Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 03:59:20.719 00:00:10.456 TCP 1.101.0.1:3000 -> 22.102.0.1:53052 10 6452 1 2025-11-24 03:59:27.519 00:00:10.372 TCP 23.104.0.1:35348 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:00:21.214 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56554 10 6452 1 2025-11-24 04:00:27.926 00:00:10.384 TCP 23.104.0.1:55310 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:01:21.426 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55562 10 6452 1 2025-11-24 04:01:28.367 00:00:10.363 TCP 23.104.0.1:47394 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:02:03.790 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 04:02:03.730 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 03:58:02.910 00:05:04.308 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 03:58:02.913 00:05:04.302 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 04:02:21.637 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59726 10 6452 1 2025-11-24 04:02:28.767 00:00:10.422 TCP 23.104.0.1:34442 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:03:21.814 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56662 10 6452 1 2025-11-24 04:03:29.231 00:00:10.325 TCP 23.104.0.1:48208 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:04:22.037 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36028 10 6452 1 2025-11-24 04:04:29.596 00:00:10.365 TCP 23.104.0.1:60004 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:05:22.246 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60576 10 6452 1 2025-11-24 04:05:29.996 00:00:10.366 TCP 23.104.0.1:59722 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:06:22.467 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55028 10 6452 1 2025-11-24 04:06:30.395 00:00:10.365 TCP 23.104.0.1:59922 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:07:03.960 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 04:07:03.909 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 04:07:22.681 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44082 10 6452 1 2025-11-24 04:07:30.801 00:00:10.368 TCP 23.104.0.1:57074 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:04:02.914 00:05:04.303 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 04:04:02.913 00:05:04.308 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 04:08:22.897 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46430 10 6452 1 2025-11-24 04:08:31.210 00:00:10.365 TCP 23.104.0.1:47360 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:09:23.119 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35824 10 6452 1 2025-11-24 04:09:31.614 00:00:10.331 TCP 23.104.0.1:39434 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:10:23.341 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41758 10 6452 1 2025-11-24 04:10:31.982 00:00:10.330 TCP 23.104.0.1:35316 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:11:23.522 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60580 10 6452 1 2025-11-24 04:11:32.354 00:00:10.365 TCP 23.104.0.1:53888 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:12:04.247 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 04:12:04.304 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 04:12:23.735 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35042 10 6452 1 2025-11-24 04:12:32.753 00:00:10.379 TCP 23.104.0.1:52124 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:13:23.953 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54296 10 6452 1 2025-11-24 04:13:33.172 00:00:10.363 TCP 23.104.0.1:34108 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:10:02.913 00:05:04.307 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 04:10:02.916 00:05:04.302 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 04:14:24.178 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33162 10 6452 1 2025-11-24 04:14:33.573 00:00:10.322 TCP 23.104.0.1:43170 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:15:24.391 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38968 10 6452 1 2025-11-24 04:15:33.935 00:00:10.339 TCP 23.104.0.1:38440 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:16:24.605 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57876 10 6452 1 2025-11-24 04:16:34.311 00:00:10.323 TCP 23.104.0.1:49412 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:17:04.467 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 04:17:04.409 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 04:17:24.778 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33254 10 6452 1 2025-11-24 04:17:34.676 00:00:10.369 TCP 23.104.0.1:39880 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:18:24.993 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56604 10 6452 1 2025-11-24 04:18:35.101 00:00:10.374 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:19:25.223 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51936 10 6452 1 2025-11-24 04:19:35.519 00:00:10.366 TCP 23.104.0.1:36248 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:16:02.913 00:05:04.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 04:16:02.916 00:05:04.304 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 04:20:25.435 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59720 10 6452 1 2025-11-24 04:20:35.930 00:00:10.385 TCP 23.104.0.1:46350 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:21:25.652 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49902 10 6452 1 2025-11-24 04:21:36.362 00:00:10.368 TCP 23.104.0.1:46944 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:22:04.226 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 04:22:04.073 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 04:22:25.863 00:00:18.951 TCP 1.101.0.1:3000 -> 22.102.0.1:54162 10 6452 1 2025-11-24 04:22:36.766 00:00:10.773 TCP 23.104.0.1:36324 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:23:34.862 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:38528 10 6452 1 2025-11-24 04:23:37.578 00:00:10.325 TCP 23.104.0.1:57394 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:24:35.099 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44900 10 6452 1 2025-11-24 04:24:37.945 00:00:10.344 TCP 23.104.0.1:40536 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:25:35.322 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47614 10 6452 1 2025-11-24 04:25:38.359 00:00:10.365 TCP 23.104.0.1:53394 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:22:02.920 00:05:04.304 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 04:22:02.917 00:05:04.