Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 17:55:05.846 00:05:04.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 17:58:56.950 00:00:10.368 TCP 23.104.0.1:42418 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:55:05.849 00:05:04.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 17:59:17.042 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54038 10 6452 1 2025-11-30 18:00:14.201 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 17:59:57.355 00:00:10.368 TCP 23.104.0.1:49378 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:00:14.001 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 18:00:17.265 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33484 10 6452 1 2025-11-30 18:00:57.758 00:00:10.384 TCP 23.104.0.1:49856 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:01:17.485 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50026 10 6452 1 2025-11-30 18:01:58.178 00:00:10.358 TCP 23.104.0.1:51190 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:02:17.699 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50334 10 6452 1 2025-11-30 18:02:58.573 00:00:10.325 TCP 23.104.0.1:33492 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:03:17.915 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58116 10 6452 1 2025-11-30 18:03:58.954 00:00:10.366 TCP 23.104.0.1:36824 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:04:18.127 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38408 10 6452 1 2025-11-30 18:01:05.849 00:05:04.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 18:04:59.354 00:00:10.357 TCP 23.104.0.1:34024 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:01:05.846 00:05:04.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 18:05:14.174 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 18:05:14.110 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 18:05:18.338 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44742 10 6452 1 2025-11-30 18:05:59.751 00:00:10.339 TCP 23.104.0.1:57502 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:06:18.548 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56962 10 6452 1 2025-11-30 18:07:00.128 00:00:10.365 TCP 23.104.0.1:48722 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:07:18.765 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39990 10 6452 1 2025-11-30 18:08:00.535 00:00:10.820 TCP 23.104.0.1:53726 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:08:18.980 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:34508 10 6452 1 2025-11-30 18:09:01.397 00:00:10.360 TCP 23.104.0.1:53832 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:09:19.171 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43354 10 6452 1 2025-11-30 18:10:01.799 00:00:10.365 TCP 23.104.0.1:39814 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:10:14.485 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 18:10:14.417 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 18:10:19.392 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40794 10 6452 1 2025-11-30 18:07:05.847 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 18:07:05.849 00:05:04.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 18:11:02.210 00:00:10.366 TCP 23.104.0.1:43578 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:11:19.603 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59696 10 6452 1 2025-11-30 18:12:02.625 00:00:10.322 TCP 23.104.0.1:50300 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:12:19.815 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52090 10 6452 1 2025-11-30 18:13:02.991 00:00:10.366 TCP 23.104.0.1:48868 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:13:19.987 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41564 10 6452 1 2025-11-30 18:14:03.396 00:00:10.368 TCP 23.104.0.1:38882 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:14:20.215 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37580 10 6452 1 2025-11-30 18:15:14.553 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 18:15:14.350 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 18:15:03.815 00:00:10.367 TCP 23.104.0.1:41988 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:15:20.430 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58792 10 6452 1 2025-11-30 18:16:04.220 00:00:10.329 TCP 23.104.0.1:43506 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:16:20.637 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58042 10 6452 1 2025-11-30 18:13:05.847 00:05:04.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 18:13:05.851 00:05:04.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 18:17:04.584 00:00:10.363 TCP 23.104.0.1:58998 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:17:20.846 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49198 10 6452 1 2025-11-30 18:18:04.984 00:00:10.368 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:18:21.078 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43104 10 6452 1 2025-11-30 18:19:05.400 00:00:10.377 TCP 23.104.0.1:42258 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:19:21.297 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41640 10 6452 1 2025-11-30 18:20:15.299 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 18:20:05.817 00:00:10.741 TCP 23.104.0.1:56544 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:20:15.522 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 18:20:21.481 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37092 10 6452 1 2025-11-30 18:21:06.610 00:00:10.362 TCP 23.104.0.1:46680 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:21:21.697 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:33238 10 6452 1 2025-11-30 18:22:07.015 00:00:10.362 TCP 23.104.0.1:45608 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:22:21.904 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50516 10 6452 1 2025-11-30 18:19:05.848 00:05:04.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 18:19:05.851 00:05:04.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 18:23:07.413 00:00:10.333 TCP 23.104.0.1:42368 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:23:22.115 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33314 10 6452 1 2025-11-30 18:24:07.780 00:00:10.365 TCP 23.104.0.1:56516 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:24:22.328 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52128 10 6452 1 2025-11-30 18:25:14.965 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 18:25:14.886 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 18:25:08.194 00:00:10.367 TCP 23.104.0.1:40888 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:25:22.533 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54436 10 6452 1 2025-11-30 18:26:08.597 00:00:10.366 TCP 23.104.0.1:51966 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:26:22.714 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50574 10 6452 1 2025-11-30 18:27:09.005 00:00:10.323 TCP 23.104.0.1:45696 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:27:22.897 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57708 10 6452 1 2025-11-30 18:28:09.366 00:00:10.325 TCP 23.104.0.1:49310 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:28:23.121 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:44090 10 6452 1 2025-11-30 18:25:05.850 00:05:04.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 18:25:05.853 00:05:04.