Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 17:58:45.585 00:00:10.359 TCP 23.104.0.1:35716 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:59:37.540 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52008 10 6452 1 2025-11-25 17:59:45.981 00:00:10.322 TCP 23.104.0.1:54144 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:00:37.758 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46492 10 6452 1 2025-11-25 18:00:46.344 00:00:10.364 TCP 23.104.0.1:44816 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:01:37.974 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:54328 10 6452 1 2025-11-25 17:57:07.990 00:05:55.691 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 18:01:46.749 00:00:10.316 TCP 23.104.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-11-25 17:57:07.988 00:05:55.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 18:02:49.771 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 18:02:38.160 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46832 10 6452 1 2025-11-25 18:02:49.775 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 18:02:47.111 00:00:10.361 TCP 23.104.0.1:39266 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:03:38.371 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45178 10 6452 1 2025-11-25 18:03:47.511 00:00:10.363 TCP 23.104.0.1:48060 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:04:38.594 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46486 10 6452 1 2025-11-25 18:04:47.912 00:00:10.366 TCP 23.104.0.1:51730 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:05:38.804 00:00:10.973 TCP 1.101.0.1:3000 -> 22.102.0.1:35084 10 6452 1 2025-11-25 18:05:48.319 00:00:10.366 TCP 23.104.0.1:33274 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:06:39.825 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50896 10 6452 1 2025-11-25 18:06:48.722 00:00:10.322 TCP 23.104.0.1:52136 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:07:49.688 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 18:07:40.054 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42440 10 6452 1 2025-11-25 18:07:49.691 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 18:07:49.108 00:00:10.314 TCP 23.104.0.1:42388 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:03:07.991 00:05:55.691 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 18:03:07.989 00:05:55.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 18:08:40.264 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48230 10 6452 1 2025-11-25 18:08:49.469 00:00:10.371 TCP 23.104.0.1:37450 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:09:40.479 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39856 10 6452 1 2025-11-25 18:09:49.871 00:00:10.366 TCP 23.104.0.1:35592 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:10:40.699 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:44898 10 6452 1 2025-11-25 18:10:50.281 00:00:10.373 TCP 23.104.0.1:48628 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:11:40.905 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48010 12 10375 1 2025-11-25 18:11:50.698 00:00:10.439 TCP 23.104.0.1:36714 -> 1.101.0.1:3000 15 1926 1 2025-11-25 18:12:41.140 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55210 10 6452 1 2025-11-25 18:12:49.998 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 18:12:50.170 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 18:12:51.176 00:00:10.367 TCP 23.104.0.1:34508 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:13:41.354 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42802 10 6452 1 2025-11-25 18:09:07.993 00:05:55.690 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 18:13:51.579 00:00:10.362 TCP 23.104.0.1:51974 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:09:07.990 00:05:55.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 18:14:41.564 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60382 10 6452 1 2025-11-25 18:14:51.982 00:00:10.375 TCP 23.104.0.1:60138 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:15:41.775 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46304 10 6452 1 2025-11-25 18:15:52.415 00:00:10.369 TCP 23.104.0.1:34938 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:16:41.987 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58904 10 6452 1 2025-11-25 18:16:52.820 00:00:10.357 TCP 23.104.0.1:33380 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:17:49.831 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 18:17:49.985 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 18:17:42.207 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33180 10 6452 1 2025-11-25 18:17:53.217 00:00:10.369 TCP 23.104.0.1:50806 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:18:42.420 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51040 10 6452 1 2025-11-25 18:18:53.621 00:00:10.321 TCP 23.104.0.1:55446 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:19:42.630 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53262 10 6452 1 2025-11-25 18:15:07.993 00:05:55.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 18:19:53.983 00:00:10.367 TCP 23.104.0.1:45760 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:15:07.995 00:05:55.689 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 18:20:42.841 00:00:15.854 TCP 1.101.0.1:3000 -> 22.102.0.1:59234 10 6452 1 2025-11-25 18:20:54.394 00:00:10.360 TCP 23.104.0.1:38566 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:21:48.738 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53480 10 6452 1 2025-11-25 18:21:54.795 00:00:10.365 TCP 23.104.0.1:53798 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:22:50.133 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 18:22:50.092 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 18:22:48.957 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55726 10 6452 1 2025-11-25 18:22:55.199 00:00:10.364 TCP 23.104.0.1:33696 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:23:49.183 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33324 10 6452 1 2025-11-25 18:23:55.602 00:00:10.362 TCP 23.104.0.1:50972 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:24:49.404 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58974 12 6556 1 2025-11-25 18:24:56.002 00:00:10.323 TCP 23.104.0.1:36148 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:21:07.996 00:05:00.004 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 667 1 2025-11-25 18:25:49.626 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36748 10 6452 1 2025-11-25 18:25:56.357 00:00:10.364 TCP 23.104.0.1:40218 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:21:07.993 00:05:55.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 18:26:49.840 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33870 10 6452 1 2025-11-25 18:26:56.762 00:00:10.378 TCP 23.104.0.1:44226 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:27:50.239 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 18:27:50.006 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 18:27:50.078 00:00:10.265 TCP 1.101.0.1:3000 -> 22.102.0.1:45000 10 6452 1 2025-11-25 18:27:57.180 00:00:10.366 TCP 23.104.0.1:37018 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:28:50.380 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35076 10 6452 1 2025-11-25 18:28:57.585 00:00:10.365 TCP 23.104.0.1:52736 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:29:50.600 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43544 10 6452 1 2025-11-25 18:29:57.991 00:00:10.366 TCP 23.104.0.1:49972 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:30:50.815 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55264 10 6452 1 2025-11-25 18:30:58.423 00:00:10.367 TCP 23.104.0.1:56210 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:27:03.688 00:05:04.313 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 18:31:51.046 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32848 10 6452 1 2025-11-25 18:27:07.998 00:05:55.