Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 03:58:41.817 00:00:10.360 TCP 23.104.0.1:57118 -> 1.101.0.1:3000 11 1507 1 2025-11-28 03:58:59.655 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 03:58:59.775 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 03:58:55.727 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41576 10 6452 1 2025-11-28 03:59:42.215 00:00:10.844 TCP 23.104.0.1:56022 -> 1.101.0.1:3000 11 1507 1 2025-11-28 03:59:55.950 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36836 12 6556 1 2025-11-28 03:56:04.767 00:05:04.589 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 03:56:04.767 00:05:04.585 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 04:00:43.107 00:00:10.362 TCP 23.104.0.1:49958 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:00:56.197 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33962 10 6452 1 2025-11-28 04:01:43.509 00:00:10.399 TCP 23.104.0.1:43624 -> 1.101.0.1:3000 15 1926 1 2025-11-28 04:01:56.420 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52112 12 10375 1 2025-11-28 04:02:43.950 00:00:10.328 TCP 23.104.0.1:41452 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:02:56.658 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:34212 10 6452 1 2025-11-28 04:03:59.598 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 04:03:44.340 00:00:10.363 TCP 23.104.0.1:35976 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:03:59.183 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 04:03:56.866 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36290 10 6452 1 2025-11-28 04:04:44.744 00:00:10.324 TCP 23.104.0.1:56426 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:04:57.083 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54242 10 6452 1 2025-11-28 04:05:45.113 00:00:10.366 TCP 23.104.0.1:60900 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:02:04.768 00:05:04.586 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 04:05:57.299 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54040 10 6452 1 2025-11-28 04:02:04.765 00:05:04.591 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 04:06:45.519 00:00:10.366 TCP 23.104.0.1:56170 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:06:57.510 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54080 10 6452 1 2025-11-28 04:07:45.923 00:00:10.339 TCP 23.104.0.1:36602 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:07:57.730 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37124 10 6452 1 2025-11-28 04:08:59.750 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 04:08:59.589 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 04:08:46.296 00:00:11.698 TCP 23.104.0.1:44952 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:08:57.949 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33804 10 6452 1 2025-11-28 04:09:48.052 00:00:10.366 TCP 23.104.0.1:46706 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:09:58.178 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:38664 10 6452 1 2025-11-28 04:10:48.461 00:00:10.377 TCP 23.104.0.1:50504 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:10:58.360 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34352 10 6452 1 2025-11-28 04:11:48.869 00:00:10.368 TCP 23.104.0.1:50762 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:11:58.581 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59728 10 6452 1 2025-11-28 04:08:04.768 00:05:04.590 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 04:08:04.771 00:05:04.584 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 04:12:49.275 00:00:10.363 TCP 23.104.0.1:52744 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:12:58.750 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56858 10 6452 1 2025-11-28 04:14:00.121 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 04:13:49.675 00:00:10.377 TCP 23.104.0.1:38146 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:13:59.653 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 04:13:58.923 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:35970 10 6452 1 2025-11-28 04:14:50.109 00:00:10.367 TCP 23.104.0.1:47186 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:14:59.172 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54472 10 6452 1 2025-11-28 04:15:50.515 00:00:10.371 TCP 23.104.0.1:38810 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:15:59.340 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41068 10 6452 1 2025-11-28 04:16:50.923 00:00:10.384 TCP 23.104.0.1:42166 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:16:59.554 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35454 10 6452 1 2025-11-28 04:17:51.349 00:00:10.368 TCP 23.104.0.1:39630 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:17:59.728 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48922 10 6452 1 2025-11-28 04:14:04.771 00:05:04.587 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 04:14:04.772 00:05:04.583 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 04:18:59.740 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 04:18:59.834 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 04:18:51.755 00:00:10.388 TCP 23.104.0.1:44378 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:18:59.934 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51970 10 6452 1 2025-11-28 04:19:52.182 00:00:10.365 TCP 23.104.0.1:45062 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:20:00.146 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35588 10 6452 1 2025-11-28 04:20:52.588 00:00:10.366 TCP 23.104.0.1:43864 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:21:00.359 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48098 10 6452 1 2025-11-28 04:21:52.991 00:00:10.329 TCP 23.104.0.1:44436 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:22:00.571 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45850 10 6452 1 2025-11-28 04:22:53.354 00:00:10.362 TCP 23.104.0.1:51764 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:23:00.784 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57420 10 6452 1 2025-11-28 04:24:00.105 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 04:24:00.997 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:60656 10 6452 1 2025-11-28 04:20:04.772 00:05:04.587 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 04:23:59.841 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 04:23:53.758 00:00:10.339 TCP 23.104.0.1:55612 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:20:04.773 00:05:04.582 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 04:24:54.134 00:00:10.364 TCP 23.104.0.1:54642 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:25:01.191 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35306 10 6452 1 2025-11-28 04:25:54.537 00:00:10.366 TCP 23.104.0.1:36024 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:26:01.418 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42808 10 6452 1 2025-11-28 04:26:54.943 00:00:10.368 TCP 23.104.0.1:54018 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:27:01.594 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55920 10 6452 1 2025-11-28 04:27:55.349 00:00:10.363 TCP 23.104.0.1:37948 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:28:01.812 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54736 10 6452 1 2025-11-28 04:28:59.896 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 04:28:59.817 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 04:28:55.757 00:00:10.384 TCP 23.104.0.1:55102 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:29:02.036 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:44928 11 6504 1 2025-11-28 04:29:56.177 00:00:10.368 TCP 23.104.0.1:50600 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:26:04.775 00:05:04.582 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 04:26:04.775 00:05:04.