Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 02:58:52.185 00:00:10.393 TCP 23.104.0.1:48816 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:58:51.902 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 10 6661 1 2025-11-27 02:59:52.615 00:00:10.365 TCP 23.104.0.1:39826 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:59:52.087 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42464 10 6661 1 2025-11-27 03:00:52.297 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36214 10 6661 1 2025-11-27 02:56:08.768 00:05:55.558 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 03:00:53.022 00:00:10.363 TCP 23.104.0.1:52388 -> 1.101.0.1:3000 11 1507 1 2025-11-27 02:56:08.765 00:05:55.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 03:01:53.424 00:00:10.325 TCP 23.104.0.1:51224 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:01:52.515 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52748 10 6661 1 2025-11-27 03:02:52.728 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54166 10 6661 1 2025-11-27 03:02:53.788 00:00:10.342 TCP 23.104.0.1:42026 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:03:29.429 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 03:03:29.488 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 03:03:52.941 00:00:10.842 TCP 1.101.0.1:3000 -> 22.102.0.1:39524 10 6661 1 2025-11-27 03:03:54.171 00:00:10.364 TCP 23.104.0.1:53746 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:04:53.824 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39206 10 6661 1 2025-11-27 03:04:54.577 00:00:10.357 TCP 23.104.0.1:52312 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:05:54.979 00:00:10.369 TCP 23.104.0.1:48774 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:05:54.042 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52574 10 6661 1 2025-11-27 03:06:55.397 00:00:10.365 TCP 23.104.0.1:53486 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:02:08.769 00:05:55.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 03:06:54.259 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58604 10 6661 1 2025-11-27 03:02:08.771 00:05:55.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 03:07:55.801 00:00:10.327 TCP 23.104.0.1:55512 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:07:54.468 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58304 10 6661 1 2025-11-27 03:08:29.586 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 03:08:29.378 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 03:08:54.684 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52982 10 6661 1 2025-11-27 03:08:56.167 00:00:10.368 TCP 23.104.0.1:43594 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:09:54.901 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39864 10 6661 1 2025-11-27 03:09:56.569 00:00:10.368 TCP 23.104.0.1:45754 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:10:55.115 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44996 10 6661 1 2025-11-27 03:10:56.971 00:00:10.370 TCP 23.104.0.1:36758 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:11:55.326 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37170 10 6661 1 2025-11-27 03:11:57.383 00:00:10.325 TCP 23.104.0.1:59228 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:12:55.561 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60350 10 6661 1 2025-11-27 03:08:08.775 00:05:55.555 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 03:08:08.772 00:05:55.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 03:12:57.745 00:00:10.365 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:13:29.720 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 03:13:29.734 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 03:13:55.786 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55516 10 6661 1 2025-11-27 03:13:58.149 00:00:10.369 TCP 23.104.0.1:33632 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:14:56.025 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56640 10 6661 1 2025-11-27 03:14:58.556 00:00:10.368 TCP 23.104.0.1:47098 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:15:56.242 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37328 10 6661 1 2025-11-27 03:15:58.962 00:00:10.390 TCP 23.104.0.1:49828 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:16:56.454 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46778 10 6661 1 2025-11-27 03:16:59.391 00:00:10.371 TCP 23.104.0.1:53536 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:17:56.671 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:34576 10 6661 1 2025-11-27 03:17:59.801 00:00:10.368 TCP 23.104.0.1:58772 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:18:29.791 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 03:18:29.811 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 03:14:08.777 00:05:55.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 03:14:08.774 00:05:55.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 03:18:56.879 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35556 10 6661 1 2025-11-27 03:19:00.209 00:00:10.368 TCP 23.104.0.1:35778 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:19:57.112 00:00:10.851 TCP 1.101.0.1:3000 -> 22.102.0.1:40992 10 6661 1 2025-11-27 03:20:00.615 00:00:10.325 TCP 23.104.0.1:33698 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:21:00.976 00:00:10.323 TCP 23.104.0.1:40716 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:20:58.006 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42216 10 6661 1 2025-11-27 03:21:58.218 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35734 10 6661 1 2025-11-27 03:22:01.339 00:00:10.374 TCP 23.104.0.1:57110 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:22:58.435 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38900 10 6661 1 2025-11-27 03:23:01.750 00:00:10.362 TCP 23.104.0.1:50144 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:23:29.864 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 03:23:29.812 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 03:23:58.643 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34948 10 6661 1 2025-11-27 03:24:02.147 00:00:10.364 TCP 23.104.0.1:50204 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:20:08.777 00:05:55.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 03:20:08.776 00:05:55.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 03:24:58.857 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:34884 10 6661 1 2025-11-27 03:25:02.551 00:00:10.324 TCP 23.104.0.1:33216 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:25:59.093 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59918 10 6661 1 2025-11-27 03:26:02.914 00:00:10.327 TCP 23.104.0.1:56370 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:26:59.302 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33572 10 6661 1 2025-11-27 03:27:03.276 00:00:10.324 TCP 23.104.0.1:44568 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:27:59.516 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36418 10 6661 1 2025-11-27 03:28:03.634 00:00:10.361 TCP 23.104.0.1:50242 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:28:30.037 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 03:28:29.984 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 03:28:59.723 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50340 10 6661 1 2025-11-27 03:29:04.050 00:00:10.363 TCP 23.104.0.1:52822 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:29:59.932 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:45764 10 6661 1 2025-11-27 03:30:04.458 00:00:10.361 TCP 23.104.0.1:40310 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:26:08.781 00:05:55.