Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 16:59:19.449 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55182 10 6452 1 2025-11-26 16:59:36.506 00:00:10.373 TCP 23.104.0.1:47548 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:00:19.661 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51122 10 6452 1 2025-11-26 17:00:36.916 00:00:10.391 TCP 23.104.0.1:49046 -> 1.101.0.1:3000 11 1507 1 2025-11-26 16:56:08.519 00:05:55.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 16:56:08.521 00:05:55.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 17:01:19.881 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55158 10 6452 1 2025-11-26 17:01:37.348 00:00:10.322 TCP 23.104.0.1:57346 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:02:20.105 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35966 10 6452 1 2025-11-26 17:02:37.711 00:00:10.373 TCP 23.104.0.1:33434 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:03:18.036 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 17:03:17.874 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 17:03:20.326 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38132 10 6452 1 2025-11-26 17:03:38.124 00:00:10.366 TCP 23.104.0.1:38824 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:04:20.551 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56224 10 6452 1 2025-11-26 17:04:38.533 00:00:10.377 TCP 23.104.0.1:36572 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:05:20.770 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35134 10 6452 1 2025-11-26 17:05:38.952 00:00:10.325 TCP 23.104.0.1:34358 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:06:20.995 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36598 10 6452 1 2025-11-26 17:06:39.313 00:00:10.362 TCP 23.104.0.1:42294 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:02:08.522 00:05:55.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 17:02:08.526 00:05:55.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 17:07:21.210 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36014 10 6452 1 2025-11-26 17:07:39.717 00:00:10.333 TCP 23.104.0.1:53014 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:08:17.320 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 17:08:17.616 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 17:08:21.387 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57840 10 6452 1 2025-11-26 17:08:40.100 00:00:10.325 TCP 23.104.0.1:58858 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:09:21.597 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:50698 10 6452 1 2025-11-26 17:09:40.463 00:00:10.363 TCP 23.104.0.1:49978 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:10:21.777 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56132 10 6452 1 2025-11-26 17:10:40.865 00:00:10.329 TCP 23.104.0.1:40760 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:11:21.996 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41636 10 6452 1 2025-11-26 17:11:41.229 00:00:10.370 TCP 23.104.0.1:60746 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:12:22.220 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35694 10 6452 1 2025-11-26 17:12:41.655 00:00:10.366 TCP 23.104.0.1:40752 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:08:08.524 00:05:55.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 17:08:08.527 00:05:55.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 17:13:17.514 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 17:13:17.413 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 17:13:22.430 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:42698 10 6452 1 2025-11-26 17:13:42.080 00:00:10.366 TCP 23.104.0.1:33066 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:14:22.634 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57580 10 6452 1 2025-11-26 17:14:42.491 00:00:10.325 TCP 23.104.0.1:45906 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:15:22.848 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51234 10 6452 1 2025-11-26 17:15:42.856 00:00:10.377 TCP 23.104.0.1:34016 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:16:23.080 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:35724 10 6452 1 2025-11-26 17:16:43.269 00:00:10.373 TCP 23.104.0.1:60236 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:17:23.286 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58006 10 6452 1 2025-11-26 17:17:43.683 00:00:10.360 TCP 23.104.0.1:50634 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:18:17.587 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 17:18:17.769 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 17:18:23.498 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44488 10 6452 1 2025-11-26 17:18:44.103 00:00:10.336 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:14:08.525 00:05:55.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 17:14:08.527 00:05:55.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 17:19:23.720 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50562 10 6452 1 2025-11-26 17:19:44.475 00:00:10.372 TCP 23.104.0.1:38692 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:20:23.938 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:58758 10 6452 1 2025-11-26 17:20:44.888 00:00:10.373 TCP 23.104.0.1:39090 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:21:24.200 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45098 10 6452 1 2025-11-26 17:21:45.299 00:00:10.370 TCP 23.104.0.1:38302 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:22:24.374 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42078 10 6452 1 2025-11-26 17:22:45.699 00:00:10.326 TCP 23.104.0.1:37668 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:23:17.822 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 17:23:17.765 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 17:23:24.589 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49642 10 6452 1 2025-11-26 17:23:46.093 00:00:10.366 TCP 23.104.0.1:57230 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:24:24.801 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41846 10 6452 1 2025-11-26 17:24:46.496 00:00:10.365 TCP 23.104.0.1:35524 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:20:08.527 00:05:55.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 17:20:08.529 00:05:55.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 17:25:25.039 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45298 10 6452 1 2025-11-26 17:25:46.902 00:00:10.365 TCP 23.104.0.1:40442 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:26:25.255 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52106 10 6452 1 2025-11-26 17:26:47.323 00:00:10.322 TCP 23.104.0.1:40110 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:27:25.465 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34388 10 6452 1 2025-11-26 17:27:47.680 00:00:10.373 TCP 23.104.0.1:43146 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:28:17.961 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 17:28:17.983 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 17:28:25.673 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57482 10 6452 1 2025-11-26 17:28:48.109 00:00:10.418 TCP 23.104.0.1:56892 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:29:25.890 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46960 10 6452 1 2025-11-26 17:29:48.567 00:00:10.365 TCP 23.104.0.1:36410 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:30:26.111 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42036 10 6452 1 2025-11-26 17:30:48.971 00:00:10.384 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:26:08.528 00:05:55.