Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 02:58:44.396 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36538 10 6452 1 2025-11-29 02:59:26.878 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 02:59:13.677 00:00:10.375 TCP 23.104.0.1:52520 -> 1.101.0.1:3000 11 1507 1 2025-11-29 02:59:26.902 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 02:59:44.571 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33040 10 6452 1 2025-11-29 02:55:09.822 00:05:55.369 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 02:55:09.826 00:05:55.364 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 03:00:14.105 00:00:10.375 TCP 23.104.0.1:35266 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:00:44.785 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60926 10 6452 1 2025-11-29 03:01:14.520 00:00:10.374 TCP 23.104.0.1:60408 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:01:45.005 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37988 10 6452 1 2025-11-29 03:02:14.938 00:00:10.354 TCP 23.104.0.1:43342 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:02:45.214 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46562 10 6452 1 2025-11-29 03:03:15.330 00:00:10.365 TCP 23.104.0.1:41986 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:03:45.429 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47712 10 6452 1 2025-11-29 03:04:15.729 00:00:10.381 TCP 23.104.0.1:36234 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:04:27.472 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 03:04:27.286 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 03:04:45.637 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43326 10 6452 1 2025-11-29 03:05:16.145 00:00:10.373 TCP 23.104.0.1:35292 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:05:45.850 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53386 10 6452 1 2025-11-29 03:01:09.827 00:05:55.363 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 03:01:09.825 00:05:55.368 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 03:06:16.572 00:00:10.359 TCP 23.104.0.1:46554 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:06:46.079 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54592 10 6452 1 2025-11-29 03:07:16.970 00:00:10.368 TCP 23.104.0.1:56324 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:07:46.303 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49170 10 6452 1 2025-11-29 03:08:17.376 00:00:10.366 TCP 23.104.0.1:58890 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:08:46.514 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44740 10 6452 1 2025-11-29 03:09:17.775 00:00:10.368 TCP 23.104.0.1:41122 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:09:27.342 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 03:09:27.361 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 03:09:46.733 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51644 10 6452 1 2025-11-29 03:10:18.182 00:00:10.366 TCP 23.104.0.1:45764 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:10:46.944 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:33438 10 6452 1 2025-11-29 03:11:18.579 00:00:10.367 TCP 23.104.0.1:51592 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:11:47.135 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57600 10 6452 1 2025-11-29 03:07:09.825 00:05:55.370 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 03:07:09.828 00:05:55.365 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 03:12:18.984 00:00:10.364 TCP 23.104.0.1:41064 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:12:47.346 00:00:10.517 TCP 1.101.0.1:3000 -> 22.102.0.1:38200 10 6452 1 2025-11-29 03:13:19.387 00:00:10.322 TCP 23.104.0.1:37464 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:13:47.904 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32784 10 6452 1 2025-11-29 03:14:27.442 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 03:14:27.612 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 03:14:19.748 00:00:10.363 TCP 23.104.0.1:35590 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:14:48.123 00:00:10.528 TCP 1.101.0.1:3000 -> 22.102.0.1:44948 10 6452 1 2025-11-29 03:15:20.150 00:00:10.363 TCP 23.104.0.1:34822 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:15:48.685 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47732 10 6452 1 2025-11-29 03:16:20.556 00:00:10.359 TCP 23.104.0.1:42592 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:16:48.898 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:60360 10 6452 1 2025-11-29 03:17:20.953 00:00:10.340 TCP 23.104.0.1:42062 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:17:49.086 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38382 10 6452 1 2025-11-29 03:13:09.831 00:05:55.365 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 03:13:09.827 00:05:55.371 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 03:18:21.325 00:00:10.369 TCP 23.104.0.1:41814 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:18:49.269 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40558 10 6452 1 2025-11-29 03:19:27.598 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 03:19:27.581 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 03:19:21.724 00:00:10.337 TCP 23.104.0.1:52746 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:19:49.469 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37292 10 6452 1 2025-11-29 03:20:22.109 00:00:10.372 TCP 23.104.0.1:45790 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:20:49.697 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59088 10 6452 1 2025-11-29 03:21:22.515 00:00:10.366 TCP 23.104.0.1:47920 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:21:49.921 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39496 10 6452 1 2025-11-29 03:22:22.916 00:00:10.391 TCP 23.104.0.1:45702 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:22:50.141 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57786 10 6452 1 2025-11-29 03:23:23.346 00:00:10.387 TCP 23.104.0.1:58098 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:23:50.366 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56582 10 6452 1 2025-11-29 03:19:09.832 00:05:55.364 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 03:19:09.830 00:05:55.369 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 03:24:27.675 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 03:24:27.319 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 03:24:23.770 00:00:10.370 TCP 23.104.0.1:40208 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:24:50.600 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59490 10 6452 1 2025-11-29 03:25:24.178 00:00:10.359 TCP 23.104.0.1:51804 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:25:50.776 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36484 10 6452 1 2025-11-29 03:26:24.576 00:00:10.368 TCP 23.104.0.1:47446 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:26:50.994 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:39990 10 6452 1 2025-11-29 03:27:24.981 00:00:10.367 TCP 23.104.0.1:36744 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:27:51.187 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33952 10 6452 1 2025-11-29 03:28:25.385 00:00:10.365 TCP 23.104.0.1:59184 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:28:51.426 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50496 