Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 19:58:51.458 00:00:10.366 TCP 23.104.0.1:38892 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:59:10.397 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47608 10 6452 1 2025-11-26 19:59:51.859 00:00:10.373 TCP 23.104.0.1:54374 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:00:10.618 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45816 10 6452 1 2025-11-26 20:00:52.271 00:00:10.365 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-11-26 19:56:08.615 00:05:55.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 19:56:08.617 00:05:55.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 20:01:10.835 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59658 10 6452 1 2025-11-26 20:01:52.674 00:00:10.367 TCP 23.104.0.1:59354 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:02:11.008 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38010 10 6452 1 2025-11-26 20:02:53.103 00:00:10.366 TCP 23.104.0.1:55450 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:03:11.182 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60826 10 6452 1 2025-11-26 20:03:21.479 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 20:03:21.086 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:03:53.505 00:00:10.374 TCP 23.104.0.1:40694 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:04:11.365 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49446 10 6452 1 2025-11-26 20:04:53.922 00:00:10.384 TCP 23.104.0.1:51662 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:05:11.581 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50462 10 6452 1 2025-11-26 20:05:54.346 00:00:10.379 TCP 23.104.0.1:49492 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:06:11.751 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37474 10 6452 1 2025-11-26 20:06:54.763 00:00:10.334 TCP 23.104.0.1:58900 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:02:08.617 00:05:55.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 20:02:08.619 00:05:55.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 20:07:11.929 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:56910 10 6452 1 2025-11-26 20:07:55.136 00:00:10.330 TCP 23.104.0.1:40494 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:08:21.198 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:08:21.186 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 20:08:12.177 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:39970 10 6452 1 2025-11-26 20:08:55.508 00:00:10.367 TCP 23.104.0.1:55798 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:09:12.344 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47358 10 6452 1 2025-11-26 20:09:55.908 00:00:10.327 TCP 23.104.0.1:52708 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:10:12.554 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58770 10 6452 1 2025-11-26 20:10:56.272 00:00:10.326 TCP 23.104.0.1:56348 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:11:12.724 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42882 10 6452 1 2025-11-26 20:11:56.639 00:00:10.323 TCP 23.104.0.1:42204 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:12:12.944 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55306 10 6452 1 2025-11-26 20:08:08.617 00:05:55.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 20:08:08.620 00:05:55.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 20:12:56.996 00:00:10.364 TCP 23.104.0.1:41552 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:13:21.110 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:13:21.245 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 20:13:13.176 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43598 10 6452 1 2025-11-26 20:13:57.398 00:00:10.365 TCP 23.104.0.1:42528 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:14:13.385 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37786 10 6452 1 2025-11-26 20:14:57.801 00:00:10.386 TCP 23.104.0.1:54684 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:15:13.605 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:32926 10 6452 1 2025-11-26 20:15:58.213 00:00:10.362 TCP 23.104.0.1:57288 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:16:13.773 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48368 10 6452 1 2025-11-26 20:16:58.614 00:00:10.328 TCP 23.104.0.1:34808 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:17:13.987 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33968 10 6452 1 2025-11-26 20:17:58.982 00:00:10.364 TCP 23.104.0.1:52352 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:18:21.429 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:18:21.423 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 20:18:14.214 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58142 10 6452 1 2025-11-26 20:14:08.621 00:05:55.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 20:14:08.619 00:05:55.569 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 20:18:59.385 00:00:10.358 TCP 23.104.0.1:33186 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:19:14.422 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:40620 10 6452 1 2025-11-26 20:19:59.778 00:00:10.362 TCP 23.104.0.1:56190 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:20:14.606 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36706 10 6452 1 2025-11-26 20:21:00.180 00:00:10.365 TCP 23.104.0.1:50476 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:21:14.818 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46480 10 6452 1 2025-11-26 20:22:00.586 00:00:10.365 TCP 23.104.0.1:58860 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:22:15.081 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55430 10 6452 1 2025-11-26 20:23:00.987 00:00:10.367 TCP 23.104.0.1:50176 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:23:21.193 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 20:23:21.536 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:23:15.301 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47778 10 6452 1 2025-11-26 20:24:01.390 00:00:10.369 TCP 23.104.0.1:59652 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:24:15.520 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37862 10 6452 1 2025-11-26 20:20:08.620 00:05:55.569 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 20:20:08.622 00:05:55.565 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 20:25:01.799 00:00:10.366 TCP 23.104.0.1:49644 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:25:15.732 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54802 10 6452 1 2025-11-26 20:26:02.207 00:00:10.364 TCP 23.104.0.1:47258 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:26:15.950 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43422 10 6452 1 2025-11-26 20:27:02.612 00:00:10.417 TCP 23.104.0.1:43948 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:27:16.176 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42250 10 6452 1 2025-11-26 20:28:03.095 00:00:10.365 TCP 23.104.0.1:54902 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:28:21.404 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:28:21.633 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 20:28:16.355 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60878 10 6452 1 2025-11-26 20:29:03.499 00:00:10.363 TCP 23.104.0.1:38070 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:29:16.539 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38678 10 6452 1 2025-11-26 20:30:03.902 00:00:10.364 TCP 23.104.0.1:40184 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:30:16.757 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46482 10 6452 1 2025-11-26 20:26:08.624 00:05:55.