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 04:30:02.317 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38706 10 6452 1 2025-11-28 04:30:56.579 00:00:10.325 TCP 23.104.0.1:47894 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:31:02.528 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55822 10 6452 1 2025-11-28 04:31:56.942 00:00:10.375 TCP 23.104.0.1:53014 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:32:02.743 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50684 10 6452 1 2025-11-28 04:32:57.355 00:00:12.940 TCP 23.104.0.1:59026 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:33:02.959 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37766 10 6452 1 2025-11-28 04:34:00.191 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 04:34:00.187 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 04:34:00.333 00:00:10.366 TCP 23.104.0.1:46328 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:34:03.132 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57070 10 6452 1 2025-11-28 04:35:00.738 00:00:10.366 TCP 23.104.0.1:38936 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:35:03.350 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51772 10 6452 1 2025-11-28 04:32:04.778 00:05:04.579 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 04:36:01.141 00:00:10.365 TCP 23.104.0.1:37470 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:32:04.775 00:05:04.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 04:36:03.573 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:34074 10 6452 1 2025-11-28 04:37:01.546 00:00:10.359 TCP 23.104.0.1:48212 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:37:03.760 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:45012 10 6452 1 2025-11-28 04:38:03.936 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:40072 10 6452 1 2025-11-28 04:38:01.945 00:00:10.367 TCP 23.104.0.1:50820 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:39:00.284 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 04:39:00.166 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 04:39:04.123 00:00:12.692 TCP 1.101.0.1:3000 -> 22.102.0.1:43996 10 6452 1 2025-11-28 04:39:02.353 00:00:14.555 TCP 23.104.0.1:54122 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:40:06.966 00:00:10.331 TCP 23.104.0.1:58084 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:40:06.862 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57274 10 6452 1 2025-11-28 04:41:07.332 00:00:10.364 TCP 23.104.0.1:44802 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:41:07.090 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:56500 10 6452 1 2025-11-28 04:38:04.777 00:05:04.592 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 04:38:04.780 00:05:04.586 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 04:42:07.738 00:00:10.366 TCP 23.104.0.1:45496 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:42:07.316 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33044 10 6452 1 2025-11-28 04:43:07.531 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:37200 10 6452 1 2025-11-28 04:43:08.146 00:00:10.364 TCP 23.104.0.1:51036 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:44:00.191 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 04:44:00.415 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 04:44:07.736 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50268 10 6452 1 2025-11-28 04:44:08.550 00:00:10.364 TCP 23.104.0.1:33186 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:45:08.958 00:00:10.365 TCP 23.104.0.1:44348 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:45:07.948 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50958 10 6452 1 2025-11-28 04:46:09.360 00:00:10.669 TCP 23.104.0.1:40736 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:46:08.171 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:52332 10 6452 1 2025-11-28 04:47:08.353 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46210 10 6452 1 2025-11-28 04:47:10.097 00:00:10.363 TCP 23.104.0.1:40156 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:44:04.777 00:05:04.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 04:44:04.781 00:05:04.587 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 04:48:08.561 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54368 10 6452 1 2025-11-28 04:48:10.499 00:00:10.367 TCP 23.104.0.1:35084 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:49:00.438 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 04:49:00.422 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 04:49:10.902 00:00:10.372 TCP 23.104.0.1:42702 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:49:08.784 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58288 10 6452 1 2025-11-28 04:50:09.003 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:58234 10 6452 1 2025-11-28 04:50:11.314 00:00:10.365 TCP 23.104.0.1:53658 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:51:09.235 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39768 10 6452 1 2025-11-28 04:51:11.718 00:00:10.341 TCP 23.104.0.1:50726 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:52:09.452 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37140 10 6452 1 2025-11-28 04:52:12.107 00:00:10.367 TCP 23.104.0.1:48540 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:53:09.674 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51306 10 6452 1 2025-11-28 04:53:12.509 00:00:10.369 TCP 23.104.0.1:48110 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:54:00.949 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 04:54:01.002 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 04:50:04.779 00:05:04.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 04:50:04.780 00:05:04.588 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 04:54:09.899 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53060 10 6452 1 2025-11-28 04:54:12.914 00:00:10.373 TCP 23.104.0.1:57374 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:55:10.124 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33234 10 6452 1 2025-11-28 04:55:13.330 00:00:10.376 TCP 23.104.0.1:56380 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:56:10.350 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35804 10 6452 1 2025-11-28 04:56:13.743 00:00:10.328 TCP 23.104.0.1:33580 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:57:10.527 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58880 10 6452 1 2025-11-28 04:57:14.112 00:00:10.366 TCP 23.104.0.1:41536 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:58:10.736 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:43312 10 6452 1 2025-11-28 04:58:14.510 00:00:10.381 TCP 23.104.0.1:50166 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502846, total packets: 1581, avg bps: 1075, avg pps: 0, avg bpp: 318 Time window: 2025-11-28 03:56:04 - 2025-11-28 04:58:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0048s User: 0.0008s Wall: 0.0030s flows/second: 53895.3 Runtime: 0.0031s