Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 04:58:45.275 00:00:10.322 TCP 23.104.0.1:56580 -> 1.101.0.1:3000 11 1507 1 2025-11-23 04:58:56.295 00:00:17.491 TCP 1.101.0.1:3000 -> 22.102.0.1:52842 10 6452 1 2025-11-23 04:59:45.636 00:00:10.361 TCP 23.104.0.1:57314 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:00:03.830 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:39452 10 6452 1 2025-11-23 05:00:46.061 00:00:10.366 TCP 23.104.0.1:45440 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:01:04.076 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48150 10 6452 1 2025-11-23 05:01:36.393 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 05:01:36.358 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 05:01:46.464 00:00:10.325 TCP 23.104.0.1:53254 -> 1.101.0.1:3000 11 1507 1 2025-11-23 04:58:02.519 00:05:04.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 04:58:02.518 00:05:04.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 05:02:04.265 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42178 10 6452 1 2025-11-23 05:02:46.831 00:00:10.381 TCP 23.104.0.1:44046 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:03:04.475 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59804 10 6452 1 2025-11-23 05:03:47.251 00:00:10.371 TCP 23.104.0.1:57842 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:04:04.650 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37908 10 6452 1 2025-11-23 05:04:47.664 00:00:10.324 TCP 23.104.0.1:39406 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:05:04.856 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:44876 10 6452 1 2025-11-23 05:05:48.025 00:00:10.708 TCP 23.104.0.1:47054 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:06:05.103 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42216 10 6452 1 2025-11-23 05:06:36.351 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 05:06:36.420 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 05:06:48.777 00:00:10.368 TCP 23.104.0.1:57760 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:07:05.326 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46952 10 6452 1 2025-11-23 05:07:49.181 00:00:10.364 TCP 23.104.0.1:38330 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:04:02.521 00:05:04.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 05:04:02.518 00:05:04.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 05:08:05.546 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55938 10 6452 1 2025-11-23 05:08:49.585 00:00:10.335 TCP 23.104.0.1:56856 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:09:05.760 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46304 10 6452 1 2025-11-23 05:09:49.964 00:00:10.374 TCP 23.104.0.1:49154 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:10:05.984 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:41960 10 6452 1 2025-11-23 05:10:50.375 00:00:10.370 TCP 23.104.0.1:40684 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:11:06.222 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52744 10 6452 1 2025-11-23 05:11:36.121 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 05:11:36.500 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 05:11:50.784 00:00:10.376 TCP 23.104.0.1:42158 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:12:06.435 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44238 10 6452 1 2025-11-23 05:12:51.200 00:00:10.366 TCP 23.104.0.1:44358 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:13:06.652 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44240 10 6452 1 2025-11-23 05:13:51.601 00:00:10.364 TCP 23.104.0.1:47292 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:10:02.521 00:05:04.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 05:10:02.523 00:05:04.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 05:14:06.871 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33390 10 6452 1 2025-11-23 05:14:52.000 00:00:10.436 TCP 23.104.0.1:37262 -> 1.101.0.1:3000 15 1926 1 2025-11-23 05:15:07.094 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:34880 12 10375 1 2025-11-23 05:15:52.472 00:00:10.371 TCP 23.104.0.1:43156 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:16:07.343 00:00:10.457 TCP 1.101.0.1:3000 -> 22.102.0.1:46692 10 6452 1 2025-11-23 05:16:36.381 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 05:16:36.622 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 05:16:52.875 00:00:10.368 TCP 23.104.0.1:51458 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:17:07.844 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33662 10 6452 1 2025-11-23 05:17:53.285 00:00:10.360 TCP 23.104.0.1:40978 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:18:08.082 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53908 10 6452 1 2025-11-23 05:18:53.686 00:00:10.325 TCP 23.104.0.1:37328 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:19:08.301 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57982 10 6452 1 2025-11-23 05:16:02.521 00:05:04.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 05:19:54.066 00:00:10.324 TCP 23.104.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:16:02.524 00:05:04.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 05:20:08.524 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39120 10 6452 1 2025-11-23 05:20:54.430 00:00:10.360 TCP 23.104.0.1:56358 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:21:08.768 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38060 10 6452 1 2025-11-23 05:21:36.387 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 05:21:37.208 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 05:21:54.829 00:00:10.373 TCP 23.104.0.1:44590 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:22:08.980 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:46468 10 6452 1 2025-11-23 05:22:55.240 00:00:10.369 TCP 23.104.0.1:41924 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:23:09.227 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45144 10 6452 1 2025-11-23 05:23:55.647 00:00:10.364 TCP 23.104.0.1:46256 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:24:09.444 00:00:10.340 TCP 1.101.0.1:3000 -> 22.102.0.1:60038 10 6452 1 2025-11-23 05:24:56.061 00:00:10.371 TCP 23.104.0.1:49036 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:25:09.821 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45266 10 6452 1 2025-11-23 05:25:56.460 00:00:10.323 TCP 23.104.0.1:58400 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:22:02.521 00:05:04.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 05:22:02.524 00:05:04.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 05:26:10.041 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41942 10 6452 1 2025-11-23 05:26:36.773 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 05:26:36.698 00:00:00.011 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 05:26:56.823 00:00:10.322 TCP 23.104.0.1:40118 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:27:10.249 00:00:11.356 TCP 1.101.0.1:3000 -> 22.102.0.1:35322 10 6452 1 2025-11-23 05:27:57.185 00:00:10.362 TCP 23.104.0.1:49136 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:28:11.646 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47092 10 6452 1 2025-11-23 05:28:57.584 00:00:10.326 TCP 23.104.0.1:43820 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:29:11.859 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39650 10 6452 1 2025-11-23 05:29:57.947 00:00:10.422 TCP 23.104.0.1:33866 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:30:12.115 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46024 10 6452 1 2025-11-23 05:30:58.410 00:00:10.367 TCP 23.104.0.1:49212 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:31:12.335 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38446 10 6452 1 2025-11-23 05:31:36.859 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 05:31:36.911 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 05:28:02.524 00:05:04.