Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 14:59:14.514 00:00:10.363 TCP 23.104.0.1:56494 -> 1.101.0.1:3000 11 1507 1 2025-11-23 14:59:32.436 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36516 10 6452 1 2025-11-23 15:00:14.917 00:00:10.370 TCP 23.104.0.1:40584 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:00:32.649 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34418 10 6452 1 2025-11-23 15:01:15.324 00:00:10.367 TCP 23.104.0.1:60698 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:01:32.869 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41656 10 6452 1 2025-11-23 15:01:48.251 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 15:01:48.212 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 14:58:02.701 00:05:04.215 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 14:58:02.703 00:05:04.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 15:02:15.736 00:00:10.366 TCP 23.104.0.1:39828 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:02:33.089 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38784 10 6452 1 2025-11-23 15:03:16.140 00:00:10.362 TCP 23.104.0.1:49444 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:03:33.302 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32776 10 6452 1 2025-11-23 15:04:16.543 00:00:10.367 TCP 23.104.0.1:44978 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:04:33.525 00:00:10.994 TCP 1.101.0.1:3000 -> 22.102.0.1:39280 10 6452 1 2025-11-23 15:05:16.944 00:00:10.374 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:05:34.556 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41500 10 6452 1 2025-11-23 15:06:17.356 00:00:10.378 TCP 23.104.0.1:35584 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:06:34.766 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52258 10 6452 1 2025-11-23 15:06:48.261 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 15:06:48.483 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 15:07:17.770 00:00:10.329 TCP 23.104.0.1:55434 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:07:34.985 00:00:10.247 TCP 1.101.0.1:3000 -> 22.102.0.1:44620 13 6608 1 2025-11-23 15:04:02.704 00:05:04.213 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 15:04:02.701 00:05:04.219 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 15:08:18.139 00:00:10.365 TCP 23.104.0.1:35754 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:08:35.275 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37508 10 6452 1 2025-11-23 15:09:18.539 00:00:10.366 TCP 23.104.0.1:57108 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:09:35.489 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59000 10 6452 1 2025-11-23 15:10:18.943 00:00:10.378 TCP 23.104.0.1:43160 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:10:35.669 00:00:23.741 TCP 1.101.0.1:3000 -> 22.102.0.1:32814 10 6452 1 2025-11-23 15:11:19.367 00:00:10.408 TCP 23.104.0.1:58552 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:11:48.638 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 15:11:48.550 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 15:11:49.447 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36426 10 6452 1 2025-11-23 15:12:19.845 00:00:10.391 TCP 23.104.0.1:43284 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:12:49.623 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47128 10 6452 1 2025-11-23 15:13:20.280 00:00:14.101 TCP 23.104.0.1:39674 -> 1.101.0.1:3000 12 1559 1 2025-11-23 15:13:49.846 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49224 10 6452 1 2025-11-23 15:10:02.705 00:05:04.215 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 15:10:02.703 00:05:04.219 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 15:14:24.434 00:00:10.365 TCP 23.104.0.1:36620 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:14:50.085 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37778 10 6452 1 2025-11-23 15:15:24.834 00:00:10.347 TCP 23.104.0.1:34360 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:15:50.302 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47582 10 6452 1 2025-11-23 15:16:25.220 00:00:10.373 TCP 23.104.0.1:55200 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:16:48.379 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 15:16:48.573 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 15:16:50.513 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40804 10 6452 1 2025-11-23 15:17:25.633 00:00:10.327 TCP 23.104.0.1:35528 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:17:50.685 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60870 10 6452 1 2025-11-23 15:18:25.993 00:00:10.327 TCP 23.104.0.1:59850 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:18:50.892 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33436 10 6452 1 2025-11-23 15:19:26.361 00:00:10.367 TCP 23.104.0.1:33850 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:19:51.077 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:35660 11 6504 1 2025-11-23 15:16:02.706 00:05:04.218 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 15:16:02.703 00:05:04.224 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 15:20:26.770 00:00:10.373 TCP 23.104.0.1:34458 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:20:51.347 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48356 10 6452 1 2025-11-23 15:21:27.183 00:00:10.367 TCP 23.104.0.1:43034 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:21:48.680 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 15:21:48.643 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 15:21:51.563 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59414 10 6452 1 2025-11-23 15:22:27.580 00:00:10.363 TCP 23.104.0.1:46032 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:22:51.772 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53836 10 6452 1 2025-11-23 15:23:27.982 00:00:10.365 TCP 23.104.0.1:36154 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:23:51.988 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55320 10 6452 1 2025-11-23 15:24:28.390 00:00:10.381 TCP 23.104.0.1:37578 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:24:52.219 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46770 10 6452 1 2025-11-23 15:25:28.805 00:00:10.342 TCP 23.104.0.1:51002 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:25:52.439 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45652 10 6452 1 2025-11-23 15:22:02.707 00:05:04.216 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 15:22:02.705 00:05:04.222 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 15:26:29.181 00:00:10.366 TCP 23.104.0.1:41578 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:26:48.712 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 15:26:48.740 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 15:26:52.647 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37902 10 6452 1 2025-11-23 15:27:29.582 00:00:10.368 TCP 23.104.0.1:45650 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:27:52.863 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:44564 10 6452 1 2025-11-23 15:28:29.991 00:00:10.363 TCP 23.104.0.1:45738 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:28:53.106 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:36668 10 6452 1 2025-11-23 15:29:30.394 00:00:10.369 TCP 23.104.0.1:39414 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:29:53.291 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41454 10 6452 1 2025-11-23 15:30:30.798 00:00:10.372 TCP 23.104.0.1:46814 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:30:53.504 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55624 10 6452 1 2025-11-23 15:31:31.203 00:00:10.369 TCP 23.104.0.1:38348 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:31:48.824 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 15:31:48.875 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 15:31:53.715 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53428 10 6452 1 2025-11-23 15:28:02.705 00:05:04.