Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 17:59:04.112 00:00:10.242 TCP 1.101.0.1:3000 -> 22.102.0.1:48248 10 6452 1 2025-11-27 17:59:21.753 00:00:10.335 TCP 23.104.0.1:53906 -> 1.101.0.1:3000 11 1507 1 2025-11-27 17:56:04.593 00:05:04.507 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 17:56:04.590 00:05:04.513 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 18:00:04.396 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33232 10 6452 1 2025-11-27 18:00:22.124 00:00:10.366 TCP 23.104.0.1:52080 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:01:04.609 00:00:10.476 TCP 1.101.0.1:3000 -> 22.102.0.1:48716 10 6452 1 2025-11-27 18:01:22.529 00:00:10.487 TCP 23.104.0.1:36478 -> 1.101.0.1:3000 15 1926 1 2025-11-27 18:02:05.123 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:34414 12 10375 1 2025-11-27 18:02:23.060 00:00:10.364 TCP 23.104.0.1:54660 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:03:05.366 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34438 10 6452 1 2025-11-27 18:03:23.464 00:00:10.317 TCP 23.104.0.1:53266 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:03:47.587 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 18:03:47.464 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 18:04:05.585 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45876 10 6452 1 2025-11-27 18:04:23.822 00:00:10.369 TCP 23.104.0.1:55574 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:05:05.762 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35960 10 6452 1 2025-11-27 18:05:24.224 00:00:10.367 TCP 23.104.0.1:52666 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:02:04.594 00:05:04.507 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 18:02:04.591 00:05:04.513 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 18:06:05.935 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51890 10 6452 1 2025-11-27 18:06:24.624 00:00:10.394 TCP 23.104.0.1:41684 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:07:06.166 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53512 10 6452 1 2025-11-27 18:07:25.081 00:00:10.361 TCP 23.104.0.1:34680 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:08:06.380 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:49214 10 6452 1 2025-11-27 18:08:25.483 00:00:10.333 TCP 23.104.0.1:49252 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:08:47.691 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 18:08:47.838 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 18:09:06.548 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46962 10 6452 1 2025-11-27 18:09:25.858 00:00:10.372 TCP 23.104.0.1:53378 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:10:06.722 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35856 10 6452 1 2025-11-27 18:10:26.276 00:00:10.328 TCP 23.104.0.1:37934 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:11:06.931 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47844 10 6452 1 2025-11-27 18:11:26.633 00:00:10.320 TCP 23.104.0.1:59748 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:08:04.596 00:05:04.516 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 18:08:04.593 00:05:04.521 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 18:12:07.168 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52070 10 6452 1 2025-11-27 18:12:26.988 00:00:10.359 TCP 23.104.0.1:38040 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:13:07.392 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49976 10 6452 1 2025-11-27 18:13:27.386 00:00:10.361 TCP 23.104.0.1:44676 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:13:47.953 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 18:13:48.050 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 18:14:07.568 00:00:10.603 TCP 1.101.0.1:3000 -> 22.102.0.1:54824 10 6452 1 2025-11-27 18:14:27.787 00:00:10.371 TCP 23.104.0.1:44004 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:15:08.210 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42238 10 6452 1 2025-11-27 18:15:28.196 00:00:10.364 TCP 23.104.0.1:43486 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:16:08.429 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59752 10 6452 1 2025-11-27 18:16:28.605 00:00:10.438 TCP 23.104.0.1:56376 -> 1.101.0.1:3000 15 1926 1 2025-11-27 18:17:08.600 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56210 12 10375 1 2025-11-27 18:17:29.103 00:00:10.327 TCP 23.104.0.1:59824 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:14:04.597 00:05:04.519 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 18:14:04.599 00:05:04.515 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 18:18:08.847 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33152 10 6452 1 2025-11-27 18:18:29.472 00:00:10.363 TCP 23.104.0.1:56280 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:18:47.830 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 18:18:47.813 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 18:19:09.081 00:00:10.398 TCP 1.101.0.1:3000 -> 22.102.0.1:56302 10 6452 1 2025-11-27 18:19:29.873 00:00:10.366 TCP 23.104.0.1:40526 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:20:09.523 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57948 10 6452 1 2025-11-27 18:20:30.276 00:00:10.365 TCP 23.104.0.1:40296 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:21:09.735 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42866 10 6452 1 2025-11-27 18:21:30.680 00:00:10.373 TCP 23.104.0.1:47010 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:22:09.947 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49200 10 6452 1 2025-11-27 18:22:31.098 00:00:10.328 TCP 23.104.0.1:55308 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:23:10.183 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45920 10 6452 1 2025-11-27 18:23:31.466 00:00:10.319 TCP 23.104.0.1:56248 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:23:47.942 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 18:23:48.199 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 18:20:04.599 00:05:04.518 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 18:20:04.601 00:05:04.513 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 18:24:10.406 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56750 10 6452 1 2025-11-27 18:24:31.835 00:00:10.354 TCP 23.104.0.1:47182 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:25:10.579 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58268 10 6452 1 2025-11-27 18:25:32.232 00:00:10.362 TCP 23.104.0.1:50636 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:26:10.746 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59352 10 6452 1 2025-11-27 18:26:32.632 00:00:10.372 TCP 23.104.0.1:56896 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:27:10.965 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50892 10 6452 1 2025-11-27 18:27:33.054 00:00:10.361 TCP 23.104.0.1:36354 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:28:11.186 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47786 10 6452 1 2025-11-27 18:28:33.454 00:00:10.364 TCP 23.104.0.1:50070 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:28:48.065 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 18:28:47.968 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 18:29:11.399 