Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 03:59:07.934 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:48038 10 6452 1 2025-11-26 03:59:12.687 00:00:10.376 TCP 23.104.0.1:46770 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:00:08.167 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37990 10 6452 1 2025-11-26 04:00:13.105 00:00:10.368 TCP 23.104.0.1:54378 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:57:03.848 00:05:04.399 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 03:57:03.847 00:05:04.404 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 04:01:08.337 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43514 10 6452 1 2025-11-26 04:01:13.515 00:00:10.362 TCP 23.104.0.1:53426 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:02:08.510 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47002 10 6452 1 2025-11-26 04:02:13.910 00:00:10.368 TCP 23.104.0.1:40676 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:03:01.436 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 04:03:01.896 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 04:03:08.722 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57106 10 6452 1 2025-11-26 04:03:14.320 00:00:10.366 TCP 23.104.0.1:56676 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:04:08.934 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:43166 10 6452 1 2025-11-26 04:04:14.719 00:00:10.366 TCP 23.104.0.1:46566 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:05:09.133 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:41740 10 6452 1 2025-11-26 04:05:15.132 00:00:10.318 TCP 23.104.0.1:44698 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:06:09.301 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43344 10 6452 1 2025-11-26 04:06:15.492 00:00:10.361 TCP 23.104.0.1:54868 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:03:03.849 00:05:04.402 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 04:03:03.846 00:05:04.408 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 04:07:09.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52844 10 6452 1 2025-11-26 04:07:15.896 00:00:10.382 TCP 23.104.0.1:35928 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:08:01.775 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 04:08:01.842 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 04:08:09.728 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51836 10 6452 1 2025-11-26 04:08:16.317 00:00:10.359 TCP 23.104.0.1:47450 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:09:09.942 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:38704 10 6452 1 2025-11-26 04:09:16.717 00:00:10.372 TCP 23.104.0.1:38860 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:10:10.175 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56156 10 6452 1 2025-11-26 04:10:17.133 00:00:10.370 TCP 23.104.0.1:51708 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:11:10.350 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35440 10 6452 1 2025-11-26 04:11:17.540 00:00:10.364 TCP 23.104.0.1:50442 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:12:10.567 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:57048 10 6452 1 2025-11-26 04:12:17.945 00:00:10.377 TCP 23.104.0.1:58526 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:13:01.803 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 04:13:01.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 04:09:03.846 00:05:04.407 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 04:09:03.850 00:05:04.403 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 04:13:10.741 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 10 6452 1 2025-11-26 04:13:18.367 00:00:10.361 TCP 23.104.0.1:46712 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:14:10.955 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:55578 10 6452 1 2025-11-26 04:14:18.772 00:00:10.416 TCP 23.104.0.1:46318 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:15:11.142 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51244 10 6452 1 2025-11-26 04:15:19.230 00:00:10.417 TCP 23.104.0.1:59368 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:16:11.356 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53354 10 6452 1 2025-11-26 04:16:19.686 00:00:10.331 TCP 23.104.0.1:59572 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:17:11.564 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42734 10 6452 1 2025-11-26 04:17:20.049 00:00:10.368 TCP 23.104.0.1:51298 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:18:01.926 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 04:18:02.029 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 04:18:11.791 00:00:10.122 TCP 1.101.0.1:3000 -> 22.102.0.1:37054 10 6452 1 2025-11-26 04:18:20.453 00:00:10.323 TCP 23.104.0.1:59086 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:15:03.850 00:05:04.404 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 04:15:03.849 00:05:04.409 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 04:19:11.952 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:51270 12 6556 1 2025-11-26 04:19:20.816 00:00:10.369 TCP 23.104.0.1:43802 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:20:12.191 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46466 10 6452 1 2025-11-26 04:20:21.221 00:00:10.370 TCP 23.104.0.1:44938 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:21:12.361 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:40326 12 10369 1 2025-11-26 04:21:21.632 00:00:10.399 TCP 23.104.0.1:44654 -> 1.101.0.1:3000 15 1926 1 2025-11-26 04:22:12.596 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43490 10 6452 1 2025-11-26 04:22:22.098 00:00:10.363 TCP 23.104.0.1:43884 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:23:02.165 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 04:23:02.053 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 04:23:12.819 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49478 10 6452 1 2025-11-26 04:23:22.503 00:00:10.332 TCP 23.104.0.1:58026 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:24:13.043 00:00:10.655 TCP 1.101.0.1:3000 -> 22.102.0.1:60286 10 6452 1 2025-11-26 04:24:22.878 00:00:10.352 TCP 23.104.0.1:37174 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:21:03.853 00:05:04.401 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 04:21:03.850 00:05:04.407 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 04:25:13.740 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44930 10 6452 1 2025-11-26 04:25:23.289 00:00:10.337 TCP 23.104.0.1:35454 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:26:13.948 00:00:10.517 TCP 1.101.0.1:3000 -> 22.102.0.1:44360 10 6452 1 2025-11-26 04:26:23.662 00:00:10.408 TCP 23.104.0.1:52156 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:27:14.507 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59256 10 6452 1 2025-11-26 04:27:24.112 00:00:10.323 TCP 23.104.0.1:40788 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:28:02.327 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 04:28:02.385 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 04:28:14.724 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37120 10 6452 1 2025-11-26 04:28:24.472 00:00:10.357 TCP 23.104.0.1:54124 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:29:14.938 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:41798 10 6452 1 2025-11-26 04:29:24.868 