Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 01:59:27.051 00:00:10.323 TCP 23.104.0.1:57840 -> 1.101.0.1:3000 11 1507 1 2025-11-27 01:59:38.371 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45376 10 6452 1 2025-11-27 02:00:27.415 00:00:10.365 TCP 23.104.0.1:59240 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:00:38.600 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50148 10 6452 1 2025-11-27 01:56:08.749 00:05:55.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 01:56:08.749 00:05:55.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 02:01:27.822 00:00:10.433 TCP 23.104.0.1:41064 -> 1.101.0.1:3000 15 1926 1 2025-11-27 02:01:38.812 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:40838 12 10584 1 2025-11-27 02:02:28.297 00:00:10.365 TCP 23.104.0.1:46200 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:02:39.083 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40950 10 6661 1 2025-11-27 02:03:28.326 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 02:03:28.050 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 02:03:28.700 00:00:10.371 TCP 23.104.0.1:46904 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:03:39.301 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40022 10 6661 1 2025-11-27 02:04:29.113 00:00:10.362 TCP 23.104.0.1:46478 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:04:39.520 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47532 10 6661 1 2025-11-27 02:05:29.514 00:00:10.366 TCP 23.104.0.1:46292 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:05:39.735 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40006 10 6661 1 2025-11-27 02:06:29.916 00:00:10.382 TCP 23.104.0.1:60378 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:06:39.947 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60408 10 6661 1 2025-11-27 02:02:08.752 00:05:55.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 02:02:08.756 00:05:55.554 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 02:07:30.339 00:00:10.366 TCP 23.104.0.1:41898 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:07:40.184 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41958 10 6661 1 2025-11-27 02:08:28.313 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 02:08:28.529 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 02:08:30.741 00:00:10.346 TCP 23.104.0.1:39518 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:08:40.397 00:00:10.765 TCP 1.101.0.1:3000 -> 22.102.0.1:53502 10 6661 1 2025-11-27 02:09:31.134 00:00:10.324 TCP 23.104.0.1:47712 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:09:41.199 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54284 10 6661 1 2025-11-27 02:10:31.502 00:00:10.364 TCP 23.104.0.1:33924 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:10:41.422 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56022 10 6661 1 2025-11-27 02:11:31.908 00:00:10.398 TCP 23.104.0.1:46674 -> 1.101.0.1:3000 15 1926 1 2025-11-27 02:11:41.650 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:54652 12 10578 1 2025-11-27 02:12:32.346 00:00:10.363 TCP 23.104.0.1:35602 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:12:41.853 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36514 10 6661 1 2025-11-27 02:08:08.757 00:05:55.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 02:08:08.753 00:05:55.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 02:13:28.486 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 02:13:28.424 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 02:13:32.749 00:00:10.380 TCP 23.104.0.1:52078 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:13:42.081 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40560 10 6661 1 2025-11-27 02:14:33.187 00:00:10.364 TCP 23.104.0.1:44766 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:14:42.288 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53392 10 6661 1 2025-11-27 02:15:33.590 00:00:10.364 TCP 23.104.0.1:36342 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:15:42.510 00:00:10.378 TCP 1.101.0.1:3000 -> 22.102.0.1:45476 10 6661 1 2025-11-27 02:16:33.999 00:00:10.364 TCP 23.104.0.1:59682 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:16:42.926 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44560 10 6661 1 2025-11-27 02:17:34.403 00:00:10.364 TCP 23.104.0.1:33882 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:17:43.175 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36362 10 6661 1 2025-11-27 02:18:28.587 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 02:18:28.358 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 02:18:34.803 00:00:10.327 TCP 23.104.0.1:41314 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:18:43.404 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54684 10 6661 1 2025-11-27 02:14:08.759 00:05:55.554 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 02:14:08.756 00:05:55.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 02:19:35.165 00:00:10.328 TCP 23.104.0.1:46256 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:19:43.630 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34304 10 6661 1 2025-11-27 02:20:35.535 00:00:10.365 TCP 23.104.0.1:49180 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:20:43.851 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:48270 10 6661 1 2025-11-27 02:21:35.943 00:00:10.390 TCP 23.104.0.1:35288 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:21:44.086 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51886 10 6661 1 2025-11-27 02:22:36.359 00:00:10.606 TCP 23.104.0.1:48182 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:22:44.317 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41656 10 6661 1 2025-11-27 02:23:29.228 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 02:23:29.338 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 02:23:37.008 00:00:10.367 TCP 23.104.0.1:50252 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:23:44.537 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39740 10 6661 1 2025-11-27 02:24:37.417 00:00:10.379 TCP 23.104.0.1:44672 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:24:44.760 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59032 10 6661 1 2025-11-27 02:20:08.761 00:05:55.554 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 02:20:08.759 00:05:55.560 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 02:25:37.834 00:00:10.331 TCP 23.104.0.1:44914 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:25:44.992 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47496 10 6661 1 2025-11-27 02:26:38.205 00:00:10.487 TCP 23.104.0.1:59052 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:26:45.214 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47002 10 6661 1 2025-11-27 02:27:38.730 00:00:10.377 TCP 23.104.0.1:43668 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:27:45.437 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46496 10 6661 1 2025-11-27 02:28:28.610 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 02:28:28.552 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 02:28:39.147 00:00:10.365 TCP 23.104.0.1:36464 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:28:45.666 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42058 10 6661 1 2025-11-27 02:29:39.549 00:00:10.592 TCP 23.104.0.1:35900 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:29:45.878 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:38922 10 6661 1 2025-11-27 02:30:40.179 00:00:10.320 TCP 23.104.0.1:40308 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:30:46.111 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49596 10 6661 1 2025-11-27 02:26:08.761 00:05:55.