Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 10:58:54.205 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38450 10 6452 1 2025-11-26 10:59:08.440 00:00:10.372 TCP 23.104.0.1:52608 -> 1.101.0.1:3000 11 1507 1 2025-11-26 10:59:54.376 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48126 10 6452 1 2025-11-26 11:00:08.848 00:00:10.382 TCP 23.104.0.1:37104 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:00:54.592 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55078 10 6452 1 2025-11-26 10:57:03.976 00:05:04.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 10:57:03.974 00:05:04.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 11:01:09.270 00:00:10.363 TCP 23.104.0.1:45924 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:01:54.822 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58318 10 6452 1 2025-11-26 11:02:09.674 00:00:10.366 TCP 23.104.0.1:52926 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:02:54.997 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48090 10 6452 1 2025-11-26 11:03:10.180 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 11:03:10.111 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 11:03:10.110 00:00:10.325 TCP 23.104.0.1:57496 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:03:55.222 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49106 10 6452 1 2025-11-26 11:04:10.474 00:00:10.368 TCP 23.104.0.1:36654 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:04:55.395 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51148 10 6452 1 2025-11-26 11:05:10.878 00:00:10.331 TCP 23.104.0.1:52742 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:05:55.609 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46488 10 6452 1 2025-11-26 11:06:11.253 00:00:10.359 TCP 23.104.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:06:55.830 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50194 10 6452 1 2025-11-26 11:03:03.977 00:05:04.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 11:03:03.975 00:05:04.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 11:07:11.655 00:00:10.362 TCP 23.104.0.1:53356 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:07:56.007 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60488 10 6452 1 2025-11-26 11:08:10.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 11:08:10.023 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 11:08:12.090 00:00:10.362 TCP 23.104.0.1:52424 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:08:56.219 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47964 10 6452 1 2025-11-26 11:09:12.490 00:00:10.364 TCP 23.104.0.1:49780 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:09:56.427 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:33482 10 6452 1 2025-11-26 11:10:12.893 00:00:10.373 TCP 23.104.0.1:49422 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:10:56.598 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43090 10 6452 1 2025-11-26 11:11:13.335 00:00:10.364 TCP 23.104.0.1:46634 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:11:56.816 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59862 10 6452 1 2025-11-26 11:12:13.743 00:00:10.362 TCP 23.104.0.1:33356 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:13:10.556 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 11:09:03.977 00:05:04.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 11:12:57.049 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:55476 10 6452 1 2025-11-26 11:13:10.381 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 11:09:03.979 00:05:04.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 11:13:14.143 00:00:10.365 TCP 23.104.0.1:53092 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:13:57.228 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37926 10 6452 1 2025-11-26 11:14:14.549 00:00:10.363 TCP 23.104.0.1:33360 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:14:57.440 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54350 10 6452 1 2025-11-26 11:15:14.951 00:00:10.369 TCP 23.104.0.1:47140 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:15:57.659 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35250 10 6452 1 2025-11-26 11:16:15.363 00:00:10.322 TCP 23.104.0.1:38262 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:16:57.869 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53416 10 6452 1 2025-11-26 11:17:15.726 00:00:10.368 TCP 23.104.0.1:33092 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:18:10.142 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 11:18:10.520 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 11:17:58.099 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46824 10 6452 1 2025-11-26 11:18:16.134 00:00:10.389 TCP 23.104.0.1:37846 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:18:58.321 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47766 10 6452 1 2025-11-26 11:15:03.978 00:05:04.425 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 11:15:03.981 00:05:04.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 11:19:16.546 00:00:10.368 TCP 23.104.0.1:39114 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:19:58.535 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34230 10 6452 1 2025-11-26 11:20:16.950 00:00:10.342 TCP 23.104.0.1:43856 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:20:58.760 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55690 10 6452 1 2025-11-26 11:21:17.335 00:00:10.324 TCP 23.104.0.1:47474 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:21:58.980 00:00:10.292 TCP 1.101.0.1:3000 -> 22.102.0.1:40420 10 6452 1 2025-11-26 11:22:17.698 00:00:10.366 TCP 23.104.0.1:49258 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:23:10.525 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 11:22:59.309 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55074 10 6452 1 2025-11-26 11:23:10.472 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 11:23:18.106 00:00:10.364 TCP 23.104.0.1:45442 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:23:59.476 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35604 10 6452 1 2025-11-26 11:24:18.508 00:00:10.368 TCP 23.104.0.1:42298 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:24:59.685 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41778 10 6452 1 2025-11-26 11:21:03.979 00:05:04.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 11:21:03.982 00:05:04.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 11:25:18.911 00:00:10.361 TCP 23.104.0.1:40454 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:25:59.895 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37412 10 6452 1 2025-11-26 11:26:19.311 00:00:10.368 TCP 23.104.0.1:54250 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:27:00.114 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43044 10 6452 1 2025-11-26 11:27:19.712 00:00:10.377 TCP 23.104.0.1:46226 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:28:00.325 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39144 10 6452 1 2025-11-26 11:28:10.699 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 11:28:10.552 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 11:28:20.128 00:00:10.372 TCP 23.104.0.1:45204 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:29:00.539 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57456 10 6452 1 2025-11-26 11:29:20.535 00:00:10.329 TCP 23.104.0.1:42522 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:30:00.756 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35214 10 6452 1 2025-11-26 11:30:20.902 00:00:10.373 TCP 23.104.0.1:51958 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:27:03.983 00:05:04.