Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 18:58:47.870 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59066 10 6452 1 2025-11-29 18:55:05.452 00:05:04.742 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 18:55:05.455 00:05:04.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 18:59:46.360 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 18:59:46.437 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 18:59:32.817 00:00:10.370 TCP 23.104.0.1:53746 -> 1.101.0.1:3000 11 1507 1 2025-11-29 18:59:48.102 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37738 10 6452 1 2025-11-29 19:00:33.227 00:00:10.371 TCP 23.104.0.1:50080 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:00:48.282 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34826 10 6452 1 2025-11-29 19:01:33.634 00:00:10.320 TCP 23.104.0.1:50944 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:01:48.500 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42476 10 6452 1 2025-11-29 19:02:33.995 00:00:10.367 TCP 23.104.0.1:36708 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:02:48.721 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60006 10 6452 1 2025-11-29 19:03:34.401 00:00:10.326 TCP 23.104.0.1:60256 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:03:48.941 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:39572 10 6452 1 2025-11-29 19:04:46.339 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 19:04:34.765 00:00:10.376 TCP 23.104.0.1:51396 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:04:46.577 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 19:04:49.182 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54112 10 6452 1 2025-11-29 19:01:05.456 00:05:04.741 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 19:01:05.453 00:05:04.747 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 19:05:35.176 00:00:10.368 TCP 23.104.0.1:59242 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:05:49.357 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33156 10 6452 1 2025-11-29 19:06:35.585 00:00:10.367 TCP 23.104.0.1:35992 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:06:49.581 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60770 10 6452 1 2025-11-29 19:07:35.990 00:00:10.367 TCP 23.104.0.1:59982 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:07:49.797 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54646 10 6452 1 2025-11-29 19:08:36.397 00:00:10.363 TCP 23.104.0.1:59410 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:08:49.968 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45676 12 6556 1 2025-11-29 19:09:46.451 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 19:09:46.637 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 19:09:36.798 00:00:10.338 TCP 23.104.0.1:47596 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:09:50.192 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58702 10 6452 1 2025-11-29 19:10:37.175 00:00:10.708 TCP 23.104.0.1:40448 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:10:50.400 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45736 10 6452 1 2025-11-29 19:07:05.453 00:05:04.747 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 19:07:05.456 00:05:04.741 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 19:11:37.923 00:00:10.385 TCP 23.104.0.1:40934 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:11:50.619 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49922 10 6452 1 2025-11-29 19:12:38.347 00:00:10.580 TCP 23.104.0.1:48322 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:12:50.791 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33464 10 6452 1 2025-11-29 19:13:38.968 00:00:10.328 TCP 23.104.0.1:49452 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:13:51.011 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46486 10 6452 1 2025-11-29 19:14:46.769 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 19:14:46.462 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 19:14:39.335 00:00:10.325 TCP 23.104.0.1:52580 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:14:51.194 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53576 10 6452 1 2025-11-29 19:15:39.708 00:00:10.389 TCP 23.104.0.1:43114 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:15:51.413 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35190 10 6452 1 2025-11-29 19:16:40.139 00:00:10.365 TCP 23.104.0.1:42126 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:16:51.579 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58202 10 6452 1 2025-11-29 19:13:05.457 00:05:04.742 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 19:13:05.455 00:05:04.748 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 19:17:40.549 00:00:10.369 TCP 23.104.0.1:49272 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:17:51.789 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34922 10 6452 1 2025-11-29 19:18:40.969 00:00:10.378 TCP 23.104.0.1:41562 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:18:51.996 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41136 10 6452 1 2025-11-29 19:19:46.795 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 19:19:41.390 00:00:10.370 TCP 23.104.0.1:39566 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:19:47.239 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 19:19:52.218 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50562 10 6452 1 2025-11-29 19:20:41.803 00:00:10.366 TCP 23.104.0.1:51624 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:20:52.429 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60484 10 6452 1 2025-11-29 19:21:42.208 00:00:10.364 TCP 23.104.0.1:42986 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:21:52.645 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53812 10 6452 1 2025-11-29 19:22:42.611 00:00:10.376 TCP 23.104.0.1:40698 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:19:05.461 00:05:04.739 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 19:22:52.816 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57780 10 6452 1 2025-11-29 19:19:05.459 00:05:04.745 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 19:23:43.027 00:00:10.369 TCP 23.104.0.1:59602 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:23:53.033 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55842 10 6452 1 2025-11-29 19:24:46.824 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 19:24:46.660 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 19:24:43.437 00:00:10.319 TCP 23.104.0.1:38996 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:24:53.245 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:45514 10 6452 1 2025-11-29 19:25:43.791 00:00:10.371 TCP 23.104.0.1:43584 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:25:53.449 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49658 10 6452 1 2025-11-29 19:26:44.202 00:00:10.367 TCP 23.104.0.1:57696 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:26:53.626 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36958 10 6452 1 2025-11-29 19:27:44.606 00:00:10.366 TCP 23.104.0.1:54552 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:27:53.842 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60582 10 6452 1 2025-11-29 19:28:45.014 00:00:10.360 TCP 23.104.0.1:60416 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:28:54.027 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33698 10 6452 1 2025-11-29 19:25:05.467 00:05:04.736 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 19:25:05.465 00:05:04.