Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 16:59:04.008 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51036 10 6452 1 2025-11-24 16:59:40.845 00:00:10.385 TCP 23.104.0.1:56248 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:00:04.227 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36834 10 6452 1 2025-11-24 17:00:41.266 00:00:10.328 TCP 23.104.0.1:60408 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:01:04.408 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56930 11 6492 1 2025-11-24 17:01:41.628 00:00:10.374 TCP 23.104.0.1:51400 -> 1.101.0.1:3000 11 1507 1 2025-11-24 16:57:07.462 00:05:55.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 16:57:07.459 00:05:55.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 17:02:04.622 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55104 10 6452 1 2025-11-24 17:02:19.794 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 17:02:19.782 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 17:02:42.032 00:00:10.364 TCP 23.104.0.1:42208 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:03:04.835 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50182 10 6452 1 2025-11-24 17:03:42.433 00:00:10.365 TCP 23.104.0.1:58478 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:04:05.079 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33164 10 6452 1 2025-11-24 17:04:42.835 00:00:10.383 TCP 23.104.0.1:53550 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:05:05.303 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60874 10 6452 1 2025-11-24 17:05:43.257 00:00:10.326 TCP 23.104.0.1:36586 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:06:05.521 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60772 10 6452 1 2025-11-24 17:06:43.622 00:00:10.364 TCP 23.104.0.1:42056 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:07:05.734 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46556 12 6556 1 2025-11-24 17:07:19.429 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 17:07:19.701 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 17:07:44.030 00:00:10.363 TCP 23.104.0.1:49876 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:03:07.466 00:05:55.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 17:03:07.464 00:05:55.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 17:08:05.952 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:40956 12 6556 1 2025-11-24 17:08:44.427 00:00:10.381 TCP 23.104.0.1:45972 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:09:06.193 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37760 10 6452 1 2025-11-24 17:09:44.847 00:00:10.385 TCP 23.104.0.1:33788 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:10:06.411 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49320 10 6452 1 2025-11-24 17:10:45.271 00:00:10.382 TCP 23.104.0.1:48332 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:11:06.652 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48096 10 6452 1 2025-11-24 17:11:45.692 00:00:10.531 TCP 23.104.0.1:50694 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:12:19.807 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 17:12:06.890 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52646 10 6452 1 2025-11-24 17:12:19.719 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 17:12:46.267 00:00:10.367 TCP 23.104.0.1:47976 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:13:07.126 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46866 10 6452 1 2025-11-24 17:13:46.672 00:00:10.322 TCP 23.104.0.1:56012 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:09:07.466 00:05:55.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 17:09:07.463 00:05:55.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 17:14:07.337 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45424 10 6452 1 2025-11-24 17:14:47.030 00:00:10.367 TCP 23.104.0.1:51006 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:15:07.558 00:00:18.410 TCP 1.101.0.1:3000 -> 22.102.0.1:33496 10 6452 1 2025-11-24 17:15:47.434 00:00:10.331 TCP 23.104.0.1:33846 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:16:16.021 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39402 12 6556 1 2025-11-24 17:16:47.804 00:00:10.367 TCP 23.104.0.1:34406 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:17:19.762 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 17:17:20.068 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 17:17:16.238 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55560 10 6452 1 2025-11-24 17:17:48.210 00:00:10.325 TCP 23.104.0.1:47130 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:18:16.417 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:56792 10 6452 1 2025-11-24 17:18:48.571 00:00:10.364 TCP 23.104.0.1:46286 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:19:16.654 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37982 10 6452 1 2025-11-24 17:19:48.973 00:00:10.375 TCP 23.104.0.1:51426 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:15:07.464 00:05:55.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 17:15:07.467 00:05:55.768 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 17:20:16.875 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:33004 10 6452 1 2025-11-24 17:20:49.385 00:00:10.330 TCP 23.104.0.1:46618 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:21:17.107 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44794 10 6452 1 2025-11-24 17:21:49.755 00:00:10.387 TCP 23.104.0.1:41966 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:22:19.925 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 17:22:20.066 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 17:22:17.330 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39936 10 6452 1 2025-11-24 17:22:50.177 00:00:10.363 TCP 23.104.0.1:33558 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:23:17.502 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36336 10 6452 1 2025-11-24 17:23:50.579 00:00:10.339 TCP 23.104.0.1:52356 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:24:17.721 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53540 10 6452 1 2025-11-24 17:24:50.957 00:00:10.319 TCP 23.104.0.1:35518 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:25:17.939 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55900 10 6452 1 2025-11-24 17:25:51.318 00:00:10.444 TCP 23.104.0.1:32850 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:21:07.467 00:05:55.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 17:21:07.469 00:05:55.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 17:26:18.173 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35408 10 6452 1 2025-11-24 17:26:51.802 00:00:10.368 TCP 23.104.0.1:40678 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:27:20.573 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 17:27:20.187 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 17:27:18.387 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:51946 10 6452 1 2025-11-24 17:27:52.207 00:00:10.360 TCP 23.104.0.1:58002 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:28:18.558 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59662 10 6452 1 2025-11-24 17:28:52.604 00:00:10.368 TCP 23.104.0.1:32804 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:29:18.774 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43728 10 6452 1 2025-11-24 17:29:53.008 00:00:10.363 TCP 23.104.0.1:42882 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:30:18.988 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:38630 10 6452 1 2025-11-24 17:30:53.413 00:00:10.367 TCP 23.104.0.1:55266 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:31:19.229 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45428 10 6452 1 2025-11-24 17:27:07.472 00:05:55.