Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 04:58:44.808 00:00:10.367 TCP 23.104.0.1:53142 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:59:19.786 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:32900 10 6452 1 2025-11-27 04:59:45.215 00:00:10.361 TCP 23.104.0.1:42000 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:00:20.031 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43734 10 6452 1 2025-11-27 05:00:45.615 00:00:10.366 TCP 23.104.0.1:60218 -> 1.101.0.1:3000 11 1507 1 2025-11-27 04:56:08.808 00:05:55.559 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 04:56:08.810 00:05:55.553 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 05:01:20.246 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33606 10 6452 1 2025-11-27 05:01:46.021 00:00:10.365 TCP 23.104.0.1:33886 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:02:20.455 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60692 10 6452 1 2025-11-27 05:02:46.426 00:00:10.363 TCP 23.104.0.1:44712 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:03:31.678 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 05:03:31.731 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 05:03:20.674 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54670 10 6452 1 2025-11-27 05:03:46.829 00:00:10.380 TCP 23.104.0.1:41226 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:04:20.843 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46712 10 6452 1 2025-11-27 05:04:47.251 00:00:11.959 TCP 23.104.0.1:37992 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:05:21.023 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36952 10 6452 1 2025-11-27 05:05:49.249 00:00:10.359 TCP 23.104.0.1:60172 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:06:21.229 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41142 10 6452 1 2025-11-27 05:06:49.645 00:00:10.364 TCP 23.104.0.1:54102 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:02:08.814 00:05:55.550 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 05:02:08.811 00:05:55.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 05:07:21.401 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55736 10 6452 1 2025-11-27 05:07:50.061 00:00:10.362 TCP 23.104.0.1:50558 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:08:32.142 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 05:08:21.610 00:00:11.412 TCP 1.101.0.1:3000 -> 22.102.0.1:33588 10 6452 1 2025-11-27 05:08:31.991 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 05:08:50.461 00:00:10.362 TCP 23.104.0.1:35146 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:09:23.078 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:51032 10 6452 1 2025-11-27 05:09:50.868 00:00:10.367 TCP 23.104.0.1:40600 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:10:23.246 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35254 10 6452 1 2025-11-27 05:10:51.273 00:00:10.325 TCP 23.104.0.1:51052 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:11:23.462 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42840 10 6452 1 2025-11-27 05:11:51.635 00:00:10.367 TCP 23.104.0.1:37432 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:12:23.672 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59174 10 6452 1 2025-11-27 05:08:08.813 00:05:55.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 05:12:52.051 00:00:10.328 TCP 23.104.0.1:54300 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:08:08.816 00:05:55.550 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 05:13:31.860 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 05:13:23.882 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35154 10 6452 1 2025-11-27 05:13:32.010 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 05:13:52.419 00:00:10.317 TCP 23.104.0.1:57124 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:14:24.081 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47954 10 6452 1 2025-11-27 05:14:52.773 00:00:10.369 TCP 23.104.0.1:53198 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:15:24.295 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50940 10 6452 1 2025-11-27 05:15:53.181 00:00:10.322 TCP 23.104.0.1:33752 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:16:24.508 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35196 10 6452 1 2025-11-27 05:16:53.542 00:00:10.721 TCP 23.104.0.1:55508 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:17:24.724 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43708 10 6452 1 2025-11-27 05:17:54.300 00:00:10.323 TCP 23.104.0.1:34698 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:18:24.939 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49298 10 6452 1 2025-11-27 05:18:32.201 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 05:18:32.179 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 05:14:08.816 00:05:55.550 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 05:18:54.662 00:00:10.324 TCP 23.104.0.1:41302 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:14:08.814 00:05:55.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 05:19:25.175 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60916 10 6452 1 2025-11-27 05:19:55.025 00:00:10.631 TCP 23.104.0.1:59658 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:20:25.341 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52484 10 6452 1 2025-11-27 05:20:55.695 00:00:10.369 TCP 23.104.0.1:60362 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:21:25.552 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58368 10 6452 1 2025-11-27 05:21:56.105 00:00:10.373 TCP 23.104.0.1:48086 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:22:25.771 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45152 10 6452 1 2025-11-27 05:22:56.517 00:00:10.369 TCP 23.104.0.1:46358 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:23:25.977 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54920 10 6452 1 2025-11-27 05:23:32.064 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 05:23:32.296 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 05:23:56.922 00:00:10.390 TCP 23.104.0.1:44772 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:24:26.212 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39698 10 6452 1 2025-11-27 05:20:08.816 00:05:55.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 05:20:08.819 00:05:55.550 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 05:24:57.373 00:00:10.377 TCP 23.104.0.1:42526 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:25:26.432 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45432 10 6452 1 2025-11-27 05:25:57.789 00:00:10.373 TCP 23.104.0.1:46878 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:26:26.647 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34894 10 6452 1 2025-11-27 05:26:58.199 00:00:10.860 TCP 23.104.0.1:51362 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:27:26.812 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58234 11 6492 1 2025-11-27 05:27:59.113 00:00:10.361 TCP 23.104.0.1:52110 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:28:32.620 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 05:28:32.450 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 05:28:27.036 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50438 10 6452 1 2025-11-27 05:28:59.512 00:00:10.339 TCP 23.104.0.1:52994 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:29:27.256 