Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 04:59:10.448 00:00:10.322 TCP 23.104.0.1:59188 -> 1.101.0.1:3000 11 1507 1 2025-11-25 04:59:22.825 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45458 10 6452 1 2025-11-25 05:00:10.809 00:00:10.369 TCP 23.104.0.1:34640 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:00:23.050 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35812 10 6452 1 2025-11-25 05:01:11.214 00:00:10.368 TCP 23.104.0.1:50080 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:01:23.263 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60348 10 6452 1 2025-11-25 04:57:07.694 00:05:55.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 04:57:07.696 00:05:55.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 05:02:11.619 00:00:10.363 TCP 23.104.0.1:58954 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:02:23.441 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45528 12 6556 1 2025-11-25 05:02:33.976 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 05:02:34.151 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:03:12.022 00:00:10.365 TCP 23.104.0.1:41498 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:03:23.657 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57260 10 6452 1 2025-11-25 05:04:12.425 00:00:10.361 TCP 23.104.0.1:38520 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:04:23.875 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:45228 10 6452 1 2025-11-25 05:05:12.827 00:00:10.380 TCP 23.104.0.1:47714 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:05:24.138 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44524 10 6452 1 2025-11-25 05:06:13.244 00:00:10.380 TCP 23.104.0.1:60462 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:06:24.351 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52170 10 6452 1 2025-11-25 05:07:13.662 00:00:10.365 TCP 23.104.0.1:33862 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:07:24.560 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39752 10 6452 1 2025-11-25 05:07:34.197 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 05:07:34.075 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:03:07.696 00:05:55.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 05:03:07.699 00:05:55.753 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 05:08:14.090 00:00:10.368 TCP 23.104.0.1:48878 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:08:24.729 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40048 10 6452 1 2025-11-25 05:09:14.494 00:00:10.361 TCP 23.104.0.1:49078 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:09:24.939 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:56620 10 6452 1 2025-11-25 05:10:14.897 00:00:10.368 TCP 23.104.0.1:48538 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:10:25.132 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36810 10 6452 1 2025-11-25 05:11:15.306 00:00:10.372 TCP 23.104.0.1:35642 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:11:25.339 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35086 10 6452 1 2025-11-25 05:12:15.713 00:00:10.681 TCP 23.104.0.1:51794 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:12:34.177 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:12:34.205 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 05:12:25.558 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60798 10 6452 1 2025-11-25 05:13:16.429 00:00:10.326 TCP 23.104.0.1:40756 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:13:25.733 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40986 10 6452 1 2025-11-25 05:09:07.726 00:05:55.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 05:09:07.730 00:05:55.726 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 05:14:16.795 00:00:10.366 TCP 23.104.0.1:34250 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:14:25.944 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:33896 10 6452 1 2025-11-25 05:15:17.199 00:00:10.337 TCP 23.104.0.1:39882 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:15:26.148 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53168 10 6452 1 2025-11-25 05:16:17.574 00:00:10.363 TCP 23.104.0.1:46558 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:16:26.362 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36722 10 6452 1 2025-11-25 05:17:17.975 00:00:10.342 TCP 23.104.0.1:35614 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:17:34.419 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:17:26.574 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39714 10 6452 1 2025-11-25 05:17:34.364 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 05:18:18.360 00:00:10.366 TCP 23.104.0.1:56852 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:18:26.790 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40180 10 6452 1 2025-11-25 05:19:18.761 00:00:10.376 TCP 23.104.0.1:48196 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:19:27.003 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38278 10 6452 1 2025-11-25 05:15:07.730 00:05:55.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 05:15:07.732 00:05:55.724 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 05:20:19.174 00:00:10.379 TCP 23.104.0.1:35868 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:20:27.218 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59992 10 6452 1 2025-11-25 05:21:19.593 00:00:10.970 TCP 23.104.0.1:49084 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:21:27.430 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60266 10 6452 1 2025-11-25 05:22:20.597 00:00:10.369 TCP 23.104.0.1:41408 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:22:34.518 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:22:34.237 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 05:22:27.649 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54172 10 6452 1 2025-11-25 05:23:21.002 00:00:10.368 TCP 23.104.0.1:37278 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:23:27.860 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57218 10 6452 1 2025-11-25 05:24:21.402 00:00:10.365 TCP 23.104.0.1:46876 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:24:28.114 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60002 10 6452 1 2025-11-25 05:25:21.801 00:00:10.339 TCP 23.104.0.1:49428 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:25:28.329 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52836 10 6452 1 2025-11-25 05:21:07.733 00:05:55.725 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 05:21:07.732 00:05:55.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 05:26:22.179 00:00:10.437 TCP 23.104.0.1:56052 -> 1.101.0.1:3000 15 1926 1 2025-11-25 05:26:28.541 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:34214 12 10369 1 2025-11-25 05:27:34.723 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 05:27:22.656 00:00:10.365 TCP 23.104.0.1:55022 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:27:34.940 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:27:28.790 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46494 10 6452 1 2025-11-25 05:28:23.089 00:00:10.369 TCP 23.104.0.1:48706 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:28:29.036 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43586 10 6452 1 2025-11-25 05:29:23.497 00:00:10.324 TCP 23.104.0.1:57294 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:29:29.250 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36546 10 6452 1 2025-11-25 05:30:23.863 00:00:11.034 TCP 23.104.0.1:47880 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:30:29.422 00:00:10.741 TCP 1.101.0.1:3000 -> 22.102.0.1:56588 10 6452 1 2025-11-25 05:31:24.933 00:00:10.455 TCP 23.104.0.1:37176 -> 1.101.0.1:3000 15 1926 1 2025-11-25 05:31:30.206 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:38604 12 10369 1 2025-11-25 05:27:07.734 00:05:55.