Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 01:58:56.776 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 01:58:43.449 00:00:10.368 TCP 23.104.0.1:57106 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:58:56.974 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 01:59:11.131 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38036 10 6452 1 2025-11-28 01:59:43.856 00:00:10.380 TCP 23.104.0.1:55806 -> 1.101.0.1:3000 11 1507 1 2025-11-28 01:56:04.731 00:05:04.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 01:56:04.733 00:05:04.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 02:00:11.346 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60094 10 6452 1 2025-11-28 02:00:44.274 00:00:10.367 TCP 23.104.0.1:52900 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:01:11.558 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35054 10 6452 1 2025-11-28 02:01:44.681 00:00:10.365 TCP 23.104.0.1:55226 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:02:11.774 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34680 10 6452 1 2025-11-28 02:02:45.108 00:00:10.369 TCP 23.104.0.1:40190 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:03:11.986 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:50526 10 6452 1 2025-11-28 02:03:56.943 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 02:03:45.522 00:00:10.366 TCP 23.104.0.1:49540 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:03:57.005 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 02:04:12.173 00:00:10.368 TCP 1.101.0.1:3000 -> 22.102.0.1:38256 10 6452 1 2025-11-28 02:04:45.930 00:00:10.379 TCP 23.104.0.1:46028 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:05:12.580 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57306 10 6452 1 2025-11-28 02:05:46.356 00:00:10.371 TCP 23.104.0.1:47054 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:02:04.732 00:05:04.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 02:02:04.735 00:05:04.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 02:06:12.797 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53528 10 6452 1 2025-11-28 02:06:46.767 00:00:10.328 TCP 23.104.0.1:57260 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:07:13.013 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56144 10 6452 1 2025-11-28 02:07:47.134 00:00:10.365 TCP 23.104.0.1:49546 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:08:13.187 00:00:10.573 TCP 1.101.0.1:3000 -> 22.102.0.1:52876 12 6556 1 2025-11-28 02:08:57.345 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 02:08:57.337 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 02:08:47.540 00:00:10.364 TCP 23.104.0.1:43606 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:09:13.801 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32948 10 6452 1 2025-11-28 02:09:47.946 00:00:10.372 TCP 23.104.0.1:38696 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:10:14.014 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37350 10 6452 1 2025-11-28 02:10:48.353 00:00:10.366 TCP 23.104.0.1:46632 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:11:14.221 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:47242 10 6452 1 2025-11-28 02:11:48.754 00:00:10.382 TCP 23.104.0.1:50818 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:08:04.733 00:05:04.576 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 02:08:04.736 00:05:04.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 02:12:14.398 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53922 10 6452 1 2025-11-28 02:12:49.175 00:00:10.362 TCP 23.104.0.1:36828 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:13:14.608 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36814 10 6452 1 2025-11-28 02:13:57.556 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 02:13:57.497 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 02:13:49.572 00:00:10.367 TCP 23.104.0.1:46992 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:14:14.783 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52018 10 6452 1 2025-11-28 02:14:49.975 00:00:10.377 TCP 23.104.0.1:58138 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:15:14.994 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49290 10 6452 1 2025-11-28 02:15:50.393 00:00:10.363 TCP 23.104.0.1:34982 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:16:15.215 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54214 10 6452 1 2025-11-28 02:16:50.791 00:00:10.362 TCP 23.104.0.1:46898 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:17:15.428 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32798 10 6452 1 2025-11-28 02:17:51.191 00:00:10.366 TCP 23.104.0.1:52134 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:14:04.738 00:05:04.570 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 02:14:04.737 00:05:04.575 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 02:18:15.639 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53488 10 6452 1 2025-11-28 02:18:57.469 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 02:18:51.594 00:00:10.365 TCP 23.104.0.1:51964 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:18:57.431 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 02:19:15.851 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:60946 10 6452 1 2025-11-28 02:19:51.993 00:00:10.335 TCP 23.104.0.1:49414 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:20:16.097 00:00:10.968 TCP 1.101.0.1:3000 -> 22.102.0.1:39604 10 6452 1 2025-11-28 02:20:52.359 00:00:10.328 TCP 23.104.0.1:58806 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:21:17.105 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42646 10 6452 1 2025-11-28 02:21:52.730 00:00:10.327 TCP 23.104.0.1:44090 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:22:17.324 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37518 10 6452 1 2025-11-28 02:22:53.101 00:00:10.364 TCP 23.104.0.1:47632 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:23:17.538 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48640 10 6452 1 2025-11-28 02:23:57.703 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 02:20:04.739 00:05:04.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 02:23:57.510 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 02:23:53.506 00:00:10.370 TCP 23.104.0.1:37678 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:20:04.741 00:05:04.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 02:24:17.756 00:00:25.598 TCP 1.101.0.1:3000 -> 22.102.0.1:37694 10 6452 1 2025-11-28 02:24:53.916 00:00:10.345 TCP 23.104.0.1:37758 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:25:33.400 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60024 10 6452 1 2025-11-28 02:25:54.296 00:00:10.362 TCP 23.104.0.1:52206 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:26:33.568 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54638 10 6452 1 2025-11-28 02:26:54.698 00:00:10.325 TCP 23.104.0.1:42074 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:27:33.779 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44092 10 6452 1 2025-11-28 02:27:55.087 00:00:10.363 TCP 23.104.0.1:55666 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:28:33.991 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40202 10 6452 1 2025-11-28 02:28:57.640 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 02:28:57.553 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 02:28:55.490 00:00:10.363 TCP 23.104.0.1:59946 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:29:34.214 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33844 10 6452 1 2025-11-28 02:29:55.899 00:00:10.340 TCP 23.104.0.1:53560 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:26:04.745 00:05:04.