Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 12:58:51.311 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56448 10 6452 1 2025-11-24 12:59:41.959 00:00:10.360 TCP 23.104.0.1:35418 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:59:51.522 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:33924 10 6452 1 2025-11-24 13:00:42.360 00:00:10.323 TCP 23.104.0.1:59148 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:00:51.709 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36386 10 6452 1 2025-11-24 13:01:42.729 00:00:10.373 TCP 23.104.0.1:33770 -> 1.101.0.1:3000 12 1559 1 2025-11-24 12:57:07.396 00:05:55.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 13:01:51.926 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:59056 10 6452 1 2025-11-24 12:57:07.398 00:05:55.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 13:02:14.919 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 13:02:14.897 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 13:02:43.137 00:00:10.364 TCP 23.104.0.1:37980 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:02:52.113 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38602 10 6452 1 2025-11-24 13:03:43.543 00:00:10.364 TCP 23.104.0.1:48374 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:03:52.284 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:48212 10 6452 1 2025-11-24 13:04:43.951 00:00:10.362 TCP 23.104.0.1:59970 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:04:52.451 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58176 10 6452 1 2025-11-24 13:05:44.357 00:00:10.332 TCP 23.104.0.1:58808 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:05:52.663 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37026 10 6452 1 2025-11-24 13:06:44.735 00:00:10.371 TCP 23.104.0.1:33178 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:06:52.841 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55762 10 6452 1 2025-11-24 13:07:14.800 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 13:07:14.582 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 13:07:45.141 00:00:10.329 TCP 23.104.0.1:53032 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:03:07.399 00:05:55.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 13:07:53.087 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57500 10 6452 1 2025-11-24 13:03:07.400 00:05:55.748 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 13:08:45.509 00:00:10.371 TCP 23.104.0.1:40518 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:08:53.305 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42946 10 6452 1 2025-11-24 13:09:45.908 00:00:10.329 TCP 23.104.0.1:38214 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:09:53.522 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44554 10 6452 1 2025-11-24 13:10:46.275 00:00:10.321 TCP 23.104.0.1:45108 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:10:53.733 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55228 10 6452 1 2025-11-24 13:11:46.634 00:00:10.326 TCP 23.104.0.1:55054 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:11:53.950 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59148 12 6556 1 2025-11-24 13:12:14.640 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 13:12:15.163 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 13:12:47.000 00:00:10.363 TCP 23.104.0.1:33866 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:12:54.194 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34246 10 6452 1 2025-11-24 13:13:47.404 00:00:10.364 TCP 23.104.0.1:45304 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:09:07.398 00:05:55.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 13:13:54.406 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46470 10 6452 1 2025-11-24 13:09:07.401 00:05:55.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 13:14:47.809 00:00:10.371 TCP 23.104.0.1:53032 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:14:54.628 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35486 10 6452 1 2025-11-24 13:15:48.215 00:00:10.389 TCP 23.104.0.1:58196 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:15:54.840 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38420 10 6452 1 2025-11-24 13:16:48.645 00:00:10.366 TCP 23.104.0.1:52476 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:16:55.081 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45262 10 6452 1 2025-11-24 13:17:15.006 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 13:17:15.028 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 13:17:49.059 00:00:10.365 TCP 23.104.0.1:56690 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:17:55.295 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35420 10 6452 1 2025-11-24 13:18:49.465 00:00:10.397 TCP 23.104.0.1:57206 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:18:55.513 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:46018 10 6452 1 2025-11-24 13:19:49.904 00:00:10.370 TCP 23.104.0.1:50120 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:19:55.709 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55232 10 6452 1 2025-11-24 13:15:07.401 00:05:55.750 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 13:15:07.399 00:05:55.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 13:20:50.313 00:00:10.361 TCP 23.104.0.1:53956 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:20:55.921 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51786 10 6452 1 2025-11-24 13:21:50.712 00:00:10.333 TCP 23.104.0.1:38154 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:21:56.131 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:42750 10 6452 1 2025-11-24 13:22:14.946 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 13:22:15.175 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 13:22:51.104 00:00:10.367 TCP 23.104.0.1:42418 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:22:56.402 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55454 10 6452 1 2025-11-24 13:23:51.508 00:00:10.368 TCP 23.104.0.1:42822 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:23:56.621 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32964 10 6452 1 2025-11-24 13:24:51.928 00:00:10.376 TCP 23.104.0.1:48308 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:24:56.835 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58782 10 6452 1 2025-11-24 13:25:52.342 00:00:10.373 TCP 23.104.0.1:39692 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:21:07.400 00:05:55.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 13:21:07.402 00:05:55.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 13:25:57.068 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60610 10 6452 1 2025-11-24 13:26:52.756 00:00:10.358 TCP 23.104.0.1:37092 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:26:57.287 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40596 10 6452 1 2025-11-24 13:27:15.283 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 13:27:15.693 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 13:27:53.148 00:00:10.368 TCP 23.104.0.1:55198 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:27:57.468 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34158 10 6452 1 2025-11-24 13:28:53.558 00:00:10.365 TCP 23.104.0.1:37722 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:28:57.675 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60680 10 6452 1 2025-11-24 13:29:53.962 00:00:10.364 TCP 23.104.0.1:34014 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:29:57.888 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:53684 10 6452 1 2025-11-24 13:30:54.366 00:00:10.365 TCP 23.104.0.1:48610 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:30:58.125 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37208 10 6452 1 2025-11-24 13:27:07.405 00:05:55.751 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 13:31:54.767 00:00:10.375 TCP 23.104.