Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 23:59:08.255 00:00:10.804 TCP 1.101.0.1:3000 -> 22.102.0.1:51716 10 6452 1 2025-11-26 23:59:30.514 00:00:10.367 TCP 23.104.0.1:50916 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:00:09.099 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46300 10 6452 1 2025-11-27 00:00:30.919 00:00:10.341 TCP 23.104.0.1:53276 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:56:08.711 00:05:55.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 23:56:08.707 00:05:55.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 00:01:09.309 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46378 10 6452 1 2025-11-27 00:01:31.300 00:00:10.368 TCP 23.104.0.1:53152 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:02:09.481 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51094 10 6452 1 2025-11-27 00:02:31.706 00:00:10.388 TCP 23.104.0.1:55162 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:03:09.699 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40498 10 6452 1 2025-11-27 00:03:25.883 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 00:03:25.824 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 00:03:32.140 00:00:10.365 TCP 23.104.0.1:46912 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:04:09.915 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:51008 10 6452 1 2025-11-27 00:04:32.540 00:00:10.368 TCP 23.104.0.1:39168 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:05:10.097 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54496 10 6452 1 2025-11-27 00:05:32.944 00:00:10.380 TCP 23.104.0.1:56198 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:06:10.273 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44272 10 6452 1 2025-11-27 00:06:33.360 00:00:10.405 TCP 23.104.0.1:49548 -> 1.101.0.1:3000 15 1926 1 2025-11-27 00:02:08.711 00:05:55.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 00:02:08.709 00:05:55.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 00:07:10.451 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:50514 12 10369 1 2025-11-27 00:07:33.806 00:00:10.365 TCP 23.104.0.1:52298 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:08:10.717 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55276 10 6452 1 2025-11-27 00:08:25.926 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 00:08:25.859 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 00:08:34.212 00:00:10.445 TCP 23.104.0.1:58998 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:09:10.928 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:55916 10 6452 1 2025-11-27 00:09:34.696 00:00:10.367 TCP 23.104.0.1:50140 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:10:11.112 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33366 10 6452 1 2025-11-27 00:10:35.106 00:00:10.370 TCP 23.104.0.1:50722 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:11:11.331 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40506 10 6452 1 2025-11-27 00:11:35.513 00:00:10.369 TCP 23.104.0.1:42898 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:12:11.541 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:49074 10 6452 1 2025-11-27 00:12:35.915 00:00:10.333 TCP 23.104.0.1:47066 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:08:08.713 00:05:55.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 00:08:08.710 00:05:55.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 00:13:11.717 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50666 10 6452 1 2025-11-27 00:13:25.787 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 00:13:25.953 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 00:13:36.288 00:00:10.367 TCP 23.104.0.1:34064 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:14:11.931 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:49648 10 6452 1 2025-11-27 00:14:36.694 00:00:10.366 TCP 23.104.0.1:46966 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:15:12.167 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43326 10 6452 1 2025-11-27 00:15:37.107 00:00:10.371 TCP 23.104.0.1:48506 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:16:12.383 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43894 10 6452 1 2025-11-27 00:16:37.518 00:00:10.385 TCP 23.104.0.1:48974 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:17:12.550 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34094 10 6452 1 2025-11-27 00:17:37.941 00:00:10.369 TCP 23.104.0.1:39932 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:18:26.225 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 00:18:12.757 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35710 10 6452 1 2025-11-27 00:18:25.918 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 00:18:38.352 00:00:10.365 TCP 23.104.0.1:35874 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:14:08.714 00:05:55.573 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 00:14:08.717 00:05:55.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 00:19:12.968 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45174 10 6452 1 2025-11-27 00:19:38.764 00:00:10.386 TCP 23.104.0.1:36426 -> 1.101.0.1:3000 12 1559 1 2025-11-27 00:20:13.190 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58598 10 6452 1 2025-11-27 00:20:39.192 00:00:10.321 TCP 23.104.0.1:57026 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:21:13.422 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:60880 12 10375 1 2025-11-27 00:21:39.552 00:00:10.443 TCP 23.104.0.1:53100 -> 1.101.0.1:3000 15 1926 1 2025-11-27 00:22:13.670 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60700 10 6452 1 2025-11-27 00:22:40.046 00:00:10.364 TCP 23.104.0.1:48188 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:23:13.890 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51808 10 6452 1 2025-11-27 00:23:26.180 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 00:23:26.281 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 00:23:40.453 00:00:10.370 TCP 23.104.0.1:35836 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:24:14.132 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36762 10 6452 1 2025-11-27 00:24:40.863 00:00:10.370 TCP 23.104.0.1:48762 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:20:08.714 00:05:55.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 00:20:08.724 00:05:55.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 00:25:14.345 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49580 10 6452 1 2025-11-27 00:25:41.268 00:00:10.371 TCP 23.104.0.1:60168 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:26:14.555 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43504 10 6452 1 2025-11-27 00:26:41.674 00:00:10.367 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:27:14.776 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:47078 10 6452 1 2025-11-27 00:27:42.098 00:00:10.365 TCP 23.104.0.1:41792 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:28:15.031 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40390 10 6452 1 2025-11-27 00:28:26.357 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 00:28:26.370 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 00:28:42.500 00:00:10.367 TCP 23.104.0.1:49122 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:29:15.245 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60412 10 6452 1 2025-11-27 00:29:42.908 00:00:10.331 TCP 23.104.0.1:47322 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:30:15.473 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53146 10 6452 1 2025-11-27 00:30:43.277 00:00:10.322 TCP 23.104.0.1:35770 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:26:08.719 00:05:55.