Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 12:58:45.263 00:00:10.367 TCP 23.104.0.1:49436 -> 1.101.0.1:3000 11 1507 1 2025-11-29 12:55:05.346 00:05:04.698 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 12:55:05.349 00:05:04.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 12:59:12.963 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44162 10 6452 1 2025-11-29 12:59:39.064 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 12:59:39.161 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 12:59:45.670 00:00:10.373 TCP 23.104.0.1:55654 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:00:13.189 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40298 10 6452 1 2025-11-29 13:00:46.099 00:00:10.362 TCP 23.104.0.1:40542 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:01:13.400 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40374 12 6556 1 2025-11-29 13:01:46.497 00:00:10.672 TCP 23.104.0.1:52666 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:02:13.614 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57162 10 6452 1 2025-11-29 13:02:47.203 00:00:10.366 TCP 23.104.0.1:46420 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:03:13.826 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47834 10 6452 1 2025-11-29 13:03:47.614 00:00:10.362 TCP 23.104.0.1:54588 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:04:14.058 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51200 10 6452 1 2025-11-29 13:04:39.340 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 13:04:39.222 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 13:04:48.017 00:00:10.362 TCP 23.104.0.1:43350 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:01:05.346 00:05:04.698 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 13:01:05.349 00:05:04.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 13:05:14.270 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50562 10 6452 1 2025-11-29 13:05:48.418 00:00:10.368 TCP 23.104.0.1:41280 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:06:14.480 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43424 10 6452 1 2025-11-29 13:06:48.829 00:00:10.386 TCP 23.104.0.1:50834 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:07:14.696 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44158 10 6452 1 2025-11-29 13:07:49.251 00:00:10.365 TCP 23.104.0.1:47748 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:08:14.908 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34504 10 6452 1 2025-11-29 13:08:49.655 00:00:10.366 TCP 23.104.0.1:48506 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:09:15.119 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36336 10 6452 1 2025-11-29 13:09:39.296 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 13:09:39.595 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 13:09:50.063 00:00:10.365 TCP 23.104.0.1:48968 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:10:15.332 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:47156 10 6452 1 2025-11-29 13:10:50.470 00:00:10.360 TCP 23.104.0.1:36660 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:07:05.349 00:05:04.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 13:07:05.352 00:05:04.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 13:11:15.542 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51108 10 6452 1 2025-11-29 13:11:50.868 00:00:10.323 TCP 23.104.0.1:47162 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:12:15.754 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38956 10 6452 1 2025-11-29 13:12:51.237 00:00:10.364 TCP 23.104.0.1:47690 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:13:15.964 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35994 10 6452 1 2025-11-29 13:13:51.639 00:00:10.362 TCP 23.104.0.1:36060 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:14:16.182 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49296 10 6452 1 2025-11-29 13:14:39.683 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 13:14:39.616 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 13:14:52.051 00:00:10.362 TCP 23.104.0.1:46214 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:15:16.393 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35992 10 6452 1 2025-11-29 13:15:52.455 00:00:10.366 TCP 23.104.0.1:34940 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:16:16.602 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45306 10 6452 1 2025-11-29 13:13:05.350 00:05:04.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 13:16:52.858 00:00:10.372 TCP 23.104.0.1:37568 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:13:05.353 00:05:04.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 13:17:16.814 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50364 10 6452 1 2025-11-29 13:17:53.269 00:00:10.365 TCP 23.104.0.1:46658 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:18:17.035 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50772 10 6452 1 2025-11-29 13:18:53.674 00:00:10.373 TCP 23.104.0.1:52824 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:19:17.245 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58402 10 6452 1 2025-11-29 13:19:39.410 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 13:19:39.607 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 13:19:54.105 00:00:10.366 TCP 23.104.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:20:17.457 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38418 10 6452 1 2025-11-29 13:20:54.511 00:00:12.408 TCP 23.104.0.1:55424 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:21:17.675 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54492 10 6452 1 2025-11-29 13:21:57.026 00:00:10.363 TCP 23.104.0.1:52702 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:22:17.887 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44762 10 6452 1 2025-11-29 13:19:05.354 00:05:04.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 13:22:57.425 00:00:10.369 TCP 23.104.0.1:36444 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:19:05.357 00:05:04.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 13:23:18.099 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37642 10 6452 1 2025-11-29 13:23:57.826 00:00:10.350 TCP 23.104.0.1:54772 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:24:18.309 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35158 10 6452 1 2025-11-29 13:24:39.728 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 13:24:39.682 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 13:24:58.214 00:00:10.975 TCP 23.104.0.1:44394 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:25:18.489 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45050 10 6452 1 2025-11-29 13:25:59.221 00:00:10.364 TCP 23.104.0.1:51664 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:26:18.703 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60174 10 6452 1 2025-11-29 13:26:59.631 00:00:10.437 TCP 23.104.0.1:54630 -> 1.101.0.1:3000 15 1926 1 2025-11-29 13:27:18.922 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:50848 12 10369 1 2025-11-29 13:28:00.108 00:00:10.358 TCP 23.104.0.1:53668 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:28:19.172 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48834 10 6452 1 2025-11-29 13:25:05.355 00:05:04.733 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 13:25:05.358 00:05:04.