Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 00:59:17.302 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51798 10 6452 1 2025-11-25 00:59:22.416 00:00:10.363 TCP 23.104.0.1:46052 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:00:17.474 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37138 10 6452 1 2025-11-25 01:00:22.822 00:00:10.369 TCP 23.104.0.1:58264 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:01:17.694 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49018 10 6452 1 2025-11-25 01:01:23.224 00:00:10.323 TCP 23.104.0.1:34904 -> 1.101.0.1:3000 11 1507 1 2025-11-25 00:57:07.622 00:05:55.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 00:57:07.625 00:05:55.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 01:02:17.870 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56122 10 6452 1 2025-11-25 01:02:29.337 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 01:02:29.158 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 01:02:23.584 00:00:10.748 TCP 23.104.0.1:58556 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:03:18.068 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40838 10 6452 1 2025-11-25 01:03:24.369 00:00:10.364 TCP 23.104.0.1:37266 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:04:18.248 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41800 10 6452 1 2025-11-25 01:04:24.771 00:00:10.330 TCP 23.104.0.1:55022 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:05:18.464 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43074 10 6452 1 2025-11-25 01:05:25.138 00:00:10.362 TCP 23.104.0.1:46782 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:06:18.676 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36582 12 6556 1 2025-11-25 01:06:25.537 00:00:10.324 TCP 23.104.0.1:42472 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:07:29.043 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 01:07:18.892 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40322 10 6452 1 2025-11-25 01:07:29.239 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 01:07:25.902 00:00:18.805 TCP 23.104.0.1:55724 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:03:07.625 00:05:55.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 01:03:07.622 00:05:55.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 01:08:19.110 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52668 10 6452 1 2025-11-25 01:08:34.744 00:00:10.367 TCP 23.104.0.1:40476 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:09:19.320 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49638 10 6452 1 2025-11-25 01:09:35.146 00:00:10.363 TCP 23.104.0.1:32880 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:10:19.530 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49900 10 6452 1 2025-11-25 01:10:35.546 00:00:10.365 TCP 23.104.0.1:46394 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:11:19.709 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:44592 12 10375 1 2025-11-25 01:11:35.952 00:00:10.447 TCP 23.104.0.1:50554 -> 1.101.0.1:3000 15 1926 1 2025-11-25 01:12:19.946 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44262 10 6452 1 2025-11-25 01:12:29.491 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 01:12:29.465 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 01:12:36.441 00:00:10.361 TCP 23.104.0.1:56378 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:13:20.177 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50680 10 6452 1 2025-11-25 01:13:36.843 00:00:10.404 TCP 23.104.0.1:35042 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:09:07.624 00:05:55.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 01:09:07.627 00:05:55.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 01:14:20.395 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50710 10 6452 1 2025-11-25 01:14:37.269 00:00:10.364 TCP 23.104.0.1:43118 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:15:20.605 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45338 10 6452 1 2025-11-25 01:15:37.675 00:00:10.326 TCP 23.104.0.1:38464 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:16:20.818 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54442 10 6452 1 2025-11-25 01:16:38.046 00:00:10.323 TCP 23.104.0.1:40872 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:17:20.986 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43276 10 6452 1 2025-11-25 01:17:29.383 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 01:17:29.564 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 01:17:38.413 00:00:10.362 TCP 23.104.0.1:54150 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:18:21.218 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53236 10 6452 1 2025-11-25 01:18:38.818 00:00:10.365 TCP 23.104.0.1:36780 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:19:21.438 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54424 10 6452 1 2025-11-25 01:19:39.222 00:00:10.363 TCP 23.104.0.1:54928 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:15:07.628 00:05:55.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 01:15:07.625 00:05:55.770 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 01:20:21.648 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60954 10 6452 1 2025-11-25 01:20:39.624 00:00:10.363 TCP 23.104.0.1:47002 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:21:21.865 00:00:10.294 TCP 1.101.0.1:3000 -> 22.102.0.1:52266 10 6452 1 2025-11-25 01:21:40.022 00:00:10.323 TCP 23.104.0.1:33954 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:22:29.913 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 01:22:29.875 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 01:22:22.193 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39322 10 6452 1 2025-11-25 01:22:40.381 00:00:10.361 TCP 23.104.0.1:54416 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:23:22.405 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56960 10 6452 1 2025-11-25 01:23:40.778 00:00:10.364 TCP 23.104.0.1:54040 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:24:22.617 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37096 10 6452 1 2025-11-25 01:24:41.186 00:00:10.365 TCP 23.104.0.1:58302 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:25:22.855 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49456 10 6452 1 2025-11-25 01:25:41.587 00:00:10.367 TCP 23.104.0.1:57520 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:21:07.629 00:05:55.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 01:21:07.629 00:05:55.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 01:26:23.083 00:00:10.271 TCP 1.101.0.1:3000 -> 22.102.0.1:50632 10 6452 1 2025-11-25 01:26:41.991 00:00:10.366 TCP 23.104.0.1:52468 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:27:29.689 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 01:27:29.755 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 01:27:23.396 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59538 10 6452 1 2025-11-25 01:27:42.394 00:00:10.368 TCP 23.104.0.1:37792 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:28:23.606 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55908 10 6452 1 2025-11-25 01:28:42.799 00:00:10.375 TCP 23.104.0.1:57158 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:29:23.813 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52608 10 6452 1 2025-11-25 01:29:43.223 00:00:10.363 TCP 23.104.0.1:33574 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:30:24.034 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:58056 10 6452 1 2025-11-25 01:30:43.623 00:00:10.324 TCP 23.104.0.1:48046 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:31:24.216 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:54382 10 6452 1 2025-11-25 01:31:43.983 00:00:10.371 TCP 23.104.0.1:34424 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:27:07.632 00:05:55.