Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 16:59:13.450 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51882 10 6452 1 2025-11-23 16:59:14.266 00:00:10.366 TCP 23.104.0.1:47782 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:00:13.670 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33560 10 6452 1 2025-11-23 17:00:14.675 00:00:10.481 TCP 23.104.0.1:38600 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:01:15.198 00:00:10.403 TCP 23.104.0.1:39432 -> 1.101.0.1:3000 15 1926 1 2025-11-23 17:01:13.890 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:48686 12 10375 1 2025-11-23 17:01:50.625 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 17:01:50.689 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 16:58:02.733 00:05:04.226 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 16:58:02.731 00:05:04.231 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 17:02:14.137 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49118 10 6452 1 2025-11-23 17:02:15.640 00:00:10.370 TCP 23.104.0.1:44280 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:03:16.051 00:00:10.364 TCP 23.104.0.1:55876 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:03:14.361 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40470 10 6452 1 2025-11-23 17:04:14.582 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52568 10 6452 1 2025-11-23 17:04:16.456 00:00:10.364 TCP 23.104.0.1:42162 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:05:14.808 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49076 10 6452 1 2025-11-23 17:05:16.858 00:00:10.374 TCP 23.104.0.1:46926 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:06:15.035 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59468 10 6452 1 2025-11-23 17:06:17.272 00:00:10.326 TCP 23.104.0.1:35448 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:06:50.759 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 17:06:50.714 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 17:07:15.260 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55630 10 6452 1 2025-11-23 17:07:17.637 00:00:10.361 TCP 23.104.0.1:45208 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:04:02.732 00:05:04.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 17:04:02.734 00:05:04.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 17:08:15.478 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33520 10 6452 1 2025-11-23 17:08:18.044 00:00:10.376 TCP 23.104.0.1:44752 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:09:15.697 00:00:10.411 TCP 1.101.0.1:3000 -> 22.102.0.1:51514 10 6452 1 2025-11-23 17:09:18.452 00:00:11.316 TCP 23.104.0.1:49784 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:10:16.151 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37146 10 6452 1 2025-11-23 17:10:19.810 00:00:10.363 TCP 23.104.0.1:47628 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:11:16.375 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56338 10 6452 1 2025-11-23 17:11:20.212 00:00:10.366 TCP 23.104.0.1:57612 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:11:51.031 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 17:11:50.960 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 17:12:16.589 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 10 6452 1 2025-11-23 17:12:20.616 00:00:10.361 TCP 23.104.0.1:58648 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:13:16.804 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:59124 10 6452 1 2025-11-23 17:13:21.018 00:00:10.383 TCP 23.104.0.1:52976 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:10:02.735 00:05:04.232 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 17:10:02.732 00:05:04.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 17:14:21.440 00:00:10.374 TCP 23.104.0.1:41296 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:14:16.988 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53892 10 6452 1 2025-11-23 17:15:17.209 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59490 10 6452 1 2025-11-23 17:15:21.851 00:00:10.378 TCP 23.104.0.1:33640 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:16:17.422 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57688 10 6452 1 2025-11-23 17:16:22.273 00:00:10.381 TCP 23.104.0.1:39672 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:16:50.948 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 17:16:50.817 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 17:17:17.601 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:46658 10 6452 1 2025-11-23 17:17:22.691 00:00:10.368 TCP 23.104.0.1:57890 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:18:17.779 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52962 10 6452 1 2025-11-23 17:18:23.107 00:00:10.361 TCP 23.104.0.1:35040 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:19:18.002 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52326 10 6452 1 2025-11-23 17:19:23.504 00:00:10.365 TCP 23.104.0.1:47434 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:16:02.732 00:05:04.238 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 17:16:02.735 00:05:04.232 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 17:20:18.210 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52238 10 6452 1 2025-11-23 17:20:23.910 00:00:10.365 TCP 23.104.0.1:39316 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:21:18.423 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39732 10 6452 1 2025-11-23 17:21:24.319 00:00:10.369 TCP 23.104.0.1:33204 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:21:51.110 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 17:21:50.935 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 17:22:18.634 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35924 10 6452 1 2025-11-23 17:22:24.723 00:00:10.330 TCP 23.104.0.1:47370 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:23:18.849 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53446 10 6452 1 2025-11-23 17:23:25.106 00:00:10.367 TCP 23.104.0.1:53246 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:24:19.085 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38342 10 6452 1 2025-11-23 17:24:25.510 00:00:10.326 TCP 23.104.0.1:36246 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:25:19.297 00:00:10.503 TCP 1.101.0.1:3000 -> 22.102.0.1:33012 10 6452 1 2025-11-23 17:25:25.878 00:00:10.362 TCP 23.104.0.1:39556 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:22:02.735 00:05:04.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 17:22:02.737 00:05:04.233 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 17:26:19.835 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40782 10 6452 1 2025-11-23 17:26:26.279 00:00:10.365 TCP 23.104.0.1:51474 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:26:51.055 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 17:26:51.161 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 17:27:20.076 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55056 10 6452 1 2025-11-23 17:27:26.684 00:00:10.371 TCP 23.104.0.1:60726 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:28:20.290 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53348 10 6452 1 2025-11-23 17:28:27.104 00:00:10.371 TCP 23.104.0.1:33596 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:29:20.503 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46046 10 6452 1 2025-11-23 17:29:27.512 00:00:10.363 TCP 23.104.0.1:37268 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:30:20.