Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 22:59:00.501 00:00:10.320 TCP 23.104.0.1:59706 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:58:58.675 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43676 10 6452 1 2025-11-25 23:00:00.859 00:00:10.379 TCP 23.104.0.1:35536 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:59:58.885 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49076 10 6452 1 2025-11-25 23:01:01.276 00:00:10.361 TCP 23.104.0.1:56630 -> 1.101.0.1:3000 11 1507 1 2025-11-25 22:57:03.770 00:05:04.360 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 23:00:59.074 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52224 10 6452 1 2025-11-25 22:57:03.768 00:05:04.366 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 23:01:59.287 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33942 10 6452 1 2025-11-25 23:02:01.678 00:00:10.366 TCP 23.104.0.1:57374 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:02:55.854 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 23:02:55.498 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 23:02:59.497 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36350 10 6452 1 2025-11-25 23:03:02.105 00:00:10.966 TCP 23.104.0.1:54308 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:03:59.725 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42010 10 6452 1 2025-11-25 23:04:03.111 00:00:10.365 TCP 23.104.0.1:35262 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:04:59.938 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:50640 10 6452 1 2025-11-25 23:05:03.518 00:00:10.365 TCP 23.104.0.1:41920 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:06:00.179 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59648 10 6452 1 2025-11-25 23:06:03.924 00:00:10.386 TCP 23.104.0.1:60460 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:07:00.388 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42934 10 6452 1 2025-11-25 23:03:03.770 00:05:04.364 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 23:03:03.772 00:05:04.359 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 23:07:04.351 00:00:10.328 TCP 23.104.0.1:56464 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:07:55.809 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 23:07:55.861 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 23:08:00.603 00:00:10.783 TCP 1.101.0.1:3000 -> 22.102.0.1:40056 10 6452 1 2025-11-25 23:08:04.724 00:00:10.374 TCP 23.104.0.1:42920 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:09:01.425 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60958 10 6452 1 2025-11-25 23:09:05.137 00:00:10.332 TCP 23.104.0.1:38506 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:10:01.642 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38524 10 6452 1 2025-11-25 23:10:05.502 00:00:10.368 TCP 23.104.0.1:49744 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:11:05.908 00:00:10.365 TCP 23.104.0.1:33310 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:11:01.871 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57018 10 6452 1 2025-11-25 23:12:06.312 00:00:10.371 TCP 23.104.0.1:34988 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:12:02.099 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45228 10 6452 1 2025-11-25 23:12:55.878 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 23:12:55.970 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 23:09:03.773 00:05:04.360 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 23:09:03.771 00:05:04.365 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 23:13:02.312 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33178 10 6452 1 2025-11-25 23:13:06.718 00:00:10.326 TCP 23.104.0.1:48570 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:14:02.521 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51048 10 6452 1 2025-11-25 23:14:07.102 00:00:10.379 TCP 23.104.0.1:43134 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:15:02.696 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54902 10 6452 1 2025-11-25 23:15:07.521 00:00:10.367 TCP 23.104.0.1:53262 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:16:02.869 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41564 10 6452 1 2025-11-25 23:16:07.923 00:00:10.380 TCP 23.104.0.1:34998 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:17:03.084 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54170 10 6452 1 2025-11-25 23:17:08.350 00:00:10.623 TCP 23.104.0.1:38050 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:17:56.039 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 23:17:56.079 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 23:18:03.312 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43810 10 6452 1 2025-11-25 23:18:09.022 00:00:10.363 TCP 23.104.0.1:33194 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:15:03.774 00:05:04.377 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 23:15:03.773 00:05:04.381 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 23:19:03.529 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47668 10 6452 1 2025-11-25 23:19:09.424 00:00:10.384 TCP 23.104.0.1:50266 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:20:03.744 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49948 10 6452 1 2025-11-25 23:20:09.848 00:00:10.382 TCP 23.104.0.1:40146 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:21:03.969 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:38824 10 6452 1 2025-11-25 23:21:10.269 00:00:10.363 TCP 23.104.0.1:50686 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:22:04.211 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56710 10 6452 1 2025-11-25 23:22:10.673 00:00:10.382 TCP 23.104.0.1:58046 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:22:56.243 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 23:22:56.252 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 23:23:04.418 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55910 10 6452 1 2025-11-25 23:23:11.101 00:00:10.321 TCP 23.104.0.1:40736 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:24:04.594 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54030 10 6452 1 2025-11-25 23:24:11.461 00:00:10.371 TCP 23.104.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:21:03.775 00:05:04.380 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 23:21:03.777 00:05:04.375 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 23:25:04.808 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43034 10 6452 1 2025-11-25 23:25:11.871 00:00:10.365 TCP 23.104.0.1:47322 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:26:05.030 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37220 10 6452 1 2025-11-25 23:26:12.270 00:00:10.366 TCP 23.104.0.1:57934 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:27:05.248 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:60204 10 6452 1 2025-11-25 23:27:12.675 00:00:10.331 TCP 23.104.0.1:41996 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:27:56.252 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 23:27:56.030 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 23:28:05.437 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53738 10 6452 1 2025-11-25 23:28:13.063 00:00:10.364 TCP 23.104.0.1:59258 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:29:05.619 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:49788 10 