Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 08:59:21.710 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:56324 10 6452 1 2025-11-27 08:59:29.337 00:00:10.367 TCP 23.104.0.1:36856 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:00:21.919 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49984 10 6452 1 2025-11-27 09:00:29.745 00:00:10.399 TCP 23.104.0.1:41868 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:56:08.889 00:05:55.545 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 08:56:08.885 00:05:55.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 09:01:22.133 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59736 10 6452 1 2025-11-27 09:01:30.178 00:00:10.364 TCP 23.104.0.1:41718 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:02:22.348 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39982 10 6452 1 2025-11-27 09:02:30.580 00:00:10.332 TCP 23.104.0.1:52248 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:03:36.645 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 09:03:22.559 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38050 10 6452 1 2025-11-27 09:03:30.944 00:00:10.371 TCP 23.104.0.1:59656 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:03:36.996 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 09:04:22.771 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56548 10 6452 1 2025-11-27 09:04:31.356 00:00:10.361 TCP 23.104.0.1:35078 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:05:22.983 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54116 10 6452 1 2025-11-27 09:05:31.760 00:00:10.336 TCP 23.104.0.1:42464 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:06:23.217 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49334 10 6452 1 2025-11-27 09:06:32.135 00:00:10.358 TCP 23.104.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:02:08.891 00:05:55.546 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 09:02:08.894 00:05:55.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 09:07:23.392 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55552 10 6452 1 2025-11-27 09:07:32.535 00:00:10.374 TCP 23.104.0.1:42294 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:08:36.558 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 09:08:23.606 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58116 10 6452 1 2025-11-27 09:08:36.956 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 09:08:32.951 00:00:10.369 TCP 23.104.0.1:41802 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:09:23.823 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38910 10 6452 1 2025-11-27 09:09:33.357 00:00:10.365 TCP 23.104.0.1:51602 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:10:24.071 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35456 10 6452 1 2025-11-27 09:10:33.759 00:00:10.376 TCP 23.104.0.1:60398 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:11:24.286 00:00:10.519 TCP 1.101.0.1:3000 -> 22.102.0.1:41434 10 6452 1 2025-11-27 09:11:34.177 00:00:10.367 TCP 23.104.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:12:24.844 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50812 10 6452 1 2025-11-27 09:12:34.582 00:00:10.361 TCP 23.104.0.1:57300 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:08:08.894 00:05:55.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 09:08:08.891 00:05:55.546 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 09:13:25.027 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34186 10 6452 1 2025-11-27 09:13:36.759 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 09:13:36.776 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 09:13:34.984 00:00:10.367 TCP 23.104.0.1:53110 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:14:25.239 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48508 10 6452 1 2025-11-27 09:14:35.386 00:00:10.365 TCP 23.104.0.1:40304 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:15:25.456 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40684 10 6452 1 2025-11-27 09:15:35.786 00:00:10.323 TCP 23.104.0.1:53852 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:16:25.630 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53686 10 6452 1 2025-11-27 09:16:36.144 00:00:10.365 TCP 23.104.0.1:40210 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:17:25.848 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46972 10 6452 1 2025-11-27 09:17:36.562 00:00:10.366 TCP 23.104.0.1:55110 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:18:36.872 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 09:18:26.026 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50776 10 6452 1 2025-11-27 09:18:36.979 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 09:18:36.968 00:00:10.372 TCP 23.104.0.1:33764 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:14:08.892 00:05:55.546 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 09:14:08.895 00:05:55.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 09:19:26.194 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42306 10 6452 1 2025-11-27 09:19:37.376 00:00:10.363 TCP 23.104.0.1:37026 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:20:26.446 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35332 10 6452 1 2025-11-27 09:20:37.780 00:00:10.363 TCP 23.104.0.1:46516 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:21:26.670 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35334 10 6452 1 2025-11-27 09:21:38.198 00:00:10.328 TCP 23.104.0.1:52592 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:22:26.882 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48986 10 6452 1 2025-11-27 09:22:38.563 00:00:10.368 TCP 23.104.0.1:51398 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:23:27.112 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35778 10 6452 1 2025-11-27 09:23:37.005 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 09:23:37.269 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 09:23:38.969 00:00:10.367 TCP 23.104.0.1:57610 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:24:27.288 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35080 10 6452 1 2025-11-27 09:24:39.371 00:00:10.365 TCP 23.104.0.1:35298 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:20:08.894 00:05:55.546 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 09:20:08.897 00:05:55.