Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 04:58:54.461 00:00:10.363 TCP 23.104.0.1:50054 -> 1.101.0.1:3000 11 1507 1 2025-11-30 04:55:05.620 00:05:04.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 04:55:05.618 00:05:04.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 04:59:17.849 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41996 10 6452 1 2025-11-30 04:59:58.431 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 04:59:58.540 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 04:59:54.862 00:00:10.371 TCP 23.104.0.1:40168 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:00:18.051 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49396 10 6452 1 2025-11-30 05:00:55.272 00:00:10.364 TCP 23.104.0.1:42818 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:01:18.271 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46830 10 6452 1 2025-11-30 05:01:55.677 00:00:10.367 TCP 23.104.0.1:47166 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:02:18.492 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51882 10 6452 1 2025-11-30 05:02:56.104 00:00:10.326 TCP 23.104.0.1:42850 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:03:18.702 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38174 10 6452 1 2025-11-30 05:03:56.475 00:00:10.366 TCP 23.104.0.1:41112 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:04:18.927 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33696 10 6452 1 2025-11-30 05:04:58.520 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 05:04:58.668 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 05:01:05.621 00:05:04.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 05:04:56.876 00:00:10.363 TCP 23.104.0.1:40002 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:01:05.623 00:05:04.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 05:05:19.165 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:35232 10 6452 1 2025-11-30 05:05:57.277 00:00:10.324 TCP 23.104.0.1:33186 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:06:19.350 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44814 10 6452 1 2025-11-30 05:06:57.646 00:00:10.365 TCP 23.104.0.1:42324 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:07:19.524 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60346 10 6452 1 2025-11-30 05:07:58.065 00:00:10.365 TCP 23.104.0.1:58546 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:08:19.738 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45694 10 6452 1 2025-11-30 05:08:58.469 00:00:10.365 TCP 23.104.0.1:50614 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:09:19.922 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:35966 10 6452 1 2025-11-30 05:09:58.908 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 05:09:58.703 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 05:09:58.873 00:00:10.324 TCP 23.104.0.1:49132 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:10:20.124 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51808 10 6452 1 2025-11-30 05:10:59.233 00:00:10.326 TCP 23.104.0.1:57836 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:07:05.625 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 05:07:05.622 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 05:11:20.340 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42790 10 6452 1 2025-11-30 05:11:59.598 00:00:10.328 TCP 23.104.0.1:58328 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:12:20.555 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40452 10 6452 1 2025-11-30 05:12:59.980 00:00:10.365 TCP 23.104.0.1:59890 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:13:20.768 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34510 10 6452 1 2025-11-30 05:14:00.388 00:00:10.372 TCP 23.104.0.1:53096 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:14:20.983 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47680 10 6452 1 2025-11-30 05:14:59.283 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 05:14:58.876 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 05:15:00.803 00:00:10.368 TCP 23.104.0.1:42592 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:15:21.213 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42300 10 6452 1 2025-11-30 05:16:01.211 00:00:10.377 TCP 23.104.0.1:38024 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:16:21.425 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59902 10 6452 1 2025-11-30 05:13:05.622 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 05:13:05.625 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 05:17:01.618 00:00:10.460 TCP 23.104.0.1:53976 -> 1.101.0.1:3000 15 1926 1 2025-11-30 05:17:21.593 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:44126 12 10369 1 2025-11-30 05:18:02.113 00:00:10.363 TCP 23.104.0.1:60448 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:18:21.832 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41792 10 6452 1 2025-11-30 05:19:02.519 00:00:10.374 TCP 23.104.0.1:56262 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:19:22.076 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37280 10 6452 1 2025-11-30 05:19:58.768 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 05:19:58.954 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 05:20:02.935 00:00:10.376 TCP 23.104.0.1:33608 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:20:22.253 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36714 10 6452 1 2025-11-30 05:21:03.356 00:00:10.362 TCP 23.104.0.1:50814 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:21:22.482 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:54688 11 6504 1 2025-11-30 05:22:03.756 00:00:10.382 TCP 23.104.0.1:57088 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:22:22.743 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59594 10 6452 1 2025-11-30 05:19:05.627 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 05:19:05.624 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 05:23:04.180 00:00:10.366 TCP 23.104.0.1:39160 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:23:22.960 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56144 10 6452 1 2025-11-30 05:24:04.591 00:00:10.363 TCP 23.104.0.1:58362 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:24:23.180 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51494 10 6452 1 2025-11-30 05:24:59.019 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 05:24:58.867 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 05:25:04.993 00:00:10.368 TCP 23.104.0.1:38568 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:25:23.393 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36206 10 6452 1 2025-11-30 05:26:05.400 00:00:10.368 TCP 23.104.0.1:56260 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:26:23.606 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53706 10 6452 1 2025-11-30 05:27:05.807 00:00:10.468 TCP 23.104.0.1:35660 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:27:23.828 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46074 10 6452 1 2025-11-30 05:28:06.309 00:00:10.361 TCP 23.104.0.1:50094 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:28:24.060 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44694 10 6452 1 2025-11-30 05:25:05.630 00:05:04.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 05:25:05.628 00:05:04.