Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 01:58:54.915 00:00:10.370 TCP 23.104.0.1:55500 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:59:30.259 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58954 10 6452 1 2025-11-25 01:59:55.319 00:00:10.329 TCP 23.104.0.1:47476 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:00:30.433 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33150 10 6452 1 2025-11-25 02:00:55.684 00:00:10.370 TCP 23.104.0.1:53418 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:01:30.648 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33736 10 6452 1 2025-11-25 01:57:07.639 00:05:55.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 02:01:56.111 00:00:10.361 TCP 23.104.0.1:45308 -> 1.101.0.1:3000 11 1507 1 2025-11-25 01:57:07.642 00:05:55.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 02:02:30.339 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 02:02:30.179 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 02:02:30.863 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:50934 10 6452 1 2025-11-25 02:02:56.515 00:00:10.324 TCP 23.104.0.1:56684 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:03:31.162 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51970 10 6452 1 2025-11-25 02:03:56.890 00:00:10.368 TCP 23.104.0.1:34200 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:04:31.371 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45250 10 6452 1 2025-11-25 02:04:57.301 00:00:10.370 TCP 23.104.0.1:49680 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:05:31.584 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40290 10 6452 1 2025-11-25 02:05:57.709 00:00:10.369 TCP 23.104.0.1:59198 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:06:31.763 00:00:10.705 TCP 1.101.0.1:3000 -> 22.102.0.1:46956 10 6452 1 2025-11-25 02:06:58.112 00:00:10.366 TCP 23.104.0.1:41712 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:07:30.373 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 02:07:30.604 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 02:07:32.511 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55540 10 6452 1 2025-11-25 02:03:07.644 00:05:55.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 02:03:07.642 00:05:55.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 02:07:58.515 00:00:10.359 TCP 23.104.0.1:53478 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:08:32.717 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47988 10 6452 1 2025-11-25 02:08:58.914 00:00:10.365 TCP 23.104.0.1:51336 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:09:32.933 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47206 10 6452 1 2025-11-25 02:09:59.322 00:00:10.343 TCP 23.104.0.1:46366 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:10:33.144 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45164 10 6452 1 2025-11-25 02:10:59.705 00:00:10.387 TCP 23.104.0.1:40332 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:11:33.313 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52318 10 6452 1 2025-11-25 02:12:00.129 00:00:10.365 TCP 23.104.0.1:37416 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:12:30.820 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 02:12:30.778 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 02:12:33.527 00:00:10.679 TCP 1.101.0.1:3000 -> 22.102.0.1:40408 10 6452 1 2025-11-25 02:13:00.532 00:00:10.335 TCP 23.104.0.1:49092 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:13:34.275 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58264 10 6452 1 2025-11-25 02:09:07.643 00:05:55.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 02:09:07.646 00:05:55.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 02:14:00.916 00:00:10.364 TCP 23.104.0.1:55992 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:14:34.499 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57212 10 6452 1 2025-11-25 02:15:01.318 00:00:10.364 TCP 23.104.0.1:37960 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:15:34.680 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42568 10 6452 1 2025-11-25 02:16:01.720 00:00:10.381 TCP 23.104.0.1:52712 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:16:34.904 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:55886 10 6452 1 2025-11-25 02:17:02.165 00:00:10.363 TCP 23.104.0.1:43260 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:17:30.807 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 02:17:30.587 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 02:17:35.140 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40680 10 6452 1 2025-11-25 02:18:02.570 00:00:10.365 TCP 23.104.0.1:48106 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:18:35.361 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55728 10 6452 1 2025-11-25 02:19:02.972 00:00:10.366 TCP 23.104.0.1:34408 -> 1.101.0.1:3000 12 1559 1 2025-11-25 02:19:35.585 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47214 10 6452 1 2025-11-25 02:15:07.643 00:05:55.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 02:15:07.647 00:05:55.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 02:20:03.369 00:00:10.370 TCP 23.104.0.1:32976 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:20:35.798 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34932 10 6452 1 2025-11-25 02:21:03.770 00:00:10.369 TCP 23.104.0.1:35746 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:21:36.027 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38068 10 6452 1 2025-11-25 02:22:04.178 00:00:10.367 TCP 23.104.0.1:39284 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:22:30.733 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 02:22:30.477 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 02:22:36.247 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37122 10 6452 1 2025-11-25 02:23:04.583 00:00:10.335 TCP 23.104.0.1:41422 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:23:36.470 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41962 10 6452 1 2025-11-25 02:24:04.953 00:00:10.324 TCP 23.104.0.1:37138 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:24:36.644 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45106 10 6452 1 2025-11-25 02:25:05.322 00:00:10.362 TCP 23.104.0.1:45824 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:25:36.838 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33300 10 6452 1 2025-11-25 02:21:07.653 00:05:55.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 02:21:07.650 00:05:55.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 02:26:05.722 00:00:10.367 TCP 23.104.0.1:40798 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:26:37.076 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39738 10 6452 1 2025-11-25 02:27:06.126 00:00:10.327 TCP 23.104.0.1:42180 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:27:30.916 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 02:27:30.849 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 02:27:37.301 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56174 10 6452 1 2025-11-25 02:28:06.509 00:00:10.370 TCP 23.104.0.1:60350 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:28:37.520 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48634 10 6452 1 2025-11-25 02:29:06.923 00:00:10.385 TCP 23.104.0.1:58118 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:29:37.738 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55104 10 6452 1 2025-11-25 02:30:07.347 00:00:10.374 TCP 23.104.0.1:40636 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:30:37.960 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42100 12 6556 1 2025-11-25 02:31:07.760 00:00:10.390 TCP 23.104.0.1:56104 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:31:38.187 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53050 10 6452 1 2025-11-25 02:27:07.651 00:05:55.