Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 06:58:48.748 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33838 10 6452 1 2025-11-27 06:59:37.966 00:00:10.362 TCP 23.104.0.1:46010 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:59:48.967 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33116 10 6452 1 2025-11-27 07:00:38.370 00:00:10.374 TCP 23.104.0.1:47936 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:00:49.197 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58674 10 6452 1 2025-11-27 06:56:08.846 00:05:55.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 06:56:08.845 00:05:55.548 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 07:01:38.781 00:00:10.331 TCP 23.104.0.1:51710 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:01:49.406 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44074 10 6452 1 2025-11-27 07:02:39.149 00:00:10.375 TCP 23.104.0.1:46138 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:02:49.616 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56356 10 6452 1 2025-11-27 07:03:34.146 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 07:03:34.422 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 07:03:39.562 00:00:10.371 TCP 23.104.0.1:34648 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:03:49.831 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47542 10 6452 1 2025-11-27 07:04:39.973 00:00:10.373 TCP 23.104.0.1:58082 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:04:50.068 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58594 10 6452 1 2025-11-27 07:05:40.385 00:00:10.323 TCP 23.104.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:05:50.283 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52808 10 6452 1 2025-11-27 07:06:40.746 00:00:10.365 TCP 23.104.0.1:49192 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:06:50.496 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35482 10 6452 1 2025-11-27 07:02:08.846 00:05:55.547 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 07:02:08.849 00:05:55.542 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 07:07:41.145 00:00:10.330 TCP 23.104.0.1:52842 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:07:50.710 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41810 10 6452 1 2025-11-27 07:08:34.194 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 07:08:34.353 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 07:08:41.511 00:00:10.364 TCP 23.104.0.1:33708 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:08:50.922 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39330 10 6452 1 2025-11-27 07:09:41.913 00:00:10.364 TCP 23.104.0.1:35220 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:09:51.142 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58998 10 6452 1 2025-11-27 07:10:42.316 00:00:10.320 TCP 23.104.0.1:36954 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:10:51.355 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52538 10 6452 1 2025-11-27 07:11:42.669 00:00:10.362 TCP 23.104.0.1:47592 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:11:51.569 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58216 10 6452 1 2025-11-27 07:12:43.098 00:00:10.363 TCP 23.104.0.1:56848 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:12:51.789 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39566 10 6452 1 2025-11-27 07:08:08.850 00:05:55.543 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 07:08:08.853 00:05:55.538 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 07:13:34.263 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 07:13:34.573 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 07:13:43.502 00:00:10.980 TCP 23.104.0.1:44552 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:13:51.962 00:00:16.859 TCP 1.101.0.1:3000 -> 22.102.0.1:34228 12 6556 1 2025-11-27 07:14:44.534 00:00:10.369 TCP 23.104.0.1:51196 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:14:58.858 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42302 10 6452 1 2025-11-27 07:15:44.939 00:00:10.362 TCP 23.104.0.1:41958 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:15:59.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43968 10 6452 1 2025-11-27 07:16:45.344 00:00:10.368 TCP 23.104.0.1:57570 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:16:59.301 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54810 10 6452 1 2025-11-27 07:17:45.752 00:00:10.328 TCP 23.104.0.1:57328 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:17:59.509 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57946 10 6452 1 2025-11-27 07:18:34.696 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 07:18:34.324 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 07:18:46.112 00:00:10.370 TCP 23.104.0.1:42562 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:14:08.852 00:05:55.543 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 07:14:08.854 00:05:55.538 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 07:18:59.731 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35278 10 6452 1 2025-11-27 07:19:46.522 00:00:10.365 TCP 23.104.0.1:43870 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:19:59.938 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:37962 10 6452 1 2025-11-27 07:20:46.928 00:00:10.391 TCP 23.104.0.1:35984 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:21:00.174 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44400 10 6452 1 2025-11-27 07:21:47.355 00:00:10.413 TCP 23.104.0.1:36944 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:22:00.387 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50970 10 6452 1 2025-11-27 07:22:47.809 00:00:10.727 TCP 23.104.0.1:53844 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:23:00.603 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52996 10 6452 1 2025-11-27 07:23:34.514 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 07:23:34.491 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 07:23:48.590 00:00:10.365 TCP 23.104.0.1:46394 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:24:00.821 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53816 10 6452 1 2025-11-27 07:24:48.996 00:00:10.360 TCP 23.104.0.1:55540 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:20:08.853 00:05:55.543 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 07:20:08.856 00:05:55.538 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 07:25:00.993 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:58476 10 6452 1 2025-11-27 07:25:49.397 00:00:10.372 TCP 23.104.0.1:58496 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:26:01.176 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:36100 10 6452 1 2025-11-27 07:26:49.810 00:00:10.366 TCP 23.104.0.1:40568 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:27:01.368 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38296 10 6452 1 2025-11-27 07:27:50.220 00:00:10.367 TCP 23.104.0.1:45584 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:28:01.594 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55708 10 6452 1 2025-11-27 07:28:34.709 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 07:28:34.837 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 07:28:50.625 00:00:10.360 TCP 23.104.0.1:40116 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:29:01.807 