Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 11:59:04.684 00:00:10.362 TCP 23.104.0.1:51438 -> 1.101.0.1:3000 11 1507 1 2025-11-25 11:59:09.189 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55938 10 6452 1 2025-11-25 12:00:05.104 00:00:10.367 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:00:09.403 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59102 10 6452 1 2025-11-25 12:01:05.509 00:00:10.368 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:01:09.627 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35542 10 6452 1 2025-11-25 11:57:07.869 00:05:55.712 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 11:57:07.865 00:05:55.718 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:02:05.916 00:00:10.344 TCP 23.104.0.1:35588 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:02:09.841 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40538 10 6452 1 2025-11-25 12:02:42.307 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:02:42.355 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:03:06.300 00:00:10.363 TCP 23.104.0.1:47740 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:03:10.081 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57900 10 6452 1 2025-11-25 12:04:10.299 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52814 10 6452 1 2025-11-25 12:04:06.697 00:00:10.324 TCP 23.104.0.1:45890 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:05:07.065 00:00:10.331 TCP 23.104.0.1:60786 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:05:10.523 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56442 10 6452 1 2025-11-25 12:06:07.426 00:00:10.401 TCP 23.104.0.1:52278 -> 1.101.0.1:3000 15 1926 1 2025-11-25 12:06:10.753 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34880 12 10375 1 2025-11-25 12:07:10.999 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37760 10 6452 1 2025-11-25 12:07:07.864 00:00:10.377 TCP 23.104.0.1:58858 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:07:42.670 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:07:42.596 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:03:07.868 00:05:55.717 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:03:07.871 00:05:55.712 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:08:08.293 00:00:10.362 TCP 23.104.0.1:52072 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:08:11.220 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45220 10 6452 1 2025-11-25 12:09:11.394 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46418 10 6452 1 2025-11-25 12:09:08.697 00:00:10.364 TCP 23.104.0.1:42040 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:10:11.623 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55670 10 6452 1 2025-11-25 12:10:09.108 00:00:10.327 TCP 23.104.0.1:46030 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:11:09.474 00:00:10.380 TCP 23.104.0.1:33880 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:11:11.866 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:38392 10 6452 1 2025-11-25 12:12:09.888 00:00:11.289 TCP 23.104.0.1:35338 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:12:12.107 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39588 10 6452 1 2025-11-25 12:12:42.673 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:12:42.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:13:11.215 00:00:10.362 TCP 23.104.0.1:53046 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:13:12.317 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42862 10 6452 1 2025-11-25 12:09:07.871 00:05:55.715 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:09:07.873 00:05:55.710 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:14:11.616 00:00:10.369 TCP 23.104.0.1:50366 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:14:12.490 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40268 10 6452 1 2025-11-25 12:15:12.023 00:00:10.342 TCP 23.104.0.1:48678 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:15:12.710 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59144 10 6452 1 2025-11-25 12:16:12.397 00:00:10.362 TCP 23.104.0.1:39180 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:16:12.885 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41992 10 6452 1 2025-11-25 12:17:12.792 00:00:10.342 TCP 23.104.0.1:58936 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:17:13.111 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57324 10 6452 1 2025-11-25 12:17:42.647 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:17:42.824 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:18:13.172 00:00:10.364 TCP 23.104.0.1:47808 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:18:13.334 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58818 10 6452 1 2025-11-25 12:19:13.574 00:00:10.363 TCP 23.104.0.1:46046 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:19:13.554 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49498 10 6452 1 2025-11-25 12:15:07.873 00:05:55.714 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:15:07.877 00:05:55.708 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:20:13.769 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60614 10 6452 1 2025-11-25 12:20:13.975 00:00:10.372 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:21:14.382 00:00:10.364 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:21:13.983 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:39274 10 6452 1 2025-11-25 12:22:14.786 00:00:10.368 TCP 23.104.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:22:14.221 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54574 10 6452 1 2025-11-25 12:22:43.078 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:22:42.989 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:23:15.195 00:00:10.323 TCP 23.104.0.1:53314 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:23:14.440 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43364 10 6452 1 2025-11-25 12:24:14.655 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34418 10 6452 1 2025-11-25 12:24:15.559 00:00:10.361 TCP 23.104.0.1:39078 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:25:14.838 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35098 10 6452 1 2025-11-25 12:25:15.960 00:00:10.366 TCP 23.104.0.1:51074 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:21:07.878 00:05:55.710 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:21:07.874 00:05:55.715 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:26:15.081 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:60282 10 6452 1 2025-11-25 12:26:16.359 00:00:10.364 TCP 23.104.0.1:36178 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:27:15.334 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52540 10 6452 1 2025-11-25 12:27:16.767 00:00:10.380 TCP 23.104.0.1:53852 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:27:43.073 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:27:43.097 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:28:15.543 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42658 10 6452 1 2025-11-25 12:28:17.191 00:00:10.363 TCP 23.104.0.1:41570 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:29:15.754 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44440 10 6452 1 2025-11-25 12:29:17.593 00:00:10.363 