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 13:29:00.507 00:00:10.372 TCP 23.104.0.1:60292 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:29:19.402 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58416 10 6452 1 2025-11-29 13:29:39.620 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 13:29:39.802 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 13:30:00.924 00:00:10.389 TCP 23.104.0.1:33908 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:30:19.584 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54110 10 6452 1 2025-11-29 13:31:01.349 00:00:10.364 TCP 23.104.0.1:57898 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:31:19.817 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48608 10 6452 1 2025-11-29 13:32:01.747 00:00:10.329 TCP 23.104.0.1:35968 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:32:20.042 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57606 10 6452 1 2025-11-29 13:33:02.111 00:00:10.365 TCP 23.104.0.1:41132 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:33:20.260 00:00:12.323 TCP 1.101.0.1:3000 -> 22.102.0.1:57726 10 6452 1 2025-11-29 13:34:02.518 00:00:10.367 TCP 23.104.0.1:34088 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:34:22.622 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36500 10 6452 1 2025-11-29 13:34:39.845 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 13:34:39.800 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 13:31:05.356 00:05:04.733 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 13:31:05.359 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 13:35:02.920 00:00:10.389 TCP 23.104.0.1:37052 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:35:22.836 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50412 10 6452 1 2025-11-29 13:36:03.348 00:00:10.365 TCP 23.104.0.1:52176 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:36:23.077 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41722 10 6452 1 2025-11-29 13:37:03.750 00:00:10.390 TCP 23.104.0.1:49658 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:37:23.295 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55498 10 6452 1 2025-11-29 13:38:04.176 00:00:10.378 TCP 23.104.0.1:40026 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:38:23.517 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58676 10 6452 1 2025-11-29 13:39:04.592 00:00:10.361 TCP 23.104.0.1:49424 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:39:23.732 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57086 10 6452 1 2025-11-29 13:39:39.874 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 13:39:39.729 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 13:40:05.000 00:00:10.364 TCP 23.104.0.1:45450 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:40:23.912 00:00:11.085 TCP 1.101.0.1:3000 -> 22.102.0.1:35040 10 6452 1 2025-11-29 13:37:05.362 00:05:04.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 13:37:05.359 00:05:04.731 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 13:41:05.406 00:00:10.363 TCP 23.104.0.1:57642 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:41:25.058 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44024 10 6452 1 2025-11-29 13:42:05.808 00:00:10.339 TCP 23.104.0.1:40046 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:42:25.272 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:58402 10 6452 1 2025-11-29 13:43:06.195 00:00:10.370 TCP 23.104.0.1:40056 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:43:25.476 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57092 10 6452 1 2025-11-29 13:44:06.596 00:00:10.670 TCP 23.104.0.1:56884 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:44:25.690 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-11-29 13:44:40.591 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 13:44:39.972 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 13:45:07.316 00:00:10.360 TCP 23.104.0.1:56454 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:45:25.868 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36366 10 6452 1 2025-11-29 13:46:07.709 00:00:10.367 TCP 23.104.0.1:57744 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:46:26.098 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52322 10 6452 1 2025-11-29 13:43:05.363 00:05:04.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 13:43:05.361 00:05:04.730 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 13:47:08.113 00:00:10.359 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:47:26.319 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:42426 10 6452 1 2025-11-29 13:48:08.509 00:00:10.362 TCP 23.104.0.1:35786 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:48:26.557 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-11-29 13:49:08.912 00:00:10.366 TCP 23.104.0.1:51778 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:49:26.770 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:43806 10 6452 1 2025-11-29 13:49:40.145 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 13:49:40.215 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 13:50:09.316 00:00:10.365 TCP 23.104.0.1:39750 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:50:26.962 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54582 12 6556 1 2025-11-29 13:51:09.723 00:00:10.425 TCP 23.104.0.1:49588 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:51:27.191 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40252 10 6452 1 2025-11-29 13:52:10.183 00:00:10.366 TCP 23.104.0.1:34782 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:52:27.419 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45920 10 6452 1 2025-11-29 13:49:05.361 00:05:04.731 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 13:49:05.364 00:05:04.726 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 13:53:10.600 00:00:10.321 TCP 23.104.0.1:34896 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:53:27.639 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52884 10 6452 1 2025-11-29 13:54:10.956 00:00:10.370 TCP 23.104.0.1:51290 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:54:40.138 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 13:54:27.864 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49198 10 6452 1 2025-11-29 13:54:40.193 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 13:55:11.358 00:00:11.499 TCP 23.104.0.1:37384 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:55:28.100 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53072 10 6452 1 2025-11-29 13:56:12.892 00:00:10.368 TCP 23.104.0.1:34812 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:56:28.313 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58148 10 6452 1 2025-11-29 13:57:13.300 00:00:10.367 TCP 23.104.0.1:58312 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:57:28.536 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:58680 10 6452 1 2025-11-29 13:58:13.704 00:00:10.323 TCP 23.104.0.1:54524 -> 1.101.0.1:3000 11 1507 1 2025-11-29 13:58:28.717 00:00:10.508 TCP 1.101.0.1:3000 -> 22.102.0.1:41930 10 6452 1 Summary: total flows: 164, total bytes: 502892, total packets: 1582, avg bps: 1054, avg pps: 0, avg bpp: 317 Time window: 2025-11-29 12:55:05 - 2025-11-29 13:58:39 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0065s User: 0.0000s Wall: 0.0023s flows/second: 70811.8 Runtime: 0.0023s