Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 18:58:56.472 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52426 10 6452 1 2025-11-26 18:59:26.984 00:00:10.370 TCP 23.104.0.1:42006 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:59:56.688 00:00:11.256 TCP 1.101.0.1:3000 -> 22.102.0.1:50426 10 6452 1 2025-11-26 19:00:27.389 00:00:10.368 TCP 23.104.0.1:57190 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:56:08.554 00:05:55.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 18:56:08.557 00:05:55.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 19:00:57.987 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40982 10 6452 1 2025-11-26 19:01:27.791 00:00:10.366 TCP 23.104.0.1:46422 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:01:58.191 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44778 10 6452 1 2025-11-26 19:02:28.193 00:00:10.368 TCP 23.104.0.1:49614 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:02:58.401 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43808 10 6452 1 2025-11-26 19:03:19.774 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 19:03:19.700 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 19:03:28.601 00:00:10.370 TCP 23.104.0.1:60442 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:03:58.613 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49382 10 6452 1 2025-11-26 19:04:29.019 00:00:10.364 TCP 23.104.0.1:57500 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:04:58.828 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55880 10 6452 1 2025-11-26 19:05:29.416 00:00:10.365 TCP 23.104.0.1:54310 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:05:59.074 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:56288 10 6452 1 2025-11-26 19:06:29.824 00:00:10.372 TCP 23.104.0.1:56030 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:02:08.556 00:05:55.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 19:02:08.559 00:05:55.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 19:06:59.269 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60536 10 6452 1 2025-11-26 19:07:30.233 00:00:10.357 TCP 23.104.0.1:46272 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:07:59.488 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46158 10 6452 1 2025-11-26 19:08:19.906 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 19:08:19.868 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 19:08:30.629 00:00:10.324 TCP 23.104.0.1:37224 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:08:59.699 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45432 10 6452 1 2025-11-26 19:09:30.996 00:00:10.360 TCP 23.104.0.1:43852 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:09:59.921 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49856 10 6452 1 2025-11-26 19:10:31.401 00:00:10.374 TCP 23.104.0.1:34002 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:11:00.134 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41982 10 6452 1 2025-11-26 19:11:31.807 00:00:10.365 TCP 23.104.0.1:35662 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:12:00.348 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38508 10 6452 1 2025-11-26 19:12:32.210 00:00:10.365 TCP 23.104.0.1:43100 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:08:08.593 00:05:55.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 19:08:08.590 00:05:55.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 19:13:00.532 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55940 10 6452 1 2025-11-26 19:13:19.942 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 19:13:19.989 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 19:13:32.615 00:00:10.365 TCP 23.104.0.1:38208 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:14:00.749 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47108 10 6452 1 2025-11-26 19:14:33.021 00:00:10.362 TCP 23.104.0.1:40686 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:15:00.963 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37850 10 6452 1 2025-11-26 19:15:33.431 00:00:10.367 TCP 23.104.0.1:47636 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:16:01.179 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55608 10 6452 1 2025-11-26 19:16:33.849 00:00:10.449 TCP 23.104.0.1:53990 -> 1.101.0.1:3000 15 1926 1 2025-11-26 19:17:01.350 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:39024 12 10375 1 2025-11-26 19:17:34.339 00:00:10.362 TCP 23.104.0.1:56810 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:18:01.591 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55044 10 6452 1 2025-11-26 19:18:20.334 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 19:18:20.294 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 19:18:34.739 00:00:10.364 TCP 23.104.0.1:40938 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:14:08.603 00:05:55.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 19:14:08.606 00:05:55.553 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 19:19:01.806 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50534 10 6452 1 2025-11-26 19:19:35.141 00:00:10.369 TCP 23.104.0.1:38774 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:20:02.037 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56328 10 6452 1 2025-11-26 19:20:35.554 00:00:10.318 TCP 23.104.0.1:51516 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:21:02.247 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50626 10 6452 1 2025-11-26 19:21:35.909 00:00:10.361 TCP 23.104.0.1:36062 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:22:02.459 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38158 10 6452 1 2025-11-26 19:22:36.311 00:00:10.366 TCP 23.104.0.1:47432 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:23:02.678 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54056 10 6452 1 2025-11-26 19:23:20.019 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 19:23:20.181 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 19:23:36.725 00:00:10.370 TCP 23.104.0.1:52094 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:24:02.889 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53808 10 6452 1 2025-11-26 19:24:37.136 00:00:10.366 TCP 23.104.0.1:52206 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:20:08.607 00:05:55.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 19:20:08.605 00:05:55.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 19:25:03.109 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52532 10 6452 1 2025-11-26 19:25:37.540 00:00:10.367 TCP 23.104.0.1:43434 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:26:03.326 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55928 10 6452 1 2025-11-26 19:26:37.947 00:00:10.325 TCP 23.104.0.1:39634 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:27:03.544 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50016 10 6452 1 2025-11-26 19:27:38.317 00:00:10.388 TCP 23.104.0.1:59130 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:28:03.772 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54124 10 6452 1 2025-11-26 19:28:19.996 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 19:28:20.292 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 19:28:38.735 00:00:10.324 TCP 23.104.0.1:45172 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:29:03.993 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37298 10 6452 1 2025-11-26 19:29:39.104 00:00:10.324 TCP 23.104.0.1:33520 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:30:04.226 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40760 10 6452 1 2025-11-26 19:30:39.465 00:00:10.363 TCP 23.104.0.1:60720 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:26:08.606 00:05:55.