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 18:31:58.830 00:00:10.383 TCP 23.104.0.1:49492 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:32:50.757 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 18:32:50.632 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 18:32:51.258 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45756 10 6452 1 2025-11-25 18:32:59.253 00:00:10.365 TCP 23.104.0.1:35892 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:33:51.476 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:37384 10 6452 1 2025-11-25 18:33:59.656 00:00:10.373 TCP 23.104.0.1:40360 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:34:51.718 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57826 10 6452 1 2025-11-25 18:35:00.086 00:00:20.073 TCP 23.104.0.1:52386 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:35:51.954 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34368 10 6452 1 2025-11-25 18:36:10.202 00:00:10.370 TCP 23.104.0.1:55636 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:36:52.182 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48504 10 6452 1 2025-11-25 18:33:07.998 00:05:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 686 1 2025-11-25 18:33:03.688 00:05:04.314 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 18:37:10.611 00:00:10.374 TCP 23.104.0.1:45036 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:37:50.277 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 18:37:50.353 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 18:37:52.358 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39626 10 6452 1 2025-11-25 18:38:11.024 00:00:10.359 TCP 23.104.0.1:54954 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:38:52.565 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44826 10 6452 1 2025-11-25 18:39:11.424 00:00:10.366 TCP 23.104.0.1:37700 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:39:52.786 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48464 10 6452 1 2025-11-25 18:40:11.835 00:00:10.387 TCP 23.104.0.1:37640 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:40:53.011 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35904 10 6452 1 2025-11-25 18:41:12.267 00:00:10.360 TCP 23.104.0.1:52482 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:41:53.230 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34914 10 6452 1 2025-11-25 18:42:12.669 00:00:10.483 TCP 23.104.0.1:57754 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:42:50.353 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 18:42:50.400 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 18:42:53.459 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46712 10 6452 1 2025-11-25 18:39:03.691 00:05:04.312 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 18:39:03.694 00:05:04.307 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 18:43:13.190 00:00:10.360 TCP 23.104.0.1:41928 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:43:53.683 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60528 10 6452 1 2025-11-25 18:44:13.589 00:00:10.362 TCP 23.104.0.1:49254 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:44:53.908 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50456 10 6452 1 2025-11-25 18:45:13.993 00:00:10.368 TCP 23.104.0.1:54986 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:45:54.123 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41194 10 6452 1 2025-11-25 18:46:14.398 00:00:10.422 TCP 23.104.0.1:37882 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:46:54.344 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51838 10 6452 1 2025-11-25 18:47:14.858 00:00:10.377 TCP 23.104.0.1:35452 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:47:50.879 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 18:47:50.799 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 18:47:54.552 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44814 10 6452 1 2025-11-25 18:48:15.274 00:00:10.361 TCP 23.104.0.1:53570 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:48:54.766 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51562 10 6452 1 2025-11-25 18:45:03.700 00:05:04.302 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 18:45:03.698 00:05:04.307 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 18:49:15.673 00:00:10.374 TCP 23.104.0.1:50290 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:49:54.990 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36110 10 6452 1 2025-11-25 18:50:16.107 00:00:10.734 TCP 23.104.0.1:40464 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:50:55.215 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58854 10 6452 1 2025-11-25 18:51:16.881 00:00:10.364 TCP 23.104.0.1:50828 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:51:55.453 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42480 10 6452 1 2025-11-25 18:52:17.289 00:00:10.363 TCP 23.104.0.1:40442 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:52:50.842 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 18:52:50.910 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 18:52:55.674 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41858 10 6452 1 2025-11-25 18:53:17.692 00:00:10.317 TCP 23.104.0.1:49360 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:53:55.898 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:38068 10 6452 1 2025-11-25 18:54:18.058 00:00:10.366 TCP 23.104.0.1:37862 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:54:56.086 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43124 10 6452 1 2025-11-25 18:51:03.699 00:05:04.337 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 18:51:03.702 00:05:04.332 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 18:55:18.461 00:00:10.365 TCP 23.104.0.1:60522 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:55:56.302 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41234 10 6452 1 2025-11-25 18:56:18.866 00:00:10.368 TCP 23.104.0.1:58544 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:56:56.511 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41430 10 6452 1 2025-11-25 18:57:19.272 00:00:10.320 TCP 23.104.0.1:39208 -> 1.101.0.1:3000 11 1507 1 2025-11-25 18:57:50.858 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 18:57:50.834 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 18:57:56.725 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43100 10 6452 1 2025-11-25 18:58:19.626 00:00:10.368 TCP 23.104.0.1:58642 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496219, total packets: 1568, avg bps: 1078, avg pps: 0, avg bpp: 316 Time window: 2025-11-25 17:57:07 - 2025-11-25 18:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0043s User: 0.0011s Wall: 0.0025s flows/second: 65018.7 Runtime: 0.0025s