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 11:31:00.996 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49094 10 6452 1 2025-11-26 11:27:03.979 00:05:04.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 11:31:21.314 00:00:10.367 TCP 23.104.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:32:01.225 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60176 10 6452 1 2025-11-26 11:32:21.719 00:00:10.372 TCP 23.104.0.1:53992 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:33:10.770 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 11:33:10.781 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 11:33:01.441 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42680 10 6452 1 2025-11-26 11:33:22.127 00:00:10.369 TCP 23.104.0.1:59074 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:34:01.661 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:48408 10 6452 1 2025-11-26 11:34:22.531 00:00:10.366 TCP 23.104.0.1:45852 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:35:01.831 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52836 10 6452 1 2025-11-26 11:35:22.949 00:00:10.368 TCP 23.104.0.1:55024 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:36:02.068 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40120 10 6452 1 2025-11-26 11:36:23.357 00:00:10.364 TCP 23.104.0.1:36222 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:33:03.983 00:05:04.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 11:33:03.980 00:05:04.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 11:37:02.288 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53694 10 6452 1 2025-11-26 11:37:23.762 00:00:10.381 TCP 23.104.0.1:42730 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:38:10.822 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 11:38:10.787 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 11:38:02.504 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59896 10 6452 1 2025-11-26 11:38:24.183 00:00:10.367 TCP 23.104.0.1:42582 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:39:02.719 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49546 10 6452 1 2025-11-26 11:39:24.585 00:00:10.366 TCP 23.104.0.1:33510 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:40:02.890 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:39150 10 6452 1 2025-11-26 11:40:24.988 00:00:10.322 TCP 23.104.0.1:38486 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:41:03.084 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49062 10 6452 1 2025-11-26 11:41:25.346 00:00:10.369 TCP 23.104.0.1:35102 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:42:03.296 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49920 10 6452 1 2025-11-26 11:42:25.751 00:00:10.390 TCP 23.104.0.1:56972 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:43:11.188 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 11:39:03.984 00:05:04.426 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 11:43:10.826 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 11:39:03.981 00:05:04.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 11:43:03.508 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57808 10 6452 1 2025-11-26 11:43:26.172 00:00:10.366 TCP 23.104.0.1:55000 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:44:03.681 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46648 10 6452 1 2025-11-26 11:44:26.579 00:00:10.365 TCP 23.104.0.1:56682 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:45:03.907 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54412 10 6452 1 2025-11-26 11:45:26.981 00:00:10.373 TCP 23.104.0.1:34500 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:46:04.121 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50226 10 6452 1 2025-11-26 11:46:27.394 00:00:10.365 TCP 23.104.0.1:43344 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:47:04.337 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34584 10 6452 1 2025-11-26 11:47:27.794 00:00:10.367 TCP 23.104.0.1:41524 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:48:10.883 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 11:48:11.235 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 11:48:04.556 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35772 10 6452 1 2025-11-26 11:48:28.201 00:00:10.358 TCP 23.104.0.1:53652 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:45:03.988 00:05:04.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 11:45:03.987 00:05:04.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 11:49:04.782 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53724 10 6452 1 2025-11-26 11:49:28.619 00:00:10.329 TCP 23.104.0.1:34268 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:50:04.953 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:57684 10 6452 1 2025-11-26 11:50:28.987 00:00:10.370 TCP 23.104.0.1:51358 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:51:05.192 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38956 10 6452 1 2025-11-26 11:51:29.396 00:00:10.366 TCP 23.104.0.1:38886 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:52:05.402 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52620 10 6452 1 2025-11-26 11:52:29.805 00:00:10.365 TCP 23.104.0.1:49278 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:53:11.209 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 11:53:11.057 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 11:53:05.620 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39684 10 6452 1 2025-11-26 11:53:30.213 00:00:10.369 TCP 23.104.0.1:49040 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:54:05.794 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50988 10 6452 1 2025-11-26 11:54:30.623 00:00:10.359 TCP 23.104.0.1:35988 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:51:03.990 00:05:04.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 11:51:03.987 00:05:04.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 11:55:06.006 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41856 10 6452 1 2025-11-26 11:55:31.023 00:00:10.328 TCP 23.104.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:56:06.226 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32996 10 6452 1 2025-11-26 11:56:31.383 00:00:10.363 TCP 23.104.0.1:53622 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:57:06.440 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34122 10 6452 1 2025-11-26 11:57:31.789 00:00:10.365 TCP 23.104.0.1:41648 -> 1.101.0.1:3000 11 1507 1 2025-11-26 11:58:11.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 11:58:11.312 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 11:58:06.657 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50954 10 6452 1 2025-11-26 11:58:32.189 00:00:10.363 TCP 23.104.0.1:59096 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1077, avg pps: 0, avg bpp: 317 Time window: 2025-11-26 10:57:03 - 2025-11-26 11:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0019s User: 0.0029s Wall: 0.0025s flows/second: 64746.4 Runtime: 0.0025s