Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 07:58:51.554 00:00:10.362 TCP 23.104.0.1:48362 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:59:01.592 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34840 10 6870 1 2025-11-26 07:59:51.956 00:00:10.325 TCP 23.104.0.1:35854 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:00:01.810 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44384 10 6870 1 2025-11-26 08:00:52.324 00:00:10.983 TCP 23.104.0.1:38714 -> 1.101.0.1:3000 11 1507 1 2025-11-26 07:57:03.908 00:05:04.418 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 07:57:03.912 00:05:04.413 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 08:01:02.032 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60156 10 6870 1 2025-11-26 08:01:53.347 00:00:10.363 TCP 23.104.0.1:49916 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:02:02.242 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57360 10 6870 1 2025-11-26 08:03:06.588 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 08:03:06.343 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 08:02:53.748 00:00:10.325 TCP 23.104.0.1:39600 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:03:02.454 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34982 10 6870 1 2025-11-26 08:03:54.109 00:00:10.367 TCP 23.104.0.1:58540 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:04:02.663 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:36172 10 6870 1 2025-11-26 08:04:54.520 00:00:10.374 TCP 23.104.0.1:58026 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:05:02.859 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50926 10 6870 1 2025-11-26 08:05:54.932 00:00:10.384 TCP 23.104.0.1:41818 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:06:03.040 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56576 10 6870 1 2025-11-26 08:06:55.359 00:00:10.361 TCP 23.104.0.1:58158 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:03:03.908 00:05:04.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 08:03:03.912 00:05:04.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 08:07:03.219 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59838 10 6870 1 2025-11-26 08:08:06.908 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 08:08:06.866 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 08:07:55.756 00:00:10.377 TCP 23.104.0.1:54810 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:08:03.433 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49468 10 6870 1 2025-11-26 08:08:56.170 00:00:10.365 TCP 23.104.0.1:52884 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:09:03.650 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50802 10 6870 1 2025-11-26 08:09:56.579 00:00:10.366 TCP 23.104.0.1:54074 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:10:03.871 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36938 10 6870 1 2025-11-26 08:10:57.000 00:00:10.317 TCP 23.104.0.1:48664 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:11:04.111 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36432 10 6870 1 2025-11-26 08:11:57.362 00:00:10.365 TCP 23.104.0.1:35260 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:12:04.321 00:00:10.553 TCP 1.101.0.1:3000 -> 22.102.0.1:54420 10 6870 1 2025-11-26 08:13:06.395 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 08:13:06.608 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 08:09:03.909 00:05:04.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 08:09:03.913 00:05:04.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 08:12:57.773 00:00:10.363 TCP 23.104.0.1:57394 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:13:04.913 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42028 10 6870 1 2025-11-26 08:13:58.174 00:00:10.365 TCP 23.104.0.1:50824 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:14:05.125 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55294 10 6870 1 2025-11-26 08:14:58.573 00:00:10.360 TCP 23.104.0.1:56948 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:15:05.343 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6870 1 2025-11-26 08:15:58.974 00:00:10.441 TCP 23.104.0.1:57616 -> 1.101.0.1:3000 15 1926 1 2025-11-26 08:16:05.554 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:56486 12 10369 1 2025-11-26 08:16:59.457 00:00:10.366 TCP 23.104.0.1:51838 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:17:05.755 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:32824 10 6452 1 2025-11-26 08:18:07.000 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 08:18:07.052 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 08:17:59.856 00:00:10.377 TCP 23.104.0.1:34120 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:18:05.936 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:45978 10 6452 1 2025-11-26 08:19:00.270 00:00:10.365 TCP 23.104.0.1:55334 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:15:03.914 00:05:04.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 08:15:03.911 00:05:04.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 08:19:06.172 00:00:10.589 TCP 1.101.0.1:3000 -> 22.102.0.1:50076 10 6452 1 2025-11-26 08:20:00.675 00:00:10.374 TCP 23.104.0.1:56128 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:20:06.807 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51236 10 6452 1 2025-11-26 08:21:01.105 00:00:10.367 TCP 23.104.0.1:46916 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:21:07.033 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59202 10 6452 1 2025-11-26 08:22:01.509 00:00:10.341 TCP 23.104.0.1:41704 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:22:07.248 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54190 10 6452 1 2025-11-26 08:23:06.693 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 08:23:07.087 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 08:23:01.887 00:00:10.333 TCP 23.104.0.1:49836 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:23:07.461 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52098 10 6452 1 2025-11-26 08:24:02.254 00:00:10.654 TCP 23.104.0.1:34588 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:24:07.677 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53956 10 6452 1 2025-11-26 08:21:03.912 00:05:04.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 08:21:03.915 00:05:04.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 08:25:02.958 00:00:10.368 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:25:07.852 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49216 10 6452 1 2025-11-26 08:26:03.364 00:00:10.370 TCP 23.104.0.1:38542 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:26:08.080 00:00:19.357 TCP 1.101.0.1:3000 -> 22.102.0.1:49364 10 6452 1 2025-11-26 08:27:03.772 00:00:10.369 TCP 23.104.0.1:37922 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:27:17.490 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39154 10 6452 1 2025-11-26 08:28:07.210 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 08:28:07.106 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 08:28:04.181 00:00:10.365 TCP 23.104.0.1:45758 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:28:17.701 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35532 10 6452 1 2025-11-26 08:29:04.592 00:00:10.366 TCP 23.104.0.1:37872 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:29:17.918 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:34120 10 6452 1 2025-11-26 08:30:04.997 00:00:10.368 TCP 23.104.