Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 19:58:45.808 00:00:10.364 TCP 23.104.0.1:35464 -> 1.101.0.1:3000 11 1507 1 2025-11-30 19:58:45.224 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34620 10 6452 1 2025-11-30 19:55:05.873 00:05:04.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 19:55:05.874 00:05:04.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 19:59:46.211 00:00:10.366 TCP 23.104.0.1:50220 -> 1.101.0.1:3000 11 1507 1 2025-11-30 19:59:45.449 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58392 10 6452 1 2025-11-30 20:00:16.635 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 20:00:16.564 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 20:00:45.670 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43140 10 6452 1 2025-11-30 20:00:46.608 00:00:10.365 TCP 23.104.0.1:60936 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:01:45.888 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39016 10 6452 1 2025-11-30 20:01:47.011 00:00:10.366 TCP 23.104.0.1:47120 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:02:46.112 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59106 10 6452 1 2025-11-30 20:02:47.415 00:00:10.364 TCP 23.104.0.1:59718 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:03:46.280 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40978 10 6452 1 2025-11-30 20:03:47.815 00:00:10.361 TCP 23.104.0.1:33102 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:04:46.499 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38552 10 6452 1 2025-11-30 20:04:48.211 00:00:10.327 TCP 23.104.0.1:46812 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:01:05.876 00:05:04.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 20:05:16.895 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 20:01:05.873 00:05:04.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 20:05:16.939 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 20:05:46.733 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37222 10 6452 1 2025-11-30 20:05:48.573 00:00:10.366 TCP 23.104.0.1:45728 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:06:48.977 00:00:10.324 TCP 23.104.0.1:35234 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:06:46.972 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:44496 10 6452 1 2025-11-30 20:07:47.217 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36164 10 6452 1 2025-11-30 20:07:49.351 00:00:10.370 TCP 23.104.0.1:35488 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:08:47.437 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57302 10 6452 1 2025-11-30 20:08:49.755 00:00:10.381 TCP 23.104.0.1:43062 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:09:50.180 00:00:10.364 TCP 23.104.0.1:58078 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:09:47.647 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40564 10 6452 1 2025-11-30 20:10:16.501 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 20:10:16.764 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 20:10:47.867 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46330 10 6452 1 2025-11-30 20:10:50.581 00:00:10.370 TCP 23.104.0.1:49024 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:07:05.875 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 20:07:05.878 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 20:11:48.087 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47166 10 6452 1 2025-11-30 20:11:50.988 00:00:10.332 TCP 23.104.0.1:57082 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:12:48.305 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:58188 12 10375 1 2025-11-30 20:12:51.358 00:00:10.943 TCP 23.104.0.1:57048 -> 1.101.0.1:3000 15 1926 1 2025-11-30 20:13:48.501 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53068 10 6452 1 2025-11-30 20:13:52.347 00:00:10.323 TCP 23.104.0.1:60504 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:14:48.718 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44162 10 6452 1 2025-11-30 20:14:52.709 00:00:10.364 TCP 23.104.0.1:46590 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:15:16.878 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 20:15:16.894 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 20:15:48.925 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40210 10 6452 1 2025-11-30 20:15:53.108 00:00:10.365 TCP 23.104.0.1:55728 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:16:49.152 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57104 10 6452 1 2025-11-30 20:16:53.510 00:00:10.361 TCP 23.104.0.1:50586 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:13:05.878 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 20:13:05.880 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 20:17:49.364 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41200 10 6452 1 2025-11-30 20:17:53.910 00:00:10.361 TCP 23.104.0.1:49408 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:18:49.574 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40878 10 6452 1 2025-11-30 20:18:54.309 00:00:10.327 TCP 23.104.0.1:57334 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:19:49.785 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44066 10 6452 1 2025-11-30 20:19:54.678 00:00:10.370 TCP 23.104.0.1:42262 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:20:16.897 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 20:20:16.948 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 20:20:50.008 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54986 10 6452 1 2025-11-30 20:20:55.107 00:00:10.368 TCP 23.104.0.1:56092 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:21:50.219 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48072 10 6452 1 2025-11-30 20:21:55.519 00:00:10.387 TCP 23.104.0.1:51596 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:22:50.432 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40420 10 6452 1 2025-11-30 20:22:55.953 00:00:10.361 TCP 23.104.0.1:48754 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:19:05.879 00:05:04.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 20:19:05.882 00:05:04.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 20:23:50.645 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36140 10 6452 1 2025-11-30 20:23:56.353 00:00:10.318 TCP 23.104.0.1:38814 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:24:50.816 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46416 10 6452 1 2025-11-30 20:24:56.709 00:00:10.361 TCP 23.104.0.1:41932 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:25:16.698 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 20:25:16.931 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 20:25:51.032 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:32848 10 6452 1 2025-11-30 20:25:57.107 00:00:10.368 TCP 23.104.0.1:43228 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:26:51.204 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37866 10 6452 1 2025-11-30 20:26:57.516 00:00:10.365 TCP 23.104.0.1:38952 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:27:51.416 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34816 10 6452 1 2025-11-30 20:27:57.916 00:00:10.377 TCP 23.104.0.1:52200 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:28:51.586 00:00:14.827 TCP 1.101.0.1:3000 -> 22.102.0.1:44530 10 6452 1 2025-11-30 20:25:05.881 00:05:04.