Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 13:59:11.182 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 13:59:11.306 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 13:59:05.419 00:00:10.323 TCP 23.104.0.1:52746 -> 1.101.0.1:3000 11 1507 1 2025-11-28 13:59:18.945 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48746 10 6452 1 2025-11-28 13:56:04.939 00:05:04.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 13:56:04.942 00:05:04.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:00:05.781 00:00:10.364 TCP 23.104.0.1:35346 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:00:19.178 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47766 10 6452 1 2025-11-28 14:01:06.183 00:00:10.337 TCP 23.104.0.1:40154 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:01:19.390 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57926 10 6452 1 2025-11-28 14:02:06.560 00:00:10.326 TCP 23.104.0.1:57932 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:02:19.601 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52008 10 6452 1 2025-11-28 14:03:06.926 00:00:10.361 TCP 23.104.0.1:36670 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:03:19.809 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39416 10 6452 1 2025-11-28 14:04:11.569 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:04:11.713 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:04:07.354 00:00:10.322 TCP 23.104.0.1:42318 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:04:20.013 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58600 10 6452 1 2025-11-28 14:05:07.717 00:00:10.386 TCP 23.104.0.1:48506 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:05:20.226 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36936 10 6452 1 2025-11-28 14:02:04.943 00:05:04.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:02:04.940 00:05:04.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:06:08.143 00:00:10.362 TCP 23.104.0.1:35442 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:06:20.445 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51570 10 6452 1 2025-11-28 14:07:08.545 00:00:10.363 TCP 23.104.0.1:52556 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:07:20.653 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45588 10 6452 1 2025-11-28 14:08:08.943 00:00:10.331 TCP 23.104.0.1:42606 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:08:20.830 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60616 10 6452 1 2025-11-28 14:09:11.652 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:09:11.646 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:09:09.313 00:00:10.326 TCP 23.104.0.1:56828 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:09:21.055 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41442 10 6452 1 2025-11-28 14:10:09.675 00:00:10.684 TCP 23.104.0.1:55280 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:10:21.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34014 10 6452 1 2025-11-28 14:11:10.403 00:00:10.365 TCP 23.104.0.1:38076 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:11:21.433 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37194 10 6452 1 2025-11-28 14:08:04.945 00:05:04.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:08:04.948 00:05:04.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:12:10.801 00:00:10.331 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:12:21.648 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60588 10 6452 1 2025-11-28 14:13:11.166 00:00:10.368 TCP 23.104.0.1:51602 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:13:21.871 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:47282 10 6452 1 2025-11-28 14:14:11.870 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:14:11.852 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:14:11.574 00:00:10.324 TCP 23.104.0.1:41702 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:14:22.110 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36126 10 6452 1 2025-11-28 14:15:11.938 00:00:10.379 TCP 23.104.0.1:38314 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:15:22.320 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52990 10 6452 1 2025-11-28 14:16:12.355 00:00:10.374 TCP 23.104.0.1:51954 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:16:22.537 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46122 10 6452 1 2025-11-28 14:17:12.764 00:00:10.372 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:17:22.749 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40592 10 6452 1 2025-11-28 14:14:04.949 00:05:04.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:14:04.946 00:05:04.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:18:13.175 00:00:10.367 TCP 23.104.0.1:53946 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:18:22.964 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50106 12 6556 1 2025-11-28 14:19:11.511 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:19:11.805 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:19:13.576 00:00:10.365 TCP 23.104.0.1:49934 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:19:23.197 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40976 10 6452 1 2025-11-28 14:20:13.980 00:00:10.371 TCP 23.104.0.1:39684 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:20:23.424 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44170 10 6452 1 2025-11-28 14:21:14.391 00:00:10.363 TCP 23.104.0.1:51636 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:21:23.646 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52426 12 10375 1 2025-11-28 14:22:14.790 00:00:10.430 TCP 23.104.0.1:34768 -> 1.101.0.1:3000 15 1926 1 2025-11-28 14:22:23.881 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58556 10 6452 1 2025-11-28 14:23:15.260 00:00:10.364 TCP 23.104.0.1:38454 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:23:24.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44030 10 6452 1 2025-11-28 14:20:04.945 00:05:04.621 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:20:04.948 00:05:04.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:24:11.979 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:24:12.059 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:24:15.663 00:00:10.368 TCP 23.104.0.1:37828 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:24:24.313 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58804 10 6452 1 2025-11-28 14:25:16.092 00:00:10.369 TCP 23.104.0.1:37780 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:25:24.487 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44242 10 6452 1 2025-11-28 14:26:16.499 00:00:10.365 TCP 23.104.0.1:41386 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:26:24.700 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38514 10 6452 1 2025-11-28 14:27:16.901 00:00:10.363 TCP 23.104.0.1:58922 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:27:24.914 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50306 10 6452 1 2025-11-28 14:28:17.305 00:00:10.364 TCP 23.104.0.1:48920 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:28:25.132 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33964 10 6452 1 2025-11-28 14:29:11.909 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:29:12.160 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:29:17.711 00:00:10.334 TCP 23.104.0.1:35230 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:29:25.301 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36064 10 6452 1 2025-11-28 14:26:04.948 00:05:04.