Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 02:58:48.589 00:00:10.368 TCP 23.104.0.1:44670 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:58:54.301 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56582 10 6452 1 2025-11-26 02:59:48.996 00:00:10.365 TCP 23.104.0.1:42382 -> 1.101.0.1:3000 11 1507 1 2025-11-26 02:59:54.513 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32796 10 6452 1 2025-11-26 03:00:49.406 00:00:10.366 TCP 23.104.0.1:54336 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:00:54.735 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39622 10 6452 1 2025-11-26 02:57:03.828 00:05:04.404 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 02:57:03.831 00:05:04.399 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 03:01:49.812 00:00:10.334 TCP 23.104.0.1:50670 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:01:54.946 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 2025-11-26 03:03:00.608 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 03:02:50.182 00:00:10.318 TCP 23.104.0.1:49598 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:03:00.528 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 03:02:55.179 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38830 10 6452 1 2025-11-26 03:03:50.539 00:00:10.375 TCP 23.104.0.1:55092 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:03:55.388 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37440 10 6452 1 2025-11-26 03:04:50.954 00:00:10.369 TCP 23.104.0.1:34648 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:04:55.598 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39196 10 6452 1 2025-11-26 03:05:51.371 00:00:10.377 TCP 23.104.0.1:52274 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:05:55.769 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57582 10 6452 1 2025-11-26 03:06:51.796 00:00:10.341 TCP 23.104.0.1:36056 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:06:55.984 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60824 10 6452 1 2025-11-26 03:03:03.830 00:05:04.403 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 03:03:03.832 00:05:04.398 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 03:08:00.571 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 03:08:00.419 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 03:07:52.173 00:00:10.370 TCP 23.104.0.1:54650 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:07:56.208 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57858 10 6452 1 2025-11-26 03:08:52.582 00:00:10.513 TCP 23.104.0.1:55078 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:08:56.425 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51034 10 6452 1 2025-11-26 03:09:56.636 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41860 10 6452 1 2025-11-26 03:09:53.134 00:00:10.368 TCP 23.104.0.1:53972 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:10:53.536 00:00:10.363 TCP 23.104.0.1:48224 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:10:56.868 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44240 10 6452 1 2025-11-26 03:11:53.937 00:00:10.376 TCP 23.104.0.1:40260 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:11:57.093 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45296 10 6452 1 2025-11-26 03:13:00.594 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 03:13:00.636 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 03:12:54.352 00:00:10.365 TCP 23.104.0.1:33108 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:12:57.308 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34778 10 6452 1 2025-11-26 03:09:03.832 00:05:04.402 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 03:09:03.835 00:05:04.397 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 03:13:54.765 00:00:10.379 TCP 23.104.0.1:60054 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:13:57.524 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41670 10 6452 1 2025-11-26 03:14:55.182 00:00:10.363 TCP 23.104.0.1:49602 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:14:57.696 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45288 10 6452 1 2025-11-26 03:15:55.583 00:00:10.372 TCP 23.104.0.1:46538 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:15:57.863 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:59832 10 6452 1 2025-11-26 03:16:55.997 00:00:10.381 TCP 23.104.0.1:51848 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:16:58.062 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41272 10 6452 1 2025-11-26 03:18:00.861 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 03:18:00.950 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 03:17:56.422 00:00:10.372 TCP 23.104.0.1:49098 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:17:58.272 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45306 10 6452 1 2025-11-26 03:15:03.839 00:05:04.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 03:18:56.830 00:00:10.392 TCP 23.104.0.1:35190 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:18:58.488 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58402 10 6452 1 2025-11-26 03:15:03.836 00:05:04.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 03:19:57.262 00:00:10.327 TCP 23.104.0.1:58166 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:19:58.657 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36660 10 6452 1 2025-11-26 03:20:57.635 00:00:10.368 TCP 23.104.0.1:42860 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:20:58.876 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42534 10 6452 1 2025-11-26 03:21:58.048 00:00:10.364 TCP 23.104.0.1:60526 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:21:59.104 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57994 10 6452 1 2025-11-26 03:23:00.913 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 03:23:00.977 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 03:22:58.449 00:00:10.324 TCP 23.104.0.1:34988 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:22:59.317 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44928 10 6452 1 2025-11-26 03:23:58.814 00:00:10.331 TCP 23.104.0.1:54948 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:23:59.530 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55460 10 6452 1 2025-11-26 03:21:03.837 00:05:04.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 03:24:59.741 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38584 10 6452 1 2025-11-26 03:21:03.840 00:05:04.