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 05:29:06.708 00:00:10.368 TCP 23.104.0.1:41230 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:29:24.270 00:00:10.696 TCP 1.101.0.1:3000 -> 22.102.0.1:34940 10 6452 1 2025-11-30 05:29:59.312 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 05:29:59.253 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 05:30:07.110 00:00:10.361 TCP 23.104.0.1:32998 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:30:25.007 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49642 10 6452 1 2025-11-30 05:31:07.513 00:00:10.322 TCP 23.104.0.1:47834 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:31:25.186 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53418 10 6452 1 2025-11-30 05:32:07.871 00:00:10.368 TCP 23.104.0.1:37744 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:32:25.414 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50166 10 6452 1 2025-11-30 05:33:08.276 00:00:10.327 TCP 23.104.0.1:48180 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:33:25.628 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33552 10 6452 1 2025-11-30 05:34:08.639 00:00:10.367 TCP 23.104.0.1:43360 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:34:25.810 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37744 10 6452 1 2025-11-30 05:34:59.189 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 05:34:59.114 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 05:31:05.628 00:05:04.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 05:31:05.632 00:05:04.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 05:35:09.044 00:00:10.369 TCP 23.104.0.1:56756 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:35:26.026 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43724 10 6452 1 2025-11-30 05:36:09.448 00:00:10.366 TCP 23.104.0.1:41504 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:36:26.243 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:59882 10 6452 1 2025-11-30 05:37:09.849 00:00:10.385 TCP 23.104.0.1:37616 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:37:26.481 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35376 10 6452 1 2025-11-30 05:38:10.269 00:00:10.333 TCP 23.104.0.1:43028 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:38:26.693 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36674 10 6452 1 2025-11-30 05:39:10.640 00:00:10.366 TCP 23.104.0.1:55878 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:39:26.907 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48444 10 6452 1 2025-11-30 05:39:59.108 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 05:39:59.395 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 05:40:11.049 00:00:11.263 TCP 23.104.0.1:38606 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:40:27.120 00:00:10.783 TCP 1.101.0.1:3000 -> 22.102.0.1:44278 10 6452 1 2025-11-30 05:37:05.633 00:05:04.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 05:37:05.630 00:05:04.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 05:41:12.350 00:00:10.358 TCP 23.104.0.1:59338 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:41:27.940 00:00:10.261 TCP 1.101.0.1:3000 -> 22.102.0.1:53490 11 6504 1 2025-11-30 05:42:12.747 00:00:10.388 TCP 23.104.0.1:55992 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:42:28.242 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49520 10 6452 1 2025-11-30 05:43:13.174 00:00:10.362 TCP 23.104.0.1:52690 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:43:28.455 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40952 10 6452 1 2025-11-30 05:44:13.568 00:00:10.365 TCP 23.104.0.1:34822 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:44:28.669 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:58846 10 6452 1 2025-11-30 05:44:59.362 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 05:44:59.167 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 05:45:13.969 00:00:10.368 TCP 23.104.0.1:43554 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:45:28.851 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58990 10 6452 1 2025-11-30 05:46:14.382 00:00:10.363 TCP 23.104.0.1:37008 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:46:29.080 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-11-30 05:43:05.631 00:05:04.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 05:43:05.634 00:05:04.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 05:47:14.783 00:00:10.362 TCP 23.104.0.1:44328 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:47:29.310 00:00:10.609 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-11-30 05:48:15.182 00:00:10.363 TCP 23.104.0.1:48724 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:48:29.958 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49582 10 6452 1 2025-11-30 05:49:15.584 00:00:10.367 TCP 23.104.0.1:56148 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:49:30.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47028 10 6452 1 2025-11-30 05:49:59.463 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 05:49:59.332 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 05:50:15.988 00:00:10.363 TCP 23.104.0.1:47838 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:50:30.387 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44192 10 6452 1 2025-11-30 05:51:16.388 00:00:10.325 TCP 23.104.0.1:45026 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:51:30.595 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51658 10 6452 1 2025-11-30 05:52:16.787 00:00:10.361 TCP 23.104.0.1:41120 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:52:30.804 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60256 10 6452 1 2025-11-30 05:49:05.632 00:05:04.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 05:49:05.635 00:05:04.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 05:53:17.198 00:00:10.329 TCP 23.104.0.1:38654 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:53:30.967 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:56364 10 6452 1 2025-11-30 05:54:17.566 00:00:10.366 TCP 23.104.0.1:59538 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:54:31.209 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48952 10 6452 1 2025-11-30 05:54:59.367 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 05:54:59.532 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 05:55:17.971 00:00:10.369 TCP 23.104.0.1:59856 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:55:31.427 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57170 10 6452 1 2025-11-30 05:56:18.382 00:00:10.319 TCP 23.104.0.1:52160 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:56:31.633 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53986 10 6452 1 2025-11-30 05:57:18.738 00:00:10.367 TCP 23.104.0.1:45400 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:57:31.847 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40432 10 6452 1 2025-11-30 05:58:19.145 00:00:10.372 TCP 23.104.0.1:47974 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:58:32.036 00:00:10.335 TCP 1.101.0.1:3000 -> 22.102.0.1:34626 10 6452 1 Summary: total flows: 164, total bytes: 502788, total packets: 1580, avg bps: 1053, avg pps: 0, avg bpp: 318 Time window: 2025-11-30 04:55:05 - 2025-11-30 05:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0011s Wall: 0.0027s flows/second: 59939.5 Runtime: 0.0028s