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 00:26:08.716 00:05:55.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 00:31:15.646 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:36300 11 6504 1 2025-11-27 00:31:43.639 00:00:10.321 TCP 23.104.0.1:36052 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:32:15.908 00:00:10.303 TCP 1.101.0.1:3000 -> 22.102.0.1:48548 10 6452 1 2025-11-27 00:32:44.002 00:00:10.360 TCP 23.104.0.1:45502 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:33:16.243 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45834 10 6452 1 2025-11-27 00:33:26.699 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 00:33:26.474 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 00:33:44.403 00:00:10.366 TCP 23.104.0.1:56892 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:34:16.453 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33394 10 6452 1 2025-11-27 00:34:44.804 00:00:10.367 TCP 23.104.0.1:45850 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:35:16.665 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45068 10 6452 1 2025-11-27 00:35:45.209 00:00:10.365 TCP 23.104.0.1:55872 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:36:16.840 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42908 10 6452 1 2025-11-27 00:36:45.613 00:00:10.362 TCP 23.104.0.1:57120 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:32:08.717 00:05:55.576 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 00:32:08.719 00:05:55.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 00:37:17.096 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42362 10 6452 1 2025-11-27 00:37:46.014 00:00:10.367 TCP 23.104.0.1:55710 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:38:26.471 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 00:38:26.369 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 00:38:17.314 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45684 10 6452 1 2025-11-27 00:38:46.422 00:00:10.357 TCP 23.104.0.1:44758 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:39:17.530 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51580 10 6452 1 2025-11-27 00:39:46.818 00:00:10.364 TCP 23.104.0.1:49334 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:40:17.742 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50630 10 6452 1 2025-11-27 00:40:47.218 00:00:10.372 TCP 23.104.0.1:36204 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:41:17.955 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51422 10 6452 1 2025-11-27 00:41:47.627 00:00:10.365 TCP 23.104.0.1:39566 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:42:18.182 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40864 10 6452 1 2025-11-27 00:38:08.721 00:05:55.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 00:42:48.029 00:00:10.369 TCP 23.104.0.1:34328 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:38:08.718 00:05:55.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 00:43:26.633 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 00:43:26.572 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 00:43:18.398 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39274 10 6452 1 2025-11-27 00:43:48.436 00:00:10.379 TCP 23.104.0.1:47396 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:44:18.571 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54508 10 6452 1 2025-11-27 00:44:48.849 00:00:10.377 TCP 23.104.0.1:57064 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:45:18.793 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44920 10 6452 1 2025-11-27 00:45:49.268 00:00:10.324 TCP 23.104.0.1:52002 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:46:18.966 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37460 12 6556 1 2025-11-27 00:46:49.623 00:00:10.364 TCP 23.104.0.1:34764 -> 1.101.0.1:3000 12 1559 1 2025-11-27 00:47:19.204 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50062 10 6452 1 2025-11-27 00:47:50.025 00:00:10.365 TCP 23.104.0.1:35666 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:48:26.736 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 00:48:26.745 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 00:48:19.423 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35192 10 6452 1 2025-11-27 00:48:50.433 00:00:10.419 TCP 23.104.0.1:36794 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:44:08.722 00:05:55.572 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 00:44:08.727 00:05:55.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 00:49:19.642 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49762 10 6452 1 2025-11-27 00:49:50.893 00:00:10.367 TCP 23.104.0.1:37888 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:50:19.877 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-11-27 00:50:51.307 00:00:10.334 TCP 23.104.0.1:38460 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:51:20.105 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:60722 12 10375 1 2025-11-27 00:51:51.694 00:00:10.446 TCP 23.104.0.1:58668 -> 1.101.0.1:3000 15 1926 1 2025-11-27 00:52:20.368 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45992 10 6452 1 2025-11-27 00:52:52.179 00:00:10.365 TCP 23.104.0.1:51788 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:53:20.589 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:32902 10 6452 1 2025-11-27 00:53:27.214 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 00:53:27.358 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 00:53:52.583 00:00:10.368 TCP 23.104.0.1:46888 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:54:20.760 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39596 10 6452 1 2025-11-27 00:50:08.724 00:05:55.571 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 00:54:52.990 00:00:10.370 TCP 23.104.0.1:35418 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:50:08.727 00:05:55.566 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 00:55:20.930 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48886 10 6452 1 2025-11-27 00:55:53.398 00:00:10.368 TCP 23.104.0.1:38630 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:56:21.166 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38270 10 6452 1 2025-11-27 00:56:53.804 00:00:10.335 TCP 23.104.0.1:58316 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:57:21.380 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57292 10 6452 1 2025-11-27 00:57:54.176 00:00:10.366 TCP 23.104.0.1:37342 -> 1.101.0.1:3000 11 1507 1 2025-11-27 00:58:26.957 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 00:58:26.719 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 00:58:21.606 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58990 10 6452 1 Summary: total flows: 163, total bytes: 510121, total packets: 1584, avg bps: 1090, avg pps: 0, avg bpp: 322 Time window: 2025-11-26 23:56:08 - 2025-11-27 00:58:31 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0021s Wall: 0.0024s flows/second: 66888.9 Runtime: 0.0025s