Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 01:59:06.165 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38322 10 6452 1 2025-11-23 01:59:10.065 00:00:10.368 TCP 23.104.0.1:37544 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:00:06.387 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60386 10 6452 1 2025-11-23 02:00:10.473 00:00:10.367 TCP 23.104.0.1:41554 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:01:06.598 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49996 10 6452 1 2025-11-23 02:01:10.877 00:00:10.367 TCP 23.104.0.1:34442 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:01:32.579 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 02:01:32.729 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 01:58:02.465 00:05:04.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 01:58:02.463 00:05:04.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 02:02:06.820 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49820 10 6452 1 2025-11-23 02:02:11.284 00:00:10.367 TCP 23.104.0.1:47512 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:03:06.993 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 10 6452 1 2025-11-23 02:03:11.688 00:00:10.340 TCP 23.104.0.1:41478 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:04:07.220 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46414 10 6452 1 2025-11-23 02:04:12.092 00:00:10.364 TCP 23.104.0.1:42048 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:05:07.425 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57090 10 6452 1 2025-11-23 02:05:12.489 00:00:10.369 TCP 23.104.0.1:34054 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:06:07.650 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49820 10 6452 1 2025-11-23 02:06:12.899 00:00:10.365 TCP 23.104.0.1:46698 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:06:32.670 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 02:06:32.704 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 02:07:07.865 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:52382 10 6452 1 2025-11-23 02:07:13.303 00:00:10.366 TCP 23.104.0.1:56092 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:04:02.464 00:05:04.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 02:04:02.468 00:05:04.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 02:08:08.072 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57762 10 6452 1 2025-11-23 02:08:13.708 00:00:10.369 TCP 23.104.0.1:59002 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:09:08.279 00:00:10.242 TCP 1.101.0.1:3000 -> 22.102.0.1:57650 10 6452 1 2025-11-23 02:09:14.115 00:00:10.722 TCP 23.104.0.1:49554 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:10:08.566 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37708 10 6452 1 2025-11-23 02:10:14.879 00:00:10.367 TCP 23.104.0.1:49190 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:11:08.784 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:40158 10 6452 1 2025-11-23 02:11:15.280 00:00:10.365 TCP 23.104.0.1:59432 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:11:32.839 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 02:11:32.774 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 02:12:08.971 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59648 10 6452 1 2025-11-23 02:12:15.682 00:00:10.369 TCP 23.104.0.1:56728 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:13:09.195 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48402 10 6452 1 2025-11-23 02:13:16.104 00:00:10.366 TCP 23.104.0.1:33588 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:10:02.468 00:05:04.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 02:10:02.465 00:05:04.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 02:14:09.430 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55804 10 6452 1 2025-11-23 02:14:16.507 00:00:10.367 TCP 23.104.0.1:49752 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:15:09.644 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56080 10 6452 1 2025-11-23 02:15:16.913 00:00:10.377 TCP 23.104.0.1:41980 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:16:09.875 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:47120 10 6452 1 2025-11-23 02:16:17.331 00:00:10.359 TCP 23.104.0.1:47590 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:16:32.730 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 02:16:32.871 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 02:17:10.079 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46488 10 6452 1 2025-11-23 02:17:17.732 00:00:10.365 TCP 23.104.0.1:45606 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:18:10.302 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55688 10 6452 1 2025-11-23 02:18:18.134 00:00:10.318 TCP 23.104.0.1:51240 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:19:10.517 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37738 10 6452 1 2025-11-23 02:19:18.492 00:00:10.362 TCP 23.104.0.1:48340 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:16:02.469 00:05:04.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 02:16:02.466 00:05:04.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 02:20:10.729 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50594 10 6452 1 2025-11-23 02:20:18.894 00:00:10.373 TCP 23.104.0.1:39030 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:21:10.947 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:41208 10 6452 1 2025-11-23 02:21:19.317 00:00:10.369 TCP 23.104.0.1:39236 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:21:33.027 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 02:21:33.030 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 02:22:11.188 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50948 10 6452 1 2025-11-23 02:22:19.723 00:00:10.375 TCP 23.104.0.1:59562 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:23:11.407 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34696 10 6452 1 2025-11-23 02:23:20.137 00:00:10.861 TCP 23.104.0.1:35840 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:24:11.581 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56688 10 6452 1 2025-11-23 02:24:21.055 00:00:10.369 TCP 23.104.0.1:60146 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:25:11.805 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54012 10 6452 1 2025-11-23 02:25:21.466 00:00:10.365 TCP 23.104.0.1:54326 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:22:02.471 00:05:04.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 02:22:02.469 00:05:04.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 02:26:11.981 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33728 10 6452 1 2025-11-23 02:26:21.865 00:00:10.365 TCP 23.104.0.1:60790 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:26:33.185 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 02:26:33.236 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 02:27:12.198 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48438 10 6452 1 2025-11-23 02:27:22.268 00:00:10.423 TCP 23.104.0.1:50678 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:28:12.425 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59716 10 6452 1 2025-11-23 02:28:22.726 00:00:10.359 TCP 23.104.0.1:55684 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:29:12.633 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50832 10 6452 1 2025-11-23 02:29:23.126 00:00:10.365 TCP 23.104.0.1:45508 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:30:12.807 00:00:10.247 TCP 1.101.0.1:3000 -> 22.102.0.1:45806 10 6452 1 2025-11-23 02:30:23.538 00:00:10.360 TCP 23.104.0.1:49452 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:31:13.092 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57688 10 6452 1 2025-11-23 02:31:33.038 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 02:31:23.936 00:00:10.336 TCP 23.104.0.1:57754 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:31:33.179 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 02:28:02.474 00:05:04.