Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 13:59:15.265 00:00:10.367 TCP 23.104.0.1:49968 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:59:12.824 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49988 10 6452 1 2025-11-24 14:00:13.065 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32970 10 6452 1 2025-11-24 14:00:15.669 00:00:10.374 TCP 23.104.0.1:57344 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:01:13.283 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37200 10 6452 1 2025-11-24 14:01:16.107 00:00:10.367 TCP 23.104.0.1:55970 -> 1.101.0.1:3000 11 1507 1 2025-11-24 13:57:07.407 00:05:55.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 13:57:07.408 00:05:55.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 14:02:15.788 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 14:02:15.993 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 14:02:13.503 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:56312 10 6452 1 2025-11-24 14:02:16.519 00:00:10.324 TCP 23.104.0.1:51516 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:03:13.705 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58964 10 6452 1 2025-11-24 14:03:16.888 00:00:10.336 TCP 23.104.0.1:42640 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:04:13.922 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48314 10 6452 1 2025-11-24 14:04:17.264 00:00:10.365 TCP 23.104.0.1:58860 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:05:14.129 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40666 10 6452 1 2025-11-24 14:05:17.668 00:00:10.391 TCP 23.104.0.1:52620 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:06:14.336 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45790 10 6452 1 2025-11-24 14:06:18.106 00:00:10.365 TCP 23.104.0.1:60332 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:07:16.044 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 14:07:16.088 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 14:07:14.556 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47928 10 6452 1 2025-11-24 14:07:18.506 00:00:10.322 TCP 23.104.0.1:50382 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:03:07.410 00:05:55.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 14:03:07.412 00:05:55.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 14:08:14.776 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39690 10 6452 1 2025-11-24 14:08:18.865 00:00:10.368 TCP 23.104.0.1:47952 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:09:14.997 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:42858 10 6452 1 2025-11-24 14:09:19.275 00:00:10.363 TCP 23.104.0.1:46382 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:10:15.234 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50888 12 6556 1 2025-11-24 14:10:19.684 00:00:10.364 TCP 23.104.0.1:46412 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:11:15.450 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:58206 12 10375 1 2025-11-24 14:11:20.110 00:00:10.436 TCP 23.104.0.1:57790 -> 1.101.0.1:3000 15 1926 1 2025-11-24 14:12:16.193 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 14:12:16.192 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 14:12:15.701 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43874 10 6452 1 2025-11-24 14:12:20.583 00:00:10.362 TCP 23.104.0.1:46688 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:13:15.919 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36070 10 6452 1 2025-11-24 14:13:20.988 00:00:10.369 TCP 23.104.0.1:60240 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:09:07.412 00:05:55.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 14:09:07.415 00:05:55.752 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 14:14:16.131 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41628 10 6452 1 2025-11-24 14:14:21.396 00:00:10.328 TCP 23.104.0.1:38468 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:15:16.353 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39120 10 6452 1 2025-11-24 14:15:21.763 00:00:10.371 TCP 23.104.0.1:34660 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:16:16.531 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58598 10 6452 1 2025-11-24 14:16:22.172 00:00:10.321 TCP 23.104.0.1:51242 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:17:16.354 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 14:17:16.110 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 14:17:16.744 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:35286 10 6452 1 2025-11-24 14:17:22.529 00:00:10.325 TCP 23.104.0.1:35814 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:18:16.930 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:50740 10 6452 1 2025-11-24 14:18:22.890 00:00:10.368 TCP 23.104.0.1:52846 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:19:17.165 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36260 10 6452 1 2025-11-24 14:19:23.293 00:00:10.364 TCP 23.104.0.1:35082 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:15:07.416 00:05:55.752 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 14:15:07.413 00:05:55.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 14:20:17.378 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55174 10 6452 1 2025-11-24 14:20:23.699 00:00:10.361 TCP 23.104.0.1:44072 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:21:17.591 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54868 10 6452 1 2025-11-24 14:21:24.105 00:00:10.367 TCP 23.104.0.1:37430 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:22:16.834 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 14:22:16.778 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 14:22:17.802 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45394 10 6452 1 2025-11-24 14:22:24.514 00:00:10.360 TCP 23.104.0.1:39106 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:23:18.030 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33340 10 6452 1 2025-11-24 14:23:24.914 00:00:10.732 TCP 23.104.0.1:33236 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:24:18.241 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:47284 10 6452 1 2025-11-24 14:24:25.684 00:00:10.365 TCP 23.104.0.1:39084 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:25:18.497 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:51766 10 6452 1 2025-11-24 14:25:26.119 00:00:10.319 TCP 23.104.0.1:45396 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:21:07.413 00:05:55.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 14:21:07.418 00:05:55.752 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 14:26:18.752 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52288 10 6452 1 2025-11-24 14:26:26.475 00:00:10.360 TCP 23.104.0.1:44658 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:27:16.281 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 14:27:16.274 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 14:27:18.924 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:53062 10 6452 1 2025-11-24 14:27:26.877 00:00:10.364 TCP 23.104.0.1:57648 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:28:19.163 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58296 10 6452 1 2025-11-24 14:28:27.281 00:00:10.370 TCP 23.104.0.1:54312 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:29:19.337 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:49976 10 6452 1 2025-11-24 14:29:27.697 00:00:10.367 TCP 23.104.0.1:48214 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:30:19.600 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35500 12 6556 1 2025-11-24 14:30:28.111 00:00:10.334 TCP 23.104.0.1:41100 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:31:19.816 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51422 10 6452 1 2025-11-24 14:31:28.485 00:00:10.367 TCP 23.104.0.1:40182 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:27:07.416 00:05:55.