Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 02:59:03.183 00:00:10.370 TCP 23.104.0.1:50802 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:59:08.213 00:00:10.417 TCP 1.101.0.1:3000 -> 22.102.0.1:59482 10 6452 1 2025-11-24 03:00:03.588 00:00:10.325 TCP 23.104.0.1:51262 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:00:08.669 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42392 10 6452 1 2025-11-24 03:01:03.951 00:00:10.378 TCP 23.104.0.1:57210 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:01:08.832 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53292 10 6452 1 2025-11-24 03:02:02.749 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 02:58:02.901 00:05:04.301 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 03:02:02.547 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 02:58:02.900 00:05:04.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 03:02:04.363 00:00:10.330 TCP 23.104.0.1:50518 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:02:09.077 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56114 10 6452 1 2025-11-24 03:03:04.733 00:00:10.332 TCP 23.104.0.1:54468 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:03:09.250 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36764 10 6452 1 2025-11-24 03:04:05.113 00:00:10.321 TCP 23.104.0.1:46190 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:04:09.425 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47998 10 6452 1 2025-11-24 03:05:05.472 00:00:10.367 TCP 23.104.0.1:40136 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:05:09.648 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41540 10 6452 1 2025-11-24 03:06:05.900 00:00:10.580 TCP 23.104.0.1:60774 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:06:09.859 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46632 10 6452 1 2025-11-24 03:07:02.672 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 03:07:02.914 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 03:07:06.522 00:00:10.366 TCP 23.104.0.1:51286 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:07:10.087 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49254 10 6452 1 2025-11-24 03:04:02.901 00:05:04.305 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 03:04:02.904 00:05:04.299 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 03:08:10.261 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49992 10 6452 1 2025-11-24 03:08:06.925 00:00:10.375 TCP 23.104.0.1:47558 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:09:07.343 00:00:10.364 TCP 23.104.0.1:37924 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:09:10.442 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57562 10 6452 1 2025-11-24 03:10:07.746 00:00:10.365 TCP 23.104.0.1:60732 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:10:10.611 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49818 10 6452 1 2025-11-24 03:11:10.822 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37576 12 10375 1 2025-11-24 03:11:08.149 00:00:10.396 TCP 23.104.0.1:60098 -> 1.101.0.1:3000 15 1926 1 2025-11-24 03:12:02.776 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 03:12:03.185 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 03:12:11.084 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40678 10 6452 1 2025-11-24 03:12:08.620 00:00:10.363 TCP 23.104.0.1:43434 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:13:11.254 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58338 10 6452 1 2025-11-24 03:13:09.021 00:00:10.365 TCP 23.104.0.1:46966 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:10:02.903 00:05:04.301 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 03:10:02.902 00:05:04.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 03:14:09.430 00:00:10.363 TCP 23.104.0.1:40250 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:14:11.462 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50252 10 6452 1 2025-11-24 03:15:09.833 00:00:10.371 TCP 23.104.0.1:47596 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:15:11.675 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34044 10 6452 1 2025-11-24 03:16:10.248 00:00:10.366 TCP 23.104.0.1:55670 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:16:11.883 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46380 10 6452 1 2025-11-24 03:17:02.872 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 03:17:02.701 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 03:17:10.657 00:00:10.330 TCP 23.104.0.1:49158 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:17:12.100 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37442 10 6452 1 2025-11-24 03:18:11.027 00:00:10.349 TCP 23.104.0.1:42806 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:18:12.273 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35976 10 6452 1 2025-11-24 03:19:11.409 00:00:10.322 TCP 23.104.0.1:56056 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:19:12.442 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51206 10 6452 1 2025-11-24 03:16:02.904 00:05:04.301 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 03:16:02.902 00:05:04.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 03:20:11.771 00:00:10.372 TCP 23.104.0.1:34450 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:20:12.654 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41702 10 6452 1 2025-11-24 03:21:12.196 00:00:10.395 TCP 23.104.0.1:51592 -> 1.101.0.1:3000 15 1926 1 2025-11-24 03:21:12.862 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:60774 12 10369 1 2025-11-24 03:22:02.957 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 03:22:03.196 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 03:22:12.634 00:00:10.327 TCP 23.104.0.1:46188 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:22:13.084 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43654 10 6452 1 2025-11-24 03:23:12.996 00:00:10.367 TCP 23.104.0.1:56868 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:23:13.295 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42262 10 6452 1 2025-11-24 03:24:13.510 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39986 10 6452 1 2025-11-24 03:24:13.405 00:00:10.376 TCP 23.104.0.1:40548 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:25:13.822 00:00:10.369 TCP 23.104.0.1:48452 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:25:13.732 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46990 10 6452 1 2025-11-24 03:22:02.907 00:05:04.300 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 03:22:02.905 00:05:04.305 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 03:26:14.229 00:00:10.361 TCP 23.104.0.1:38176 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:26:13.907 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45960 10 6452 1 2025-11-24 03:27:03.243 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 03:27:02.922 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 03:27:14.626 00:00:10.368 TCP 23.104.0.1:38670 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:27:14.121 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49624 10 6452 1 2025-11-24 03:28:14.330 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39966 10 6452 1 2025-11-24 03:28:15.034 00:00:10.370 TCP 23.104.0.1:43948 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:29:15.436 00:00:10.368 TCP 23.104.0.1:42390 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:29:14.546 