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 19:26:08.609 00:05:55.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 19:31:04.454 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41064 10 6452 1 2025-11-26 19:31:39.863 00:00:10.372 TCP 23.104.0.1:41990 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:32:04.674 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59480 10 6452 1 2025-11-26 19:32:40.272 00:00:10.365 TCP 23.104.0.1:37746 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:33:20.391 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 19:33:04.893 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46200 10 6452 1 2025-11-26 19:33:20.327 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 19:33:40.676 00:00:10.370 TCP 23.104.0.1:44944 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:34:05.116 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46554 10 6452 1 2025-11-26 19:34:41.100 00:00:10.366 TCP 23.104.0.1:38828 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:35:05.339 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:45220 10 6452 1 2025-11-26 19:35:41.514 00:00:10.370 TCP 23.104.0.1:45962 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:36:05.521 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46064 10 6452 1 2025-11-26 19:36:41.925 00:00:10.398 TCP 23.104.0.1:38944 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:32:08.609 00:05:55.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 19:32:08.612 00:05:55.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 19:37:05.735 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34494 10 6452 1 2025-11-26 19:37:42.362 00:00:10.329 TCP 23.104.0.1:50378 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:38:20.342 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 19:38:05.944 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:51396 10 6452 1 2025-11-26 19:38:20.562 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 19:38:42.725 00:00:10.367 TCP 23.104.0.1:51518 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:39:06.176 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60150 10 6452 1 2025-11-26 19:39:43.133 00:00:10.440 TCP 23.104.0.1:54904 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:40:06.391 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 10 6452 1 2025-11-26 19:40:43.615 00:00:10.367 TCP 23.104.0.1:40710 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:41:06.601 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40620 10 6452 1 2025-11-26 19:41:44.015 00:00:10.333 TCP 23.104.0.1:41936 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:42:06.782 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34594 10 6452 1 2025-11-26 19:42:44.387 00:00:10.366 TCP 23.104.0.1:46524 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:38:08.613 00:05:55.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 19:38:08.611 00:05:55.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 19:43:20.696 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 19:43:06.994 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59394 10 6452 1 2025-11-26 19:43:20.696 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 19:43:44.794 00:00:10.715 TCP 23.104.0.1:44910 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:44:07.223 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33616 10 6452 1 2025-11-26 19:44:45.561 00:00:10.324 TCP 23.104.0.1:48400 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:45:07.435 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48028 10 6452 1 2025-11-26 19:45:45.928 00:00:10.343 TCP 23.104.0.1:57186 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:46:07.662 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54416 10 6452 1 2025-11-26 19:46:46.326 00:00:10.366 TCP 23.104.0.1:44738 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:47:07.878 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37160 10 6452 1 2025-11-26 19:47:46.731 00:00:10.366 TCP 23.104.0.1:37610 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:48:20.755 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 19:48:08.113 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53000 10 6452 1 2025-11-26 19:48:20.679 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 19:48:47.135 00:00:10.365 TCP 23.104.0.1:46722 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:44:08.614 00:05:55.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 19:44:08.611 00:05:55.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 19:49:08.335 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45318 10 6452 1 2025-11-26 19:49:47.541 00:00:10.365 TCP 23.104.0.1:36668 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:50:08.510 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:36162 10 6452 1 2025-11-26 19:50:47.943 00:00:10.367 TCP 23.104.0.1:55412 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:51:08.698 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39572 10 6452 1 2025-11-26 19:51:48.349 00:00:10.360 TCP 23.104.0.1:56424 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:52:08.921 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33370 10 6452 1 2025-11-26 19:52:48.752 00:00:10.371 TCP 23.104.0.1:44462 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:53:20.763 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 19:53:09.130 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32780 10 6452 1 2025-11-26 19:53:21.017 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 19:53:49.164 00:00:10.366 TCP 23.104.0.1:48182 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:54:09.341 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54520 10 6452 1 2025-11-26 19:54:49.564 00:00:10.366 TCP 23.104.0.1:44154 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:50:08.613 00:05:55.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 19:50:08.616 00:05:55.550 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 19:55:09.555 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47502 10 6452 1 2025-11-26 19:55:49.969 00:00:10.370 TCP 23.104.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:56:09.769 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60346 10 6452 1 2025-11-26 19:56:50.373 00:00:10.360 TCP 23.104.0.1:41864 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:57:09.943 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37576 10 6452 1 2025-11-26 19:57:50.770 00:00:10.638 TCP 23.104.0.1:36694 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:58:10.179 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57730 10 6452 1 2025-11-26 19:58:21.166 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 19:58:20.864 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 163, total bytes: 501183, total packets: 1567, avg bps: 1074, avg pps: 0, avg bpp: 319 Time window: 2025-11-26 18:56:08 - 2025-11-26 19:58:21 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0022s User: 0.0034s Wall: 0.0031s flows/second: 52360.5 Runtime: 0.0031s