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 03:26:08.779 00:05:55.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 03:31:00.192 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57440 10 6661 1 2025-11-27 03:31:04.857 00:00:10.327 TCP 23.104.0.1:47110 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:32:00.402 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37128 10 6661 1 2025-11-27 03:32:05.220 00:00:10.363 TCP 23.104.0.1:39668 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:33:00.624 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46166 10 6661 1 2025-11-27 03:33:05.627 00:00:10.318 TCP 23.104.0.1:42718 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:33:29.935 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 03:33:30.059 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 03:34:00.831 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54812 10 6661 1 2025-11-27 03:34:05.983 00:00:10.373 TCP 23.104.0.1:58568 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:35:01.057 00:00:10.331 TCP 1.101.0.1:3000 -> 22.102.0.1:60842 10 6661 1 2025-11-27 03:35:06.396 00:00:10.370 TCP 23.104.0.1:47422 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:36:01.427 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46534 10 6661 1 2025-11-27 03:36:06.807 00:00:10.368 TCP 23.104.0.1:44082 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:32:08.782 00:05:55.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 03:32:08.781 00:05:55.569 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 03:37:01.599 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51820 10 6661 1 2025-11-27 03:37:07.207 00:00:10.370 TCP 23.104.0.1:40798 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:38:01.819 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:44240 10 6661 1 2025-11-27 03:38:07.613 00:00:10.364 TCP 23.104.0.1:58828 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:38:30.259 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 03:38:30.381 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 03:39:02.085 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34694 10 6661 1 2025-11-27 03:39:08.012 00:00:10.372 TCP 23.104.0.1:55042 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:40:02.304 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52570 10 6661 1 2025-11-27 03:40:08.423 00:00:10.366 TCP 23.104.0.1:60252 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:41:02.532 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:40178 10 6661 1 2025-11-27 03:41:08.824 00:00:10.379 TCP 23.104.0.1:50176 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:42:02.776 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45464 10 6661 1 2025-11-27 03:42:09.230 00:00:10.365 TCP 23.104.0.1:59446 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:38:08.789 00:05:55.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 03:38:08.786 00:05:55.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 03:43:02.990 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:43740 10 6661 1 2025-11-27 03:43:09.639 00:00:10.368 TCP 23.104.0.1:57228 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:43:30.296 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 03:43:30.044 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 03:44:03.225 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52780 10 6661 1 2025-11-27 03:44:10.048 00:00:10.376 TCP 23.104.0.1:60562 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:45:03.447 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48956 10 6661 1 2025-11-27 03:45:10.461 00:00:10.369 TCP 23.104.0.1:39674 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:46:03.661 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38752 10 6661 1 2025-11-27 03:46:10.871 00:00:10.461 TCP 23.104.0.1:46752 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:47:03.875 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53260 10 6661 1 2025-11-27 03:47:11.379 00:00:10.323 TCP 23.104.0.1:51248 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:48:04.108 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56844 10 6661 1 2025-11-27 03:48:11.753 00:00:10.363 TCP 23.104.0.1:36556 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:48:30.315 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 03:48:30.352 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 03:44:08.788 00:05:55.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 03:44:08.790 00:05:55.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 03:49:04.323 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51414 10 6661 1 2025-11-27 03:49:12.155 00:00:10.357 TCP 23.104.0.1:52536 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:50:04.504 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39840 10 6661 1 2025-11-27 03:50:12.555 00:00:10.364 TCP 23.104.0.1:34280 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:51:04.711 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44774 10 6661 1 2025-11-27 03:51:12.961 00:00:10.326 TCP 23.104.0.1:57758 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:52:04.924 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:44940 10 6661 1 2025-11-27 03:52:13.324 00:00:10.365 TCP 23.104.0.1:47462 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:53:05.173 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39574 10 6661 1 2025-11-27 03:53:13.729 00:00:10.380 TCP 23.104.0.1:59722 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:53:30.444 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 03:53:30.293 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 03:54:05.388 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41476 10 6661 1 2025-11-27 03:54:14.145 00:00:10.707 TCP 23.104.0.1:39434 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:50:08.794 00:05:55.561 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 03:50:08.796 00:05:55.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 03:55:05.615 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51596 10 6661 1 2025-11-27 03:55:14.895 00:00:10.367 TCP 23.104.0.1:49860 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:56:05.844 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36910 10 6661 1 2025-11-27 03:56:15.299 00:00:11.635 TCP 23.104.0.1:46856 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:57:06.039 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52742 10 6661 1 2025-11-27 03:57:16.973 00:00:10.366 TCP 23.104.0.1:44470 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:58:06.256 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34456 10 6661 1 2025-11-27 03:58:17.380 00:00:11.106 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-11-27 03:58:30.600 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 03:58:30.860 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 164, total bytes: 510888, total packets: 1572, avg bps: 1092, avg pps: 0, avg bpp: 324 Time window: 2025-11-27 02:56:08 - 2025-11-27 03:58:30 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0043s User: 0.0021s Wall: 0.0024s flows/second: 67187.5 Runtime: 0.0025s