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 05:27:07.737 00:05:55.723 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 05:32:25.427 00:00:10.363 TCP 23.104.0.1:45772 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:32:34.669 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:32:34.694 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 05:32:30.450 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46286 10 6452 1 2025-11-25 05:33:25.831 00:00:10.395 TCP 23.104.0.1:42286 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:33:30.673 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52948 10 6452 1 2025-11-25 05:34:26.267 00:00:10.333 TCP 23.104.0.1:46372 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:34:30.891 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47132 10 6452 1 2025-11-25 05:35:26.634 00:00:10.369 TCP 23.104.0.1:60044 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:35:31.112 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36156 10 6452 1 2025-11-25 05:36:27.066 00:00:10.367 TCP 23.104.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:36:31.291 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36162 10 6452 1 2025-11-25 05:37:34.741 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 05:37:34.738 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:37:27.482 00:00:10.372 TCP 23.104.0.1:46170 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:37:31.510 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34766 10 6452 1 2025-11-25 05:33:07.735 00:05:55.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 05:33:07.739 00:05:55.722 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 05:38:31.689 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39676 10 6452 1 2025-11-25 05:38:27.892 00:00:10.371 TCP 23.104.0.1:38974 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:39:28.299 00:00:10.360 TCP 23.104.0.1:32886 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:39:31.905 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 10 6452 1 2025-11-25 05:40:28.699 00:00:10.371 TCP 23.104.0.1:56842 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:40:32.121 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59416 10 6452 1 2025-11-25 05:41:29.118 00:00:10.360 TCP 23.104.0.1:38760 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:41:32.339 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36812 10 6452 1 2025-11-25 05:42:34.737 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:42:34.673 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 05:42:29.519 00:00:10.415 TCP 23.104.0.1:37896 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:42:32.563 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53360 10 6452 1 2025-11-25 05:43:29.978 00:00:10.378 TCP 23.104.0.1:51756 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:43:32.784 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45342 10 6452 1 2025-11-25 05:39:07.738 00:05:55.726 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 05:39:07.740 00:05:55.721 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 05:44:30.394 00:00:10.366 TCP 23.104.0.1:36460 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:44:33.011 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36652 10 6452 1 2025-11-25 05:45:30.801 00:00:10.368 TCP 23.104.0.1:43434 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:45:33.236 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34062 10 6452 1 2025-11-25 05:46:31.209 00:00:10.383 TCP 23.104.0.1:60576 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:46:33.461 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60188 10 6452 1 2025-11-25 05:47:34.947 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:47:34.794 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 05:47:31.637 00:00:10.319 TCP 23.104.0.1:33524 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:47:33.681 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33400 10 6452 1 2025-11-25 05:48:33.904 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41274 10 6452 1 2025-11-25 05:48:32.005 00:00:10.324 TCP 23.104.0.1:58516 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:49:34.127 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48374 10 6452 1 2025-11-25 05:49:32.367 00:00:10.371 TCP 23.104.0.1:32866 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:45:07.743 00:05:55.719 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 05:45:07.739 00:05:55.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 05:50:32.779 00:00:10.345 TCP 23.104.0.1:44746 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:50:34.340 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:40662 10 6452 1 2025-11-25 05:51:33.164 00:00:10.435 TCP 23.104.0.1:37304 -> 1.101.0.1:3000 15 1926 1 2025-11-25 05:51:34.598 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52916 12 10375 1 2025-11-25 05:52:34.982 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 05:52:34.648 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:52:33.641 00:00:10.379 TCP 23.104.0.1:50954 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:52:34.846 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55000 10 6452 1 2025-11-25 05:53:34.088 00:00:10.365 TCP 23.104.0.1:45498 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:53:35.080 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35138 10 6452 1 2025-11-25 05:54:34.484 00:00:10.709 TCP 23.104.0.1:48486 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:54:35.298 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:46716 10 6452 1 2025-11-25 05:55:35.474 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58380 10 6452 1 2025-11-25 05:55:35.235 00:00:10.361 TCP 23.104.0.1:41004 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:51:07.741 00:05:55.724 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 05:51:07.743 00:05:55.719 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 05:56:35.634 00:00:10.376 TCP 23.104.0.1:56440 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:56:35.689 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49220 10 6452 1 2025-11-25 05:57:35.064 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 05:57:34.884 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 05:57:36.061 00:00:10.319 TCP 23.104.0.1:36978 -> 1.101.0.1:3000 11 1507 1 2025-11-25 05:57:35.926 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:53742 10 6452 1 2025-11-25 05:58:36.121 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53542 10 6452 1 2025-11-25 05:58:36.422 00:00:10.383 TCP 23.104.0.1:60746 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511466, total packets: 1592, avg bps: 1106, avg pps: 0, avg bpp: 321 Time window: 2025-11-25 04:57:07 - 2025-11-25 05:58:46 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0047s User: 0.0019s Wall: 0.0028s flows/second: 58927.9 Runtime: 0.0028s