Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 00:58:55.963 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 00:58:55.768 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 00:58:57.311 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48164 10 6452 1 2025-11-28 00:59:18.517 00:00:10.366 TCP 23.104.0.1:55218 -> 1.101.0.1:3000 11 1507 1 2025-11-28 00:59:57.520 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36978 10 6452 1 2025-11-28 00:56:04.714 00:05:04.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 00:56:04.716 00:05:04.558 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 01:00:18.923 00:00:10.636 TCP 23.104.0.1:37510 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:00:57.733 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41094 10 6452 1 2025-11-28 01:01:19.600 00:00:10.361 TCP 23.104.0.1:52270 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:01:57.941 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56532 10 6452 1 2025-11-28 01:02:19.997 00:00:10.364 TCP 23.104.0.1:38158 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:02:58.172 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59288 10 6452 1 2025-11-28 01:03:20.394 00:00:10.362 TCP 23.104.0.1:58522 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:03:55.944 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 01:03:55.647 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 01:03:58.388 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41954 10 6452 1 2025-11-28 01:04:20.796 00:00:10.340 TCP 23.104.0.1:33128 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:04:58.598 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33936 10 6452 1 2025-11-28 01:05:21.176 00:00:10.368 TCP 23.104.0.1:41686 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:02:04.718 00:05:04.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 01:02:04.715 00:05:04.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 01:05:58.817 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38100 10 6452 1 2025-11-28 01:06:21.584 00:00:11.016 TCP 23.104.0.1:40462 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:06:58.993 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39542 10 6452 1 2025-11-28 01:07:22.642 00:00:10.361 TCP 23.104.0.1:41124 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:07:59.210 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51970 10 6452 1 2025-11-28 01:08:23.035 00:00:10.361 TCP 23.104.0.1:58196 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:08:56.193 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 01:08:55.973 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 01:08:59.380 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43180 10 6452 1 2025-11-28 01:09:23.439 00:00:10.394 TCP 23.104.0.1:34330 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:09:59.600 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60950 10 6452 1 2025-11-28 01:10:23.870 00:00:10.333 TCP 23.104.0.1:41042 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:10:59.815 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34312 10 6452 1 2025-11-28 01:11:24.245 00:00:10.334 TCP 23.104.0.1:34102 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:08:04.720 00:05:04.572 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 01:12:00.033 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55162 10 6452 1 2025-11-28 01:08:04.718 00:05:04.577 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 01:12:24.614 00:00:10.364 TCP 23.104.0.1:34434 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:13:00.247 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38702 10 6452 1 2025-11-28 01:13:25.017 00:00:10.332 TCP 23.104.0.1:45598 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:13:56.308 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 01:13:56.330 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 01:14:00.462 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38478 10 6452 1 2025-11-28 01:14:25.397 00:00:10.324 TCP 23.104.0.1:59568 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:15:00.634 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33554 10 6452 1 2025-11-28 01:15:25.753 00:00:10.537 TCP 23.104.0.1:42756 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:16:00.858 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46834 10 6452 1 2025-11-28 01:16:26.328 00:00:10.359 TCP 23.104.0.1:46194 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:17:01.084 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35358 10 6452 1 2025-11-28 01:17:26.727 00:00:10.373 TCP 23.104.0.1:40342 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:14:04.721 00:05:04.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 01:18:01.254 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54486 10 6452 1 2025-11-28 01:14:04.718 00:05:04.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 01:18:27.139 00:00:10.377 TCP 23.104.0.1:42142 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:18:56.340 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 01:18:56.206 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 01:19:01.467 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36858 10 6452 1 2025-11-28 01:19:27.555 00:00:10.373 TCP 23.104.0.1:52482 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:20:01.683 00:00:10.249 TCP 1.101.0.1:3000 -> 22.102.0.1:57522 10 6452 1 2025-11-28 01:20:27.966 00:00:10.379 TCP 23.104.0.1:60308 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:21:01.968 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:54162 10 6452 1 2025-11-28 01:21:28.371 00:00:10.327 TCP 23.104.0.1:51110 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:22:02.216 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47334 10 6452 1 2025-11-28 01:22:28.733 00:00:10.375 TCP 23.104.0.1:47522 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:23:02.444 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50718 10 6452 1 2025-11-28 01:23:29.143 00:00:10.366 TCP 23.104.0.1:37350 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:23:56.467 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 01:23:56.098 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 01:20:04.720 00:05:04.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 01:20:04.722 00:05:04.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 01:24:02.620 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:48308 10 6452 1 2025-11-28 01:24:29.550 00:00:10.323 TCP 23.104.0.1:37592 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:25:02.794 00:00:11.536 TCP 1.101.0.1:3000 -> 22.102.0.1:59642 10 6452 1 2025-11-28 01:25:29.907 00:00:10.364 TCP 23.104.0.1:50720 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:26:04.366 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42774 10 6452 1 2025-11-28 01:26:30.317 00:00:10.364 TCP 23.104.0.1:40668 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:27:04.576 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41342 10 6452 1 2025-11-28 01:27:30.723 00:00:10.327 TCP 23.104.0.1:51092 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:28:04.788 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59712 10 6452 1 2025-11-28 01:28:31.109 00:00:10.362 TCP 23.104.0.1:33916 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:28:56.375 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 01:28:56.523 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 01:29:05.003 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44340 10 6452 1 2025-11-28 01:29:31.520 00:00:10.331 TCP 23.104.0.1:57064 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:26:04.721 00:05:04.