Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 05:59:03.084 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53598 10 6452 1 2025-11-24 05:59:26.788 00:00:10.326 TCP 23.104.0.1:47500 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:00:03.308 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39886 10 6452 1 2025-11-24 06:00:27.147 00:00:10.363 TCP 23.104.0.1:41162 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:01:03.534 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45772 10 6452 1 2025-11-24 06:01:27.551 00:00:10.368 TCP 23.104.0.1:36680 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:02:06.409 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 06:02:06.484 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 05:58:02.948 00:05:04.313 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 05:58:02.946 00:05:04.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 06:02:03.708 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49368 10 6452 1 2025-11-24 06:02:27.953 00:00:10.373 TCP 23.104.0.1:54728 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:03:03.881 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56742 10 6452 1 2025-11-24 06:03:28.360 00:00:10.329 TCP 23.104.0.1:43392 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:04:04.111 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39252 10 6452 1 2025-11-24 06:04:28.725 00:00:10.377 TCP 23.104.0.1:34788 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:05:04.329 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37576 10 6452 1 2025-11-24 06:05:29.135 00:00:10.361 TCP 23.104.0.1:41722 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:06:04.551 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37636 10 6452 1 2025-11-24 06:06:29.533 00:00:10.364 TCP 23.104.0.1:48212 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:07:06.439 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 06:07:06.400 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 06:07:04.780 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51264 10 6452 1 2025-11-24 06:07:29.933 00:00:10.340 TCP 23.104.0.1:57404 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:04:02.950 00:05:04.312 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 06:04:02.948 00:05:04.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 06:08:04.949 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42998 10 6452 1 2025-11-24 06:08:30.311 00:00:10.372 TCP 23.104.0.1:48164 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:09:05.187 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54392 10 6452 1 2025-11-24 06:09:30.720 00:00:10.376 TCP 23.104.0.1:55484 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:10:05.401 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51428 10 6452 1 2025-11-24 06:10:31.136 00:00:10.365 TCP 23.104.0.1:45940 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:11:05.617 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47322 10 6452 1 2025-11-24 06:11:31.540 00:00:10.362 TCP 23.104.0.1:40662 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:12:06.572 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 06:12:06.429 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 06:12:05.791 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35542 10 6452 1 2025-11-24 06:12:31.936 00:00:10.378 TCP 23.104.0.1:37686 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:13:06.023 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41982 10 6452 1 2025-11-24 06:13:32.354 00:00:10.376 TCP 23.104.0.1:39348 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:10:02.951 00:05:04.313 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 06:10:02.947 00:05:04.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 06:14:06.248 00:00:11.529 TCP 1.101.0.1:3000 -> 22.102.0.1:39644 10 6452 1 2025-11-24 06:14:32.764 00:00:10.328 TCP 23.104.0.1:60532 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:15:07.856 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57264 10 6452 1 2025-11-24 06:15:33.132 00:00:10.322 TCP 23.104.0.1:38040 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:16:08.084 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58580 10 6452 1 2025-11-24 06:16:33.492 00:00:10.365 TCP 23.104.0.1:47402 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:17:06.569 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 06:17:06.320 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 06:17:08.305 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42622 10 6452 1 2025-11-24 06:17:33.894 00:00:11.135 TCP 23.104.0.1:49374 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:18:08.489 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35250 10 6452 1 2025-11-24 06:18:35.087 00:00:10.325 TCP 23.104.0.1:38652 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:19:08.702 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:42598 10 6452 1 2025-11-24 06:19:35.448 00:00:10.366 TCP 23.104.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:16:02.950 00:05:04.317 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 06:16:02.954 00:05:04.311 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 06:20:08.887 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43078 10 6452 1 2025-11-24 06:20:35.851 00:00:10.381 TCP 23.104.0.1:51728 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:21:09.111 00:00:11.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59592 10 6452 1 2025-11-24 06:21:36.275 00:00:10.375 TCP 23.104.0.1:49060 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:22:06.595 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 06:22:06.708 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 06:22:10.336 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48234 10 6452 1 2025-11-24 06:22:36.688 00:00:10.608 TCP 23.104.0.1:58178 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:23:10.540 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46292 10 6452 1 2025-11-24 06:23:37.337 00:00:10.327 TCP 23.104.0.1:57934 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:24:10.746 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55378 10 6452 1 2025-11-24 06:24:37.700 00:00:10.327 TCP 23.104.0.1:45242 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:25:10.918 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55618 10 6452 1 2025-11-24 06:25:38.097 00:00:10.395 TCP 23.104.0.1:48856 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:22:02.952 00:05:04.321 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 06:22:02.955 00:05:04.315 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 06:26:11.159 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51398 10 6452 1 2025-11-24 06:26:38.565 00:00:10.362 TCP 23.104.0.1:60382 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:27:06.952 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 06:27:06.888 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 06:27:11.375 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51350 10 6452 1 2025-11-24 06:27:38.965 00:00:10.365 TCP 23.104.0.1:33464 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:28:11.598 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:51396 10 6452 1 2025-11-24 06:28:39.371 00:00:10.367 TCP 23.104.0.1:45822 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:29:11.839 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35726 10 6452 1 2025-11-24 06:29:39.774 00:00:10.369 TCP 23.104.0.1:48462 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:30:12.008 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36992 10 6452 1 2025-11-24 06:30:40.177 00:00:10.370 TCP 23.104.0.1:53986 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:31:12.220 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47364 10 6452 1 2025-11-24 06:31:40.583 00:00:10.361 TCP 23.104.0.1:55820 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:32:06.984 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 06:28:02.955 00:05:04.318 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 06:32:06.945 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 06:28:02.952 00:05:04.