10 6452 1 2025-11-29 03:29:27.661 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 03:29:27.689 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 03:29:25.785 00:00:10.365 TCP 23.104.0.1:50960 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:25:09.833 00:05:55.368 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 03:29:51.654 00:00:10.447 TCP 1.101.0.1:3000 -> 22.102.0.1:43958 10 6452 1 2025-11-29 03:25:09.835 00:05:55.363 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 03:30:26.190 00:00:10.321 TCP 23.104.0.1:43374 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:30:52.141 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41308 10 6452 1 2025-11-29 03:31:26.553 00:00:10.331 TCP 23.104.0.1:40898 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:31:52.348 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51924 10 6452 1 2025-11-29 03:32:26.924 00:00:10.392 TCP 23.104.0.1:60746 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:32:52.565 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50932 10 6452 1 2025-11-29 03:33:27.353 00:00:10.326 TCP 23.104.0.1:46724 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:33:52.743 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53784 10 6452 1 2025-11-29 03:34:27.684 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 03:34:27.960 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 03:34:27.716 00:00:10.377 TCP 23.104.0.1:43106 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:34:52.966 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48252 10 6452 1 2025-11-29 03:35:28.131 00:00:10.367 TCP 23.104.0.1:47390 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:35:53.189 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39308 10 6452 1 2025-11-29 03:31:09.836 00:05:55.364 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 03:31:09.834 00:05:55.369 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 03:36:28.538 00:00:10.363 TCP 23.104.0.1:43022 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:36:53.405 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:34364 12 10375 1 2025-11-29 03:37:28.939 00:00:10.451 TCP 23.104.0.1:36376 -> 1.101.0.1:3000 15 1926 1 2025-11-29 03:37:53.646 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58318 10 6452 1 2025-11-29 03:38:29.428 00:00:10.365 TCP 23.104.0.1:58424 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:38:53.863 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52852 10 6452 1 2025-11-29 03:39:27.961 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 03:39:27.822 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 03:39:29.832 00:00:10.391 TCP 23.104.0.1:45912 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:39:54.086 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41702 10 6452 1 2025-11-29 03:40:30.259 00:00:10.365 TCP 23.104.0.1:33766 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:40:54.307 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60376 10 6452 1 2025-11-29 03:41:30.660 00:00:10.364 TCP 23.104.0.1:43406 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:41:54.480 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44410 10 6452 1 2025-11-29 03:37:09.838 00:05:55.365 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 03:37:09.835 00:05:55.369 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 03:42:31.093 00:00:10.365 TCP 23.104.0.1:49428 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:42:54.701 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57596 10 6452 1 2025-11-29 03:43:31.493 00:00:10.368 TCP 23.104.0.1:45316 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:43:54.922 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40624 10 6452 1 2025-11-29 03:44:27.672 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 03:44:28.010 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 03:44:31.899 00:00:10.377 TCP 23.104.0.1:52258 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:44:55.130 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41468 10 6452 1 2025-11-29 03:45:32.313 00:00:10.327 TCP 23.104.0.1:33860 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:45:55.347 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54674 10 6452 1 2025-11-29 03:46:32.675 00:00:10.465 TCP 23.104.0.1:47512 -> 1.101.0.1:3000 15 1926 1 2025-11-29 03:46:55.569 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:35380 12 10369 1 2025-11-29 03:47:33.178 00:00:10.364 TCP 23.104.0.1:51718 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:43:09.838 00:05:55.365 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 03:47:55.816 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34346 10 6452 1 2025-11-29 03:43:09.835 00:05:55.371 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 03:48:33.583 00:00:10.369 TCP 23.104.0.1:42206 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:48:56.070 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47638 10 6452 1 2025-11-29 03:49:28.209 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 03:49:28.156 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 03:49:33.991 00:00:10.366 TCP 23.104.0.1:59558 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:49:56.283 00:00:10.259 TCP 1.101.0.1:3000 -> 22.102.0.1:52664 10 6452 1 2025-11-29 03:50:34.399 00:00:10.327 TCP 23.104.0.1:47940 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:50:56.585 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45388 10 6452 1 2025-11-29 03:51:34.761 00:00:10.815 TCP 23.104.0.1:36588 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:51:56.803 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38494 10 6452 1 2025-11-29 03:52:35.620 00:00:10.364 TCP 23.104.0.1:47258 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:52:57.029 00:00:10.498 TCP 1.101.0.1:3000 -> 22.102.0.1:43324 10 6452 1 2025-11-29 03:53:36.020 00:00:10.384 TCP 23.104.0.1:36768 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:49:09.837 00:05:55.370 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 03:49:09.840 00:05:55.365 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 03:53:57.567 00:00:15.726 TCP 1.101.0.1:3000 -> 22.102.0.1:50382 10 6452 1 2025-11-29 03:54:28.041 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 03:54:28.267 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 03:54:36.450 00:00:10.379 TCP 23.104.0.1:42718 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:55:03.341 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35926 10 6452 1 2025-11-29 03:55:36.864 00:00:10.366 TCP 23.104.0.1:43420 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:56:03.561 00:00:10.537 TCP 1.101.0.1:3000 -> 22.102.0.1:42846 10 6452 1 2025-11-29 03:56:37.263 00:00:10.345 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:57:04.130 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34686 10 6452 1 2025-11-29 03:57:37.649 00:00:10.324 TCP 23.104.0.1:49830 -> 1.101.0.1:3000 11 1507 1 2025-11-29 03:58:04.347 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37458 10 6452 1 2025-11-29 03:58:38.010 00:00:10.322 TCP 23.104.0.1:51320 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507026, total packets: 1584, avg bps: 1062, avg pps: 0, avg bpp: 320 Time window: 2025-11-29 02:55:09 - 2025-11-29 03:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0049s User: 0.0019s Wall: 0.0027s flows/second: 60091.4 Runtime: 0.0027s