Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 05:59:12.150 00:00:10.329 TCP 23.104.0.1:39810 -> 1.101.0.1:3000 11 1507 1 2025-11-27 05:59:33.976 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34602 10 6452 1 2025-11-27 06:00:12.514 00:00:10.374 TCP 23.104.0.1:44348 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:00:34.211 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42832 10 6452 1 2025-11-27 05:56:08.828 00:05:55.550 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 05:56:08.830 00:05:55.544 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 06:01:12.921 00:00:10.371 TCP 23.104.0.1:54570 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:01:34.423 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53590 10 6452 1 2025-11-27 06:02:13.325 00:00:10.479 TCP 23.104.0.1:56232 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:02:34.637 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59500 10 6452 1 2025-11-27 06:03:13.846 00:00:10.337 TCP 23.104.0.1:36030 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:03:33.083 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 06:03:33.165 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 06:03:34.861 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52272 10 6452 1 2025-11-27 06:04:14.222 00:00:10.365 TCP 23.104.0.1:46756 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:04:35.089 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59230 10 6452 1 2025-11-27 06:05:14.623 00:00:10.370 TCP 23.104.0.1:53940 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:05:35.297 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40582 10 6452 1 2025-11-27 06:06:15.026 00:00:10.323 TCP 23.104.0.1:58348 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:06:35.508 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60862 10 6452 1 2025-11-27 06:02:08.831 00:05:55.546 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 06:02:08.828 00:05:55.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 06:07:15.384 00:00:10.364 TCP 23.104.0.1:36604 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:07:35.721 00:00:10.589 TCP 1.101.0.1:3000 -> 22.102.0.1:52372 10 6452 1 2025-11-27 06:08:15.787 00:00:10.368 TCP 23.104.0.1:36950 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:08:33.020 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 06:08:33.183 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 06:08:36.354 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42858 10 6452 1 2025-11-27 06:09:16.191 00:00:10.363 TCP 23.104.0.1:42326 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:09:36.566 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35550 10 6452 1 2025-11-27 06:10:16.591 00:00:10.368 TCP 23.104.0.1:34600 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:10:36.737 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33326 10 6452 1 2025-11-27 06:11:16.992 00:00:10.361 TCP 23.104.0.1:51082 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:11:36.951 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:48942 10 6452 1 2025-11-27 06:12:17.388 00:00:10.366 TCP 23.104.0.1:59220 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:12:37.139 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50188 10 6452 1 2025-11-27 06:08:08.832 00:05:55.546 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 06:08:08.830 00:05:55.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 06:13:33.506 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 06:13:17.794 00:00:10.365 TCP 23.104.0.1:59290 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:13:33.653 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 06:13:37.352 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44946 10 6452 1 2025-11-27 06:14:18.195 00:00:10.361 TCP 23.104.0.1:45234 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:14:37.565 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48472 10 6452 1 2025-11-27 06:15:18.597 00:00:10.368 TCP 23.104.0.1:49118 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:15:37.788 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43822 10 6452 1 2025-11-27 06:16:19.006 00:00:10.365 TCP 23.104.0.1:60080 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:16:38.002 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52240 10 6452 1 2025-11-27 06:17:19.411 00:00:10.395 TCP 23.104.0.1:51196 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:17:38.221 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41914 10 6452 1 2025-11-27 06:18:19.841 00:00:10.395 TCP 23.104.0.1:56974 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:18:33.334 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 06:18:33.508 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 06:18:38.461 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37236 10 6452 1 2025-11-27 06:14:08.831 00:05:55.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 06:14:08.835 00:05:55.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 06:19:20.271 00:00:10.365 TCP 23.104.0.1:53164 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:19:38.674 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:50146 10 6452 1 2025-11-27 06:20:20.672 00:00:10.369 TCP 23.104.0.1:35564 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:20:38.871 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51830 10 6452 1 2025-11-27 06:21:21.103 00:00:10.362 TCP 23.104.0.1:58250 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:21:39.096 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58290 10 6452 1 2025-11-27 06:22:21.504 00:00:10.365 TCP 23.104.0.1:38058 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:22:39.309 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48396 10 6452 1 2025-11-27 06:23:33.506 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 06:23:21.904 00:00:10.383 TCP 23.104.0.1:43840 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:23:33.779 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 06:23:39.527 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55286 10 6452 1 2025-11-27 06:24:22.327 00:00:10.333 TCP 23.104.0.1:46482 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:24:39.735 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48270 10 6452 1 2025-11-27 06:20:08.834 00:05:55.550 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 06:20:08.832 00:05:55.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 06:25:22.695 00:00:10.366 TCP 23.104.0.1:51052 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:25:39.950 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51936 10 6452 1 2025-11-27 06:26:23.111 00:00:10.376 TCP 23.104.0.1:56084 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:26:40.173 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41194 10 6452 1 2025-11-27 06:27:23.525 00:00:10.362 TCP 23.104.0.1:35354 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:27:40.391 00:00:11.505 TCP 1.101.0.1:3000 -> 22.102.0.1:42766 12 6556 1 2025-11-27 06:28:33.456 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 06:28:23.937 00:00:10.390 TCP 23.104.0.1:40068 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:28:33.478 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 06:28:41.932 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57350 10 6452 1 2025-11-27 06:29:24.372 00:00:10.367 TCP 23.104.0.1:57182 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:29:42.166 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56392 10 6452 1 2025-11-27 06:30:24.783 00:00:10.320 TCP 23.104.0.1:48400 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:30:42.338 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35272 10 6452 1 2025-11-27 06:26:08.836 00:05:55.549 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 06:26:08.834 00:05:55.