Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 12:58:57.567 00:00:10.360 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-11-26 12:59:22.193 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 10 6452 1 2025-11-26 12:59:57.965 00:00:10.343 TCP 23.104.0.1:34610 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:00:22.403 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50968 10 6452 1 2025-11-26 12:56:08.437 00:05:55.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 12:56:08.434 00:05:55.569 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:00:58.345 00:00:10.362 TCP 23.104.0.1:55800 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:01:22.574 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48424 10 6452 1 2025-11-26 13:01:58.746 00:00:10.364 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:02:22.792 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37790 10 6452 1 2025-11-26 13:03:12.537 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:02:59.151 00:00:10.369 TCP 23.104.0.1:60452 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:03:12.580 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:03:23.008 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51090 10 6452 1 2025-11-26 13:03:59.558 00:00:10.366 TCP 23.104.0.1:46596 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:04:23.225 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39548 10 6452 1 2025-11-26 13:04:59.967 00:00:10.367 TCP 23.104.0.1:44170 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:05:23.437 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57072 10 6452 1 2025-11-26 13:06:00.375 00:00:10.324 TCP 23.104.0.1:35626 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:06:23.652 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41882 10 6452 1 2025-11-26 13:02:08.435 00:05:55.569 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:02:08.437 00:05:55.564 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:07:00.735 00:00:10.365 TCP 23.104.0.1:56078 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:07:23.822 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34774 10 6452 1 2025-11-26 13:08:01.137 00:00:10.331 TCP 23.104.0.1:51994 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:08:12.804 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:08:12.787 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:08:23.997 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50318 10 6452 1 2025-11-26 13:09:01.499 00:00:10.366 TCP 23.104.0.1:41112 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:09:24.222 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56778 10 6452 1 2025-11-26 13:10:01.908 00:00:10.364 TCP 23.104.0.1:32802 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:10:24.435 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40384 10 6452 1 2025-11-26 13:11:02.307 00:00:10.367 TCP 23.104.0.1:49140 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:11:24.658 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39606 10 6452 1 2025-11-26 13:12:02.711 00:00:10.333 TCP 23.104.0.1:52140 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:12:24.874 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34352 10 6452 1 2025-11-26 13:08:08.441 00:05:55.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:08:08.438 00:05:55.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:13:12.909 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:13:12.839 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:13:03.106 00:00:10.362 TCP 23.104.0.1:48506 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:13:25.103 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58684 10 6452 1 2025-11-26 13:14:03.509 00:00:10.324 TCP 23.104.0.1:53426 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:14:25.318 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37288 10 6452 1 2025-11-26 13:15:03.870 00:00:10.363 TCP 23.104.0.1:33972 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:15:25.545 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43474 10 6452 1 2025-11-26 13:16:04.270 00:00:10.365 TCP 23.104.0.1:40740 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:16:25.762 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49502 10 6452 1 2025-11-26 13:17:04.675 00:00:10.366 TCP 23.104.0.1:42442 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:17:25.981 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:35330 10 6452 1 2025-11-26 13:18:12.909 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:18:12.963 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:18:05.107 00:00:10.360 TCP 23.104.0.1:36974 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:18:26.228 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42954 10 6452 1 2025-11-26 13:14:08.445 00:05:55.591 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:14:08.443 00:05:55.595 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:19:05.507 00:00:10.324 TCP 23.104.0.1:38952 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:19:26.452 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36298 10 6452 1 2025-11-26 13:20:05.872 00:00:10.368 TCP 23.104.0.1:50356 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:20:26.671 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41380 10 6452 1 2025-11-26 13:21:06.278 00:00:10.366 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:21:26.854 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37518 10 6452 1 2025-11-26 13:22:06.679 00:00:10.367 TCP 23.104.0.1:46230 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:22:27.081 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48138 10 6452 1 2025-11-26 13:23:13.192 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:23:12.946 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:23:07.101 00:00:10.366 TCP 23.104.0.1:43482 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:23:27.299 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58000 10 6452 1 2025-11-26 13:24:07.505 00:00:10.370 TCP 23.104.0.1:59646 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:24:27.517 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53672 10 6452 1 2025-11-26 13:20:08.448 00:05:55.591 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:20:08.445 00:05:55.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:25:07.907 00:00:10.374 TCP 23.104.0.1:46588 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:25:27.735 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38124 10 6452 1 2025-11-26 13:26:08.321 00:00:10.373 TCP 23.104.0.1:44554 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:26:27.958 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:34462 12 6556 1 2025-11-26 13:27:08.736 00:00:10.371 TCP 23.104.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:27:28.201 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34222 10 6452 1 2025-11-26 13:28:13.061 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:28:13.172 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:28:09.141 00:00:10.367 TCP 23.104.0.1:47832 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:28:28.417 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36934 10 6452 1 2025-11-26 13:29:09.546 00:00:10.367 TCP 23.104.