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 09:25:27.495 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45146 10 6452 1 2025-11-27 09:25:39.776 00:00:10.327 TCP 23.104.0.1:33364 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:26:27.713 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57162 10 6452 1 2025-11-27 09:26:40.149 00:00:10.367 TCP 23.104.0.1:41028 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:27:27.932 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44804 10 6452 1 2025-11-27 09:27:40.551 00:00:10.367 TCP 23.104.0.1:33888 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:28:37.071 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 09:28:28.161 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50380 10 6452 1 2025-11-27 09:28:37.225 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 09:28:40.961 00:00:10.362 TCP 23.104.0.1:59140 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:29:28.372 00:00:22.059 TCP 1.101.0.1:3000 -> 22.102.0.1:37780 10 6452 1 2025-11-27 09:29:41.368 00:00:10.370 TCP 23.104.0.1:36972 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:30:40.478 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37012 10 6452 1 2025-11-27 09:30:41.776 00:00:10.373 TCP 23.104.0.1:38728 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:26:08.897 00:05:55.542 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 09:26:08.895 00:05:55.547 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 09:31:40.686 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53164 10 6452 1 2025-11-27 09:31:42.186 00:00:10.370 TCP 23.104.0.1:58716 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:32:40.903 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48300 10 6452 1 2025-11-27 09:32:42.596 00:00:10.366 TCP 23.104.0.1:50860 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:33:37.012 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 09:33:37.269 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 09:33:41.083 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47376 10 6452 1 2025-11-27 09:33:42.997 00:00:10.324 TCP 23.104.0.1:60756 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:34:41.263 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33616 10 6452 1 2025-11-27 09:34:43.357 00:00:10.368 TCP 23.104.0.1:55490 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:35:41.437 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58748 10 6452 1 2025-11-27 09:35:43.759 00:00:10.388 TCP 23.104.0.1:45968 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:36:41.648 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40380 10 6452 1 2025-11-27 09:36:44.191 00:00:10.361 TCP 23.104.0.1:47730 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:32:08.898 00:05:55.542 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 09:32:08.896 00:05:55.546 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 09:37:41.859 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43342 10 6452 1 2025-11-27 09:37:44.585 00:00:10.368 TCP 23.104.0.1:44162 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:38:37.218 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 09:38:37.234 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 09:38:44.990 00:00:10.366 TCP 23.104.0.1:41944 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:38:42.037 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47578 10 6452 1 2025-11-27 09:39:42.208 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36248 10 6452 1 2025-11-27 09:39:45.392 00:00:10.357 TCP 23.104.0.1:37764 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:40:42.388 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55970 10 6452 1 2025-11-27 09:40:45.793 00:00:10.328 TCP 23.104.0.1:41470 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:41:46.158 00:00:10.366 TCP 23.104.0.1:51012 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:41:42.561 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41934 10 6452 1 2025-11-27 09:42:42.745 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55412 11 6775 1 2025-11-27 09:42:46.565 00:00:10.323 TCP 23.104.0.1:33826 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:38:08.900 00:05:55.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 09:38:08.898 00:05:55.546 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 09:43:37.492 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 09:43:37.500 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 09:43:42.963 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35556 10 6452 1 2025-11-27 09:43:46.926 00:00:10.386 TCP 23.104.0.1:38562 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:44:43.142 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51492 10 6452 1 2025-11-27 09:44:47.349 00:00:10.367 TCP 23.104.0.1:44250 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:45:43.351 00:00:11.772 TCP 1.101.0.1:3000 -> 22.102.0.1:35928 10 6452 1 2025-11-27 09:45:47.753 00:00:10.375 TCP 23.104.0.1:34648 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:46:45.167 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50848 10 6452 1 2025-11-27 09:46:48.163 00:00:10.369 TCP 23.104.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:47:45.339 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51106 10 6452 1 2025-11-27 09:47:48.581 00:00:10.359 TCP 23.104.0.1:33528 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:48:37.597 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 09:48:37.353 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 09:48:45.549 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33892 10 6452 1 2025-11-27 09:48:48.981 00:00:10.331 TCP 23.104.0.1:33452 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:44:08.899 00:05:55.547 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 09:44:08.901 00:05:55.542 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 09:49:45.764 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41634 10 6452 1 2025-11-27 09:49:49.360 00:00:10.319 TCP 23.104.0.1:59590 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:50:45.978 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:53276 10 6452 1 2025-11-27 09:50:49.720 00:00:10.377 TCP 23.104.0.1:45600 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:51:46.172 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49122 10 6452 1 2025-11-27 09:51:50.139 00:00:10.360 TCP 23.104.0.1:52722 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:52:46.383 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35292 10 6452 1 2025-11-27 09:52:50.541 00:00:10.361 TCP 23.104.0.1:60620 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:53:37.500 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 09:53:37.497 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 09:53:46.593 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34398 10 6452 1 2025-11-27 09:53:50.944 00:00:10.333 TCP 23.104.0.1:34106 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:54:46.766 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60284 10 6452 1 2025-11-27 09:54:51.316 00:00:10.332 TCP 23.104.0.1:44230 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:50:08.900 00:05:55.549 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 09:50:08.903 00:05:55.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 09:55:46.985 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45684 10 6452 1 2025-11-27 09:55:51.687 00:00:10.371 TCP 23.104.0.1:55706 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:56:47.208 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50316 10 6452 1 2025-11-27 09:56:52.107 00:00:10.359 TCP 23.104.0.1:46968 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:57:47.383 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45542 10 6452 1 2025-11-27 09:57:52.511 00:00:10.361 TCP 23.104.0.1:35162 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:58:37.514 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 09:58:37.778 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 162, total bytes: 490712, total packets: 1552, avg bps: 1047, avg pps: 0, avg bpp: 316 Time window: 2025-11-27 08:56:08 - 2025-11-27 09:58:37 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0052s User: 0.0000s Wall: 0.0020s flows/second: 82231.3 Runtime: 0.0020s