Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 18:58:53.501 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35378 10 6452 1 2025-11-23 18:59:20.931 00:00:10.380 TCP 23.104.0.1:46564 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:59:53.713 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40950 10 6452 1 2025-11-23 19:00:21.354 00:00:10.366 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:00:53.891 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52150 10 6452 1 2025-11-23 19:01:21.756 00:00:10.392 TCP 23.104.0.1:46948 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:01:53.251 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 19:01:52.905 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 19:01:54.109 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41934 10 6452 1 2025-11-23 18:58:02.757 00:05:04.243 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 18:58:02.761 00:05:04.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 19:02:22.183 00:00:11.621 TCP 23.104.0.1:50898 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:02:54.318 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39184 10 6452 1 2025-11-23 19:03:23.847 00:00:10.380 TCP 23.104.0.1:58014 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:03:54.528 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56508 10 6452 1 2025-11-23 19:04:24.265 00:00:10.361 TCP 23.104.0.1:60326 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:04:54.701 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48808 10 6452 1 2025-11-23 19:05:24.667 00:00:10.367 TCP 23.104.0.1:35870 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:05:54.915 00:00:10.861 TCP 1.101.0.1:3000 -> 22.102.0.1:35410 10 6452 1 2025-11-23 19:06:25.096 00:00:10.360 TCP 23.104.0.1:35664 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:06:53.134 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 19:06:53.161 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 19:06:55.824 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45248 10 6452 1 2025-11-23 19:07:25.498 00:00:10.365 TCP 23.104.0.1:52448 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:07:56.059 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:46180 10 6452 1 2025-11-23 19:04:02.763 00:05:04.240 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 19:04:02.766 00:05:04.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 19:08:25.903 00:00:10.372 TCP 23.104.0.1:37162 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:08:56.248 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40922 10 6452 1 2025-11-23 19:09:26.330 00:00:10.362 TCP 23.104.0.1:55626 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:09:56.458 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36216 10 6452 1 2025-11-23 19:10:26.738 00:00:10.329 TCP 23.104.0.1:58322 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:10:56.671 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35782 10 6452 1 2025-11-23 19:11:27.113 00:00:10.360 TCP 23.104.0.1:51788 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:11:53.402 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 19:11:53.251 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 19:11:56.880 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:45060 11 6504 1 2025-11-23 19:12:27.517 00:00:10.362 TCP 23.104.0.1:43878 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:12:57.157 00:00:14.025 TCP 1.101.0.1:3000 -> 22.102.0.1:55560 10 6452 1 2025-11-23 19:13:27.922 00:00:10.395 TCP 23.104.0.1:33962 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:10:02.766 00:05:04.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 19:14:01.225 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36726 10 6452 1 2025-11-23 19:10:02.766 00:05:04.240 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 19:14:28.355 00:00:10.369 TCP 23.104.0.1:36838 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:15:01.434 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43794 10 6452 1 2025-11-23 19:15:28.759 00:00:10.377 TCP 23.104.0.1:59342 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:16:01.658 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37658 10 6452 1 2025-11-23 19:16:29.178 00:00:14.272 TCP 23.104.0.1:53712 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:16:53.894 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 19:16:53.727 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 19:17:01.873 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46426 10 6452 1 2025-11-23 19:17:33.515 00:00:10.326 TCP 23.104.0.1:55784 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:18:02.096 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52712 10 6452 1 2025-11-23 19:18:33.884 00:00:10.743 TCP 23.104.0.1:54000 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:19:02.310 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48830 10 6452 1 2025-11-23 19:19:34.668 00:00:10.423 TCP 23.104.0.1:49574 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:16:02.768 00:05:04.261 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 19:16:02.765 00:05:04.266 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 19:20:02.523 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49104 10 6452 1 2025-11-23 19:20:35.132 00:00:10.363 TCP 23.104.0.1:44172 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:21:02.733 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44248 10 6452 1 2025-11-23 19:21:35.536 00:00:10.362 TCP 23.104.0.1:44908 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:21:53.445 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 19:21:53.606 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 19:22:02.951 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37854 10 6452 1 2025-11-23 19:22:35.940 00:00:10.334 TCP 23.104.0.1:49284 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:23:03.186 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36586 10 6452 1 2025-11-23 19:23:36.334 00:00:10.372 TCP 23.104.0.1:54284 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:24:03.414 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55770 10 6452 1 2025-11-23 19:24:36.747 00:00:10.376 TCP 23.104.0.1:45884 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:25:03.622 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44464 10 6452 1 2025-11-23 19:25:37.164 00:00:10.364 TCP 23.104.0.1:49426 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:22:02.768 00:05:04.265 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 19:22:02.767 00:05:04.