Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 17:58:56.102 00:00:10.325 TCP 23.104.0.1:33398 -> 1.101.0.1:3000 11 1507 1 2025-11-23 17:59:27.624 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47734 10 6452 1 2025-11-23 17:59:56.464 00:00:10.366 TCP 23.104.0.1:55080 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:00:27.795 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58714 10 6452 1 2025-11-23 18:00:56.876 00:00:10.367 TCP 23.104.0.1:59222 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:01:51.921 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 18:01:28.020 00:00:22.903 TCP 1.101.0.1:3000 -> 22.102.0.1:34922 10 6452 1 2025-11-23 18:01:52.024 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 17:58:02.741 00:05:04.242 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 17:58:02.743 00:05:04.236 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 18:01:57.282 00:00:10.319 TCP 23.104.0.1:52258 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:02:40.974 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42010 10 6452 1 2025-11-23 18:02:57.641 00:00:10.363 TCP 23.104.0.1:42328 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:03:41.209 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39182 10 6452 1 2025-11-23 18:03:58.051 00:00:10.362 TCP 23.104.0.1:54446 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:04:41.417 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34646 10 6452 1 2025-11-23 18:04:58.451 00:00:10.363 TCP 23.104.0.1:37512 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:05:41.636 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51938 10 6452 1 2025-11-23 18:05:58.854 00:00:10.331 TCP 23.104.0.1:58208 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:06:52.390 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 18:06:41.854 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45468 10 6452 1 2025-11-23 18:06:52.430 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 18:06:59.224 00:00:10.339 TCP 23.104.0.1:55756 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:07:42.086 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34744 10 6452 1 2025-11-23 18:04:02.741 00:05:04.243 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 18:07:59.601 00:00:10.368 TCP 23.104.0.1:38174 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:04:02.743 00:05:04.238 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 18:08:42.305 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36204 10 6452 1 2025-11-23 18:09:00.011 00:00:10.364 TCP 23.104.0.1:33034 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:09:42.517 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46732 10 6452 1 2025-11-23 18:10:00.415 00:00:10.324 TCP 23.104.0.1:40762 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:10:42.692 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42870 10 6452 1 2025-11-23 18:11:00.775 00:00:10.366 TCP 23.104.0.1:47168 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:11:42.911 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47254 10 6452 1 2025-11-23 18:11:51.983 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 18:11:52.161 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 18:12:01.179 00:00:10.324 TCP 23.104.0.1:59138 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:12:43.120 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59194 10 6452 1 2025-11-23 18:13:01.543 00:00:10.362 TCP 23.104.0.1:34664 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:13:43.293 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43878 10 6452 1 2025-11-23 18:10:02.745 00:05:04.240 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 18:10:02.743 00:05:04.245 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 18:14:01.943 00:00:10.376 TCP 23.104.0.1:47600 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:14:43.516 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43572 10 6452 1 2025-11-23 18:15:02.356 00:00:10.370 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:15:43.731 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57844 10 6452 1 2025-11-23 18:16:02.772 00:00:10.334 TCP 23.104.0.1:45104 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:16:52.380 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 18:16:43.944 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:58458 10 6452 1 2025-11-23 18:16:52.338 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 18:17:03.150 00:00:10.377 TCP 23.104.0.1:56384 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:17:44.135 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59280 10 6452 1 2025-11-23 18:18:03.563 00:00:10.376 TCP 23.104.0.1:42562 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:18:44.351 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38842 10 6452 1 2025-11-23 18:19:03.980 00:00:10.375 TCP 23.104.0.1:36126 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:19:44.573 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57876 10 6452 1 2025-11-23 18:16:02.747 00:05:04.240 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 18:16:02.746 00:05:04.245 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 18:20:04.390 00:00:10.363 TCP 23.104.0.1:51980 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:20:44.793 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39226 10 6452 1 2025-11-23 18:21:04.793 00:00:10.377 TCP 23.104.0.1:60772 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:21:52.169 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 18:21:45.032 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55292 10 6452 1 2025-11-23 18:21:52.336 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 18:22:05.208 00:00:10.363 TCP 23.104.0.1:34668 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:22:45.244 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32900 10 6452 1 2025-11-23 18:23:05.605 00:00:10.366 TCP 23.104.0.1:36670 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:23:45.460 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:58142 10 6452 1 2025-11-23 18:24:06.007 00:00:10.362 TCP 23.104.0.1:53980 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:24:45.638 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55774 10 6452 1 2025-11-23 18:25:06.412 00:00:10.325 TCP 23.104.0.1:58234 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:25:45.856 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:35090 10 6452 1 2025-11-23 18:22:02.744 00:05:04.246 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 18:22:02.747 00:05:04.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 18:26:06.775 00:00:10.374 TCP 23.104.0.1:52650 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:26:52.566 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 18:26:52.365 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 18:26:46.056 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60302 10 6452 1 2025-11-23 18:27:07.180 00:00:10.327 TCP 23.104.0.1:35046 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:27:46.275 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53980 10 6452 1 2025-11-23 18:28:07.545 00:00:10.364 TCP 23.104.0.1:34130 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:28:46.506 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:58346 11 6504 1 2025-11-23 18:29:07.950 00:00:10.351 TCP 23.104.0.1:57522 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:29:46.787 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40268 10 6452 1 2025-11-23 18:30:08.338 00:00:10.323 TCP 23.104.0.1:39260 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:30:47.009 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:41596 10 6452 1 2025-11-23 18:31:08.701 00:00:10.365 TCP 23.104.0.1:46502 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:31:52.321 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 18:31:52.496 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 18:31:47.249 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59086 10 6452 1 2025-11-23 18:28:02.752 00:05:04.