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 15:28:02.710 00:05:04.217 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 15:32:31.611 00:00:10.329 TCP 23.104.0.1:36550 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:32:53.932 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:50112 10 6452 1 2025-11-23 15:33:31.976 00:00:10.367 TCP 23.104.0.1:39254 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:33:54.171 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50322 10 6452 1 2025-11-23 15:34:32.380 00:00:10.329 TCP 23.104.0.1:45182 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:34:54.391 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53574 10 6452 1 2025-11-23 15:35:32.758 00:00:10.385 TCP 23.104.0.1:57080 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:35:54.612 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34538 12 6556 1 2025-11-23 15:36:33.181 00:00:10.369 TCP 23.104.0.1:43552 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:36:48.635 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 15:36:49.059 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 15:36:54.830 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53784 10 6452 1 2025-11-23 15:37:33.590 00:00:10.325 TCP 23.104.0.1:41256 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:37:55.067 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50644 10 6452 1 2025-11-23 15:34:02.709 00:05:04.224 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 15:34:02.712 00:05:04.219 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 15:38:33.952 00:00:10.367 TCP 23.104.0.1:57610 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:38:55.240 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43246 10 6452 1 2025-11-23 15:39:34.356 00:00:10.365 TCP 23.104.0.1:34038 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:39:55.453 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47198 10 6452 1 2025-11-23 15:40:34.760 00:00:15.492 TCP 23.104.0.1:41614 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:40:55.663 00:00:10.771 TCP 1.101.0.1:3000 -> 22.102.0.1:35108 10 6452 1 2025-11-23 15:41:48.945 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 15:41:49.212 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 15:41:40.305 00:00:10.361 TCP 23.104.0.1:52980 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:41:56.471 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35246 10 6452 1 2025-11-23 15:42:40.710 00:00:10.324 TCP 23.104.0.1:49142 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:42:56.639 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43508 10 6452 1 2025-11-23 15:43:41.118 00:00:10.359 TCP 23.104.0.1:60262 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:43:56.844 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54948 10 6452 1 2025-11-23 15:40:02.710 00:05:04.228 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 15:40:02.712 00:05:04.222 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 15:44:41.515 00:00:10.363 TCP 23.104.0.1:44236 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:44:57.079 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42090 10 6452 1 2025-11-23 15:45:41.919 00:00:10.368 TCP 23.104.0.1:58672 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:45:57.295 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:56410 10 6452 1 2025-11-23 15:46:49.142 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 15:46:49.176 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 15:46:42.328 00:00:10.364 TCP 23.104.0.1:38668 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:46:57.463 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42788 10 6452 1 2025-11-23 15:47:42.731 00:00:10.369 TCP 23.104.0.1:53736 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:47:57.649 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44562 10 6452 1 2025-11-23 15:48:43.142 00:00:10.328 TCP 23.104.0.1:38668 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:48:57.816 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52222 10 6452 1 2025-11-23 15:49:43.500 00:00:10.363 TCP 23.104.0.1:52700 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:46:02.712 00:05:04.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 15:49:58.040 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54332 10 6452 1 2025-11-23 15:46:02.713 00:05:04.223 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 15:50:43.903 00:00:10.369 TCP 23.104.0.1:44720 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:50:58.254 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39448 10 6452 1 2025-11-23 15:51:49.308 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 15:51:49.318 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 15:51:44.308 00:00:10.584 TCP 23.104.0.1:36740 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:51:58.466 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:37584 10 6452 1 2025-11-23 15:52:44.931 00:00:10.374 TCP 23.104.0.1:42458 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:52:58.711 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:56756 10 6452 1 2025-11-23 15:53:45.347 00:00:10.762 TCP 23.104.0.1:41992 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:53:58.947 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:58774 10 6452 1 2025-11-23 15:54:46.151 00:00:10.322 TCP 23.104.0.1:38362 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:54:59.215 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35444 10 6452 1 2025-11-23 15:55:46.509 00:00:10.361 TCP 23.104.0.1:60184 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:55:59.436 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51212 10 6452 1 2025-11-23 15:52:02.711 00:05:04.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 15:52:02.714 00:05:04.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 15:56:49.420 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 15:56:49.393 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 15:56:46.907 00:00:10.366 TCP 23.104.0.1:46936 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:56:59.647 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50832 10 6452 1 2025-11-23 15:57:47.314 00:00:10.364 TCP 23.104.0.1:43046 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:57:59.879 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:47772 10 6452 1 Summary: total flows: 162, total bytes: 490753, total packets: 1558, avg bps: 1088, avg pps: 0, avg bpp: 314 Time window: 2025-11-23 14:58:02 - 2025-11-23 15:58:10 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0046s User: 0.0018s Wall: 0.0021s flows/second: 78298.8 Runtime: 0.0021s