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 04:26:35.546 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56162 10 6452 1 2025-11-24 04:26:38.762 00:00:10.334 TCP 23.104.0.1:34302 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:27:04.422 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 04:27:04.529 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 04:27:35.759 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60050 10 6452 1 2025-11-24 04:27:39.135 00:00:10.365 TCP 23.104.0.1:45674 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:28:35.983 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:47480 10 6452 1 2025-11-24 04:28:39.538 00:00:10.364 TCP 23.104.0.1:41228 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:29:36.184 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52212 10 6452 1 2025-11-24 04:29:39.940 00:00:10.371 TCP 23.104.0.1:55616 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:30:36.397 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54784 10 6452 1 2025-11-24 04:30:40.350 00:00:10.364 TCP 23.104.0.1:40974 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:31:36.607 00:00:10.586 TCP 1.101.0.1:3000 -> 22.102.0.1:53966 10 6452 1 2025-11-24 04:31:40.752 00:00:11.131 TCP 23.104.0.1:36642 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:32:04.618 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 04:28:02.921 00:05:04.303 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 04:32:04.498 00:00:00.015 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 04:28:02.919 00:05:04.307 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 04:32:37.233 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58514 10 6452 1 2025-11-24 04:32:41.922 00:00:10.393 TCP 23.104.0.1:53340 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:33:37.447 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57036 10 6452 1 2025-11-24 04:33:42.355 00:00:10.365 TCP 23.104.0.1:43476 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:34:37.669 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45746 10 6452 1 2025-11-24 04:34:42.757 00:00:10.381 TCP 23.104.0.1:56530 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:35:37.894 00:00:10.792 TCP 1.101.0.1:3000 -> 22.102.0.1:39830 12 10369 1 2025-11-24 04:35:43.193 00:00:10.435 TCP 23.104.0.1:59274 -> 1.101.0.1:3000 15 1926 1 2025-11-24 04:36:38.725 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42558 10 6452 1 2025-11-24 04:36:43.669 00:00:10.367 TCP 23.104.0.1:60754 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:37:04.664 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 04:37:04.570 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 04:37:38.947 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:43548 10 6452 1 2025-11-24 04:37:44.100 00:00:10.364 TCP 23.104.0.1:34220 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:34:02.920 00:05:04.308 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 04:34:02.922 00:05:04.303 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 04:38:39.184 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:42518 10 6452 1 2025-11-24 04:38:44.510 00:00:10.367 TCP 23.104.0.1:59584 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:39:39.371 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51530 10 6452 1 2025-11-24 04:39:44.910 00:00:10.367 TCP 23.104.0.1:41952 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:40:39.580 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50262 10 6452 1 2025-11-24 04:40:45.315 00:00:10.365 TCP 23.104.0.1:54656 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:41:39.794 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39402 10 6452 1 2025-11-24 04:41:45.721 00:00:10.372 TCP 23.104.0.1:45624 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:42:05.086 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 04:42:05.025 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 04:42:40.010 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36190 10 6452 1 2025-11-24 04:42:46.133 00:00:10.371 TCP 23.104.0.1:36684 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:43:40.189 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47690 10 6452 1 2025-11-24 04:43:46.544 00:00:10.322 TCP 23.104.0.1:43460 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:40:02.926 00:05:04.300 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 04:40:02.923 00:05:04.305 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 04:44:40.375 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36812 10 6452 1 2025-11-24 04:44:46.900 00:00:10.369 TCP 23.104.0.1:53140 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:45:40.606 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:52672 12 10375 1 2025-11-24 04:45:47.308 00:00:10.437 TCP 23.104.0.1:52668 -> 1.101.0.1:3000 15 1926 1 2025-11-24 04:46:40.809 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53004 10 6452 1 2025-11-24 04:46:47.785 00:00:10.365 TCP 23.104.0.1:33128 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:47:04.812 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 04:47:04.905 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 04:47:41.037 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35736 10 6452 1 2025-11-24 04:47:48.188 00:00:10.365 TCP 23.104.0.1:47316 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:48:41.210 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57748 10 6452 1 2025-11-24 04:48:48.593 00:00:10.367 TCP 23.104.0.1:39696 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:49:41.433 00:00:10.518 TCP 1.101.0.1:3000 -> 22.102.0.1:40310 10 6452 1 2025-11-24 04:49:48.996 00:00:10.363 TCP 23.104.0.1:44108 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:46:02.927 00:05:04.299 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 04:46:02.925 00:05:04.304 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 04:50:41.997 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:58092 12 10375 1 2025-11-24 04:50:49.400 00:00:10.412 TCP 23.104.0.1:59388 -> 1.101.0.1:3000 15 1926 1 2025-11-24 04:51:42.246 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38944 10 6452 1 2025-11-24 04:51:49.860 00:00:10.374 TCP 23.104.0.1:43634 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:52:04.934 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 04:52:04.710 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 04:52:42.476 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47104 10 6452 1 2025-11-24 04:52:50.275 00:00:10.360 TCP 23.104.0.1:57878 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:53:42.690 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45688 10 6452 1 2025-11-24 04:53:50.679 00:00:10.367 TCP 23.104.0.1:44090 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:54:42.866 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:39166 10 6452 1 2025-11-24 04:54:51.103 00:00:10.368 TCP 23.104.0.1:38234 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:55:43.077 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39360 12 10584 1 2025-11-24 04:55:51.513 00:00:10.441 TCP 23.104.0.1:50762 -> 1.101.0.1:3000 15 1926 1 2025-11-24 04:52:02.926 00:05:04.305 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 04:52:02.930 00:05:04.299 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 04:56:43.312 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37726 10 6661 1 2025-11-24 04:57:04.981 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 04:56:51.992 00:00:10.364 TCP 23.104.0.1:56920 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:57:04.941 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 04:57:43.527 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58408 10 6661 1 2025-11-24 04:57:52.398 00:00:10.340 TCP 23.104.0.1:58604 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 508378, total packets: 1575, avg bps: 1129, avg pps: 0, avg bpp: 322 Time window: 2025-11-24 03:58:02 - 2025-11-24 04:58:02 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0033s User: 0.0033s Wall: 0.0029s flows/second: 56076.4 Runtime: 0.0029s