Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 19:58:43.794 00:00:10.360 TCP 23.104.0.1:34544 -> 1.101.0.1:3000 11 1507 1 2025-11-25 19:59:11.041 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56540 10 6452 1 2025-11-25 19:59:44.196 00:00:10.362 TCP 23.104.0.1:56208 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:00:11.249 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55790 10 6452 1 2025-11-25 20:00:44.595 00:00:10.326 TCP 23.104.0.1:48644 -> 1.101.0.1:3000 11 1507 1 2025-11-25 19:57:03.718 00:05:04.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 19:57:03.721 00:05:04.340 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:01:11.462 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40418 10 6452 1 2025-11-25 20:01:44.958 00:00:10.365 TCP 23.104.0.1:46750 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:02:11.672 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57174 10 6452 1 2025-11-25 20:02:52.464 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:02:52.200 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:02:45.364 00:00:10.370 TCP 23.104.0.1:40072 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:03:11.881 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48500 10 6452 1 2025-11-25 20:03:45.767 00:00:10.364 TCP 23.104.0.1:53204 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:04:12.109 00:00:11.046 TCP 1.101.0.1:3000 -> 22.102.0.1:56736 10 6452 1 2025-11-25 20:04:46.170 00:00:10.320 TCP 23.104.0.1:58746 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:05:13.189 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51170 10 6452 1 2025-11-25 20:05:46.532 00:00:10.366 TCP 23.104.0.1:57878 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:06:13.408 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:47138 10 6452 1 2025-11-25 20:06:46.935 00:00:10.382 TCP 23.104.0.1:40594 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:03:03.722 00:05:04.341 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:03:03.719 00:05:04.346 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:07:13.627 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44822 10 6452 1 2025-11-25 20:07:51.988 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:07:52.258 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:07:47.356 00:00:10.326 TCP 23.104.0.1:55772 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:08:13.855 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42142 10 6452 1 2025-11-25 20:08:47.722 00:00:10.387 TCP 23.104.0.1:38574 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:09:14.089 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44786 10 6452 1 2025-11-25 20:09:48.147 00:00:10.369 TCP 23.104.0.1:48136 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:10:14.309 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58238 10 6452 1 2025-11-25 20:10:48.554 00:00:10.321 TCP 23.104.0.1:44070 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:11:14.536 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44886 10 6452 1 2025-11-25 20:11:48.912 00:00:10.378 TCP 23.104.0.1:50426 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:12:14.753 00:00:10.776 TCP 1.101.0.1:3000 -> 22.102.0.1:40754 11 6504 1 2025-11-25 20:12:52.348 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:12:52.297 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:12:49.322 00:00:11.047 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:09:03.723 00:05:04.341 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:09:03.720 00:05:04.346 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:13:15.572 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43596 10 6452 1 2025-11-25 20:13:50.417 00:00:10.321 TCP 23.104.0.1:46930 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:14:15.745 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52238 10 6452 1 2025-11-25 20:14:50.778 00:00:10.366 TCP 23.104.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:15:15.963 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34894 12 6556 1 2025-11-25 20:15:51.191 00:00:10.364 TCP 23.104.0.1:39374 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:16:16.196 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33176 10 6452 1 2025-11-25 20:16:51.591 00:00:10.331 TCP 23.104.0.1:39060 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:17:16.406 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-11-25 20:17:52.372 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:17:52.428 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:17:51.965 00:00:10.336 TCP 23.104.0.1:34774 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:18:16.618 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58556 10 6452 1 2025-11-25 20:18:52.338 00:00:10.322 TCP 23.104.0.1:49596 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:15:03.727 00:05:04.342 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:15:03.728 00:05:04.338 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:19:16.830 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56862 10 6452 1 2025-11-25 20:19:52.696 00:00:10.372 TCP 23.104.0.1:36356 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:20:17.070 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33400 10 6452 1 2025-11-25 20:20:53.106 00:00:10.373 TCP 23.104.0.1:55438 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:21:17.283 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44008 10 6452 1 2025-11-25 20:21:53.519 00:00:10.371 TCP 23.104.0.1:52096 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:22:17.497 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57214 10 6452 1 2025-11-25 20:22:52.590 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:22:52.601 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:22:53.929 00:00:10.329 TCP 23.104.0.1:34148 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:23:17.709 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33022 10 6452 1 2025-11-25 20:23:54.296 00:00:10.375 TCP 23.104.0.1:50074 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:24:17.878 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47030 10 6452 1 2025-11-25 20:24:54.706 00:00:10.366 TCP 23.104.0.1:53000 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:21:03.727 00:05:04.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:21:03.725 00:05:04.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:25:18.100 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50864 10 6452 1 2025-11-25 20:25:55.109 00:00:10.363 TCP 23.104.0.1:50324 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:26:18.276 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54218 10 6452 1 2025-11-25 20:26:55.510 00:00:10.368 TCP 23.104.0.1:49156 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:27:18.504 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:37498 10 6452 1 2025-11-25 20:27:52.910 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:27:52.745 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:27:55.914 00:00:10.326 TCP 23.104.0.1:46802 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:28:18.688 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-11-25 20:28:56.272 00:00:10.367 TCP 23.104.0.1:47444 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:29:18.901 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33844 10 6452 1 2025-11-25 20:29:56.674 00:00:10.362 TCP 23.104.0.1:41612 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:30:19.116 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44014 10 6452 1 2025-11-25 20:27:03.727 00:05:04.