Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 01:59:23.771 00:00:10.326 TCP 23.104.0.1:32832 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:59:40.647 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47920 10 6452 1 2025-11-26 02:00:24.134 00:00:10.325 TCP 23.104.0.1:52102 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:00:40.859 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:38980 10 6452 1 2025-11-26 01:57:03.814 00:05:04.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 01:57:03.815 00:05:04.395 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 02:01:24.506 00:00:10.323 TCP 23.104.0.1:47410 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:01:41.095 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59760 10 6452 1 2025-11-26 02:02:24.863 00:00:10.372 TCP 23.104.0.1:40734 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:02:41.310 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50920 10 6452 1 2025-11-26 02:02:59.412 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 02:02:59.363 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:03:25.268 00:00:10.361 TCP 23.104.0.1:43350 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:03:41.524 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41382 10 6452 1 2025-11-26 02:04:25.675 00:00:10.374 TCP 23.104.0.1:53212 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:04:41.741 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38934 10 6452 1 2025-11-26 02:05:26.098 00:00:10.369 TCP 23.104.0.1:33840 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:05:41.948 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37744 10 6452 1 2025-11-26 02:06:26.505 00:00:10.369 TCP 23.104.0.1:35588 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:06:42.177 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53570 10 6452 1 2025-11-26 02:03:03.816 00:05:04.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 02:03:03.819 00:05:04.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 02:07:26.919 00:00:10.383 TCP 23.104.0.1:42960 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:07:42.392 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42688 10 6452 1 2025-11-26 02:07:59.422 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 02:07:59.152 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:08:27.338 00:00:10.360 TCP 23.104.0.1:46082 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:08:42.607 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46074 10 6452 1 2025-11-26 02:09:27.738 00:00:10.370 TCP 23.104.0.1:35820 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:09:42.781 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:57908 10 6452 1 2025-11-26 02:10:28.149 00:00:10.364 TCP 23.104.0.1:41976 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:10:43.080 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36404 10 6452 1 2025-11-26 02:11:28.553 00:00:10.364 TCP 23.104.0.1:58570 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:11:43.299 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52552 10 6452 1 2025-11-26 02:12:28.954 00:00:10.366 TCP 23.104.0.1:58180 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:12:43.513 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36004 10 6452 1 2025-11-26 02:12:59.523 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:12:59.533 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 02:09:03.820 00:05:04.395 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 02:09:03.819 00:05:04.400 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 02:13:29.359 00:00:10.320 TCP 23.104.0.1:39988 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:13:43.684 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55050 10 6452 1 2025-11-26 02:14:29.723 00:00:10.378 TCP 23.104.0.1:57372 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:14:43.898 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58596 10 6452 1 2025-11-26 02:15:30.140 00:00:10.369 TCP 23.104.0.1:39316 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:15:44.115 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54028 10 6452 1 2025-11-26 02:16:30.546 00:00:10.327 TCP 23.104.0.1:55254 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:16:44.327 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35830 10 6452 1 2025-11-26 02:17:30.906 00:00:10.328 TCP 23.104.0.1:45300 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:17:44.546 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46336 10 6452 1 2025-11-26 02:17:59.562 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:17:59.400 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 02:18:31.284 00:00:10.361 TCP 23.104.0.1:45996 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:18:44.728 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:58250 10 6452 1 2025-11-26 02:15:03.820 00:05:04.401 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 02:15:03.823 00:05:04.396 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 02:19:31.693 00:00:10.366 TCP 23.104.0.1:45632 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:19:44.916 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:57420 10 6452 1 2025-11-26 02:20:32.101 00:00:10.366 TCP 23.104.0.1:58294 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:20:45.100 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60166 10 6452 1 2025-11-26 02:21:32.507 00:00:10.323 TCP 23.104.0.1:43930 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:21:45.272 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51974 10 6452 1 2025-11-26 02:22:32.877 00:00:10.890 TCP 23.104.0.1:44324 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:22:45.478 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48136 10 6452 1 2025-11-26 02:22:59.647 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 02:22:59.489 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:23:33.805 00:00:10.361 TCP 23.104.0.1:39162 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:23:45.689 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47506 10 6452 1 2025-11-26 02:24:34.204 00:00:10.324 TCP 23.104.0.1:56684 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:24:45.900 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52378 10 6452 1 2025-11-26 02:21:03.820 00:05:04.401 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 02:21:03.823 00:05:04.396 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 02:25:34.568 00:00:10.323 TCP 23.104.0.1:48902 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:25:46.120 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53928 10 6452 1 2025-11-26 02:26:34.928 00:00:10.390 TCP 23.104.0.1:41848 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:26:46.327 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43364 10 6452 1 2025-11-26 02:27:35.358 00:00:10.324 TCP 23.104.0.1:56772 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:27:46.547 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 10 6452 1 2025-11-26 02:27:59.888 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 02:27:59.610 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:28:35.725 00:00:10.372 TCP 23.104.0.1:39204 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:28:46.780 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59378 10 6452 1 2025-11-26 02:29:36.132 00:00:10.360 TCP 23.104.0.1:54818 -> 1.101.0.1:3000 12 1559 1 2025-11-26 02:29:46.993 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40224 10 6452 1 2025-11-26 02:30:36.532 00:00:10.378 TCP 23.104.0.1:40632 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:30:47.214 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42022 10 6452 1 2025-11-26 02:27:03.825 00:05:04.