Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 19:58:55.592 00:00:10.373 TCP 23.104.0.1:38818 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:59:18.406 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41088 10 6452 1 2025-11-23 19:59:56.005 00:00:10.366 TCP 23.104.0.1:50112 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:00:18.626 00:00:11.099 TCP 1.101.0.1:3000 -> 22.102.0.1:34164 10 6452 1 2025-11-23 20:00:56.401 00:00:10.365 TCP 23.104.0.1:41026 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:01:19.764 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45654 10 6452 1 2025-11-23 20:01:54.106 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 20:01:54.527 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 20:01:56.807 00:00:10.336 TCP 23.104.0.1:38226 -> 1.101.0.1:3000 11 1507 1 2025-11-23 19:58:02.777 00:05:04.268 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 19:58:02.775 00:05:04.273 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 20:02:19.983 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58910 10 6452 1 2025-11-23 20:02:57.183 00:00:10.360 TCP 23.104.0.1:40402 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:03:20.189 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38280 10 6452 1 2025-11-23 20:03:57.580 00:00:10.691 TCP 23.104.0.1:42302 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:04:20.395 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42754 10 6452 1 2025-11-23 20:04:58.310 00:00:10.377 TCP 23.104.0.1:58852 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:05:20.608 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48462 10 6452 1 2025-11-23 20:05:58.729 00:00:10.381 TCP 23.104.0.1:60036 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:06:20.832 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60662 10 6452 1 2025-11-23 20:06:54.474 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 20:06:54.375 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 20:06:59.158 00:00:10.363 TCP 23.104.0.1:33186 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:07:21.076 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51592 10 6452 1 2025-11-23 20:04:02.774 00:05:04.274 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 20:07:59.560 00:00:10.363 TCP 23.104.0.1:41042 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:04:02.778 00:05:04.269 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 20:08:21.299 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59862 10 6452 1 2025-11-23 20:08:59.962 00:00:10.325 TCP 23.104.0.1:52214 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:09:21.473 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40998 10 6452 1 2025-11-23 20:10:00.323 00:00:10.366 TCP 23.104.0.1:43786 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:10:21.690 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42694 10 6452 1 2025-11-23 20:11:00.727 00:00:10.369 TCP 23.104.0.1:37720 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:11:21.902 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59840 10 6452 1 2025-11-23 20:11:54.408 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 20:11:54.639 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 20:12:01.137 00:00:10.361 TCP 23.104.0.1:45292 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:12:22.114 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41710 10 6452 1 2025-11-23 20:13:01.535 00:00:10.368 TCP 23.104.0.1:42818 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:13:22.341 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35716 10 6452 1 2025-11-23 20:10:02.776 00:05:04.276 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 20:10:02.777 00:05:04.271 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 20:14:01.942 00:00:10.385 TCP 23.104.0.1:50620 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:14:22.564 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51322 10 6452 1 2025-11-23 20:15:02.385 00:00:10.365 TCP 23.104.0.1:45944 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:15:22.776 00:00:10.381 TCP 1.101.0.1:3000 -> 22.102.0.1:45072 10 6452 1 2025-11-23 20:16:02.786 00:00:10.365 TCP 23.104.0.1:53798 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:16:23.195 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34904 10 6452 1 2025-11-23 20:16:54.434 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 20:16:54.490 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 20:17:03.192 00:00:10.365 TCP 23.104.0.1:47732 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:17:23.412 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44028 10 6452 1 2025-11-23 20:18:03.595 00:00:10.322 TCP 23.104.0.1:44280 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:18:23.623 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58872 10 6452 1 2025-11-23 20:19:03.953 00:00:10.368 TCP 23.104.0.1:48388 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:19:23.833 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52196 10 6452 1 2025-11-23 20:16:02.780 00:05:04.281 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 20:16:02.778 00:05:04.285 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 20:20:04.360 00:00:10.368 TCP 23.104.0.1:45448 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:20:24.071 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54688 10 6452 1 2025-11-23 20:21:04.764 00:00:10.379 TCP 23.104.0.1:35962 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:21:24.287 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52374 10 6452 1 2025-11-23 20:21:54.644 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 20:21:54.717 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 20:22:05.177 00:00:10.366 TCP 23.104.0.1:33618 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:22:24.501 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55384 10 6452 1 2025-11-23 20:23:05.578 00:00:10.372 TCP 23.104.0.1:47454 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:23:24.704 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35686 10 6452 1 2025-11-23 20:24:05.996 00:00:10.364 TCP 23.104.0.1:35938 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:24:24.918 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:34900 10 6452 1 2025-11-23 20:25:06.399 00:00:10.362 TCP 23.104.0.1:36958 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:25:25.126 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55330 10 6452 1 2025-11-23 20:22:02.779 00:05:04.286 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 20:22:02.781 00:05:04.281 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 20:26:06.801 00:00:10.332 TCP 23.104.0.1:56820 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:26:25.351 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45034 10 6452 1 2025-11-23 20:26:54.817 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 20:26:54.775 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 20:27:07.172 00:00:10.361 TCP 23.104.0.1:43426 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:27:25.561 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44816 10 6452 1 2025-11-23 20:28:07.573 00:00:10.367 TCP 23.104.0.1:37770 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:28:25.784 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:49088 10 6452 1 2025-11-23 20:29:07.978 00:00:10.552 TCP 23.104.0.1:51722 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:29:25.970 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48566 10 6452 1 2025-11-23 20:30:08.568 00:00:10.362 TCP 23.104.0.1:41160 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:30:26.220 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39994 10 6452 1 2025-11-23 20:31:08.965 00:00:10.364 TCP 23.104.0.1:34368 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:31:26.440 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:57544 10 6452 1 2025-11-23 20:31:54.774 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 20:31:54.805 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 20:28:02.781 00:05:04.