Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 17:59:01.204 00:00:10.364 TCP 23.104.0.1:37430 -> 1.101.0.1:3000 11 1507 1 2025-11-26 17:59:35.948 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:52586 12 6556 1 2025-11-26 18:00:01.606 00:00:10.361 TCP 23.104.0.1:45510 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:00:36.190 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40656 10 6452 1 2025-11-26 17:56:08.537 00:05:55.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 17:56:08.534 00:05:55.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 18:01:02.003 00:00:10.358 TCP 23.104.0.1:50660 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:01:36.404 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57548 10 6452 1 2025-11-26 18:02:02.406 00:00:10.401 TCP 23.104.0.1:41642 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:02:36.631 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43906 10 6452 1 2025-11-26 18:03:02.818 00:00:10.973 TCP 23.104.0.1:55886 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:03:18.626 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 18:03:18.497 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 18:03:36.846 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38874 10 6452 1 2025-11-26 18:04:03.852 00:00:10.386 TCP 23.104.0.1:35498 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:04:37.026 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59110 10 6452 1 2025-11-26 18:05:04.278 00:00:10.370 TCP 23.104.0.1:48156 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:05:37.243 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37410 10 6452 1 2025-11-26 18:06:04.682 00:00:10.374 TCP 23.104.0.1:37264 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:06:37.456 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34902 10 6452 1 2025-11-26 18:02:08.538 00:05:55.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 18:02:08.535 00:05:55.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 18:07:05.105 00:00:10.364 TCP 23.104.0.1:38296 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:07:37.673 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48590 10 6452 1 2025-11-26 18:08:18.673 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 18:08:05.505 00:00:10.520 TCP 23.104.0.1:47394 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:08:18.520 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 18:08:37.888 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58986 10 6452 1 2025-11-26 18:09:06.095 00:00:10.367 TCP 23.104.0.1:41858 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:09:38.114 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50112 10 6452 1 2025-11-26 18:10:06.500 00:00:10.378 TCP 23.104.0.1:48014 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:10:38.326 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52784 10 6452 1 2025-11-26 18:11:06.919 00:00:10.384 TCP 23.104.0.1:54134 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:11:38.499 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45316 10 6452 1 2025-11-26 18:12:07.336 00:00:10.330 TCP 23.104.0.1:60894 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:12:38.709 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34674 10 6452 1 2025-11-26 18:08:08.536 00:05:55.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 18:08:08.538 00:05:55.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 18:13:18.969 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 18:13:18.580 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 18:13:07.704 00:00:10.366 TCP 23.104.0.1:47208 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:13:38.927 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:53410 10 6452 1 2025-11-26 18:14:08.108 00:00:10.362 TCP 23.104.0.1:51638 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:14:39.173 00:00:10.284 TCP 1.101.0.1:3000 -> 22.102.0.1:58896 10 6452 1 2025-11-26 18:15:08.511 00:00:10.447 TCP 23.104.0.1:59302 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:15:39.499 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35578 10 6452 1 2025-11-26 18:16:08.996 00:00:10.364 TCP 23.104.0.1:34806 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:16:39.724 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42882 10 6452 1 2025-11-26 18:17:09.397 00:00:10.359 TCP 23.104.0.1:57766 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:17:39.936 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:41164 10 6452 1 2025-11-26 18:18:18.605 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 18:18:09.799 00:00:10.364 TCP 23.104.0.1:45204 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:18:18.907 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 18:18:40.179 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43040 10 6452 1 2025-11-26 18:14:08.543 00:05:55.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 18:14:08.542 00:05:55.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 18:19:10.205 00:00:10.559 TCP 23.104.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:19:40.394 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39220 10 6452 1 2025-11-26 18:20:10.804 00:00:10.333 TCP 23.104.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:20:40.612 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38714 10 6452 1 2025-11-26 18:21:11.180 00:00:10.324 TCP 23.104.0.1:40510 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:21:40.828 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34808 10 6452 1 2025-11-26 18:22:11.546 00:00:10.323 TCP 23.104.0.1:45318 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:22:41.066 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52742 10 6452 1 2025-11-26 18:23:19.108 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 18:23:18.896 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 18:23:11.913 00:00:10.357 TCP 23.104.0.1:55604 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:23:41.280 00:00:10.462 TCP 1.101.0.1:3000 -> 22.102.0.1:46322 10 6452 1 2025-11-26 18:24:12.307 00:00:10.374 TCP 23.104.0.1:55520 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:24:41.786 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36948 10 6452 1 2025-11-26 18:20:08.545 00:05:55.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 18:20:08.543 00:05:55.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 18:25:12.739 00:00:10.364 TCP 23.104.0.1:50716 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:25:42.001 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44446 10 6452 1 2025-11-26 18:26:13.144 00:00:10.366 TCP 23.104.0.1:52384 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:26:42.177 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45578 10 6452 1 2025-11-26 18:27:13.549 00:00:10.365 TCP 23.104.0.1:32914 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:27:42.350 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59082 10 6452 1 2025-11-26 18:28:19.181 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 18:28:18.967 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 18:28:13.954 00:00:10.369 TCP 23.104.0.1:35244 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:28:42.562 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49830 10 6452 1 2025-11-26 18:29:14.364 00:00:10.364 TCP 23.104.0.1:35476 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:29:42.773 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42956 10 6452 1 2025-11-26 18:30:14.765 00:00:10.376 TCP 23.104.0.1:46562 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:30:42.988 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35372 10 6452 1 2025-11-26 18:26:08.545 00:05:55.