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 14:27:07.419 00:05:55.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 14:32:16.539 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 14:32:16.457 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 14:32:20.029 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46596 10 6452 1 2025-11-24 14:32:28.897 00:00:10.376 TCP 23.104.0.1:57208 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:33:20.243 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34354 10 6452 1 2025-11-24 14:33:29.316 00:00:10.360 TCP 23.104.0.1:48142 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:34:20.464 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56518 10 6452 1 2025-11-24 14:34:29.715 00:00:10.373 TCP 23.104.0.1:34890 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:35:20.642 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41536 10 6452 1 2025-11-24 14:35:30.126 00:00:10.359 TCP 23.104.0.1:36510 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:36:20.855 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60994 10 6452 1 2025-11-24 14:36:30.526 00:00:10.359 TCP 23.104.0.1:51266 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:37:16.452 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 14:37:16.556 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 14:37:21.077 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38486 10 6452 1 2025-11-24 14:37:30.922 00:00:10.388 TCP 23.104.0.1:50426 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:33:07.418 00:05:55.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 14:33:07.419 00:05:55.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 14:38:21.289 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41706 10 6452 1 2025-11-24 14:38:31.348 00:00:10.367 TCP 23.104.0.1:33852 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:39:21.500 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48458 10 6452 1 2025-11-24 14:39:31.753 00:00:10.334 TCP 23.104.0.1:36216 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:40:21.713 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43926 10 6452 1 2025-11-24 14:40:32.123 00:00:10.367 TCP 23.104.0.1:42720 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:41:21.934 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:34626 10 6452 1 2025-11-24 14:41:32.531 00:00:10.364 TCP 23.104.0.1:49608 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:42:16.663 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 14:42:17.002 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 14:42:22.135 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40768 12 6556 1 2025-11-24 14:42:32.937 00:00:10.379 TCP 23.104.0.1:57396 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:43:22.346 00:00:10.520 TCP 1.101.0.1:3000 -> 22.102.0.1:46098 10 6452 1 2025-11-24 14:43:33.353 00:00:10.360 TCP 23.104.0.1:60858 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:39:07.419 00:05:55.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 14:39:07.421 00:05:55.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 14:44:22.906 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43742 10 6452 1 2025-11-24 14:44:33.753 00:00:10.330 TCP 23.104.0.1:51834 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:45:23.121 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47042 10 6452 1 2025-11-24 14:45:34.119 00:00:10.372 TCP 23.104.0.1:46822 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:46:23.291 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60690 10 6452 1 2025-11-24 14:46:34.528 00:00:10.316 TCP 23.104.0.1:59486 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:47:17.032 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 14:47:17.049 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 14:47:23.505 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35812 10 6452 1 2025-11-24 14:47:34.878 00:00:10.341 TCP 23.104.0.1:59648 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:48:23.726 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40384 10 6452 1 2025-11-24 14:48:35.256 00:00:10.374 TCP 23.104.0.1:42142 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:49:23.904 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60714 10 6452 1 2025-11-24 14:49:35.664 00:00:10.364 TCP 23.104.0.1:35390 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:45:07.420 00:05:55.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 14:45:07.423 00:05:55.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 14:50:24.122 00:00:10.471 TCP 1.101.0.1:3000 -> 22.102.0.1:55766 10 6452 1 2025-11-24 14:50:36.094 00:00:10.361 TCP 23.104.0.1:35818 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:51:24.633 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35120 10 6452 1 2025-11-24 14:51:36.493 00:00:10.876 TCP 23.104.0.1:60982 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:52:16.942 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 14:52:16.951 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 14:52:24.847 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42716 10 6452 1 2025-11-24 14:52:37.409 00:00:11.429 TCP 23.104.0.1:42374 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:53:25.083 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36238 10 6452 1 2025-11-24 14:53:38.877 00:00:10.353 TCP 23.104.0.1:41536 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:54:25.293 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48442 10 6452 1 2025-11-24 14:54:39.265 00:00:10.367 TCP 23.104.0.1:39566 -> 1.101.0.1:3000 12 1559 1 2025-11-24 14:55:25.502 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47618 10 6452 1 2025-11-24 14:55:39.669 00:00:10.364 TCP 23.104.0.1:42758 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:51:07.425 00:05:55.755 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 14:51:07.422 00:05:55.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 14:56:25.708 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36714 10 6452 1 2025-11-24 14:56:40.097 00:00:10.365 TCP 23.104.0.1:34650 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:57:17.636 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 14:57:17.530 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 14:57:25.923 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49502 10 6452 1 2025-11-24 14:57:40.500 00:00:10.367 TCP 23.104.0.1:45690 -> 1.101.0.1:3000 11 1507 1 2025-11-24 14:58:26.132 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58432 10 6452 1 2025-11-24 14:58:40.906 00:00:10.366 TCP 23.104.0.1:44938 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 503054, total packets: 1585, avg bps: 1086, avg pps: 0, avg bpp: 317 Time window: 2025-11-24 13:57:07 - 2025-11-24 14:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0051s User: 0.0017s Wall: 0.0027s flows/second: 59653.6 Runtime: 0.0028s