Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 13:58:55.829 00:00:10.354 TCP 23.104.0.1:45038 -> 1.101.0.1:3000 11 1507 1 2025-11-25 13:59:39.973 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60088 10 6452 1 2025-11-25 13:59:56.229 00:00:10.357 TCP 23.104.0.1:44550 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:00:40.216 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:37160 10 6452 1 2025-11-25 14:00:56.626 00:00:10.359 TCP 23.104.0.1:49102 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:01:40.391 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38450 10 6452 1 2025-11-25 13:57:07.916 00:05:55.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 13:57:07.915 00:05:55.701 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 14:01:57.027 00:00:10.366 TCP 23.104.0.1:53750 -> 1.101.0.1:3000 12 1559 1 2025-11-25 14:02:44.696 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 14:02:44.781 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 14:02:40.605 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:32890 10 6452 1 2025-11-25 14:02:57.439 00:00:10.327 TCP 23.104.0.1:44604 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:03:40.822 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46616 10 6452 1 2025-11-25 14:03:57.808 00:00:10.338 TCP 23.104.0.1:51742 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:04:41.066 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33470 10 6452 1 2025-11-25 14:04:58.182 00:00:10.365 TCP 23.104.0.1:45128 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:05:41.279 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36824 10 6452 1 2025-11-25 14:05:58.581 00:00:10.371 TCP 23.104.0.1:32782 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:06:41.491 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58600 10 6452 1 2025-11-25 14:06:58.986 00:00:10.372 TCP 23.104.0.1:59628 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:07:44.961 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 14:07:44.960 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 14:07:41.715 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56408 10 6452 1 2025-11-25 14:03:07.915 00:05:55.701 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 14:03:07.918 00:05:55.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 14:07:59.398 00:00:10.364 TCP 23.104.0.1:44710 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:08:41.931 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:47362 10 6452 1 2025-11-25 14:08:59.802 00:00:10.369 TCP 23.104.0.1:56028 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:09:42.174 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38072 10 6452 1 2025-11-25 14:10:00.215 00:00:10.320 TCP 23.104.0.1:44548 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:10:42.394 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54046 10 6452 1 2025-11-25 14:11:00.573 00:00:10.365 TCP 23.104.0.1:50200 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:11:42.621 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52332 10 6452 1 2025-11-25 14:12:00.980 00:00:10.375 TCP 23.104.0.1:34596 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:12:45.161 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 14:12:45.041 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 14:12:42.844 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56812 10 6452 1 2025-11-25 14:13:01.392 00:00:10.320 TCP 23.104.0.1:32790 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:13:43.036 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37364 10 6452 1 2025-11-25 14:09:07.920 00:05:55.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 14:09:07.917 00:05:55.701 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 14:14:01.751 00:00:10.387 TCP 23.104.0.1:50502 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:14:43.204 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43226 10 6452 1 2025-11-25 14:15:02.176 00:00:10.372 TCP 23.104.0.1:53752 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:15:43.379 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:41644 10 6452 1 2025-11-25 14:16:02.574 00:00:10.328 TCP 23.104.0.1:58284 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:16:43.552 00:00:10.689 TCP 1.101.0.1:3000 -> 22.102.0.1:35474 10 6452 1 2025-11-25 14:17:02.943 00:00:10.373 TCP 23.104.0.1:55650 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:17:45.443 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 14:17:45.265 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 14:17:44.286 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34318 10 6452 1 2025-11-25 14:18:03.353 00:00:10.361 TCP 23.104.0.1:43732 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:18:44.502 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49700 10 6452 1 2025-11-25 14:19:03.755 00:00:10.327 TCP 23.104.0.1:45300 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:19:44.722 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52222 10 6452 1 2025-11-25 14:15:07.917 00:05:55.701 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 14:15:07.920 00:05:55.696 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 14:20:04.122 00:00:10.324 TCP 23.104.0.1:37810 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:20:44.945 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:33866 10 6452 1 2025-11-25 14:21:04.488 00:00:10.323 TCP 23.104.0.1:56274 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:21:45.193 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57102 10 6452 1 2025-11-25 14:22:04.851 00:00:10.379 TCP 23.104.0.1:59854 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:22:45.386 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 14:22:45.327 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 14:22:45.407 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34296 10 6452 1 2025-11-25 14:23:05.270 00:00:10.366 TCP 23.104.0.1:39512 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:23:45.627 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39454 10 6452 1 2025-11-25 14:24:05.677 00:00:10.366 TCP 23.104.0.1:50114 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:24:45.805 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48602 10 6452 1 2025-11-25 14:25:06.101 00:00:10.366 TCP 23.104.0.1:50632 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:25:46.016 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53416 10 6452 1 2025-11-25 14:21:07.920 00:05:55.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 14:21:07.922 00:05:55.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 14:26:06.509 00:00:10.402 TCP 23.104.0.1:33720 -> 1.101.0.1:3000 15 1926 1 2025-11-25 14:26:46.228 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:57226 12 10375 1 2025-11-25 14:27:06.952 00:00:10.360 TCP 23.104.0.1:54148 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:27:45.457 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 14:27:45.487 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 14:27:46.422 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39942 10 6452 1 2025-11-25 14:28:07.371 00:00:10.365 TCP 23.104.0.1:47326 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:28:46.588 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39546 10 6452 1 2025-11-25 14:29:07.775 00:00:10.368 TCP 23.104.0.1:60888 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:29:46.799 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43942 10 6452 1 2025-11-25 14:30:08.186 00:00:10.363 TCP 23.104.0.1:55460 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:30:46.974 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:56262 10 6452 1 2025-11-25 14:31:08.586 00:00:10.367 TCP 23.104.0.1:51916 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:27:07.922 00:05:55.699 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 14:31:47.222 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40576 10 6452 1 2025-11-25 14:27:07.925 00:05:55.