Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 16:59:10.996 00:00:10.371 TCP 23.104.0.1:58986 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:59:22.527 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59874 10 6452 1 2025-11-25 17:00:11.401 00:00:10.374 TCP 23.104.0.1:46786 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:00:22.752 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37810 10 6452 1 2025-11-25 17:01:11.805 00:00:10.368 TCP 23.104.0.1:49162 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:01:22.969 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:34670 10 6452 1 2025-11-25 16:57:07.976 00:05:55.682 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:57:07.973 00:05:55.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 17:02:12.216 00:00:10.332 TCP 23.104.0.1:46264 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:02:23.196 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35288 10 6452 1 2025-11-25 17:02:48.794 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 17:02:48.795 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 17:03:12.586 00:00:10.363 TCP 23.104.0.1:38986 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:03:23.421 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36336 10 6452 1 2025-11-25 17:04:12.993 00:00:10.365 TCP 23.104.0.1:59618 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:04:23.644 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37596 10 6452 1 2025-11-25 17:05:13.397 00:00:10.366 TCP 23.104.0.1:36460 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:05:23.866 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45402 10 6452 1 2025-11-25 17:06:13.801 00:00:10.366 TCP 23.104.0.1:59634 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:06:24.095 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36792 10 6452 1 2025-11-25 17:07:14.210 00:00:10.370 TCP 23.104.0.1:39100 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:07:24.321 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42852 10 6452 1 2025-11-25 17:07:48.606 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 17:07:48.630 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 17:03:07.973 00:05:55.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 17:03:07.976 00:05:55.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 17:08:14.623 00:00:10.364 TCP 23.104.0.1:54946 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:08:24.546 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56240 10 6452 1 2025-11-25 17:09:15.045 00:00:10.363 TCP 23.104.0.1:48618 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:09:24.779 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57532 10 6452 1 2025-11-25 17:10:15.451 00:00:10.364 TCP 23.104.0.1:47402 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:10:24.997 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51874 10 6452 1 2025-11-25 17:11:15.857 00:00:10.372 TCP 23.104.0.1:39318 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:11:25.222 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40078 10 6452 1 2025-11-25 17:12:25.435 00:00:11.157 TCP 1.101.0.1:3000 -> 22.102.0.1:48624 10 6452 1 2025-11-25 17:12:16.267 00:00:20.337 TCP 23.104.0.1:34122 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:12:48.503 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 17:12:48.428 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 17:13:26.650 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59258 10 6452 1 2025-11-25 17:13:26.662 00:00:10.364 TCP 23.104.0.1:49538 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:09:07.979 00:05:55.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 17:09:07.976 00:05:55.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 17:14:26.868 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44682 10 6452 1 2025-11-25 17:14:27.094 00:00:10.323 TCP 23.104.0.1:38890 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:15:27.456 00:00:10.378 TCP 23.104.0.1:46684 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:15:27.097 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50354 10 6452 1 2025-11-25 17:16:27.314 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38542 10 6452 1 2025-11-25 17:16:27.851 00:00:10.347 TCP 23.104.0.1:51544 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:17:27.545 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60440 10 6452 1 2025-11-25 17:17:28.233 00:00:10.359 TCP 23.104.0.1:57070 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:17:48.640 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 17:17:48.793 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 17:18:28.630 00:00:10.324 TCP 23.104.0.1:58316 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:18:27.766 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57614 10 6452 1 2025-11-25 17:19:28.991 00:00:10.640 TCP 23.104.0.1:54184 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:19:27.984 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:53516 10 6452 1 2025-11-25 17:15:07.979 00:05:55.689 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 17:15:07.977 00:05:55.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 17:20:29.669 00:00:10.370 TCP 23.104.0.1:40284 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:20:28.225 00:00:10.362 TCP 1.101.0.1:3000 -> 22.102.0.1:44286 10 6452 1 2025-11-25 17:21:28.630 00:00:10.826 TCP 1.101.0.1:3000 -> 22.102.0.1:54428 10 6452 1 2025-11-25 17:21:30.103 00:00:10.362 TCP 23.104.0.1:49440 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:22:30.505 00:00:10.335 TCP 23.104.0.1:43536 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:22:29.502 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40938 10 6452 1 2025-11-25 17:22:49.100 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 17:22:48.810 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 17:23:30.880 00:00:10.382 TCP 23.104.0.1:41958 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:23:29.714 00:00:10.308 TCP 1.101.0.1:3000 -> 22.102.0.1:49950 10 6452 1 2025-11-25 17:24:30.082 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42050 10 6452 1 2025-11-25 17:24:31.299 00:00:10.364 TCP 23.104.0.1:41646 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:25:30.258 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50628 10 6452 1 2025-11-25 17:25:31.697 00:00:10.366 TCP 23.104.0.1:46672 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:21:07.978 00:05:55.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 17:21:07.981 00:05:55.688 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 17:26:30.466 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:58968 12 10375 1 2025-11-25 17:26:32.103 00:00:10.439 TCP 23.104.0.1:44416 -> 1.101.0.1:3000 15 1926 1 2025-11-25 17:27:30.706 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36204 10 6452 1 2025-11-25 17:27:32.581 00:00:10.369 TCP 23.104.0.1:60632 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:27:49.301 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 17:27:49.315 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 17:28:30.921 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41136 10 6452 1 2025-11-25 17:28:32.991 00:00:10.366 TCP 23.104.0.1:48144 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:29:31.103 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33564 10 6452 1 2025-11-25 17:29:33.396 00:00:10.364 TCP 23.104.0.1:58318 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:30:31.315 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54088 10 6452 1 2025-11-25 17:30:33.804 00:00:10.378 TCP 23.104.0.1:34956 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:31:31.523 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43694 10 6452 1 2025-11-25 17:31:34.223 00:00:10.374 TCP 23.104.0.1:59184 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:27:07.980 00:05:55.