Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 07:59:10.178 00:00:10.367 TCP 23.104.0.1:47782 -> 1.101.0.1:3000 11 1507 1 2025-11-23 07:59:08.230 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:51094 10 6452 1 2025-11-23 08:00:08.414 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48528 12 10375 1 2025-11-23 08:00:10.588 00:00:10.445 TCP 23.104.0.1:60842 -> 1.101.0.1:3000 15 1926 1 2025-11-23 08:01:11.104 00:00:10.378 TCP 23.104.0.1:52438 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:01:08.654 00:00:11.469 TCP 1.101.0.1:3000 -> 22.102.0.1:59656 11 6504 1 2025-11-23 08:01:39.773 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 08:01:39.797 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 07:58:02.576 00:05:04.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 07:58:02.574 00:05:04.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 08:02:10.163 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39254 10 6452 1 2025-11-23 08:02:11.514 00:00:10.326 TCP 23.104.0.1:36196 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:03:10.382 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37608 10 6452 1 2025-11-23 08:03:11.879 00:00:10.389 TCP 23.104.0.1:58304 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:04:10.587 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46560 10 6452 1 2025-11-23 08:04:12.304 00:00:11.538 TCP 23.104.0.1:33222 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:05:10.808 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54350 10 6452 1 2025-11-23 08:05:13.886 00:00:10.377 TCP 23.104.0.1:37394 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:06:11.038 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37988 10 6452 1 2025-11-23 08:06:14.299 00:00:10.363 TCP 23.104.0.1:55298 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:06:40.283 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 08:06:39.988 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 08:07:11.251 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39174 10 6452 1 2025-11-23 08:07:14.700 00:00:10.366 TCP 23.104.0.1:60492 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:04:02.578 00:05:04.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 08:04:02.575 00:05:04.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 08:08:11.476 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58578 10 6452 1 2025-11-23 08:08:15.109 00:00:10.324 TCP 23.104.0.1:49756 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:09:11.706 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40516 10 6452 1 2025-11-23 08:09:15.471 00:00:10.362 TCP 23.104.0.1:50632 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:10:11.926 00:00:10.838 TCP 1.101.0.1:3000 -> 22.102.0.1:38606 10 6452 1 2025-11-23 08:10:15.870 00:00:10.368 TCP 23.104.0.1:52898 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:11:16.275 00:00:10.332 TCP 23.104.0.1:37650 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:11:12.808 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52460 10 6452 1 2025-11-23 08:11:39.906 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 08:11:39.939 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 08:12:13.034 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33750 10 6452 1 2025-11-23 08:12:16.648 00:00:10.332 TCP 23.104.0.1:53360 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:13:13.251 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37914 10 6452 1 2025-11-23 08:13:17.020 00:00:10.368 TCP 23.104.0.1:44542 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:10:02.579 00:05:04.160 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 08:10:02.577 00:05:04.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 08:14:13.426 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58876 10 6452 1 2025-11-23 08:14:17.427 00:00:10.365 TCP 23.104.0.1:45214 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:15:13.638 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60892 10 6452 1 2025-11-23 08:15:17.832 00:00:10.391 TCP 23.104.0.1:40136 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:16:13.855 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47944 10 6452 1 2025-11-23 08:16:18.262 00:00:10.366 TCP 23.104.0.1:42388 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:16:40.718 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 08:16:40.622 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 08:17:14.081 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33326 10 6452 1 2025-11-23 08:17:18.666 00:00:10.326 TCP 23.104.0.1:50504 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:18:14.295 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36626 10 6452 1 2025-11-23 08:18:19.036 00:00:10.368 TCP 23.104.0.1:35328 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:19:14.519 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36036 10 6452 1 2025-11-23 08:19:19.442 00:00:10.369 TCP 23.104.0.1:47794 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:16:02.576 00:05:04.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 08:16:02.578 00:05:04.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 08:20:14.744 00:00:11.489 TCP 1.101.0.1:3000 -> 22.102.0.1:56954 10 6452 1 2025-11-23 08:20:19.848 00:00:10.461 TCP 23.104.0.1:56824 -> 1.101.0.1:3000 15 1926 1 2025-11-23 08:21:16.274 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:34586 12 10375 1 2025-11-23 08:21:20.354 00:00:10.406 TCP 23.104.0.1:40436 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:21:40.598 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 08:21:40.334 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 08:22:16.527 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52112 10 6452 1 2025-11-23 08:22:20.793 00:00:10.369 TCP 23.104.0.1:36854 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:23:16.751 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34150 10 6452 1 2025-11-23 08:23:21.202 00:00:10.323 TCP 23.104.0.1:51238 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:24:16.929 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:35320 10 6452 1 2025-11-23 08:24:21.561 00:00:10.373 TCP 23.104.0.1:51814 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:25:17.167 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60170 10 6452 1 2025-11-23 08:25:21.970 00:00:10.365 TCP 23.104.0.1:46834 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:22:02.579 00:05:04.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 08:22:02.580 00:05:04.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 08:26:17.381 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55618 10 6452 1 2025-11-23 08:26:22.375 00:00:10.364 TCP 23.104.0.1:33130 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:26:41.434 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 08:26:41.707 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 08:27:17.598 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34724 10 6452 1 2025-11-23 08:27:22.776 00:00:10.367 TCP 23.104.0.1:35530 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:28:17.812 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59336 10 6452 1 2025-11-23 08:28:23.183 00:00:10.356 TCP 23.104.0.1:55278 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:29:18.040 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53176 10 6452 1 2025-11-23 08:29:23.578 00:00:10.364 TCP 23.104.0.1:53504 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:30:18.251 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44838 10 6452 1 2025-11-23 08:30:23.985 00:00:10.326 TCP 23.104.0.1:58902 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:31:18.458 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44728 10 6452 1 2025-11-23 08:31:24.347 00:00:10.363 TCP 23.104.0.1:41956 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:31:40.604 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 08:31:40.624 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 08:28:02.579 00:05:04.