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:26:04.952 00:05:04.613 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:30:18.104 00:00:10.364 TCP 23.104.0.1:39882 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:30:25.512 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39912 10 6452 1 2025-11-28 14:31:18.509 00:00:10.363 TCP 23.104.0.1:49238 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:31:25.732 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42836 10 6452 1 2025-11-28 14:32:18.910 00:00:10.363 TCP 23.104.0.1:56588 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:32:25.919 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51460 10 6452 1 2025-11-28 14:33:19.315 00:00:10.363 TCP 23.104.0.1:37574 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:33:26.133 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37854 10 6452 1 2025-11-28 14:34:12.306 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:34:12.202 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:34:19.716 00:00:10.385 TCP 23.104.0.1:35880 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:34:26.343 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50878 10 6452 1 2025-11-28 14:35:20.146 00:00:10.363 TCP 23.104.0.1:35166 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:35:26.517 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41584 10 6452 1 2025-11-28 14:32:04.952 00:05:04.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:32:04.949 00:05:04.619 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:36:20.550 00:00:10.364 TCP 23.104.0.1:45542 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:36:26.689 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34936 10 6452 1 2025-11-28 14:37:20.954 00:00:10.365 TCP 23.104.0.1:49106 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:37:26.904 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39380 10 6452 1 2025-11-28 14:38:21.361 00:00:10.362 TCP 23.104.0.1:41778 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:38:27.119 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58030 10 6452 1 2025-11-28 14:39:11.950 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:39:12.288 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:39:21.762 00:00:10.376 TCP 23.104.0.1:45744 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:39:27.334 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49788 10 6452 1 2025-11-28 14:40:22.178 00:00:10.367 TCP 23.104.0.1:54486 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:40:27.549 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59674 10 6452 1 2025-11-28 14:41:22.586 00:00:10.367 TCP 23.104.0.1:43934 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:41:27.721 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49984 10 6452 1 2025-11-28 14:38:04.954 00:05:04.618 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:38:04.956 00:05:04.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:42:22.991 00:00:10.324 TCP 23.104.0.1:37042 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:42:27.936 00:00:10.246 TCP 1.101.0.1:3000 -> 22.102.0.1:35240 13 6608 1 2025-11-28 14:43:23.353 00:00:10.360 TCP 23.104.0.1:53160 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:43:28.227 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57234 10 6452 1 2025-11-28 14:44:12.423 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:44:12.475 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:44:23.755 00:00:10.348 TCP 23.104.0.1:60566 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:44:28.438 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47252 10 6452 1 2025-11-28 14:45:24.138 00:00:10.362 TCP 23.104.0.1:35992 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:45:28.646 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57248 10 6452 1 2025-11-28 14:46:24.539 00:00:10.369 TCP 23.104.0.1:58040 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:46:28.825 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33710 10 6452 1 2025-11-28 14:47:24.947 00:00:10.369 TCP 23.104.0.1:58668 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:47:29.049 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42578 10 6452 1 2025-11-28 14:44:04.955 00:05:04.617 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:44:04.957 00:05:04.612 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:48:25.354 00:00:10.364 TCP 23.104.0.1:37110 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:48:29.265 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39992 10 6452 1 2025-11-28 14:49:12.416 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:49:12.461 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:49:25.755 00:00:10.368 TCP 23.104.0.1:54054 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:49:29.482 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37930 10 6452 1 2025-11-28 14:50:26.160 00:00:10.322 TCP 23.104.0.1:42840 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:50:29.696 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38338 10 6452 1 2025-11-28 14:51:26.519 00:00:10.370 TCP 23.104.0.1:44928 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:51:29.911 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:53352 10 6452 1 2025-11-28 14:52:30.096 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58184 10 6452 1 2025-11-28 14:52:26.927 00:00:10.395 TCP 23.104.0.1:59352 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:53:30.308 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36098 10 6452 1 2025-11-28 14:53:27.359 00:00:10.363 TCP 23.104.0.1:52394 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:50:04.956 00:05:04.620 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 14:50:04.958 00:05:04.615 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 14:54:12.370 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 14:54:12.477 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 14:54:30.526 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45802 10 6452 1 2025-11-28 14:54:27.767 00:00:10.380 TCP 23.104.0.1:45568 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:55:28.186 00:00:10.362 TCP 23.104.0.1:45868 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:55:30.702 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35594 10 6452 1 2025-11-28 14:56:30.914 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:32884 12 10369 1 2025-11-28 14:56:28.592 00:00:10.438 TCP 23.104.0.1:54704 -> 1.101.0.1:3000 15 1926 1 2025-11-28 14:57:31.162 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42214 10 6452 1 2025-11-28 14:57:29.095 00:00:10.364 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-11-28 14:58:31.373 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60750 10 6452 1 2025-11-28 14:58:29.491 00:00:10.372 TCP 23.104.0.1:39396 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507286, total packets: 1589, avg bps: 1080, avg pps: 0, avg bpp: 319 Time window: 2025-11-28 13:56:04 - 2025-11-28 14:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0023s Wall: 0.0028s flows/second: 57930.4 Runtime: 0.0029s