Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 00:55:05.564 00:05:04.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 00:55:05.566 00:05:04.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 00:59:08.674 00:00:10.368 TCP 23.104.0.1:45386 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:59:10.762 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41512 10 6452 1 2025-11-30 00:59:53.536 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 00:59:53.681 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 01:00:10.974 00:00:10.315 TCP 1.101.0.1:3000 -> 22.102.0.1:48684 10 6452 1 2025-11-30 01:00:09.103 00:00:10.362 TCP 23.104.0.1:50238 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:01:11.318 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50246 10 6452 1 2025-11-30 01:01:09.508 00:00:10.326 TCP 23.104.0.1:60216 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:02:09.871 00:00:10.648 TCP 23.104.0.1:42484 -> 1.101.0.1:3000 15 1926 1 2025-11-30 01:02:11.539 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:38920 12 10375 1 2025-11-30 01:03:11.795 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37936 10 6452 1 2025-11-30 01:03:10.553 00:00:10.328 TCP 23.104.0.1:34248 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:04:10.916 00:00:10.339 TCP 23.104.0.1:53224 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:04:11.964 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34336 12 6556 1 2025-11-30 01:04:53.663 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 01:04:53.642 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 01:01:05.565 00:05:04.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 01:01:05.567 00:05:04.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 01:05:11.291 00:00:10.367 TCP 23.104.0.1:38864 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:05:12.191 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44788 10 6452 1 2025-11-30 01:06:12.402 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55876 10 6452 1 2025-11-30 01:06:11.699 00:00:10.373 TCP 23.104.0.1:51938 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:07:12.610 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58638 10 6452 1 2025-11-30 01:07:12.107 00:00:10.372 TCP 23.104.0.1:35762 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:08:12.521 00:00:10.366 TCP 23.104.0.1:47900 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:08:12.847 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:60844 10 6452 1 2025-11-30 01:09:12.931 00:00:10.381 TCP 23.104.0.1:38976 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:09:13.081 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53780 10 6452 1 2025-11-30 01:09:53.934 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 01:09:53.779 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 01:10:13.350 00:00:10.363 TCP 23.104.0.1:50160 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:10:13.297 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35246 10 6452 1 2025-11-30 01:07:05.568 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 01:07:05.566 00:05:04.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 01:11:13.750 00:00:10.383 TCP 23.104.0.1:35668 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:11:13.514 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37082 10 6452 1 2025-11-30 01:12:13.728 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36172 10 6452 1 2025-11-30 01:12:14.173 00:00:10.361 TCP 23.104.0.1:32980 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:13:13.949 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50370 10 6452 1 2025-11-30 01:13:14.576 00:00:10.502 TCP 23.104.0.1:58096 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:14:15.110 00:00:10.364 TCP 23.104.0.1:39746 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:14:14.183 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51822 10 6452 1 2025-11-30 01:14:54.066 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 01:14:54.089 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 01:15:15.511 00:00:10.369 TCP 23.104.0.1:46620 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:15:14.410 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46250 10 6452 1 2025-11-30 01:16:15.917 00:00:10.370 TCP 23.104.0.1:33180 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:16:14.625 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42842 10 6452 1 2025-11-30 01:13:05.566 00:05:04.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 01:13:05.569 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 01:17:16.328 00:00:10.366 TCP 23.104.0.1:49342 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:17:14.804 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42972 10 6452 1 2025-11-30 01:18:15.030 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45872 10 6452 1 2025-11-30 01:18:16.728 00:00:10.375 TCP 23.104.0.1:57134 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:19:15.248 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44102 10 6452 1 2025-11-30 01:19:17.157 00:00:10.365 TCP 23.104.0.1:35212 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:19:54.028 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 01:19:54.001 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 01:20:15.464 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48520 10 6452 1 2025-11-30 01:20:17.561 00:00:10.364 TCP 23.104.0.1:56196 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:21:15.634 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57130 10 6452 1 2025-11-30 01:21:17.964 00:00:10.369 TCP 23.104.0.1:54626 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:22:15.814 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48246 10 6452 1 2025-11-30 01:22:18.372 00:00:10.362 TCP 23.104.0.1:48106 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:19:05.567 00:05:04.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 01:19:05.570 00:05:04.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 01:23:16.040 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38502 10 6452 1 2025-11-30 01:23:18.770 00:00:10.370 TCP 23.104.0.1:52842 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:24:19.174 00:00:10.362 TCP 23.104.0.1:54014 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:24:16.214 00:00:11.725 TCP 1.101.0.1:3000 -> 22.102.0.1:33140 10 6452 1 2025-11-30 01:24:54.150 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 01:24:54.306 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 01:25:19.570 00:00:10.363 TCP 23.104.0.1:57324 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:25:17.977 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54560 10 6452 1 2025-11-30 01:26:18.211 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50800 10 6452 1 2025-11-30 01:26:19.975 00:00:10.368 TCP 23.104.0.1:33684 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:27:20.385 00:00:10.366 TCP 23.104.0.1:45272 -> 1.101.0.1:3000 12 1559 1 2025-11-30 01:27:18.431 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38240 10 6452 1 2025-11-30 01:28:18.605 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57216 10 6452 1 2025-11-30 01:28:20.791 00:00:10.359 TCP 23.104.0.1:59342 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:25:05.569 00:05:04.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 01:25:05.572 00:05:04.