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53160 10 6452 1 2025-11-23 17:30:27.915 00:00:10.364 TCP 23.104.0.1:43840 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:31:20.890 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53722 10 6452 1 2025-11-23 17:31:28.317 00:00:10.359 TCP 23.104.0.1:46926 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:31:51.411 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 17:31:51.438 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 17:28:02.737 00:05:04.238 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 17:28:02.740 00:05:04.232 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 17:32:21.113 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45714 10 6452 1 2025-11-23 17:32:28.714 00:00:10.681 TCP 23.104.0.1:59130 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:33:21.341 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54464 10 6452 1 2025-11-23 17:33:29.439 00:00:10.322 TCP 23.104.0.1:34896 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:34:21.565 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59246 10 6452 1 2025-11-23 17:34:29.799 00:00:10.366 TCP 23.104.0.1:52084 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:35:21.738 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44772 10 6452 1 2025-11-23 17:35:30.206 00:00:10.415 TCP 23.104.0.1:55786 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:36:21.957 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50352 10 6452 1 2025-11-23 17:36:30.667 00:00:10.372 TCP 23.104.0.1:60636 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:36:51.447 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 17:36:51.405 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 17:37:22.173 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50644 10 6452 1 2025-11-23 17:37:31.098 00:00:10.366 TCP 23.104.0.1:54880 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:34:02.738 00:05:04.238 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 17:34:02.740 00:05:04.234 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 17:38:22.382 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50028 10 6452 1 2025-11-23 17:38:31.504 00:00:10.369 TCP 23.104.0.1:50418 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:39:22.594 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42892 10 6452 1 2025-11-23 17:39:31.910 00:00:10.373 TCP 23.104.0.1:48866 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:40:22.772 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37828 10 6452 1 2025-11-23 17:40:32.311 00:00:10.364 TCP 23.104.0.1:37916 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:41:22.987 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52956 10 6452 1 2025-11-23 17:41:32.714 00:00:10.383 TCP 23.104.0.1:55188 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:41:51.461 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 17:41:51.483 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 17:42:23.212 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47252 10 6452 1 2025-11-23 17:42:33.144 00:00:10.362 TCP 23.104.0.1:57626 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:43:23.385 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58200 10 6452 1 2025-11-23 17:43:33.543 00:00:10.333 TCP 23.104.0.1:33748 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:40:02.738 00:05:04.240 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 17:40:02.743 00:05:04.234 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 17:44:23.555 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53826 10 6452 1 2025-11-23 17:44:33.936 00:00:10.383 TCP 23.104.0.1:49826 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:45:23.768 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51044 10 6452 1 2025-11-23 17:45:34.356 00:00:10.363 TCP 23.104.0.1:35904 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:46:23.982 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:58396 10 6452 1 2025-11-23 17:46:51.527 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 17:46:51.688 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 17:46:34.760 00:00:20.819 TCP 23.104.0.1:43200 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:47:24.213 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51502 10 6452 1 2025-11-23 17:47:45.641 00:00:10.361 TCP 23.104.0.1:43676 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:48:24.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34652 10 6452 1 2025-11-23 17:48:46.052 00:00:10.364 TCP 23.104.0.1:59276 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:49:24.639 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48404 10 6452 1 2025-11-23 17:49:46.454 00:00:10.362 TCP 23.104.0.1:53038 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:46:02.739 00:05:04.241 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 17:46:02.742 00:05:04.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 17:50:24.815 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58294 10 6452 1 2025-11-23 17:50:46.852 00:00:10.376 TCP 23.104.0.1:57622 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:51:25.037 00:00:10.295 TCP 1.101.0.1:3000 -> 22.102.0.1:56844 10 6452 1 2025-11-23 17:51:51.717 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 17:51:51.704 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 17:51:47.282 00:00:10.364 TCP 23.104.0.1:35768 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:52:25.386 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44190 10 6452 1 2025-11-23 17:52:47.682 00:00:10.325 TCP 23.104.0.1:41632 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:53:25.593 00:00:10.612 TCP 1.101.0.1:3000 -> 22.102.0.1:53610 10 6452 1 2025-11-23 17:53:48.058 00:00:10.367 TCP 23.104.0.1:57968 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:54:26.247 00:00:10.453 TCP 1.101.0.1:3000 -> 22.102.0.1:42078 10 6452 1 2025-11-23 17:54:48.464 00:00:16.317 TCP 23.104.0.1:56488 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:55:26.750 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33116 10 6452 1 2025-11-23 17:55:54.821 00:00:10.404 TCP 23.104.0.1:42154 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:52:02.740 00:05:04.241 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 17:52:02.744 00:05:04.236 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 17:56:26.961 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55038 12 6556 1 2025-11-23 17:56:51.703 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 17:56:51.680 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 17:56:55.262 00:00:10.367 TCP 23.104.0.1:34352 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:57:27.188 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57156 10 6452 1 2025-11-23 17:57:55.672 00:00:10.380 TCP 23.104.0.1:57162 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:58:27.403 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36044 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1103, avg pps: 0, avg bpp: 319 Time window: 2025-11-23 16:58:02 - 2025-11-23 17:58:37 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0040s User: 0.0010s Wall: 0.0022s flows/second: 75112.2 Runtime: 0.0022s