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 20:28:02.783 00:05:04.282 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 20:32:09.366 00:00:10.321 TCP 23.104.0.1:59514 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:32:26.626 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35044 10 6452 1 2025-11-23 20:33:09.725 00:00:10.370 TCP 23.104.0.1:42380 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:33:26.808 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52684 10 6452 1 2025-11-23 20:34:10.136 00:00:10.343 TCP 23.104.0.1:37428 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:34:26.985 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50310 10 6452 1 2025-11-23 20:35:10.523 00:00:10.366 TCP 23.104.0.1:41088 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:35:27.215 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36136 10 6452 1 2025-11-23 20:36:10.926 00:00:10.392 TCP 23.104.0.1:56690 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:36:27.432 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44946 10 6452 1 2025-11-23 20:36:55.026 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 20:36:54.997 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 20:37:11.357 00:00:10.363 TCP 23.104.0.1:36802 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:37:27.642 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33300 10 6452 1 2025-11-23 20:34:02.781 00:05:04.286 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 20:34:02.785 00:05:04.282 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 20:38:11.760 00:00:10.380 TCP 23.104.0.1:56658 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:38:27.868 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48158 10 6452 1 2025-11-23 20:39:12.181 00:00:10.327 TCP 23.104.0.1:46018 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:39:28.105 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55908 10 6452 1 2025-11-23 20:40:12.539 00:00:10.374 TCP 23.104.0.1:51312 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:40:28.317 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45114 10 6452 1 2025-11-23 20:41:12.942 00:00:10.377 TCP 23.104.0.1:38444 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:41:28.531 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51934 10 6452 1 2025-11-23 20:41:55.292 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 20:41:55.324 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 20:42:13.357 00:00:10.367 TCP 23.104.0.1:42466 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:42:28.703 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:48334 10 6452 1 2025-11-23 20:43:13.762 00:00:10.377 TCP 23.104.0.1:37202 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:43:28.882 00:00:14.098 TCP 1.101.0.1:3000 -> 22.102.0.1:44064 10 6452 1 2025-11-23 20:40:02.788 00:05:04.280 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 20:40:02.786 00:05:04.284 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 20:44:14.175 00:00:10.368 TCP 23.104.0.1:48952 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:44:33.042 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41872 10 6452 1 2025-11-23 20:45:14.577 00:00:10.364 TCP 23.104.0.1:43316 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:45:33.259 00:00:10.503 TCP 1.101.0.1:3000 -> 22.102.0.1:38194 10 6452 1 2025-11-23 20:46:14.980 00:00:10.324 TCP 23.104.0.1:36728 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:46:33.802 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34084 10 6452 1 2025-11-23 20:46:55.742 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 20:46:55.667 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 20:47:15.340 00:00:10.365 TCP 23.104.0.1:43774 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:47:34.030 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48488 10 6452 1 2025-11-23 20:48:15.742 00:00:10.372 TCP 23.104.0.1:37264 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:48:34.240 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58794 12 6556 1 2025-11-23 20:49:16.151 00:00:10.373 TCP 23.104.0.1:49144 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:49:34.466 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59034 10 6452 1 2025-11-23 20:46:02.786 00:05:04.289 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 20:46:02.790 00:05:04.283 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 20:50:16.560 00:00:10.363 TCP 23.104.0.1:35014 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:50:34.686 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39414 10 6452 1 2025-11-23 20:51:16.958 00:00:10.362 TCP 23.104.0.1:53222 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:51:34.907 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41306 12 6556 1 2025-11-23 20:51:55.380 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 20:51:55.517 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 20:52:17.359 00:00:10.360 TCP 23.104.0.1:58582 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:52:35.125 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43824 10 6452 1 2025-11-23 20:53:17.762 00:00:10.373 TCP 23.104.0.1:48766 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:53:35.356 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40220 10 6452 1 2025-11-23 20:54:18.177 00:00:10.375 TCP 23.104.0.1:48982 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:54:35.575 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44870 10 6452 1 2025-11-23 20:55:18.596 00:00:10.325 TCP 23.104.0.1:40588 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:55:35.807 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46024 10 6452 1 2025-11-23 20:52:02.789 00:05:04.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 20:52:02.792 00:05:04.282 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 20:56:18.955 00:00:10.371 TCP 23.104.0.1:42550 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:56:36.037 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59142 10 6452 1 2025-11-23 20:56:55.524 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 20:56:55.610 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 20:57:19.363 00:00:10.363 TCP 23.104.0.1:43742 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:57:36.252 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36478 10 6452 1 2025-11-23 20:58:19.764 00:00:10.377 TCP 23.104.0.1:35218 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:58:36.472 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57808 10 6452 1 Summary: total flows: 164, total bytes: 498556, total packets: 1576, avg bps: 1094, avg pps: 0, avg bpp: 316 Time window: 2025-11-23 19:58:02 - 2025-11-23 20:58:46 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0011s Wall: 0.0015s flows/second: 112709.5 Runtime: 0.0015s