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:27:03.730 00:05:04.340 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:30:57.104 00:00:10.362 TCP 23.104.0.1:53024 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:31:19.293 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41864 10 6452 1 2025-11-25 20:31:57.506 00:00:10.373 TCP 23.104.0.1:46040 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:32:19.483 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52222 10 6452 1 2025-11-25 20:32:52.634 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:32:52.587 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:32:57.917 00:00:10.385 TCP 23.104.0.1:45094 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:33:19.705 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38806 10 6452 1 2025-11-25 20:33:58.345 00:00:10.367 TCP 23.104.0.1:60456 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:34:19.934 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:59260 10 6452 1 2025-11-25 20:34:58.754 00:00:10.369 TCP 23.104.0.1:43774 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:35:20.180 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53388 10 6452 1 2025-11-25 20:35:59.166 00:00:10.320 TCP 23.104.0.1:44202 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:36:20.356 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35716 10 6452 1 2025-11-25 20:33:03.731 00:05:04.340 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:36:59.525 00:00:10.366 TCP 23.104.0.1:52572 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:33:03.729 00:05:04.345 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:37:20.585 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57742 10 6452 1 2025-11-25 20:37:52.923 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:37:53.004 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:37:59.929 00:00:10.381 TCP 23.104.0.1:54922 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:38:20.802 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41246 10 6452 1 2025-11-25 20:39:00.348 00:00:10.321 TCP 23.104.0.1:49248 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:39:21.032 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60702 10 6452 1 2025-11-25 20:40:00.718 00:00:10.381 TCP 23.104.0.1:47050 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:40:21.260 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55758 10 6452 1 2025-11-25 20:41:01.142 00:00:10.329 TCP 23.104.0.1:39258 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:41:21.473 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34866 10 6452 1 2025-11-25 20:42:01.530 00:00:10.365 TCP 23.104.0.1:56872 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:42:21.682 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46160 10 6452 1 2025-11-25 20:42:52.842 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:42:52.731 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:39:03.731 00:05:04.346 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:39:03.734 00:05:04.341 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:43:01.930 00:00:10.341 TCP 23.104.0.1:51434 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:43:21.893 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:53366 11 6504 1 2025-11-25 20:44:02.313 00:00:10.369 TCP 23.104.0.1:37792 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:44:22.165 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48548 10 6452 1 2025-11-25 20:45:02.720 00:00:10.378 TCP 23.104.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:45:22.331 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60542 10 6452 1 2025-11-25 20:46:03.125 00:00:10.365 TCP 23.104.0.1:34168 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:46:22.543 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-11-25 20:47:03.532 00:00:10.330 TCP 23.104.0.1:47496 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:47:22.768 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58464 10 6452 1 2025-11-25 20:47:53.156 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:47:52.760 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:48:03.906 00:00:10.324 TCP 23.104.0.1:44220 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:48:22.989 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:56328 10 6452 1 2025-11-25 20:45:03.730 00:05:04.352 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:45:03.733 00:05:04.347 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:49:04.266 00:00:10.367 TCP 23.104.0.1:56004 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:49:23.225 00:00:11.292 TCP 1.101.0.1:3000 -> 22.102.0.1:50694 10 6452 1 2025-11-25 20:50:04.671 00:00:10.361 TCP 23.104.0.1:42876 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:50:24.555 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44640 10 6452 1 2025-11-25 20:51:05.100 00:00:10.632 TCP 23.104.0.1:38240 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:51:24.771 00:00:11.002 TCP 1.101.0.1:3000 -> 22.102.0.1:33946 10 6452 1 2025-11-25 20:52:05.770 00:00:10.374 TCP 23.104.0.1:41564 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:52:25.810 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39528 10 6452 1 2025-11-25 20:52:52.888 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:52:53.153 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:53:06.183 00:00:10.829 TCP 23.104.0.1:48952 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:53:26.028 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55286 10 6452 1 2025-11-25 20:54:07.058 00:00:10.360 TCP 23.104.0.1:54600 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:54:26.273 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:42224 10 6452 1 2025-11-25 20:51:03.735 00:05:04.346 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 20:51:03.734 00:05:04.350 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 20:55:07.460 00:00:10.364 TCP 23.104.0.1:60048 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:55:26.523 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34944 10 6452 1 2025-11-25 20:56:07.858 00:00:10.449 TCP 23.104.0.1:58764 -> 1.101.0.1:3000 15 1926 1 2025-11-25 20:56:26.745 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:58860 12 10375 1 2025-11-25 20:57:08.348 00:00:10.357 TCP 23.104.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:57:26.984 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:60488 10 6452 1 2025-11-25 20:57:53.089 00:00:00.047 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 20:57:53.043 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 20:58:08.744 00:00:10.366 TCP 23.104.0.1:59888 -> 1.101.0.1:3000 11 1507 1 2025-11-25 20:58:27.179 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40170 10 6452 1 Summary: total flows: 164, total bytes: 502898, total packets: 1582, avg bps: 1089, avg pps: 0, avg bpp: 317 Time window: 2025-11-25 19:57:03 - 2025-11-25 20:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0026s User: 0.0017s Wall: 0.0023s flows/second: 72790.0 Runtime: 0.0023s