Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 09:58:47.597 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55776 10 6452 1 2025-11-27 09:58:52.912 00:00:10.327 TCP 23.104.0.1:59626 -> 1.101.0.1:3000 11 1507 1 2025-11-27 09:59:47.809 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38988 10 6452 1 2025-11-27 09:59:53.279 00:00:10.366 TCP 23.104.0.1:36474 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:00:48.026 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37046 10 6452 1 2025-11-27 09:56:08.905 00:05:55.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 09:56:08.903 00:05:55.548 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 10:00:53.687 00:00:10.358 TCP 23.104.0.1:57586 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:01:48.236 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49472 10 6452 1 2025-11-27 10:01:54.100 00:00:10.377 TCP 23.104.0.1:37876 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:02:48.408 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56368 10 6452 1 2025-11-27 10:02:54.515 00:00:10.370 TCP 23.104.0.1:35218 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:03:37.962 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 10:03:37.753 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 10:03:48.617 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56068 10 6452 1 2025-11-27 10:03:54.924 00:00:10.381 TCP 23.104.0.1:53928 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:04:48.795 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54810 10 6452 1 2025-11-27 10:04:55.338 00:00:10.362 TCP 23.104.0.1:43788 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:05:49.007 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59744 10 6452 1 2025-11-27 10:05:55.742 00:00:10.365 TCP 23.104.0.1:54690 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:06:49.214 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46462 10 6452 1 2025-11-27 10:02:08.907 00:05:55.546 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 10:06:56.143 00:00:10.367 TCP 23.104.0.1:55740 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:02:08.905 00:05:55.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 10:07:49.430 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51686 10 6452 1 2025-11-27 10:07:56.547 00:00:10.319 TCP 23.104.0.1:36046 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:08:38.237 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 10:08:38.453 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 10:08:49.643 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38554 10 6452 1 2025-11-27 10:08:56.907 00:00:10.367 TCP 23.104.0.1:39878 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:09:49.820 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51288 10 6452 1 2025-11-27 10:09:57.312 00:00:10.364 TCP 23.104.0.1:37888 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:10:50.043 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52884 10 6452 1 2025-11-27 10:10:57.715 00:00:10.321 TCP 23.104.0.1:42150 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:11:50.258 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51430 10 6452 1 2025-11-27 10:11:58.105 00:00:10.359 TCP 23.104.0.1:38404 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:12:50.470 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42948 10 6452 1 2025-11-27 10:08:08.908 00:05:55.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 10:08:08.906 00:05:55.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 10:12:58.508 00:00:10.366 TCP 23.104.0.1:48704 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:13:38.069 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 10:13:37.955 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 10:13:58.915 00:00:10.822 TCP 23.104.0.1:34212 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:13:50.678 00:00:18.966 TCP 1.101.0.1:3000 -> 22.102.0.1:39830 10 6452 1 2025-11-27 10:14:59.804 00:00:10.360 TCP 23.104.0.1:34002 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:14:59.697 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47214 10 6452 1 2025-11-27 10:15:59.908 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54740 10 6452 1 2025-11-27 10:16:00.205 00:00:10.356 TCP 23.104.0.1:57986 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:17:00.124 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36618 10 6452 1 2025-11-27 10:17:00.608 00:00:10.332 TCP 23.104.0.1:33920 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:18:00.977 00:00:10.335 TCP 23.104.0.1:59096 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:18:00.338 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49622 10 6452 1 2025-11-27 10:18:38.493 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 10:18:38.703 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 10:14:08.910 00:05:55.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 10:14:08.906 00:05:55.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 10:19:01.353 00:00:10.360 TCP 23.104.0.1:47912 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:19:00.562 00:00:10.843 TCP 1.101.0.1:3000 -> 22.102.0.1:48660 10 6452 1 2025-11-27 10:20:01.444 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 10 6452 1 2025-11-27 10:20:01.752 00:00:10.387 TCP 23.104.0.1:34200 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:21:01.661 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47854 10 6452 1 2025-11-27 10:21:02.180 00:00:10.361 TCP 23.104.0.1:42240 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:22:01.871 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:42902 12 10369 1 2025-11-27 10:22:02.584 00:00:10.442 TCP 23.104.0.1:43852 -> 1.101.0.1:3000 15 1926 1 2025-11-27 10:23:03.101 00:00:10.363 TCP 23.104.0.1:56078 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:23:02.134 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49688 10 6452 1 2025-11-27 10:23:38.387 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 10:23:38.089 00:00:00.052 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 10:24:02.349 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41436 10 6452 1 2025-11-27 10:24:03.503 00:00:10.370 TCP 23.104.0.1:33718 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:20:08.912 00:05:55.546 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 10:20:08.910 00:05:55.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 10:25:02.567 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45344 10 6452 1 2025-11-27 10:25:03.910 00:00:10.362 TCP 23.104.0.1:58532 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:26:04.309 00:00:10.365 TCP 23.104.0.1:45374 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:26:02.780 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33968 10 6452 1 2025-11-27 10:27:04.713 00:00:10.381 TCP 23.104.0.1:53984 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:27:02.998 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54214 10 6452 1 2025-11-27 10:28:03.232 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42082 10 6452 1 2025-11-27 10:28:05.137 00:00:10.361 TCP 23.104.