Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 00:58:57.182 00:00:10.366 TCP 23.104.0.1:47460 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:59:26.824 00:00:10.844 TCP 1.101.0.1:3000 -> 22.102.0.1:41198 10 6452 1 2025-11-26 00:59:57.577 00:00:10.327 TCP 23.104.0.1:45274 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:00:27.709 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50716 10 6452 1 2025-11-26 00:57:03.797 00:05:04.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 01:00:57.941 00:00:10.381 TCP 23.104.0.1:34254 -> 1.101.0.1:3000 11 1507 1 2025-11-26 00:57:03.800 00:05:04.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 01:01:27.917 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56758 10 6452 1 2025-11-26 01:01:58.364 00:00:10.362 TCP 23.104.0.1:44442 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:02:28.128 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:43220 10 6452 1 2025-11-26 01:02:58.079 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 01:02:58.258 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 01:02:58.769 00:00:10.382 TCP 23.104.0.1:36750 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:03:28.369 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55116 10 6452 1 2025-11-26 01:03:59.185 00:00:10.366 TCP 23.104.0.1:45342 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:04:28.548 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45530 10 6452 1 2025-11-26 01:04:59.589 00:00:10.321 TCP 23.104.0.1:49734 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:05:28.726 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33100 10 6452 1 2025-11-26 01:05:59.953 00:00:10.368 TCP 23.104.0.1:47942 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:06:28.944 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:35226 10 6452 1 2025-11-26 01:03:03.801 00:05:04.396 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 01:07:00.357 00:00:10.365 TCP 23.104.0.1:42514 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:03:03.803 00:05:04.391 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 01:07:29.140 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:52338 10 6452 1 2025-11-26 01:07:58.009 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 01:07:57.990 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 01:08:00.763 00:00:10.374 TCP 23.104.0.1:59478 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:08:29.348 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:58064 10 6452 1 2025-11-26 01:09:01.179 00:00:10.369 TCP 23.104.0.1:58182 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:09:29.535 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39098 10 6452 1 2025-11-26 01:10:01.587 00:00:10.367 TCP 23.104.0.1:48508 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:10:29.753 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39172 10 6452 1 2025-11-26 01:11:01.997 00:00:10.368 TCP 23.104.0.1:48692 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:11:29.968 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54564 10 6452 1 2025-11-26 01:12:02.407 00:00:10.368 TCP 23.104.0.1:54882 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:12:30.188 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47950 10 6452 1 2025-11-26 01:12:58.242 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 01:12:58.226 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 01:09:03.799 00:05:04.398 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 01:09:03.803 00:05:04.393 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 01:13:02.817 00:00:10.362 TCP 23.104.0.1:51842 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:13:30.406 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39848 10 6452 1 2025-11-26 01:14:03.220 00:00:10.646 TCP 23.104.0.1:55684 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:14:30.579 00:00:10.771 TCP 1.101.0.1:3000 -> 22.102.0.1:60552 10 6452 1 2025-11-26 01:15:03.902 00:00:10.369 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:15:31.385 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42446 10 6452 1 2025-11-26 01:16:04.313 00:00:10.364 TCP 23.104.0.1:41056 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:16:31.595 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33290 10 6452 1 2025-11-26 01:17:04.717 00:00:10.371 TCP 23.104.0.1:56714 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:17:31.774 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47200 10 6452 1 2025-11-26 01:17:58.283 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 01:17:58.254 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 01:18:05.120 00:00:10.323 TCP 23.104.0.1:46388 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:18:31.984 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55330 10 6452 1 2025-11-26 01:15:03.801 00:05:04.400 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 01:15:03.805 00:05:04.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 01:19:05.484 00:00:10.325 TCP 23.104.0.1:55066 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:19:32.208 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:54348 10 6452 1 2025-11-26 01:20:05.843 00:00:10.387 TCP 23.104.0.1:41482 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:20:32.397 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35424 10 6452 1 2025-11-26 01:21:06.273 00:00:10.370 TCP 23.104.0.1:35450 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:21:32.604 00:00:10.268 TCP 1.101.0.1:3000 -> 22.102.0.1:56686 10 6452 1 2025-11-26 01:22:06.681 00:00:10.367 TCP 23.104.0.1:40826 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:22:32.916 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:32850 10 6452 1 2025-11-26 01:22:58.698 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 01:22:58.305 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 01:23:07.120 00:00:10.329 TCP 23.104.0.1:43646 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:23:33.099 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44304 10 6452 1 2025-11-26 01:24:07.486 00:00:10.344 TCP 23.104.0.1:44824 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:24:33.324 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40822 10 6452 1 2025-11-26 01:21:03.803 00:05:04.398 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 01:21:03.805 00:05:04.393 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 01:25:07.868 00:00:10.365 TCP 23.104.0.1:33194 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:25:33.536 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47128 10 6452 1 2025-11-26 01:26:08.275 00:00:10.362 TCP 23.104.0.1:39944 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:26:33.709 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49320 10 6452 1 2025-11-26 01:27:08.682 00:00:10.325 TCP 23.104.0.1:56248 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:27:33.883 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39434 10 6452 1 2025-11-26 01:27:58.667 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 01:27:58.724 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 01:28:09.061 00:00:10.364 TCP 23.104.0.1:55458 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:28:34.105 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59798 10 6452 1 2025-11-26 01:29:09.463 00:00:10.331 TCP 23.104.0.1:34986 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:29:34.312 