Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 13:58:47.282 00:00:10.361 TCP 23.104.0.1:44138 -> 1.101.0.1:3000 11 1507 1 2025-11-23 13:59:02.629 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60614 10 6452 1 2025-11-23 13:59:47.682 00:00:10.367 TCP 23.104.0.1:45232 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:00:02.806 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35180 10 6452 1 2025-11-23 14:00:48.107 00:00:10.364 TCP 23.104.0.1:46520 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:01:03.029 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54400 10 6452 1 2025-11-23 14:01:47.752 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 14:01:47.987 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:01:48.512 00:00:10.376 TCP 23.104.0.1:49892 -> 1.101.0.1:3000 11 1507 1 2025-11-23 13:58:02.686 00:05:04.199 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 13:58:02.682 00:05:04.204 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 14:02:03.239 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56170 10 6452 1 2025-11-23 14:02:48.929 00:00:10.435 TCP 23.104.0.1:56516 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:03:03.469 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51130 10 6452 1 2025-11-23 14:03:49.404 00:00:10.369 TCP 23.104.0.1:55834 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:04:03.677 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59298 10 6452 1 2025-11-23 14:04:49.810 00:00:10.332 TCP 23.104.0.1:50676 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:05:03.854 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46538 10 6452 1 2025-11-23 14:05:50.183 00:00:10.362 TCP 23.104.0.1:39402 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:06:04.081 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38208 10 6452 1 2025-11-23 14:06:47.412 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 14:06:47.269 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:06:50.583 00:00:10.368 TCP 23.104.0.1:35538 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:07:04.258 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60082 10 6452 1 2025-11-23 14:07:50.989 00:00:10.364 TCP 23.104.0.1:49574 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:04:02.686 00:05:04.201 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 14:04:02.684 00:05:04.206 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 14:08:04.483 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42818 10 6452 1 2025-11-23 14:08:51.393 00:00:10.369 TCP 23.104.0.1:55126 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:09:04.701 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53548 10 6452 1 2025-11-23 14:09:51.796 00:00:10.368 TCP 23.104.0.1:36374 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:10:04.919 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53250 10 6452 1 2025-11-23 14:10:52.204 00:00:10.363 TCP 23.104.0.1:59344 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:11:05.133 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53534 10 6452 1 2025-11-23 14:11:47.457 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:11:47.589 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 14:11:52.609 00:00:10.363 TCP 23.104.0.1:51952 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:12:05.340 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57958 10 6452 1 2025-11-23 14:12:53.011 00:00:10.365 TCP 23.104.0.1:55648 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:13:05.554 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42210 10 6452 1 2025-11-23 14:10:02.684 00:05:04.217 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 14:13:53.416 00:00:10.370 TCP 23.104.0.1:57640 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:10:02.686 00:05:04.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 14:14:05.775 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41086 10 6452 1 2025-11-23 14:14:53.825 00:00:10.385 TCP 23.104.0.1:34398 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:15:05.992 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:35736 10 6452 1 2025-11-23 14:15:54.246 00:00:10.367 TCP 23.104.0.1:37206 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:16:06.179 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59634 10 6452 1 2025-11-23 14:16:47.505 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:16:47.770 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 14:16:54.652 00:00:10.363 TCP 23.104.0.1:50090 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:17:06.390 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49924 10 6452 1 2025-11-23 14:17:55.059 00:00:10.326 TCP 23.104.0.1:58468 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:18:06.562 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48454 10 6452 1 2025-11-23 14:18:55.436 00:00:10.327 TCP 23.104.0.1:41404 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:19:06.775 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34224 10 6452 1 2025-11-23 14:19:55.802 00:00:10.370 TCP 23.104.0.1:38942 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:16:02.688 00:05:04.208 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 14:16:02.691 00:05:04.203 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 14:20:06.982 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:42254 10 6452 1 2025-11-23 14:20:56.222 00:00:10.379 TCP 23.104.0.1:51204 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:21:07.215 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38834 10 6452 1 2025-11-23 14:21:47.537 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:21:47.530 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 14:21:56.645 00:00:10.368 TCP 23.104.0.1:36404 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:22:07.438 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56546 10 6452 1 2025-11-23 14:22:57.057 00:00:10.366 TCP 23.104.0.1:56638 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:23:07.646 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48302 10 6452 1 2025-11-23 14:23:57.460 00:00:10.368 TCP 23.104.0.1:51654 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:24:07.861 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43728 10 6452 1 2025-11-23 14:24:57.861 00:00:10.373 TCP 23.104.0.1:39366 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:25:08.094 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:33330 10 6452 1 2025-11-23 14:22:02.689 00:05:04.217 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 14:25:58.267 00:00:10.324 TCP 23.104.0.1:58508 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:22:02.691 00:05:04.211 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 14:26:08.356 00:00:18.146 TCP 1.101.0.1:3000 -> 22.102.0.1:32996 10 6452 1 2025-11-23 14:26:48.269 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:26:48.266 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 14:26:58.626 00:00:10.365 TCP 23.104.0.1:44066 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:27:16.549 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42224 10 6452 1 2025-11-23 14:27:59.027 00:00:10.361 TCP 23.104.0.1:41530 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:28:16.772 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54576 10 6452 1 2025-11-23 14:28:59.428 00:00:10.360 TCP 23.104.0.1:52916 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:29:16.989 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52190 10 6452 1 2025-11-23 14:29:59.822 00:00:10.363 TCP 23.104.0.1:57198 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:30:17.226 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46238 10 6452 1 2025-11-23 14:31:00.222 00:00:10.369 TCP 23.104.0.1:42290 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:31:17.450 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44910 10 6452 1 2025-11-23 14:31:47.539 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:31:47.868 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 14:28:02.692 00:05:04.