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 02:27:07.655 00:05:55.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 02:32:08.185 00:00:10.368 TCP 23.104.0.1:35116 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:32:31.013 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 02:32:31.190 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 02:32:38.355 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42204 10 6452 1 2025-11-25 02:33:08.582 00:00:10.320 TCP 23.104.0.1:38350 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:33:38.537 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43868 10 6452 1 2025-11-25 02:34:08.947 00:00:10.370 TCP 23.104.0.1:37930 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:34:38.749 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53320 10 6452 1 2025-11-25 02:35:09.355 00:00:10.369 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:35:38.962 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40034 10 6452 1 2025-11-25 02:36:09.762 00:00:10.333 TCP 23.104.0.1:58818 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:36:39.192 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45466 10 6452 1 2025-11-25 02:37:10.144 00:00:10.366 TCP 23.104.0.1:38290 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:37:31.221 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 02:37:31.141 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 02:37:39.407 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38222 10 6452 1 2025-11-25 02:33:07.656 00:05:55.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 02:33:07.653 00:05:55.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 02:38:10.547 00:00:10.369 TCP 23.104.0.1:42948 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:38:39.622 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42686 10 6452 1 2025-11-25 02:39:10.953 00:00:10.373 TCP 23.104.0.1:35714 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:39:39.845 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41934 10 6452 1 2025-11-25 02:40:11.358 00:00:10.331 TCP 23.104.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:40:40.081 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53440 10 6452 1 2025-11-25 02:41:11.733 00:00:10.329 TCP 23.104.0.1:33484 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:41:40.295 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2025-11-25 02:42:31.364 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 02:42:12.108 00:00:10.322 TCP 23.104.0.1:56232 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:42:31.164 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 02:42:40.512 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60452 10 6452 1 2025-11-25 02:43:12.471 00:00:10.374 TCP 23.104.0.1:34276 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:43:40.724 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:59800 10 6452 1 2025-11-25 02:39:07.656 00:05:55.755 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 02:39:07.655 00:05:55.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 02:44:12.887 00:00:10.370 TCP 23.104.0.1:35856 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:44:40.965 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:53954 10 6452 1 2025-11-25 02:45:13.294 00:00:10.364 TCP 23.104.0.1:44912 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:45:41.154 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46676 10 6452 1 2025-11-25 02:46:13.698 00:00:10.371 TCP 23.104.0.1:37270 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:46:41.370 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34936 10 6452 1 2025-11-25 02:47:14.111 00:00:10.321 TCP 23.104.0.1:39618 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:47:31.210 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 02:47:31.026 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 02:47:41.582 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47866 10 6452 1 2025-11-25 02:48:14.469 00:00:10.328 TCP 23.104.0.1:41182 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:48:41.812 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39790 10 6452 1 2025-11-25 02:49:14.842 00:00:10.379 TCP 23.104.0.1:36548 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:49:42.053 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56380 10 6452 1 2025-11-25 02:45:07.655 00:05:55.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 02:45:07.658 00:05:55.755 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 02:50:15.260 00:00:10.359 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:50:42.275 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:48620 10 6452 1 2025-11-25 02:51:15.657 00:00:11.095 TCP 23.104.0.1:38704 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:51:42.459 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:58044 10 6452 1 2025-11-25 02:52:31.450 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 02:52:16.794 00:00:10.368 TCP 23.104.0.1:49054 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:52:31.576 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 02:52:42.665 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58916 10 6452 1 2025-11-25 02:53:17.195 00:00:10.367 TCP 23.104.0.1:34968 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:53:42.890 00:00:10.737 TCP 1.101.0.1:3000 -> 22.102.0.1:57000 10 6452 1 2025-11-25 02:54:17.603 00:00:10.320 TCP 23.104.0.1:42466 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:54:43.673 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41338 10 6452 1 2025-11-25 02:55:17.965 00:00:10.323 TCP 23.104.0.1:39414 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:55:43.893 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60364 10 6452 1 2025-11-25 02:51:07.661 00:05:55.752 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 02:51:07.659 00:05:55.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 02:56:18.348 00:00:10.363 TCP 23.104.0.1:57798 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:56:44.115 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60628 11 6492 1 2025-11-25 02:57:31.843 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 02:57:31.731 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 02:57:18.751 00:00:10.390 TCP 23.104.0.1:53260 -> 1.101.0.1:3000 11 1507 1 2025-11-25 02:57:44.325 00:00:16.151 TCP 1.101.0.1:3000 -> 22.102.0.1:54454 10 6452 1 2025-11-25 02:58:19.175 00:00:11.800 TCP 23.104.0.1:34632 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492092, total packets: 1566, avg bps: 1068, avg pps: 0, avg bpp: 314 Time window: 2025-11-25 01:57:07 - 2025-11-25 02:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0050s User: 0.0010s Wall: 0.0020s flows/second: 81292.7 Runtime: 0.0020s