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 01:27:07.629 00:05:55.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 01:32:30.020 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 01:32:29.932 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 01:32:24.424 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33130 10 6452 1 2025-11-25 01:32:44.393 00:00:10.371 TCP 23.104.0.1:58950 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:33:24.646 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59918 10 6452 1 2025-11-25 01:33:44.811 00:00:10.385 TCP 23.104.0.1:57980 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:34:24.869 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:39876 10 6452 1 2025-11-25 01:34:45.243 00:00:10.367 TCP 23.104.0.1:55418 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:35:25.089 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55120 10 6452 1 2025-11-25 01:35:45.647 00:00:10.368 TCP 23.104.0.1:39430 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:36:25.303 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:41208 10 6452 1 2025-11-25 01:36:46.064 00:00:10.368 TCP 23.104.0.1:47448 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:37:29.974 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 01:37:29.909 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 01:37:25.559 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:34148 10 6452 1 2025-11-25 01:37:46.470 00:00:10.364 TCP 23.104.0.1:36980 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:33:07.631 00:05:55.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 01:33:07.634 00:05:55.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 01:38:25.743 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37044 10 6452 1 2025-11-25 01:38:46.888 00:00:10.377 TCP 23.104.0.1:57982 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:39:25.915 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44616 10 6452 1 2025-11-25 01:39:47.301 00:00:10.364 TCP 23.104.0.1:45826 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:40:26.124 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44228 10 6452 1 2025-11-25 01:40:47.702 00:00:10.368 TCP 23.104.0.1:41910 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:41:26.365 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34942 10 6452 1 2025-11-25 01:41:48.107 00:00:10.318 TCP 23.104.0.1:34526 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:42:30.313 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 01:42:30.410 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 01:42:26.536 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33602 10 6452 1 2025-11-25 01:42:48.464 00:00:10.360 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:43:26.762 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55598 10 6452 1 2025-11-25 01:43:48.862 00:00:10.375 TCP 23.104.0.1:51382 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:39:07.632 00:05:55.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 01:39:07.636 00:05:55.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 01:44:26.976 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:49568 11 6492 1 2025-11-25 01:44:49.273 00:00:10.369 TCP 23.104.0.1:38074 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:45:27.212 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57682 10 6452 1 2025-11-25 01:45:49.674 00:00:10.327 TCP 23.104.0.1:39516 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:46:27.431 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53776 10 6452 1 2025-11-25 01:46:50.044 00:00:10.329 TCP 23.104.0.1:34354 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:47:30.173 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 01:47:29.966 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 01:47:27.642 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49684 10 6452 1 2025-11-25 01:47:50.405 00:00:10.329 TCP 23.104.0.1:44468 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:48:27.862 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35800 10 6452 1 2025-11-25 01:48:50.769 00:00:10.368 TCP 23.104.0.1:54978 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:49:28.089 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45032 10 6452 1 2025-11-25 01:49:51.170 00:00:10.324 TCP 23.104.0.1:56316 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:45:07.634 00:05:55.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 01:45:07.637 00:05:55.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 01:50:28.305 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33688 10 6452 1 2025-11-25 01:50:51.530 00:00:10.370 TCP 23.104.0.1:52100 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:51:28.521 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:51444 11 6504 1 2025-11-25 01:51:51.938 00:00:10.379 TCP 23.104.0.1:36284 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:52:30.161 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 01:52:30.290 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 01:52:28.782 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39020 10 6452 1 2025-11-25 01:52:52.353 00:00:10.364 TCP 23.104.0.1:52612 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:53:28.998 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35720 10 6452 1 2025-11-25 01:53:52.757 00:00:10.534 TCP 23.104.0.1:49884 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:54:29.221 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33140 10 6452 1 2025-11-25 01:54:53.334 00:00:10.364 TCP 23.104.0.1:42344 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:55:29.437 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55486 10 6452 1 2025-11-25 01:51:07.639 00:05:55.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 01:55:53.739 00:00:10.370 TCP 23.104.0.1:33296 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:51:07.641 00:05:55.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 01:56:29.616 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37628 10 6452 1 2025-11-25 01:56:54.143 00:00:10.366 TCP 23.104.0.1:53778 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:57:30.151 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 01:57:30.264 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 01:57:29.827 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46690 10 6452 1 2025-11-25 01:57:54.543 00:00:10.335 TCP 23.104.0.1:35184 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:58:30.049 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36042 10 6452 1 Summary: total flows: 163, total bytes: 501379, total packets: 1571, avg bps: 1086, avg pps: 0, avg bpp: 319 Time window: 2025-11-25 00:57:07 - 2025-11-25 01:58:40 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0049s User: 0.0016s Wall: 0.0022s flows/second: 74669.2 Runtime: 0.0022s