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 01:29:21.186 00:00:10.361 TCP 23.104.0.1:38022 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:29:18.817 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57812 10 6452 1 2025-11-30 01:29:54.229 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 01:29:53.992 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 01:30:21.586 00:00:10.323 TCP 23.104.0.1:49504 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:30:19.038 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56620 10 6452 1 2025-11-30 01:31:19.249 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58146 10 6452 1 2025-11-30 01:31:21.948 00:00:10.329 TCP 23.104.0.1:38882 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:32:19.464 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58472 10 6452 1 2025-11-30 01:32:22.320 00:00:10.365 TCP 23.104.0.1:54478 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:33:19.677 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50846 10 6452 1 2025-11-30 01:33:22.724 00:00:10.325 TCP 23.104.0.1:40784 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:34:19.893 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40252 10 6452 1 2025-11-30 01:34:23.107 00:00:10.362 TCP 23.104.0.1:49786 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:34:54.346 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 01:34:54.311 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 01:31:05.572 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 01:31:05.571 00:05:04.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 01:35:20.122 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51662 10 6452 1 2025-11-30 01:35:23.514 00:00:10.371 TCP 23.104.0.1:57968 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:36:20.342 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53682 10 6452 1 2025-11-30 01:36:23.921 00:00:10.351 TCP 23.104.0.1:40636 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:37:20.556 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39098 10 6452 1 2025-11-30 01:37:24.319 00:00:10.370 TCP 23.104.0.1:44848 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:38:20.727 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50128 10 6452 1 2025-11-30 01:38:24.725 00:00:10.376 TCP 23.104.0.1:59984 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:39:20.942 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42676 10 6452 1 2025-11-30 01:39:25.141 00:00:10.366 TCP 23.104.0.1:36116 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:39:54.392 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 01:39:54.141 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 01:40:21.182 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34524 10 6452 1 2025-11-30 01:40:25.544 00:00:10.370 TCP 23.104.0.1:42638 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:37:05.573 00:05:04.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 01:37:05.570 00:05:04.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 01:41:21.392 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59604 10 6452 1 2025-11-30 01:41:25.953 00:00:10.364 TCP 23.104.0.1:33218 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:42:21.624 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:39386 10 6452 1 2025-11-30 01:42:26.358 00:00:10.359 TCP 23.104.0.1:41268 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:43:21.854 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55482 10 6452 1 2025-11-30 01:43:26.760 00:00:10.369 TCP 23.104.0.1:44238 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:44:22.031 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51912 10 6452 1 2025-11-30 01:44:27.170 00:00:10.325 TCP 23.104.0.1:52774 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:44:54.554 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 01:44:54.460 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 01:45:22.249 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46404 10 6452 1 2025-11-30 01:45:27.534 00:00:10.378 TCP 23.104.0.1:52632 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:46:22.467 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54700 10 6452 1 2025-11-30 01:46:27.951 00:00:10.375 TCP 23.104.0.1:46454 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:43:05.572 00:05:04.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 01:43:05.576 00:05:04.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 01:47:22.700 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46858 10 6452 1 2025-11-30 01:47:28.371 00:00:10.368 TCP 23.104.0.1:58572 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:48:22.913 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48066 10 6452 1 2025-11-30 01:48:28.774 00:00:10.322 TCP 23.104.0.1:43078 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:49:23.126 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46562 10 6452 1 2025-11-30 01:49:29.137 00:00:10.333 TCP 23.104.0.1:56598 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:49:54.807 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 01:49:54.864 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 01:50:23.347 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34316 10 6452 1 2025-11-30 01:50:29.511 00:00:10.374 TCP 23.104.0.1:53598 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:51:23.568 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55538 10 6452 1 2025-11-30 01:51:29.921 00:00:10.387 TCP 23.104.0.1:42080 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:52:23.785 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:33232 12 10375 1 2025-11-30 01:52:30.347 00:00:10.437 TCP 23.104.0.1:40350 -> 1.101.0.1:3000 15 1926 1 2025-11-30 01:49:05.577 00:05:04.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 01:49:05.574 00:05:04.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 01:53:24.030 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6452 1 2025-11-30 01:53:30.824 00:00:10.331 TCP 23.104.0.1:49586 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:54:24.207 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45752 10 6452 1 2025-11-30 01:54:31.191 00:00:10.327 TCP 23.104.0.1:42076 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:54:54.767 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 01:54:54.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 01:55:24.432 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54668 10 6452 1 2025-11-30 01:55:31.559 00:00:10.369 TCP 23.104.0.1:40978 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:56:24.655 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54158 10 6452 1 2025-11-30 01:56:31.968 00:00:10.387 TCP 23.104.0.1:40910 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:57:24.871 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:40780 10 6452 1 2025-11-30 01:57:32.397 00:00:10.326 TCP 23.104.0.1:43648 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:58:25.086 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43538 10 6452 1 2025-11-30 01:58:32.761 00:00:10.379 TCP 23.104.0.1:33518 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507188, total packets: 1587, avg bps: 1062, avg pps: 0, avg bpp: 319 Time window: 2025-11-30 00:55:05 - 2025-11-30 01:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0052s User: 0.0000s Wall: 0.0030s flows/second: 55558.2 Runtime: 0.0030s