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 14:28:02.690 00:05:04.217 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 14:32:00.626 00:00:13.260 TCP 23.104.0.1:55780 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:32:17.668 00:00:10.958 TCP 1.101.0.1:3000 -> 22.102.0.1:54496 10 6452 1 2025-11-23 14:33:03.938 00:00:10.369 TCP 23.104.0.1:40266 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:33:18.663 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:52812 10 6452 1 2025-11-23 14:34:04.345 00:00:10.322 TCP 23.104.0.1:55562 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:34:18.834 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39974 10 6452 1 2025-11-23 14:35:04.706 00:00:10.362 TCP 23.104.0.1:44832 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:35:19.068 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:57380 12 10369 1 2025-11-23 14:36:05.110 00:00:10.444 TCP 23.104.0.1:40074 -> 1.101.0.1:3000 15 1926 1 2025-11-23 14:36:19.314 00:00:18.498 TCP 1.101.0.1:3000 -> 22.102.0.1:38344 10 6452 1 2025-11-23 14:36:47.770 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:36:47.800 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 14:37:05.591 00:00:10.365 TCP 23.104.0.1:48888 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:37:27.853 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37698 10 6452 1 2025-11-23 14:34:02.691 00:05:04.219 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 14:34:02.693 00:05:04.214 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 14:38:05.990 00:00:10.325 TCP 23.104.0.1:39772 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:38:28.082 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:38768 10 6452 1 2025-11-23 14:39:06.353 00:00:10.364 TCP 23.104.0.1:60894 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:39:28.288 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52778 10 6452 1 2025-11-23 14:40:06.747 00:00:10.374 TCP 23.104.0.1:51782 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:40:28.506 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36590 10 6452 1 2025-11-23 14:41:07.155 00:00:10.366 TCP 23.104.0.1:49842 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:41:28.719 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48816 10 6452 1 2025-11-23 14:41:47.634 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:41:47.924 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 14:42:07.557 00:00:10.367 TCP 23.104.0.1:34616 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:42:28.892 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47924 10 6452 1 2025-11-23 14:43:07.963 00:00:10.332 TCP 23.104.0.1:45572 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:43:29.117 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51864 10 6452 1 2025-11-23 14:40:02.691 00:05:04.219 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 14:40:02.695 00:05:04.214 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 14:44:08.327 00:00:10.363 TCP 23.104.0.1:38314 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:44:29.341 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36458 10 6452 1 2025-11-23 14:45:08.726 00:00:10.329 TCP 23.104.0.1:57706 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:45:29.583 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:50210 12 10369 1 2025-11-23 14:46:09.103 00:00:10.438 TCP 23.104.0.1:40878 -> 1.101.0.1:3000 15 1926 1 2025-11-23 14:46:29.792 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45514 10 6452 1 2025-11-23 14:46:47.944 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:46:48.111 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 14:47:09.580 00:00:10.366 TCP 23.104.0.1:56750 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:47:30.009 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56086 10 6452 1 2025-11-23 14:48:09.985 00:00:10.367 TCP 23.104.0.1:40010 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:48:30.226 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56700 10 6452 1 2025-11-23 14:49:10.390 00:00:10.366 TCP 23.104.0.1:35308 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:49:30.401 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50456 10 6452 1 2025-11-23 14:46:02.699 00:05:04.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 14:46:02.696 00:05:04.217 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 14:50:10.794 00:00:10.332 TCP 23.104.0.1:58452 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:50:30.613 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44538 10 6452 1 2025-11-23 14:51:11.165 00:00:10.361 TCP 23.104.0.1:35426 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:51:30.787 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53260 10 6452 1 2025-11-23 14:51:48.125 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 14:51:48.064 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:52:11.565 00:00:10.368 TCP 23.104.0.1:49876 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:52:31.018 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50520 10 6452 1 2025-11-23 14:53:11.968 00:00:10.377 TCP 23.104.0.1:35150 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:53:31.186 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53388 10 6452 1 2025-11-23 14:54:12.405 00:00:10.389 TCP 23.104.0.1:42814 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:54:31.397 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53082 10 6452 1 2025-11-23 14:55:12.835 00:00:10.390 TCP 23.104.0.1:33064 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:55:31.606 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:40028 12 10375 1 2025-11-23 14:52:02.701 00:05:04.214 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 14:52:02.702 00:05:04.209 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 14:56:13.264 00:00:10.438 TCP 23.104.0.1:45692 -> 1.101.0.1:3000 15 1926 1 2025-11-23 14:56:31.802 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56752 10 6452 1 2025-11-23 14:56:48.111 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 14:56:48.190 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 14:57:13.739 00:00:10.370 TCP 23.104.0.1:54710 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:57:32.016 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57944 10 6452 1 2025-11-23 14:58:14.149 00:00:10.323 TCP 23.104.0.1:37492 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:58:32.224 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41326 10 6452 1 Summary: total flows: 164, total bytes: 511362, total packets: 1590, avg bps: 1123, avg pps: 0, avg bpp: 321 Time window: 2025-11-23 13:58:02 - 2025-11-23 14:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0030s Wall: 0.0023s flows/second: 72285.2 Runtime: 0.0023s