Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 11:58:49.923 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33516 10 6452 1 2025-11-28 11:59:09.171 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 11:59:09.064 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 11:59:10.034 00:00:10.365 TCP 23.104.0.1:39064 -> 1.101.0.1:3000 11 1507 1 2025-11-28 11:59:50.137 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43378 10 6452 1 2025-11-28 11:56:04.909 00:05:04.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 11:56:04.906 00:05:04.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 12:00:10.437 00:00:10.317 TCP 23.104.0.1:33526 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:00:50.348 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40306 10 6452 1 2025-11-28 12:01:10.792 00:00:10.341 TCP 23.104.0.1:58654 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:01:50.568 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:41328 10 6452 1 2025-11-28 12:02:11.178 00:00:10.365 TCP 23.104.0.1:58038 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:02:50.744 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34784 10 6452 1 2025-11-28 12:03:11.582 00:00:10.982 TCP 23.104.0.1:52864 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:03:50.969 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50312 10 6452 1 2025-11-28 12:04:08.836 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 12:04:08.886 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 12:04:12.600 00:00:10.370 TCP 23.104.0.1:35040 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:04:51.207 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52142 10 6452 1 2025-11-28 12:05:13.010 00:00:10.362 TCP 23.104.0.1:40242 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:05:51.427 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:34044 10 6452 1 2025-11-28 12:02:04.908 00:05:04.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 12:02:04.910 00:05:04.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 12:06:13.414 00:00:10.334 TCP 23.104.0.1:51996 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:06:51.612 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44128 10 6452 1 2025-11-28 12:07:13.787 00:00:10.875 TCP 23.104.0.1:56282 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:07:51.827 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57636 10 6452 1 2025-11-28 12:08:14.711 00:00:10.383 TCP 23.104.0.1:59968 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:08:51.993 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57308 10 6452 1 2025-11-28 12:09:08.866 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 12:09:09.185 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 12:09:15.133 00:00:10.366 TCP 23.104.0.1:41364 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:09:52.211 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34236 10 6452 1 2025-11-28 12:10:15.541 00:00:10.363 TCP 23.104.0.1:53890 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:10:52.423 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49630 10 6452 1 2025-11-28 12:11:15.945 00:00:10.366 TCP 23.104.0.1:34290 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:11:52.592 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46664 10 6452 1 2025-11-28 12:08:04.911 00:05:04.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 12:08:04.913 00:05:04.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 12:12:16.352 00:00:10.367 TCP 23.104.0.1:58986 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:12:52.812 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:50128 10 6452 1 2025-11-28 12:13:16.768 00:00:10.376 TCP 23.104.0.1:43058 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:14:09.174 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 12:13:53.012 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55006 10 6452 1 2025-11-28 12:14:09.345 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 12:14:17.177 00:00:10.367 TCP 23.104.0.1:42908 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:14:53.232 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58358 10 6452 1 2025-11-28 12:15:17.582 00:00:10.364 TCP 23.104.0.1:50196 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:15:53.438 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39500 10 6452 1 2025-11-28 12:16:17.987 00:00:10.418 TCP 23.104.0.1:54752 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:16:53.652 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49432 10 6452 1 2025-11-28 12:17:18.446 00:00:10.368 TCP 23.104.0.1:55326 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:17:53.874 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:36950 10 6452 1 2025-11-28 12:14:04.916 00:05:04.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 12:14:04.912 00:05:04.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 12:18:18.852 00:00:10.380 TCP 23.104.0.1:40744 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:18:54.075 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53444 10 6452 1 2025-11-28 12:19:09.573 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 12:19:09.395 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 12:19:19.269 00:00:10.366 TCP 23.104.0.1:47564 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:19:54.289 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53594 10 6452 1 2025-11-28 12:20:19.679 00:00:10.498 TCP 23.104.0.1:56572 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:20:54.463 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35678 10 6452 1 2025-11-28 12:21:20.219 00:00:10.362 TCP 23.104.0.1:43484 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:21:54.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35238 10 6452 1 2025-11-28 12:22:20.629 00:00:10.366 TCP 23.104.0.1:35748 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:22:54.886 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50030 10 6452 1 2025-11-28 12:23:21.032 00:00:10.361 TCP 23.104.0.1:59322 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:23:55.109 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36462 10 6452 1 2025-11-28 12:24:09.514 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 12:20:04.914 00:05:04.605 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 12:24:09.461 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 12:20:04.916 00:05:04.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 12:24:21.436 00:00:10.358 TCP 23.104.0.1:37844 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:24:55.317 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35270 10 6452 1 2025-11-28 12:25:21.835 00:00:10.393 TCP 23.104.0.1:37160 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:25:55.498 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51114 10 6452 1 2025-11-28 12:26:22.264 00:00:10.375 TCP 23.104.0.1:43456 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:26:55.671 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49836 10 6452 1 2025-11-28 12:27:22.676 00:00:10.368 TCP 23.104.0.1:55296 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:27:55.881 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49340 10 6452 1 2025-11-28 12:28:23.108 00:00:10.369 TCP 23.104.0.1:53060 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:28:56.115 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33126 10 6452 1 2025-11-28 12:29:09.692 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 12:29:09.581 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 12:29:23.513 00:00:10.369 TCP 23.104.0.1:52434 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:29:56.334 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37908 10 6452 1 2025-11-28 12:26:04.917 00:05:04.