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 19:29:46.965 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 19:29:47.198 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 19:29:45.418 00:00:10.364 TCP 23.104.0.1:44554 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:29:54.240 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42144 10 6452 1 2025-11-29 19:30:45.822 00:00:10.364 TCP 23.104.0.1:60486 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:30:54.450 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50386 10 6452 1 2025-11-29 19:31:46.225 00:00:10.365 TCP 23.104.0.1:40576 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:31:54.666 00:00:10.860 TCP 1.101.0.1:3000 -> 22.102.0.1:56512 10 6452 1 2025-11-29 19:32:46.626 00:00:10.362 TCP 23.104.0.1:57674 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:32:55.566 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47410 10 6452 1 2025-11-29 19:33:47.031 00:00:10.364 TCP 23.104.0.1:44106 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:33:55.776 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33456 10 6452 1 2025-11-29 19:34:47.077 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 19:34:47.177 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 19:34:47.437 00:00:10.320 TCP 23.104.0.1:32954 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:34:55.948 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:56284 10 6452 1 2025-11-29 19:31:05.465 00:05:04.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 19:31:05.469 00:05:04.736 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 19:35:47.798 00:00:10.372 TCP 23.104.0.1:45146 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:35:56.186 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38356 10 6452 1 2025-11-29 19:36:48.212 00:00:10.321 TCP 23.104.0.1:51114 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:36:56.414 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46602 10 6452 1 2025-11-29 19:37:48.573 00:00:10.373 TCP 23.104.0.1:41470 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:37:56.632 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:49074 10 6452 1 2025-11-29 19:38:48.986 00:00:10.492 TCP 23.104.0.1:49196 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:38:56.818 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47550 10 6452 1 2025-11-29 19:39:48.269 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 19:39:48.265 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 19:39:49.520 00:00:10.368 TCP 23.104.0.1:57720 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:39:57.033 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37540 10 6452 1 2025-11-29 19:40:49.923 00:00:10.386 TCP 23.104.0.1:42618 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:40:57.261 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35312 10 6452 1 2025-11-29 19:37:05.467 00:05:04.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 19:37:05.470 00:05:04.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 19:41:50.345 00:00:10.378 TCP 23.104.0.1:45086 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:41:57.480 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58124 10 6452 1 2025-11-29 19:42:50.789 00:00:10.370 TCP 23.104.0.1:47714 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:42:57.691 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50260 10 6452 1 2025-11-29 19:43:51.208 00:00:10.328 TCP 23.104.0.1:49508 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:43:57.902 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54688 10 6452 1 2025-11-29 19:44:47.456 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 19:44:47.227 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 19:44:51.577 00:00:10.374 TCP 23.104.0.1:33006 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:44:58.119 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45616 10 6452 1 2025-11-29 19:45:51.988 00:00:10.361 TCP 23.104.0.1:40838 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:45:58.342 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:54874 10 6452 1 2025-11-29 19:46:52.388 00:00:10.364 TCP 23.104.0.1:47782 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:46:58.574 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59402 10 6452 1 2025-11-29 19:43:05.469 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 19:43:05.471 00:05:04.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 19:47:52.795 00:00:10.467 TCP 23.104.0.1:43594 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:47:58.790 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35356 10 6452 1 2025-11-29 19:48:53.330 00:00:10.363 TCP 23.104.0.1:37010 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:48:59.002 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33646 10 6452 1 2025-11-29 19:49:47.257 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 19:49:47.159 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 19:49:53.737 00:00:10.361 TCP 23.104.0.1:47812 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:49:59.235 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44124 10 6452 1 2025-11-29 19:50:54.137 00:00:10.385 TCP 23.104.0.1:33652 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:50:59.473 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57694 10 6452 1 2025-11-29 19:51:54.566 00:00:10.363 TCP 23.104.0.1:39846 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:51:59.690 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51854 10 6452 1 2025-11-29 19:52:54.966 00:00:10.366 TCP 23.104.0.1:56008 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:49:05.472 00:05:04.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 19:49:05.470 00:05:04.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 19:52:59.912 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55358 10 6452 1 2025-11-29 19:53:55.372 00:00:10.319 TCP 23.104.0.1:57398 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:54:00.127 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46776 10 6452 1 2025-11-29 19:54:47.616 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 19:54:47.402 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 19:54:55.728 00:00:10.382 TCP 23.104.0.1:35164 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:55:00.297 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40912 10 6452 1 2025-11-29 19:55:56.137 00:00:10.363 TCP 23.104.0.1:59800 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:56:00.478 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43050 10 6452 1 2025-11-29 19:56:56.541 00:00:10.320 TCP 23.104.0.1:57564 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:57:00.688 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35826 10 6452 1 2025-11-29 19:57:56.902 00:00:10.698 TCP 23.104.0.1:47946 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:58:00.902 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39226 10 6452 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1050, avg pps: 0, avg bpp: 317 Time window: 2025-11-29 18:55:05 - 2025-11-29 19:58:11 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0052s User: 0.0021s Wall: 0.0024s flows/second: 68000.0 Runtime: 0.0024s