Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 08:59:17.353 00:00:10.358 TCP 23.104.0.1:54752 -> 1.101.0.1:3000 11 1507 1 2025-11-26 08:59:25.534 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39412 10 6870 1 2025-11-26 09:00:17.752 00:00:10.388 TCP 23.104.0.1:46498 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:00:25.705 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54516 12 6974 1 2025-11-26 08:57:03.934 00:05:04.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 08:57:03.931 00:05:04.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 09:01:18.180 00:00:10.364 TCP 23.104.0.1:60696 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:01:25.917 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43110 10 6870 1 2025-11-26 09:02:18.581 00:00:10.367 TCP 23.104.0.1:55278 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:02:26.100 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53408 10 6870 1 2025-11-26 09:03:08.200 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 09:03:08.068 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 09:03:18.988 00:00:10.325 TCP 23.104.0.1:33438 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:03:26.351 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54074 10 6870 1 2025-11-26 09:04:19.353 00:00:10.364 TCP 23.104.0.1:37886 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:04:26.574 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58448 10 6870 1 2025-11-26 09:05:19.761 00:00:10.378 TCP 23.104.0.1:51946 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:05:26.798 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54722 10 6870 1 2025-11-26 09:06:20.188 00:00:10.765 TCP 23.104.0.1:37954 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:06:27.027 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53574 10 6870 1 2025-11-26 09:03:03.935 00:05:04.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 09:03:03.933 00:05:04.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 09:07:20.993 00:00:10.364 TCP 23.104.0.1:57178 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:07:27.246 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57680 10 6870 1 2025-11-26 09:08:07.865 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 09:08:07.776 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 09:08:21.396 00:00:10.363 TCP 23.104.0.1:55386 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:08:27.467 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35296 10 6870 1 2025-11-26 09:09:21.797 00:00:10.764 TCP 23.104.0.1:43446 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:09:27.688 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44360 10 6870 1 2025-11-26 09:10:22.601 00:00:10.366 TCP 23.104.0.1:40882 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:10:27.861 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59506 10 6870 1 2025-11-26 09:11:23.001 00:00:10.372 TCP 23.104.0.1:47812 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:11:28.085 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58140 10 6870 1 2025-11-26 09:12:23.407 00:00:10.369 TCP 23.104.0.1:44712 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:12:28.261 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33498 10 6870 1 2025-11-26 09:13:07.850 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 09:09:03.932 00:05:04.433 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 09:13:07.979 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 09:09:03.936 00:05:04.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 09:13:23.816 00:00:10.375 TCP 23.104.0.1:35934 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:13:28.483 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38732 10 6870 1 2025-11-26 09:14:24.227 00:00:10.368 TCP 23.104.0.1:60400 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:14:28.694 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53086 10 6870 1 2025-11-26 09:15:24.638 00:00:10.364 TCP 23.104.0.1:42912 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:15:28.914 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33200 10 6870 1 2025-11-26 09:16:25.056 00:00:10.443 TCP 23.104.0.1:35078 -> 1.101.0.1:3000 15 1926 1 2025-11-26 09:16:29.124 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:49512 12 10375 1 2025-11-26 09:17:25.541 00:00:10.365 TCP 23.104.0.1:57938 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:17:29.379 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46246 10 6452 1 2025-11-26 09:18:07.978 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 09:18:07.983 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 09:18:25.946 00:00:10.380 TCP 23.104.0.1:46132 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:18:29.602 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39570 10 6452 1 2025-11-26 09:15:03.933 00:05:04.433 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 09:15:03.936 00:05:04.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 09:19:26.363 00:00:10.325 TCP 23.104.0.1:36528 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:19:29.819 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47222 10 6452 1 2025-11-26 09:20:30.041 00:00:10.507 TCP 1.101.0.1:3000 -> 22.102.0.1:42804 10 6452 1 2025-11-26 09:20:26.727 00:00:10.368 TCP 23.104.0.1:39028 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:21:30.590 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55242 10 6452 1 2025-11-26 09:21:27.133 00:00:10.368 TCP 23.104.0.1:32810 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:22:30.813 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6452 1 2025-11-26 09:22:27.543 00:00:10.367 TCP 23.104.0.1:48520 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:23:08.449 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 09:23:08.452 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 09:23:31.043 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41940 10 6452 1 2025-11-26 09:23:27.942 00:00:10.380 TCP 23.104.0.1:34948 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:24:31.221 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:50090 10 6452 1 2025-11-26 09:24:28.356 00:00:10.360 TCP 23.104.0.1:47394 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:21:03.938 00:05:04.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 09:21:03.941 00:05:04.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 09:25:28.762 00:00:10.326 TCP 23.104.0.1:48046 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:25:31.404 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53896 10 6452 1 2025-11-26 09:26:29.127 00:00:10.369 TCP 23.104.0.1:42448 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:26:31.621 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49528 10 6452 1 2025-11-26 09:27:31.836 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50776 10 6452 1 2025-11-26 09:27:29.531 00:00:10.325 TCP 23.104.0.1:50370 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:28:08.664 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 09:28:08.472 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 09:28:29.901 00:00:10.336 TCP 23.104.0.1:42474 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:28:32.012 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33872 10 6452 1 2025-11-26 09:29:30.269 00:00:10.364 TCP 23.104.0.1:51590 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:29:32.227 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44848 10 6452 1 2025-11-26 09:30:30.680 00:00:10.370 TCP 23.104.0.1:50352 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:30:32.438 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46080 10 6452 1 2025-11-26 09:27:03.942 00:05:04.