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 02:26:08.759 00:05:55.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 02:31:40.541 00:00:10.363 TCP 23.104.0.1:55042 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:31:46.325 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60820 10 6661 1 2025-11-27 02:32:40.949 00:00:10.371 TCP 23.104.0.1:41868 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:32:46.494 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:42676 10 6661 1 2025-11-27 02:33:28.778 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 02:33:28.821 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 02:33:41.360 00:00:10.427 TCP 23.104.0.1:35846 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:33:46.674 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55992 10 6661 1 2025-11-27 02:34:41.833 00:00:10.393 TCP 23.104.0.1:40812 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:34:46.855 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44568 10 6661 1 2025-11-27 02:35:42.264 00:00:10.372 TCP 23.104.0.1:55452 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:35:47.083 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:38726 10 6661 1 2025-11-27 02:36:42.674 00:00:10.438 TCP 23.104.0.1:40102 -> 1.101.0.1:3000 15 1926 1 2025-11-27 02:36:47.251 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:41322 12 10584 1 2025-11-27 02:32:08.763 00:05:55.558 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 02:32:08.760 00:05:55.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 02:37:43.145 00:00:10.361 TCP 23.104.0.1:45352 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:37:47.497 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55730 10 6661 1 2025-11-27 02:38:29.058 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 02:38:29.003 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 02:38:43.544 00:00:10.373 TCP 23.104.0.1:58324 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:38:47.671 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41686 10 6661 1 2025-11-27 02:39:43.953 00:00:10.375 TCP 23.104.0.1:51472 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:39:47.881 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34550 10 6661 1 2025-11-27 02:40:44.367 00:00:10.323 TCP 23.104.0.1:37608 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:40:48.099 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55586 10 6661 1 2025-11-27 02:41:44.729 00:00:10.372 TCP 23.104.0.1:33910 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:41:48.325 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40854 10 6661 1 2025-11-27 02:42:45.149 00:00:10.364 TCP 23.104.0.1:51014 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:42:48.540 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34666 10 6661 1 2025-11-27 02:38:08.765 00:05:55.558 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 02:38:08.762 00:05:55.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 02:43:28.874 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 02:43:29.027 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 02:43:45.558 00:00:10.373 TCP 23.104.0.1:51886 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:43:48.749 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:46590 10 6661 1 2025-11-27 02:44:45.977 00:00:10.360 TCP 23.104.0.1:37722 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:44:48.982 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35584 10 6661 1 2025-11-27 02:45:46.377 00:00:10.365 TCP 23.104.0.1:38246 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:45:49.202 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54018 10 6661 1 2025-11-27 02:46:46.780 00:00:10.365 TCP 23.104.0.1:34374 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:46:49.417 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50860 10 6661 1 2025-11-27 02:47:49.591 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33564 10 6661 1 2025-11-27 02:47:47.185 00:00:10.365 TCP 23.104.0.1:49392 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:48:29.150 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 02:48:29.039 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 02:48:47.592 00:00:10.365 TCP 23.104.0.1:38972 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:44:08.763 00:05:55.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 02:48:49.800 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:46582 10 6661 1 2025-11-27 02:44:08.764 00:05:55.558 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 02:49:49.975 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:39446 10 6661 1 2025-11-27 02:49:47.990 00:00:10.370 TCP 23.104.0.1:57194 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:50:50.223 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49588 10 6661 1 2025-11-27 02:50:48.392 00:00:10.366 TCP 23.104.0.1:49960 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:51:48.788 00:00:10.413 TCP 23.104.0.1:41406 -> 1.101.0.1:3000 15 1926 1 2025-11-27 02:51:50.444 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:37450 12 10578 1 2025-11-27 02:52:50.693 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52360 10 6661 1 2025-11-27 02:52:49.240 00:00:10.365 TCP 23.104.0.1:35726 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:53:29.289 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 02:53:29.523 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 02:53:49.643 00:00:10.358 TCP 23.104.0.1:50944 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:53:50.920 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42848 10 6661 1 2025-11-27 02:54:50.051 00:00:10.892 TCP 23.104.0.1:43118 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:50:08.762 00:05:55.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 02:54:51.136 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48972 10 6661 1 2025-11-27 02:50:08.765 00:05:55.558 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 02:55:51.311 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50328 10 6661 1 2025-11-27 02:55:50.982 00:00:10.328 TCP 23.104.0.1:49972 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:56:51.349 00:00:10.366 TCP 23.104.0.1:34340 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:56:51.486 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42954 10 6661 1 2025-11-27 02:57:51.695 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36544 10 6661 1 2025-11-27 02:57:51.758 00:00:10.384 TCP 23.104.0.1:56840 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:58:29.820 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 02:58:29.809 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 162, total bytes: 519658, total packets: 1575, avg bps: 1111, avg pps: 0, avg bpp: 329 Time window: 2025-11-27 01:56:08 - 2025-11-27 02:58:29 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0039s User: 0.0019s Wall: 0.0062s flows/second: 26268.1 Runtime: 0.0062s