Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 03:58:56.279 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60030 10 6452 1 2025-11-30 03:55:05.610 00:05:04.745 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 03:55:05.607 00:05:04.751 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 03:59:28.036 00:00:10.367 TCP 23.104.0.1:41992 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:59:57.303 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 03:59:57.157 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 03:59:56.502 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59084 10 6452 1 2025-11-30 04:00:28.447 00:00:10.363 TCP 23.104.0.1:60618 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:00:56.722 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47788 10 6452 1 2025-11-30 04:01:28.853 00:00:10.378 TCP 23.104.0.1:46904 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:01:56.953 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:59534 10 6452 1 2025-11-30 04:02:29.271 00:00:10.364 TCP 23.104.0.1:55236 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:02:57.150 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48410 10 6452 1 2025-11-30 04:03:29.672 00:00:10.363 TCP 23.104.0.1:60516 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:03:57.370 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47408 10 6452 1 2025-11-30 04:04:30.102 00:00:10.377 TCP 23.104.0.1:54380 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:04:57.274 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 04:04:57.010 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 04:01:05.610 00:05:04.746 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 04:04:57.578 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44214 10 6452 1 2025-11-30 04:01:05.607 00:05:04.751 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 04:05:30.529 00:00:10.362 TCP 23.104.0.1:46028 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:05:57.749 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6452 1 2025-11-30 04:06:30.927 00:00:10.387 TCP 23.104.0.1:47382 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:06:57.964 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:52490 10 6452 1 2025-11-30 04:07:31.356 00:00:10.364 TCP 23.104.0.1:46246 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:07:58.158 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47598 10 6452 1 2025-11-30 04:08:31.767 00:00:10.337 TCP 23.104.0.1:44468 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:08:58.369 00:00:10.624 TCP 1.101.0.1:3000 -> 22.102.0.1:37290 10 6452 1 2025-11-30 04:09:32.143 00:00:10.365 TCP 23.104.0.1:57728 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:09:57.418 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 04:09:57.363 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 04:09:59.037 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36866 10 6452 1 2025-11-30 04:10:32.548 00:00:10.321 TCP 23.104.0.1:50408 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:07:05.611 00:05:04.749 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 04:07:05.609 00:05:04.753 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 04:10:59.247 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53668 10 6452 1 2025-11-30 04:11:32.906 00:00:10.364 TCP 23.104.0.1:48216 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:11:59.462 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48308 10 6452 1 2025-11-30 04:12:33.313 00:00:10.364 TCP 23.104.0.1:58076 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:12:59.682 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35974 10 6452 1 2025-11-30 04:13:33.714 00:00:10.382 TCP 23.104.0.1:44404 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:13:59.894 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:40138 10 6452 1 2025-11-30 04:14:34.140 00:00:10.368 TCP 23.104.0.1:47126 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:14:57.669 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 04:14:57.602 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 04:15:00.099 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33462 10 6452 1 2025-11-30 04:15:34.547 00:00:10.369 TCP 23.104.0.1:49386 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:16:00.318 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58188 10 6452 1 2025-11-30 04:16:34.948 00:00:10.372 TCP 23.104.0.1:45560 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:17:00.531 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46422 10 6452 1 2025-11-30 04:13:05.609 00:05:04.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 04:13:05.612 00:05:04.749 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 04:17:35.353 00:00:10.326 TCP 23.104.0.1:59028 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:18:00.739 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38126 10 6452 1 2025-11-30 04:18:35.718 00:00:10.327 TCP 23.104.0.1:46752 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:19:00.954 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54970 12 6556 1 2025-11-30 04:19:36.111 00:00:10.327 TCP 23.104.0.1:52984 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:19:57.724 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 04:19:57.716 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 04:20:01.183 00:00:17.433 TCP 1.101.0.1:3000 -> 22.102.0.1:60634 10 6452 1 2025-11-30 04:20:36.478 00:00:10.369 TCP 23.104.0.1:38066 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:21:08.664 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34534 10 6452 1 2025-11-30 04:21:36.891 00:00:10.370 TCP 23.104.0.1:40452 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:22:08.880 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41096 10 6452 1 2025-11-30 04:22:37.303 00:00:10.324 TCP 23.104.0.1:41332 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:19:05.614 00:05:04.748 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 04:19:05.610 00:05:04.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 04:23:09.105 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41206 10 6452 1 2025-11-30 04:23:37.667 00:00:10.373 TCP 23.104.0.1:36666 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:24:09.313 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54122 10 6452 1 2025-11-30 04:24:38.094 00:00:10.361 TCP 23.104.0.1:45908 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:24:58.281 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 04:24:57.716 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 04:25:09.526 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40640 10 6452 1 2025-11-30 04:25:38.496 00:00:10.363 TCP 23.104.0.1:51358 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:26:09.736 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57060 10 6452 1 2025-11-30 04:26:38.896 00:00:10.373 TCP 23.104.0.1:44024 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:27:09.956 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:33236 12 6556 1 2025-11-30 04:27:39.304 00:00:11.355 TCP 23.104.0.1:37360 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:28:10.201 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46374 10 6452 1 2025-11-30 04:28:40.699 00:00:10.365 TCP 23.104.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:25:05.611 00:05:04.