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 20:26:08.626 00:05:55.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 20:31:04.306 00:00:10.365 TCP 23.104.0.1:46344 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:31:16.973 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:46272 10 6452 1 2025-11-26 20:32:04.711 00:00:10.368 TCP 23.104.0.1:44126 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:32:17.167 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55088 10 6452 1 2025-11-26 20:33:21.633 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 20:33:05.120 00:00:10.371 TCP 23.104.0.1:32772 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:33:21.483 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:33:17.378 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34360 10 6452 1 2025-11-26 20:34:05.531 00:00:10.323 TCP 23.104.0.1:58080 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:34:17.592 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41642 10 6452 1 2025-11-26 20:35:05.892 00:00:10.369 TCP 23.104.0.1:41438 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:35:17.802 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40652 10 6452 1 2025-11-26 20:36:06.303 00:00:10.367 TCP 23.104.0.1:57436 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:36:18.016 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57412 10 6452 1 2025-11-26 20:32:08.628 00:05:55.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 20:32:08.625 00:05:55.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 20:37:06.706 00:00:10.365 TCP 23.104.0.1:50118 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:37:18.225 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49288 10 6452 1 2025-11-26 20:38:21.894 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:38:07.109 00:00:10.373 TCP 23.104.0.1:51022 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:38:21.794 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 20:38:18.439 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47864 10 6452 1 2025-11-26 20:39:07.527 00:00:10.369 TCP 23.104.0.1:33244 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:39:18.605 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60044 10 6452 1 2025-11-26 20:40:07.937 00:00:10.375 TCP 23.104.0.1:43930 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:40:18.821 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42650 10 6452 1 2025-11-26 20:41:08.353 00:00:10.324 TCP 23.104.0.1:46080 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:41:19.040 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53052 10 6452 1 2025-11-26 20:42:08.718 00:00:10.376 TCP 23.104.0.1:36292 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:42:19.207 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47566 10 6452 1 2025-11-26 20:38:08.634 00:05:55.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 20:38:08.631 00:05:55.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 20:43:21.856 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:43:09.132 00:00:10.368 TCP 23.104.0.1:54476 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:43:21.606 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 20:43:19.420 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33008 10 6452 1 2025-11-26 20:44:09.540 00:00:10.327 TCP 23.104.0.1:36328 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:44:19.635 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33322 10 6452 1 2025-11-26 20:45:09.909 00:00:10.362 TCP 23.104.0.1:56620 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:45:19.848 00:00:11.162 TCP 1.101.0.1:3000 -> 22.102.0.1:59752 10 6452 1 2025-11-26 20:46:10.312 00:00:10.331 TCP 23.104.0.1:46926 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:46:21.075 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:33380 10 6452 1 2025-11-26 20:47:10.683 00:00:10.370 TCP 23.104.0.1:38374 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:47:21.284 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48188 10 6452 1 2025-11-26 20:48:21.954 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 20:48:21.872 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:48:11.100 00:00:10.369 TCP 23.104.0.1:33016 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:48:21.492 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40138 10 6452 1 2025-11-26 20:44:08.633 00:05:55.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 20:44:08.630 00:05:55.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 20:49:11.503 00:00:10.321 TCP 23.104.0.1:43754 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:49:21.708 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51456 10 6452 1 2025-11-26 20:50:11.867 00:00:10.367 TCP 23.104.0.1:46670 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:50:21.881 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44390 10 6452 1 2025-11-26 20:51:12.273 00:00:10.369 TCP 23.104.0.1:58856 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:51:22.104 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50006 10 6452 1 2025-11-26 20:52:12.679 00:00:10.638 TCP 23.104.0.1:39244 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:52:22.315 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59566 10 6452 1 2025-11-26 20:53:22.200 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 20:53:22.157 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:53:13.356 00:00:10.367 TCP 23.104.0.1:60876 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:53:22.535 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49180 10 6452 1 2025-11-26 20:54:13.759 00:00:10.377 TCP 23.104.0.1:41880 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:54:22.757 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42158 10 6452 1 2025-11-26 20:50:08.633 00:05:55.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 20:50:08.631 00:05:55.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 20:55:14.170 00:00:10.415 TCP 23.104.0.1:56182 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:55:22.970 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:46822 10 6452 1 2025-11-26 20:56:14.626 00:00:10.363 TCP 23.104.0.1:42230 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:56:23.158 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46648 10 6452 1 2025-11-26 20:57:15.028 00:00:10.369 TCP 23.104.0.1:59916 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:57:23.368 00:00:10.465 TCP 1.101.0.1:3000 -> 22.102.0.1:51964 10 6452 1 2025-11-26 20:58:22.048 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 20:58:15.447 00:00:10.324 TCP 23.104.0.1:57220 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:58:22.220 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 20:58:23.870 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49592 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1064, avg pps: 0, avg bpp: 317 Time window: 2025-11-26 19:56:08 - 2025-11-26 20:58:34 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0047s User: 0.0029s Wall: 0.0027s flows/second: 60450.5 Runtime: 0.0027s