Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 07:59:04.479 00:00:10.362 TCP 23.104.0.1:58990 -> 1.101.0.1:3000 11 1507 1 2025-11-27 07:59:08.551 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:34928 10 6452 1 2025-11-27 08:00:04.883 00:00:10.339 TCP 23.104.0.1:47824 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:00:08.798 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:50238 10 6452 1 2025-11-27 07:56:08.869 00:05:55.541 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 07:56:08.867 00:05:55.546 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 08:01:05.258 00:00:10.325 TCP 23.104.0.1:32800 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:01:08.994 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:38536 10 6452 1 2025-11-27 08:02:05.624 00:00:10.365 TCP 23.104.0.1:50468 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:02:09.245 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43134 10 6452 1 2025-11-27 08:03:06.031 00:00:10.515 TCP 23.104.0.1:57096 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:03:09.416 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58750 10 6452 1 2025-11-27 08:03:35.293 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 08:03:35.416 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 08:04:06.583 00:00:10.367 TCP 23.104.0.1:43618 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:04:09.623 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39476 10 6452 1 2025-11-27 08:05:09.836 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36798 10 6452 1 2025-11-27 08:05:06.991 00:00:10.366 TCP 23.104.0.1:56924 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:06:10.080 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39592 10 6452 1 2025-11-27 08:06:07.390 00:00:10.372 TCP 23.104.0.1:56090 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:02:08.870 00:05:55.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 08:02:08.868 00:05:55.548 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 08:07:07.801 00:00:10.332 TCP 23.104.0.1:32946 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:07:10.291 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44890 10 6452 1 2025-11-27 08:08:08.167 00:00:10.364 TCP 23.104.0.1:37880 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:08:10.504 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44108 10 6452 1 2025-11-27 08:08:35.496 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 08:08:35.473 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 08:09:10.720 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45578 10 6452 1 2025-11-27 08:09:08.574 00:00:10.363 TCP 23.104.0.1:38712 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:10:10.929 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:37878 10 6452 1 2025-11-27 08:10:08.978 00:00:10.366 TCP 23.104.0.1:51918 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:11:09.385 00:00:10.373 TCP 23.104.0.1:33298 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:11:11.126 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32784 10 6452 1 2025-11-27 08:12:11.342 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:57390 12 10375 1 2025-11-27 08:12:09.791 00:00:10.451 TCP 23.104.0.1:46844 -> 1.101.0.1:3000 15 1926 1 2025-11-27 08:08:08.883 00:05:55.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 08:08:08.882 00:05:55.534 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 08:13:10.281 00:00:10.362 TCP 23.104.0.1:32824 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:13:11.543 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42278 10 6452 1 2025-11-27 08:13:35.435 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 08:13:35.694 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 08:14:11.754 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47744 10 6452 1 2025-11-27 08:14:10.678 00:00:10.374 TCP 23.104.0.1:53502 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:15:11.108 00:00:10.322 TCP 23.104.0.1:42108 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:15:11.968 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41868 10 6452 1 2025-11-27 08:16:11.468 00:00:10.383 TCP 23.104.0.1:41120 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:16:12.188 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40018 10 6452 1 2025-11-27 08:17:11.889 00:00:10.376 TCP 23.104.0.1:56576 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:17:12.399 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44596 10 6452 1 2025-11-27 08:18:12.302 00:00:10.363 TCP 23.104.0.1:56160 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:18:12.612 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49646 10 6452 1 2025-11-27 08:18:35.855 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 08:18:35.883 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 08:14:08.876 00:05:55.543 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 08:14:08.877 00:05:55.538 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 08:19:12.707 00:00:10.359 TCP 23.104.0.1:56540 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:19:12.825 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46098 10 6452 1 2025-11-27 08:20:13.044 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60764 10 6452 1 2025-11-27 08:20:13.109 00:00:10.378 TCP 23.104.0.1:42738 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:21:13.255 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59376 10 6452 1 2025-11-27 08:21:13.527 00:00:10.381 TCP 23.104.0.1:53904 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:22:13.464 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:39250 11 6504 1 2025-11-27 08:22:13.947 00:00:10.329 TCP 23.104.0.1:34274 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:23:13.751 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:46426 10 6452 1 2025-11-27 08:23:14.323 00:00:10.323 TCP 23.104.0.1:47650 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:23:35.720 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 08:23:35.681 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 08:24:14.692 00:00:10.366 TCP 23.104.0.1:44600 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:24:13.938 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45722 10 6452 1 2025-11-27 08:20:08.878 00:05:55.538 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 08:20:08.875 00:05:55.543 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 08:25:15.108 00:00:10.364 TCP 23.104.0.1:56580 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:25:14.172 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57962 10 6452 1 2025-11-27 08:26:15.513 00:00:10.365 TCP 23.104.0.1:42426 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:26:14.389 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49672 10 6452 1 2025-11-27 08:27:14.607 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55682 10 6452 1 2025-11-27 08:27:15.915 00:00:10.374 TCP 23.104.0.1:58470 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:28:14.830 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55074 10 6452 1 2025-11-27 08:28:16.338 00:00:10.367 TCP 23.104.0.1:41562 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:28:35.869 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 08:28:36.016 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 08:29:15.083 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33220 