Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 00:59:12.869 00:00:10.365 TCP 23.104.0.1:43900 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:59:40.144 00:00:10.733 TCP 1.101.0.1:3000 -> 22.102.0.1:42870 11 6504 1 2025-11-24 01:00:13.279 00:00:10.363 TCP 23.104.0.1:43106 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:00:40.921 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53340 10 6452 1 2025-11-24 01:01:13.681 00:00:10.367 TCP 23.104.0.1:49834 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:01:41.127 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38810 10 6452 1 2025-11-24 01:02:00.614 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 01:02:00.614 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 00:58:02.872 00:05:04.291 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 00:58:02.870 00:05:04.295 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 01:02:14.103 00:00:10.330 TCP 23.104.0.1:41084 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:02:41.341 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48354 10 6452 1 2025-11-24 01:03:14.469 00:00:10.320 TCP 23.104.0.1:54000 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:03:41.556 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45616 10 6452 1 2025-11-24 01:04:14.831 00:00:10.382 TCP 23.104.0.1:54492 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:04:41.763 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42652 10 6452 1 2025-11-24 01:05:15.254 00:00:10.366 TCP 23.104.0.1:38692 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:05:41.979 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56024 10 6452 1 2025-11-24 01:06:15.661 00:00:10.365 TCP 23.104.0.1:43260 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:07:00.688 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 01:06:42.206 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58940 10 6452 1 2025-11-24 01:07:00.353 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 01:07:16.092 00:00:10.359 TCP 23.104.0.1:39690 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:07:42.417 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39006 10 6452 1 2025-11-24 01:04:02.876 00:05:04.288 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 01:04:02.873 00:05:04.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 01:08:16.493 00:00:10.361 TCP 23.104.0.1:43502 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:08:42.629 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37700 10 6452 1 2025-11-24 01:09:16.896 00:00:10.367 TCP 23.104.0.1:34738 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:09:42.800 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39326 10 6452 1 2025-11-24 01:10:17.302 00:00:10.365 TCP 23.104.0.1:35826 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:10:43.039 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:40460 13 13955 1 2025-11-24 01:11:17.710 00:00:10.438 TCP 23.104.0.1:34506 -> 1.101.0.1:3000 15 1926 1 2025-11-24 01:11:43.281 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:42310 10 6452 1 2025-11-24 01:12:00.499 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 01:12:00.690 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 01:12:18.186 00:00:10.364 TCP 23.104.0.1:58104 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:12:43.476 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38220 10 6452 1 2025-11-24 01:13:18.585 00:00:10.368 TCP 23.104.0.1:59504 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:13:43.689 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53878 10 6452 1 2025-11-24 01:10:02.877 00:05:04.289 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 01:10:02.874 00:05:04.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 01:14:18.991 00:00:10.337 TCP 23.104.0.1:39068 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:14:43.898 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41090 10 6452 1 2025-11-24 01:15:19.381 00:00:10.363 TCP 23.104.0.1:42710 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:15:44.118 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50094 10 6452 1 2025-11-24 01:16:19.784 00:00:10.363 TCP 23.104.0.1:56042 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:16:44.339 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54736 10 6452 1 2025-11-24 01:17:00.542 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 01:17:00.675 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 01:17:20.190 00:00:10.322 TCP 23.104.0.1:38772 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:17:44.548 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40896 10 6452 1 2025-11-24 01:18:20.551 00:00:10.323 TCP 23.104.0.1:52554 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:18:44.767 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37794 10 6452 1 2025-11-24 01:19:20.913 00:00:10.357 TCP 23.104.0.1:37410 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:19:44.937 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:44830 10 6452 1 2025-11-24 01:16:02.874 00:05:04.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 01:16:02.877 00:05:04.288 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 01:20:21.307 00:00:10.366 TCP 23.104.0.1:44556 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:20:45.133 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:45806 12 10369 1 2025-11-24 01:21:21.712 00:00:10.433 TCP 23.104.0.1:59642 -> 1.101.0.1:3000 15 1926 1 2025-11-24 01:21:45.377 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54612 10 6452 1 2025-11-24 01:22:00.743 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 01:22:00.722 00:00:00.014 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 01:22:22.187 00:00:10.365 TCP 23.104.0.1:46076 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:22:45.594 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46948 10 6452 1 2025-11-24 01:23:22.592 00:00:10.363 TCP 23.104.0.1:44836 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:23:45.801 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41006 10 6452 1 2025-11-24 01:24:22.994 00:00:10.373 TCP 23.104.0.1:44022 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:24:46.024 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53886 10 6452 1 2025-11-24 01:25:23.399 00:00:10.360 TCP 23.104.0.1:38648 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:25:46.234 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56294 10 6452 1 2025-11-24 01:22:02.878 00:05:04.289 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 01:22:02.875 00:05:04.