00:00:10.365 TCP 23.104.0.1:56628 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:30:15.141 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50818 10 6452 1 2025-11-26 04:30:25.271 00:00:10.358 TCP 23.104.0.1:46548 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:27:03.851 00:05:04.404 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 04:27:03.849 00:05:04.409 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 04:31:15.356 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53536 10 6452 1 2025-11-26 04:31:25.670 00:00:10.362 TCP 23.104.0.1:33638 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:32:15.570 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40052 10 6452 1 2025-11-26 04:32:26.102 00:00:10.328 TCP 23.104.0.1:46848 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:33:02.060 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 04:33:02.156 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 04:33:15.750 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35614 10 6452 1 2025-11-26 04:33:26.468 00:00:10.364 TCP 23.104.0.1:60754 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:34:15.959 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:50888 10 6452 1 2025-11-26 04:34:26.870 00:00:10.366 TCP 23.104.0.1:57510 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:35:16.189 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50152 10 6452 1 2025-11-26 04:35:27.277 00:00:10.359 TCP 23.104.0.1:42022 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:36:16.363 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58462 10 6452 1 2025-11-26 04:36:27.676 00:00:10.372 TCP 23.104.0.1:46378 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:33:03.850 00:05:04.410 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 04:33:03.854 00:05:04.404 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 04:37:16.585 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50818 10 6452 1 2025-11-26 04:37:28.126 00:00:10.322 TCP 23.104.0.1:44810 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:38:02.455 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 04:38:02.404 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 04:38:16.797 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46650 10 6452 1 2025-11-26 04:38:28.487 00:00:10.363 TCP 23.104.0.1:33272 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:39:17.011 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52466 10 6452 1 2025-11-26 04:39:28.889 00:00:10.378 TCP 23.104.0.1:55818 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:40:17.180 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53178 10 6452 1 2025-11-26 04:40:29.305 00:00:10.368 TCP 23.104.0.1:47832 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:41:17.353 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:50002 10 6452 1 2025-11-26 04:41:29.714 00:00:10.378 TCP 23.104.0.1:52340 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:42:17.520 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:53046 11 6504 1 2025-11-26 04:42:30.125 00:00:10.321 TCP 23.104.0.1:57694 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:43:02.327 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 04:43:02.492 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 04:39:03.853 00:05:04.405 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 04:39:03.851 00:05:04.410 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 04:43:17.797 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45254 10 6452 1 2025-11-26 04:43:30.480 00:00:10.359 TCP 23.104.0.1:51918 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:44:18.012 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53332 10 6452 1 2025-11-26 04:44:30.883 00:00:10.379 TCP 23.104.0.1:54170 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:45:18.181 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36162 10 6452 1 2025-11-26 04:45:31.298 00:00:10.363 TCP 23.104.0.1:45514 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:46:18.398 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44110 10 6452 1 2025-11-26 04:46:31.701 00:00:10.326 TCP 23.104.0.1:45010 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:47:18.614 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34090 10 6452 1 2025-11-26 04:47:32.099 00:00:10.361 TCP 23.104.0.1:52992 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:48:02.703 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 04:48:02.747 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 04:48:18.823 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44804 10 6452 1 2025-11-26 04:48:32.497 00:00:10.382 TCP 23.104.0.1:59188 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:45:03.852 00:05:04.411 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 04:45:03.854 00:05:04.406 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 04:49:19.037 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50766 10 6452 1 2025-11-26 04:49:32.920 00:00:10.324 TCP 23.104.0.1:49124 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:50:19.207 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53458 10 6452 1 2025-11-26 04:50:33.283 00:00:10.365 TCP 23.104.0.1:47618 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:51:19.421 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46458 10 6452 1 2025-11-26 04:51:33.685 00:00:10.362 TCP 23.104.0.1:52558 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:52:19.633 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42316 10 6452 1 2025-11-26 04:52:34.110 00:00:10.328 TCP 23.104.0.1:58256 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:53:02.476 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 04:53:02.648 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 04:53:19.809 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50474 10 6452 1 2025-11-26 04:53:34.476 00:00:10.369 TCP 23.104.0.1:47074 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:54:19.983 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:60614 10 6452 1 2025-11-26 04:54:34.886 00:00:10.370 TCP 23.104.0.1:56758 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:51:03.853 00:05:04.411 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 04:51:03.857 00:05:04.405 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 04:55:20.176 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58380 10 6452 1 2025-11-26 04:55:35.293 00:00:10.367 TCP 23.104.0.1:36398 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:56:20.387 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57306 10 6452 1 2025-11-26 04:56:35.691 00:00:10.360 TCP 23.104.0.1:51954 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:57:20.604 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44554 10 6452 1 2025-11-26 04:57:36.107 00:00:10.881 TCP 23.104.0.1:49074 -> 1.101.0.1:3000 11 1507 1 2025-11-26 04:58:02.693 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 04:58:02.722 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 04:58:20.819 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47336 10 6452 1 2025-11-26 04:58:37.026 00:00:10.361 TCP 23.104.0.1:48224 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502840, total packets: 1581, avg bps: 1086, avg pps: 0, avg bpp: 318 Time window: 2025-11-26 03:57:03 - 2025-11-26 04:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0031s Wall: 0.0037s flows/second: 44847.2 Runtime: 0.0037s