Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 06:58:43.868 00:00:10.363 TCP 23.104.0.1:41336 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:59:33.174 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42280 10 6452 1 2025-11-23 06:59:44.284 00:00:10.371 TCP 23.104.0.1:46238 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:00:33.343 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47898 9 6412 1 2025-11-23 07:00:44.696 00:00:10.368 TCP 23.104.0.1:54676 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:01:38.674 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 07:01:38.698 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 07:01:33.517 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58518 10 6452 1 2025-11-23 07:01:45.109 00:00:10.381 TCP 23.104.0.1:58746 -> 1.101.0.1:3000 11 1507 1 2025-11-23 06:58:02.557 00:05:04.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 06:58:02.555 00:05:04.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 07:02:33.741 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37582 10 6452 1 2025-11-23 07:02:45.532 00:00:10.364 TCP 23.104.0.1:43158 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:03:33.961 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54454 10 6452 1 2025-11-23 07:03:45.936 00:00:10.335 TCP 23.104.0.1:54146 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:04:34.185 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47358 10 6452 1 2025-11-23 07:04:46.306 00:00:10.364 TCP 23.104.0.1:37958 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:05:34.400 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33328 10 6452 1 2025-11-23 07:05:46.710 00:00:10.321 TCP 23.104.0.1:60432 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:06:38.890 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 07:06:38.705 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 07:06:34.622 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59440 10 6452 1 2025-11-23 07:06:47.096 00:00:10.322 TCP 23.104.0.1:52530 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:07:34.847 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45352 10 6452 1 2025-11-23 07:07:47.464 00:00:10.361 TCP 23.104.0.1:39524 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:04:02.559 00:05:04.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 07:04:02.556 00:05:04.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 07:08:35.078 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38462 10 6452 1 2025-11-23 07:08:47.868 00:00:10.341 TCP 23.104.0.1:51394 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:09:35.296 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60844 10 6452 1 2025-11-23 07:09:48.232 00:00:10.364 TCP 23.104.0.1:55554 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:10:35.519 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60200 10 6452 1 2025-11-23 07:10:48.632 00:00:10.371 TCP 23.104.0.1:43816 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:11:39.061 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 07:11:38.838 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 07:11:35.735 00:00:20.650 TCP 1.101.0.1:3000 -> 22.102.0.1:44494 10 6452 1 2025-11-23 07:11:49.034 00:00:10.369 TCP 23.104.0.1:56994 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:12:46.430 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48200 10 6452 1 2025-11-23 07:12:49.441 00:00:10.368 TCP 23.104.0.1:57190 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:13:46.650 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53838 10 6452 1 2025-11-23 07:13:49.852 00:00:10.339 TCP 23.104.0.1:37930 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:10:02.557 00:05:04.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 07:10:02.561 00:05:04.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 07:14:46.873 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39796 10 6452 1 2025-11-23 07:14:50.226 00:00:10.368 TCP 23.104.0.1:36768 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:15:50.635 00:00:10.366 TCP 23.104.0.1:41918 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:15:47.097 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37678 10 6452 1 2025-11-23 07:16:39.109 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 07:16:38.936 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 07:16:51.036 00:00:10.366 TCP 23.104.0.1:45408 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:16:47.318 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48834 10 6452 1 2025-11-23 07:17:51.441 00:00:10.361 TCP 23.104.0.1:50504 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:17:47.540 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39828 10 6452 1 2025-11-23 07:18:47.753 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39272 10 6452 1 2025-11-23 07:18:51.840 00:00:10.344 TCP 23.104.0.1:59854 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:19:47.967 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51350 12 6556 1 2025-11-23 07:19:52.222 00:00:10.368 TCP 23.104.0.1:34776 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:16:02.561 00:05:04.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 07:16:02.559 00:05:04.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 07:20:48.189 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57680 10 6452 1 2025-11-23 07:20:52.625 00:00:10.362 TCP 23.104.0.1:44538 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:21:39.076 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 07:21:39.012 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 07:21:48.399 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52394 10 6452 1 2025-11-23 07:21:53.030 00:00:10.371 TCP 23.104.0.1:38008 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:22:48.608 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44290 10 6452 1 2025-11-23 07:22:53.435 00:00:10.362 TCP 23.104.0.1:37236 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:23:48.825 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42082 10 6452 1 2025-11-23 07:23:53.839 00:00:10.383 TCP 23.104.0.1:53178 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:24:49.067 00:00:10.702 TCP 1.101.0.1:3000 -> 22.102.0.1:36570 10 6452 1 2025-11-23 07:24:54.264 00:00:11.020 TCP 23.104.0.1:37402 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:25:49.808 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45004 10 6452 1 2025-11-23 07:25:55.320 00:00:10.371 TCP 23.104.0.1:42916 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:22:02.563 00:05:04.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 07:22:02.560 00:05:04.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 07:26:39.170 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 07:26:39.300 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 07:26:50.025 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49962 10 6452 1 2025-11-23 07:26:55.727 00:00:10.371 TCP 23.104.0.1:39690 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:27:50.242 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51706 10 6452 1 2025-11-23 07:27:56.134 00:00:10.373 TCP 23.104.0.1:45678 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:28:50.467 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37704 10 6452 1 2025-11-23 07:28:56.547 00:00:10.366 TCP 23.104.0.1:39376 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:29:50.680 00:00:10.580 TCP 1.101.0.1:3000 -> 22.102.0.1:56968 10 6452 1 2025-11-23 07:29:56.952 00:00:10.370 TCP 23.104.0.1:38008 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:30:51.305 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35690 10 6452 1 2025-11-23 07:30:57.359 00:00:10.365 TCP 23.104.0.1:35300 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:31:38.939 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 07:31:39.067 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 07:31:51.518 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34184 10 6452 1 2025-11-23 07:28:02.563 00:05:04.