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 12:26:04.920 00:05:04.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 12:30:23.919 00:00:10.332 TCP 23.104.0.1:48160 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:30:56.543 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58252 10 6452 1 2025-11-28 12:31:24.288 00:00:10.363 TCP 23.104.0.1:55924 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:31:56.717 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45766 10 6452 1 2025-11-28 12:32:24.685 00:00:10.322 TCP 23.104.0.1:59696 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:32:56.891 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40514 10 6452 1 2025-11-28 12:33:25.059 00:00:10.363 TCP 23.104.0.1:35518 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:34:09.651 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 12:33:57.110 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52296 10 6452 1 2025-11-28 12:34:09.588 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 12:34:25.465 00:00:10.363 TCP 23.104.0.1:47930 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:34:57.322 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47244 10 6452 1 2025-11-28 12:35:25.868 00:00:10.327 TCP 23.104.0.1:50628 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:32:04.919 00:05:04.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 12:35:57.500 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38470 10 6452 1 2025-11-28 12:32:04.922 00:05:04.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 12:36:26.236 00:00:15.712 TCP 23.104.0.1:58792 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:36:57.714 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58006 10 6452 1 2025-11-28 12:37:32.009 00:00:10.365 TCP 23.104.0.1:48914 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:37:57.921 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36248 10 6452 1 2025-11-28 12:38:32.412 00:00:10.373 TCP 23.104.0.1:34150 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:39:09.821 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 12:39:09.982 00:00:00.012 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 12:38:58.136 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55518 10 6452 1 2025-11-28 12:39:32.817 00:00:10.333 TCP 23.104.0.1:53310 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:39:58.345 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51090 10 6452 1 2025-11-28 12:40:33.191 00:00:10.364 TCP 23.104.0.1:46916 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:40:58.558 00:00:11.046 TCP 1.101.0.1:3000 -> 22.102.0.1:56398 10 6452 1 2025-11-28 12:41:33.596 00:00:10.405 TCP 23.104.0.1:39756 -> 1.101.0.1:3000 15 1926 1 2025-11-28 12:38:04.926 00:05:04.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 12:38:04.924 00:05:04.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 12:41:59.646 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:34416 12 10369 1 2025-11-28 12:42:34.047 00:00:10.366 TCP 23.104.0.1:39208 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:42:59.894 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50148 10 6452 1 2025-11-28 12:43:34.453 00:00:10.320 TCP 23.104.0.1:47458 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:44:10.048 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 12:44:00.111 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39782 10 6452 1 2025-11-28 12:44:09.713 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 12:44:34.810 00:00:10.369 TCP 23.104.0.1:52802 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:45:00.329 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33788 10 6452 1 2025-11-28 12:45:35.212 00:00:10.375 TCP 23.104.0.1:43896 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:46:00.537 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57384 10 6452 1 2025-11-28 12:46:35.624 00:00:10.322 TCP 23.104.0.1:50934 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:47:00.720 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36108 10 6452 1 2025-11-28 12:47:35.991 00:00:10.362 TCP 23.104.0.1:57166 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:48:00.897 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60184 10 6452 1 2025-11-28 12:44:04.924 00:05:04.600 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 12:44:04.927 00:05:04.595 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 12:48:36.392 00:00:10.373 TCP 23.104.0.1:43262 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:49:10.034 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 12:49:01.116 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40238 10 6452 1 2025-11-28 12:49:10.207 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 12:49:36.806 00:00:10.366 TCP 23.104.0.1:51906 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:50:01.331 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52054 10 6452 1 2025-11-28 12:50:37.213 00:00:10.364 TCP 23.104.0.1:44274 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:51:01.539 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48610 10 6452 1 2025-11-28 12:51:37.614 00:00:10.323 TCP 23.104.0.1:37658 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:52:01.754 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:58682 10 6452 1 2025-11-28 12:52:37.980 00:00:10.368 TCP 23.104.0.1:59742 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:53:01.947 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51100 10 6452 1 2025-11-28 12:53:38.385 00:00:10.323 TCP 23.104.0.1:44160 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:54:10.191 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 12:50:04.927 00:05:04.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 12:54:10.018 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 12:50:04.925 00:05:04.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 12:54:02.187 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36392 10 6452 1 2025-11-28 12:54:38.751 00:00:10.384 TCP 23.104.0.1:52402 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:55:02.403 00:00:10.328 TCP 1.101.0.1:3000 -> 22.102.0.1:58238 10 6452 1 2025-11-28 12:55:39.181 00:00:10.362 TCP 23.104.0.1:40382 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:56:02.775 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50494 10 6452 1 2025-11-28 12:56:39.581 00:00:10.323 TCP 23.104.0.1:44980 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:57:02.988 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45834 10 6452 1 2025-11-28 12:57:39.948 00:00:10.348 TCP 23.104.0.1:58790 -> 1.101.0.1:3000 11 1507 1 2025-11-28 12:58:03.230 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40658 10 6452 1 2025-11-28 12:58:40.322 00:00:10.380 TCP 23.104.0.1:42916 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502684, total packets: 1578, avg bps: 1067, avg pps: 0, avg bpp: 318 Time window: 2025-11-28 11:56:04 - 2025-11-28 12:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0051s User: 0.0021s Wall: 0.0023s flows/second: 71548.4 Runtime: 0.0023s