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 18:26:08.547 00:05:55.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 18:31:15.180 00:00:10.369 TCP 23.104.0.1:42288 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:31:43.215 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52382 10 6452 1 2025-11-26 18:32:15.586 00:00:10.361 TCP 23.104.0.1:42786 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:32:43.424 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:47286 10 6452 1 2025-11-26 18:33:19.154 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 18:33:18.844 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 18:33:15.988 00:00:10.368 TCP 23.104.0.1:47600 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:33:43.591 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56652 10 6452 1 2025-11-26 18:34:16.393 00:00:10.360 TCP 23.104.0.1:57272 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:34:43.813 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48554 10 6452 1 2025-11-26 18:35:16.792 00:00:10.362 TCP 23.104.0.1:48012 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:35:44.026 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44796 10 6452 1 2025-11-26 18:36:17.196 00:00:10.442 TCP 23.104.0.1:39428 -> 1.101.0.1:3000 15 1926 1 2025-11-26 18:36:44.241 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:59840 12 10369 1 2025-11-26 18:32:08.547 00:05:55.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 18:32:08.549 00:05:55.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 18:37:17.679 00:00:10.379 TCP 23.104.0.1:38740 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:37:44.442 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59086 10 6452 1 2025-11-26 18:38:19.370 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 18:38:19.170 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 18:38:18.113 00:00:10.370 TCP 23.104.0.1:36582 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:38:44.613 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33216 10 6452 1 2025-11-26 18:39:18.525 00:00:10.321 TCP 23.104.0.1:48756 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:39:44.838 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55862 10 6452 1 2025-11-26 18:40:18.881 00:00:10.391 TCP 23.104.0.1:43302 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:40:45.010 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54834 10 6452 1 2025-11-26 18:41:19.311 00:00:10.325 TCP 23.104.0.1:37960 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:41:45.256 00:00:16.689 TCP 1.101.0.1:3000 -> 22.102.0.1:60016 10 6452 1 2025-11-26 18:42:19.676 00:00:10.811 TCP 23.104.0.1:45022 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:42:51.997 00:00:10.443 TCP 1.101.0.1:3000 -> 22.102.0.1:33628 10 6452 1 2025-11-26 18:38:08.549 00:05:55.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 18:38:08.547 00:05:55.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 18:43:19.535 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 18:43:19.299 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 18:43:20.516 00:00:10.370 TCP 23.104.0.1:40824 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:43:52.479 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50876 10 6452 1 2025-11-26 18:44:20.927 00:00:10.385 TCP 23.104.0.1:42890 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:44:52.712 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33146 10 6452 1 2025-11-26 18:45:21.350 00:00:10.365 TCP 23.104.0.1:55360 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:45:52.930 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44012 10 6452 1 2025-11-26 18:46:21.763 00:00:10.399 TCP 23.104.0.1:55938 -> 1.101.0.1:3000 15 1926 1 2025-11-26 18:46:53.135 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44762 12 10375 1 2025-11-26 18:47:22.198 00:00:10.364 TCP 23.104.0.1:36210 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:47:53.341 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44994 10 6452 1 2025-11-26 18:48:19.618 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 18:48:19.407 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 18:48:22.602 00:00:10.324 TCP 23.104.0.1:37438 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:44:08.552 00:05:55.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 18:48:53.572 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37254 10 6452 1 2025-11-26 18:44:08.549 00:05:55.607 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 18:49:22.966 00:00:10.388 TCP 23.104.0.1:48984 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:49:53.794 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58716 10 6452 1 2025-11-26 18:50:23.393 00:00:10.358 TCP 23.104.0.1:45420 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:50:54.012 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53738 10 6452 1 2025-11-26 18:51:23.793 00:00:10.368 TCP 23.104.0.1:56296 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:51:54.222 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58764 10 6452 1 2025-11-26 18:52:24.196 00:00:10.336 TCP 23.104.0.1:41176 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:52:54.397 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43880 10 6452 1 2025-11-26 18:53:19.713 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 18:53:19.733 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 18:53:24.568 00:00:10.324 TCP 23.104.0.1:36658 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:53:54.609 00:00:10.315 TCP 1.101.0.1:3000 -> 22.102.0.1:47804 10 6452 1 2025-11-26 18:54:24.933 00:00:10.387 TCP 23.104.0.1:59758 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:54:54.961 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:44318 12 6556 1 2025-11-26 18:50:08.557 00:05:55.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 18:50:08.553 00:05:55.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 18:55:25.358 00:00:10.362 TCP 23.104.0.1:45242 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:55:55.198 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:57022 10 6452 1 2025-11-26 18:56:25.758 00:00:10.378 TCP 23.104.0.1:43026 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:56:55.383 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52800 10 6452 1 2025-11-26 18:57:26.170 00:00:10.375 TCP 23.104.0.1:43746 -> 1.101.0.1:3000 11 1507 1 2025-11-26 18:57:55.593 00:00:10.838 TCP 1.101.0.1:3000 -> 22.102.0.1:34334 10 6452 1 2025-11-26 18:58:19.795 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 18:58:19.641 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 18:58:26.579 00:00:10.363 TCP 23.104.0.1:48926 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500782, total packets: 1578, avg bps: 1068, avg pps: 0, avg bpp: 317 Time window: 2025-11-26 17:56:08 - 2025-11-26 18:58:36 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0045s User: 0.0022s Wall: 0.0022s flows/second: 73751.0 Runtime: 0.0022s