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 09:27:03.945 00:05:04.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 09:31:31.104 00:00:10.397 TCP 23.104.0.1:41618 -> 1.101.0.1:3000 15 1926 1 2025-11-26 09:31:32.654 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:49496 13 13949 1 2025-11-26 09:32:31.541 00:00:10.363 TCP 23.104.0.1:40018 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:32:32.850 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37262 10 6452 1 2025-11-26 09:33:08.533 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 09:33:08.472 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 09:33:31.945 00:00:10.325 TCP 23.104.0.1:57126 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:33:33.087 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37758 10 6452 1 2025-11-26 09:34:33.296 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51854 10 6452 1 2025-11-26 09:34:32.312 00:00:10.363 TCP 23.104.0.1:47538 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:35:32.714 00:00:10.376 TCP 23.104.0.1:57906 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:35:33.503 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56984 10 6452 1 2025-11-26 09:36:33.715 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51012 10 6452 1 2025-11-26 09:36:33.127 00:00:10.326 TCP 23.104.0.1:36354 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:33:03.944 00:05:04.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 09:33:03.945 00:05:04.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 09:37:33.492 00:00:10.366 TCP 23.104.0.1:50164 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:37:33.928 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:37920 10 6452 1 2025-11-26 09:38:08.442 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 09:38:08.601 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 09:38:33.896 00:00:10.373 TCP 23.104.0.1:49296 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:38:34.118 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51850 10 6452 1 2025-11-26 09:39:34.309 00:00:10.373 TCP 23.104.0.1:36236 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:39:34.333 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48606 10 6452 1 2025-11-26 09:40:34.553 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51284 10 6452 1 2025-11-26 09:40:34.717 00:00:10.374 TCP 23.104.0.1:35664 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:41:34.775 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:33244 12 10584 1 2025-11-26 09:41:35.128 00:00:10.435 TCP 23.104.0.1:53912 -> 1.101.0.1:3000 15 1926 1 2025-11-26 09:42:35.029 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:60562 10 6661 1 2025-11-26 09:42:35.606 00:00:10.370 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:43:08.285 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 09:39:03.945 00:05:04.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 09:43:08.559 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 09:39:03.948 00:05:04.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 09:43:35.279 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50966 10 6661 1 2025-11-26 09:43:36.015 00:00:10.362 TCP 23.104.0.1:40554 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:44:36.421 00:00:10.327 TCP 23.104.0.1:59516 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:44:35.452 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57970 10 6661 1 2025-11-26 09:45:35.665 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34672 10 6661 1 2025-11-26 09:45:36.784 00:00:10.329 TCP 23.104.0.1:34246 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:46:35.875 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36500 10 6661 1 2025-11-26 09:46:37.152 00:00:10.362 TCP 23.104.0.1:55632 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:47:36.095 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59108 10 6661 1 2025-11-26 09:47:37.554 00:00:10.324 TCP 23.104.0.1:40494 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:48:08.645 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 09:48:08.716 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 09:48:36.321 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41680 10 6661 1 2025-11-26 09:48:37.918 00:00:10.375 TCP 23.104.0.1:33006 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:45:03.951 00:05:04.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 09:45:03.948 00:05:04.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 09:49:36.538 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53886 10 6661 1 2025-11-26 09:49:38.333 00:00:10.364 TCP 23.104.0.1:43004 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:50:38.735 00:00:10.795 TCP 23.104.0.1:36670 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:50:36.763 00:00:10.476 TCP 1.101.0.1:3000 -> 22.102.0.1:41056 10 6661 1 2025-11-26 09:51:37.288 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55434 10 6661 1 2025-11-26 09:51:39.577 00:00:10.368 TCP 23.104.0.1:52082 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:52:37.501 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59622 10 6661 1 2025-11-26 09:52:39.983 00:00:10.370 TCP 23.104.0.1:53002 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:53:08.959 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 09:53:08.602 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 09:53:37.704 00:00:10.501 TCP 1.101.0.1:3000 -> 22.102.0.1:49978 10 6661 1 2025-11-26 09:53:40.390 00:00:10.366 TCP 23.104.0.1:53408 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:54:38.244 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34406 10 6661 1 2025-11-26 09:54:40.793 00:00:10.365 TCP 23.104.0.1:43628 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:51:03.952 00:05:04.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 09:51:03.950 00:05:04.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 09:55:38.465 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40254 10 6661 1 2025-11-26 09:55:41.196 00:00:10.366 TCP 23.104.0.1:52566 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:56:41.596 00:00:10.368 TCP 23.104.0.1:46738 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:56:38.643 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36172 10 6661 1 2025-11-26 09:57:38.855 00:00:11.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53076 10 6661 1 2025-11-26 09:57:42.000 00:00:10.366 TCP 23.104.0.1:45430 -> 1.101.0.1:3000 11 1507 1 2025-11-26 09:58:08.877 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 09:58:08.682 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 09:58:40.036 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41626 10 6661 1 Summary: total flows: 163, total bytes: 524413, total packets: 1582, avg bps: 1131, avg pps: 0, avg bpp: 331 Time window: 2025-11-26 08:57:03 - 2025-11-26 09:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0049s User: 0.0019s Wall: 0.0022s flows/second: 72839.5 Runtime: 0.0023s