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 20:25:05.883 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 20:28:58.330 00:00:10.846 TCP 23.104.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:29:56.460 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37874 10 6452 1 2025-11-30 20:29:59.218 00:00:10.367 TCP 23.104.0.1:48660 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:30:16.899 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 20:30:17.023 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 20:30:59.622 00:00:10.514 TCP 23.104.0.1:50662 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:30:56.634 00:00:10.556 TCP 1.101.0.1:3000 -> 22.102.0.1:46544 10 6452 1 2025-11-30 20:32:00.196 00:00:10.324 TCP 23.104.0.1:53538 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:31:57.233 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59362 10 6452 1 2025-11-30 20:33:00.558 00:00:10.327 TCP 23.104.0.1:43832 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:32:57.405 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56274 10 6452 1 2025-11-30 20:34:00.921 00:00:10.393 TCP 23.104.0.1:58688 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:33:57.617 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60596 10 6452 1 2025-11-30 20:31:05.887 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 20:35:01.345 00:00:10.414 TCP 23.104.0.1:59862 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:34:57.828 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43612 10 6452 1 2025-11-30 20:31:05.885 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 20:35:17.275 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 20:35:17.147 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 20:35:58.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54104 10 6452 1 2025-11-30 20:36:01.796 00:00:10.373 TCP 23.104.0.1:38192 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:36:58.293 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48640 10 6452 1 2025-11-30 20:37:02.203 00:00:10.327 TCP 23.104.0.1:44814 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:37:58.508 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33550 10 6452 1 2025-11-30 20:38:02.572 00:00:10.364 TCP 23.104.0.1:47908 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:38:58.726 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46658 10 6452 1 2025-11-30 20:39:02.975 00:00:10.371 TCP 23.104.0.1:44544 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:39:58.953 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58468 10 6452 1 2025-11-30 20:40:03.383 00:00:10.366 TCP 23.104.0.1:54846 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:40:17.384 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 20:40:17.382 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 20:40:59.189 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48292 10 6452 1 2025-11-30 20:37:05.885 00:05:04.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 20:37:05.888 00:05:04.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 20:41:03.787 00:00:10.367 TCP 23.104.0.1:33584 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:41:59.404 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59242 10 6452 1 2025-11-30 20:42:04.192 00:00:10.360 TCP 23.104.0.1:41122 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:42:59.657 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55086 10 6452 1 2025-11-30 20:43:04.591 00:00:10.330 TCP 23.104.0.1:54946 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:43:59.863 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49930 10 6452 1 2025-11-30 20:44:04.962 00:00:10.326 TCP 23.104.0.1:56672 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:45:00.094 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44488 10 6452 1 2025-11-30 20:45:17.398 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 20:45:05.329 00:00:10.329 TCP 23.104.0.1:56482 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:45:17.335 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 20:46:00.309 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35712 10 6452 1 2025-11-30 20:46:05.693 00:00:10.320 TCP 23.104.0.1:43844 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:47:00.521 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51702 10 6452 1 2025-11-30 20:43:05.887 00:05:04.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 20:43:05.890 00:05:04.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 20:47:06.063 00:00:10.372 TCP 23.104.0.1:39968 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:48:00.735 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53914 10 6452 1 2025-11-30 20:48:06.479 00:00:10.322 TCP 23.104.0.1:51438 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:49:00.953 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40170 10 6452 1 2025-11-30 20:49:06.836 00:00:10.391 TCP 23.104.0.1:52730 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:50:01.126 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43128 10 6452 1 2025-11-30 20:50:17.874 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 20:50:17.463 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 20:50:07.269 00:00:10.367 TCP 23.104.0.1:52022 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:51:01.338 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53530 10 6452 1 2025-11-30 20:51:07.672 00:00:10.365 TCP 23.104.0.1:57390 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:52:01.550 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48342 10 6452 1 2025-11-30 20:52:08.101 00:00:10.690 TCP 23.104.0.1:38858 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:49:05.891 00:05:04.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 20:53:01.730 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35584 10 6452 1 2025-11-30 20:49:05.887 00:05:04.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 20:53:08.827 00:00:10.362 TCP 23.104.0.1:54238 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:54:01.948 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50968 10 6452 1 2025-11-30 20:54:09.226 00:00:10.363 TCP 23.104.0.1:41960 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:55:02.171 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38342 10 6452 1 2025-11-30 20:55:17.706 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 20:55:09.629 00:00:10.366 TCP 23.104.0.1:42982 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:55:17.654 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 20:56:02.348 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45246 10 6452 1 2025-11-30 20:56:10.061 00:00:10.327 TCP 23.104.0.1:41798 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:57:02.566 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35798 10 6452 1 2025-11-30 20:57:10.428 00:00:10.325 TCP 23.104.0.1:60240 -> 1.101.0.1:3000 11 1507 1 2025-11-30 20:58:02.783 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41564 10 6452 1 2025-11-30 20:58:10.792 00:00:10.369 TCP 23.104.0.1:58806 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1059, avg pps: 0, avg bpp: 318 Time window: 2025-11-30 19:55:05 - 2025-11-30 20:58:21 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0041s User: 0.0016s Wall: 0.0027s flows/second: 61285.3 Runtime: 0.0027s