Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 14:58:53.196 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33170 10 6452 1 2025-11-25 14:59:20.466 00:00:10.320 TCP 23.104.0.1:38986 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:59:53.409 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40620 10 6452 1 2025-11-25 15:00:20.825 00:00:10.363 TCP 23.104.0.1:57726 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:00:53.617 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50212 10 6452 1 2025-11-25 15:01:21.223 00:00:10.371 TCP 23.104.0.1:41172 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:57:07.932 00:05:55.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 15:01:53.833 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57808 10 6452 1 2025-11-25 14:57:07.934 00:05:55.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 15:02:21.638 00:00:10.364 TCP 23.104.0.1:44332 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:02:45.910 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 15:02:46.159 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 15:02:54.066 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43026 10 6452 1 2025-11-25 15:03:22.060 00:00:10.366 TCP 23.104.0.1:60188 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:03:54.236 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41034 10 6452 1 2025-11-25 15:04:22.468 00:00:10.377 TCP 23.104.0.1:50860 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:04:54.414 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53252 10 6452 1 2025-11-25 15:05:22.885 00:00:10.385 TCP 23.104.0.1:48980 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:05:54.640 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44110 10 6452 1 2025-11-25 15:06:23.308 00:00:10.414 TCP 23.104.0.1:38580 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:06:54.855 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34104 10 6452 1 2025-11-25 15:07:23.758 00:00:10.382 TCP 23.104.0.1:55036 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:07:46.283 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 15:07:46.194 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 15:07:55.084 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46604 10 6452 1 2025-11-25 15:03:07.936 00:05:55.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 15:03:07.934 00:05:55.701 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 15:08:24.182 00:00:10.373 TCP 23.104.0.1:57930 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:08:55.296 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:34878 10 6452 1 2025-11-25 15:09:24.593 00:00:10.377 TCP 23.104.0.1:41232 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:09:55.548 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:47782 10 6452 1 2025-11-25 15:10:25.011 00:00:10.365 TCP 23.104.0.1:60824 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:10:55.746 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:59472 12 10375 1 2025-11-25 15:11:25.412 00:00:10.446 TCP 23.104.0.1:56066 -> 1.101.0.1:3000 15 1926 1 2025-11-25 15:11:55.984 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58612 10 6452 1 2025-11-25 15:12:25.899 00:00:10.367 TCP 23.104.0.1:41156 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:12:46.342 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 15:12:46.392 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 15:12:56.213 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:47648 10 6452 1 2025-11-25 15:13:26.301 00:00:10.370 TCP 23.104.0.1:42726 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:13:56.435 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36018 10 6452 1 2025-11-25 15:09:07.938 00:05:55.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 15:09:07.936 00:05:55.703 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 15:14:26.706 00:00:10.376 TCP 23.104.0.1:54962 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:14:56.651 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34704 10 6452 1 2025-11-25 15:15:27.118 00:00:10.379 TCP 23.104.0.1:51004 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:15:56.863 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:34014 10 6452 1 2025-11-25 15:16:27.528 00:00:10.331 TCP 23.104.0.1:40674 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:16:57.104 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40532 10 6452 1 2025-11-25 15:17:27.895 00:00:10.374 TCP 23.104.0.1:48010 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:17:46.245 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 15:17:46.435 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 15:17:57.328 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37650 10 6452 1 2025-11-25 15:18:28.304 00:00:10.321 TCP 23.104.0.1:53310 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:18:57.551 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59314 10 6452 1 2025-11-25 15:19:28.670 00:00:10.391 TCP 23.104.0.1:34930 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:15:07.937 00:05:55.701 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 15:15:07.939 00:05:55.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 15:19:57.769 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45886 10 6452 1 2025-11-25 15:20:29.107 00:00:10.370 TCP 23.104.0.1:36718 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:20:57.990 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:41354 12 10369 1 2025-11-25 15:21:29.515 00:00:10.436 TCP 23.104.0.1:39306 -> 1.101.0.1:3000 15 1926 1 2025-11-25 15:21:58.249 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54992 10 6452 1 2025-11-25 15:22:29.994 00:00:10.323 TCP 23.104.0.1:36080 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:22:46.564 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 15:22:46.515 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 15:22:58.468 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:47986 10 6452 1 2025-11-25 15:23:30.355 00:00:10.329 TCP 23.104.0.1:45958 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:23:58.702 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48846 10 6452 1 2025-11-25 15:24:30.717 00:00:10.373 TCP 23.104.0.1:37950 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:24:58.911 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35588 10 6452 1 2025-11-25 15:25:31.130 00:00:10.324 TCP 23.104.0.1:45338 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:21:07.938 00:05:55.702 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 15:21:07.940 00:05:55.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 15:25:59.120 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55138 10 6452 1 2025-11-25 15:26:31.492 00:00:10.370 TCP 23.104.0.1:60356 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:26:59.341 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:51224 10 6452 1 2025-11-25 15:27:46.479 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 15:27:31.900 00:00:10.369 TCP 23.104.0.1:35124 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:27:46.538 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 15:27:59.511 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48866 10 6452 1 2025-11-25 15:28:32.316 00:00:10.364 TCP 23.104.0.1:36796 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:28:59.738 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41918 10 6452 1 2025-11-25 15:29:32.718 00:00:10.376 TCP 23.104.0.1:39916 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:29:59.961 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42544 10 6452 1 2025-11-25 15:30:33.133 00:00:10.363 TCP 23.104.0.1:49368 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:31:00.198 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57200 10 6452 1 2025-11-25 15:31:33.533 00:00:10.330 TCP 23.104.0.1:48890 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:27:07.941 00:05:55.