Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 13:55:05.777 00:05:04.776 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 13:55:05.781 00:05:04.770 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 13:59:15.259 00:00:12.585 TCP 23.104.0.1:54284 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:59:24.410 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60338 10 6452 1 2025-11-30 14:00:09.389 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 14:00:09.376 00:00:00.019 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 14:00:17.882 00:00:10.324 TCP 23.104.0.1:42192 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:00:24.630 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35436 10 6452 1 2025-11-30 14:01:18.246 00:00:10.362 TCP 23.104.0.1:38814 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:01:24.844 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56650 10 6452 1 2025-11-30 14:02:18.650 00:00:10.361 TCP 23.104.0.1:44118 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:02:25.095 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50136 10 6452 1 2025-11-30 14:03:19.056 00:00:10.322 TCP 23.104.0.1:38476 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:03:25.310 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48740 10 6452 1 2025-11-30 14:04:19.421 00:00:10.324 TCP 23.104.0.1:50728 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:04:25.521 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50024 10 6452 1 2025-11-30 14:05:09.534 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 14:01:05.781 00:05:04.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 14:05:09.177 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 14:01:05.778 00:05:04.776 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 14:05:19.789 00:00:10.370 TCP 23.104.0.1:40412 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:05:25.738 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34218 10 6452 1 2025-11-30 14:06:20.197 00:00:10.365 TCP 23.104.0.1:38898 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:06:25.952 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:37394 10 6452 1 2025-11-30 14:07:20.598 00:00:10.369 TCP 23.104.0.1:51874 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:07:26.158 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44604 10 6452 1 2025-11-30 14:08:21.011 00:00:10.319 TCP 23.104.0.1:56980 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:08:26.375 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53096 10 6452 1 2025-11-30 14:09:21.372 00:00:10.361 TCP 23.104.0.1:58054 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:09:26.548 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41656 10 6452 1 2025-11-30 14:10:09.711 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 14:10:09.898 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 14:10:21.772 00:00:10.420 TCP 23.104.0.1:52288 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:10:26.768 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39684 10 6452 1 2025-11-30 14:07:05.778 00:05:04.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 14:07:05.782 00:05:04.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 14:11:22.230 00:00:10.371 TCP 23.104.0.1:36348 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:11:26.980 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60838 10 6452 1 2025-11-30 14:12:22.645 00:00:10.367 TCP 23.104.0.1:51166 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:12:27.209 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35918 10 6452 1 2025-11-30 14:13:23.065 00:00:10.370 TCP 23.104.0.1:36412 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:13:27.435 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59414 10 6452 1 2025-11-30 14:14:23.467 00:00:10.365 TCP 23.104.0.1:46158 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:14:27.650 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58798 10 6452 1 2025-11-30 14:15:09.508 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 14:15:09.724 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 14:15:23.872 00:00:10.365 TCP 23.104.0.1:56844 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:15:27.860 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37350 10 6452 1 2025-11-30 14:16:24.274 00:00:10.365 TCP 23.104.0.1:35454 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:16:28.094 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40450 10 6452 1 2025-11-30 14:13:05.779 00:05:04.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 14:13:05.782 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 14:17:24.681 00:00:10.328 TCP 23.104.0.1:41158 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:17:28.265 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59392 10 6452 1 2025-11-30 14:18:25.057 00:00:10.369 TCP 23.104.0.1:37454 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:18:28.438 00:00:10.635 TCP 1.101.0.1:3000 -> 22.102.0.1:51108 10 6452 1 2025-11-30 14:19:25.464 00:00:10.359 TCP 23.104.0.1:35428 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:19:29.111 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43046 10 6452 1 2025-11-30 14:20:09.668 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 14:20:09.619 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 14:20:25.858 00:00:10.376 TCP 23.104.0.1:34234 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:20:29.326 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54410 10 6452 1 2025-11-30 14:21:26.275 00:00:10.378 TCP 23.104.0.1:42140 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:21:29.546 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55822 10 6452 1 2025-11-30 14:22:29.759 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37584 10 6452 1 2025-11-30 14:22:26.691 00:00:10.364 TCP 23.104.0.1:38124 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:19:05.784 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 14:19:05.782 00:05:04.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 14:23:29.970 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:45510 10 6452 1 2025-11-30 14:23:27.108 00:00:10.365 TCP 23.104.0.1:34728 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:24:30.158 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57034 10 6452 1 2025-11-30 14:24:27.508 00:00:10.376 TCP 23.104.0.1:59018 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:25:09.906 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 14:25:09.813 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 14:25:30.377 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55710 10 6452 1 2025-11-30 14:25:27.933 00:00:10.805 TCP 23.104.0.1:47110 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:26:30.554 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51084 10 6452 1 2025-11-30 14:26:28.774 00:00:10.328 TCP 23.104.0.1:40932 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:27:29.139 00:00:10.367 TCP 23.104.0.1:35626 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:27:30.805 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56456 10 6452 1 2025-11-30 14:28:31.036 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38956 10 6452 1 2025-11-30 14:28:29.541 00:00:10.357 TCP 23.104.0.1:57050 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:25:05.783 00:05:04.