Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 10:59:15.010 00:00:10.608 TCP 23.104.0.1:33914 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:59:11.251 00:00:14.222 TCP 1.101.0.1:3000 -> 22.102.0.1:35048 10 6452 1 2025-11-24 11:00:15.524 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54944 10 6452 1 2025-11-24 11:00:15.691 00:00:10.365 TCP 23.104.0.1:36058 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:01:15.738 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36638 10 6452 1 2025-11-24 11:01:16.107 00:00:10.367 TCP 23.104.0.1:51500 -> 1.101.0.1:3000 11 1507 1 2025-11-24 10:57:07.361 00:05:55.746 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 10:57:07.365 00:05:55.740 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 11:02:12.462 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:02:12.202 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 11:02:16.516 00:00:10.324 TCP 23.104.0.1:50534 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:02:15.950 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:54088 10 6452 1 2025-11-24 11:03:16.140 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41502 10 6452 1 2025-11-24 11:03:16.880 00:00:10.349 TCP 23.104.0.1:52740 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:04:16.351 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60340 10 6452 1 2025-11-24 11:04:17.270 00:00:10.322 TCP 23.104.0.1:42356 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:05:16.573 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44422 10 6452 1 2025-11-24 11:05:17.626 00:00:10.365 TCP 23.104.0.1:58328 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:06:16.794 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48156 10 6452 1 2025-11-24 11:06:18.033 00:00:10.367 TCP 23.104.0.1:59258 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:07:12.408 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:07:12.495 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 11:07:17.024 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56478 10 6452 1 2025-11-24 11:07:18.440 00:00:10.379 TCP 23.104.0.1:46202 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:03:07.366 00:05:55.740 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 11:03:07.363 00:05:55.745 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 11:08:17.234 00:00:19.702 TCP 1.101.0.1:3000 -> 22.102.0.1:38510 10 6452 1 2025-11-24 11:08:18.856 00:00:18.178 TCP 23.104.0.1:41686 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:09:27.094 00:00:10.364 TCP 23.104.0.1:41770 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:09:26.976 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:59300 12 6556 1 2025-11-24 11:10:27.223 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39334 10 6452 1 2025-11-24 11:10:27.497 00:00:10.364 TCP 23.104.0.1:57746 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:11:27.897 00:00:10.371 TCP 23.104.0.1:59086 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:11:27.440 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52340 10 6452 1 2025-11-24 11:12:12.566 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 11:12:12.370 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:12:28.309 00:00:10.363 TCP 23.104.0.1:50008 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:12:27.657 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42980 10 6452 1 2025-11-24 11:13:27.866 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37622 10 6452 1 2025-11-24 11:13:28.714 00:00:10.381 TCP 23.104.0.1:59484 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:09:07.367 00:05:55.744 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 11:09:07.370 00:05:55.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 11:14:29.133 00:00:10.367 TCP 23.104.0.1:60224 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:14:28.088 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56426 10 6452 1 2025-11-24 11:15:28.306 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34612 10 6452 1 2025-11-24 11:15:29.539 00:00:10.322 TCP 23.104.0.1:34888 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:16:29.906 00:00:10.367 TCP 23.104.0.1:59914 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:16:28.524 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38736 10 6452 1 2025-11-24 11:17:12.929 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:17:12.778 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 11:17:30.312 00:00:10.368 TCP 23.104.0.1:57942 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:17:28.741 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50256 10 6452 1 2025-11-24 11:18:30.711 00:00:10.389 TCP 23.104.0.1:45278 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:18:28.958 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:54746 10 6452 1 2025-11-24 11:19:31.139 00:00:10.368 TCP 23.104.0.1:38040 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:19:29.196 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38560 10 6452 1 2025-11-24 11:15:07.370 00:05:55.742 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 11:15:07.372 00:05:55.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 11:20:29.416 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46008 10 6452 1 2025-11-24 11:20:31.546 00:00:10.371 TCP 23.104.0.1:45686 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:21:29.633 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45652 10 6452 1 2025-11-24 11:21:31.958 00:00:10.364 TCP 23.104.0.1:50300 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:22:12.666 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:22:12.825 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 11:22:29.843 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41140 10 6452 1 2025-11-24 11:22:32.358 00:00:10.359 TCP 23.104.0.1:43476 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:23:30.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35414 10 6452 1 2025-11-24 11:23:32.756 00:00:10.335 TCP 23.104.0.1:41860 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:24:30.292 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56762 10 6452 1 2025-11-24 11:24:33.135 00:00:11.081 TCP 23.104.0.1:46900 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:25:30.463 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40222 10 6452 1 2025-11-24 11:25:34.258 00:00:10.366 TCP 23.104.0.1:52476 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:21:07.371 00:05:55.741 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 11:21:07.375 00:05:55.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 11:26:30.674 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51958 10 6452 1 2025-11-24 11:26:34.664 00:00:10.328 TCP 23.104.0.1:32990 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:27:12.715 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 11:27:12.881 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:27:30.890 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46878 10 6452 1 2025-11-24 11:27:35.031 00:00:10.370 TCP 23.104.0.1:43062 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:28:31.112 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37406 10 6452 1 2025-11-24 11:28:35.440 00:00:10.368 TCP 23.104.0.1:41942 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:29:31.321 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57198 10 6452 1 2025-11-24 11:29:35.848 00:00:10.386 TCP 23.104.0.1:44998 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:30:31.529 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57500 10 6452 1 2025-11-24 11:30:36.274 00:00:10.374 TCP 23.104.0.1:42886 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:31:31.740 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55162 10 6452 1 2025-11-24 11:31:36.685 00:00:10.362 TCP 23.104.0.1:35634 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:27:07.375 00:05:55.