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59368 10 6452 1 2025-11-26 01:30:09.830 00:00:10.346 TCP 23.104.0.1:43920 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:30:34.534 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35064 10 6452 1 2025-11-26 01:27:03.805 00:05:04.400 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 01:27:03.808 00:05:04.395 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 01:31:10.213 00:00:10.358 TCP 23.104.0.1:51608 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:31:34.751 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35610 10 6452 1 2025-11-26 01:32:10.611 00:00:10.322 TCP 23.104.0.1:59258 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:32:34.970 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60348 10 6452 1 2025-11-26 01:32:58.705 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 01:32:58.514 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 01:33:10.977 00:00:10.542 TCP 23.104.0.1:49426 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:33:35.210 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54482 10 6452 1 2025-11-26 01:34:11.562 00:00:10.367 TCP 23.104.0.1:36830 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:34:35.456 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43542 10 6452 1 2025-11-26 01:35:11.964 00:00:10.444 TCP 23.104.0.1:36094 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:35:35.675 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39098 10 6452 1 2025-11-26 01:36:12.443 00:00:11.214 TCP 23.104.0.1:49044 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:36:35.884 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49784 10 6452 1 2025-11-26 01:33:03.809 00:05:04.399 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 01:33:03.806 00:05:04.404 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 01:37:13.694 00:00:10.366 TCP 23.104.0.1:50978 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:37:36.110 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41254 10 6452 1 2025-11-26 01:37:58.710 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 01:37:58.912 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 01:38:14.104 00:00:10.364 TCP 23.104.0.1:33460 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:38:36.332 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49580 10 6452 1 2025-11-26 01:39:14.505 00:00:10.363 TCP 23.104.0.1:55514 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:39:36.507 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37160 10 6452 1 2025-11-26 01:40:14.907 00:00:10.376 TCP 23.104.0.1:38920 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:40:36.722 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41178 10 6452 1 2025-11-26 01:41:15.349 00:00:10.362 TCP 23.104.0.1:41166 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:41:36.941 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39940 10 6452 1 2025-11-26 01:42:15.762 00:00:10.376 TCP 23.104.0.1:50842 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:42:37.179 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43286 10 6452 1 2025-11-26 01:42:59.166 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 01:42:59.231 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 01:39:03.808 00:05:04.403 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 01:39:03.811 00:05:04.398 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 01:43:16.174 00:00:10.365 TCP 23.104.0.1:42884 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:43:37.401 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35986 10 6452 1 2025-11-26 01:44:16.577 00:00:10.362 TCP 23.104.0.1:50372 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:44:37.621 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57182 10 6452 1 2025-11-26 01:45:16.976 00:00:10.327 TCP 23.104.0.1:33824 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:45:37.837 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:46224 10 6452 1 2025-11-26 01:46:17.339 00:00:10.329 TCP 23.104.0.1:49102 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:46:38.023 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36464 10 6452 1 2025-11-26 01:47:17.706 00:00:10.382 TCP 23.104.0.1:57044 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:47:38.232 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33928 10 6452 1 2025-11-26 01:47:59.803 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 01:47:59.622 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 01:48:18.126 00:00:10.380 TCP 23.104.0.1:34156 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:48:38.404 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37212 10 6452 1 2025-11-26 01:45:03.808 00:05:04.403 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 01:45:03.810 00:05:04.398 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 01:49:18.540 00:00:10.363 TCP 23.104.0.1:46202 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:49:38.584 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39388 10 6452 1 2025-11-26 01:50:18.944 00:00:10.380 TCP 23.104.0.1:55568 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:50:38.758 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60668 10 6452 1 2025-11-26 01:51:19.363 00:00:10.319 TCP 23.104.0.1:59462 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:51:38.976 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:46982 10 6452 1 2025-11-26 01:52:19.743 00:00:10.365 TCP 23.104.0.1:47394 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:52:39.223 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48280 10 6452 1 2025-11-26 01:52:59.033 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 01:52:59.087 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 01:53:20.148 00:00:10.363 TCP 23.104.0.1:39754 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:53:39.439 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33882 10 6452 1 2025-11-26 01:54:20.546 00:00:10.322 TCP 23.104.0.1:48090 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:54:39.615 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46140 10 6452 1 2025-11-26 01:51:03.815 00:05:04.394 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 01:51:03.813 00:05:04.399 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 01:55:20.907 00:00:10.318 TCP 23.104.0.1:39822 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:55:39.828 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48324 10 6452 1 2025-11-26 01:56:21.266 00:00:11.652 TCP 23.104.0.1:34534 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:56:40.040 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45216 10 6452 1 2025-11-26 01:57:22.964 00:00:10.368 TCP 23.104.0.1:37200 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:57:40.258 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50010 10 6452 1 2025-11-26 01:57:59.005 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 01:57:59.212 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 01:58:23.370 00:00:10.361 TCP 23.104.0.1:40596 -> 1.101.0.1:3000 11 1507 1 2025-11-26 01:58:40.428 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34544 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1075, avg pps: 0, avg bpp: 317 Time window: 2025-11-26 00:57:03 - 2025-11-26 01:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0018s Wall: 0.0021s flows/second: 78282.2 Runtime: 0.0021s