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:29:28.634 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39282 10 6452 1 2025-11-26 13:30:09.952 00:00:10.374 TCP 23.104.0.1:43620 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:30:28.848 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34946 10 6452 1 2025-11-26 13:26:08.446 00:05:55.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:26:08.450 00:05:55.592 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:31:10.357 00:00:10.374 TCP 23.104.0.1:42120 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:31:29.090 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48350 10 6452 1 2025-11-26 13:32:10.768 00:00:10.332 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:32:29.304 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42438 10 6452 1 2025-11-26 13:33:13.082 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:33:13.295 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:33:11.136 00:00:10.363 TCP 23.104.0.1:44394 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:33:29.514 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-11-26 13:34:11.537 00:00:10.421 TCP 23.104.0.1:34414 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:34:29.734 00:00:10.921 TCP 1.101.0.1:3000 -> 22.102.0.1:38276 10 6452 1 2025-11-26 13:35:12.000 00:00:10.362 TCP 23.104.0.1:54650 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:35:30.699 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52572 10 6452 1 2025-11-26 13:36:12.403 00:00:10.366 TCP 23.104.0.1:44260 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:36:30.910 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34606 10 6452 1 2025-11-26 13:32:08.447 00:05:55.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:32:08.450 00:05:55.592 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:37:12.809 00:00:10.367 TCP 23.104.0.1:57390 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:37:31.116 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37972 10 6452 1 2025-11-26 13:38:13.448 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:38:13.412 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:38:13.215 00:00:10.367 TCP 23.104.0.1:55864 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:38:31.338 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44708 10 6452 1 2025-11-26 13:39:13.617 00:00:10.364 TCP 23.104.0.1:45774 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:39:31.512 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57750 10 6452 1 2025-11-26 13:40:14.024 00:00:10.362 TCP 23.104.0.1:36688 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:40:31.738 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45776 10 6452 1 2025-11-26 13:41:14.430 00:00:10.364 TCP 23.104.0.1:43298 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:41:31.956 00:00:10.391 TCP 1.101.0.1:3000 -> 22.102.0.1:58614 10 6452 1 2025-11-26 13:42:14.829 00:00:10.393 TCP 23.104.0.1:46988 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:42:32.390 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53422 10 6452 1 2025-11-26 13:38:08.453 00:05:55.590 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:38:08.451 00:05:55.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:43:13.315 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:43:13.429 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:43:15.256 00:00:10.360 TCP 23.104.0.1:43300 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:43:32.568 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40358 10 6452 1 2025-11-26 13:44:15.651 00:00:10.361 TCP 23.104.0.1:58714 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:44:32.793 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:51704 11 6813 1 2025-11-26 13:45:16.057 00:00:10.365 TCP 23.104.0.1:37392 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:45:32.959 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34952 10 6452 1 2025-11-26 13:46:16.454 00:00:10.365 TCP 23.104.0.1:52890 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:46:33.196 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49818 10 6452 1 2025-11-26 13:47:16.856 00:00:10.371 TCP 23.104.0.1:42810 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:47:33.368 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43418 10 6452 1 2025-11-26 13:48:13.476 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:48:13.362 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:48:17.266 00:00:10.357 TCP 23.104.0.1:42336 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:48:33.581 00:00:11.429 TCP 1.101.0.1:3000 -> 22.102.0.1:45594 10 6452 1 2025-11-26 13:44:08.456 00:05:55.589 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:44:08.453 00:05:55.595 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:49:17.667 00:00:10.364 TCP 23.104.0.1:45104 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:49:35.077 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51504 10 6452 1 2025-11-26 13:50:18.101 00:00:10.362 TCP 23.104.0.1:38014 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:50:35.287 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37746 10 6452 1 2025-11-26 13:51:18.506 00:00:10.364 TCP 23.104.0.1:36204 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:51:35.502 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60806 10 6452 1 2025-11-26 13:52:18.910 00:00:10.701 TCP 23.104.0.1:33470 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:52:35.715 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33866 10 6452 1 2025-11-26 13:53:13.864 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:53:13.872 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:53:19.649 00:00:10.363 TCP 23.104.0.1:42202 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:53:35.927 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:40642 10 6452 1 2025-11-26 13:54:20.059 00:00:10.365 TCP 23.104.0.1:47466 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:54:36.168 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43278 10 6452 1 2025-11-26 13:50:08.457 00:05:55.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 13:50:08.459 00:05:55.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 13:55:20.471 00:00:10.336 TCP 23.104.0.1:43522 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:55:36.383 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6452 1 2025-11-26 13:56:20.855 00:00:10.372 TCP 23.104.0.1:49884 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:56:36.599 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59294 10 6452 1 2025-11-26 13:57:21.289 00:00:10.369 TCP 23.104.0.1:44040 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:57:36.810 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50180 10 6452 1 2025-11-26 13:58:13.610 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 13:58:13.422 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 13:58:21.695 00:00:10.369 TCP 23.104.0.1:55472 -> 1.101.0.1:3000 11 1507 1 2025-11-26 13:58:37.035 00:00:10.124 TCP 1.101.0.1:3000 -> 22.102.0.1:58558 10 6452 1 Summary: total flows: 164, total bytes: 498813, total packets: 1575, avg bps: 1061, avg pps: 0, avg bpp: 316 Time window: 2025-11-26 12:56:08 - 2025-11-26 13:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0020s User: 0.0030s Wall: 0.0021s flows/second: 79265.5 Runtime: 0.0021s