Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 23:59:13.183 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59372 10 6452 1 2025-11-25 23:59:32.876 00:00:10.534 TCP 23.104.0.1:36886 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:00:13.397 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48200 10 6452 1 2025-11-26 00:00:33.449 00:00:10.366 TCP 23.104.0.1:48260 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:57:03.782 00:05:04.391 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 23:57:03.786 00:05:04.386 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 00:01:13.567 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52394 10 6452 1 2025-11-26 00:01:33.853 00:00:10.340 TCP 23.104.0.1:33142 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:02:13.785 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:47832 10 6452 1 2025-11-26 00:02:34.229 00:00:10.368 TCP 23.104.0.1:55000 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:02:56.787 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 00:02:56.974 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 00:03:13.991 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40554 10 6452 1 2025-11-26 00:03:34.637 00:00:10.364 TCP 23.104.0.1:59786 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:04:14.214 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54090 10 6452 1 2025-11-26 00:04:35.044 00:00:10.329 TCP 23.104.0.1:41144 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:05:14.423 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53344 10 6452 1 2025-11-26 00:05:35.425 00:00:10.321 TCP 23.104.0.1:51142 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:06:14.605 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36662 10 6452 1 2025-11-26 00:06:35.789 00:00:10.368 TCP 23.104.0.1:41782 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:03:03.784 00:05:04.391 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 00:03:03.786 00:05:04.386 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 00:07:14.816 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34680 10 6452 1 2025-11-26 00:07:36.196 00:00:10.371 TCP 23.104.0.1:37700 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:07:56.835 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 00:07:56.725 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 00:08:15.040 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37722 10 6452 1 2025-11-26 00:08:36.612 00:00:10.375 TCP 23.104.0.1:39198 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:09:15.215 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48776 11 6504 1 2025-11-26 00:09:37.031 00:00:10.365 TCP 23.104.0.1:49364 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:10:15.442 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46072 10 6452 1 2025-11-26 00:10:37.436 00:00:10.368 TCP 23.104.0.1:55574 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:11:15.658 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45842 10 6452 1 2025-11-26 00:11:37.843 00:00:10.555 TCP 23.104.0.1:46260 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:12:15.871 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:48804 10 6452 1 2025-11-26 00:12:38.438 00:00:10.363 TCP 23.104.0.1:58852 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:12:56.924 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 00:12:57.228 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 00:09:03.784 00:05:04.391 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 00:09:03.788 00:05:04.386 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 00:13:16.076 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42690 10 6452 1 2025-11-26 00:13:38.838 00:00:10.399 TCP 23.104.0.1:59216 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:14:16.247 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34424 10 6452 1 2025-11-26 00:14:39.276 00:00:10.632 TCP 23.104.0.1:43232 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:15:16.466 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45370 10 6452 1 2025-11-26 00:15:39.963 00:00:10.388 TCP 23.104.0.1:56926 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:16:16.642 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41700 10 6452 1 2025-11-26 00:16:40.392 00:00:10.360 TCP 23.104.0.1:37946 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:17:16.854 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49688 10 6452 1 2025-11-26 00:17:40.789 00:00:10.374 TCP 23.104.0.1:45206 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:17:57.463 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 00:17:57.429 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 00:18:17.081 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48010 10 6452 1 2025-11-26 00:18:41.202 00:00:10.365 TCP 23.104.0.1:38788 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:15:03.786 00:05:04.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 00:15:03.788 00:05:04.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 00:19:17.301 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60016 10 6452 1 2025-11-26 00:19:41.602 00:00:10.365 TCP 23.104.0.1:45428 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:20:17.508 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56482 10 6452 1 2025-11-26 00:20:42.007 00:00:10.363 TCP 23.104.0.1:42808 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:21:17.724 00:00:10.866 TCP 1.101.0.1:3000 -> 22.102.0.1:53936 10 6452 1 2025-11-26 00:21:42.407 00:00:10.367 TCP 23.104.0.1:45652 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:22:18.633 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35236 10 6452 1 2025-11-26 00:22:57.307 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 00:22:42.813 00:00:10.369 TCP 23.104.0.1:45654 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:22:57.446 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 00:23:18.847 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38314 10 6452 1 2025-11-26 00:23:43.217 00:00:10.363 TCP 23.104.0.1:52974 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:24:19.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48892 10 6452 1 2025-11-26 00:24:43.620 00:00:10.365 TCP 23.104.0.1:55456 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:21:03.788 00:05:04.