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 02:28:02.471 00:05:04.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 02:32:13.310 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38154 10 6452 1 2025-11-23 02:32:24.314 00:00:10.361 TCP 23.104.0.1:36586 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:33:13.523 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52044 10 6452 1 2025-11-23 02:33:24.714 00:00:10.377 TCP 23.104.0.1:56840 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:34:13.740 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59566 10 6452 1 2025-11-23 02:34:25.126 00:00:10.370 TCP 23.104.0.1:50966 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:35:13.912 00:00:10.827 TCP 1.101.0.1:3000 -> 22.102.0.1:42956 12 10369 1 2025-11-23 02:35:25.533 00:00:10.437 TCP 23.104.0.1:33212 -> 1.101.0.1:3000 15 1926 1 2025-11-23 02:36:14.783 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45176 10 6452 1 2025-11-23 02:36:32.972 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 02:36:33.422 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 02:36:26.014 00:00:10.363 TCP 23.104.0.1:57396 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:37:14.951 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:46290 12 6556 1 2025-11-23 02:37:26.417 00:00:10.364 TCP 23.104.0.1:55248 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:34:02.472 00:05:04.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 02:34:02.474 00:05:04.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 02:38:15.199 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53834 10 6452 1 2025-11-23 02:38:26.823 00:00:10.470 TCP 23.104.0.1:53654 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:39:15.421 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35224 10 6452 1 2025-11-23 02:39:27.329 00:00:10.365 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:40:15.633 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:44504 12 10375 1 2025-11-23 02:40:27.735 00:00:10.439 TCP 23.104.0.1:40002 -> 1.101.0.1:3000 15 1926 1 2025-11-23 02:41:15.873 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41440 10 6452 1 2025-11-23 02:41:33.457 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 02:41:33.310 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 02:41:28.219 00:00:10.368 TCP 23.104.0.1:60114 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:42:16.104 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42084 10 6452 1 2025-11-23 02:42:28.629 00:00:10.363 TCP 23.104.0.1:49278 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:43:16.321 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34398 10 6452 1 2025-11-23 02:43:29.060 00:00:10.332 TCP 23.104.0.1:57604 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:40:02.472 00:05:04.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 02:40:02.474 00:05:04.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 02:44:16.500 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32900 10 6452 1 2025-11-23 02:44:29.429 00:00:10.359 TCP 23.104.0.1:42078 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:45:16.725 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 10 6452 1 2025-11-23 02:45:29.829 00:00:10.380 TCP 23.104.0.1:52376 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:46:16.941 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:44784 10 6452 1 2025-11-23 02:46:33.891 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 02:46:34.045 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 02:46:30.238 00:00:10.362 TCP 23.104.0.1:54088 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:47:17.192 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53464 10 6452 1 2025-11-23 02:47:30.647 00:00:10.363 TCP 23.104.0.1:44850 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:48:17.414 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36504 10 6452 1 2025-11-23 02:48:31.058 00:00:10.366 TCP 23.104.0.1:57986 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:49:17.588 00:00:10.651 TCP 1.101.0.1:3000 -> 22.102.0.1:45610 10 6452 1 2025-11-23 02:49:31.460 00:00:10.329 TCP 23.104.0.1:48228 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:46:02.474 00:05:04.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 02:46:02.475 00:05:04.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 02:50:18.266 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40226 10 6452 1 2025-11-23 02:50:31.834 00:00:10.385 TCP 23.104.0.1:54210 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:51:18.485 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48406 10 6452 1 2025-11-23 02:51:33.651 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 02:51:33.634 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 02:51:32.257 00:00:10.363 TCP 23.104.0.1:35806 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:52:18.700 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60376 10 6452 1 2025-11-23 02:52:32.662 00:00:10.366 TCP 23.104.0.1:45018 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:53:18.906 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40926 10 6452 1 2025-11-23 02:53:33.095 00:00:10.327 TCP 23.104.0.1:42466 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:54:19.119 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52054 10 6452 1 2025-11-23 02:54:33.461 00:00:10.325 TCP 23.104.0.1:51172 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:55:19.329 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45010 10 6452 1 2025-11-23 02:55:33.822 00:00:10.366 TCP 23.104.0.1:46928 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:52:02.476 00:05:04.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 02:52:02.473 00:05:04.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 02:56:19.506 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59042 10 6452 1 2025-11-23 02:56:33.995 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 02:56:33.681 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 02:56:34.222 00:00:10.326 TCP 23.104.0.1:56864 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:57:19.675 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46106 10 6452 1 2025-11-23 02:57:34.590 00:00:10.371 TCP 23.104.0.1:46418 -> 1.101.0.1:3000 11 1507 1 2025-11-23 02:58:19.849 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:54252 10 6452 1 2025-11-23 02:58:34.995 00:00:10.364 TCP 23.104.0.1:43934 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507130, total packets: 1586, avg bps: 1113, avg pps: 0, avg bpp: 319 Time window: 2025-11-23 01:58:02 - 2025-11-23 02:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0051s User: 0.0020s Wall: 0.0026s flows/second: 63614.7 Runtime: 0.0026s