Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 17:59:04.580 00:00:10.363 TCP 23.104.0.1:36686 -> 1.101.0.1:3000 11 1507 1 2025-11-24 17:59:26.407 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38206 10 6452 1 2025-11-24 18:00:04.983 00:00:10.328 TCP 23.104.0.1:43522 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:00:26.620 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44360 10 6452 1 2025-11-24 18:01:05.347 00:00:10.436 TCP 23.104.0.1:42268 -> 1.101.0.1:3000 15 1926 1 2025-11-24 18:01:26.844 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:55556 14 10473 1 2025-11-24 17:57:07.489 00:05:55.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 17:57:07.491 00:05:55.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 18:02:05.820 00:00:10.325 TCP 23.104.0.1:58716 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:02:21.050 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 18:02:21.063 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 18:02:27.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53700 10 6452 1 2025-11-24 18:03:06.180 00:00:10.363 TCP 23.104.0.1:53504 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:03:27.313 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54350 10 6452 1 2025-11-24 18:04:06.590 00:00:10.324 TCP 23.104.0.1:58136 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:04:27.537 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52212 10 6452 1 2025-11-24 18:05:06.956 00:00:10.366 TCP 23.104.0.1:41260 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:05:27.750 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54696 10 6452 1 2025-11-24 18:06:07.359 00:00:10.360 TCP 23.104.0.1:44868 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:06:27.915 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:51086 10 6452 1 2025-11-24 18:07:20.695 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 18:07:20.599 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 18:07:07.755 00:00:10.333 TCP 23.104.0.1:38798 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:07:28.182 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38954 10 6452 1 2025-11-24 18:03:07.492 00:05:55.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 18:03:07.495 00:05:55.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 18:08:08.124 00:00:10.364 TCP 23.104.0.1:37658 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:08:28.391 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57886 10 6452 1 2025-11-24 18:09:08.530 00:00:10.363 TCP 23.104.0.1:57648 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:09:28.574 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39544 10 6452 1 2025-11-24 18:10:08.936 00:00:10.380 TCP 23.104.0.1:59792 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:10:28.787 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42686 10 6452 1 2025-11-24 18:11:09.352 00:00:10.365 TCP 23.104.0.1:52432 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:11:28.999 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41636 10 6452 1 2025-11-24 18:12:20.958 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 18:12:09.760 00:00:10.362 TCP 23.104.0.1:37224 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:12:21.028 00:00:00.006 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 18:12:29.217 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50368 10 6452 1 2025-11-24 18:13:10.159 00:00:10.360 TCP 23.104.0.1:33110 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:13:29.426 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50270 10 6452 1 2025-11-24 18:09:07.495 00:05:55.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 18:09:07.498 00:05:55.754 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 18:14:10.560 00:00:10.321 TCP 23.104.0.1:40486 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:14:29.638 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46510 10 6452 1 2025-11-24 18:15:10.922 00:00:10.386 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:15:29.850 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:40984 10 6452 1 2025-11-24 18:16:11.341 00:00:10.396 TCP 23.104.0.1:55906 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:16:30.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51466 10 6452 1 2025-11-24 18:17:21.063 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 18:17:21.133 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 18:17:11.779 00:00:10.364 TCP 23.104.0.1:56492 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:17:30.314 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42514 10 6452 1 2025-11-24 18:18:12.183 00:00:10.372 TCP 23.104.0.1:36558 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:18:30.544 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58742 10 6452 1 2025-11-24 18:19:12.590 00:00:10.359 TCP 23.104.0.1:48846 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:19:30.772 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:50538 10 6452 1 2025-11-24 18:15:07.498 00:05:55.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 18:15:07.496 00:05:55.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 18:20:12.989 00:00:10.403 TCP 23.104.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:20:30.978 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47530 10 6452 1 2025-11-24 18:21:13.438 00:00:10.365 TCP 23.104.0.1:60100 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:21:31.211 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51674 10 6452 1 2025-11-24 18:22:21.131 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 18:22:21.284 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 18:22:13.840 00:00:10.393 TCP 23.104.0.1:56104 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:22:31.424 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37344 12 6556 1 2025-11-24 18:23:14.273 00:00:10.365 TCP 23.104.0.1:44184 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:23:31.634 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57374 10 6452 1 2025-11-24 18:24:14.680 00:00:10.329 TCP 23.104.0.1:34758 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:24:31.807 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53540 10 6452 1 2025-11-24 18:25:15.051 00:00:10.366 TCP 23.104.0.1:51030 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:25:32.025 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36960 10 6452 1 2025-11-24 18:21:07.499 00:05:55.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 18:21:07.496 00:05:55.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 18:26:15.455 00:00:10.378 TCP 23.104.0.1:57442 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:26:32.233 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40578 10 6452 1 2025-11-24 18:27:21.072 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 18:27:21.325 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 18:27:15.868 00:00:10.364 TCP 23.104.0.1:36312 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:27:32.449 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58532 10 6452 1 2025-11-24 18:28:16.269 00:00:10.375 TCP 23.104.0.1:45792 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:28:32.659 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46728 10 6452 1 2025-11-24 18:29:16.693 00:00:10.370 TCP 23.104.0.1:34930 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:29:32.880 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51892 10 6452 1 2025-11-24 18:30:17.111 00:00:10.366 TCP 23.104.0.1:47572 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:30:33.100 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36758 10 6452 1 2025-11-24 18:31:17.515 00:00:10.362 TCP 23.104.0.1:56560 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:31:33.272 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36702 10 6452 1 2025-11-24 18:27:07.497 00:05:55.