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 07:28:02.565 00:05:04.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 07:31:57.757 00:00:10.376 TCP 23.104.0.1:46528 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:32:51.732 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58940 10 6452 1 2025-11-23 07:32:58.182 00:00:10.365 TCP 23.104.0.1:50514 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:33:51.901 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59852 10 6452 1 2025-11-23 07:33:58.581 00:00:10.362 TCP 23.104.0.1:47936 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:34:52.126 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:32788 10 6452 1 2025-11-23 07:34:58.982 00:00:10.323 TCP 23.104.0.1:38638 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:35:52.296 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54548 10 6452 1 2025-11-23 07:35:59.341 00:00:10.320 TCP 23.104.0.1:35690 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:36:40.116 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 07:36:40.091 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 07:36:52.480 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33314 10 6452 1 2025-11-23 07:36:59.699 00:00:10.362 TCP 23.104.0.1:56926 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:37:52.691 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41416 10 6452 1 2025-11-23 07:34:02.565 00:05:04.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 07:34:02.568 00:05:04.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 07:38:00.106 00:00:10.365 TCP 23.104.0.1:42540 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:38:52.909 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50474 10 6452 1 2025-11-23 07:39:00.510 00:00:10.361 TCP 23.104.0.1:37624 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:39:53.122 00:00:18.303 TCP 1.101.0.1:3000 -> 22.102.0.1:50368 10 6452 1 2025-11-23 07:40:00.913 00:00:10.583 TCP 23.104.0.1:57406 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:41:01.476 00:00:10.258 TCP 1.101.0.1:3000 -> 22.102.0.1:46342 14 10479 1 2025-11-23 07:41:01.544 00:00:10.463 TCP 23.104.0.1:50876 -> 1.101.0.1:3000 15 1926 1 2025-11-23 07:41:39.372 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 07:41:39.387 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 07:42:01.775 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:47934 10 6452 1 2025-11-23 07:42:02.036 00:00:10.365 TCP 23.104.0.1:50312 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:43:01.946 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:33514 10 6452 1 2025-11-23 07:43:02.437 00:00:10.372 TCP 23.104.0.1:54092 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:40:02.569 00:05:04.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 07:40:02.566 00:05:04.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 07:44:02.188 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43878 10 6452 1 2025-11-23 07:44:02.841 00:00:10.388 TCP 23.104.0.1:37164 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:45:02.401 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47772 12 6556 1 2025-11-23 07:45:03.267 00:00:10.322 TCP 23.104.0.1:41330 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:46:02.620 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56618 10 6452 1 2025-11-23 07:46:03.632 00:00:10.361 TCP 23.104.0.1:46020 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:46:39.556 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 07:46:39.609 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 07:47:02.839 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47132 10 6452 1 2025-11-23 07:47:04.034 00:00:10.362 TCP 23.104.0.1:57164 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:48:04.432 00:00:11.838 TCP 23.104.0.1:42256 -> 1.101.0.1:3000 13 1611 1 2025-11-23 07:48:03.086 00:00:12.908 TCP 1.101.0.1:3000 -> 22.102.0.1:40378 10 6452 1 2025-11-23 07:49:06.057 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45910 10 6452 1 2025-11-23 07:49:06.309 00:00:10.322 TCP 23.104.0.1:48624 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:46:02.571 00:05:04.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 07:46:02.568 00:05:04.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 07:50:06.273 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60870 10 6452 1 2025-11-23 07:50:06.671 00:00:10.360 TCP 23.104.0.1:34446 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:51:06.446 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44624 10 6452 1 2025-11-23 07:51:07.095 00:00:10.361 TCP 23.104.0.1:46252 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:51:39.792 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 07:51:39.744 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 07:52:06.667 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37888 10 6452 1 2025-11-23 07:52:07.494 00:00:10.330 TCP 23.104.0.1:36770 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:53:07.861 00:00:10.325 TCP 23.104.0.1:41234 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:53:06.885 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41522 10 6452 1 2025-11-23 07:54:08.224 00:00:10.364 TCP 23.104.0.1:47628 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:54:07.121 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52606 10 6452 1 2025-11-23 07:55:08.631 00:00:10.366 TCP 23.104.0.1:50170 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:55:07.339 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34996 10 6452 1 2025-11-23 07:52:02.573 00:05:04.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 07:52:02.571 00:05:04.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 07:56:07.555 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44290 10 6452 1 2025-11-23 07:56:09.032 00:00:10.367 TCP 23.104.0.1:49006 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:56:39.687 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 07:56:39.823 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 07:57:07.777 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36642 10 6452 1 2025-11-23 07:57:09.439 00:00:10.323 TCP 23.104.0.1:36020 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:58:07.991 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:49572 10 6452 1 2025-11-23 07:58:09.797 00:00:10.346 TCP 23.104.0.1:57372 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496614, total packets: 1575, avg bps: 1098, avg pps: 0, avg bpp: 315 Time window: 2025-11-23 06:58:02 - 2025-11-23 07:58:20 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0030s Wall: 0.0027s flows/second: 61189.6 Runtime: 0.0027s