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 11:27:07.374 00:05:55.739 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 11:32:12.981 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:32:13.024 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 11:32:31.959 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36996 10 6452 1 2025-11-24 11:32:37.106 00:00:10.366 TCP 23.104.0.1:45090 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:33:32.183 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43046 10 6452 1 2025-11-24 11:33:37.511 00:00:10.373 TCP 23.104.0.1:39968 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:34:32.394 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48082 10 6452 1 2025-11-24 11:34:37.918 00:00:10.380 TCP 23.104.0.1:34224 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:35:32.614 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33170 10 6452 1 2025-11-24 11:35:38.339 00:00:10.367 TCP 23.104.0.1:40406 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:36:32.785 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52692 10 6452 1 2025-11-24 11:36:38.740 00:00:10.381 TCP 23.104.0.1:55294 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:37:13.001 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 11:37:12.858 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:37:33.008 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46726 10 6452 1 2025-11-24 11:37:39.145 00:00:10.367 TCP 23.104.0.1:55252 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:33:07.376 00:05:55.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 11:33:07.380 00:05:55.731 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 11:38:33.178 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51324 10 6452 1 2025-11-24 11:38:39.548 00:00:10.366 TCP 23.104.0.1:55412 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:39:33.401 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:35854 10 6452 1 2025-11-24 11:39:39.954 00:00:11.051 TCP 23.104.0.1:42290 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:40:33.644 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59668 10 6452 1 2025-11-24 11:40:41.061 00:00:10.322 TCP 23.104.0.1:49168 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:41:33.869 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:51134 10 6452 1 2025-11-24 11:41:41.426 00:00:10.366 TCP 23.104.0.1:33038 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:42:13.076 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:42:13.207 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 11:42:34.095 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38968 10 6452 1 2025-11-24 11:42:41.830 00:00:10.353 TCP 23.104.0.1:54908 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:43:34.320 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48898 10 6452 1 2025-11-24 11:43:42.217 00:00:10.368 TCP 23.104.0.1:51004 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:39:07.381 00:05:55.732 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 11:39:07.378 00:05:55.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 11:44:34.537 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57032 10 6452 1 2025-11-24 11:44:42.622 00:00:10.366 TCP 23.104.0.1:45742 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:45:34.753 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34382 10 6452 1 2025-11-24 11:45:43.025 00:00:10.363 TCP 23.104.0.1:39434 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:46:34.978 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57028 10 6452 1 2025-11-24 11:46:43.432 00:00:20.559 TCP 23.104.0.1:45268 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:47:13.144 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 11:47:13.067 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:47:35.197 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39058 10 6452 1 2025-11-24 11:47:54.056 00:00:10.368 TCP 23.104.0.1:43552 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:48:35.417 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53020 10 6452 1 2025-11-24 11:48:54.459 00:00:10.330 TCP 23.104.0.1:39696 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:49:35.591 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:53496 10 6452 1 2025-11-24 11:45:07.380 00:05:55.736 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 11:49:54.824 00:00:10.338 TCP 23.104.0.1:47200 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:45:07.382 00:05:55.731 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 11:50:35.834 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40044 10 6452 1 2025-11-24 11:50:55.203 00:00:10.366 TCP 23.104.0.1:58320 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:51:36.085 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55030 10 6452 1 2025-11-24 11:51:55.604 00:00:10.320 TCP 23.104.0.1:40160 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:52:13.356 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 11:52:13.538 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:52:36.297 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58456 10 6452 1 2025-11-24 11:52:55.963 00:00:10.364 TCP 23.104.0.1:38336 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:53:36.520 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:46130 10 6452 1 2025-11-24 11:53:56.368 00:00:11.355 TCP 23.104.0.1:43004 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:54:36.690 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46618 10 6452 1 2025-11-24 11:54:57.764 00:00:10.380 TCP 23.104.0.1:44566 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:55:36.915 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47280 10 6452 1 2025-11-24 11:51:07.384 00:05:55.730 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 11:51:07.380 00:05:55.735 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 11:55:58.185 00:00:10.438 TCP 23.104.0.1:57424 -> 1.101.0.1:3000 15 1926 1 2025-11-24 11:56:37.132 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:50854 12 10369 1 2025-11-24 11:56:58.665 00:00:10.366 TCP 23.104.0.1:37576 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:57:13.256 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 11:57:13.423 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 11:57:37.375 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56600 10 6452 1 2025-11-24 11:57:59.109 00:00:10.365 TCP 23.104.0.1:42804 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:58:37.600 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54972 10 6452 1 Summary: total flows: 163, total bytes: 501281, total packets: 1569, avg bps: 1083, avg pps: 0, avg bpp: 319 Time window: 2025-11-24 10:57:07 - 2025-11-24 11:58:47 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0034s User: 0.0025s Wall: 0.0034s flows/second: 48542.4 Runtime: 0.0034s