Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 04:58:43.736 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48162 10 6661 1 2025-11-24 04:58:52.786 00:00:10.370 TCP 23.104.0.1:37530 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:59:43.951 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52190 10 6661 1 2025-11-24 04:59:53.196 00:00:10.364 TCP 23.104.0.1:35100 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:00:44.194 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50426 10 6661 1 2025-11-24 05:00:53.597 00:00:10.330 TCP 23.104.0.1:58200 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:01:44.413 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49874 10 6661 1 2025-11-24 05:02:05.036 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 05:02:05.482 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 05:01:53.967 00:00:10.379 TCP 23.104.0.1:58686 -> 1.101.0.1:3000 11 1507 1 2025-11-24 04:58:02.931 00:05:04.301 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 04:58:02.929 00:05:04.305 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 05:02:44.665 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52094 10 6661 1 2025-11-24 05:02:54.383 00:00:10.362 TCP 23.104.0.1:48770 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:03:44.882 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56238 10 6661 1 2025-11-24 05:03:54.782 00:00:10.365 TCP 23.104.0.1:35376 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:04:45.104 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43894 10 6661 1 2025-11-24 05:04:55.189 00:00:10.357 TCP 23.104.0.1:36534 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:05:45.322 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35276 10 6661 1 2025-11-24 05:05:55.583 00:00:18.639 TCP 23.104.0.1:45262 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:06:45.545 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52524 10 6661 1 2025-11-24 05:07:05.244 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 05:07:04.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 05:07:04.263 00:00:10.361 TCP 23.104.0.1:60632 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:07:45.766 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49980 10 6661 1 2025-11-24 05:04:02.929 00:05:04.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 05:04:02.932 00:05:04.301 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 05:08:04.671 00:00:10.953 TCP 23.104.0.1:53202 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:08:45.941 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52654 10 6661 1 2025-11-24 05:09:05.660 00:00:10.364 TCP 23.104.0.1:59610 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:09:46.186 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:49246 10 6661 1 2025-11-24 05:10:06.085 00:00:10.363 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:10:46.425 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36228 10 6661 1 2025-11-24 05:11:06.488 00:00:10.361 TCP 23.104.0.1:40476 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:11:46.649 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49380 10 6661 1 2025-11-24 05:12:05.408 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 05:12:05.320 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 05:12:06.887 00:00:10.378 TCP 23.104.0.1:39548 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:12:46.826 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38984 10 6661 1 2025-11-24 05:13:07.303 00:00:10.362 TCP 23.104.0.1:60492 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:13:47.050 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 10 6661 1 2025-11-24 05:10:02.934 00:05:04.302 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 05:10:02.932 00:05:04.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 05:14:07.707 00:00:10.325 TCP 23.104.0.1:52892 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:14:47.238 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37874 10 6661 1 2025-11-24 05:15:08.098 00:00:10.361 TCP 23.104.0.1:59150 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:15:47.464 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:51164 10 6661 1 2025-11-24 05:16:08.506 00:00:10.324 TCP 23.104.0.1:45796 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:16:47.658 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44638 10 6661 1 2025-11-24 05:17:05.475 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 05:17:05.483 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 05:17:08.868 00:00:10.371 TCP 23.104.0.1:43988 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:17:47.878 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59868 10 6661 1 2025-11-24 05:18:09.280 00:00:10.328 TCP 23.104.0.1:37118 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:18:48.109 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35572 10 6661 1 2025-11-24 05:19:09.652 00:00:10.366 TCP 23.104.0.1:56626 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:19:48.333 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48200 10 6661 1 2025-11-24 05:16:02.932 00:05:04.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 05:16:02.934 00:05:04.302 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 05:20:10.056 00:00:10.362 TCP 23.104.0.1:34432 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:20:48.555 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50916 10 6661 1 2025-11-24 05:21:10.456 00:00:10.364 TCP 23.104.0.1:56358 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:21:48.767 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56896 10 6661 1 2025-11-24 05:22:05.631 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 05:22:05.454 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 05:22:10.857 00:00:10.376 TCP 23.104.0.1:60104 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:22:48.985 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:52444 10 6661 1 2025-11-24 05:23:11.270 00:00:10.363 TCP 23.104.0.1:49088 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:23:49.176 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49454 10 6661 1 2025-11-24 05:24:11.672 00:00:10.372 TCP 23.104.0.1:34368 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:24:49.389 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53076 10 6661 1 2025-11-24 05:25:12.099 00:00:10.389 TCP 23.104.0.1:53102 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:25:49.605 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42500 10 6661 1 2025-11-24 05:22:02.932 00:05:04.310 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 05:22:02.936 00:05:04.304 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 05:26:12.519 00:00:10.362 TCP 23.104.0.1:56882 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:26:49.775 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38956 10 6661 1 2025-11-24 05:27:06.170 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 05:27:06.250 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 05:27:12.920 00:00:10.384 TCP 23.104.0.1:34208 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:27:49.989 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33828 10 6661 1 2025-11-24 05:28:13.338 00:00:10.362 TCP 23.104.0.1:52030 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:28:50.212 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:32964 10 6661 1 2025-11-24 05:29:13.739 00:00:10.367 TCP 23.104.0.1:43284 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:29:50.435 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47926 10 6661 1 2025-11-24 05:30:14.145 00:00:10.363 TCP 23.104.0.1:53600 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:30:50.665 00:00:16.556 TCP 1.101.0.1:3000 -> 22.102.0.1:50008 12 10369 1 2025-11-24 05:31:14.548 00:00:10.449 TCP 23.104.0.1:49454 -> 1.101.0.1:3000 15 1926 1 2025-11-24 05:32:05.441 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 05:32:05.840 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 05:28:02.936 00:05:04.304 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 05:31:57.265 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:50278 10 6452 1 2025-11-24 05:28:02.935 00:05:04.