39:11.091 00:00:10.364 TCP 23.104.0.1:43038 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:40:02.499 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 00:40:02.528 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 00:40:06.359 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40482 10 6452 1 2025-11-20 00:40:11.496 00:00:10.362 TCP 23.104.0.1:33148 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:41:06.579 00:00:11.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33092 10 6452 1 2025-11-20 00:41:11.897 00:00:10.370 TCP 23.104.0.1:60022 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:42:07.812 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45950 10 6452 1 2025-11-20 00:42:12.304 00:00:10.365 TCP 23.104.0.1:42358 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:43:08.056 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52938 10 6452 1 2025-11-20 00:43:12.715 00:00:10.362 TCP 23.104.0.1:46760 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:39:04.966 00:05:55.500 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 00:44:08.267 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46838 10 6452 1 2025-11-20 00:44:13.123 00:00:10.364 TCP 23.104.0.1:44644 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:40:04.963 00:05:55.506 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 00:45:02.806 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 00:45:02.812 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 00:45:08.497 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58132 10 6452 1 2025-11-20 00:45:13.530 00:00:10.365 TCP 23.104.0.1:54726 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:46:08.715 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:50954 10 6452 1 2025-11-20 00:46:13.933 00:00:10.336 TCP 23.104.0.1:35154 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:47:08.951 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45572 10 6452 1 2025-11-20 00:47:14.311 00:00:10.371 TCP 23.104.0.1:39470 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:48:09.180 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57134 10 6452 1 2025-11-20 00:48:14.721 00:00:10.368 TCP 23.104.0.1:49470 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:49:09.405 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50394 10 6452 1 2025-11-20 00:49:15.127 00:00:10.324 TCP 23.104.0.1:36552 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:45:04.966 00:05:55.508 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 00:50:02.923 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 00:50:02.960 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 00:50:09.631 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60184 10 6452 1 2025-11-20 00:50:15.489 00:00:10.332 TCP 23.104.0.1:48816 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:46:04.964 00:05:55.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 00:51:09.853 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59386 10 6452 1 2025-11-20 00:51:15.859 00:00:10.373 TCP 23.104.0.1:35702 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:52:10.081 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49430 10 6452 1 2025-11-20 00:52:16.272 00:00:10.363 TCP 23.104.0.1:49320 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:53:10.252 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44246 10 6452 1 2025-11-20 00:53:16.673 00:00:10.363 TCP 23.104.0.1:60732 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:54:10.430 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54966 10 6452 1 2025-11-20 00:54:17.102 00:00:10.368 TCP 23.104.0.1:35216 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:55:03.028 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 00:55:02.898 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 00:55:10.653 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44056 10 6452 1 2025-11-20 00:55:17.507 00:00:10.371 TCP 23.104.0.1:60088 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:51:04.967 00:05:55.508 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 00:56:10.875 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:53216 10 6452 1 2025-11-20 00:56:17.918 00:00:10.366 TCP 23.104.0.1:57406 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:52:04.964 00:05:55.516 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 00:57:11.109 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37356 10 6452 1 2025-11-20 00:57:18.321 00:00:10.366 TCP 23.104.0.1:37060 -> 1.101.0.1:3000 11 1507 1 2025-11-20 00:58:11.328 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59098 10 6452 1 2025-11-20 00:58:18.728 00:00:10.331 TCP 23.104.0.1:58172 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502892, total packets: 1582, avg bps: 1092, avg pps: 0, avg bpp: 317 Time window: 2025-11-19 23:57:04 - 2025-11-20 00:58:29 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0024s Wall: 0.0025s flows/second: 66102.8 Runtime: 0.0025s