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53624 10 6452 1 2025-11-27 18:29:33.854 00:00:10.378 TCP 23.104.0.1:52896 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:26:04.599 00:05:04.520 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 18:26:04.605 00:05:04.514 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 18:30:11.619 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34856 10 6452 1 2025-11-27 18:30:34.273 00:00:10.369 TCP 23.104.0.1:50030 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:31:11.794 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41688 10 6452 1 2025-11-27 18:31:34.686 00:00:10.363 TCP 23.104.0.1:44362 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:32:12.007 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59038 10 6452 1 2025-11-27 18:32:35.108 00:00:10.364 TCP 23.104.0.1:34256 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:33:12.232 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35824 10 6452 1 2025-11-27 18:33:35.511 00:00:10.322 TCP 23.104.0.1:48406 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:33:48.212 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 18:33:48.288 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 18:34:12.441 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33228 10 6452 1 2025-11-27 18:34:35.871 00:00:10.363 TCP 23.104.0.1:45356 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:35:12.650 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50120 10 6452 1 2025-11-27 18:35:36.275 00:00:10.364 TCP 23.104.0.1:44810 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:32:04.603 00:05:04.519 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 18:32:04.605 00:05:04.514 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 18:36:12.869 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41954 10 6452 1 2025-11-27 18:36:36.676 00:00:10.381 TCP 23.104.0.1:35204 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:37:13.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53048 10 6452 1 2025-11-27 18:37:37.113 00:00:10.366 TCP 23.104.0.1:39696 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:38:13.293 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51760 10 6452 1 2025-11-27 18:38:48.297 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 18:38:37.517 00:00:10.371 TCP 23.104.0.1:43570 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:38:48.321 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 18:39:13.508 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45334 10 6452 1 2025-11-27 18:39:37.941 00:00:10.341 TCP 23.104.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:40:13.719 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60222 10 6452 1 2025-11-27 18:40:38.319 00:00:10.368 TCP 23.104.0.1:36188 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:41:13.937 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51712 10 6452 1 2025-11-27 18:41:38.723 00:00:10.368 TCP 23.104.0.1:36378 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:38:04.605 00:05:04.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 18:38:04.607 00:05:04.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 18:42:14.168 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46142 10 6452 1 2025-11-27 18:42:39.128 00:00:10.374 TCP 23.104.0.1:50736 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:43:14.350 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41872 10 6452 1 2025-11-27 18:43:48.347 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 18:43:39.538 00:00:10.373 TCP 23.104.0.1:57078 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:43:48.447 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 18:44:14.565 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46562 10 6452 1 2025-11-27 18:44:39.959 00:00:10.325 TCP 23.104.0.1:41770 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:45:14.782 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55030 10 6452 1 2025-11-27 18:45:40.321 00:00:10.364 TCP 23.104.0.1:44918 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:46:14.992 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35710 10 6452 1 2025-11-27 18:46:40.725 00:00:10.364 TCP 23.104.0.1:56234 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:47:15.226 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45826 10 6452 1 2025-11-27 18:47:41.130 00:00:10.364 TCP 23.104.0.1:49380 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:44:04.606 00:05:04.532 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 18:44:04.609 00:05:04.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 18:48:15.454 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36980 10 6452 1 2025-11-27 18:48:48.651 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 18:48:48.811 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 18:48:41.532 00:00:10.328 TCP 23.104.0.1:50542 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:49:15.664 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39410 10 6452 1 2025-11-27 18:49:41.899 00:00:10.376 TCP 23.104.0.1:53708 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:50:15.882 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37466 10 6452 1 2025-11-27 18:50:42.308 00:00:10.367 TCP 23.104.0.1:53350 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:51:16.080 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49514 10 6452 1 2025-11-27 18:51:42.714 00:00:10.324 TCP 23.104.0.1:60884 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:52:16.300 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50512 10 6452 1 2025-11-27 18:52:43.104 00:00:10.369 TCP 23.104.0.1:47842 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:53:16.513 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49462 10 6452 1 2025-11-27 18:53:48.740 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 18:53:48.619 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 18:53:43.508 00:00:10.367 TCP 23.104.0.1:59604 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:50:04.610 00:05:04.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 18:50:04.613 00:05:04.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 18:54:16.727 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50800 10 6452 1 2025-11-27 18:54:43.911 00:00:10.368 TCP 23.104.0.1:49190 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:55:16.940 00:00:10.251 TCP 1.101.0.1:3000 -> 22.102.0.1:49120 10 6452 1 2025-11-27 18:55:44.316 00:00:10.371 TCP 23.104.0.1:49884 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:56:17.230 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48604 10 6452 1 2025-11-27 18:56:44.729 00:00:10.383 TCP 23.104.0.1:55190 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:57:17.443 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33160 10 6452 1 2025-11-27 18:57:45.153 00:00:10.361 TCP 23.104.0.1:55620 -> 1.101.0.1:3000 11 1507 1 2025-11-27 18:58:17.662 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43490 10 6452 1 2025-11-27 18:58:48.625 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 162, total bytes: 505273, total packets: 1570, avg bps: 1073, avg pps: 0, avg bpp: 321 Time window: 2025-11-27 17:56:04 - 2025-11-27 18:58:48 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0047s User: 0.0008s Wall: 0.0031s flows/second: 52526.1 Runtime: 0.0031s