Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 06:59:10.623 00:00:10.364 TCP 23.104.0.1:33382 -> 1.101.0.1:3000 11 1507 1 2025-11-24 06:59:18.283 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43876 10 6452 1 2025-11-24 07:00:11.024 00:00:10.365 TCP 23.104.0.1:51212 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:00:18.495 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44356 10 6452 1 2025-11-24 07:01:11.427 00:00:10.365 TCP 23.104.0.1:35202 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:01:18.707 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48926 10 6452 1 2025-11-24 07:02:07.427 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 06:58:02.964 00:05:04.317 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 07:02:07.412 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 06:58:02.962 00:05:04.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 07:02:11.830 00:00:10.374 TCP 23.104.0.1:52282 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:02:18.872 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54028 10 6452 1 2025-11-24 07:03:12.240 00:00:10.360 TCP 23.104.0.1:57694 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:03:19.076 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40150 10 6452 1 2025-11-24 07:04:12.638 00:00:10.366 TCP 23.104.0.1:60122 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:04:19.256 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51574 10 6452 1 2025-11-24 07:05:13.050 00:00:10.368 TCP 23.104.0.1:43450 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:05:19.471 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40598 10 6452 1 2025-11-24 07:06:13.459 00:00:10.322 TCP 23.104.0.1:48192 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:06:19.678 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55778 10 6452 1 2025-11-24 07:07:07.638 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 07:07:07.660 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 07:07:13.819 00:00:10.365 TCP 23.104.0.1:53880 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:07:19.854 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52358 10 6452 1 2025-11-24 07:04:02.964 00:05:04.317 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 07:04:02.963 00:05:04.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 07:08:14.227 00:00:10.324 TCP 23.104.0.1:50340 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:08:20.085 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58500 10 6452 1 2025-11-24 07:09:14.591 00:00:10.361 TCP 23.104.0.1:36098 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:09:20.313 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56822 10 6452 1 2025-11-24 07:10:14.996 00:00:10.340 TCP 23.104.0.1:52942 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:10:20.526 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35556 10 6452 1 2025-11-24 07:11:15.383 00:00:10.355 TCP 23.104.0.1:40058 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:11:20.752 00:00:10.678 TCP 1.101.0.1:3000 -> 22.102.0.1:38618 10 6452 1 2025-11-24 07:12:07.670 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 07:12:08.136 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 07:12:15.777 00:00:10.421 TCP 23.104.0.1:40852 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:12:21.465 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34120 10 6452 1 2025-11-24 07:13:16.238 00:00:10.866 TCP 23.104.0.1:58738 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:13:21.675 00:00:10.467 TCP 1.101.0.1:3000 -> 22.102.0.1:55012 10 6452 1 2025-11-24 07:10:02.965 00:05:04.321 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 07:10:02.967 00:05:04.316 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 07:14:17.151 00:00:10.368 TCP 23.104.0.1:51516 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:14:22.198 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:46610 10 6452 1 2025-11-24 07:15:17.556 00:00:10.326 TCP 23.104.0.1:49844 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:15:22.387 00:00:23.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53146 10 6452 1 2025-11-24 07:16:17.927 00:00:10.375 TCP 23.104.0.1:33086 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:16:35.601 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52952 10 6452 1 2025-11-24 07:17:07.584 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 07:17:07.801 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 07:17:18.343 00:00:10.359 TCP 23.104.0.1:40088 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:17:35.821 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48570 10 6452 1 2025-11-24 07:18:18.742 00:00:10.367 TCP 23.104.0.1:49678 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:18:36.072 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53190 10 6452 1 2025-11-24 07:19:19.143 00:00:10.363 TCP 23.104.0.1:35152 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:19:36.294 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55050 10 6452 1 2025-11-24 07:16:02.966 00:05:04.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 07:16:02.969 00:05:04.316 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 07:20:19.548 00:00:10.365 TCP 23.104.0.1:58104 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:20:36.517 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37706 10 6452 1 2025-11-24 07:21:19.955 00:00:10.758 TCP 23.104.0.1:37514 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:21:36.742 00:00:10.931 TCP 1.101.0.1:3000 -> 22.102.0.1:55772 10 6452 1 2025-11-24 07:22:07.854 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 07:22:07.690 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 07:22:20.760 00:00:10.380 TCP 23.104.0.1:59056 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:22:37.714 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-11-24 07:23:21.179 00:00:10.423 TCP 23.104.0.1:38154 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:23:37.946 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:58036 10 6452 1 2025-11-24 07:24:21.648 00:00:10.382 TCP 23.104.0.1:39246 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:24:38.182 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43516 10 6452 1 2025-11-24 07:25:22.102 00:00:10.372 TCP 23.104.0.1:51664 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:25:38.407 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58116 10 6452 1 2025-11-24 07:22:02.966 00:05:04.323 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 07:22:02.968 00:05:04.318 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 07:26:22.513 00:00:10.328 TCP 23.104.0.1:34674 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:26:38.630 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51338 10 6452 1 2025-11-24 07:27:07.891 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 07:27:08.204 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 07:27:22.879 00:00:10.366 TCP 23.104.0.1:34388 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:27:38.848 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53556 10 6452 1 2025-11-24 07:28:23.279 00:00:10.369 TCP 23.104.0.1:46414 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:28:39.036 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44852 10 6452 1 2025-11-24 07:29:23.687 00:00:10.372 TCP 23.104.0.1:38114 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:29:39.254 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60034 10 6452 1 2025-11-24 07:30:24.107 00:00:10.327 TCP 23.104.0.1:35154 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:30:39.469 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38902 10 6452 1 2025-11-24 07:31:24.474 00:00:10.369 TCP 23.104.0.1:58776 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:31:39.690 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46254 10 6452 1 2025-11-24 07:32:08.105 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 07:28:02.967 00:05:04.