Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 14:59:04.761 00:00:10.373 TCP 23.104.0.1:42476 -> 1.101.0.1:3000 11 1507 1 2025-11-27 14:59:19.845 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47652 10 6452 1 2025-11-27 14:56:04.539 00:05:04.514 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 14:56:04.541 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 15:00:05.174 00:00:10.367 TCP 23.104.0.1:48564 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:00:20.076 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36608 10 6452 1 2025-11-27 15:01:05.584 00:00:10.365 TCP 23.104.0.1:42932 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:01:20.288 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45610 10 6452 1 2025-11-27 15:02:05.990 00:00:10.366 TCP 23.104.0.1:35844 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:02:20.502 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38334 10 6452 1 2025-11-27 15:03:06.400 00:00:10.366 TCP 23.104.0.1:38082 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:03:20.722 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53204 10 6452 1 2025-11-27 15:03:43.807 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 15:03:43.862 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 15:04:06.803 00:00:10.366 TCP 23.104.0.1:59544 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:04:20.936 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44880 10 6452 1 2025-11-27 15:05:07.201 00:00:10.363 TCP 23.104.0.1:53268 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:05:21.171 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54644 10 6452 1 2025-11-27 15:02:04.543 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 15:02:04.542 00:05:04.513 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 15:06:07.599 00:00:10.332 TCP 23.104.0.1:35652 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:06:21.387 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49152 10 6452 1 2025-11-27 15:07:07.964 00:00:10.368 TCP 23.104.0.1:35426 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:07:21.564 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57008 10 6452 1 2025-11-27 15:08:08.372 00:00:10.400 TCP 23.104.0.1:38016 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:08:21.736 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52640 10 6452 1 2025-11-27 15:08:44.265 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 15:08:44.320 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 15:09:08.810 00:00:10.370 TCP 23.104.0.1:38830 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:09:21.956 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49604 12 6556 1 2025-11-27 15:10:09.213 00:00:10.368 TCP 23.104.0.1:45810 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:10:22.188 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48452 10 6452 1 2025-11-27 15:11:09.620 00:00:10.366 TCP 23.104.0.1:45338 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:11:22.366 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45112 10 6452 1 2025-11-27 15:08:04.546 00:05:04.508 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 15:08:04.544 00:05:04.513 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 15:12:10.024 00:00:10.362 TCP 23.104.0.1:51252 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:12:22.577 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37870 10 6452 1 2025-11-27 15:13:10.427 00:00:10.332 TCP 23.104.0.1:58878 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:13:22.795 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37154 10 6452 1 2025-11-27 15:13:44.183 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 15:13:44.244 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 15:14:10.806 00:00:10.366 TCP 23.104.0.1:55048 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:14:23.009 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43150 10 6452 1 2025-11-27 15:15:11.222 00:00:10.362 TCP 23.104.0.1:58052 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:15:23.222 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:58228 10 6452 1 2025-11-27 15:16:11.619 00:00:10.365 TCP 23.104.0.1:40512 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:16:23.426 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40694 10 6452 1 2025-11-27 15:17:12.021 00:00:10.363 TCP 23.104.0.1:34678 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:17:23.644 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43034 10 6452 1 2025-11-27 15:14:04.546 00:05:04.513 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 15:14:04.544 00:05:04.518 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 15:18:12.421 00:00:10.367 TCP 23.104.0.1:37742 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:18:23.814 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39478 10 6452 1 2025-11-27 15:18:44.029 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 15:18:43.933 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 15:19:12.826 00:00:10.369 TCP 23.104.0.1:56148 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:19:24.036 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52614 10 6452 1 2025-11-27 15:20:13.233 00:00:10.365 TCP 23.104.0.1:60484 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:20:24.258 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48294 10 6452 1 2025-11-27 15:21:13.639 00:00:10.329 TCP 23.104.0.1:42066 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:21:24.497 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51718 10 6452 1 2025-11-27 15:22:14.007 00:00:10.597 TCP 23.104.0.1:40264 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:22:24.709 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51144 10 6452 1 2025-11-27 15:23:14.641 00:00:10.319 TCP 23.104.0.1:55956 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:23:24.926 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57208 10 6452 1 2025-11-27 15:23:44.331 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 15:23:44.433 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 15:20:04.547 00:05:04.514 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 15:20:04.545 00:05:04.520 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 15:24:15.002 00:00:10.364 TCP 23.104.0.1:35128 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:24:25.167 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58652 10 6452 1 2025-11-27 15:25:15.407 00:00:10.362 TCP 23.104.0.1:38802 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:25:25.380 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47660 10 6452 1 2025-11-27 15:26:15.812 00:00:10.326 TCP 23.104.0.1:34118 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:26:25.590 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39196 10 6452 1 2025-11-27 