Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 14:58:46.186 00:00:10.321 TCP 23.104.0.1:52366 -> 1.101.0.1:3000 11 1507 1 2025-11-26 14:58:50.732 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54206 10 6452 1 2025-11-26 14:59:46.550 00:00:10.634 TCP 23.104.0.1:47872 -> 1.101.0.1:3000 11 1507 1 2025-11-26 14:59:50.901 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45546 10 6452 1 2025-11-26 15:00:51.118 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46740 10 6452 1 2025-11-26 14:56:08.481 00:05:55.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 15:00:47.224 00:00:10.367 TCP 23.104.0.1:50354 -> 1.101.0.1:3000 11 1507 1 2025-11-26 14:56:08.478 00:05:55.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 15:01:47.634 00:00:10.362 TCP 23.104.0.1:56422 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:01:51.293 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41114 10 6452 1 2025-11-26 15:02:51.509 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37468 10 6452 1 2025-11-26 15:02:48.051 00:00:10.368 TCP 23.104.0.1:53802 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:03:15.102 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 15:03:14.808 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 15:03:48.462 00:00:10.369 TCP 23.104.0.1:51452 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:03:51.713 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35256 10 6452 1 2025-11-26 15:04:48.866 00:00:10.368 TCP 23.104.0.1:40514 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:04:51.934 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:49944 10 6452 1 2025-11-26 15:05:49.280 00:00:10.327 TCP 23.104.0.1:60938 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:05:52.176 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40936 10 6452 1 2025-11-26 15:06:49.648 00:00:10.331 TCP 23.104.0.1:44278 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:02:08.480 00:05:55.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 15:06:52.392 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34660 10 6452 1 2025-11-26 15:02:08.482 00:05:55.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 15:07:50.020 00:00:10.369 TCP 23.104.0.1:34542 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:07:52.623 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41408 10 6452 1 2025-11-26 15:08:15.202 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 15:08:14.945 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 15:08:50.428 00:00:10.366 TCP 23.104.0.1:43444 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:08:52.833 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35542 10 6452 1 2025-11-26 15:09:50.833 00:00:10.376 TCP 23.104.0.1:56364 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:09:53.072 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39260 10 6452 1 2025-11-26 15:10:51.245 00:00:10.364 TCP 23.104.0.1:53912 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:10:53.292 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43188 10 6452 1 2025-11-26 15:11:53.518 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48654 10 6452 1 2025-11-26 15:11:51.651 00:00:10.374 TCP 23.104.0.1:42106 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:12:53.743 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45218 10 6452 1 2025-11-26 15:08:08.483 00:05:55.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 15:12:52.064 00:00:10.360 TCP 23.104.0.1:41728 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:08:08.482 00:05:55.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 15:13:15.208 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 15:13:14.979 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 15:13:53.961 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57968 10 6452 1 2025-11-26 15:13:52.463 00:00:10.376 TCP 23.104.0.1:50994 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:14:54.205 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47684 10 6452 1 2025-11-26 15:14:52.867 00:00:10.370 TCP 23.104.0.1:53552 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:15:53.278 00:00:10.365 TCP 23.104.0.1:59160 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:15:54.427 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51604 10 6452 1 2025-11-26 15:16:53.681 00:00:10.371 TCP 23.104.0.1:47098 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:16:54.645 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58614 10 6452 1 2025-11-26 15:17:54.106 00:00:10.362 TCP 23.104.0.1:54428 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:17:54.865 00:00:10.440 TCP 1.101.0.1:3000 -> 22.102.0.1:41042 10 6452 1 2025-11-26 15:18:15.580 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 15:18:15.620 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 15:18:55.343 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37296 10 6452 1 2025-11-26 15:14:08.484 00:05:55.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 15:18:54.504 00:00:10.367 TCP 23.104.0.1:34648 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:14:08.482 00:05:55.590 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 15:19:55.560 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38754 10 6452 1 2025-11-26 15:19:54.905 00:00:10.328 TCP 23.104.0.1:56446 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:20:55.269 00:00:10.374 TCP 23.104.0.1:54734 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:20:55.781 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50816 10 6452 1 2025-11-26 15:21:56.001 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45518 10 6452 1 2025-11-26 15:21:55.679 00:00:10.367 TCP 23.104.0.1:43882 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:22:56.107 00:00:10.322 TCP 23.104.0.1:60922 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:22:56.221 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35508 10 6452 1 2025-11-26 15:23:15.332 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 15:23:15.376 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 15:23:56.469 00:00:10.370 TCP 23.104.0.1:58122 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:23:56.432 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50162 10 6452 1 2025-11-26 15:24:56.647 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53706 10 6452 1 2025-11-26 15:20:08.487 00:05:55.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 15:20:08.485 00:05:55.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 15:24:56.877 00:00:10.394 TCP 23.104.0.1:37020 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:25:56.866 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49090 10 6452 1 2025-11-26 15:25:57.310 00:00:10.367 TCP 23.104.0.1:55178 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:26:57.715 00:00:10.380 TCP 23.104.0.1:46116 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:26:57.091 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60782 10 6452 1 2025-11-26 15:27:57.307 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48752 10 6452 1 2025-11-26 15:27:58.135 00:00:10.396 TCP 23.104.0.1:46548 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:28:15.267 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 15:28:15.501 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 15:28:57.521 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41020 10 6452 1 2025-11-26 15:28:58.589 00:00:10.369 TCP 23.104.0.1:60498 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:29:59.003 00:00:10.366 TCP 23.104.0.1:59488 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:29:57.696 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55812 10 6452 1 2025-11-26 15:26:08.489 00:05:55.