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 17:27:07.984 00:05:55.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 17:32:31.746 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52406 10 6452 1 2025-11-25 17:32:34.639 00:00:10.368 TCP 23.104.0.1:43114 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:32:48.938 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 17:32:48.961 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 17:33:31.960 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:60430 10 6452 1 2025-11-25 17:33:35.051 00:00:10.364 TCP 23.104.0.1:36416 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:34:32.193 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37762 10 6452 1 2025-11-25 17:34:35.459 00:00:10.357 TCP 23.104.0.1:41960 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:35:32.414 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:57252 10 6452 1 2025-11-25 17:35:35.872 00:00:10.324 TCP 23.104.0.1:54742 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:36:36.232 00:00:10.370 TCP 23.104.0.1:38190 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:36:32.624 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39066 12 6556 1 2025-11-25 17:37:49.042 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 17:37:36.641 00:00:10.366 TCP 23.104.0.1:52438 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:37:32.845 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38604 10 6452 1 2025-11-25 17:37:49.275 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 17:33:07.981 00:05:55.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 17:33:07.983 00:05:55.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 17:38:33.089 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32974 10 6452 1 2025-11-25 17:38:37.048 00:00:10.377 TCP 23.104.0.1:34194 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:39:33.328 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47654 10 6452 1 2025-11-25 17:39:37.462 00:00:10.394 TCP 23.104.0.1:37056 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:40:33.550 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:32980 10 6452 1 2025-11-25 17:40:37.892 00:00:10.373 TCP 23.104.0.1:35360 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:41:33.727 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54596 10 6452 1 2025-11-25 17:41:38.303 00:00:10.439 TCP 23.104.0.1:43060 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:42:33.940 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57358 10 6452 1 2025-11-25 17:42:49.082 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 17:42:49.282 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 17:42:38.801 00:00:10.364 TCP 23.104.0.1:48466 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:43:34.174 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39888 10 6452 1 2025-11-25 17:43:39.208 00:00:10.365 TCP 23.104.0.1:39084 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:39:07.981 00:05:55.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 17:39:07.985 00:05:55.689 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 17:44:34.394 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38866 10 6452 1 2025-11-25 17:44:39.622 00:00:10.366 TCP 23.104.0.1:53124 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:45:34.614 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46096 10 6452 1 2025-11-25 17:45:40.032 00:00:10.632 TCP 23.104.0.1:51556 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:46:34.829 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44888 10 6452 1 2025-11-25 17:46:40.698 00:00:10.371 TCP 23.104.0.1:40636 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:47:35.057 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59372 10 6452 1 2025-11-25 17:47:49.376 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 17:47:49.792 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 17:47:41.112 00:00:10.364 TCP 23.104.0.1:36344 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:48:35.272 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46488 10 6452 1 2025-11-25 17:48:41.516 00:00:10.365 TCP 23.104.0.1:42968 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:49:35.450 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48428 10 6452 1 2025-11-25 17:49:41.922 00:00:10.387 TCP 23.104.0.1:33084 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:45:07.985 00:05:55.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 17:45:07.987 00:05:55.686 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 17:50:35.666 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35648 10 6452 1 2025-11-25 17:50:42.352 00:00:10.366 TCP 23.104.0.1:48950 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:51:35.883 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34912 10 6452 1 2025-11-25 17:51:42.756 00:00:10.377 TCP 23.104.0.1:37622 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:52:36.078 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:49980 10 6452 1 2025-11-25 17:52:49.634 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 17:52:49.567 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 17:52:43.173 00:00:10.367 TCP 23.104.0.1:32948 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:53:36.285 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35798 10 6452 1 2025-11-25 17:53:43.580 00:00:10.366 TCP 23.104.0.1:58984 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:54:36.497 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48202 10 6452 1 2025-11-25 17:54:43.983 00:00:10.369 TCP 23.104.0.1:55168 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:55:36.713 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40186 10 6452 1 2025-11-25 17:55:44.391 00:00:10.324 TCP 23.104.0.1:40386 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:51:07.988 00:05:55.689 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 17:51:07.985 00:05:55.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 17:56:36.900 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38900 10 6452 1 2025-11-25 17:56:44.753 00:00:10.388 TCP 23.104.0.1:58806 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:57:37.114 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52854 10 6452 1 2025-11-25 17:57:49.716 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 17:57:49.523 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 17:57:45.176 00:00:10.370 TCP 23.104.0.1:43988 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:58:37.329 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40652 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1084, avg pps: 0, avg bpp: 319 Time window: 2025-11-25 16:57:07 - 2025-11-25 17:58:47 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0055s User: 0.0016s Wall: 0.0031s flows/second: 52699.6 Runtime: 0.0031s