TCP 23.104.0.1:58062 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:30:15.963 00:00:10.362 TCP 1.101.0.1:3000 -> 22.102.0.1:47524 10 6452 1 2025-11-25 12:30:17.995 00:00:10.888 TCP 23.104.0.1:37496 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:31:16.367 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:36428 10 6452 1 2025-11-25 12:31:18.921 00:00:10.387 TCP 23.104.0.1:55664 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:27:07.875 00:05:55.714 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:27:07.879 00:05:55.709 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:32:16.554 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56848 10 6452 1 2025-11-25 12:32:19.351 00:00:10.366 TCP 23.104.0.1:59574 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:32:43.231 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:32:43.102 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:33:16.764 00:00:11.385 TCP 1.101.0.1:3000 -> 22.102.0.1:38732 10 6452 1 2025-11-25 12:33:19.755 00:00:10.693 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:34:18.196 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47546 10 6452 1 2025-11-25 12:34:20.492 00:00:10.367 TCP 23.104.0.1:58770 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:35:18.368 00:00:10.816 TCP 1.101.0.1:3000 -> 22.102.0.1:33082 10 6452 1 2025-11-25 12:35:20.898 00:00:10.728 TCP 23.104.0.1:57750 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:36:19.218 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:38592 12 10375 1 2025-11-25 12:36:21.664 00:00:10.451 TCP 23.104.0.1:53370 -> 1.101.0.1:3000 15 1926 1 2025-11-25 12:37:19.416 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37092 10 6452 1 2025-11-25 12:37:22.154 00:00:10.360 TCP 23.104.0.1:37486 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:37:43.039 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:37:43.029 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:33:07.880 00:05:55.708 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:33:07.878 00:05:55.713 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:38:19.630 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57860 10 6452 1 2025-11-25 12:38:22.553 00:00:10.359 TCP 23.104.0.1:33692 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:39:19.842 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33578 10 6452 1 2025-11-25 12:39:22.951 00:00:10.373 TCP 23.104.0.1:51720 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:40:20.084 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52682 10 6452 1 2025-11-25 12:40:23.361 00:00:10.372 TCP 23.104.0.1:42646 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:41:20.296 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46008 10 6452 1 2025-11-25 12:41:23.765 00:00:10.372 TCP 23.104.0.1:38952 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:42:20.465 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37544 10 6452 1 2025-11-25 12:42:24.174 00:00:10.335 TCP 23.104.0.1:46776 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:42:43.299 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:42:43.147 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:43:20.678 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59726 10 6452 1 2025-11-25 12:43:24.560 00:00:10.371 TCP 23.104.0.1:38016 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:39:07.883 00:05:55.707 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:39:07.881 00:05:55.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:44:20.849 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:38524 10 6452 1 2025-11-25 12:44:24.969 00:00:10.375 TCP 23.104.0.1:52132 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:45:21.029 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46872 10 6452 1 2025-11-25 12:45:25.377 00:00:10.364 TCP 23.104.0.1:59556 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:46:21.238 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38160 10 6452 1 2025-11-25 12:46:25.775 00:00:10.372 TCP 23.104.0.1:47404 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:47:21.454 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43564 10 6452 1 2025-11-25 12:47:26.190 00:00:10.328 TCP 23.104.0.1:45128 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:47:43.617 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:47:43.543 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:48:21.663 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47752 10 6452 1 2025-11-25 12:48:26.551 00:00:10.359 TCP 23.104.0.1:43062 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:49:21.875 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35654 10 6452 1 2025-11-25 12:49:26.958 00:00:10.322 TCP 23.104.0.1:54406 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:45:07.891 00:05:55.700 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:45:07.889 00:05:55.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:50:22.112 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58490 10 6452 1 2025-11-25 12:50:27.320 00:00:10.367 TCP 23.104.0.1:40990 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:51:22.329 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37180 10 6452 1 2025-11-25 12:51:27.722 00:00:11.033 TCP 23.104.0.1:52980 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:52:22.550 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59202 10 6452 1 2025-11-25 12:52:28.794 00:00:10.366 TCP 23.104.0.1:54648 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:52:43.544 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:52:43.566 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:53:22.767 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:35132 10 6452 1 2025-11-25 12:53:29.202 00:00:10.363 TCP 23.104.0.1:59094 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:54:23.003 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:53070 10 6452 1 2025-11-25 12:54:29.604 00:00:10.325 TCP 23.104.0.1:38466 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:55:23.243 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60008 10 6452 1 2025-11-25 12:55:29.977 00:00:10.366 TCP 23.104.0.1:51164 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:51:07.889 00:05:55.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 12:51:07.893 00:05:55.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 12:56:23.481 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:40898 12 10375 1 2025-11-25 12:56:30.382 00:00:10.431 TCP 23.104.0.1:46878 -> 1.101.0.1:3000 15 1926 1 2025-11-25 12:57:23.679 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47556 10 6452 1 2025-11-25 12:57:30.854 00:00:10.371 TCP 23.104.0.1:51260 -> 1.101.0.1:3000 11 1507 1 2025-11-25 12:57:43.482 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 12:57:43.714 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 12:58:23.887 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51546 10 6452 1 2025-11-25 12:58:31.268 00:00:10.363 TCP 23.104.0.1:60538 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511374, total packets: 1590, avg bps: 1107, avg pps: 0, avg bpp: 321 Time window: 2025-11-25 11:57:07 - 2025-11-25 12:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0050s User: 0.0008s Wall: 0.0025s flows/second: 64340.6 Runtime: 0.0026s