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 15:30:57.909 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53264 10 6452 1 2025-11-26 15:26:08.486 00:05:55.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 15:30:59.410 00:00:10.368 TCP 23.104.0.1:42670 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:31:59.816 00:00:10.375 TCP 23.104.0.1:37670 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:31:58.084 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46024 10 6452 1 2025-11-26 15:32:58.263 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59774 11 6492 1 2025-11-26 15:33:00.230 00:00:10.329 TCP 23.104.0.1:33824 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:33:15.761 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 15:33:15.624 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 15:34:00.595 00:00:10.380 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:33:58.484 00:00:10.980 TCP 1.101.0.1:3000 -> 22.102.0.1:44024 10 6452 1 2025-11-26 15:34:59.498 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33154 10 6452 1 2025-11-26 15:35:01.015 00:00:10.363 TCP 23.104.0.1:60498 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:35:59.709 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45102 10 6452 1 2025-11-26 15:36:01.419 00:00:10.323 TCP 23.104.0.1:42338 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:32:08.487 00:05:55.588 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 15:32:08.491 00:05:55.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 15:36:59.922 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:41768 10 6452 1 2025-11-26 15:37:01.779 00:00:10.363 TCP 23.104.0.1:46360 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:38:00.167 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41182 10 6452 1 2025-11-26 15:38:15.478 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 15:38:02.182 00:00:10.363 TCP 23.104.0.1:50538 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:38:15.754 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 15:39:00.386 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59496 10 6452 1 2025-11-26 15:39:02.586 00:00:10.365 TCP 23.104.0.1:36324 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:40:00.611 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60542 10 6452 1 2025-11-26 15:40:02.988 00:00:10.364 TCP 23.104.0.1:37680 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:41:00.785 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40778 10 6452 1 2025-11-26 15:41:03.392 00:00:10.356 TCP 23.104.0.1:37086 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:42:00.994 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39498 10 6452 1 2025-11-26 15:42:03.786 00:00:10.368 TCP 23.104.0.1:50618 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:38:08.488 00:05:55.588 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 15:38:08.491 00:05:55.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 15:43:01.214 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55084 10 6452 1 2025-11-26 15:43:15.817 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 15:43:04.196 00:00:11.078 TCP 23.104.0.1:50184 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:43:15.930 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 15:44:01.438 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46004 10 6452 1 2025-11-26 15:44:05.315 00:00:10.366 TCP 23.104.0.1:45582 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:45:01.610 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37138 10 6452 1 2025-11-26 15:45:05.714 00:00:10.329 TCP 23.104.0.1:40646 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:46:01.830 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35336 10 6452 1 2025-11-26 15:46:06.104 00:00:10.365 TCP 23.104.0.1:35596 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:47:02.070 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41746 10 6452 1 2025-11-26 15:47:06.510 00:00:10.375 TCP 23.104.0.1:36854 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:48:15.726 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 15:48:02.295 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53998 10 6452 1 2025-11-26 15:48:15.817 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 15:48:06.924 00:00:10.398 TCP 23.104.0.1:43020 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:44:08.491 00:05:55.590 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 15:44:08.493 00:05:55.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 15:49:02.482 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45076 10 6452 1 2025-11-26 15:49:07.360 00:00:10.368 TCP 23.104.0.1:50134 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:50:02.650 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57564 10 6452 1 2025-11-26 15:50:07.767 00:00:10.383 TCP 23.104.0.1:45086 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:51:02.867 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56946 10 6452 1 2025-11-26 15:51:08.189 00:00:10.362 TCP 23.104.0.1:39454 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:52:03.066 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59942 10 6452 1 2025-11-26 15:52:08.590 00:00:10.366 TCP 23.104.0.1:50996 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:53:16.169 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 15:53:03.236 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54534 10 6452 1 2025-11-26 15:53:15.939 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 15:53:09.032 00:00:10.366 TCP 23.104.0.1:41582 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:54:03.458 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60888 10 6452 1 2025-11-26 15:54:09.444 00:00:10.360 TCP 23.104.0.1:59322 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:50:08.496 00:05:55.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 15:50:08.494 00:05:55.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 15:55:03.671 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54466 10 6452 1 2025-11-26 15:55:09.843 00:00:10.388 TCP 23.104.0.1:36916 -> 1.101.0.1:3000 12 1559 1 2025-11-26 15:56:03.881 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55924 10 6452 1 2025-11-26 15:56:10.269 00:00:10.356 TCP 23.104.0.1:56964 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:57:04.113 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54024 10 6452 1 2025-11-26 15:57:10.661 00:00:10.364 TCP 23.104.0.1:37622 -> 1.101.0.1:3000 11 1507 1 2025-11-26 15:58:16.070 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 15:58:15.998 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 15:58:04.329 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35044 10 6452 1 2025-11-26 15:58:11.088 00:00:10.363 TCP 23.104.0.1:33730 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498440, total packets: 1574, avg bps: 1068, avg pps: 0, avg bpp: 316 Time window: 2025-11-26 14:56:08 - 2025-11-26 15:58:21 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0023s User: 0.0035s Wall: 0.0037s flows/second: 44170.4 Runtime: 0.0037s