Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 03:59:06.471 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41408 10 6661 1 2025-11-27 03:59:18.526 00:00:10.360 TCP 23.104.0.1:60206 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:00:06.691 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50836 10 6661 1 2025-11-27 04:00:18.927 00:00:10.385 TCP 23.104.0.1:49216 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:56:08.796 00:05:55.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 03:56:08.794 00:05:55.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 04:01:06.905 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53256 10 6661 1 2025-11-27 04:01:19.353 00:00:10.328 TCP 23.104.0.1:41840 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:02:07.120 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38540 10 6661 1 2025-11-27 04:02:19.721 00:00:10.326 TCP 23.104.0.1:39406 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:03:07.336 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53156 10 6661 1 2025-11-27 04:03:30.720 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 04:03:20.103 00:00:10.362 TCP 23.104.0.1:33504 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:03:30.529 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 04:04:07.550 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53178 10 6661 1 2025-11-27 04:04:20.504 00:00:10.366 TCP 23.104.0.1:50758 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:05:07.795 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:42916 10 6661 1 2025-11-27 04:05:20.916 00:00:10.366 TCP 23.104.0.1:49034 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:06:08.058 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54060 10 6661 1 2025-11-27 04:06:21.313 00:00:10.330 TCP 23.104.0.1:60378 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:02:08.795 00:05:55.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 04:02:08.797 00:05:55.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 04:07:08.277 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41152 10 6661 1 2025-11-27 04:07:21.684 00:00:10.366 TCP 23.104.0.1:59528 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:08:08.494 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45460 10 6661 1 2025-11-27 04:08:30.523 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 04:08:30.789 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 04:08:22.100 00:00:10.655 TCP 23.104.0.1:44572 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:09:08.710 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44078 10 6661 1 2025-11-27 04:09:22.788 00:00:10.367 TCP 23.104.0.1:53808 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:10:08.938 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:34004 10 6661 1 2025-11-27 04:10:23.194 00:00:10.366 TCP 23.104.0.1:59826 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:11:09.176 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53862 10 6661 1 2025-11-27 04:11:23.597 00:00:10.455 TCP 23.104.0.1:35194 -> 1.101.0.1:3000 15 1926 1 2025-11-27 04:12:09.346 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:58580 12 10375 1 2025-11-27 04:12:24.107 00:00:10.328 TCP 23.104.0.1:46744 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:08:08.798 00:05:55.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 04:08:08.802 00:05:55.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 04:13:09.583 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:39166 10 6452 1 2025-11-27 04:13:31.538 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 04:13:31.238 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 04:13:24.473 00:00:10.317 TCP 23.104.0.1:60992 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:14:09.787 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51502 10 6452 1 2025-11-27 04:14:24.831 00:00:10.383 TCP 23.104.0.1:36258 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:15:10.003 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60616 10 6452 1 2025-11-27 04:15:25.260 00:00:10.368 TCP 23.104.0.1:34044 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:16:10.214 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34898 10 6452 1 2025-11-27 04:16:25.662 00:00:10.364 TCP 23.104.0.1:57576 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:17:10.436 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40354 10 6452 1 2025-11-27 04:17:26.093 00:00:10.363 TCP 23.104.0.1:60556 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:18:10.651 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53516 10 6452 1 2025-11-27 04:18:30.886 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 04:18:30.892 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 04:18:26.494 00:00:10.366 TCP 23.104.0.1:49546 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:14:08.802 00:05:55.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 04:14:08.799 00:05:55.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 04:19:10.869 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34138 10 6452 1 2025-11-27 04:19:26.902 00:00:10.334 TCP 23.104.0.1:57142 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:20:11.110 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48012 10 6452 1 2025-11-27 04:20:27.277 00:00:10.375 TCP 23.104.0.1:34464 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:21:11.331 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:44110 10 6452 1 2025-11-27 04:21:27.694 00:00:10.330 TCP 23.104.0.1:42172 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:22:11.516 00:00:10.400 TCP 1.101.0.1:3000 -> 22.102.0.1:52652 10 6452 1 2025-11-27 04:22:28.092 00:00:10.363 TCP 23.104.0.1:60522 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:23:11.952 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:54392 10 6452 1 2025-11-27 04:23:31.282 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 04:23:31.469 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 04:23:28.498 00:00:10.375 TCP 23.104.0.1:57160 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:24:12.189 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56510 10 6452 1 2025-11-27 04:24:28.911 00:00:10.373 TCP 23.104.0.1:57344 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:20:08.801 00:05:55.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 04:20:08.805 00:05:55.554 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 04:25:12.404 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59608 10 6452 1 2025-11-27 04:25:29.319 00:00:10.376 TCP 23.104.0.1:46346 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:26:12.613 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37464 10 6452 1 2025-11-27 04:26:29.735 00:00:10.369 TCP 23.104.0.1:58812 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:27:12.829 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55710 10 6452 1 2025-11-27 04:27:30.141 00:00:10.323 TCP 23.104.0.1:59050 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:28:31.154 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 04:28:13.070 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54548 10 6452 1 2025-11-27 04:28:31.204 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 04:28:30.506 00:00:10.362 TCP 23.104.0.1:35332 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:29:13.280 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39550 10 6452 1 2025-11-27 04:29:30.902 00:00:10.367 TCP 23.104.0.1:53612 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:30:13.502 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56934 10 6452 1 2025-11-27 04:30:31.307 00:00:10.366 TCP 23.104.0.1:54620 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:26:08.802 00:05:55.