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 17:26:08.530 00:05:55.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 17:31:26.322 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38354 10 6452 1 2025-11-26 17:31:49.393 00:00:10.370 TCP 23.104.0.1:59016 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:32:26.535 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37596 10 6452 1 2025-11-26 17:32:49.805 00:00:10.367 TCP 23.104.0.1:45414 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:33:17.902 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 17:33:17.878 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 17:33:26.756 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60540 10 6452 1 2025-11-26 17:33:50.209 00:00:10.362 TCP 23.104.0.1:40502 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:34:26.969 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55532 10 6452 1 2025-11-26 17:34:50.607 00:00:10.366 TCP 23.104.0.1:41248 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:35:27.203 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33722 10 6452 1 2025-11-26 17:35:51.012 00:00:10.362 TCP 23.104.0.1:47332 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:36:27.408 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36604 10 6452 1 2025-11-26 17:36:51.417 00:00:10.367 TCP 23.104.0.1:37250 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:32:08.529 00:05:55.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 17:32:08.532 00:05:55.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 17:37:27.622 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51546 10 6452 1 2025-11-26 17:37:51.824 00:00:10.362 TCP 23.104.0.1:36384 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:38:18.194 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 17:38:18.323 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 17:38:27.843 00:00:13.678 TCP 1.101.0.1:3000 -> 22.102.0.1:40348 10 6452 1 2025-11-26 17:38:52.226 00:00:10.370 TCP 23.104.0.1:59444 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:39:31.564 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60986 10 6452 1 2025-11-26 17:39:52.639 00:00:10.362 TCP 23.104.0.1:58192 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:40:31.783 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39620 10 6452 1 2025-11-26 17:40:53.055 00:00:10.323 TCP 23.104.0.1:45376 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:41:32.003 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38536 10 6452 1 2025-11-26 17:41:53.416 00:00:10.814 TCP 23.104.0.1:40962 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:42:32.232 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56968 10 6452 1 2025-11-26 17:38:08.531 00:05:55.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 17:42:54.269 00:00:10.368 TCP 23.104.0.1:48228 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:38:08.533 00:05:55.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 17:43:18.522 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 17:43:18.364 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 17:43:32.448 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42394 10 6452 1 2025-11-26 17:43:54.675 00:00:10.371 TCP 23.104.0.1:50090 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:44:32.673 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59518 10 6452 1 2025-11-26 17:44:55.105 00:00:10.370 TCP 23.104.0.1:35012 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:45:32.880 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40658 10 6452 1 2025-11-26 17:45:55.520 00:00:10.366 TCP 23.104.0.1:50436 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:46:33.102 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:51392 10 6452 1 2025-11-26 17:46:55.923 00:00:10.385 TCP 23.104.0.1:57432 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:47:33.299 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36768 10 6452 1 2025-11-26 17:47:56.348 00:00:10.361 TCP 23.104.0.1:44150 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:48:18.265 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 17:48:18.005 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 17:48:33.527 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40862 10 6452 1 2025-11-26 17:44:08.534 00:05:55.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 17:44:08.532 00:05:55.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 17:48:56.751 00:00:10.336 TCP 23.104.0.1:56500 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:49:33.760 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57520 10 6452 1 2025-11-26 17:49:57.127 00:00:10.375 TCP 23.104.0.1:59082 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:50:33.973 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:41556 10 6452 1 2025-11-26 17:50:57.541 00:00:10.330 TCP 23.104.0.1:52598 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:51:34.212 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52848 10 6452 1 2025-11-26 17:51:57.909 00:00:10.374 TCP 23.104.0.1:51520 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:52:34.427 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52750 10 6452 1 2025-11-26 17:52:58.321 00:00:10.321 TCP 23.104.0.1:57552 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:53:18.513 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 17:53:18.331 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 17:53:34.642 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36612 10 6452 1 2025-11-26 17:53:58.683 00:00:10.321 TCP 23.104.0.1:42978 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:54:34.864 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43830 10 6452 1 2025-11-26 17:50:08.536 00:05:55.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 17:50:08.533 00:05:55.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 17:54:59.058 00:00:10.360 TCP 23.104.0.1:52242 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:55:35.103 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60690 10 6452 1 2025-11-26 17:55:59.460 00:00:10.898 TCP 23.104.0.1:54756 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:56:35.324 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35066 10 6452 1 2025-11-26 17:57:00.399 00:00:10.365 TCP 23.104.0.1:33638 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:57:35.545 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35646 10 6452 1 2025-11-26 17:58:00.800 00:00:10.365 TCP 23.104.0.1:47562 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:58:18.435 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 17:58:18.420 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 17:58:35.730 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59598 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1057, avg pps: 0, avg bpp: 318 Time window: 2025-11-26 16:56:08 - 2025-11-26 17:58:45 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0065s User: 0.0000s Wall: 0.0027s flows/second: 61189.6 Runtime: 0.0027s