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 08:28:02.582 00:05:04.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 08:32:18.632 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38486 10 6452 1 2025-11-23 08:32:24.752 00:00:10.385 TCP 23.104.0.1:39518 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:33:18.849 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37094 10 6452 1 2025-11-23 08:33:25.174 00:00:10.370 TCP 23.104.0.1:37408 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:34:19.084 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38988 10 6452 1 2025-11-23 08:34:25.579 00:00:10.366 TCP 23.104.0.1:44118 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:35:19.293 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50414 10 6452 1 2025-11-23 08:35:25.981 00:00:10.371 TCP 23.104.0.1:42852 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:36:19.470 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:40222 10 6452 1 2025-11-23 08:36:26.396 00:00:10.366 TCP 23.104.0.1:57820 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:36:40.904 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 08:36:41.049 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 08:37:19.678 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:50124 10 6452 1 2025-11-23 08:37:26.803 00:00:10.367 TCP 23.104.0.1:54416 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:34:02.583 00:05:04.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 08:34:02.579 00:05:04.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 08:38:19.847 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50770 10 6452 1 2025-11-23 08:38:27.209 00:00:10.359 TCP 23.104.0.1:52924 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:39:20.074 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58130 10 6452 1 2025-11-23 08:39:27.606 00:00:10.364 TCP 23.104.0.1:51606 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:40:20.286 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46966 10 6452 1 2025-11-23 08:40:28.012 00:00:10.365 TCP 23.104.0.1:50240 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:41:20.465 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48400 10 6452 1 2025-11-23 08:41:40.656 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 08:41:28.412 00:00:10.363 TCP 23.104.0.1:43630 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:41:40.852 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 08:42:20.687 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37084 10 6452 1 2025-11-23 08:42:28.813 00:00:10.929 TCP 23.104.0.1:35412 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:43:20.910 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44278 10 6452 1 2025-11-23 08:43:29.783 00:00:10.361 TCP 23.104.0.1:53024 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:40:02.584 00:05:04.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 08:40:02.587 00:05:04.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 08:44:21.124 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34290 10 6452 1 2025-11-23 08:44:30.186 00:00:10.366 TCP 23.104.0.1:34672 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:45:21.296 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45108 10 6452 1 2025-11-23 08:45:30.589 00:00:10.368 TCP 23.104.0.1:60850 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:46:21.524 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45150 10 6452 1 2025-11-23 08:46:40.628 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 08:46:30.996 00:00:10.366 TCP 23.104.0.1:60738 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:46:40.928 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 08:47:21.741 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47734 10 6452 1 2025-11-23 08:47:31.402 00:00:10.363 TCP 23.104.0.1:51030 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:48:21.979 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42498 10 6452 1 2025-11-23 08:48:31.802 00:00:10.330 TCP 23.104.0.1:49610 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:49:22.214 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53378 10 6452 1 2025-11-23 08:49:32.172 00:00:10.363 TCP 23.104.0.1:46198 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:46:02.587 00:05:04.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 08:46:02.589 00:05:04.160 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 08:50:22.426 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34390 10 6452 1 2025-11-23 08:50:32.575 00:00:10.327 TCP 23.104.0.1:34500 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:51:22.638 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38178 10 6452 1 2025-11-23 08:51:40.991 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 08:51:41.022 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 08:51:32.939 00:00:10.329 TCP 23.104.0.1:51252 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:52:22.855 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:60470 10 6452 1 2025-11-23 08:52:33.307 00:00:10.324 TCP 23.104.0.1:33440 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:53:23.028 00:00:14.411 TCP 1.101.0.1:3000 -> 22.102.0.1:55268 10 6452 1 2025-11-23 08:53:33.668 00:00:10.676 TCP 23.104.0.1:58988 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:54:27.482 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36486 10 6452 1 2025-11-23 08:54:34.390 00:00:10.368 TCP 23.104.0.1:56892 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:55:27.692 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38656 10 6452 1 2025-11-23 08:55:34.796 00:00:10.376 TCP 23.104.0.1:55888 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:52:02.591 00:05:04.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 08:52:02.587 00:05:04.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 08:56:27.905 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39568 10 6452 1 2025-11-23 08:56:40.836 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 08:56:41.285 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 08:56:35.216 00:00:10.374 TCP 23.104.0.1:60720 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:57:28.114 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48520 10 6452 1 2025-11-23 08:57:35.637 00:00:10.362 TCP 23.104.0.1:35026 -> 1.101.0.1:3000 11 1507 1 2025-11-23 08:58:28.334 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57704 10 6452 1 2025-11-23 08:58:36.041 00:00:10.368 TCP 23.104.0.1:39640 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507084, total packets: 1585, avg bps: 1113, avg pps: 0, avg bpp: 319 Time window: 2025-11-23 07:58:02 - 2025-11-23 08:58:46 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0021s Wall: 0.0026s flows/second: 63591.2 Runtime: 0.0026s