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 07:32:08.167 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 07:28:02.970 00:05:04.318 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 07:32:24.877 00:00:10.363 TCP 23.104.0.1:57974 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:32:39.904 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60334 10 6452 1 2025-11-24 07:33:25.280 00:00:10.364 TCP 23.104.0.1:49570 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:33:40.121 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57866 10 6452 1 2025-11-24 07:34:25.681 00:00:10.372 TCP 23.104.0.1:41246 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:34:40.337 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:47276 10 6452 1 2025-11-24 07:35:26.099 00:00:10.358 TCP 23.104.0.1:53530 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:35:40.524 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59772 10 6452 1 2025-11-24 07:36:26.501 00:00:10.325 TCP 23.104.0.1:46796 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:36:40.736 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48286 10 6452 1 2025-11-24 07:37:08.225 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 07:37:08.249 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 07:37:26.861 00:00:10.372 TCP 23.104.0.1:45864 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:37:40.952 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:59444 12 6556 1 2025-11-24 07:34:02.972 00:05:04.317 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 07:34:02.970 00:05:04.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 07:38:27.276 00:00:10.326 TCP 23.104.0.1:38726 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:38:41.203 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38310 10 6452 1 2025-11-24 07:39:27.649 00:00:10.366 TCP 23.104.0.1:47804 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:39:41.421 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60730 10 6452 1 2025-11-24 07:40:28.064 00:00:10.323 TCP 23.104.0.1:34964 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:40:41.644 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57310 10 6452 1 2025-11-24 07:41:28.423 00:00:10.366 TCP 23.104.0.1:58428 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:41:41.856 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50288 10 6452 1 2025-11-24 07:42:08.221 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 07:42:08.169 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 07:42:28.829 00:00:10.349 TCP 23.104.0.1:55686 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:42:42.082 00:00:13.625 TCP 1.101.0.1:3000 -> 22.102.0.1:49908 10 6452 1 2025-11-24 07:43:29.216 00:00:10.367 TCP 23.104.0.1:58280 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:43:45.751 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39294 10 6452 1 2025-11-24 07:40:02.970 00:05:04.323 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 07:40:02.974 00:05:04.318 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 07:44:29.623 00:00:10.361 TCP 23.104.0.1:35620 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:44:45.975 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:44168 10 6452 1 2025-11-24 07:45:30.051 00:00:10.326 TCP 23.104.0.1:44766 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:45:46.211 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48036 10 6452 1 2025-11-24 07:46:30.415 00:00:10.369 TCP 23.104.0.1:58878 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:46:46.442 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53024 10 6452 1 2025-11-24 07:47:08.466 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 07:47:08.278 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 07:47:30.822 00:00:10.331 TCP 23.104.0.1:33378 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:47:46.657 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:40498 10 6452 1 2025-11-24 07:48:31.189 00:00:10.397 TCP 23.104.0.1:58248 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:48:46.844 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58098 10 6452 1 2025-11-24 07:49:31.636 00:00:10.327 TCP 23.104.0.1:52872 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:49:47.079 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37438 10 6452 1 2025-11-24 07:46:02.973 00:05:04.318 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 07:46:02.971 00:05:04.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 07:50:32.004 00:00:10.380 TCP 23.104.0.1:35258 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:50:47.303 00:00:17.303 TCP 1.101.0.1:3000 -> 22.102.0.1:46208 10 6452 1 2025-11-24 07:51:32.424 00:00:10.366 TCP 23.104.0.1:42152 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:52:09.057 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 07:52:08.962 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 07:51:54.642 00:00:20.762 TCP 1.101.0.1:3000 -> 22.102.0.1:58274 10 6452 1 2025-11-24 07:52:32.831 00:00:10.351 TCP 23.104.0.1:60572 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:53:05.463 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43268 10 6452 1 2025-11-24 07:53:33.222 00:00:10.369 TCP 23.104.0.1:39708 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:54:05.680 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44180 10 6452 1 2025-11-24 07:54:33.629 00:00:10.363 TCP 23.104.0.1:40578 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:55:05.894 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40318 10 6452 1 2025-11-24 07:55:34.029 00:00:10.372 TCP 23.104.0.1:57440 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:52:02.978 00:05:04.319 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 07:52:02.977 00:05:04.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 07:56:06.109 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47692 10 6452 1 2025-11-24 07:56:34.432 00:00:10.362 TCP 23.104.0.1:32830 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:57:08.800 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 07:57:08.511 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 07:57:06.326 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53406 10 6452 1 2025-11-24 07:57:34.833 00:00:10.352 TCP 23.104.0.1:40650 -> 1.101.0.1:3000 11 1507 1 2025-11-24 07:58:06.505 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56290 10 6452 1 2025-11-24 07:58:35.223 00:00:10.360 TCP 23.104.0.1:33706 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492000, total packets: 1564, avg bps: 1080, avg pps: 0, avg bpp: 314 Time window: 2025-11-24 06:58:02 - 2025-11-24 07:58:45 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0009s Wall: 0.0024s flows/second: 68374.0 Runtime: 0.0024s