Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 06:58:47.547 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60044 10 6452 1 2025-11-26 06:59:26.795 00:00:10.367 TCP 23.104.0.1:42150 -> 1.101.0.1:3000 11 1507 1 2025-11-26 06:59:47.765 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42780 10 6452 1 2025-11-26 07:00:27.205 00:00:10.326 TCP 23.104.0.1:41542 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:00:47.979 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:38368 10 6452 1 2025-11-26 06:57:03.887 00:05:04.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 06:57:03.889 00:05:04.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 07:01:27.568 00:00:11.009 TCP 23.104.0.1:54700 -> 1.101.0.1:3000 17 2241 1 2025-11-26 07:01:48.171 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:59724 14 14298 1 2025-11-26 07:02:28.619 00:00:10.374 TCP 23.104.0.1:37618 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:02:48.443 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55842 10 6452 1 2025-11-26 07:03:05.552 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 07:03:05.645 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 07:03:29.026 00:00:10.366 TCP 23.104.0.1:44354 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:03:48.621 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52972 10 6452 1 2025-11-26 07:04:29.433 00:00:10.361 TCP 23.104.0.1:41246 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:04:48.794 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43074 10 6452 1 2025-11-26 07:05:29.834 00:00:10.391 TCP 23.104.0.1:33172 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:05:49.009 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58560 10 6452 1 2025-11-26 07:06:30.263 00:00:10.359 TCP 23.104.0.1:51346 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:06:49.181 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40430 10 6452 1 2025-11-26 07:03:03.890 00:05:04.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 07:03:03.887 00:05:04.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 07:07:30.662 00:00:10.370 TCP 23.104.0.1:57044 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:07:49.393 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33098 10 6452 1 2025-11-26 07:08:05.478 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 07:08:05.526 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 07:08:31.092 00:00:10.364 TCP 23.104.0.1:55604 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:08:49.606 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37872 10 6452 1 2025-11-26 07:09:31.495 00:00:10.327 TCP 23.104.0.1:55278 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:09:49.827 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58970 10 6452 1 2025-11-26 07:10:31.862 00:00:10.367 TCP 23.104.0.1:43718 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:10:49.998 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40914 10 6452 1 2025-11-26 07:11:32.268 00:00:10.434 TCP 23.104.0.1:45428 -> 1.101.0.1:3000 15 1926 1 2025-11-26 07:11:50.215 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:47926 12 10375 1 2025-11-26 07:12:32.739 00:00:10.368 TCP 23.104.0.1:37662 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:12:50.417 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35010 10 6452 1 2025-11-26 07:13:05.822 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 07:09:03.890 00:05:04.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 07:13:05.838 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 07:09:03.894 00:05:04.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 07:13:33.144 00:00:10.363 TCP 23.104.0.1:39582 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:13:50.622 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55304 10 6452 1 2025-11-26 07:14:33.547 00:00:10.364 TCP 23.104.0.1:48312 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:14:50.831 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53340 10 6452 1 2025-11-26 07:15:33.951 00:00:10.374 TCP 23.104.0.1:57580 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:15:51.073 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47286 10 6452 1 2025-11-26 07:16:34.370 00:00:10.367 TCP 23.104.0.1:36102 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:16:51.292 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42868 10 6452 1 2025-11-26 07:17:34.781 00:00:10.322 TCP 23.104.0.1:37366 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:17:51.511 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51192 10 6452 1 2025-11-26 07:18:05.867 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 07:18:05.828 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 07:18:35.143 00:00:10.364 TCP 23.104.0.1:44178 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:18:51.699 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46884 10 6452 1 2025-11-26 07:15:03.893 00:05:04.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 07:15:03.892 00:05:04.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 07:19:35.546 00:00:10.362 TCP 23.104.0.1:34584 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:19:51.910 00:00:10.631 TCP 1.101.0.1:3000 -> 22.102.0.1:46832 10 6452 1 2025-11-26 07:20:35.948 00:00:10.325 TCP 23.104.0.1:53462 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:20:52.580 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41014 10 6452 1 2025-11-26 07:21:36.312 00:00:10.324 TCP 23.104.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:21:52.788 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53416 10 6452 1 2025-11-26 07:22:36.676 00:00:10.370 TCP 23.104.0.1:36990 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:23:05.669 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 07:22:53.004 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43258 10 6452 1 2025-11-26 07:23:05.740 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 07:23:37.107 00:00:10.366 TCP 23.104.0.1:58952 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:23:53.220 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59192 10 6452 1 2025-11-26 07:24:37.513 00:00:10.441 TCP 23.104.0.1:50554 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:24:53.445 00:00:10.902 TCP 1.101.0.1:3000 -> 22.102.0.1:55562 10 6452 1 2025-11-26 07:21:03.897 00:05:04.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 07:21:03.894 00:05:04.425 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 07:25:37.978 00:00:10.366 TCP 23.104.0.1:37848 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:25:54.386 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:45262 12 10584 1 2025-11-26 07:26:38.384 00:00:10.398 TCP 23.104.0.1:53492 -> 1.101.0.1:3000 15 1926 1 2025-11-26 07:26:54.586 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52952 10 6661 1 2025-11-26 07:27:38.818 00:00:10.365 TCP 23.104.0.1:55238 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:28:05.574 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 07:27:54.809 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56260 10 6661 1 2025-11-26 07:28:05.636 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 07:28:39.215 00:00:10.368 TCP 23.104.0.1:54100 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:28:55.034 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39860 10 6661 1 2025-11-26 07:29:39.617 00:00:10.366 TCP 23.104.0.1:53470 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:29:55.256 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35854 10 6661 1 2025-11-26 07:30:40.021 00:00:10.373 TCP 23.104.0.1:49352 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:30:55.427 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:40724 11 6713 1 2025-11-26 07:27:03.906 00:05:04.