Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 09:58:47.357 00:00:10.364 TCP 23.104.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-11-24 09:58:52.600 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51476 10 6452 1 2025-11-24 09:59:47.756 00:00:10.326 TCP 23.104.0.1:45476 -> 1.101.0.1:3000 11 1507 1 2025-11-24 09:59:52.823 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:49190 10 6452 1 2025-11-24 10:00:48.117 00:00:10.366 TCP 23.104.0.1:39234 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:00:53.016 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45588 10 6452 1 2025-11-24 10:01:48.521 00:00:10.317 TCP 23.104.0.1:60932 -> 1.101.0.1:3000 11 1507 1 2025-11-24 09:57:07.342 00:05:55.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 10:02:10.965 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 10:01:53.186 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49628 10 6452 1 2025-11-24 09:57:07.343 00:05:55.750 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 10:02:10.992 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 10:02:48.877 00:00:10.365 TCP 23.104.0.1:37718 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:02:53.360 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51104 10 6452 1 2025-11-24 10:03:49.284 00:00:10.415 TCP 23.104.0.1:35706 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:03:53.575 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43684 10 6452 1 2025-11-24 10:04:49.739 00:00:10.367 TCP 23.104.0.1:51904 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:04:53.788 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35912 10 6452 1 2025-11-24 10:05:50.149 00:00:10.329 TCP 23.104.0.1:53634 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:05:54.011 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48200 10 6452 1 2025-11-24 10:06:50.516 00:00:10.362 TCP 23.104.0.1:42706 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:07:11.298 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 10:06:54.229 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41234 10 6452 1 2025-11-24 10:07:11.334 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 10:07:50.924 00:00:10.377 TCP 23.104.0.1:55472 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:03:07.344 00:05:55.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 10:07:54.447 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46964 10 6452 1 2025-11-24 10:03:07.347 00:05:55.747 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 10:08:51.345 00:00:10.370 TCP 23.104.0.1:35122 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:08:54.677 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35108 10 6452 1 2025-11-24 10:09:51.747 00:00:10.372 TCP 23.104.0.1:52486 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:09:54.896 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41312 10 6452 1 2025-11-24 10:10:55.114 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57840 10 6452 1 2025-11-24 10:10:52.155 00:00:10.370 TCP 23.104.0.1:33318 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:11:52.562 00:00:10.374 TCP 23.104.0.1:46510 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:11:55.330 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33360 10 6452 1 2025-11-24 10:12:11.352 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 10:12:11.482 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 10:12:55.554 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50974 10 6452 1 2025-11-24 10:12:52.980 00:00:10.341 TCP 23.104.0.1:50840 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:13:55.767 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55932 10 6452 1 2025-11-24 10:09:07.347 00:05:55.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 10:13:53.360 00:00:10.333 TCP 23.104.0.1:50970 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:09:07.344 00:05:55.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 10:14:55.939 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:46190 10 6452 1 2025-11-24 10:14:53.728 00:00:10.369 TCP 23.104.0.1:37884 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:15:56.181 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:40396 12 10369 1 2025-11-24 10:15:54.136 00:00:10.444 TCP 23.104.0.1:60178 -> 1.101.0.1:3000 15 1926 1 2025-11-24 10:16:54.617 00:00:10.330 TCP 23.104.0.1:35214 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:16:56.422 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33524 10 6452 1 2025-11-24 10:17:11.423 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 10:17:11.387 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 10:17:56.642 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36472 10 6452 1 2025-11-24 10:17:54.986 00:00:10.372 TCP 23.104.0.1:58006 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:18:55.399 00:00:10.370 TCP 23.104.0.1:55870 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:18:56.856 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56730 10 6452 1 2025-11-24 10:15:07.350 00:05:55.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 10:19:55.806 00:00:10.366 TCP 23.104.0.1:36862 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:15:07.347 00:05:55.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 10:19:57.080 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43682 10 6452 1 2025-11-24 10:20:56.209 00:00:10.364 TCP 23.104.0.1:37982 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:20:57.251 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33616 10 6452 1 2025-11-24 10:21:56.609 00:00:10.365 TCP 23.104.0.1:39362 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:22:11.707 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 10:21:57.467 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42664 10 6452 1 2025-11-24 10:22:11.531 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 10:22:57.686 00:00:10.665 TCP 1.101.0.1:3000 -> 22.102.0.1:43346 10 6452 1 2025-11-24 10:22:57.017 00:00:10.360 TCP 23.104.0.1:45664 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:23:57.418 00:00:10.366 TCP 23.104.0.1:37672 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:23:58.387 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60118 10 6452 1 2025-11-24 10:24:57.828 00:00:10.380 TCP 23.104.0.1:39244 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:24:58.607 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44394 10 6452 1 2025-11-24 10:21:07.348 00:05:55.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 10:21:07.351 00:05:55.747 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 10:25:58.244 00:00:10.366 TCP 23.104.0.1:41700 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:25:58.814 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39242 10 6452 1 2025-11-24 10:26:59.032 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39140 10 6452 1 2025-11-24 10:27:11.564 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 10:27:11.610 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 10:26:58.650 00:00:10.366 TCP 23.104.0.1:58164 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:27:59.264 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36332 10 6452 1 2025-11-24 10:27:59.062 00:00:10.364 TCP 23.104.0.1:42958 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:28:59.477 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43930 10 6452 1 2025-11-24 10:28:59.468 00:00:10.363 TCP 23.104.0.1:45364 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:29:59.684 00:00:10.696 TCP 1.101.0.1:3000 -> 22.102.0.1:44168 10 6452 1 2025-11-24 10:29:59.871 00:00:10.601 TCP 23.104.0.1:33552 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:31:00.514 00:00:10.362 TCP 23.104.0.1:58224 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:31:00.420 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42274 10 6452 1 2025-11-24 10:27:07.354 00:05:55.748 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 10:32:00.636 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38996 10 6452 1 2025-11-24 10:32:11.648 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 10:27:07.351 00:05:55.