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 04:26:08.805 00:05:55.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 04:31:13.715 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:33640 12 10375 1 2025-11-27 04:31:31.712 00:00:10.506 TCP 23.104.0.1:60026 -> 1.101.0.1:3000 15 1926 1 2025-11-27 04:32:13.962 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42170 10 6452 1 2025-11-27 04:32:32.255 00:00:10.368 TCP 23.104.0.1:59708 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:33:14.200 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39992 10 6452 1 2025-11-27 04:33:31.252 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 04:33:31.096 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 04:33:32.657 00:00:10.366 TCP 23.104.0.1:39416 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:34:14.437 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50858 10 6452 1 2025-11-27 04:34:33.092 00:00:10.363 TCP 23.104.0.1:47600 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:35:14.654 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49568 10 6452 1 2025-11-27 04:35:33.494 00:00:10.364 TCP 23.104.0.1:60930 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:36:14.864 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35120 10 6452 1 2025-11-27 04:36:33.899 00:00:10.372 TCP 23.104.0.1:51456 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:32:08.803 00:05:55.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 04:32:08.806 00:05:55.553 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 04:37:15.087 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44882 10 6452 1 2025-11-27 04:37:34.307 00:00:10.364 TCP 23.104.0.1:36108 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:38:15.305 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56204 10 6452 1 2025-11-27 04:38:31.304 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 04:38:31.205 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 04:38:34.709 00:00:10.324 TCP 23.104.0.1:43636 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:39:15.479 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39474 10 6452 1 2025-11-27 04:39:35.098 00:00:10.366 TCP 23.104.0.1:36432 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:40:15.693 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49986 10 6452 1 2025-11-27 04:40:35.505 00:00:10.359 TCP 23.104.0.1:54360 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:41:15.902 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:36092 12 10369 1 2025-11-27 04:41:35.900 00:00:10.446 TCP 23.104.0.1:40120 -> 1.101.0.1:3000 15 1926 1 2025-11-27 04:42:16.148 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48918 10 6452 1 2025-11-27 04:42:36.384 00:00:10.962 TCP 23.104.0.1:51472 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:38:08.808 00:05:55.553 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 04:38:08.804 00:05:55.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 04:43:16.364 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39452 10 6452 1 2025-11-27 04:43:31.688 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 04:43:31.656 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 04:43:37.384 00:00:10.361 TCP 23.104.0.1:50636 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:44:16.539 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57076 10 6452 1 2025-11-27 04:44:37.780 00:00:11.708 TCP 23.104.0.1:48286 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:45:16.753 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58992 10 6452 1 2025-11-27 04:45:39.531 00:00:10.358 TCP 23.104.0.1:52154 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:46:16.930 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53982 10 6452 1 2025-11-27 04:46:39.928 00:00:10.389 TCP 23.104.0.1:52406 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:47:17.168 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53976 10 6452 1 2025-11-27 04:47:40.355 00:00:10.369 TCP 23.104.0.1:38456 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:48:31.417 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 04:48:17.379 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51678 10 6452 1 2025-11-27 04:48:31.478 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 04:48:40.762 00:00:10.333 TCP 23.104.0.1:39506 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:44:08.808 00:05:55.554 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 04:44:08.805 00:05:55.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 04:49:17.554 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40386 10 6452 1 2025-11-27 04:49:41.134 00:00:10.368 TCP 23.104.0.1:41224 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:50:17.773 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43220 10 6452 1 2025-11-27 04:50:41.538 00:00:10.364 TCP 23.104.0.1:33034 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:51:17.983 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:37532 12 10369 1 2025-11-27 04:51:41.941 00:00:10.401 TCP 23.104.0.1:43600 -> 1.101.0.1:3000 15 1926 1 2025-11-27 04:52:18.253 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39314 10 6452 1 2025-11-27 04:52:42.380 00:00:10.328 TCP 23.104.0.1:52800 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:53:31.554 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 04:53:18.471 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:41112 10 6452 1 2025-11-27 04:53:31.653 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 04:53:42.770 00:00:10.376 TCP 23.104.0.1:55534 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:54:18.678 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:51322 10 6452 1 2025-11-27 04:54:43.185 00:00:10.324 TCP 23.104.0.1:40374 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:50:08.807 00:05:55.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 04:50:08.809 00:05:55.553 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 04:55:18.871 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40296 10 6452 1 2025-11-27 04:55:43.551 00:00:10.359 TCP 23.104.0.1:46642 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:56:19.105 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:40798 12 10369 1 2025-11-27 04:56:43.951 00:00:10.446 TCP 23.104.0.1:54894 -> 1.101.0.1:3000 15 1926 1 2025-11-27 04:57:19.351 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52894 10 6452 1 2025-11-27 04:57:44.443 00:00:10.321 TCP 23.104.0.1:52498 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:58:19.569 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51552 10 6452 1 2025-11-27 04:58:31.637 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 04:58:31.631 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 163, total bytes: 521250, total packets: 1591, avg bps: 1114, avg pps: 0, avg bpp: 327 Time window: 2025-11-27 03:56:08 - 2025-11-27 04:58:31 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0020s Wall: 0.0161s flows/second: 10097.9 Runtime: 0.0162s