Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 06:58:50.554 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53592 10 6452 1 2025-11-25 06:59:01.418 00:00:11.093 TCP 23.104.0.1:38108 -> 1.101.0.1:3000 11 1507 1 2025-11-25 06:59:50.777 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37578 10 6452 1 2025-11-25 07:00:02.549 00:00:10.368 TCP 23.104.0.1:42936 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:00:50.997 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59132 10 6452 1 2025-11-25 07:01:02.954 00:00:10.375 TCP 23.104.0.1:55198 -> 1.101.0.1:3000 11 1507 1 2025-11-25 06:57:07.759 00:05:55.724 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 07:01:51.229 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56778 10 6452 1 2025-11-25 06:57:07.764 00:05:55.718 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 07:02:03.365 00:00:10.363 TCP 23.104.0.1:34394 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:02:36.486 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:02:36.633 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 07:02:51.449 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53122 10 6452 1 2025-11-25 07:03:03.764 00:00:10.377 TCP 23.104.0.1:49556 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:03:51.661 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46430 10 6452 1 2025-11-25 07:04:04.176 00:00:10.364 TCP 23.104.0.1:56098 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:04:51.875 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50464 10 6452 1 2025-11-25 07:05:04.576 00:00:10.329 TCP 23.104.0.1:33064 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:05:52.101 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42018 10 6452 1 2025-11-25 07:06:04.947 00:00:10.332 TCP 23.104.0.1:55422 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:06:52.315 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43402 10 6452 1 2025-11-25 07:07:05.318 00:00:10.417 TCP 23.104.0.1:42164 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:07:36.580 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:07:36.269 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 07:03:07.762 00:05:55.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 07:07:52.489 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47494 10 6452 1 2025-11-25 07:03:07.765 00:05:55.719 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 07:08:05.773 00:00:10.377 TCP 23.104.0.1:38072 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:08:52.700 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44762 10 6452 1 2025-11-25 07:09:06.181 00:00:10.325 TCP 23.104.0.1:46702 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:09:52.915 00:00:10.574 TCP 1.101.0.1:3000 -> 22.102.0.1:59076 10 6452 1 2025-11-25 07:10:06.552 00:00:10.322 TCP 23.104.0.1:33338 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:10:53.532 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33284 10 6452 1 2025-11-25 07:11:06.911 00:00:10.355 TCP 23.104.0.1:49916 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:11:53.747 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52522 10 6452 1 2025-11-25 07:12:07.301 00:00:10.366 TCP 23.104.0.1:40122 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:12:36.698 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 07:12:36.620 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:12:53.959 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46186 10 6452 1 2025-11-25 07:13:07.704 00:00:10.369 TCP 23.104.0.1:54888 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:09:07.765 00:05:55.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 07:09:07.768 00:05:55.721 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 07:13:54.194 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55436 10 6452 1 2025-11-25 07:14:08.110 00:00:10.362 TCP 23.104.0.1:56104 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:14:54.375 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44878 10 6452 1 2025-11-25 07:15:08.509 00:00:10.369 TCP 23.104.0.1:42908 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:15:54.598 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41970 10 6452 1 2025-11-25 07:16:08.918 00:00:10.366 TCP 23.104.0.1:52578 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:16:54.818 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53192 10 6452 1 2025-11-25 07:17:09.326 00:00:10.321 TCP 23.104.0.1:52766 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:17:37.187 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:17:37.222 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 07:17:55.056 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:50754 10 6452 1 2025-11-25 07:18:09.689 00:00:10.327 TCP 23.104.0.1:43880 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:18:55.243 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34768 10 6452 1 2025-11-25 07:19:10.062 00:00:10.364 TCP 23.104.0.1:47638 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:15:07.767 00:05:55.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 07:19:55.454 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36184 10 6452 1 2025-11-25 07:15:07.770 00:05:55.722 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 07:20:10.464 00:00:10.364 TCP 23.104.0.1:52130 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:20:55.664 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36554 10 6452 1 2025-11-25 07:21:10.866 00:00:10.370 TCP 23.104.0.1:50710 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:21:55.859 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52842 10 6452 1 2025-11-25 07:22:11.278 00:00:10.367 TCP 23.104.0.1:58458 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:22:36.895 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:22:36.873 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 07:22:56.085 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56810 10 6452 1 2025-11-25 07:23:11.680 00:00:10.371 TCP 23.104.0.1:59582 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:23:56.296 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46646 10 6452 1 2025-11-25 07:24:12.130 00:00:10.670 TCP 23.104.0.1:49162 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:24:56.509 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44024 10 6452 1 2025-11-25 07:25:12.848 00:00:10.378 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:25:56.721 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58334 10 6452 1 2025-11-25 07:21:07.771 00:05:55.722 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 07:21:07.769 00:05:55.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 07:26:13.268 00:00:10.367 TCP 23.104.0.1:39910 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:26:56.944 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37020 10 6452 1 2025-11-25 07:27:13.678 00:00:10.327 TCP 23.104.0.1:58616 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:27:36.849 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:27:36.891 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 07:27:57.178 00:00:10.727 TCP 1.101.0.1:3000 -> 22.102.0.1:37396 10 6452 1 2025-11-25 07:28:14.041 00:00:10.361 TCP 23.104.0.1:36392 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:28:57.939 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:39086 10 6452 1 2025-11-25 07:29:14.443 00:00:10.341 TCP 23.104.0.1:41220 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:29:58.186 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43310 10 6452 1 2025-11-25 07:30:14.828 00:00:10.390 TCP 23.104.0.1:54406 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:30:58.357 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50376 10 6452 1 2025-11-25 07:31:15.254 00:00:10.371 TCP 23.104.0.1:43480 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:27:07.770 00:05:55.