Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 15:58:47.715 00:00:10.380 TCP 23.104.0.1:37720 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:59:00.144 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39144 10 6452 1 2025-11-23 15:59:48.132 00:00:10.361 TCP 23.104.0.1:37166 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:00:00.351 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51330 10 6452 1 2025-11-23 16:00:48.532 00:00:10.369 TCP 23.104.0.1:45966 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:01:00.565 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 10 6452 1 2025-11-23 16:01:49.270 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 16:01:49.625 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 16:01:48.940 00:00:10.372 TCP 23.104.0.1:40306 -> 1.101.0.1:3000 11 1507 1 2025-11-23 15:58:02.717 00:05:04.223 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 15:58:02.716 00:05:04.228 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 16:02:00.781 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46796 10 6452 1 2025-11-23 16:02:49.352 00:00:10.360 TCP 23.104.0.1:60002 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:03:01.000 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37096 10 6452 1 2025-11-23 16:03:49.752 00:00:10.389 TCP 23.104.0.1:35614 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:04:01.229 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47040 10 6452 1 2025-11-23 16:04:50.178 00:00:10.362 TCP 23.104.0.1:51000 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:05:01.447 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34050 10 6452 1 2025-11-23 16:05:50.575 00:00:10.371 TCP 23.104.0.1:47922 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:06:01.624 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55576 10 6452 1 2025-11-23 16:06:49.494 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 16:06:49.601 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 16:06:50.993 00:00:10.323 TCP 23.104.0.1:53498 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:07:01.841 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38492 10 6452 1 2025-11-23 16:07:51.359 00:00:10.367 TCP 23.104.0.1:38208 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:04:02.719 00:05:04.222 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 16:04:02.718 00:05:04.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 16:08:02.083 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48684 10 6452 1 2025-11-23 16:08:51.766 00:00:10.375 TCP 23.104.0.1:55338 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:09:02.260 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44602 10 6452 1 2025-11-23 16:09:52.180 00:00:10.381 TCP 23.104.0.1:53902 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:10:02.476 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56634 10 6452 1 2025-11-23 16:10:52.585 00:00:10.324 TCP 23.104.0.1:37962 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:11:02.688 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55992 10 6452 1 2025-11-23 16:11:49.599 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 16:11:49.808 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 16:11:52.946 00:00:10.380 TCP 23.104.0.1:45524 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:12:02.901 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43670 10 6452 1 2025-11-23 16:12:53.366 00:00:10.361 TCP 23.104.0.1:58302 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:13:03.114 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51930 10 6452 1 2025-11-23 16:13:53.765 00:00:10.333 TCP 23.104.0.1:41266 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:10:02.720 00:05:04.224 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 16:10:02.717 00:05:04.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 16:14:03.289 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47706 10 6452 1 2025-11-23 16:14:54.132 00:00:10.366 TCP 23.104.0.1:36818 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:15:03.510 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41694 10 6452 1 2025-11-23 16:15:54.537 00:00:10.361 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:16:03.723 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49348 10 6452 1 2025-11-23 16:16:49.664 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 16:16:49.665 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 16:16:54.934 00:00:10.384 TCP 23.104.0.1:42418 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:17:03.957 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:38008 12 6556 1 2025-11-23 16:17:55.352 00:00:10.372 TCP 23.104.0.1:37914 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:18:04.202 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40242 10 6452 1 2025-11-23 16:18:55.762 00:00:10.335 TCP 23.104.0.1:45746 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:19:04.417 00:00:10.269 TCP 1.101.0.1:3000 -> 22.102.0.1:54754 10 6452 1 2025-11-23 16:19:56.136 00:00:10.365 TCP 23.104.0.1:58624 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:16:02.722 00:05:04.227 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 16:16:02.720 00:05:04.232 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 16:20:04.727 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46498 10 6452 1 2025-11-23 16:20:56.540 00:00:10.364 TCP 23.104.0.1:54360 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:21:04.943 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45322 10 6452 1 2025-11-23 16:21:49.885 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 16:21:49.727 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 16:21:56.940 00:00:10.341 TCP 23.104.0.1:35744 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:22:05.173 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47836 10 6452 1 2025-11-23 16:22:57.317 00:00:10.364 TCP 23.104.0.1:47620 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:23:05.382 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33936 10 6452 1 2025-11-23 16:23:57.722 00:00:10.370 TCP 23.104.0.1:55076 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:24:05.599 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57920 10 6452 1 2025-11-23 16:24:58.129 00:00:10.363 TCP 23.104.0.1:50932 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:25:05.822 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50408 10 6452 1 2025-11-23 16:22:02.720 00:05:04.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 16:25:58.528 00:00:10.367 TCP 23.104.0.1:49654 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:22:02.723 00:05:04.