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:41936 10 6452 1 2025-11-24 03:30:15.845 00:00:10.392 TCP 23.104.0.1:44794 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:30:14.734 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46170 10 6452 1 2025-11-24 03:31:16.283 00:00:10.376 TCP 23.104.0.1:60962 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:31:14.948 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:57440 10 6452 1 2025-11-24 03:32:03.455 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 03:32:03.228 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 03:28:02.905 00:05:04.304 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 03:28:02.909 00:05:04.298 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 03:32:15.129 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52522 10 6452 1 2025-11-24 03:32:16.704 00:00:10.372 TCP 23.104.0.1:50380 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:33:15.345 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:35152 10 6452 1 2025-11-24 03:33:17.114 00:00:10.327 TCP 23.104.0.1:52066 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:34:15.517 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:45052 11 6504 1 2025-11-24 03:34:17.478 00:00:10.372 TCP 23.104.0.1:50552 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:35:15.776 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41942 10 6452 1 2025-11-24 03:35:17.885 00:00:10.383 TCP 23.104.0.1:43836 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:36:15.992 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39570 10 6452 1 2025-11-24 03:36:18.315 00:00:10.361 TCP 23.104.0.1:42758 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:37:03.518 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 03:37:03.486 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 03:37:16.213 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37510 10 6452 1 2025-11-24 03:37:18.714 00:00:10.373 TCP 23.104.0.1:58200 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:34:02.906 00:05:04.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 03:34:02.911 00:05:04.300 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 03:38:16.383 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55322 10 6452 1 2025-11-24 03:38:19.129 00:00:10.325 TCP 23.104.0.1:41490 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:39:16.552 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44364 10 6452 1 2025-11-24 03:39:19.491 00:00:10.372 TCP 23.104.0.1:60976 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:40:16.727 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51878 10 6452 1 2025-11-24 03:40:19.898 00:00:10.372 TCP 23.104.0.1:38212 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:41:20.310 00:00:10.367 TCP 23.104.0.1:46198 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:41:16.935 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53056 10 6452 1 2025-11-24 03:42:03.947 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 03:42:03.903 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 03:42:20.714 00:00:10.384 TCP 23.104.0.1:59720 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:42:17.169 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50076 10 6452 1 2025-11-24 03:43:21.135 00:00:10.323 TCP 23.104.0.1:59910 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:43:17.350 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44358 10 6452 1 2025-11-24 03:40:02.908 00:05:04.307 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 03:40:02.910 00:05:04.302 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 03:44:21.496 00:00:10.363 TCP 23.104.0.1:35910 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:44:17.585 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:59428 10 6452 1 2025-11-24 03:45:17.755 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50810 10 6452 1 2025-11-24 03:45:21.899 00:00:10.365 TCP 23.104.0.1:40738 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:46:17.973 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42494 10 6452 1 2025-11-24 03:46:22.307 00:00:10.335 TCP 23.104.0.1:45434 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:47:03.619 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 03:47:03.689 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 03:47:18.197 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47112 10 6452 1 2025-11-24 03:47:22.685 00:00:10.368 TCP 23.104.0.1:37148 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:48:18.412 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55396 10 6452 1 2025-11-24 03:48:23.099 00:00:10.323 TCP 23.104.0.1:51166 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:49:18.625 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39750 10 6452 1 2025-11-24 03:49:23.458 00:00:10.368 TCP 23.104.0.1:33788 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:46:02.912 00:05:04.302 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 03:46:02.909 00:05:04.307 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 03:50:18.797 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35328 10 6452 1 2025-11-24 03:50:23.859 00:00:10.375 TCP 23.104.0.1:33684 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:51:19.009 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:59942 12 10375 1 2025-11-24 03:51:24.274 00:00:10.433 TCP 23.104.0.1:48296 -> 1.101.0.1:3000 15 1926 1 2025-11-24 03:52:03.723 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 03:52:03.716 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 03:52:19.251 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40584 10 6452 1 2025-11-24 03:52:24.746 00:00:10.333 TCP 23.104.0.1:59288 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:53:19.467 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54864 10 6452 1 2025-11-24 03:53:25.109 00:00:10.327 TCP 23.104.0.1:34638 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:54:19.686 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44164 10 6452 1 2025-11-24 03:54:25.476 00:00:10.370 TCP 23.104.0.1:44120 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:55:19.901 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60472 10 6452 1 2025-11-24 03:55:25.883 00:00:10.379 TCP 23.104.0.1:35412 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:52:02.909 00:05:04.307 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 03:52:02.912 00:05:04.302 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 03:56:20.115 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56188 10 6452 1 2025-11-24 03:56:26.298 00:00:10.370 TCP 23.104.0.1:38658 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:57:03.839 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 03:57:03.675 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 03:57:20.325 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49734 10 6452 1 2025-11-24 03:57:26.703 00:00:10.372 TCP 23.104.0.1:52148 -> 1.101.0.1:3000 11 1507 1 2025-11-24 03:58:20.501 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51138 10 6452 1 2025-11-24 03:58:27.107 00:00:10.369 TCP 23.104.0.1:47172 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511420, total packets: 1591, avg bps: 1125, avg pps: 0, avg bpp: 321 Time window: 2025-11-24 02:58:02 - 2025-11-24 03:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0013s Wall: 0.0024s flows/second: 68910.6 Runtime: 0.0024s