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 02:27:03.823 00:05:04.400 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 02:31:36.951 00:00:10.332 TCP 23.104.0.1:42810 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:31:47.427 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42846 10 6452 1 2025-11-26 02:32:37.321 00:00:10.362 TCP 23.104.0.1:58816 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:32:47.636 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34358 10 6452 1 2025-11-26 02:32:59.951 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 02:32:59.923 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:33:37.722 00:00:10.372 TCP 23.104.0.1:47002 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:33:47.856 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57564 10 6452 1 2025-11-26 02:34:38.133 00:00:10.368 TCP 23.104.0.1:52024 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:34:48.086 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53756 10 6452 1 2025-11-26 02:35:38.541 00:00:10.364 TCP 23.104.0.1:51782 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:35:48.298 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47190 10 6452 1 2025-11-26 02:36:38.944 00:00:10.373 TCP 23.104.0.1:42154 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:36:48.470 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53874 10 6452 1 2025-11-26 02:33:03.824 00:05:04.399 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 02:33:03.822 00:05:04.403 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 02:37:39.361 00:00:10.363 TCP 23.104.0.1:49704 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:38:00.269 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:37:48.682 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46380 10 6452 1 2025-11-26 02:38:00.192 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 02:38:39.761 00:00:10.371 TCP 23.104.0.1:36908 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:38:48.901 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52048 10 6452 1 2025-11-26 02:39:40.171 00:00:10.364 TCP 23.104.0.1:35210 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:39:49.110 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:58548 10 6452 1 2025-11-26 02:40:40.575 00:00:10.369 TCP 23.104.0.1:49942 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:40:49.291 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36622 10 6452 1 2025-11-26 02:41:40.980 00:00:10.442 TCP 23.104.0.1:37184 -> 1.101.0.1:3000 15 1926 1 2025-11-26 02:41:49.497 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:58382 12 10375 1 2025-11-26 02:42:41.458 00:00:10.374 TCP 23.104.0.1:52034 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:42:49.744 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33200 10 6452 1 2025-11-26 02:43:00.229 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 02:43:00.214 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:39:03.823 00:05:04.406 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 02:39:03.827 00:05:04.400 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 02:43:41.868 00:00:10.329 TCP 23.104.0.1:34108 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:43:49.957 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:41056 10 6452 1 2025-11-26 02:44:42.234 00:00:10.362 TCP 23.104.0.1:48478 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:44:50.228 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54948 10 6452 1 2025-11-26 02:45:42.644 00:00:10.325 TCP 23.104.0.1:42058 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:45:50.441 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36196 10 6452 1 2025-11-26 02:46:43.011 00:00:10.367 TCP 23.104.0.1:48824 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:46:50.651 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49018 10 6452 1 2025-11-26 02:47:43.415 00:00:10.366 TCP 23.104.0.1:33598 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:48:00.245 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:47:50.860 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37880 10 6452 1 2025-11-26 02:47:59.922 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 02:48:43.822 00:00:10.364 TCP 23.104.0.1:40140 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:48:51.079 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40234 10 6452 1 2025-11-26 02:45:03.824 00:05:04.406 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 02:45:03.826 00:05:04.401 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 02:49:44.227 00:00:10.365 TCP 23.104.0.1:44318 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:49:51.291 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59904 10 6452 1 2025-11-26 02:50:44.636 00:00:10.368 TCP 23.104.0.1:42322 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:50:51.509 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44344 10 6452 1 2025-11-26 02:51:45.054 00:00:10.369 TCP 23.104.0.1:46608 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:51:51.733 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39442 10 6452 1 2025-11-26 02:52:45.462 00:00:10.328 TCP 23.104.0.1:60960 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:53:00.354 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 02:53:00.422 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:52:51.950 00:00:10.814 TCP 1.101.0.1:3000 -> 22.102.0.1:44370 10 6452 1 2025-11-26 02:53:45.828 00:00:10.384 TCP 23.104.0.1:53434 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:53:52.799 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56992 10 6452 1 2025-11-26 02:54:46.252 00:00:10.384 TCP 23.104.0.1:51990 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:54:53.028 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:38190 10 6452 1 2025-11-26 02:51:03.827 00:05:04.404 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 02:51:03.830 00:05:04.399 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 02:55:46.678 00:00:11.092 TCP 23.104.0.1:41910 -> 1.101.0.1:3000 13 1611 1 2025-11-26 02:55:53.197 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60410 10 6452 1 2025-11-26 02:56:47.814 00:00:10.323 TCP 23.104.0.1:33470 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:56:53.415 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58822 10 6452 1 2025-11-26 02:58:00.445 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 02:58:00.434 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 02:57:48.183 00:00:10.367 TCP 23.104.0.1:40740 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:57:53.638 00:00:10.623 TCP 1.101.0.1:3000 -> 22.102.0.1:38342 10 6452 1 Summary: total flows: 162, total bytes: 494887, total packets: 1560, avg bps: 1081, avg pps: 0, avg bpp: 317 Time window: 2025-11-26 01:57:03 - 2025-11-26 02:58:04 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0038s User: 0.0019s Wall: 0.0018s flows/second: 91425.9 Runtime: 0.0018s