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 03:24:59.184 00:00:10.362 TCP 23.104.0.1:40574 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:25:59.953 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:51270 10 6452 1 2025-11-26 03:25:59.578 00:00:10.368 TCP 23.104.0.1:48736 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:27:00.185 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47436 10 6452 1 2025-11-26 03:26:59.988 00:00:10.362 TCP 23.104.0.1:43498 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:28:01.062 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 03:28:01.345 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 03:28:00.399 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43556 10 6452 1 2025-11-26 03:28:00.387 00:00:10.374 TCP 23.104.0.1:44474 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:29:00.801 00:00:10.341 TCP 23.104.0.1:47676 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:29:00.573 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60840 10 6452 1 2025-11-26 03:30:00.786 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51546 10 6452 1 2025-11-26 03:30:01.181 00:00:10.327 TCP 23.104.0.1:46904 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:31:01.541 00:00:10.364 TCP 23.104.0.1:43516 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:27:03.840 00:05:04.395 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 03:31:01.000 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51104 10 6452 1 2025-11-26 03:27:03.838 00:05:04.400 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 03:32:01.215 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56876 10 6452 1 2025-11-26 03:32:01.948 00:00:10.333 TCP 23.104.0.1:41548 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:33:01.102 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 03:33:01.350 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 03:33:01.430 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36238 10 6452 1 2025-11-26 03:33:02.319 00:00:10.376 TCP 23.104.0.1:44972 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:34:01.652 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54750 10 6452 1 2025-11-26 03:34:02.735 00:00:10.374 TCP 23.104.0.1:58154 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:35:03.147 00:00:10.372 TCP 23.104.0.1:49970 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:35:01.869 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57830 10 6452 1 2025-11-26 03:36:03.557 00:00:10.329 TCP 23.104.0.1:39488 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:36:02.090 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56908 10 6452 1 2025-11-26 03:33:03.838 00:05:04.400 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 03:33:03.842 00:05:04.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 03:37:02.307 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33748 10 6452 1 2025-11-26 03:37:03.925 00:00:10.384 TCP 23.104.0.1:58156 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:38:01.375 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 03:38:01.301 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 03:38:04.344 00:00:10.372 TCP 23.104.0.1:33862 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:38:02.528 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33528 10 6452 1 2025-11-26 03:39:04.759 00:00:10.380 TCP 23.104.0.1:33314 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:39:02.700 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52068 10 6452 1 2025-11-26 03:40:05.174 00:00:10.371 TCP 23.104.0.1:41918 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:40:02.913 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55134 10 6452 1 2025-11-26 03:41:05.585 00:00:10.331 TCP 23.104.0.1:36390 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:41:03.127 00:00:10.725 TCP 1.101.0.1:3000 -> 22.102.0.1:50200 10 6452 1 2025-11-26 03:42:03.894 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58386 10 6452 1 2025-11-26 03:42:05.953 00:00:10.327 TCP 23.104.0.1:42266 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:43:01.451 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 03:43:01.283 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 03:39:03.840 00:05:04.400 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 03:39:03.843 00:05:04.395 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 03:43:06.321 00:00:10.327 TCP 23.104.0.1:36984 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:43:04.116 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37204 10 6452 1 2025-11-26 03:44:04.328 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34736 10 6452 1 2025-11-26 03:44:06.689 00:00:10.325 TCP 23.104.0.1:44906 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:45:04.503 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45048 10 6452 1 2025-11-26 03:45:07.059 00:00:10.372 TCP 23.104.0.1:53930 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:46:04.720 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53334 10 6452 1 2025-11-26 03:46:07.466 00:00:10.360 TCP 23.104.0.1:43176 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:47:04.929 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:39062 10 6452 1 2025-11-26 03:47:07.871 00:00:10.321 TCP 23.104.0.1:57946 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:48:01.133 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 03:48:01.240 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 03:48:05.167 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36658 10 6452 1 2025-11-26 03:48:08.232 00:00:10.366 TCP 23.104.0.1:47486 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:45:03.842 00:05:04.403 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 03:45:03.844 00:05:04.398 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 03:49:05.378 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54798 10 6452 1 2025-11-26 03:49:08.633 00:00:10.359 TCP 23.104.0.1:34574 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:50:05.556 00:00:10.632 TCP 1.101.0.1:3000 -> 22.102.0.1:39488 10 6452 1 2025-11-26 03:50:09.030 00:00:10.374 TCP 23.104.0.1:50142 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:51:06.230 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:50158 12 10375 1 2025-11-26 03:51:09.440 00:00:10.443 TCP 23.104.0.1:52472 -> 1.101.0.1:3000 15 1926 1 2025-11-26 03:52:06.479 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39716 10 6452 1 2025-11-26 03:52:09.924 00:00:10.375 TCP 23.104.0.1:55000 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:53:01.614 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 03:53:01.632 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 03:53:06.689 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33312 10 6452 1 2025-11-26 03:53:10.333 00:00:10.372 TCP 23.104.0.1:60120 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:54:06.896 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37276 10 6452 1 2025-11-26 03:54:10.747 00:00:10.367 TCP 23.104.0.1:36212 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:51:03.846 00:05:04.400 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 03:51:03.844 00:05:04.406 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 03:55:07.111 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58574 10 6452 1 2025-11-26 03:55:11.155 00:00:10.367 TCP 23.104.0.1:49642 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:56:07.326 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49190 10 6452 1 2025-11-26 03:56:11.558 00:00:10.366 TCP 23.104.0.1:51182 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:57:07.497 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38396 10 6452 1 2025-11-26 03:57:11.962 00:00:10.325 TCP 23.104.0.1:47970 -> 1.101.0.1:3000 11 1507 1 2025-11-26 03:58:01.496 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 03:58:01.550 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 03:58:07.715 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37464 10 6452 1 2025-11-26 03:58:12.325 00:00:10.324 TCP 23.104.0.1:41976 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1093, avg pps: 0, avg bpp: 318 Time window: 2025-11-26 02:57:03 - 2025-11-26 03:58:22 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0021s Wall: 0.0029s flows/second: 55837.8 Runtime: 0.0030s