Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 23:58:41.933 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54412 10 6452 1 2025-11-27 23:58:54.353 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 23:58:54.333 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 23:58:54.415 00:00:10.361 TCP 23.104.0.1:60426 -> 1.101.0.1:3000 11 1507 1 2025-11-27 23:59:42.162 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58180 10 6452 1 2025-11-27 23:59:54.816 00:00:10.361 TCP 23.104.0.1:56758 -> 1.101.0.1:3000 11 1507 1 2025-11-27 23:56:04.694 00:05:04.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 23:56:04.697 00:05:04.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 00:00:42.374 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56264 10 6452 1 2025-11-28 00:00:55.220 00:00:10.362 TCP 23.104.0.1:35048 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:01:42.600 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45512 10 6452 1 2025-11-28 00:01:55.628 00:00:10.363 TCP 23.104.0.1:45150 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:02:42.813 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57532 10 6452 1 2025-11-28 00:02:56.029 00:00:10.361 TCP 23.104.0.1:52250 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:03:54.695 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 00:03:43.038 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52668 10 6452 1 2025-11-28 00:03:54.564 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 00:03:56.429 00:00:10.362 TCP 23.104.0.1:48882 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:04:43.260 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51358 10 6452 1 2025-11-28 00:04:56.830 00:00:10.317 TCP 23.104.0.1:55672 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:05:43.473 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39562 10 6452 1 2025-11-28 00:02:04.698 00:05:04.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 00:05:57.187 00:00:10.363 TCP 23.104.0.1:44306 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:02:04.695 00:05:04.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 00:06:43.682 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54672 10 6452 1 2025-11-28 00:06:57.592 00:00:10.421 TCP 23.104.0.1:32938 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:07:43.895 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36870 10 6452 1 2025-11-28 00:07:58.065 00:00:10.385 TCP 23.104.0.1:57098 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:08:54.975 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 00:08:44.087 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39102 10 6452 1 2025-11-28 00:08:55.007 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 00:08:58.489 00:00:10.367 TCP 23.104.0.1:45656 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:09:44.297 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34080 10 6452 1 2025-11-28 00:09:58.894 00:00:10.377 TCP 23.104.0.1:57504 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:10:44.514 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48600 10 6452 1 2025-11-28 00:10:59.310 00:00:10.362 TCP 23.104.0.1:43324 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:11:44.726 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53426 10 6452 1 2025-11-28 00:08:04.700 00:05:04.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 00:11:59.711 00:00:10.362 TCP 23.104.0.1:56516 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:08:04.701 00:05:04.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 00:12:44.943 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:50900 10 6452 1 2025-11-28 00:13:00.114 00:00:10.365 TCP 23.104.0.1:57066 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:13:45.196 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49424 10 6452 1 2025-11-28 00:13:54.907 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 00:13:54.976 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 00:14:00.518 00:00:10.368 TCP 23.104.0.1:45434 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:14:45.411 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:49428 11 6504 1 2025-11-28 00:15:00.924 00:00:10.391 TCP 23.104.0.1:51576 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:15:45.677 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59566 10 6452 1 2025-11-28 00:16:01.363 00:00:10.370 TCP 23.104.0.1:45984 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:16:45.889 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60370 10 6452 1 2025-11-28 00:17:01.771 00:00:10.331 TCP 23.104.0.1:45526 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:17:46.114 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:40128 10 6452 1 2025-11-28 00:14:04.700 00:05:04.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 00:14:04.703 00:05:04.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 00:18:02.132 00:00:10.376 TCP 23.104.0.1:41526 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:18:55.258 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 00:18:55.423 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 00:18:46.300 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39094 10 6452 1 2025-11-28 00:19:02.553 00:00:10.364 TCP 23.104.0.1:56468 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:19:46.518 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40350 10 6452 1 2025-11-28 00:20:02.951 00:00:10.331 TCP 23.104.0.1:46692 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:20:46.734 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35702 10 6452 1 2025-11-28 00:21:03.318 00:00:10.366 TCP 23.104.0.1:40184 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:21:46.942 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:40930 10 6452 1 2025-11-28 00:22:03.723 00:00:10.328 TCP 23.104.0.1:44628 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:22:47.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45632 10 6452 1 2025-11-28 00:23:04.105 00:00:10.363 TCP 23.104.0.1:51708 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:23:54.961 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 00:23:54.918 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 00:23:47.394 00:00:11.321 TCP 1.101.0.1:3000 -> 22.102.0.1:55762 10 6452 1 2025-11-28 00:20:04.705 00:05:04.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 00:20:04.709 00:05:04.550 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 00:24:04.506 00:00:10.368 TCP 23.104.0.1:49042 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:24:48.752 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40134 10 6452 1 2025-11-28 00:25:04.909 00:00:10.328 TCP 23.104.0.1:56752 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:25:48.962 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58314 10 6452 1 2025-11-28 00:26:05.274 00:00:10.364 TCP 23.104.0.1:34006 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:26:49.141 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48748 10 6452 1 2025-11-28 00:27:05.675 00:00:10.376 TCP 23.104.0.1:45376 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:27:49.352 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35960 10 6452 1 2025-11-28 00:28:06.106 00:00:10.365 TCP 23.104.0.1:57934 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:28:55.228 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 00:28:55.290 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 00:28:49.526 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50142 10 6452 1 2025-11-28 00:29:06.510 00:00:10.332 TCP 23.104.0.1:47806 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:29:49.700 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58230 10 6452 1 2025-11-28 00:26:04.709 00:05:04.