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 00:21:03.790 00:05:04.393 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 00:25:19.296 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60828 10 6452 1 2025-11-26 00:25:44.022 00:00:10.330 TCP 23.104.0.1:58956 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:26:19.463 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60286 10 6452 1 2025-11-26 00:26:44.387 00:00:10.365 TCP 23.104.0.1:49780 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:27:19.675 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48542 10 6452 1 2025-11-26 00:27:44.790 00:00:10.370 TCP 23.104.0.1:38010 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:27:57.577 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 00:27:57.614 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 00:28:19.888 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60146 10 6452 1 2025-11-26 00:28:45.198 00:00:10.364 TCP 23.104.0.1:40814 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:29:20.110 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36314 10 6452 1 2025-11-26 00:29:45.599 00:00:10.331 TCP 23.104.0.1:36372 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:30:20.320 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42578 10 6452 1 2025-11-26 00:30:45.971 00:00:10.373 TCP 23.104.0.1:44838 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:27:03.793 00:05:04.390 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 00:27:03.790 00:05:04.396 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 00:31:20.529 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43722 10 6452 1 2025-11-26 00:31:46.382 00:00:10.327 TCP 23.104.0.1:36094 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:32:20.742 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58676 10 6452 1 2025-11-26 00:32:57.257 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 00:32:57.516 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 00:32:46.745 00:00:10.419 TCP 23.104.0.1:40768 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:33:20.910 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45460 10 6452 1 2025-11-26 00:33:47.207 00:00:10.331 TCP 23.104.0.1:39128 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:34:21.090 00:00:10.720 TCP 1.101.0.1:3000 -> 22.102.0.1:58884 10 6452 1 2025-11-26 00:34:47.568 00:00:10.370 TCP 23.104.0.1:35084 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:35:21.845 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49100 10 6452 1 2025-11-26 00:35:47.974 00:00:10.388 TCP 23.104.0.1:40784 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:36:22.085 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38436 10 6452 1 2025-11-26 00:36:48.403 00:00:10.367 TCP 23.104.0.1:58272 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:33:03.791 00:05:04.396 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 00:33:03.794 00:05:04.391 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 00:37:22.294 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34372 10 6452 1 2025-11-26 00:37:57.496 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 00:37:57.506 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 00:37:48.805 00:00:10.369 TCP 23.104.0.1:41678 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:38:22.506 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58500 10 6452 1 2025-11-26 00:38:49.213 00:00:10.325 TCP 23.104.0.1:37938 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:39:22.721 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32772 10 6452 1 2025-11-26 00:39:49.569 00:00:10.363 TCP 23.104.0.1:39874 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:40:22.938 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:42448 10 6452 1 2025-11-26 00:40:49.968 00:00:10.379 TCP 23.104.0.1:36872 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:41:23.133 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41408 10 6452 1 2025-11-26 00:41:50.385 00:00:10.370 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:42:23.305 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37978 10 6452 1 2025-11-26 00:42:57.710 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 00:42:57.914 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 00:42:50.792 00:00:10.321 TCP 23.104.0.1:46948 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:39:03.792 00:05:04.397 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 00:39:03.794 00:05:04.392 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 00:43:23.513 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42792 10 6452 1 2025-11-26 00:43:51.147 00:00:10.360 TCP 23.104.0.1:34746 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:44:23.726 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41702 10 6452 1 2025-11-26 00:44:51.546 00:00:10.362 TCP 23.104.0.1:50046 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:45:23.950 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44368 10 6452 1 2025-11-26 00:45:51.952 00:00:10.328 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:46:24.182 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33288 10 6452 1 2025-11-26 00:46:52.321 00:00:10.328 TCP 23.104.0.1:42990 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:47:24.357 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55892 10 6452 1 2025-11-26 00:47:57.663 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 00:47:57.983 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 00:47:52.688 00:00:10.370 TCP 23.104.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:48:24.574 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53370 10 6452 1 2025-11-26 00:45:03.793 00:05:04.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 00:48:53.106 00:00:10.375 TCP 23.104.0.1:59512 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:45:03.794 00:05:04.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 00:49:24.785 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34960 10 6452 1 2025-11-26 00:49:53.519 00:00:10.364 TCP 23.104.0.1:43164 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:50:24.998 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36646 10 6452 1 2025-11-26 00:50:53.922 00:00:10.389 TCP 23.104.0.1:55420 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:51:25.225 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57750 10 6452 1 2025-11-26 00:51:54.351 00:00:10.370 TCP 23.104.0.1:46702 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:52:25.401 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42888 10 6452 1 2025-11-26 00:52:57.624 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 00:52:57.825 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 00:52:54.759 00:00:10.375 TCP 23.104.0.1:33122 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:53:25.616 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48878 10 6452 1 2025-11-26 00:53:55.173 00:00:10.364 TCP 23.104.0.1:36852 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:54:25.833 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60614 10 6452 1 2025-11-26 00:54:55.576 00:00:10.325 TCP 23.104.0.1:55206 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:51:03.794 00:05:04.398 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 00:51:03.798 00:05:04.392 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 00:55:26.072 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52596 10 6452 1 2025-11-26 00:55:55.937 00:00:10.434 TCP 23.104.0.1:37954 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:56:26.287 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35822 10 6452 1 2025-11-26 00:56:56.413 00:00:10.371 TCP 23.104.0.1:52060 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:57:26.464 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48970 10 6452 1 2025-11-26 00:57:58.146 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 00:57:57.924 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 00:57:56.814 00:00:10.333 TCP 23.104.0.1:44746 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:58:26.640 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:48152 10 6452 1 Summary: total flows: 163, total bytes: 496893, total packets: 1562, avg bps: 1076, avg pps: 0, avg bpp: 318 Time window: 2025-11-25 23:57:03 - 2025-11-26 00:58:36 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0020s Wall: 0.0022s flows/second: 72800.7 Runtime: 0.0023s