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 06:31:25.139 00:00:10.563 TCP 23.104.0.1:59164 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:31:42.561 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40638 10 6452 1 2025-11-27 06:32:25.738 00:00:10.367 TCP 23.104.0.1:41546 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:32:42.776 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59538 10 6452 1 2025-11-27 06:33:33.820 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 06:33:33.815 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 06:33:26.140 00:00:10.364 TCP 23.104.0.1:50688 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:33:43.015 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59680 10 6452 1 2025-11-27 06:34:26.544 00:00:10.361 TCP 23.104.0.1:50518 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:34:43.228 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44392 10 6452 1 2025-11-27 06:35:26.947 00:00:10.366 TCP 23.104.0.1:54032 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:35:43.447 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36578 10 6452 1 2025-11-27 06:36:27.357 00:00:10.363 TCP 23.104.0.1:34576 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:36:43.670 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38974 10 6452 1 2025-11-27 06:32:08.835 00:05:55.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 06:32:08.839 00:05:55.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 06:37:27.762 00:00:10.325 TCP 23.104.0.1:43782 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:37:43.887 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33800 10 6452 1 2025-11-27 06:38:33.928 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 06:38:33.709 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 06:38:28.125 00:00:10.322 TCP 23.104.0.1:57772 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:38:44.107 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48356 10 6452 1 2025-11-27 06:39:28.485 00:00:10.361 TCP 23.104.0.1:50196 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:39:44.324 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51138 10 6452 1 2025-11-27 06:40:28.885 00:00:10.643 TCP 23.104.0.1:58694 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:40:44.537 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58578 10 6452 1 2025-11-27 06:41:29.566 00:00:10.363 TCP 23.104.0.1:44378 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:41:44.748 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58810 10 6452 1 2025-11-27 06:42:29.967 00:00:10.377 TCP 23.104.0.1:51606 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:42:44.918 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35514 10 6452 1 2025-11-27 06:38:08.839 00:05:55.548 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 06:38:08.837 00:05:55.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 06:43:33.705 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 06:43:33.783 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 06:43:30.387 00:00:10.430 TCP 23.104.0.1:39088 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:43:45.136 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53288 10 6452 1 2025-11-27 06:44:30.862 00:00:11.407 TCP 23.104.0.1:32934 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:44:45.355 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-11-27 06:45:32.310 00:00:10.321 TCP 23.104.0.1:36618 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:45:45.579 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:48750 10 6452 1 2025-11-27 06:46:32.673 00:00:10.366 TCP 23.104.0.1:38520 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:46:45.748 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55916 10 6452 1 2025-11-27 06:47:33.104 00:00:10.364 TCP 23.104.0.1:37084 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:47:45.956 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 12 6556 1 2025-11-27 06:48:33.909 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 06:48:33.948 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 06:48:33.514 00:00:10.365 TCP 23.104.0.1:38600 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:48:46.183 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46278 10 6452 1 2025-11-27 06:44:08.840 00:05:55.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 06:44:08.837 00:05:55.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 06:49:33.918 00:00:10.376 TCP 23.104.0.1:48798 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:49:46.358 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60402 10 6452 1 2025-11-27 06:50:34.332 00:00:10.362 TCP 23.104.0.1:38426 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:50:46.568 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 10 6452 1 2025-11-27 06:51:34.734 00:00:10.325 TCP 23.104.0.1:44344 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:51:46.783 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50970 11 6504 1 2025-11-27 06:52:35.107 00:00:10.362 TCP 23.104.0.1:59688 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:52:47.016 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41310 10 6452 1 2025-11-27 06:53:33.988 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 06:53:34.111 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 06:53:35.509 00:00:10.362 TCP 23.104.0.1:43856 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:53:47.235 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37452 10 6452 1 2025-11-27 06:54:35.916 00:00:10.380 TCP 23.104.0.1:35216 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:54:47.463 00:00:10.632 TCP 1.101.0.1:3000 -> 22.102.0.1:47018 10 6452 1 2025-11-27 06:50:08.839 00:05:55.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 06:50:08.842 00:05:55.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 06:55:36.331 00:00:10.365 TCP 23.104.0.1:53746 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:55:48.135 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42628 10 6452 1 2025-11-27 06:56:36.739 00:00:10.365 TCP 23.104.0.1:34672 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:56:48.360 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35702 10 6452 1 2025-11-27 06:57:37.140 00:00:10.367 TCP 23.104.0.1:40528 -> 1.101.0.1:3000 11 1507 1 2025-11-27 06:57:48.576 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44152 10 6452 1 2025-11-27 06:58:34.389 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 06:58:34.224 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 06:58:37.552 00:00:10.378 TCP 23.104.0.1:50956 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492156, total packets: 1567, avg bps: 1047, avg pps: 0, avg bpp: 314 Time window: 2025-11-27 05:56:08 - 2025-11-27 06:58:47 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0052s User: 0.0010s Wall: 0.0023s flows/second: 69748.2 Runtime: 0.0024s