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 00:26:04.706 00:05:04.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 00:30:06.875 00:00:10.365 TCP 23.104.0.1:49682 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:30:49.933 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:54168 10 6452 1 2025-11-28 00:31:07.280 00:00:10.360 TCP 23.104.0.1:49916 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:31:50.169 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60340 10 6452 1 2025-11-28 00:32:07.681 00:00:10.366 TCP 23.104.0.1:39034 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:32:50.379 00:00:10.809 TCP 1.101.0.1:3000 -> 22.102.0.1:60152 10 6452 1 2025-11-28 00:33:08.098 00:00:10.362 TCP 23.104.0.1:46998 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:33:55.491 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 00:33:55.286 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 00:33:51.226 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39748 10 6452 1 2025-11-28 00:34:08.503 00:00:10.363 TCP 23.104.0.1:35858 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:34:51.439 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37418 10 6452 1 2025-11-28 00:35:08.907 00:00:10.367 TCP 23.104.0.1:48458 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:35:51.647 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40944 10 6452 1 2025-11-28 00:32:04.706 00:05:04.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 00:32:04.710 00:05:04.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 00:36:09.313 00:00:10.364 TCP 23.104.0.1:46008 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:36:51.860 00:00:10.504 TCP 1.101.0.1:3000 -> 22.102.0.1:46318 10 6452 1 2025-11-28 00:37:09.718 00:00:10.369 TCP 23.104.0.1:52864 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:37:52.401 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56396 10 6452 1 2025-11-28 00:38:10.121 00:00:10.363 TCP 23.104.0.1:37826 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:38:55.564 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 00:38:55.272 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 00:38:52.613 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59812 10 6452 1 2025-11-28 00:39:10.525 00:00:10.325 TCP 23.104.0.1:35452 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:39:52.823 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51958 10 6452 1 2025-11-28 00:40:10.886 00:00:10.336 TCP 23.104.0.1:58436 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:40:53.074 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50718 10 6452 1 2025-11-28 00:41:11.257 00:00:10.360 TCP 23.104.0.1:58958 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:41:53.293 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49910 10 6452 1 2025-11-28 00:38:04.708 00:05:04.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 00:38:04.710 00:05:04.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 00:42:11.657 00:00:10.323 TCP 23.104.0.1:50432 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:42:53.497 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39224 10 6452 1 2025-11-28 00:43:12.028 00:00:10.364 TCP 23.104.0.1:47830 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:43:55.534 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 00:43:55.594 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 00:43:53.710 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35744 10 6452 1 2025-11-28 00:44:12.430 00:00:10.366 TCP 23.104.0.1:36534 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:44:53.918 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45480 10 6452 1 2025-11-28 00:45:12.840 00:00:10.383 TCP 23.104.0.1:43934 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:45:54.130 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37454 10 6452 1 2025-11-28 00:46:13.260 00:00:10.369 TCP 23.104.0.1:43718 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:46:54.344 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49320 10 6452 1 2025-11-28 00:47:13.692 00:00:10.369 TCP 23.104.0.1:37192 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:47:54.556 00:00:10.536 TCP 1.101.0.1:3000 -> 22.102.0.1:59230 10 6452 1 2025-11-28 00:44:04.715 00:05:04.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 00:44:04.711 00:05:04.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 00:48:14.103 00:00:10.369 TCP 23.104.0.1:34196 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:48:55.471 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 00:48:55.699 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 00:48:55.129 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41866 10 6452 1 2025-11-28 00:49:14.509 00:00:10.349 TCP 23.104.0.1:58026 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:49:55.352 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43488 10 6452 1 2025-11-28 00:50:14.898 00:00:10.324 TCP 23.104.0.1:54644 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:50:55.564 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46494 10 6452 1 2025-11-28 00:51:15.263 00:00:10.368 TCP 23.104.0.1:46732 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:51:55.782 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35426 10 6452 1 2025-11-28 00:52:15.670 00:00:10.323 TCP 23.104.0.1:44064 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:52:55.997 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:55322 10 6452 1 2025-11-28 00:53:16.033 00:00:10.361 TCP 23.104.0.1:52462 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:53:55.752 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 00:53:55.713 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 00:53:56.179 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49856 10 6452 1 2025-11-28 00:50:04.715 00:05:04.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 00:50:04.713 00:05:04.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 00:54:16.434 00:00:10.366 TCP 23.104.0.1:58558 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:54:56.392 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33280 10 6452 1 2025-11-28 00:55:16.838 00:00:10.395 TCP 23.104.0.1:57982 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:55:56.616 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53814 10 6452 1 2025-11-28 00:56:17.270 00:00:10.369 TCP 23.104.0.1:53914 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:56:56.845 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49304 10 6452 1 2025-11-28 00:57:17.671 00:00:10.367 TCP 23.104.0.1:60114 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:57:57.088 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55454 10 6452 1 2025-11-28 00:58:18.095 00:00:10.384 TCP 23.104.0.1:51098 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498400, total packets: 1573, avg bps: 1065, avg pps: 0, avg bpp: 316 Time window: 2025-11-27 23:56:04 - 2025-11-28 00:58:28 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0056s User: 0.0000s Wall: 0.0022s flows/second: 74380.0 Runtime: 0.0022s