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 01:26:23.802 00:00:10.375 TCP 23.104.0.1:44198 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:27:00.998 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 01:26:46.405 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54672 10 6452 1 2025-11-24 01:27:00.882 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 01:27:24.215 00:00:10.369 TCP 23.104.0.1:57644 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:27:46.624 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44408 10 6452 1 2025-11-24 01:28:24.619 00:00:10.362 TCP 23.104.0.1:48362 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:28:46.840 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33236 10 6452 1 2025-11-24 01:29:25.022 00:00:10.322 TCP 23.104.0.1:57072 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:29:47.080 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37826 10 6452 1 2025-11-24 01:30:25.384 00:00:10.357 TCP 23.104.0.1:60406 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:30:47.296 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55962 10 6452 1 2025-11-24 01:31:25.781 00:00:10.367 TCP 23.104.0.1:55380 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:32:01.079 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 01:32:00.943 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 01:31:47.473 00:00:10.282 TCP 1.101.0.1:3000 -> 22.102.0.1:37896 10 6452 1 2025-11-24 01:28:02.882 00:05:04.286 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 01:28:02.879 00:05:04.292 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 01:32:26.185 00:00:10.367 TCP 23.104.0.1:59420 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:32:47.791 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49292 10 6452 1 2025-11-24 01:33:26.591 00:00:10.365 TCP 23.104.0.1:33276 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:33:48.028 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60016 10 6452 1 2025-11-24 01:34:26.991 00:00:10.365 TCP 23.104.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:34:48.249 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56980 10 6452 1 2025-11-24 01:35:27.391 00:00:10.323 TCP 23.104.0.1:47038 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:35:48.464 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51554 10 6452 1 2025-11-24 01:36:27.749 00:00:10.423 TCP 23.104.0.1:59004 -> 1.101.0.1:3000 13 1611 1 2025-11-24 01:36:48.646 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51734 10 6452 1 2025-11-24 01:37:00.948 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 01:37:01.002 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 01:37:28.209 00:00:10.365 TCP 23.104.0.1:36440 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:37:48.858 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54260 10 6452 1 2025-11-24 01:34:02.887 00:05:04.283 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 01:34:02.883 00:05:04.288 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 01:38:28.614 00:00:10.365 TCP 23.104.0.1:58370 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:38:49.090 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55208 10 6452 1 2025-11-24 01:39:29.016 00:00:10.327 TCP 23.104.0.1:44458 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:39:49.304 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49416 10 6452 1 2025-11-24 01:40:29.378 00:00:10.361 TCP 23.104.0.1:33576 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:40:49.517 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33598 10 6452 1 2025-11-24 01:41:29.777 00:00:10.368 TCP 23.104.0.1:32882 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:42:00.931 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 01:41:49.733 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38428 10 6452 1 2025-11-24 01:42:01.025 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 01:42:30.182 00:00:10.321 TCP 23.104.0.1:58366 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:42:49.949 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:36502 10 6452 1 2025-11-24 01:43:30.548 00:00:10.326 TCP 23.104.0.1:34950 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:43:50.180 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32862 10 6452 1 2025-11-24 01:40:02.886 00:05:04.285 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 01:40:02.884 00:05:04.290 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 01:44:30.917 00:00:10.376 TCP 23.104.0.1:32924 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:44:50.395 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49062 10 6452 1 2025-11-24 01:45:31.335 00:00:10.363 TCP 23.104.0.1:52622 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:45:50.608 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35258 10 6452 1 2025-11-24 01:46:31.743 00:00:10.366 TCP 23.104.0.1:49116 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:46:50.784 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54442 10 6452 1 2025-11-24 01:47:01.449 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 01:47:01.445 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 01:47:32.147 00:00:10.363 TCP 23.104.0.1:49590 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:47:50.994 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37120 10 6452 1 2025-11-24 01:48:32.548 00:00:10.364 TCP 23.104.0.1:58270 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:48:51.216 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38198 10 6452 1 2025-11-24 01:49:32.947 00:00:10.375 TCP 23.104.0.1:35330 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:49:51.430 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57996 10 6452 1 2025-11-24 01:46:02.887 00:05:04.285 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 01:46:02.885 00:05:04.289 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 01:50:33.366 00:00:10.327 TCP 23.104.0.1:44584 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:50:51.649 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47050 10 6452 1 2025-11-24 01:51:33.735 00:00:11.042 TCP 23.104.0.1:52096 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:52:01.387 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 01:52:01.239 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 01:51:51.857 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33034 10 6452 1 2025-11-24 01:52:34.813 00:00:10.364 TCP 23.104.0.1:58720 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:52:52.082 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43808 10 6452 1 2025-11-24 01:53:35.216 00:00:10.364 TCP 23.104.0.1:59282 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:53:52.293 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49158 10 6452 1 2025-11-24 01:54:35.616 00:00:10.326 TCP 23.104.0.1:54882 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:54:52.512 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59870 10 6452 1 2025-11-24 01:55:35.977 00:00:10.367 TCP 23.104.0.1:52326 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:55:52.735 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42074 10 6452 1 2025-11-24 01:52:02.885 00:05:04.291 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 01:52:02.889 00:05:04.286 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 01:56:36.376 00:00:10.363 TCP 23.104.0.1:40638 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:57:01.469 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 01:57:01.544 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 01:56:52.948 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49540 10 6452 1 2025-11-24 01:57:36.783 00:00:10.323 TCP 23.104.0.1:42728 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:57:53.175 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36000 10 6452 1 2025-11-24 01:58:37.149 00:00:11.455 TCP 23.104.0.1:47332 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 504310, total packets: 1578, avg bps: 1106, avg pps: 0, avg bpp: 319 Time window: 2025-11-24 00:58:02 - 2025-11-24 01:58:48 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0017s Wall: 0.0024s flows/second: 66915.1 Runtime: 0.0024s