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 04:25:05.615 00:05:04.750 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 04:29:10.374 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38046 10 6452 1 2025-11-30 04:29:41.107 00:00:10.363 TCP 23.104.0.1:51660 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:29:57.990 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 04:29:57.748 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 04:30:10.591 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43532 10 6452 1 2025-11-30 04:30:41.508 00:00:10.361 TCP 23.104.0.1:35378 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:31:10.808 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41822 10 6452 1 2025-11-30 04:31:41.907 00:00:10.321 TCP 23.104.0.1:45922 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:32:11.035 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:45034 12 10375 1 2025-11-30 04:32:42.269 00:00:10.442 TCP 23.104.0.1:33998 -> 1.101.0.1:3000 15 1926 1 2025-11-30 04:33:11.289 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46342 10 6452 1 2025-11-30 04:33:42.761 00:00:10.377 TCP 23.104.0.1:35306 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:34:11.515 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39268 10 6452 1 2025-11-30 04:34:58.022 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 04:34:43.174 00:00:10.328 TCP 23.104.0.1:36922 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:34:57.955 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 04:31:05.617 00:05:04.748 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 04:31:05.614 00:05:04.753 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 04:35:11.724 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42386 10 6452 1 2025-11-30 04:35:43.540 00:00:11.012 TCP 23.104.0.1:37400 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:36:11.937 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46774 10 6452 1 2025-11-30 04:36:44.594 00:00:10.368 TCP 23.104.0.1:60660 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:37:12.161 00:00:11.065 TCP 1.101.0.1:3000 -> 22.102.0.1:55774 10 6452 1 2025-11-30 04:37:44.998 00:00:10.321 TCP 23.104.0.1:59252 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:38:13.267 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40234 10 6452 1 2025-11-30 04:38:45.361 00:00:10.364 TCP 23.104.0.1:49324 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:39:13.477 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47626 10 6452 1 2025-11-30 04:39:45.765 00:00:10.372 TCP 23.104.0.1:47024 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:39:58.202 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 04:39:57.973 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 04:40:13.689 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44274 10 6452 1 2025-11-30 04:40:46.177 00:00:11.040 TCP 23.104.0.1:35172 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:37:05.614 00:05:04.753 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 04:37:05.617 00:05:04.748 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 04:41:13.905 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52688 10 6452 1 2025-11-30 04:41:47.253 00:00:10.371 TCP 23.104.0.1:35310 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:42:14.123 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:44224 12 10369 1 2025-11-30 04:42:47.663 00:00:10.447 TCP 23.104.0.1:55140 -> 1.101.0.1:3000 15 1926 1 2025-11-30 04:43:14.374 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50188 10 6452 1 2025-11-30 04:43:48.148 00:00:10.364 TCP 23.104.0.1:51562 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:44:14.594 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54698 10 6452 1 2025-11-30 04:44:58.268 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 04:44:58.168 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 04:44:48.553 00:00:10.364 TCP 23.104.0.1:37944 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:45:14.810 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44218 10 6452 1 2025-11-30 04:45:48.956 00:00:10.323 TCP 23.104.0.1:36212 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:46:15.034 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60028 10 6452 1 2025-11-30 04:46:49.312 00:00:10.365 TCP 23.104.0.1:60976 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:43:05.617 00:05:04.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 04:43:05.615 00:05:04.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 04:47:15.256 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:48234 12 10369 1 2025-11-30 04:47:49.716 00:00:10.638 TCP 23.104.0.1:39316 -> 1.101.0.1:3000 15 1926 1 2025-11-30 04:48:15.501 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35142 10 6452 1 2025-11-30 04:48:50.393 00:00:10.369 TCP 23.104.0.1:48038 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:49:15.720 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60010 10 6452 1 2025-11-30 04:49:58.337 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 04:49:50.805 00:00:10.372 TCP 23.104.0.1:53228 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:49:58.611 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 04:50:15.943 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:44882 10 6452 1 2025-11-30 04:50:51.215 00:00:10.372 TCP 23.104.0.1:53576 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:51:16.178 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50864 10 6452 1 2025-11-30 04:51:51.636 00:00:10.366 TCP 23.104.0.1:51486 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:52:16.402 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46560 12 10375 1 2025-11-30 04:52:52.049 00:00:10.439 TCP 23.104.0.1:60030 -> 1.101.0.1:3000 15 1926 1 2025-11-30 04:49:05.620 00:05:04.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 04:49:05.617 00:05:04.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 04:53:16.610 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41442 10 6452 1 2025-11-30 04:53:52.526 00:00:10.366 TCP 23.104.0.1:49046 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:54:16.823 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33432 10 6452 1 2025-11-30 04:54:58.618 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 04:54:58.440 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 04:54:52.928 00:00:10.339 TCP 23.104.0.1:36516 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:55:17.043 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37592 10 6452 1 2025-11-30 04:55:53.304 00:00:10.328 TCP 23.104.0.1:58758 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:56:17.215 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56806 10 6452 1 2025-11-30 04:56:53.675 00:00:10.323 TCP 23.104.0.1:53716 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:57:17.424 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36312 10 6452 1 2025-11-30 04:57:54.054 00:00:10.368 TCP 23.104.0.1:41942 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:58:17.640 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40350 10 6452 1 Summary: total flows: 163, total bytes: 514405, total packets: 1589, avg bps: 1082, avg pps: 0, avg bpp: 323 Time window: 2025-11-30 03:55:05 - 2025-11-30 04:58:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0028s Wall: 0.0029s flows/second: 55901.2 Runtime: 0.0029s