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 17:31:53.814 00:00:10.366 TCP 23.104.0.1:44520 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:27:07.469 00:05:55.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 17:32:20.132 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 17:32:20.078 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 17:32:19.437 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48822 10 6452 1 2025-11-24 17:32:54.221 00:00:10.372 TCP 23.104.0.1:39414 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:33:19.647 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35754 10 6452 1 2025-11-24 17:33:54.623 00:00:10.359 TCP 23.104.0.1:33312 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:34:19.859 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41864 12 6556 1 2025-11-24 17:34:55.025 00:00:10.365 TCP 23.104.0.1:36876 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:35:20.085 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:33056 10 6452 1 2025-11-24 17:35:55.427 00:00:10.365 TCP 23.104.0.1:36030 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:36:20.295 00:00:10.523 TCP 1.101.0.1:3000 -> 22.102.0.1:44920 10 6452 1 2025-11-24 17:36:55.830 00:00:10.389 TCP 23.104.0.1:50182 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:37:20.616 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 17:37:20.512 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 17:37:20.868 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:50534 10 6452 1 2025-11-24 17:33:07.476 00:05:55.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 17:33:07.472 00:05:55.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 17:37:56.255 00:00:10.365 TCP 23.104.0.1:52410 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:38:21.112 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43384 10 6452 1 2025-11-24 17:38:56.660 00:00:10.370 TCP 23.104.0.1:47642 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:39:21.338 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37812 10 6452 1 2025-11-24 17:39:57.088 00:00:10.331 TCP 23.104.0.1:55218 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:40:21.561 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51384 10 6452 1 2025-11-24 17:40:57.457 00:00:10.374 TCP 23.104.0.1:45866 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:41:21.776 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54038 10 6452 1 2025-11-24 17:41:57.866 00:00:10.328 TCP 23.104.0.1:33448 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:42:20.319 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 17:42:20.468 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 17:42:21.990 00:00:10.699 TCP 1.101.0.1:3000 -> 22.102.0.1:57922 10 6452 1 2025-11-24 17:42:58.238 00:00:10.330 TCP 23.104.0.1:40148 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:43:22.739 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33170 10 6452 1 2025-11-24 17:39:07.476 00:05:55.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 17:39:07.479 00:05:55.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 17:43:58.606 00:00:10.366 TCP 23.104.0.1:56902 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:44:22.954 00:00:10.245 TCP 1.101.0.1:3000 -> 22.102.0.1:35958 10 6452 1 2025-11-24 17:44:59.013 00:00:10.324 TCP 23.104.0.1:58972 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:45:23.236 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42846 10 6452 1 2025-11-24 17:45:59.376 00:00:10.326 TCP 23.104.0.1:33738 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:46:23.447 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36180 10 6452 1 2025-11-24 17:46:59.740 00:00:10.364 TCP 23.104.0.1:35116 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:47:20.423 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 17:47:20.577 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 17:47:23.674 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40768 10 6452 1 2025-11-24 17:48:00.142 00:00:10.367 TCP 23.104.0.1:55718 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:48:23.903 00:00:10.272 TCP 1.101.0.1:3000 -> 22.102.0.1:49802 14 6660 1 2025-11-24 17:49:00.554 00:00:10.331 TCP 23.104.0.1:36348 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:49:24.236 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60012 12 6556 1 2025-11-24 17:45:07.487 00:05:55.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 17:45:07.489 00:05:55.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 17:50:00.923 00:00:10.388 TCP 23.104.0.1:57264 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:50:24.469 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60276 10 6452 1 2025-11-24 17:51:01.350 00:00:10.362 TCP 23.104.0.1:56168 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:51:24.695 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39194 10 6452 1 2025-11-24 17:52:20.848 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 17:52:01.750 00:00:10.361 TCP 23.104.0.1:38616 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:52:20.769 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 17:52:24.922 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41076 10 6452 1 2025-11-24 17:53:02.148 00:00:10.329 TCP 23.104.0.1:53758 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:53:25.132 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53278 10 6452 1 2025-11-24 17:54:02.516 00:00:10.376 TCP 23.104.0.1:54950 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:54:25.340 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-11-24 17:55:02.935 00:00:10.356 TCP 23.104.0.1:36406 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:55:25.553 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36840 10 6452 1 2025-11-24 17:51:07.487 00:05:55.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 17:51:07.490 00:05:55.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 17:56:03.344 00:00:10.379 TCP 23.104.0.1:57484 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:56:25.768 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59578 10 6452 1 2025-11-24 17:57:03.762 00:00:10.369 TCP 23.104.0.1:44410 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:57:20.699 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 17:57:20.813 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 17:57:25.992 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57628 10 6452 1 2025-11-24 17:58:04.176 00:00:10.365 TCP 23.104.0.1:59304 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:58:26.223 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34726 10 6452 1 Summary: total flows: 163, total bytes: 497609, total packets: 1576, avg bps: 1079, avg pps: 0, avg bpp: 315 Time window: 2025-11-24 16:57:07 - 2025-11-24 17:58:36 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0024s Wall: 0.0026s flows/second: 61881.9 Runtime: 0.0027s