Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 05:59:09.784 00:00:10.324 TCP 23.104.0.1:36534 -> 1.101.0.1:3000 11 1507 1 2025-11-23 05:59:18.802 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36460 10 6452 1 2025-11-23 06:00:10.148 00:00:10.364 TCP 23.104.0.1:39272 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:00:19.019 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51104 10 6452 1 2025-11-23 06:01:10.558 00:00:10.363 TCP 23.104.0.1:50246 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:01:19.228 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56388 10 6452 1 2025-11-23 06:01:37.670 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:01:37.439 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 05:58:02.528 00:05:04.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 05:58:02.531 00:05:04.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 06:02:10.956 00:00:10.368 TCP 23.104.0.1:47498 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:02:19.442 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49148 10 6452 1 2025-11-23 06:03:11.363 00:00:10.361 TCP 23.104.0.1:50866 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:03:19.643 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37404 10 6452 1 2025-11-23 06:04:11.762 00:00:10.377 TCP 23.104.0.1:34140 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:04:19.853 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39994 10 6452 1 2025-11-23 06:05:12.177 00:00:10.365 TCP 23.104.0.1:50936 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:05:20.077 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33476 10 6452 1 2025-11-23 06:06:12.583 00:00:10.422 TCP 23.104.0.1:60900 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:06:20.294 00:00:10.790 TCP 1.101.0.1:3000 -> 22.102.0.1:41620 10 6452 1 2025-11-23 06:06:37.629 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:06:37.789 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 06:07:13.081 00:00:10.373 TCP 23.104.0.1:36828 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:07:21.124 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42286 10 6452 1 2025-11-23 06:04:02.534 00:05:04.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 06:04:02.530 00:05:04.173 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 06:08:13.497 00:00:11.024 TCP 23.104.0.1:46894 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:08:21.339 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46166 10 6452 1 2025-11-23 06:09:14.584 00:00:10.367 TCP 23.104.0.1:37292 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:09:21.545 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59126 10 6452 1 2025-11-23 06:10:14.990 00:00:10.990 TCP 23.104.0.1:38398 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:10:21.757 00:00:10.383 TCP 1.101.0.1:3000 -> 22.102.0.1:57426 10 6452 1 2025-11-23 06:11:16.033 00:00:10.369 TCP 23.104.0.1:43632 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:11:22.177 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:45808 10 6452 1 2025-11-23 06:11:37.772 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 06:11:37.666 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:12:16.441 00:00:10.370 TCP 23.104.0.1:41850 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:12:22.356 00:00:10.333 TCP 1.101.0.1:3000 -> 22.102.0.1:55770 10 6452 1 2025-11-23 06:13:16.847 00:00:10.381 TCP 23.104.0.1:46352 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:13:22.734 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48036 10 6452 1 2025-11-23 06:10:02.534 00:05:04.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 06:10:02.531 00:05:04.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 06:14:17.266 00:00:10.363 TCP 23.104.0.1:60256 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:14:22.953 00:00:10.700 TCP 1.101.0.1:3000 -> 22.102.0.1:46130 12 6556 1 2025-11-23 06:15:17.672 00:00:10.375 TCP 23.104.0.1:49076 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:15:23.695 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36834 10 6452 1 2025-11-23 06:16:18.104 00:00:10.371 TCP 23.104.0.1:60062 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:16:23.909 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54696 10 6452 1 2025-11-23 06:16:37.916 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:16:37.748 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 06:17:18.513 00:00:10.371 TCP 23.104.0.1:36342 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:17:24.117 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56362 10 6452 1 2025-11-23 06:18:18.923 00:00:10.374 TCP 23.104.0.1:57828 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:18:24.330 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36002 10 6452 1 2025-11-23 06:19:19.340 00:00:10.368 TCP 23.104.0.1:34786 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:19:24.559 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58210 10 6452 1 2025-11-23 06:16:02.533 00:05:04.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 06:16:02.536 00:05:04.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 06:20:19.745 00:00:10.328 TCP 23.104.0.1:52284 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:20:24.776 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45928 10 6452 1 2025-11-23 06:21:20.108 00:00:10.364 TCP 23.104.0.1:34224 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:21:25.005 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43828 10 6452 1 2025-11-23 06:21:37.927 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 06:21:38.016 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:22:20.510 00:00:10.364 TCP 23.104.0.1:51906 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:22:25.218 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43324 10 6452 1 2025-11-23 06:23:20.917 00:00:10.370 TCP 23.104.0.1:49158 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:23:25.436 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54502 10 6452 1 2025-11-23 06:24:21.325 00:00:10.363 TCP 23.104.0.1:41868 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:24:25.651 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:56250 10 6452 1 2025-11-23 06:25:21.729 00:00:10.381 TCP 23.104.0.1:35860 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:25:25.828 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33740 10 6452 1 2025-11-23 06:22:02.537 00:05:04.171 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 06:22:02.535 00:05:04.