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 10:32:11.727 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 10:32:00.918 00:00:10.317 TCP 23.104.0.1:33568 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:33:01.273 00:00:10.364 TCP 23.104.0.1:47730 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:33:00.849 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40064 10 6452 1 2025-11-24 10:34:01.075 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43428 10 6452 1 2025-11-24 10:34:01.675 00:00:10.367 TCP 23.104.0.1:54782 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:35:01.287 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43694 10 6452 1 2025-11-24 10:35:02.105 00:00:10.361 TCP 23.104.0.1:48832 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:36:01.461 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33066 10 6452 1 2025-11-24 10:36:02.506 00:00:10.365 TCP 23.104.0.1:60818 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:37:11.853 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 10:37:11.862 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 10:37:02.908 00:00:13.362 TCP 23.104.0.1:46924 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:37:01.675 00:00:14.493 TCP 1.101.0.1:3000 -> 22.102.0.1:39854 10 6452 1 2025-11-24 10:33:07.351 00:05:55.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 10:33:07.353 00:05:55.748 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 10:38:06.248 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59464 10 6452 1 2025-11-24 10:38:06.374 00:00:10.360 TCP 23.104.0.1:45788 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:39:06.463 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49510 10 6452 1 2025-11-24 10:39:06.776 00:00:10.449 TCP 23.104.0.1:58864 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:40:06.677 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:49672 10 6452 1 2025-11-24 10:40:07.265 00:00:10.361 TCP 23.104.0.1:51096 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:41:06.844 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34030 10 6452 1 2025-11-24 10:41:07.667 00:00:10.364 TCP 23.104.0.1:59080 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:42:11.904 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 10:42:11.668 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 10:42:08.092 00:00:10.361 TCP 23.104.0.1:35090 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:42:07.080 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51092 10 6452 1 2025-11-24 10:43:08.493 00:00:10.369 TCP 23.104.0.1:43568 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:43:07.301 00:00:10.602 TCP 1.101.0.1:3000 -> 22.102.0.1:43368 10 6452 1 2025-11-24 10:39:07.353 00:05:55.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 10:39:07.357 00:05:55.746 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 10:44:07.945 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:36808 10 6452 1 2025-11-24 10:44:08.897 00:00:10.376 TCP 23.104.0.1:38300 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:45:09.311 00:00:10.370 TCP 23.104.0.1:44222 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:45:08.193 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36800 10 6452 1 2025-11-24 10:46:09.720 00:00:10.370 TCP 23.104.0.1:35232 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:46:08.406 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45576 10 6452 1 2025-11-24 10:47:11.937 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 10:47:11.978 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 10:47:08.622 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37992 10 6452 1 2025-11-24 10:47:10.130 00:00:10.366 TCP 23.104.0.1:50764 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:48:10.537 00:00:10.364 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:48:08.837 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45716 10 6452 1 2025-11-24 10:49:10.943 00:00:10.366 TCP 23.104.0.1:42058 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:49:09.077 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42542 10 6452 1 2025-11-24 10:45:07.358 00:05:55.746 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 10:45:07.355 00:05:55.751 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 10:50:11.350 00:00:10.367 TCP 23.104.0.1:59078 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:50:09.299 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57442 10 6452 1 2025-11-24 10:51:09.476 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49320 10 6452 1 2025-11-24 10:51:11.761 00:00:10.382 TCP 23.104.0.1:49740 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:52:12.905 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 10:52:12.777 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 10:52:09.690 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56266 10 6452 1 2025-11-24 10:52:12.181 00:00:10.365 TCP 23.104.0.1:35532 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:53:09.910 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:33510 10 6452 1 2025-11-24 10:53:12.580 00:00:10.364 TCP 23.104.0.1:41504 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:54:10.099 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44574 10 6452 1 2025-11-24 10:54:12.981 00:00:10.333 TCP 23.104.0.1:57776 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:55:10.342 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49788 10 6452 1 2025-11-24 10:55:13.351 00:00:10.364 TCP 23.104.0.1:53422 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:51:07.354 00:05:55.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 10:51:07.357 00:05:55.746 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 10:56:10.568 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54174 10 6452 1 2025-11-24 10:56:13.753 00:00:10.383 TCP 23.104.0.1:59458 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:57:12.126 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 10:57:12.286 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 10:57:10.794 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59756 10 6452 1 2025-11-24 10:57:14.176 00:00:10.367 TCP 23.104.0.1:47860 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:58:11.038 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33944 10 6452 1 2025-11-24 10:58:14.597 00:00:10.369 TCP 23.104.0.1:39216 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502684, total packets: 1578, avg bps: 1093, avg pps: 0, avg bpp: 318 Time window: 2025-11-24 09:57:07 - 2025-11-24 10:58:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0057s User: 0.0009s Wall: 0.0020s flows/second: 83549.8 Runtime: 0.0020s