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 02:26:04.748 00:05:04.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 02:30:34.432 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42924 10 6452 1 2025-11-28 02:30:56.282 00:00:10.364 TCP 23.104.0.1:45678 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:31:34.648 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54578 10 6452 1 2025-11-28 02:31:56.682 00:00:10.364 TCP 23.104.0.1:46464 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:32:34.865 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43744 10 6452 1 2025-11-28 02:32:57.103 00:00:10.326 TCP 23.104.0.1:34376 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:33:35.057 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33212 10 6452 1 2025-11-28 02:33:57.547 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 02:33:57.612 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 02:33:57.462 00:00:10.361 TCP 23.104.0.1:39928 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:34:35.230 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51808 10 6452 1 2025-11-28 02:34:57.867 00:00:10.366 TCP 23.104.0.1:34642 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:35:35.410 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33068 10 6452 1 2025-11-28 02:32:04.745 00:05:04.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 02:35:58.271 00:00:10.366 TCP 23.104.0.1:50612 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:32:04.750 00:05:04.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 02:36:35.619 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:43048 10 6452 1 2025-11-28 02:36:58.669 00:00:10.358 TCP 23.104.0.1:57562 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:37:35.829 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58652 10 6452 1 2025-11-28 02:37:59.093 00:00:10.366 TCP 23.104.0.1:52874 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:38:36.066 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53420 10 6452 1 2025-11-28 02:38:57.934 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 02:38:57.915 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 02:38:59.494 00:00:10.365 TCP 23.104.0.1:54452 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:39:36.279 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42644 10 6452 1 2025-11-28 02:39:59.898 00:00:10.736 TCP 23.104.0.1:52224 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:40:36.484 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44844 10 6452 1 2025-11-28 02:41:00.677 00:00:10.367 TCP 23.104.0.1:38046 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:41:36.700 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44548 10 6452 1 2025-11-28 02:42:01.110 00:00:10.361 TCP 23.104.0.1:34380 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:38:04.750 00:05:04.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 02:38:04.748 00:05:04.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 02:42:36.872 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37084 10 6452 1 2025-11-28 02:43:01.518 00:00:10.378 TCP 23.104.0.1:40222 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:43:37.101 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37548 10 6452 1 2025-11-28 02:43:57.899 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 02:43:57.936 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 02:44:01.938 00:00:10.377 TCP 23.104.0.1:39660 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:44:37.309 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52316 10 6452 1 2025-11-28 02:45:02.356 00:00:10.328 TCP 23.104.0.1:45290 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:45:37.486 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:52440 10 6452 1 2025-11-28 02:46:02.722 00:00:10.329 TCP 23.104.0.1:57664 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:46:37.685 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47296 10 6452 1 2025-11-28 02:47:03.106 00:00:10.338 TCP 23.104.0.1:52170 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:47:37.913 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:51658 10 6452 1 2025-11-28 02:44:04.752 00:05:04.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 02:44:04.751 00:05:04.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 02:48:03.483 00:00:10.329 TCP 23.104.0.1:53530 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:48:38.109 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59564 10 6452 1 2025-11-28 02:48:58.032 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 02:48:58.172 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 02:49:03.852 00:00:10.376 TCP 23.104.0.1:53038 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:49:38.341 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36358 10 6452 1 2025-11-28 02:50:04.270 00:00:10.330 TCP 23.104.0.1:43902 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:50:38.526 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55738 10 6452 1 2025-11-28 02:51:04.637 00:00:10.332 TCP 23.104.0.1:53898 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:51:38.693 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49756 10 6452 1 2025-11-28 02:52:05.002 00:00:10.325 TCP 23.104.0.1:38648 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:52:38.903 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41574 10 6452 1 2025-11-28 02:53:05.365 00:00:10.368 TCP 23.104.0.1:38644 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:53:39.115 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40416 10 6452 1 2025-11-28 02:53:58.007 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 02:53:57.906 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 02:50:04.753 00:05:04.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 02:50:04.751 00:05:04.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 02:54:05.772 00:00:10.375 TCP 23.104.0.1:39944 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:54:39.288 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42476 10 6452 1 2025-11-28 02:55:06.186 00:00:10.361 TCP 23.104.0.1:59234 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:55:39.498 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36860 10 6452 1 2025-11-28 02:56:06.589 00:00:10.369 TCP 23.104.0.1:55696 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:56:39.712 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46800 10 6452 1 2025-11-28 02:57:06.998 00:00:10.362 TCP 23.104.0.1:56054 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:57:39.926 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:48424 10 6452 1 2025-11-28 02:58:07.404 00:00:10.649 TCP 23.104.0.1:38340 -> 1.101.0.1:3000 11 1507 1 2025-11-28 02:58:40.170 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46920 10 6452 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1058, avg pps: 0, avg bpp: 316 Time window: 2025-11-28 01:56:04 - 2025-11-28 02:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0013s Wall: 0.0035s flows/second: 46711.0 Runtime: 0.0035s