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 16:26:05.993 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58886 10 6452 1 2025-11-23 16:26:49.931 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 16:26:50.336 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 16:26:58.929 00:00:10.386 TCP 23.104.0.1:53158 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:27:06.212 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58666 10 6452 1 2025-11-23 16:27:59.350 00:00:12.039 TCP 23.104.0.1:50384 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:28:06.437 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52622 10 6452 1 2025-11-23 16:29:01.456 00:00:10.323 TCP 23.104.0.1:45490 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:29:06.644 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55746 10 6452 1 2025-11-23 16:30:01.818 00:00:10.366 TCP 23.104.0.1:48600 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:30:06.863 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:46558 10 6452 1 2025-11-23 16:31:02.223 00:00:10.324 TCP 23.104.0.1:36452 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:31:07.137 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55546 10 6452 1 2025-11-23 16:31:49.930 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 16:31:50.335 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 16:28:02.722 00:05:04.231 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 16:28:02.724 00:05:04.227 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 16:32:02.583 00:00:10.414 TCP 23.104.0.1:59806 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:32:07.367 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:52092 10 6452 1 2025-11-23 16:33:03.033 00:00:10.369 TCP 23.104.0.1:37748 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:33:07.636 00:00:10.281 TCP 1.101.0.1:3000 -> 22.102.0.1:49310 10 6452 1 2025-11-23 16:34:03.437 00:00:11.050 TCP 23.104.0.1:47682 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:34:07.954 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52820 10 6452 1 2025-11-23 16:35:04.524 00:00:10.363 TCP 23.104.0.1:59676 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:35:08.191 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50596 10 6452 1 2025-11-23 16:36:04.923 00:00:10.385 TCP 23.104.0.1:60036 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:36:08.399 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43132 10 6452 1 2025-11-23 16:36:50.423 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 16:36:50.340 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 16:37:05.349 00:00:10.327 TCP 23.104.0.1:54108 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:37:08.609 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:35708 10 6452 1 2025-11-23 16:34:02.726 00:05:04.226 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 16:34:02.724 00:05:04.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 16:38:05.713 00:00:10.382 TCP 23.104.0.1:46424 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:38:08.817 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44808 10 6452 1 2025-11-23 16:39:06.142 00:00:10.363 TCP 23.104.0.1:55752 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:39:08.998 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:41280 10 6452 1 2025-11-23 16:40:06.546 00:00:10.368 TCP 23.104.0.1:46110 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:40:09.268 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50220 10 6452 1 2025-11-23 16:41:09.482 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:48044 12 10369 1 2025-11-23 16:41:06.954 00:00:10.452 TCP 23.104.0.1:50516 -> 1.101.0.1:3000 15 1926 1 2025-11-23 16:41:50.397 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 16:41:50.273 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 16:42:07.443 00:00:10.374 TCP 23.104.0.1:45668 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:42:09.732 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53946 10 6452 1 2025-11-23 16:43:09.950 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36494 10 6452 1 2025-11-23 16:43:07.850 00:00:10.387 TCP 23.104.0.1:53544 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:40:02.727 00:05:04.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 16:40:02.729 00:05:04.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 16:44:10.170 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57036 10 6452 1 2025-11-23 16:44:08.270 00:00:10.325 TCP 23.104.0.1:46806 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:45:08.633 00:00:10.336 TCP 23.104.0.1:57784 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:45:10.392 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34374 10 6452 1 2025-11-23 16:46:10.622 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37114 10 6452 1 2025-11-23 16:46:09.009 00:00:10.368 TCP 23.104.0.1:35380 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:46:50.675 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 16:46:50.751 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 16:47:09.412 00:00:10.366 TCP 23.104.0.1:54022 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:47:10.829 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38512 10 6452 1 2025-11-23 16:48:11.067 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55114 10 6452 1 2025-11-23 16:48:09.817 00:00:10.326 TCP 23.104.0.1:37106 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:49:11.285 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33042 10 6452 1 2025-11-23 16:49:10.186 00:00:10.363 TCP 23.104.0.1:33130 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:46:02.727 00:05:04.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 16:46:02.730 00:05:04.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 16:50:11.501 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59812 10 6452 1 2025-11-23 16:50:10.587 00:00:10.327 TCP 23.104.0.1:45800 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:51:11.717 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38684 10 6452 1 2025-11-23 16:51:10.955 00:00:10.370 TCP 23.104.0.1:54282 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:51:50.486 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 16:51:50.716 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 16:52:11.358 00:00:10.366 TCP 23.104.0.1:40270 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:52:11.931 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:41382 10 6452 1 2025-11-23 16:53:11.765 00:00:10.332 TCP 23.104.0.1:40872 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:53:12.170 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55716 10 6452 1 2025-11-23 16:54:12.383 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35396 10 6452 1 2025-11-23 16:54:12.133 00:00:10.364 TCP 23.104.0.1:44670 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:55:12.532 00:00:10.360 TCP 23.104.0.1:60452 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:55:12.603 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47404 10 6452 1 2025-11-23 16:52:02.731 00:05:04.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 16:52:02.728 00:05:04.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 16:56:12.928 00:00:10.460 TCP 23.104.0.1:47932 -> 1.101.0.1:3000 15 1926 1 2025-11-23 16:56:12.781 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:32772 12 10375 1 2025-11-23 16:56:50.430 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 16:56:50.267 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 16:57:13.026 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36132 10 6452 1 2025-11-23 16:57:13.429 00:00:10.371 TCP 23.104.0.1:32946 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:58:13.845 00:00:10.386 TCP 23.104.0.1:53104 -> 1.101.0.1:3000 11 1507 1 2025-11-23 16:58:13.236 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57168 10 6452 1 Summary: total flows: 164, total bytes: 507130, total packets: 1586, avg bps: 1120, avg pps: 0, avg bpp: 319 Time window: 2025-11-23 15:58:02 - 2025-11-23 16:58:24 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0020s User: 0.0020s Wall: 0.0019s flows/second: 84400.7 Runtime: 0.0020s