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 14:32:08.993 00:00:10.863 TCP 23.104.0.1:40544 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:32:45.245 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 14:32:45.608 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 14:32:47.438 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51608 10 6452 1 2025-11-25 14:33:09.907 00:00:10.369 TCP 23.104.0.1:47428 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:33:47.653 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41748 10 6452 1 2025-11-25 14:34:10.311 00:00:10.367 TCP 23.104.0.1:57878 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:34:47.877 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39298 10 6452 1 2025-11-25 14:35:10.714 00:00:10.337 TCP 23.104.0.1:36612 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:35:48.104 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50726 10 6452 1 2025-11-25 14:36:11.097 00:00:10.432 TCP 23.104.0.1:57422 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:36:48.275 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33626 10 6452 1 2025-11-25 14:37:11.604 00:00:10.366 TCP 23.104.0.1:37194 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:37:45.607 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 14:37:45.818 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 14:37:48.491 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:44498 10 6452 1 2025-11-25 14:33:07.926 00:05:55.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 14:33:07.928 00:05:55.691 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 14:38:12.012 00:00:10.357 TCP 23.104.0.1:60046 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:38:48.680 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35704 10 6452 1 2025-11-25 14:39:12.412 00:00:10.321 TCP 23.104.0.1:55328 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:39:48.859 00:00:10.389 TCP 1.101.0.1:3000 -> 22.102.0.1:33136 10 6452 1 2025-11-25 14:40:12.779 00:00:10.365 TCP 23.104.0.1:37460 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:40:49.289 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57128 10 6452 1 2025-11-25 14:41:13.185 00:00:10.361 TCP 23.104.0.1:44366 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:41:49.519 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39246 10 6452 1 2025-11-25 14:42:13.593 00:00:10.326 TCP 23.104.0.1:42350 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:42:45.487 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 14:42:45.427 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 14:42:49.738 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57618 10 6452 1 2025-11-25 14:43:13.954 00:00:10.372 TCP 23.104.0.1:37796 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:43:49.953 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:38950 10 6452 1 2025-11-25 14:39:07.930 00:05:55.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 14:39:07.928 00:05:55.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 14:44:14.367 00:00:10.364 TCP 23.104.0.1:41584 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:44:50.196 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-11-25 14:45:14.771 00:00:10.376 TCP 23.104.0.1:42988 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:45:50.406 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48964 10 6452 1 2025-11-25 14:46:15.185 00:00:10.366 TCP 23.104.0.1:41368 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:46:50.615 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55608 10 6452 1 2025-11-25 14:47:15.590 00:00:10.390 TCP 23.104.0.1:59174 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:47:45.863 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 14:47:45.901 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 14:47:50.826 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40496 10 6452 1 2025-11-25 14:48:16.032 00:00:10.368 TCP 23.104.0.1:36670 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:48:51.071 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51918 10 6452 1 2025-11-25 14:49:16.436 00:00:10.363 TCP 23.104.0.1:56280 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:49:51.284 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50456 10 6452 1 2025-11-25 14:45:07.930 00:05:55.699 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 14:45:07.933 00:05:55.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 14:50:16.839 00:00:10.393 TCP 23.104.0.1:59856 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:50:51.504 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:57258 10 6452 1 2025-11-25 14:51:17.275 00:00:10.365 TCP 23.104.0.1:38684 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:51:51.687 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53484 10 6452 1 2025-11-25 14:52:17.674 00:00:10.368 TCP 23.104.0.1:51342 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:52:45.818 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 14:52:45.977 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 14:52:51.898 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59116 10 6452 1 2025-11-25 14:53:18.102 00:00:10.368 TCP 23.104.0.1:57468 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:53:52.113 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46816 10 6452 1 2025-11-25 14:54:18.510 00:00:10.324 TCP 23.104.0.1:40082 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:54:52.328 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47294 10 6452 1 2025-11-25 14:55:18.871 00:00:10.324 TCP 23.104.0.1:39414 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:51:07.934 00:05:55.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 14:55:52.543 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45682 10 6452 1 2025-11-25 14:51:07.931 00:05:55.699 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 14:56:19.233 00:00:10.366 TCP 23.104.0.1:59470 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:56:52.758 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43130 10 6452 1 2025-11-25 14:57:19.639 00:00:10.369 TCP 23.104.0.1:43376 -> 1.101.0.1:3000 11 1507 1 2025-11-25 14:57:45.907 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 14:57:46.054 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 14:57:52.968 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52100 10 6452 1 2025-11-25 14:58:20.057 00:00:10.362 TCP 23.104.0.1:46244 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496290, total packets: 1569, avg bps: 1078, avg pps: 0, avg bpp: 316 Time window: 2025-11-25 13:57:07 - 2025-11-25 14:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0028s Wall: 0.0020s flows/second: 83374.6 Runtime: 0.0020s