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50534 10 6452 1 2025-11-27 07:29:51.027 00:00:10.409 TCP 23.104.0.1:40294 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:30:02.038 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45560 10 6452 1 2025-11-27 07:30:51.478 00:00:10.362 TCP 23.104.0.1:40302 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:26:08.858 00:05:55.537 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 07:26:08.856 00:05:55.542 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 07:31:02.255 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:36940 10 6452 1 2025-11-27 07:31:51.878 00:00:10.344 TCP 23.104.0.1:38106 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:32:02.425 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54050 10 6452 1 2025-11-27 07:32:52.273 00:00:10.365 TCP 23.104.0.1:35324 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:33:02.601 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57432 10 6452 1 2025-11-27 07:33:35.016 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 07:33:34.697 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 07:33:52.675 00:00:11.005 TCP 23.104.0.1:52054 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:34:02.821 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53496 10 6452 1 2025-11-27 07:34:53.716 00:00:10.328 TCP 23.104.0.1:60524 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:35:02.995 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:38400 10 6452 1 2025-11-27 07:35:54.097 00:00:10.321 TCP 23.104.0.1:53912 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:36:03.176 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47610 10 6452 1 2025-11-27 07:36:54.456 00:00:10.370 TCP 23.104.0.1:37636 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:32:08.857 00:05:55.541 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 07:32:08.860 00:05:55.536 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 07:37:03.350 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54370 10 6452 1 2025-11-27 07:37:54.867 00:00:10.325 TCP 23.104.0.1:46490 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:38:03.566 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36452 10 6452 1 2025-11-27 07:38:34.928 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 07:38:34.973 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 07:38:55.234 00:00:10.380 TCP 23.104.0.1:53918 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:39:03.785 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55620 10 6452 1 2025-11-27 07:39:55.655 00:00:10.359 TCP 23.104.0.1:48568 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:40:03.998 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52484 10 6452 1 2025-11-27 07:40:56.066 00:00:10.374 TCP 23.104.0.1:43672 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:41:04.216 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55720 10 6452 1 2025-11-27 07:41:56.473 00:00:10.325 TCP 23.104.0.1:58838 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:42:04.389 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59016 10 6452 1 2025-11-27 07:38:08.861 00:05:55.536 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 07:38:08.858 00:05:55.541 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 07:42:56.843 00:00:10.392 TCP 23.104.0.1:55398 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:43:04.601 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44698 10 6452 1 2025-11-27 07:43:34.959 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 07:43:34.836 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 07:43:57.271 00:00:10.359 TCP 23.104.0.1:56790 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:44:04.817 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45276 10 6452 1 2025-11-27 07:44:57.672 00:00:11.104 TCP 23.104.0.1:33792 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:45:05.041 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50732 10 6452 1 2025-11-27 07:45:58.810 00:00:10.331 TCP 23.104.0.1:46206 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:46:05.257 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57988 10 6452 1 2025-11-27 07:46:59.180 00:00:10.363 TCP 23.104.0.1:58306 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:47:05.467 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35204 10 6452 1 2025-11-27 07:47:59.581 00:00:10.366 TCP 23.104.0.1:41920 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:48:05.689 00:00:10.649 TCP 1.101.0.1:3000 -> 22.102.0.1:49354 10 6452 1 2025-11-27 07:48:35.174 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 07:48:34.973 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 07:44:08.863 00:05:55.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 07:44:08.862 00:05:55.547 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 07:48:59.984 00:00:10.374 TCP 23.104.0.1:44124 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:49:06.376 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53400 10 6452 1 2025-11-27 07:50:00.398 00:00:10.365 TCP 23.104.0.1:46330 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:50:06.587 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57008 10 6452 1 2025-11-27 07:51:00.803 00:00:10.338 TCP 23.104.0.1:53362 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:51:06.799 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57794 10 6452 1 2025-11-27 07:52:01.180 00:00:10.384 TCP 23.104.0.1:34542 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:52:07.015 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59362 10 6452 1 2025-11-27 07:53:01.610 00:00:10.367 TCP 23.104.0.1:56708 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:53:07.230 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44668 10 6452 1 2025-11-27 07:53:35.484 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 07:53:35.423 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 07:54:02.014 00:00:10.368 TCP 23.104.0.1:47504 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:54:07.444 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36260 10 6452 1 2025-11-27 07:50:08.863 00:05:55.546 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 07:50:08.866 00:05:55.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 07:55:02.421 00:00:10.368 TCP 23.104.0.1:38496 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:55:07.667 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43644 10 6452 1 2025-11-27 07:56:02.828 00:00:10.353 TCP 23.104.0.1:53468 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:56:07.881 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42418 10 6452 1 2025-11-27 07:57:03.221 00:00:10.375 TCP 23.104.0.1:53822 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:57:08.102 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55770 10 6452 1 2025-11-27 07:58:03.635 00:00:10.778 TCP 23.104.0.1:42522 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:58:08.335 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34336 10 6452 1 2025-11-27 07:58:35.300 00:00:00.059 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 07:58:35.562 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1061, avg pps: 0, avg bpp: 317 Time window: 2025-11-27 06:56:08 - 2025-11-27 07:58:35 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0048s User: 0.0019s Wall: 0.0021s flows/second: 77399.7 Runtime: 0.0021s