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:30:18.166 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40830 10 6452 1 2025-11-26 08:27:03.914 00:05:04.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 08:27:03.917 00:05:04.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 08:31:05.396 00:00:10.368 TCP 23.104.0.1:47558 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:31:18.389 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46748 10 6452 1 2025-11-26 08:32:05.806 00:00:10.365 TCP 23.104.0.1:59948 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:32:18.614 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38576 10 6452 1 2025-11-26 08:33:06.898 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 08:33:07.175 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 08:33:06.210 00:00:10.369 TCP 23.104.0.1:43764 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:33:18.835 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41212 10 6452 1 2025-11-26 08:34:06.617 00:00:10.366 TCP 23.104.0.1:47642 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:34:19.076 00:00:10.540 TCP 1.101.0.1:3000 -> 22.102.0.1:53718 10 6452 1 2025-11-26 08:35:07.025 00:00:10.411 TCP 23.104.0.1:46944 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:35:19.654 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54108 10 6452 1 2025-11-26 08:36:07.480 00:00:10.442 TCP 23.104.0.1:36056 -> 1.101.0.1:3000 15 1926 1 2025-11-26 08:36:19.827 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:53696 12 10578 1 2025-11-26 08:33:03.921 00:05:04.412 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 08:33:03.918 00:05:04.417 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 08:37:07.961 00:00:10.328 TCP 23.104.0.1:50324 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:37:20.082 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57762 10 6661 1 2025-11-26 08:38:07.552 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 08:38:07.570 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 08:38:08.325 00:00:10.375 TCP 23.104.0.1:50954 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:38:20.295 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33690 10 6661 1 2025-11-26 08:39:08.762 00:00:10.376 TCP 23.104.0.1:55876 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:39:20.517 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56870 10 6661 1 2025-11-26 08:40:09.174 00:00:10.327 TCP 23.104.0.1:42512 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:40:20.737 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36286 10 6661 1 2025-11-26 08:41:09.559 00:00:10.324 TCP 23.104.0.1:46060 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:41:20.955 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49604 10 6661 1 2025-11-26 08:42:09.921 00:00:10.329 TCP 23.104.0.1:57016 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:42:21.186 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43330 10 6661 1 2025-11-26 08:43:07.232 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 08:39:03.926 00:05:04.410 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 08:39:03.929 00:05:04.405 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 08:43:07.381 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 08:43:10.297 00:00:10.364 TCP 23.104.0.1:41886 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:43:21.403 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42958 10 6661 1 2025-11-26 08:44:10.699 00:00:10.372 TCP 23.104.0.1:40862 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:44:21.625 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56830 10 6661 1 2025-11-26 08:45:11.121 00:00:10.365 TCP 23.104.0.1:59402 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:45:21.833 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56218 10 6661 1 2025-11-26 08:46:11.530 00:00:10.323 TCP 23.104.0.1:41738 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:46:22.068 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49038 10 6661 1 2025-11-26 08:47:11.900 00:00:10.364 TCP 23.104.0.1:45936 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:47:22.285 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56072 10 6661 1 2025-11-26 08:48:07.368 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 08:48:07.485 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 08:48:12.304 00:00:10.328 TCP 23.104.0.1:44474 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:48:22.457 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49784 10 6661 1 2025-11-26 08:45:03.932 00:05:04.404 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 08:45:03.930 00:05:04.409 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 08:49:12.674 00:00:10.379 TCP 23.104.0.1:54296 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:49:22.669 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49718 10 6661 1 2025-11-26 08:50:13.110 00:00:10.325 TCP 23.104.0.1:60776 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:50:22.879 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:41086 10 6661 1 2025-11-26 08:51:13.474 00:00:10.322 TCP 23.104.0.1:35084 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:51:23.088 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:58946 10 6661 1 2025-11-26 08:52:13.834 00:00:10.383 TCP 23.104.0.1:46008 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:52:23.290 00:00:10.913 TCP 1.101.0.1:3000 -> 22.102.0.1:41838 10 6661 1 2025-11-26 08:53:07.705 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 08:53:07.614 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 08:53:14.254 00:00:10.364 TCP 23.104.0.1:35212 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:53:24.242 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33644 10 6661 1 2025-11-26 08:54:14.656 00:00:10.369 TCP 23.104.0.1:39896 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:54:24.452 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44826 10 6661 1 2025-11-26 08:51:03.930 00:05:04.433 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 08:51:03.932 00:05:04.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 08:55:15.085 00:00:10.364 TCP 23.104.0.1:44396 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:55:24.662 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60812 10 6661 1 2025-11-26 08:56:15.487 00:00:10.439 TCP 23.104.0.1:44924 -> 1.101.0.1:3000 15 1926 1 2025-11-26 08:56:24.882 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35866 12 10787 1 2025-11-26 08:57:15.970 00:00:10.982 TCP 23.104.0.1:42652 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:57:25.108 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57532 10 6870 1 2025-11-26 08:58:07.824 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 08:58:07.889 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 08:58:16.992 00:00:10.322 TCP 23.104.0.1:36368 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:58:25.325 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56796 10 6870 1 Summary: total flows: 164, total bytes: 523896, total packets: 1590, avg bps: 1135, avg pps: 0, avg bpp: 329 Time window: 2025-11-26 07:57:03 - 2025-11-26 08:58:35 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0048s User: 0.0010s Wall: 0.0025s flows/second: 64697.7 Runtime: 0.0026s