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 05:28:02.522 00:05:04.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 05:31:58.815 00:00:10.365 TCP 23.104.0.1:53330 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:32:12.503 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54194 10 6452 1 2025-11-23 05:32:59.223 00:00:10.368 TCP 23.104.0.1:37826 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:33:12.712 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46942 10 6452 1 2025-11-23 05:33:59.631 00:00:10.336 TCP 23.104.0.1:57714 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:34:12.920 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39030 10 6452 1 2025-11-23 05:35:00.013 00:00:10.368 TCP 23.104.0.1:40112 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:35:13.150 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50454 10 6452 1 2025-11-23 05:36:00.419 00:00:10.327 TCP 23.104.0.1:43370 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:36:13.367 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 10 6452 1 2025-11-23 05:36:36.964 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 05:36:37.008 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 05:37:00.811 00:00:10.376 TCP 23.104.0.1:40420 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:37:13.583 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43912 10 6452 1 2025-11-23 05:38:01.242 00:00:10.367 TCP 23.104.0.1:48456 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:34:02.526 00:05:04.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 05:34:02.523 00:05:04.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 05:38:13.803 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35184 10 6452 1 2025-11-23 05:39:01.651 00:00:10.363 TCP 23.104.0.1:55668 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:39:14.023 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:32972 10 6452 1 2025-11-23 05:40:02.066 00:00:10.365 TCP 23.104.0.1:58200 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:40:14.196 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53638 10 6452 1 2025-11-23 05:41:02.472 00:00:10.366 TCP 23.104.0.1:47324 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:41:14.366 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36510 10 6452 1 2025-11-23 05:41:37.064 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 05:41:37.186 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 05:42:02.873 00:00:10.365 TCP 23.104.0.1:58306 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:42:14.576 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50588 10 6452 1 2025-11-23 05:43:03.274 00:00:10.362 TCP 23.104.0.1:53910 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:43:14.789 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58082 10 6452 1 2025-11-23 05:40:02.527 00:05:04.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 05:40:02.524 00:05:04.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 05:44:03.679 00:00:10.370 TCP 23.104.0.1:50382 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:44:15.007 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47392 10 6452 1 2025-11-23 05:45:04.104 00:00:10.378 TCP 23.104.0.1:53706 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:45:15.237 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:48000 10 6452 1 2025-11-23 05:46:04.528 00:00:10.366 TCP 23.104.0.1:48312 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:46:15.504 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46454 10 6452 1 2025-11-23 05:46:37.973 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 05:46:37.913 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 05:47:04.938 00:00:10.376 TCP 23.104.0.1:49328 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:47:15.738 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55370 10 6452 1 2025-11-23 05:48:05.351 00:00:10.372 TCP 23.104.0.1:39490 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:48:15.925 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:46612 10 6452 1 2025-11-23 05:49:05.755 00:00:10.379 TCP 23.104.0.1:51290 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:49:16.168 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56116 10 6452 1 2025-11-23 05:46:02.526 00:05:04.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 05:46:02.527 00:05:04.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 05:50:06.170 00:00:10.375 TCP 23.104.0.1:48788 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:50:16.383 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35330 10 6452 1 2025-11-23 05:51:06.587 00:00:10.369 TCP 23.104.0.1:37700 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:51:16.608 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57484 10 6452 1 2025-11-23 05:51:37.451 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 05:51:37.040 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 05:52:06.993 00:00:10.362 TCP 23.104.0.1:53918 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:52:16.830 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37498 10 6452 1 2025-11-23 05:53:07.394 00:00:10.368 TCP 23.104.0.1:50752 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:53:17.067 00:00:10.649 TCP 1.101.0.1:3000 -> 22.102.0.1:42664 10 6452 1 2025-11-23 05:54:07.802 00:00:10.369 TCP 23.104.0.1:39918 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:54:17.754 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58772 10 6452 1 2025-11-23 05:55:08.206 00:00:10.321 TCP 23.104.0.1:52884 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:55:17.967 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60150 10 6452 1 2025-11-23 05:52:02.530 00:05:04.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 05:52:02.526 00:05:04.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 05:56:08.563 00:00:10.364 TCP 23.104.0.1:53590 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:56:18.204 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43352 10 6452 1 2025-11-23 05:56:37.237 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 05:56:37.475 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 05:57:08.971 00:00:10.372 TCP 23.104.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:57:18.376 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52204 10 6452 1 2025-11-23 05:58:09.380 00:00:10.369 TCP 23.104.0.1:41364 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:58:18.592 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60052 10 6452 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1109, avg pps: 0, avg bpp: 318 Time window: 2025-11-23 04:58:02 - 2025-11-23 05:58:28 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0017s Wall: 0.0019s flows/second: 87984.9 Runtime: 0.0019s