Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 22:59:04.187 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34430 10 6452 1 2025-11-23 22:59:11.052 00:00:10.366 TCP 23.104.0.1:42856 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:00:04.363 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60298 10 6452 1 2025-11-23 23:00:11.467 00:00:10.363 TCP 23.104.0.1:33456 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:01:04.571 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42764 10 6452 1 2025-11-23 23:01:11.869 00:00:10.368 TCP 23.104.0.1:39696 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:01:57.803 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 23:01:57.909 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 22:58:02.825 00:05:04.292 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 22:58:02.827 00:05:04.287 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 23:02:04.782 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52944 10 6452 1 2025-11-23 23:02:12.273 00:00:10.832 TCP 23.104.0.1:58160 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:03:05.003 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51630 10 6452 1 2025-11-23 23:03:13.155 00:00:10.361 TCP 23.104.0.1:59814 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:04:05.216 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42114 10 6452 1 2025-11-23 23:04:13.558 00:00:10.362 TCP 23.104.0.1:35958 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:05:05.428 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60114 10 6452 1 2025-11-23 23:05:13.956 00:00:10.323 TCP 23.104.0.1:41608 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:06:05.649 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58850 10 6452 1 2025-11-23 23:06:14.318 00:00:20.317 TCP 23.104.0.1:55184 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:06:58.643 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 23:06:58.622 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 23:07:05.863 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35624 10 6452 1 2025-11-23 23:07:24.705 00:00:10.363 TCP 23.104.0.1:56236 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:04:02.830 00:05:04.291 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 23:04:02.831 00:05:04.287 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 23:08:06.066 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44200 10 6452 1 2025-11-23 23:08:25.111 00:00:10.361 TCP 23.104.0.1:33426 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:09:06.242 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39194 10 6452 1 2025-11-23 23:09:25.513 00:00:10.367 TCP 23.104.0.1:33602 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:10:06.477 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45824 10 6452 1 2025-11-23 23:10:25.920 00:00:10.387 TCP 23.104.0.1:39290 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:11:06.692 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36232 10 6452 1 2025-11-23 23:11:26.347 00:00:10.364 TCP 23.104.0.1:45178 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:11:58.017 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 23:11:58.057 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 23:12:06.907 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45658 10 6452 1 2025-11-23 23:12:26.749 00:00:10.320 TCP 23.104.0.1:51718 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:13:07.145 00:00:10.642 TCP 1.101.0.1:3000 -> 22.102.0.1:50656 11 6504 1 2025-11-23 23:13:27.116 00:00:10.361 TCP 23.104.0.1:52076 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:10:02.831 00:05:04.297 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 23:10:02.833 00:05:04.293 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 23:14:07.828 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45046 10 6452 1 2025-11-23 23:14:27.522 00:00:10.365 TCP 23.104.0.1:37922 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:15:08.077 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56580 10 6452 1 2025-11-23 23:15:27.932 00:00:10.373 TCP 23.104.0.1:35446 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:16:08.296 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51652 10 6452 1 2025-11-23 23:16:28.347 00:00:10.364 TCP 23.104.0.1:50778 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:16:58.030 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 23:16:58.267 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 23:17:08.522 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41786 10 6452 1 2025-11-23 23:17:28.761 00:00:10.534 TCP 23.104.0.1:48512 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:18:08.738 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36544 10 6452 1 2025-11-23 23:18:29.359 00:00:10.363 TCP 23.104.0.1:55446 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:19:08.947 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:48524 10 6452 1 2025-11-23 23:19:29.761 00:00:10.368 TCP 23.104.0.1:46048 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:16:02.835 00:05:04.292 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 23:16:02.832 00:05:04.297 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 23:20:09.193 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60104 10 6452 1 2025-11-23 23:20:30.169 00:00:10.362 TCP 23.104.0.1:34700 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:21:09.411 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51474 10 6452 1 2025-11-23 23:21:30.569 00:00:10.361 TCP 23.104.0.1:49750 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:21:58.420 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 23:21:58.103 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 23:22:09.631 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59748 10 6452 1 2025-11-23 23:22:30.972 00:00:10.365 TCP 23.104.0.1:47906 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:23:09.850 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:48916 10 6452 1 2025-11-23 23:23:31.377 00:00:10.362 TCP 23.104.0.1:44928 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:24:10.117 00:00:10.268 TCP 1.101.0.1:3000 -> 22.102.0.1:38546 10 6452 1 2025-11-23 23:24:31.777 00:00:10.364 TCP 23.104.0.1:58540 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:25:10.436 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40350 10 6452 1 2025-11-23 23:25:32.180 00:00:10.322 TCP 23.104.0.1:51018 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:22:02.848 00:05:04.279 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 23:22:02.846 00:05:04.285 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 23:26:10.652 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38984 10 6452 1 2025-11-23 23:26:32.545 00:00:10.367 TCP 23.104.0.1:60732 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:26:58.390 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 23:26:58.466 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 23:27:10.871 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42150 10 6452 1 2025-11-23 23:27:32.952 00:00:10.368 TCP 23.104.0.1:53222 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:28:11.108 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37042 10 6452 1 2025-11-23 23:28:33.354 00:00:10.357 TCP 23.104.0.1:58440 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:29:11.278 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37314 