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 07:27:03.903 00:05:04.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 07:31:40.425 00:00:10.370 TCP 23.104.0.1:53784 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:31:55.692 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60380 10 6661 1 2025-11-26 07:32:40.832 00:00:10.393 TCP 23.104.0.1:51086 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:33:06.326 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 07:32:55.905 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40552 10 6661 1 2025-11-26 07:33:05.803 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 07:33:41.263 00:00:10.363 TCP 23.104.0.1:41920 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:33:56.118 00:00:10.454 TCP 1.101.0.1:3000 -> 22.102.0.1:46852 10 6661 1 2025-11-26 07:34:41.663 00:00:10.361 TCP 23.104.0.1:57452 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:34:56.614 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51066 10 6661 1 2025-11-26 07:35:42.093 00:00:10.324 TCP 23.104.0.1:53784 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:35:56.829 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43880 10 6661 1 2025-11-26 07:36:42.455 00:00:10.364 TCP 23.104.0.1:34522 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:36:57.063 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38672 10 6661 1 2025-11-26 07:33:03.904 00:05:04.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 07:33:03.907 00:05:04.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 07:37:42.857 00:00:10.373 TCP 23.104.0.1:39638 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:38:06.024 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 07:38:05.964 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 07:37:57.278 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39030 10 6661 1 2025-11-26 07:38:43.270 00:00:10.643 TCP 23.104.0.1:50842 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:38:57.496 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:43886 10 6661 1 2025-11-26 07:39:43.961 00:00:10.323 TCP 23.104.0.1:42184 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:39:57.678 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48932 10 6661 1 2025-11-26 07:40:44.327 00:00:10.363 TCP 23.104.0.1:33450 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:40:57.890 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37484 10 6661 1 2025-11-26 07:41:44.730 00:00:10.323 TCP 23.104.0.1:35652 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:41:58.114 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:58802 12 6753 1 2025-11-26 07:42:45.104 00:00:10.324 TCP 23.104.0.1:41552 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:43:06.180 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 07:42:58.334 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41910 10 6661 1 2025-11-26 07:39:03.905 00:05:04.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 07:43:06.132 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 07:39:03.907 00:05:04.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 07:43:45.471 00:00:10.363 TCP 23.104.0.1:38520 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:43:58.504 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52074 10 6661 1 2025-11-26 07:44:45.879 00:00:10.364 TCP 23.104.0.1:48896 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:44:58.719 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47114 10 6661 1 2025-11-26 07:45:46.280 00:00:10.324 TCP 23.104.0.1:58970 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:45:58.934 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:57174 10 6661 1 2025-11-26 07:46:46.647 00:00:10.370 TCP 23.104.0.1:48980 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:46:59.124 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49846 10 6661 1 2025-11-26 07:47:47.064 00:00:10.366 TCP 23.104.0.1:36542 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:48:06.387 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 07:48:06.236 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 07:47:59.340 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53300 10 6661 1 2025-11-26 07:48:47.463 00:00:10.329 TCP 23.104.0.1:38938 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:48:59.517 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58058 10 6661 1 2025-11-26 07:45:03.906 00:05:04.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 07:45:03.909 00:05:04.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 07:49:47.857 00:00:10.330 TCP 23.104.0.1:43276 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:49:59.690 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53430 10 6661 1 2025-11-26 07:50:48.225 00:00:10.360 TCP 23.104.0.1:33948 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:50:59.905 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35568 10 6661 1 2025-11-26 07:51:48.627 00:00:10.364 TCP 23.104.0.1:56278 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:52:00.115 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51806 10 6661 1 2025-11-26 07:52:49.033 00:00:10.356 TCP 23.104.0.1:37134 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:53:06.381 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 07:53:06.442 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 07:53:00.285 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41722 10 6661 1 2025-11-26 07:53:49.431 00:00:10.369 TCP 23.104.0.1:56532 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:54:00.513 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38354 10 6661 1 2025-11-26 07:54:49.842 00:00:10.379 TCP 23.104.0.1:43634 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:55:00.726 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44482 10 6661 1 2025-11-26 07:51:03.906 00:05:04.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 07:51:03.909 00:05:04.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 07:55:50.261 00:00:10.370 TCP 23.104.0.1:37528 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:56:00.947 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:53422 12 10793 1 2025-11-26 07:56:50.669 00:00:10.438 TCP 23.104.0.1:46226 -> 1.101.0.1:3000 15 1926 1 2025-11-26 07:57:01.204 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43512 10 6870 1 2025-11-26 07:57:51.143 00:00:10.367 TCP 23.104.0.1:53170 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:58:06.553 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 07:58:06.450 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 07:58:01.376 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52486 10 6870 1 Summary: total flows: 163, total bytes: 526115, total packets: 1592, avg bps: 1147, avg pps: 0, avg bpp: 330 Time window: 2025-11-26 06:57:03 - 2025-11-26 07:58:11 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0018s Wall: 0.0026s flows/second: 61954.8 Runtime: 0.0026s