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 18:29:09.730 00:00:10.329 TCP 23.104.0.1:42542 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:29:23.338 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41340 10 6452 1 2025-11-30 18:30:14.591 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 18:30:14.882 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 18:30:10.110 00:00:10.361 TCP 23.104.0.1:56674 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:30:23.552 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34800 10 6452 1 2025-11-30 18:31:10.510 00:00:10.326 TCP 23.104.0.1:55226 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:31:23.767 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33652 10 6452 1 2025-11-30 18:32:10.878 00:00:10.329 TCP 23.104.0.1:37796 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:32:23.985 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:55890 10 6452 1 2025-11-30 18:33:11.246 00:00:10.334 TCP 23.104.0.1:59486 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:33:24.224 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51872 11 6492 1 2025-11-30 18:34:11.613 00:00:10.367 TCP 23.104.0.1:34628 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:34:24.437 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52620 10 6452 1 2025-11-30 18:31:05.856 00:05:04.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 18:31:05.854 00:05:04.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 18:35:14.843 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 18:35:14.967 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 18:35:12.028 00:00:10.368 TCP 23.104.0.1:37002 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:35:24.653 00:00:10.897 TCP 1.101.0.1:3000 -> 22.102.0.1:49216 10 6452 1 2025-11-30 18:36:12.436 00:00:10.368 TCP 23.104.0.1:37448 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:36:25.584 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47310 10 6452 1 2025-11-30 18:37:12.840 00:00:10.347 TCP 23.104.0.1:50150 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:37:25.758 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44286 10 6452 1 2025-11-30 18:38:13.226 00:00:10.366 TCP 23.104.0.1:58142 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:38:25.971 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59654 10 6452 1 2025-11-30 18:39:13.644 00:00:10.340 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:39:26.207 00:00:10.486 TCP 1.101.0.1:3000 -> 22.102.0.1:39338 10 6452 1 2025-11-30 18:40:15.374 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 18:40:15.031 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 18:40:14.030 00:00:10.388 TCP 23.104.0.1:33170 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:40:26.730 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-11-30 18:37:05.858 00:05:04.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 18:37:05.856 00:05:04.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 18:41:14.455 00:00:10.361 TCP 23.104.0.1:35964 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:41:26.935 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:47826 10 6452 1 2025-11-30 18:42:14.856 00:00:10.448 TCP 23.104.0.1:44736 -> 1.101.0.1:3000 15 1926 1 2025-11-30 18:42:27.129 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:32952 12 10375 1 2025-11-30 18:43:15.349 00:00:10.370 TCP 23.104.0.1:33804 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:43:27.368 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60696 10 6452 1 2025-11-30 18:44:15.751 00:00:10.391 TCP 23.104.0.1:53004 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:44:27.579 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59110 10 6452 1 2025-11-30 18:45:15.064 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 18:45:14.916 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 18:45:16.181 00:00:10.366 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:45:27.791 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6452 1 2025-11-30 18:46:16.582 00:00:10.380 TCP 23.104.0.1:43580 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:46:28.009 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50860 10 6452 1 2025-11-30 18:43:05.857 00:05:04.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 18:43:05.859 00:05:04.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 18:47:16.999 00:00:10.335 TCP 23.104.0.1:42492 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:47:28.236 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34700 10 6452 1 2025-11-30 18:48:17.371 00:00:10.370 TCP 23.104.0.1:33778 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:48:28.447 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56586 10 6452 1 2025-11-30 18:49:17.776 00:00:10.373 TCP 23.104.0.1:55296 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:49:28.663 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51906 10 6452 1 2025-11-30 18:50:15.057 00:00:00.052 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 18:50:15.112 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 18:50:18.185 00:00:10.362 TCP 23.104.0.1:49868 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:50:28.877 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58430 10 6452 1 2025-11-30 18:51:18.582 00:00:10.367 TCP 23.104.0.1:41714 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:51:29.109 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34220 10 6452 1 2025-11-30 18:52:18.987 00:00:10.364 TCP 23.104.0.1:37736 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:52:29.334 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59978 12 6556 1 2025-11-30 18:49:05.860 00:05:04.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 18:49:05.859 00:05:04.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 18:53:19.390 00:00:10.363 TCP 23.104.0.1:44282 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:53:29.549 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49228 10 6452 1 2025-11-30 18:54:19.786 00:00:10.374 TCP 23.104.0.1:37596 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:54:29.720 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41908 10 6452 1 2025-11-30 18:55:15.013 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 18:55:15.040 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 18:55:20.202 00:00:10.377 TCP 23.104.0.1:40116 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:55:29.892 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46406 10 6452 1 2025-11-30 18:56:20.619 00:00:10.364 TCP 23.104.0.1:41690 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:56:30.101 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50060 10 6452 1 2025-11-30 18:57:21.023 00:00:10.425 TCP 23.104.0.1:46372 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:57:30.320 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:56132 10 6452 1 2025-11-30 18:58:21.486 00:00:10.365 TCP 23.104.0.1:39590 -> 1.101.0.1:3000 11 1507 1 2025-11-30 18:58:30.602 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60960 10 6452 1 Summary: total flows: 164, total bytes: 502834, total packets: 1581, avg bps: 1054, avg pps: 0, avg bpp: 318 Time window: 2025-11-30 17:55:05 - 2025-11-30 18:58:40 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0018s Wall: 0.0022s flows/second: 74307.6 Runtime: 0.0022s