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 18:27:07.500 00:05:55.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 18:32:21.160 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 18:32:21.447 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 18:32:17.914 00:00:10.363 TCP 23.104.0.1:41232 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:32:33.495 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45680 10 6452 1 2025-11-24 18:33:18.316 00:00:10.362 TCP 23.104.0.1:39158 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:33:33.713 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47790 10 6452 1 2025-11-24 18:34:18.715 00:00:10.384 TCP 23.104.0.1:54226 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:34:33.928 00:00:10.632 TCP 1.101.0.1:3000 -> 22.102.0.1:52348 10 6452 1 2025-11-24 18:35:19.134 00:00:10.375 TCP 23.104.0.1:33996 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:35:34.603 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53032 10 6452 1 2025-11-24 18:36:19.552 00:00:10.434 TCP 23.104.0.1:50960 -> 1.101.0.1:3000 15 1926 1 2025-11-24 18:36:34.828 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:37734 12 10375 1 2025-11-24 18:37:21.593 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 18:37:21.360 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 18:37:20.029 00:00:10.317 TCP 23.104.0.1:55994 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:37:35.105 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44374 10 6452 1 2025-11-24 18:33:07.500 00:05:55.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 18:33:07.503 00:05:55.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 18:38:20.384 00:00:10.360 TCP 23.104.0.1:40518 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:38:35.324 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57138 10 6452 1 2025-11-24 18:39:20.785 00:00:10.365 TCP 23.104.0.1:52406 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:39:35.547 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49494 10 6452 1 2025-11-24 18:40:21.190 00:00:10.365 TCP 23.104.0.1:46024 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:40:35.769 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44224 10 6452 1 2025-11-24 18:41:21.592 00:00:10.337 TCP 23.104.0.1:39802 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:41:35.990 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38462 10 6452 1 2025-11-24 18:42:21.697 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 18:42:21.559 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 18:42:21.974 00:00:10.365 TCP 23.104.0.1:39766 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:42:36.221 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52676 10 6452 1 2025-11-24 18:43:22.374 00:00:10.359 TCP 23.104.0.1:47732 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:43:36.391 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37644 10 6452 1 2025-11-24 18:39:07.502 00:05:55.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 18:39:07.504 00:05:55.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 18:44:22.776 00:00:10.326 TCP 23.104.0.1:53304 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:44:36.623 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57474 10 6452 1 2025-11-24 18:45:23.140 00:00:11.830 TCP 23.104.0.1:51406 -> 1.101.0.1:3000 13 1611 1 2025-11-24 18:45:36.848 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40984 10 6452 1 2025-11-24 18:46:25.008 00:00:10.362 TCP 23.104.0.1:35950 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:46:37.075 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:34304 10 6452 1 2025-11-24 18:47:21.678 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 18:47:21.648 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 18:47:25.409 00:00:10.370 TCP 23.104.0.1:36324 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:47:37.312 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46916 10 6452 1 2025-11-24 18:48:25.821 00:00:10.375 TCP 23.104.0.1:50288 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:48:37.538 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34768 10 6452 1 2025-11-24 18:49:26.236 00:00:10.852 TCP 23.104.0.1:53304 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:49:37.751 00:00:18.769 TCP 1.101.0.1:3000 -> 22.102.0.1:55646 10 6452 1 2025-11-24 18:45:07.505 00:05:55.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 18:45:07.502 00:05:55.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 18:50:27.128 00:00:10.359 TCP 23.104.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:50:46.585 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:44426 12 10375 1 2025-11-24 18:51:27.527 00:00:10.437 TCP 23.104.0.1:39472 -> 1.101.0.1:3000 15 1926 1 2025-11-24 18:51:46.832 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58202 10 6452 1 2025-11-24 18:52:21.812 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 18:52:21.772 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 18:52:28.007 00:00:10.319 TCP 23.104.0.1:39902 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:52:47.078 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60572 10 6452 1 2025-11-24 18:53:28.366 00:00:10.365 TCP 23.104.0.1:34308 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:53:47.246 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:42602 10 6452 1 2025-11-24 18:54:28.767 00:00:10.366 TCP 23.104.0.1:46252 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:54:47.451 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51340 10 6452 1 2025-11-24 18:55:29.173 00:00:10.324 TCP 23.104.0.1:33002 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:55:47.625 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49976 10 6452 1 2025-11-24 18:51:07.505 00:05:55.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 18:51:07.503 00:05:55.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 18:56:29.537 00:00:10.327 TCP 23.104.0.1:38462 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:56:47.833 00:00:10.635 TCP 1.101.0.1:3000 -> 22.102.0.1:57206 10 6452 1 2025-11-24 18:57:21.822 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 18:57:21.845 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 18:57:29.898 00:00:10.372 TCP 23.104.0.1:51396 -> 1.101.0.1:3000 11 1507 1 2025-11-24 18:57:48.508 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40778 10 6452 1 2025-11-24 18:58:30.311 00:00:10.361 TCP 23.104.0.1:38804 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505228, total packets: 1586, avg bps: 1094, avg pps: 0, avg bpp: 318 Time window: 2025-11-24 17:57:07 - 2025-11-24 18:58:40 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0020s Wall: 0.0021s flows/second: 79009.8 Runtime: 0.0021s