10 6452 1 2025-11-27 08:29:16.747 00:00:10.388 TCP 23.104.0.1:44444 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:30:15.294 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59410 10 6452 1 2025-11-27 08:30:17.172 00:00:10.323 TCP 23.104.0.1:38436 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:26:08.876 00:05:55.544 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 08:26:08.879 00:05:55.539 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 08:31:15.510 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-11-27 08:31:17.533 00:00:10.362 TCP 23.104.0.1:47578 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:32:15.722 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46670 10 6452 1 2025-11-27 08:32:17.934 00:00:10.377 TCP 23.104.0.1:56850 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:33:15.897 00:00:10.246 TCP 1.101.0.1:3000 -> 22.102.0.1:32770 10 6452 1 2025-11-27 08:33:18.350 00:00:10.371 TCP 23.104.0.1:54332 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:33:36.012 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 08:33:36.030 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 08:34:16.184 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60852 10 6452 1 2025-11-27 08:34:18.757 00:00:10.379 TCP 23.104.0.1:56960 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:35:16.357 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:56532 10 6452 1 2025-11-27 08:35:19.170 00:00:10.368 TCP 23.104.0.1:42668 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:36:16.566 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47642 10 6452 1 2025-11-27 08:36:19.574 00:00:10.362 TCP 23.104.0.1:48046 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:32:08.877 00:05:55.544 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 08:32:08.880 00:05:55.539 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 08:37:16.782 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47424 10 6452 1 2025-11-27 08:37:19.978 00:00:10.373 TCP 23.104.0.1:58272 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:38:20.386 00:00:10.368 TCP 23.104.0.1:50262 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:38:16.996 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38700 10 6452 1 2025-11-27 08:38:36.356 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 08:38:36.201 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 08:39:17.209 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59510 10 6452 1 2025-11-27 08:39:20.790 00:00:10.367 TCP 23.104.0.1:57904 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:40:21.195 00:00:10.363 TCP 23.104.0.1:39486 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:40:17.423 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39204 10 6452 1 2025-11-27 08:41:21.592 00:00:10.365 TCP 23.104.0.1:55910 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:41:17.596 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46658 10 6452 1 2025-11-27 08:42:17.773 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59844 10 6452 1 2025-11-27 08:42:21.995 00:00:10.363 TCP 23.104.0.1:34498 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:38:08.881 00:05:55.548 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 08:38:08.884 00:05:55.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 08:43:17.942 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:60872 10 6452 1 2025-11-27 08:43:36.420 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 08:43:22.397 00:00:10.367 TCP 23.104.0.1:38478 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:43:36.594 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 08:44:18.133 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43148 10 6452 1 2025-11-27 08:44:22.802 00:00:10.365 TCP 23.104.0.1:36692 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:45:18.358 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52178 10 6452 1 2025-11-27 08:45:23.205 00:00:10.370 TCP 23.104.0.1:37692 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:46:18.573 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:49748 12 10375 1 2025-11-27 08:46:23.611 00:00:10.439 TCP 23.104.0.1:54476 -> 1.101.0.1:3000 15 1926 1 2025-11-27 08:47:18.814 00:00:10.460 TCP 1.101.0.1:3000 -> 22.102.0.1:33364 10 6452 1 2025-11-27 08:47:24.110 00:00:10.718 TCP 23.104.0.1:43674 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:48:19.318 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48384 10 6452 1 2025-11-27 08:48:36.258 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 08:48:36.477 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 08:48:24.864 00:00:10.391 TCP 23.104.0.1:37146 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:44:08.885 00:05:55.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 08:44:08.883 00:05:55.547 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 08:49:19.542 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50944 10 6452 1 2025-11-27 08:49:25.273 00:00:10.367 TCP 23.104.0.1:35422 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:50:19.769 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43018 10 6452 1 2025-11-27 08:50:25.674 00:00:10.365 TCP 23.104.0.1:44344 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:51:19.941 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39974 10 6452 1 2025-11-27 08:51:26.102 00:00:10.325 TCP 23.104.0.1:33532 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:52:20.182 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42184 10 6452 1 2025-11-27 08:52:26.473 00:00:10.365 TCP 23.104.0.1:36148 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:53:20.412 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39056 10 6452 1 2025-11-27 08:53:36.575 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 08:53:36.525 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 08:53:26.877 00:00:10.322 TCP 23.104.0.1:41764 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:54:20.628 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55488 10 6452 1 2025-11-27 08:54:27.235 00:00:10.362 TCP 23.104.0.1:33416 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:50:08.889 00:05:55.542 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 08:50:08.886 00:05:55.547 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 08:55:20.844 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51756 12 6556 1 2025-11-27 08:55:27.635 00:00:10.375 TCP 23.104.0.1:44752 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:56:21.073 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49970 10 6452 1 2025-11-27 08:56:28.061 00:00:10.417 TCP 23.104.0.1:57846 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:57:21.282 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49280 10 6452 1 2025-11-27 08:57:28.521 00:00:10.366 TCP 23.104.0.1:44524 -> 1.101.0.1:3000 11 1507 1 2025-11-27 08:58:21.496 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58496 10 6452 1 2025-11-27 08:58:36.522 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 08:58:36.705 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 08:58:28.923 00:00:10.374 TCP 23.104.0.1:56424 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507188, total packets: 1587, avg bps: 1081, avg pps: 0, avg bpp: 319 Time window: 2025-11-27 07:56:08 - 2025-11-27 08:58:39 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0017s Wall: 0.0063s flows/second: 26160.6 Runtime: 0.0063s