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 15:27:07.944 00:05:55.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 15:32:00.377 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36240 10 6452 1 2025-11-25 15:32:46.700 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 15:32:33.903 00:00:10.327 TCP 23.104.0.1:49942 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:32:46.779 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 15:33:00.558 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45270 10 6452 1 2025-11-25 15:33:34.274 00:00:10.369 TCP 23.104.0.1:56592 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:34:00.779 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54674 10 6452 1 2025-11-25 15:34:34.685 00:00:10.364 TCP 23.104.0.1:59016 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:35:01.004 00:00:10.765 TCP 1.101.0.1:3000 -> 22.102.0.1:47072 10 6452 1 2025-11-25 15:35:35.103 00:00:10.368 TCP 23.104.0.1:34176 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:36:01.810 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33724 10 6452 1 2025-11-25 15:36:35.509 00:00:10.364 TCP 23.104.0.1:43834 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:37:01.988 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:39774 10 6452 1 2025-11-25 15:37:46.839 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 15:37:35.916 00:00:10.366 TCP 23.104.0.1:37630 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:37:46.983 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 15:33:07.943 00:05:55.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 15:33:07.946 00:05:55.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 15:38:02.196 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49438 10 6452 1 2025-11-25 15:38:36.322 00:00:10.364 TCP 23.104.0.1:47038 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:39:02.420 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36408 10 6452 1 2025-11-25 15:39:36.726 00:00:10.326 TCP 23.104.0.1:48968 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:40:02.650 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46724 10 6452 1 2025-11-25 15:40:37.099 00:00:10.363 TCP 23.104.0.1:60178 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:41:02.871 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58164 10 6452 1 2025-11-25 15:41:37.501 00:00:10.365 TCP 23.104.0.1:50540 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:42:03.105 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50378 10 6452 1 2025-11-25 15:42:46.950 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 15:42:46.830 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 15:42:37.906 00:00:10.339 TCP 23.104.0.1:43506 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:43:03.326 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:34106 10 6452 1 2025-11-25 15:43:38.288 00:00:10.321 TCP 23.104.0.1:35486 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:39:07.946 00:05:55.699 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 15:39:07.949 00:05:55.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 15:44:03.515 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42368 10 6452 1 2025-11-25 15:44:38.651 00:00:10.368 TCP 23.104.0.1:48778 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:45:03.722 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40440 10 6452 1 2025-11-25 15:45:39.087 00:00:10.362 TCP 23.104.0.1:40636 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:46:03.961 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39154 12 6556 1 2025-11-25 15:46:39.487 00:00:10.373 TCP 23.104.0.1:40764 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:47:04.190 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:35090 10 6452 1 2025-11-25 15:47:47.017 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 15:47:46.704 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 15:47:39.910 00:00:10.371 TCP 23.104.0.1:54590 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:48:04.396 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43090 10 6452 1 2025-11-25 15:48:40.321 00:00:10.690 TCP 23.104.0.1:59514 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:49:04.618 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54382 10 6452 1 2025-11-25 15:49:41.061 00:00:10.365 TCP 23.104.0.1:50034 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:45:07.949 00:05:55.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 15:45:07.947 00:05:55.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 15:50:04.788 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56768 10 6452 1 2025-11-25 15:50:41.471 00:00:10.366 TCP 23.104.0.1:50734 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:51:04.999 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49036 10 6452 1 2025-11-25 15:51:41.879 00:00:10.380 TCP 23.104.0.1:46232 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:52:05.214 00:00:10.818 TCP 1.101.0.1:3000 -> 22.102.0.1:37102 10 6452 1 2025-11-25 15:52:47.107 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 15:52:47.089 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 15:52:42.331 00:00:10.321 TCP 23.104.0.1:44408 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:53:06.076 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54832 10 6452 1 2025-11-25 15:53:42.692 00:00:10.369 TCP 23.104.0.1:36856 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:54:06.293 00:00:10.649 TCP 1.101.0.1:3000 -> 22.102.0.1:51156 10 6452 1 2025-11-25 15:54:43.104 00:00:10.363 TCP 23.104.0.1:50484 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:55:06.977 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:58872 10 6452 1 2025-11-25 15:55:43.504 00:00:10.804 TCP 23.104.0.1:40476 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:51:07.951 00:05:55.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 15:51:07.948 00:05:55.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 15:56:07.214 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56126 10 6452 1 2025-11-25 15:56:44.352 00:00:10.495 TCP 23.104.0.1:36094 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:57:07.434 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46938 10 6452 1 2025-11-25 15:57:46.934 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 15:57:47.226 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 15:57:44.886 00:00:10.377 TCP 23.104.0.1:34380 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:58:07.657 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55978 10 6452 1 Summary: total flows: 163, total bytes: 505623, total packets: 1575, avg bps: 1102, avg pps: 0, avg bpp: 321 Time window: 2025-11-25 14:57:07 - 2025-11-25 15:58:17 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0021s Wall: 0.0021s flows/second: 76955.4 Runtime: 0.0021s