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 19:26:03.845 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58728 10 6452 1 2025-11-23 19:26:37.568 00:00:10.367 TCP 23.104.0.1:33916 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:26:53.622 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 19:26:53.572 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 19:27:04.082 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34302 10 6452 1 2025-11-23 19:27:37.976 00:00:10.377 TCP 23.104.0.1:35386 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:28:04.294 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38336 10 6452 1 2025-11-23 19:28:38.392 00:00:10.322 TCP 23.104.0.1:44710 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:29:04.505 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33302 10 6452 1 2025-11-23 19:29:38.752 00:00:10.358 TCP 23.104.0.1:42288 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:30:04.710 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60630 10 6452 1 2025-11-23 19:30:39.150 00:00:10.362 TCP 23.104.0.1:48818 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:31:04.887 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37600 10 6452 1 2025-11-23 19:31:39.555 00:00:10.369 TCP 23.104.0.1:40390 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:31:53.743 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 19:31:53.749 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 19:28:02.770 00:05:04.265 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 19:28:02.767 00:05:04.271 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 19:32:05.104 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48986 10 6452 1 2025-11-23 19:32:39.961 00:00:10.366 TCP 23.104.0.1:54970 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:33:05.315 00:00:10.514 TCP 1.101.0.1:3000 -> 22.102.0.1:41858 10 6452 1 2025-11-23 19:33:40.368 00:00:10.366 TCP 23.104.0.1:36200 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:34:05.862 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49180 10 6452 1 2025-11-23 19:34:40.770 00:00:10.365 TCP 23.104.0.1:46152 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:35:06.056 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47376 10 6452 1 2025-11-23 19:35:41.175 00:00:10.362 TCP 23.104.0.1:49720 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:36:06.278 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57156 10 6452 1 2025-11-23 19:36:41.573 00:00:10.367 TCP 23.104.0.1:49116 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:36:53.753 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 19:36:53.690 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 19:37:06.499 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52358 10 6452 1 2025-11-23 19:37:41.977 00:00:10.376 TCP 23.104.0.1:57410 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:34:02.771 00:05:04.268 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 19:34:02.769 00:05:04.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 19:38:06.713 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37808 10 6452 1 2025-11-23 19:38:42.386 00:00:10.368 TCP 23.104.0.1:55170 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:39:06.933 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55126 10 6452 1 2025-11-23 19:39:42.794 00:00:10.373 TCP 23.104.0.1:33684 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:40:07.169 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54716 10 6452 1 2025-11-23 19:40:43.205 00:00:10.363 TCP 23.104.0.1:58020 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:41:07.389 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41758 10 6452 1 2025-11-23 19:41:53.892 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 19:41:53.741 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 19:41:43.609 00:00:10.364 TCP 23.104.0.1:33692 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:42:07.604 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-11-23 19:42:44.014 00:00:10.324 TCP 23.104.0.1:47828 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:43:07.781 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50134 10 6452 1 2025-11-23 19:43:44.383 00:00:10.333 TCP 23.104.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:40:02.773 00:05:04.269 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 19:40:02.769 00:05:04.275 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 19:44:07.950 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:32830 10 6452 1 2025-11-23 19:44:44.752 00:00:10.391 TCP 23.104.0.1:60924 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:45:08.187 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41512 10 6452 1 2025-11-23 19:45:45.181 00:00:10.370 TCP 23.104.0.1:40048 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:46:08.409 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58820 10 6452 1 2025-11-23 19:46:54.095 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 19:46:53.899 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 19:46:45.587 00:00:10.365 TCP 23.104.0.1:47280 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:47:08.635 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51570 10 6452 1 2025-11-23 19:47:45.993 00:00:15.097 TCP 23.104.0.1:59482 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:48:08.856 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:57938 10 6452 1 2025-11-23 19:48:51.155 00:00:10.361 TCP 23.104.0.1:58898 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:49:09.067 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37088 10 6452 1 2025-11-23 19:49:51.552 00:00:10.322 TCP 23.104.0.1:54324 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:46:02.774 00:05:04.268 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 19:46:02.772 00:05:04.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 19:50:09.285 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54764 10 6452 1 2025-11-23 19:50:51.917 00:00:10.370 TCP 23.104.0.1:40824 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:51:09.499 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54768 10 6452 1 2025-11-23 19:51:54.027 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 19:51:54.144 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 19:51:52.328 00:00:10.365 TCP 23.104.0.1:32812 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:52:09.715 00:00:17.261 TCP 1.101.0.1:3000 -> 22.102.0.1:40374 10 6452 1 2025-11-23 19:52:52.731 00:00:10.332 TCP 23.104.0.1:46356 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:53:17.041 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60442 10 6452 1 2025-11-23 19:53:53.104 00:00:10.365 TCP 23.104.0.1:57320 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:54:17.267 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49404 10 6452 1 2025-11-23 19:54:53.510 00:00:10.367 TCP 23.104.0.1:49938 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:55:17.480 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33130 12 6556 1 2025-11-23 19:55:53.919 00:00:10.438 TCP 23.104.0.1:53170 -> 1.101.0.1:3000 15 1926 1 2025-11-23 19:52:02.776 00:05:04.267 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 19:52:02.773 00:05:04.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 19:56:17.700 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:40544 12 10375 1 2025-11-23 19:56:54.057 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 19:56:54.026 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 19:56:54.428 00:00:10.714 TCP 23.104.0.1:46808 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:57:17.945 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40454 10 6452 1 2025-11-23 19:57:55.182 00:00:10.372 TCP 23.104.0.1:35322 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:58:18.181 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42640 10 6452 1 Summary: total flows: 163, total bytes: 501339, total packets: 1570, avg bps: 1106, avg pps: 0, avg bpp: 319 Time window: 2025-11-23 18:58:02 - 2025-11-23 19:58:28 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0049s User: 0.0010s Wall: 0.0016s flows/second: 99443.1 Runtime: 0.0017s