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46008 10 6452 1 2025-11-27 05:29:59.881 00:00:10.390 TCP 23.104.0.1:35518 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:30:27.462 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46604 10 6452 1 2025-11-27 05:26:08.820 00:05:55.550 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 05:26:08.816 00:05:55.556 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 05:31:00.309 00:00:10.371 TCP 23.104.0.1:49222 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:31:27.636 00:00:10.722 TCP 1.101.0.1:3000 -> 22.102.0.1:45110 10 6452 1 2025-11-27 05:32:00.714 00:00:10.330 TCP 23.104.0.1:45164 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:32:28.398 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54998 10 6452 1 2025-11-27 05:33:01.105 00:00:10.368 TCP 23.104.0.1:37082 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:33:32.380 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 05:33:32.444 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 05:33:28.613 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52346 10 6452 1 2025-11-27 05:34:01.509 00:00:10.369 TCP 23.104.0.1:48190 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:34:28.824 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40740 10 6452 1 2025-11-27 05:35:01.923 00:00:10.401 TCP 23.104.0.1:46560 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:35:29.072 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43578 10 6452 1 2025-11-27 05:36:02.348 00:00:10.924 TCP 23.104.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:36:29.283 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55074 10 6452 1 2025-11-27 05:32:08.817 00:05:55.557 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 05:32:08.820 00:05:55.552 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 05:37:03.315 00:00:10.395 TCP 23.104.0.1:45598 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:37:29.494 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47970 10 6452 1 2025-11-27 05:38:03.721 00:00:10.328 TCP 23.104.0.1:54840 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:38:32.686 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 05:38:32.555 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 05:38:29.706 00:00:10.124 TCP 1.101.0.1:3000 -> 22.102.0.1:50970 10 6452 1 2025-11-27 05:39:04.106 00:00:10.365 TCP 23.104.0.1:55906 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:39:29.875 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34590 10 6452 1 2025-11-27 05:40:04.509 00:00:10.361 TCP 23.104.0.1:50132 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:40:30.097 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35170 10 6452 1 2025-11-27 05:41:04.909 00:00:10.364 TCP 23.104.0.1:56734 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:41:30.267 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51164 10 6452 1 2025-11-27 05:42:05.313 00:00:10.362 TCP 23.104.0.1:33250 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:42:30.439 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44602 10 6452 1 2025-11-27 05:38:08.822 00:05:55.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 05:38:08.825 00:05:55.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 05:43:05.715 00:00:10.347 TCP 23.104.0.1:40106 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:43:32.622 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 05:43:32.441 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 05:43:30.652 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39606 10 6452 1 2025-11-27 05:44:06.105 00:00:10.376 TCP 23.104.0.1:52568 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:44:30.824 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41718 10 6452 1 2025-11-27 05:45:06.520 00:00:10.365 TCP 23.104.0.1:36338 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:45:31.001 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53028 10 6452 1 2025-11-27 05:46:06.924 00:00:10.373 TCP 23.104.0.1:55840 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:46:31.243 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55182 10 6452 1 2025-11-27 05:47:07.334 00:00:10.331 TCP 23.104.0.1:47926 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:47:31.470 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47718 10 6452 1 2025-11-27 05:48:07.703 00:00:10.368 TCP 23.104.0.1:57888 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:48:32.868 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 05:48:32.885 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 05:48:31.689 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55930 10 6452 1 2025-11-27 05:44:08.827 00:05:55.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 05:44:08.823 00:05:55.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 05:49:08.108 00:00:10.363 TCP 23.104.0.1:51424 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:49:31.862 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54894 10 6452 1 2025-11-27 05:50:08.505 00:00:10.365 TCP 23.104.0.1:57762 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:50:32.090 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58058 10 6452 1 2025-11-27 05:51:08.920 00:00:10.348 TCP 23.104.0.1:34122 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:51:32.305 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33016 10 6452 1 2025-11-27 05:52:09.304 00:00:10.363 TCP 23.104.0.1:60214 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:52:32.520 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57494 10 6452 1 2025-11-27 05:53:09.708 00:00:10.323 TCP 23.104.0.1:42792 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:53:32.743 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 05:53:32.816 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 05:53:32.749 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58974 10 6452 1 2025-11-27 05:54:10.095 00:00:10.369 TCP 23.104.0.1:34294 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:54:32.962 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39916 10 6452 1 2025-11-27 05:50:08.829 00:05:55.545 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 05:50:08.826 00:05:55.550 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 05:55:10.503 00:00:10.372 TCP 23.104.0.1:37502 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:55:33.177 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49176 10 6452 1 2025-11-27 05:56:10.922 00:00:10.380 TCP 23.104.0.1:38088 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:56:33.385 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:40752 10 6452 1 2025-11-27 05:57:11.342 00:00:10.367 TCP 23.104.0.1:52568 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:57:33.587 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43338 10 6452 1 2025-11-27 05:58:11.747 00:00:10.365 TCP 23.104.0.1:54472 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:58:32.719 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 05:58:32.835 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 05:58:33.763 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57754 10 6452 1 Summary: total flows: 164, total bytes: 498388, total packets: 1573, avg bps: 1061, avg pps: 0, avg bpp: 316 Time window: 2025-11-27 04:56:08 - 2025-11-27 05:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0043s User: 0.0022s Wall: 0.0021s flows/second: 79302.0 Runtime: 0.0021s