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:27:07.408 00:05:55.746 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 13:31:58.337 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51110 10 6452 1 2025-11-24 13:32:15.287 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 13:32:15.311 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 13:32:55.190 00:00:10.387 TCP 23.104.0.1:51974 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:32:58.553 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35438 10 6452 1 2025-11-24 13:33:55.619 00:00:10.367 TCP 23.104.0.1:53668 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:33:58.772 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58698 10 6452 1 2025-11-24 13:34:56.026 00:00:10.368 TCP 23.104.0.1:49386 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:34:58.988 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60650 10 6452 1 2025-11-24 13:35:56.432 00:00:10.325 TCP 23.104.0.1:35528 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:35:59.213 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39426 10 6452 1 2025-11-24 13:36:56.796 00:00:10.337 TCP 23.104.0.1:40078 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:37:15.676 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 13:36:59.430 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53316 10 6452 1 2025-11-24 13:37:15.461 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 13:33:07.404 00:05:55.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 13:33:07.406 00:05:55.753 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 13:37:59.601 00:00:17.233 TCP 1.101.0.1:3000 -> 22.102.0.1:56570 10 6452 1 2025-11-24 13:37:57.168 00:00:19.704 TCP 23.104.0.1:33736 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:39:06.885 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34422 10 6452 1 2025-11-24 13:39:06.935 00:00:10.381 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:40:07.360 00:00:10.322 TCP 23.104.0.1:41078 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:40:07.110 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43460 10 6452 1 2025-11-24 13:41:07.722 00:00:10.378 TCP 23.104.0.1:35748 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:41:07.332 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53326 10 6452 1 2025-11-24 13:42:15.872 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 13:42:15.721 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 13:42:08.135 00:00:10.372 TCP 23.104.0.1:56474 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:42:07.550 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38090 10 6452 1 2025-11-24 13:43:08.541 00:00:10.326 TCP 23.104.0.1:39364 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:43:07.764 00:00:10.758 TCP 1.101.0.1:3000 -> 22.102.0.1:48134 10 6452 1 2025-11-24 13:39:07.406 00:05:55.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 13:39:07.403 00:05:55.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 13:44:08.908 00:00:10.377 TCP 23.104.0.1:44002 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:44:08.559 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49802 10 6452 1 2025-11-24 13:45:08.776 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42142 10 6452 1 2025-11-24 13:45:09.320 00:00:10.365 TCP 23.104.0.1:55840 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:46:08.998 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41330 10 6452 1 2025-11-24 13:46:09.723 00:00:10.320 TCP 23.104.0.1:36480 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:47:15.497 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 13:47:15.677 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 13:47:09.227 00:00:11.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41238 10 6452 1 2025-11-24 13:47:10.109 00:00:10.408 TCP 23.104.0.1:49854 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:48:10.552 00:00:10.366 TCP 23.104.0.1:45446 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:48:10.460 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56170 10 6452 1 2025-11-24 13:49:10.953 00:00:10.333 TCP 23.104.0.1:39446 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:49:10.636 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57120 10 6452 1 2025-11-24 13:45:07.407 00:05:55.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 13:45:07.405 00:05:55.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 13:50:11.319 00:00:10.367 TCP 23.104.0.1:37460 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:50:10.858 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:43192 10 6452 1 2025-11-24 13:51:11.093 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41166 10 6452 1 2025-11-24 13:51:11.724 00:00:10.326 TCP 23.104.0.1:39520 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:52:15.800 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 13:52:15.819 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 13:52:11.304 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42612 10 6452 1 2025-11-24 13:52:12.100 00:00:10.370 TCP 23.104.0.1:40848 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:53:11.527 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53286 10 6452 1 2025-11-24 13:53:12.505 00:00:10.333 TCP 23.104.0.1:53924 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:54:11.745 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44008 10 6452 1 2025-11-24 13:54:12.875 00:00:10.381 TCP 23.104.0.1:53202 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:55:13.294 00:00:10.331 TCP 23.104.0.1:46350 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:55:11.965 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:49150 10 6452 1 2025-11-24 13:51:07.406 00:05:55.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 13:51:07.407 00:05:55.755 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 13:56:13.668 00:00:10.814 TCP 23.104.0.1:41192 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:56:12.158 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43904 10 6452 1 2025-11-24 13:57:16.317 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 13:57:15.879 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 13:57:12.373 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50370 10 6452 1 2025-11-24 13:57:14.521 00:00:10.326 TCP 23.104.0.1:53196 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:58:14.889 00:00:10.341 TCP 23.104.0.1:48128 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:58:12.593 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46880 10 6452 1 Summary: total flows: 163, total bytes: 496997, total packets: 1564, avg bps: 1081, avg pps: 0, avg bpp: 317 Time window: 2025-11-24 12:57:07 - 2025-11-24 13:58:25 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0010s Wall: 0.0030s flows/second: 54975.2 Runtime: 0.0030s