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 18:28:02.749 00:05:04.242 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 18:32:09.112 00:00:10.359 TCP 23.104.0.1:37218 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:32:47.468 00:00:10.417 TCP 1.101.0.1:3000 -> 22.102.0.1:50462 10 6452 1 2025-11-23 18:33:09.508 00:00:10.325 TCP 23.104.0.1:51466 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:33:47.923 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:36828 10 6452 1 2025-11-23 18:34:09.872 00:00:10.365 TCP 23.104.0.1:47282 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:34:48.107 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34052 10 6452 1 2025-11-23 18:35:10.274 00:00:10.367 TCP 23.104.0.1:51524 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:35:48.324 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49372 10 6452 1 2025-11-23 18:36:10.677 00:00:10.370 TCP 23.104.0.1:59732 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:36:52.655 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 18:36:52.551 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 18:36:48.550 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45088 10 6452 1 2025-11-23 18:37:11.102 00:00:11.203 TCP 23.104.0.1:46738 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:37:48.772 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48418 10 6452 1 2025-11-23 18:34:02.753 00:05:04.240 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 18:34:02.751 00:05:04.245 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 18:38:12.342 00:00:10.360 TCP 23.104.0.1:42648 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:38:48.992 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57990 10 6452 1 2025-11-23 18:39:12.739 00:00:10.365 TCP 23.104.0.1:50430 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:39:49.225 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57514 10 6452 1 2025-11-23 18:40:13.147 00:00:10.333 TCP 23.104.0.1:40352 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:40:49.442 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37094 10 6452 1 2025-11-23 18:41:13.516 00:00:10.377 TCP 23.104.0.1:60758 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:41:52.862 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 18:41:52.598 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 18:41:49.654 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58848 10 6452 1 2025-11-23 18:42:13.928 00:00:10.343 TCP 23.104.0.1:60228 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:42:49.876 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55462 10 6452 1 2025-11-23 18:43:14.314 00:00:10.321 TCP 23.104.0.1:58078 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:43:50.108 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47710 10 6452 1 2025-11-23 18:40:02.756 00:05:04.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 18:40:02.754 00:05:04.242 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 18:44:14.672 00:00:10.371 TCP 23.104.0.1:60576 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:44:50.332 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40622 10 6452 1 2025-11-23 18:45:15.107 00:00:10.368 TCP 23.104.0.1:53406 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:45:50.557 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41142 10 6452 1 2025-11-23 18:46:15.512 00:00:10.366 TCP 23.104.0.1:33724 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:46:52.816 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 18:46:52.750 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 18:46:50.772 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49554 10 6452 1 2025-11-23 18:47:15.915 00:00:10.329 TCP 23.104.0.1:39590 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:47:51.000 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48136 10 6452 1 2025-11-23 18:48:16.287 00:00:10.375 TCP 23.104.0.1:48180 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:48:51.224 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37240 10 6452 1 2025-11-23 18:49:16.700 00:00:10.365 TCP 23.104.0.1:38422 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:49:51.453 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57120 10 6452 1 2025-11-23 18:46:02.758 00:05:04.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 18:46:02.755 00:05:04.242 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 18:50:17.108 00:00:10.358 TCP 23.104.0.1:55212 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:50:51.667 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52938 12 10375 1 2025-11-23 18:51:17.512 00:00:10.447 TCP 23.104.0.1:54850 -> 1.101.0.1:3000 15 1926 1 2025-11-23 18:51:53.466 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 18:51:53.295 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 18:51:51.912 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:57692 10 6452 1 2025-11-23 18:52:17.992 00:00:10.390 TCP 23.104.0.1:58432 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:52:52.183 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51738 10 6452 1 2025-11-23 18:53:18.439 00:00:10.365 TCP 23.104.0.1:54740 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:53:52.397 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33696 10 6452 1 2025-11-23 18:54:18.842 00:00:10.388 TCP 23.104.0.1:43198 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:54:52.617 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:35496 10 6452 1 2025-11-23 18:55:19.267 00:00:10.333 TCP 23.104.0.1:41772 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:55:52.827 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60170 10 6452 1 2025-11-23 18:52:02.757 00:05:04.241 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 18:52:02.760 00:05:04.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 18:56:19.638 00:00:10.363 TCP 23.104.0.1:35072 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:56:52.928 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 18:56:52.968 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 18:56:53.072 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43438 10 6452 1 2025-11-23 18:57:20.064 00:00:10.419 TCP 23.104.0.1:42280 -> 1.101.0.1:3000 11 1507 1 2025-11-23 18:57:53.285 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54162 10 6452 1 2025-11-23 18:58:20.525 00:00:10.364 TCP 23.104.0.1:51392 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496290, total packets: 1569, avg bps: 1094, avg pps: 0, avg bpp: 316 Time window: 2025-11-23 17:58:02 - 2025-11-23 18:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0045s User: 0.0018s Wall: 0.0032s flows/second: 50796.6 Runtime: 0.0032s