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 05:32:15.046 00:00:10.367 TCP 23.104.0.1:43268 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:32:57.449 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37952 10 6452 1 2025-11-24 05:33:15.448 00:00:10.372 TCP 23.104.0.1:37338 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:33:57.668 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34582 10 6452 1 2025-11-24 05:34:15.859 00:00:10.408 TCP 23.104.0.1:41240 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:34:57.840 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54098 10 6452 1 2025-11-24 05:35:16.269 00:00:10.364 TCP 23.104.0.1:45272 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:35:58.076 00:00:10.263 TCP 1.101.0.1:3000 -> 22.102.0.1:43340 10 6452 1 2025-11-24 05:36:16.676 00:00:10.802 TCP 23.104.0.1:44144 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:37:05.780 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 05:37:05.869 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 05:36:58.376 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:35822 10 6452 1 2025-11-24 05:37:17.527 00:00:10.360 TCP 23.104.0.1:39200 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:34:02.940 00:05:04.305 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 05:37:58.539 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54516 10 6452 1 2025-11-24 05:34:02.935 00:05:04.310 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 05:38:17.927 00:00:10.379 TCP 23.104.0.1:45598 -> 1.101.0.1:3000 12 1559 1 2025-11-24 05:38:58.761 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44268 10 6452 1 2025-11-24 05:39:18.347 00:00:10.368 TCP 23.104.0.1:59396 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:39:58.929 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:53258 10 6452 1 2025-11-24 05:40:18.750 00:00:10.454 TCP 23.104.0.1:43378 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:40:59.170 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36886 10 6452 1 2025-11-24 05:41:19.244 00:00:10.364 TCP 23.104.0.1:38902 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:42:05.605 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 05:42:05.670 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 05:41:59.382 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33742 10 6452 1 2025-11-24 05:42:19.646 00:00:10.365 TCP 23.104.0.1:54612 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:42:59.593 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55346 10 6452 1 2025-11-24 05:43:20.061 00:00:10.369 TCP 23.104.0.1:54262 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:40:02.940 00:05:04.307 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 05:43:59.816 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47136 10 6452 1 2025-11-24 05:40:02.942 00:05:04.302 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 05:44:20.466 00:00:10.371 TCP 23.104.0.1:37936 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:45:00.054 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33198 10 6452 1 2025-11-24 05:45:20.869 00:00:10.364 TCP 23.104.0.1:35342 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:46:00.280 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36806 10 6452 1 2025-11-24 05:46:21.281 00:00:10.366 TCP 23.104.0.1:43800 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:47:06.329 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 05:47:06.015 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 05:47:00.495 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45266 10 6452 1 2025-11-24 05:47:21.687 00:00:10.367 TCP 23.104.0.1:36688 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:48:00.707 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47334 10 6452 1 2025-11-24 05:48:22.103 00:00:10.358 TCP 23.104.0.1:40770 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:49:00.924 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58206 10 6452 1 2025-11-24 05:49:22.498 00:00:10.366 TCP 23.104.0.1:38698 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:46:02.944 00:05:04.314 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 05:50:01.130 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58346 10 6452 1 2025-11-24 05:46:02.941 00:05:04.319 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 05:50:22.906 00:00:10.369 TCP 23.104.0.1:59122 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:51:01.337 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47488 10 6452 1 2025-11-24 05:51:23.322 00:00:10.370 TCP 23.104.0.1:43646 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:52:06.181 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 05:52:06.164 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 05:52:01.547 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46858 10 6452 1 2025-11-24 05:52:23.725 00:00:10.374 TCP 23.104.0.1:58656 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:53:01.757 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57496 10 6452 1 2025-11-24 05:53:24.137 00:00:10.363 TCP 23.104.0.1:56458 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:54:01.980 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:36200 10 6452 1 2025-11-24 05:54:24.540 00:00:10.368 TCP 23.104.0.1:51910 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:55:02.224 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35382 10 6452 1 2025-11-24 05:55:24.943 00:00:10.375 TCP 23.104.0.1:45398 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:52:02.944 00:05:04.317 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 05:52:02.947 00:05:04.312 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 05:56:02.439 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36842 10 6452 1 2025-11-24 05:56:25.354 00:00:10.586 TCP 23.104.0.1:56062 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:57:06.036 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 05:57:06.196 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 05:57:02.654 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43716 10 6452 1 2025-11-24 05:57:25.980 00:00:10.367 TCP 23.104.0.1:33854 -> 1.101.0.1:3000 11 1507 1 2025-11-24 05:58:02.864 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53280 10 6452 1 2025-11-24 05:58:26.385 00:00:10.363 TCP 23.104.0.1:48636 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 509424, total packets: 1579, avg bps: 1121, avg pps: 0, avg bpp: 322 Time window: 2025-11-24 04:58:02 - 2025-11-24 05:58:36 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0049s User: 0.0010s Wall: 0.0023s flows/second: 72216.9 Runtime: 0.0023s