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:28:38.307 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 10:28:38.518 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 10:29:03.446 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47356 10 6452 1 2025-11-27 10:29:05.543 00:00:10.367 TCP 23.104.0.1:54740 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:30:03.661 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45076 10 6452 1 2025-11-27 10:30:05.950 00:00:10.373 TCP 23.104.0.1:51984 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:26:08.922 00:05:55.537 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 10:26:08.912 00:05:55.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 10:31:06.356 00:00:10.329 TCP 23.104.0.1:38028 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:31:03.872 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36028 10 6452 1 2025-11-27 10:32:04.102 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50590 10 6452 1 2025-11-27 10:32:06.723 00:00:10.371 TCP 23.104.0.1:49642 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:33:04.276 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:57096 10 6452 1 2025-11-27 10:33:07.133 00:00:10.369 TCP 23.104.0.1:33118 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:33:38.351 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 10:33:38.517 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 10:34:04.487 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50030 10 6452 1 2025-11-27 10:34:07.535 00:00:10.321 TCP 23.104.0.1:52134 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:35:04.702 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58150 10 6452 1 2025-11-27 10:35:07.897 00:00:10.367 TCP 23.104.0.1:38642 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:36:04.913 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44940 10 6452 1 2025-11-27 10:36:08.304 00:00:10.366 TCP 23.104.0.1:50798 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:32:08.917 00:05:55.544 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 10:32:08.914 00:05:55.549 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 10:37:05.124 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42572 10 6452 1 2025-11-27 10:37:08.713 00:00:10.360 TCP 23.104.0.1:38008 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:38:05.344 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60232 10 6452 1 2025-11-27 10:38:09.114 00:00:10.366 TCP 23.104.0.1:50684 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:38:38.480 00:00:00.018 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 10:38:38.453 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 10:39:05.568 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33294 10 6452 1 2025-11-27 10:39:09.517 00:00:10.364 TCP 23.104.0.1:45302 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:40:05.744 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42018 10 6452 1 2025-11-27 10:40:09.918 00:00:10.393 TCP 23.104.0.1:35328 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:41:05.950 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53570 12 6556 1 2025-11-27 10:41:10.352 00:00:10.363 TCP 23.104.0.1:46366 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:42:06.188 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39684 10 6452 1 2025-11-27 10:42:10.756 00:00:10.390 TCP 23.104.0.1:38602 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:38:08.918 00:05:55.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 10:38:08.916 00:05:55.548 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 10:43:06.398 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52798 10 6452 1 2025-11-27 10:43:11.184 00:00:10.326 TCP 23.104.0.1:50982 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:43:38.541 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 10:43:38.660 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 10:44:06.610 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37618 10 6452 1 2025-11-27 10:44:11.547 00:00:10.364 TCP 23.104.0.1:41558 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:45:06.780 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33958 10 6452 1 2025-11-27 10:45:11.949 00:00:10.329 TCP 23.104.0.1:52670 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:46:06.994 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47382 10 6452 1 2025-11-27 10:46:12.321 00:00:10.325 TCP 23.104.0.1:36406 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:47:07.215 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49240 10 6452 1 2025-11-27 10:47:12.684 00:00:10.368 TCP 23.104.0.1:49452 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:48:07.428 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50116 10 6452 1 2025-11-27 10:48:13.101 00:00:10.324 TCP 23.104.0.1:51358 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:48:38.671 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 10:48:38.810 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 10:44:08.928 00:05:55.535 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 10:44:08.925 00:05:55.540 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 10:49:07.638 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41866 10 6452 1 2025-11-27 10:49:13.467 00:00:10.326 TCP 23.104.0.1:36560 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:50:07.848 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37678 10 6452 1 2025-11-27 10:50:13.827 00:00:10.362 TCP 23.104.0.1:33930 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:51:08.088 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49562 10 6452 1 2025-11-27 10:51:14.243 00:00:10.323 TCP 23.104.0.1:48132 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:52:08.262 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44622 10 6452 1 2025-11-27 10:52:14.603 00:00:10.369 TCP 23.104.0.1:56698 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:53:08.489 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60540 10 6452 1 2025-11-27 10:53:15.012 00:00:10.368 TCP 23.104.0.1:37292 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:53:38.755 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 10:53:38.957 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 10:54:08.702 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54406 10 6452 1 2025-11-27 10:54:15.428 00:00:10.364 TCP 23.104.0.1:56710 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:50:08.933 00:05:55.532 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 10:50:08.931 00:05:55.537 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 10:55:08.922 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42608 10 6452 1 2025-11-27 10:55:15.828 00:00:10.382 TCP 23.104.0.1:54446 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:56:09.139 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49174 10 6452 1 2025-11-27 10:56:16.246 00:00:10.365 TCP 23.104.0.1:60118 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:57:09.352 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59224 10 6452 1 2025-11-27 10:57:16.648 00:00:10.367 TCP 23.104.0.1:39216 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:58:09.525 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-11-27 10:58:17.062 00:00:10.362 TCP 23.104.0.1:60958 -> 1.101.0.1:3000 11 1507 1 2025-11-27 10:58:39.007 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 10:58:38.956 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 164, total bytes: 502788, total packets: 1580, avg bps: 1072, avg pps: 0, avg bpp: 318 Time window: 2025-11-27 09:56:08 - 2025-11-27 10:58:39 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0013s Wall: 0.0030s flows/second: 55237.0 Runtime: 0.0030s