10 6452 1 2025-11-23 23:29:33.750 00:00:10.387 TCP 23.104.0.1:34148 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:30:11.491 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38102 10 6452 1 2025-11-23 23:30:34.175 00:00:10.361 TCP 23.104.0.1:40692 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:31:11.705 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52302 10 6452 1 2025-11-23 23:31:34.572 00:00:10.364 TCP 23.104.0.1:60616 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:31:58.592 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 23:31:58.692 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 23:28:02.849 00:05:04.279 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 23:28:02.847 00:05:04.285 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 23:32:11.919 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41996 10 6452 1 2025-11-23 23:32:34.975 00:00:10.332 TCP 23.104.0.1:54478 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:33:12.133 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42638 10 6452 1 2025-11-23 23:33:35.351 00:00:10.365 TCP 23.104.0.1:52070 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:34:12.349 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55940 10 6452 1 2025-11-23 23:34:35.763 00:00:10.378 TCP 23.104.0.1:41392 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:35:12.571 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38514 10 6452 1 2025-11-23 23:35:36.178 00:00:10.364 TCP 23.104.0.1:57066 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:36:12.788 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52734 10 6452 1 2025-11-23 23:36:36.584 00:00:10.363 TCP 23.104.0.1:60264 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:36:58.651 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 23:36:58.590 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 23:37:13.010 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53970 10 6452 1 2025-11-23 23:37:36.984 00:00:10.369 TCP 23.104.0.1:60422 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:34:02.850 00:05:04.282 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 23:34:02.848 00:05:04.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 23:38:13.182 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:36960 10 6452 1 2025-11-23 23:38:37.391 00:00:10.366 TCP 23.104.0.1:34564 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:39:13.383 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53078 10 6452 1 2025-11-23 23:39:37.799 00:00:10.366 TCP 23.104.0.1:58676 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:40:13.593 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50414 10 6452 1 2025-11-23 23:40:38.200 00:00:10.332 TCP 23.104.0.1:39548 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:41:13.803 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37754 10 6452 1 2025-11-23 23:41:38.579 00:00:10.327 TCP 23.104.0.1:35466 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:41:58.742 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 23:41:58.700 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 23:42:14.011 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43728 10 6452 1 2025-11-23 23:42:38.947 00:00:10.371 TCP 23.104.0.1:33430 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:43:14.221 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36532 10 6452 1 2025-11-23 23:43:39.355 00:00:10.367 TCP 23.104.0.1:55682 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:40:02.852 00:05:04.281 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 23:40:02.850 00:05:04.286 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 23:44:14.430 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53420 10 6452 1 2025-11-23 23:44:39.760 00:00:10.389 TCP 23.104.0.1:55244 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:45:14.649 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40698 10 6452 1 2025-11-23 23:45:40.197 00:00:10.367 TCP 23.104.0.1:45486 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:46:14.877 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48604 10 6452 1 2025-11-23 23:46:40.599 00:00:10.365 TCP 23.104.0.1:44132 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:46:58.768 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 23:46:58.908 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 23:47:15.097 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36188 10 6452 1 2025-11-23 23:47:41.006 00:00:10.320 TCP 23.104.0.1:59290 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:48:15.314 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42210 10 6452 1 2025-11-23 23:48:41.367 00:00:10.367 TCP 23.104.0.1:44922 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:49:15.521 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36326 10 6452 1 2025-11-23 23:49:41.771 00:00:10.331 TCP 23.104.0.1:58756 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:46:02.854 00:05:04.280 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 23:46:02.852 00:05:04.285 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 23:50:15.738 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59054 10 6452 1 2025-11-23 23:50:42.140 00:00:10.363 TCP 23.104.0.1:35732 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:51:15.911 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60430 10 6452 1 2025-11-23 23:51:42.545 00:00:10.364 TCP 23.104.0.1:41188 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:51:58.998 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 23:51:59.007 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 23:52:16.124 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45842 10 6452 1 2025-11-23 23:52:42.948 00:00:10.373 TCP 23.104.0.1:59274 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:53:16.297 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39470 10 6452 1 2025-11-23 23:53:43.357 00:00:10.361 TCP 23.104.0.1:58480 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:54:16.510 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55258 10 6452 1 2025-11-23 23:54:43.759 00:00:10.383 TCP 23.104.0.1:37428 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:55:16.723 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50102 10 6452 1 2025-11-23 23:55:44.185 00:00:10.323 TCP 23.104.0.1:55142 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:52:02.853 00:05:04.286 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 23:52:02.856 00:05:04.281 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 23:56:16.896 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54926 10 6452 1 2025-11-23 23:56:44.547 00:00:10.360 TCP 23.104.0.1:41208 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:56:59.374 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 23:56:59.274 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 23:57:17.115 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44928 10 6452 1 2025-11-23 23:57:44.948 00:00:10.370 TCP 23.104.0.1:36378 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:58:17.324 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35592 10 6452 1 Summary: total flows: 163, total bytes: 496893, total packets: 1562, avg bps: 1096, avg pps: 0, avg bpp: 318 Time window: 2025-11-23 22:58:02 - 2025-11-23 23:58:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0016s Wall: 0.0025s flows/second: 66472.7 Runtime: 0.0025s