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 14:25:05.787 00:05:04.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 14:29:29.947 00:00:10.367 TCP 23.104.0.1:44054 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:29:31.209 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49468 10 6452 1 2025-11-30 14:30:09.913 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 14:30:09.983 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 14:30:30.358 00:00:10.364 TCP 23.104.0.1:49380 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:30:31.420 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54818 10 6452 1 2025-11-30 14:31:30.762 00:00:10.379 TCP 23.104.0.1:44076 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:31:31.587 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33942 10 6452 1 2025-11-30 14:32:31.759 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:47350 12 6556 1 2025-11-30 14:32:31.177 00:00:10.824 TCP 23.104.0.1:35010 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:33:32.010 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33948 10 6452 1 2025-11-30 14:33:32.036 00:00:10.363 TCP 23.104.0.1:34542 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:34:32.186 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57184 10 6452 1 2025-11-30 14:34:32.435 00:00:10.362 TCP 23.104.0.1:45570 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:35:10.159 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 14:31:05.786 00:05:04.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 14:35:10.261 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 14:31:05.790 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 14:35:32.363 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43048 10 6452 1 2025-11-30 14:35:32.840 00:00:10.386 TCP 23.104.0.1:45800 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:36:32.582 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43718 10 6452 1 2025-11-30 14:36:33.264 00:00:10.329 TCP 23.104.0.1:38200 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:37:32.751 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60362 10 6452 1 2025-11-30 14:37:33.634 00:00:10.361 TCP 23.104.0.1:57080 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:38:32.966 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57308 10 6452 1 2025-11-30 14:38:34.033 00:00:10.365 TCP 23.104.0.1:52784 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:39:33.202 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43816 10 6452 1 2025-11-30 14:39:34.435 00:00:10.748 TCP 23.104.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:40:10.323 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 14:40:10.236 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 14:40:33.407 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60630 10 6452 1 2025-11-30 14:40:35.221 00:00:10.361 TCP 23.104.0.1:58402 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:37:05.792 00:05:04.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 14:37:05.790 00:05:04.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 14:41:33.626 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51700 10 6452 1 2025-11-30 14:41:35.633 00:00:10.333 TCP 23.104.0.1:37352 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:42:33.832 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:55942 12 10375 1 2025-11-30 14:42:36.007 00:00:10.441 TCP 23.104.0.1:57440 -> 1.101.0.1:3000 15 1926 1 2025-11-30 14:43:36.483 00:00:10.360 TCP 23.104.0.1:43150 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:43:34.086 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46846 10 6452 1 2025-11-30 14:44:34.299 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56852 10 6452 1 2025-11-30 14:44:36.886 00:00:10.371 TCP 23.104.0.1:58862 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:45:10.287 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 14:45:09.960 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 14:45:34.512 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36324 10 6452 1 2025-11-30 14:45:37.293 00:00:10.367 TCP 23.104.0.1:52146 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:46:34.724 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48856 10 6452 1 2025-11-30 14:46:37.694 00:00:10.368 TCP 23.104.0.1:44888 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:43:05.794 00:05:04.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 14:43:05.792 00:05:04.777 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 14:47:34.895 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54154 10 6452 1 2025-11-30 14:47:38.107 00:00:10.327 TCP 23.104.0.1:50300 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:48:35.106 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42098 10 6452 1 2025-11-30 14:48:38.466 00:00:10.366 TCP 23.104.0.1:58098 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:49:35.313 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:56476 10 6452 1 2025-11-30 14:49:38.873 00:00:10.333 TCP 23.104.0.1:37970 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:50:10.449 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 14:50:10.431 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 14:50:35.501 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46070 10 6452 1 2025-11-30 14:50:39.236 00:00:10.323 TCP 23.104.0.1:57964 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:51:35.734 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53156 10 6452 1 2025-11-30 14:51:39.595 00:00:10.371 TCP 23.104.0.1:47050 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:52:35.946 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38544 10 6452 1 2025-11-30 14:52:40.001 00:00:10.780 TCP 23.104.0.1:41348 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:49:05.795 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 14:49:05.792 00:05:04.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 14:53:36.171 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45546 10 6452 1 2025-11-30 14:53:40.821 00:00:10.368 TCP 23.104.0.1:57120 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:54:36.390 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42816 10 6452 1 2025-11-30 14:54:41.228 00:00:10.331 TCP 23.104.0.1:37342 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:55:10.395 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 14:55:10.538 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 14:55:36.560 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40612 10 6452 1 2025-11-30 14:55:41.601 00:00:10.325 TCP 23.104.0.1:36398 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:56:36.767 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51564 10 6452 1 2025-11-30 14:56:41.969 00:00:10.370 TCP 23.104.0.1:36668 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:57:36.980 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:52944 10 6452 1 2025-11-30 14:57:42.375 00:00:10.359 TCP 23.104.0.1:34136 -> 1.101.0.1:3000 11 1507 1 2025-11-30 14:58:37.167 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53748 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1049, avg pps: 0, avg bpp: 319 Time window: 2025-11-30 13:55:05 - 2025-11-30 14:58:47 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0040s User: 0.0013s Wall: 0.0028s flows/second: 57456.2 Runtime: 0.0029s