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 06:32:12.428 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35992 10 6452 1 2025-11-24 06:32:40.982 00:00:23.543 TCP 23.104.0.1:36580 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:33:12.644 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51418 10 6452 1 2025-11-24 06:33:54.572 00:00:10.365 TCP 23.104.0.1:57834 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:34:12.857 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:40234 11 6492 1 2025-11-24 06:34:54.975 00:00:10.365 TCP 23.104.0.1:41930 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:35:13.100 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51490 10 6452 1 2025-11-24 06:35:55.378 00:00:10.365 TCP 23.104.0.1:58192 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:36:13.274 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58796 10 6452 1 2025-11-24 06:37:06.901 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 06:36:55.785 00:00:10.325 TCP 23.104.0.1:46952 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:37:06.995 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 06:37:13.492 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39514 10 6452 1 2025-11-24 06:37:56.143 00:00:10.367 TCP 23.104.0.1:41916 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:34:02.954 00:05:04.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 06:34:02.957 00:05:04.318 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 06:38:13.710 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49932 10 6452 1 2025-11-24 06:38:56.546 00:00:10.325 TCP 23.104.0.1:48446 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:39:13.925 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60618 10 6452 1 2025-11-24 06:39:56.915 00:00:10.366 TCP 23.104.0.1:48868 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:40:14.138 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34360 10 6452 1 2025-11-24 06:40:57.320 00:00:10.364 TCP 23.104.0.1:55538 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:41:14.305 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33954 10 6452 1 2025-11-24 06:42:07.329 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 06:41:57.720 00:00:10.377 TCP 23.104.0.1:57306 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:42:07.286 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 06:42:14.516 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57502 10 6452 1 2025-11-24 06:42:58.129 00:00:10.363 TCP 23.104.0.1:47860 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:43:14.729 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52550 10 6452 1 2025-11-24 06:40:02.960 00:05:04.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 06:43:58.531 00:00:10.360 TCP 23.104.0.1:50498 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:40:02.962 00:05:04.313 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 06:44:14.954 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40892 10 6452 1 2025-11-24 06:44:58.939 00:00:10.372 TCP 23.104.0.1:57606 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:45:15.180 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44978 10 6452 1 2025-11-24 06:45:59.360 00:00:10.363 TCP 23.104.0.1:45972 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:46:15.407 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39628 10 6452 1 2025-11-24 06:46:59.756 00:00:10.374 TCP 23.104.0.1:55532 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:47:07.289 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 06:47:07.033 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 06:47:15.641 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46776 10 6452 1 2025-11-24 06:48:00.172 00:00:10.363 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:48:15.865 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:51354 12 6556 1 2025-11-24 06:49:00.576 00:00:10.365 TCP 23.104.0.1:58356 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:49:16.117 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48790 10 6452 1 2025-11-24 06:50:00.980 00:00:10.364 TCP 23.104.0.1:40532 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:46:02.960 00:05:04.317 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 06:46:02.956 00:05:04.323 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 06:50:16.331 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50806 10 6452 1 2025-11-24 06:51:01.381 00:00:16.351 TCP 23.104.0.1:35374 -> 1.101.0.1:3000 15 1926 1 2025-11-24 06:51:16.555 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:40266 12 10375 1 2025-11-24 06:52:07.247 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 06:52:07.389 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 06:52:07.779 00:00:10.366 TCP 23.104.0.1:35698 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:52:16.804 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57558 10 6452 1 2025-11-24 06:53:08.185 00:00:10.374 TCP 23.104.0.1:36540 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:53:17.030 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56224 10 6452 1 2025-11-24 06:54:08.596 00:00:10.365 TCP 23.104.0.1:56830 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:54:17.245 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:41158 10 6452 1 2025-11-24 06:55:08.996 00:00:10.365 TCP 23.104.0.1:56340 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:55:17.431 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52220 10 6452 1 2025-11-24 06:52:02.963 00:05:04.315 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 06:52:02.961 00:05:04.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 06:56:09.409 00:00:10.364 TCP 23.104.0.1:35692 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:56:17.642 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51386 10 6452 1 2025-11-24 06:57:07.415 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 06:57:07.376 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 06:57:09.822 00:00:10.364 TCP 23.104.0.1:57310 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:57:17.863 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60492 10 6452 1 2025-11-24 06:58:10.223 00:00:10.360 TCP 23.104.0.1:35800 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:58:18.070 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35084 10 6452 1 Summary: total flows: 163, total bytes: 501327, total packets: 1570, avg bps: 1106, avg pps: 0, avg bpp: 319 Time window: 2025-11-24 05:58:02 - 2025-11-24 06:58:28 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0050s User: 0.0010s Wall: 0.0020s flows/second: 79663.4 Runtime: 0.0021s