6452 1 2025-11-25 23:29:13.462 00:00:10.324 TCP 23.104.0.1:47464 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:30:05.806 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42950 10 6452 1 2025-11-25 23:30:13.826 00:00:10.380 TCP 23.104.0.1:38192 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:27:03.779 00:05:04.381 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 23:27:03.776 00:05:04.386 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 23:31:06.028 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42432 10 6452 1 2025-11-25 23:31:14.248 00:00:10.366 TCP 23.104.0.1:52878 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:32:06.242 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41074 10 6452 1 2025-11-25 23:32:14.657 00:00:10.372 TCP 23.104.0.1:40250 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:32:56.495 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 23:32:56.167 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 23:33:06.417 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6452 1 2025-11-25 23:33:15.083 00:00:10.367 TCP 23.104.0.1:53484 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:34:06.594 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60522 10 6452 1 2025-11-25 23:34:15.486 00:00:10.363 TCP 23.104.0.1:48730 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:35:06.807 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49886 10 6452 1 2025-11-25 23:35:15.887 00:00:10.367 TCP 23.104.0.1:46080 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:36:07.029 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41758 10 6452 1 2025-11-25 23:36:16.299 00:00:10.360 TCP 23.104.0.1:39432 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:33:03.780 00:05:04.382 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 23:33:03.779 00:05:04.386 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 23:37:07.243 00:00:10.664 TCP 1.101.0.1:3000 -> 22.102.0.1:54068 10 6452 1 2025-11-25 23:37:16.696 00:00:10.628 TCP 23.104.0.1:46092 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:37:56.514 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 23:37:56.381 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 23:38:07.942 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:47052 10 6452 1 2025-11-25 23:38:17.374 00:00:10.362 TCP 23.104.0.1:59274 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:39:08.130 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47890 10 6452 1 2025-11-25 23:39:17.787 00:00:10.360 TCP 23.104.0.1:42442 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:40:08.344 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53114 10 6452 1 2025-11-25 23:40:18.186 00:00:10.360 TCP 23.104.0.1:41046 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:41:08.559 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47878 10 6452 1 2025-11-25 23:41:18.584 00:00:13.409 TCP 23.104.0.1:54810 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:42:08.768 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57876 10 6452 1 2025-11-25 23:42:22.103 00:00:10.326 TCP 23.104.0.1:57288 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:42:56.555 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 23:42:57.083 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 23:39:03.780 00:05:04.385 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 23:39:03.781 00:05:04.381 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 23:43:08.946 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47744 10 6452 1 2025-11-25 23:43:22.465 00:00:10.360 TCP 23.104.0.1:34106 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:44:09.172 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34508 10 6452 1 2025-11-25 23:44:22.866 00:00:10.368 TCP 23.104.0.1:37952 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:45:09.384 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34198 10 6452 1 2025-11-25 23:45:23.272 00:00:14.142 TCP 23.104.0.1:45348 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:46:09.600 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34120 10 6452 1 2025-11-25 23:46:27.449 00:00:10.365 TCP 23.104.0.1:34984 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:47:09.810 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54230 10 6452 1 2025-11-25 23:47:27.850 00:00:10.336 TCP 23.104.0.1:36444 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:47:56.532 00:00:00.016 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 23:47:56.347 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 23:48:10.034 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42956 10 6452 1 2025-11-25 23:48:28.229 00:00:10.364 TCP 23.104.0.1:38268 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:45:03.783 00:05:04.385 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 23:45:03.781 00:05:04.390 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 23:49:10.273 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45880 10 6452 1 2025-11-25 23:49:28.637 00:00:10.360 TCP 23.104.0.1:51046 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:50:10.502 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39160 10 6452 1 2025-11-25 23:50:29.060 00:00:10.365 TCP 23.104.0.1:48318 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:51:10.679 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:40636 12 10375 1 2025-11-25 23:51:29.462 00:00:10.437 TCP 23.104.0.1:33360 -> 1.101.0.1:3000 15 1926 1 2025-11-25 23:52:10.933 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:39542 10 6452 1 2025-11-25 23:52:29.934 00:00:10.377 TCP 23.104.0.1:37328 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:52:56.723 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 23:52:56.724 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 23:53:11.174 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49618 10 6452 1 2025-11-25 23:53:30.354 00:00:10.359 TCP 23.104.0.1:39838 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:54:11.389 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35480 10 6452 1 2025-11-25 23:54:30.750 00:00:10.391 TCP 23.104.0.1:40814 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:51:03.783 00:05:04.387 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 23:51:03.781 00:05:04.391 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 23:55:11.597 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47540 10 6452 1 2025-11-25 23:55:31.183 00:00:10.363 TCP 23.104.0.1:54212 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:56:11.808 00:00:10.856 TCP 1.101.0.1:3000 -> 22.102.0.1:47208 12 10369 1 2025-11-25 23:56:31.594 00:00:10.451 TCP 23.104.0.1:51344 -> 1.101.0.1:3000 15 1926 1 2025-11-25 23:57:12.707 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57526 10 6452 1 2025-11-25 23:57:32.110 00:00:10.325 TCP 23.104.0.1:34100 -> 1.101.0.1:3000 11 1507 1 2025-11-25 23:57:56.609 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 23:57:56.934 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 23:58:12.942 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:41318 10 6452 1 2025-11-25 23:58:32.474 00:00:10.364 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507026, total packets: 1584, avg bps: 1096, avg pps: 0, avg bpp: 320 Time window: 2025-11-25 22:57:03 - 2025-11-25 23:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0052s User: 0.0010s Wall: 0.0022s flows/second: 74476.6 Runtime: 0.0022s