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 07:27:07.772 00:05:55.722 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 07:31:58.571 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45200 10 6452 1 2025-11-25 07:32:15.661 00:00:10.364 TCP 23.104.0.1:54700 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:32:36.918 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 07:32:37.105 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:32:58.782 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41188 10 6452 1 2025-11-25 07:33:16.084 00:00:10.366 TCP 23.104.0.1:33164 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:33:58.996 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49670 10 6452 1 2025-11-25 07:34:16.488 00:00:10.361 TCP 23.104.0.1:42132 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:34:59.224 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58392 10 6452 1 2025-11-25 07:35:16.886 00:00:10.387 TCP 23.104.0.1:49120 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:35:59.456 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47996 10 6452 1 2025-11-25 07:36:17.312 00:00:10.365 TCP 23.104.0.1:49926 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:36:59.670 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49940 10 6452 1 2025-11-25 07:37:17.719 00:00:10.378 TCP 23.104.0.1:43964 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:37:36.922 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:37:37.269 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 07:33:07.770 00:05:55.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 07:33:07.773 00:05:55.722 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 07:37:59.899 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46336 10 6452 1 2025-11-25 07:38:18.134 00:00:10.367 TCP 23.104.0.1:33286 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:39:00.119 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51604 10 6452 1 2025-11-25 07:39:18.540 00:00:10.364 TCP 23.104.0.1:43846 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:40:00.340 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53054 10 6452 1 2025-11-25 07:40:18.946 00:00:10.367 TCP 23.104.0.1:45726 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:41:00.550 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50234 10 6452 1 2025-11-25 07:41:19.350 00:00:10.370 TCP 23.104.0.1:50322 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:42:00.774 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59482 10 6452 1 2025-11-25 07:42:19.755 00:00:10.383 TCP 23.104.0.1:57146 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:42:37.360 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:42:37.358 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 07:43:00.994 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48820 10 6452 1 2025-11-25 07:43:20.171 00:00:10.329 TCP 23.104.0.1:52798 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:39:07.772 00:05:55.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 07:39:07.774 00:05:55.722 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 07:44:01.222 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52318 10 6452 1 2025-11-25 07:44:20.537 00:00:10.367 TCP 23.104.0.1:49858 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:45:01.448 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53118 10 6452 1 2025-11-25 07:45:20.946 00:00:10.369 TCP 23.104.0.1:36998 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:46:01.660 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33522 10 6452 1 2025-11-25 07:46:21.353 00:00:10.365 TCP 23.104.0.1:49054 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:47:01.899 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33766 10 6452 1 2025-11-25 07:47:21.755 00:00:10.529 TCP 23.104.0.1:54110 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:47:37.407 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:47:37.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 07:48:02.116 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34226 10 6452 1 2025-11-25 07:48:22.319 00:00:10.369 TCP 23.104.0.1:53798 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:49:02.335 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51628 10 6452 1 2025-11-25 07:49:22.723 00:00:10.369 TCP 23.104.0.1:39730 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:45:07.802 00:05:55.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 07:45:07.800 00:05:55.702 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 07:50:02.555 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40278 10 6452 1 2025-11-25 07:50:23.127 00:00:10.364 TCP 23.104.0.1:60340 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:51:02.768 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58822 10 6452 1 2025-11-25 07:51:23.530 00:00:10.363 TCP 23.104.0.1:57004 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:52:02.985 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34030 10 6452 1 2025-11-25 07:52:23.933 00:00:10.401 TCP 23.104.0.1:50978 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:52:37.138 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:52:37.320 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 07:53:03.202 00:00:10.326 TCP 1.101.0.1:3000 -> 22.102.0.1:45746 10 6452 1 2025-11-25 07:53:24.369 00:00:10.366 TCP 23.104.0.1:39918 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:54:03.563 00:00:10.305 TCP 1.101.0.1:3000 -> 22.102.0.1:55480 10 6452 1 2025-11-25 07:54:24.774 00:00:10.370 TCP 23.104.0.1:34336 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:55:03.901 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39924 10 6452 1 2025-11-25 07:55:25.175 00:00:10.368 TCP 23.104.0.1:41792 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:51:07.804 00:05:55.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 07:51:07.803 00:05:55.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 07:56:04.124 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44988 10 6452 1 2025-11-25 07:56:25.583 00:00:10.373 TCP 23.104.0.1:55892 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:57:04.346 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53564 10 6452 1 2025-11-25 07:57:37.577 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 07:57:25.994 00:00:10.362 TCP 23.104.0.1:46482 -> 1.101.0.1:3000 11 1507 1 2025-11-25 07:57:37.512 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 07:58:04.567 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59872 10 6452 1 2025-11-25 07:58:26.402 00:00:10.321 TCP 23.104.0.1:54238 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1080, avg pps: 0, avg bpp: 317 Time window: 2025-11-25 06:57:07 - 2025-11-25 07:58:36 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0021s User: 0.0032s Wall: 0.0021s flows/second: 79614.1 Runtime: 0.0021s