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 06:26:22.149 00:00:10.369 TCP 23.104.0.1:56702 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:26:26.073 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50032 10 6452 1 2025-11-23 06:26:37.793 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 06:26:37.781 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:27:26.282 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53568 10 6452 1 2025-11-23 06:27:22.552 00:00:10.366 TCP 23.104.0.1:42712 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:28:26.492 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45568 10 6452 1 2025-11-23 06:28:22.955 00:00:11.459 TCP 23.104.0.1:36036 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:29:26.713 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46194 10 6452 1 2025-11-23 06:29:24.452 00:00:10.363 TCP 23.104.0.1:32928 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:30:24.855 00:00:10.334 TCP 23.104.0.1:41918 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:30:26.888 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45342 10 6452 1 2025-11-23 06:31:25.227 00:00:10.323 TCP 23.104.0.1:45134 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:31:27.107 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43372 10 6452 1 2025-11-23 06:31:38.223 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 06:31:37.997 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:28:02.537 00:05:04.175 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 06:28:02.540 00:05:04.169 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 06:32:25.591 00:00:10.323 TCP 23.104.0.1:56054 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:32:27.324 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:57344 10 6452 1 2025-11-23 06:33:25.953 00:00:10.370 TCP 23.104.0.1:33212 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:33:27.510 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54052 10 6452 1 2025-11-23 06:34:26.363 00:00:10.359 TCP 23.104.0.1:57900 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:34:27.722 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42318 10 6452 1 2025-11-23 06:35:27.936 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:52722 12 10369 1 2025-11-23 06:35:26.761 00:00:10.410 TCP 23.104.0.1:33772 -> 1.101.0.1:3000 15 1926 1 2025-11-23 06:36:27.207 00:00:10.360 TCP 23.104.0.1:47356 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:36:37.879 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:36:28.202 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52780 10 6452 1 2025-11-23 06:36:37.980 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 06:37:27.609 00:00:10.362 TCP 23.104.0.1:32936 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:37:28.412 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46624 10 6452 1 2025-11-23 06:34:02.545 00:05:04.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 06:34:02.542 00:05:04.173 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 06:38:28.013 00:00:10.358 TCP 23.104.0.1:51966 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:38:28.629 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58498 10 6452 1 2025-11-23 06:39:28.412 00:00:10.382 TCP 23.104.0.1:60682 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:39:28.842 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47232 10 6452 1 2025-11-23 06:40:29.023 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:37224 12 10375 1 2025-11-23 06:40:28.836 00:00:10.463 TCP 23.104.0.1:36000 -> 1.101.0.1:3000 15 1926 1 2025-11-23 06:41:38.102 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:41:29.337 00:00:10.319 TCP 23.104.0.1:43364 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:41:38.155 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 06:41:29.270 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57812 10 6452 1 2025-11-23 06:42:29.485 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49730 10 6452 1 2025-11-23 06:42:29.695 00:00:10.371 TCP 23.104.0.1:55800 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:43:30.104 00:00:10.367 TCP 23.104.0.1:33764 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:43:29.705 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:51172 10 6452 1 2025-11-23 06:40:02.551 00:05:04.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 06:40:02.555 00:05:04.160 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 06:44:29.956 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:47530 10 6452 1 2025-11-23 06:44:30.507 00:00:10.365 TCP 23.104.0.1:58662 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:45:30.145 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35362 10 6452 1 2025-11-23 06:45:30.913 00:00:17.566 TCP 23.104.0.1:39822 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:46:38.402 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:46:30.357 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6452 1 2025-11-23 06:46:38.367 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 06:46:38.533 00:00:10.363 TCP 23.104.0.1:53886 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:47:30.522 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49000 10 6452 1 2025-11-23 06:47:38.937 00:00:10.376 TCP 23.104.0.1:48750 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:48:30.735 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48884 10 6452 1 2025-11-23 06:48:39.350 00:00:10.366 TCP 23.104.0.1:38460 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:49:30.908 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:58928 10 6452 1 2025-11-23 06:49:39.755 00:00:10.373 TCP 23.104.0.1:43038 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:46:02.552 00:05:04.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 06:46:02.554 00:05:04.160 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 06:50:31.178 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40902 10 6452 1 2025-11-23 06:50:40.165 00:00:10.362 TCP 23.104.0.1:57968 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:51:38.508 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:51:31.387 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:47850 13 6608 1 2025-11-23 06:51:38.499 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 06:51:40.565 00:00:10.369 TCP 23.104.0.1:36054 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:52:31.670 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34166 10 6452 1 2025-11-23 06:52:40.976 00:00:10.370 TCP 23.104.0.1:42790 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:53:31.880 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:33694 10 6452 1 2025-11-23 06:53:41.387 00:00:10.957 TCP 23.104.0.1:33282 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:54:32.080 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43126 10 6452 1 2025-11-23 06:54:42.383 00:00:10.317 TCP 23.104.0.1:42232 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:55:32.302 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59952 10 6452 1 2025-11-23 06:55:42.743 00:00:10.360 TCP 23.104.0.1:55812 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:52:02.554 00:05:04.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 06:52:02.557 00:05:04.160 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 06:56:38.626 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 06:56:38.403 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 06:56:32.526 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40648 10 6452 1 2025-11-23 06:56:43.142 00:00:10.322 TCP 23.104.0.1:35706 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:57:32.744 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58222 10 6452 1 2025-11-23 06:57:43.504 00:00:10.326 TCP 23.104.0.1:50700 -> 1.101.0.1:3000 12 1559 1 2025-11-23 06:58:32.954 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53556 10 6452 1 Summary: total flows: 163, total bytes: 505831, total packets: 1579, avg bps: 1111, avg pps: 0, avg bpp: 320 Time window: 2025-11-23 05:58:02 - 2025-11-23 06:58:43 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0057s User: 0.0000s Wall: 0.0016s flows/second: 102978.1 Runtime: 0.0016s