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 01:26:04.719 00:05:04.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 01:30:05.183 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60582 10 6452 1 2025-11-28 01:30:31.894 00:00:10.371 TCP 23.104.0.1:50704 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:31:05.400 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48224 10 6452 1 2025-11-28 01:31:32.304 00:00:10.363 TCP 23.104.0.1:46662 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:32:05.632 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55614 10 6452 1 2025-11-28 01:32:32.711 00:00:10.333 TCP 23.104.0.1:40680 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:33:05.841 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39748 10 6452 1 2025-11-28 01:33:33.112 00:00:10.361 TCP 23.104.0.1:56994 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:33:56.569 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 01:33:56.510 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 01:34:06.082 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51024 10 6452 1 2025-11-28 01:34:33.512 00:00:10.325 TCP 23.104.0.1:45518 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:35:06.257 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45152 10 6452 1 2025-11-28 01:35:33.876 00:00:10.361 TCP 23.104.0.1:33466 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:32:04.722 00:05:04.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 01:32:04.724 00:05:04.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 01:36:06.464 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45894 10 6452 1 2025-11-28 01:36:34.276 00:00:10.362 TCP 23.104.0.1:57372 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:37:06.676 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52200 10 6452 1 2025-11-28 01:37:34.677 00:00:10.358 TCP 23.104.0.1:36276 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:38:06.848 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55298 10 6452 1 2025-11-28 01:38:35.092 00:00:10.369 TCP 23.104.0.1:44874 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:38:56.473 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 01:38:56.506 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 01:39:07.076 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48346 10 6452 1 2025-11-28 01:39:35.498 00:00:10.363 TCP 23.104.0.1:46434 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:40:07.289 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56648 10 6452 1 2025-11-28 01:40:35.909 00:00:10.364 TCP 23.104.0.1:57012 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:41:07.501 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33264 10 6452 1 2025-11-28 01:41:36.309 00:00:10.364 TCP 23.104.0.1:56194 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:38:04.722 00:05:04.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 01:38:04.725 00:05:04.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 01:42:07.670 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44780 10 6452 1 2025-11-28 01:42:36.711 00:00:10.381 TCP 23.104.0.1:57734 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:43:07.847 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36568 10 6452 1 2025-11-28 01:43:37.130 00:00:10.319 TCP 23.104.0.1:47226 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:43:56.589 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 01:43:56.721 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 01:44:08.037 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43274 10 6452 1 2025-11-28 01:44:37.491 00:00:10.324 TCP 23.104.0.1:56556 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:45:08.256 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37052 10 6452 1 2025-11-28 01:45:37.858 00:00:10.375 TCP 23.104.0.1:58586 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:46:08.475 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46528 10 6452 1 2025-11-28 01:46:38.271 00:00:10.373 TCP 23.104.0.1:42914 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:47:08.687 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58708 10 6452 1 2025-11-28 01:47:38.686 00:00:10.367 TCP 23.104.0.1:44006 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:44:04.731 00:05:04.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 01:44:04.728 00:05:04.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 01:48:08.912 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32936 10 6452 1 2025-11-28 01:48:56.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 01:48:39.108 00:00:10.370 TCP 23.104.0.1:34706 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:48:56.835 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 01:49:09.129 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38104 10 6452 1 2025-11-28 01:49:39.516 00:00:10.688 TCP 23.104.0.1:33762 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:50:09.341 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52518 10 6452 1 2025-11-28 01:50:40.243 00:00:10.322 TCP 23.104.0.1:44034 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:51:09.556 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50722 10 6452 1 2025-11-28 01:51:40.611 00:00:10.365 TCP 23.104.0.1:36240 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:52:09.727 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40442 10 6452 1 2025-11-28 01:52:41.015 00:00:10.369 TCP 23.104.0.1:48670 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:53:09.939 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:45396 10 6452 1 2025-11-28 01:53:41.424 00:00:10.369 TCP 23.104.0.1:37394 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:53:56.902 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 01:53:56.967 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 01:50:04.732 00:05:04.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 01:50:04.727 00:05:04.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 01:54:10.133 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34774 10 6452 1 2025-11-28 01:54:41.831 00:00:10.393 TCP 23.104.0.1:57622 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:55:10.304 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36870 10 6452 1 2025-11-28 01:55:42.265 00:00:10.363 TCP 23.104.0.1:60426 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:56:10.520 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44072 10 6452 1 2025-11-28 01:56:42.691 00:00:10.325 TCP 23.104.0.1:59896 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:57:10.748 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46512 10 6452 1 2025-11-28 01:57:43.088 00:00:10.328 TCP 23.104.0.1:33886 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:58:10.921 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45880 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1063, avg pps: 0, avg bpp: 318 Time window: 2025-11-28 00:56:04 - 2025-11-28 01:58:21 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0010s Wall: 0.0023s flows/second: 71897.3 Runtime: 0.0023s