15:27:16.176 00:00:10.366 TCP 23.104.0.1:52130 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:27:25.761 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43360 10 6452 1 2025-11-27 15:28:16.581 00:00:10.325 TCP 23.104.0.1:38218 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:28:25.979 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49212 10 6452 1 2025-11-27 15:28:44.605 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 15:28:44.339 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 15:29:16.939 00:00:10.326 TCP 23.104.0.1:57914 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:29:26.208 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43206 10 6452 1 2025-11-27 15:26:04.546 00:05:04.519 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 15:26:04.549 00:05:04.514 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 15:30:17.308 00:00:10.361 TCP 23.104.0.1:33576 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:30:26.421 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47138 10 6452 1 2025-11-27 15:31:17.709 00:00:10.360 TCP 23.104.0.1:55668 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:31:26.638 00:00:10.709 TCP 1.101.0.1:3000 -> 22.102.0.1:56872 10 6452 1 2025-11-27 15:32:18.111 00:00:10.366 TCP 23.104.0.1:56398 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:32:27.382 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43446 10 6452 1 2025-11-27 15:33:18.515 00:00:10.375 TCP 23.104.0.1:58402 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:33:27.598 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41122 10 6452 1 2025-11-27 15:33:44.727 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 15:33:44.640 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 15:34:18.935 00:00:10.385 TCP 23.104.0.1:55154 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:34:27.807 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39036 10 6452 1 2025-11-27 15:35:19.354 00:00:10.370 TCP 23.104.0.1:54282 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:35:28.028 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55680 10 6452 1 2025-11-27 15:32:04.551 00:05:04.513 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 15:32:04.550 00:05:04.517 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 15:36:19.767 00:00:10.369 TCP 23.104.0.1:54982 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:36:28.242 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42962 10 6452 1 2025-11-27 15:37:20.181 00:00:10.360 TCP 23.104.0.1:51572 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:37:28.453 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46962 10 6452 1 2025-11-27 15:38:20.580 00:00:10.324 TCP 23.104.0.1:37472 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:38:28.664 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40572 10 6452 1 2025-11-27 15:38:44.688 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 15:38:44.872 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 15:39:20.939 00:00:10.342 TCP 23.104.0.1:35540 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:39:28.873 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53214 10 6452 1 2025-11-27 15:40:21.320 00:00:10.326 TCP 23.104.0.1:47378 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:40:29.076 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53336 10 6452 1 2025-11-27 15:41:21.680 00:00:10.368 TCP 23.104.0.1:49094 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:41:29.289 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47626 10 6452 1 2025-11-27 15:38:04.549 00:05:04.519 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 15:38:04.552 00:05:04.514 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 15:42:22.107 00:00:10.359 TCP 23.104.0.1:51630 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:42:29.506 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43888 10 6452 1 2025-11-27 15:43:22.509 00:00:10.367 TCP 23.104.0.1:45300 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:43:44.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 15:43:29.679 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49684 10 6452 1 2025-11-27 15:43:44.742 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 15:44:22.919 00:00:10.393 TCP 23.104.0.1:59448 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:44:29.850 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36336 10 6452 1 2025-11-27 15:45:23.359 00:00:10.707 TCP 23.104.0.1:33098 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:45:30.040 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41338 10 6452 1 2025-11-27 15:46:24.106 00:00:10.379 TCP 23.104.0.1:48754 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:46:30.252 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50522 10 6452 1 2025-11-27 15:47:24.523 00:00:10.330 TCP 23.104.0.1:51790 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:47:30.462 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56704 10 6452 1 2025-11-27 15:44:04.553 00:05:04.513 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 15:44:04.550 00:05:04.518 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 15:48:24.891 00:00:10.372 TCP 23.104.0.1:51562 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:48:30.682 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37652 10 6452 1 2025-11-27 15:48:44.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 15:48:44.904 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 15:49:25.301 00:00:10.369 TCP 23.104.0.1:42942 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:49:30.902 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55108 10 6452 1 2025-11-27 15:50:25.703 00:00:10.362 TCP 23.104.0.1:43876 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:50:31.095 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33036 10 6452 1 2025-11-27 15:51:26.102 00:00:10.436 TCP 23.104.0.1:52122 -> 1.101.0.1:3000 15 1926 1 2025-11-27 15:51:31.321 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:41624 12 10375 1 2025-11-27 15:52:26.577 00:00:10.370 TCP 23.104.0.1:53018 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:52:31.565 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56308 10 6452 1 2025-11-27 15:53:26.985 00:00:10.322 TCP 23.104.0.1:40530 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:53:31.786 00:00:10.516 TCP 1.101.0.1:3000 -> 22.102.0.1:33024 10 6452 1 2025-11-27 15:53:44.910 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 15:53:44.904 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 15:50:04.551 00:05:04.523 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 15:50:04.555 00:05:04.515 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 15:54:27.345 00:00:10.378 TCP 23.104.0.1:59880 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:54:32.339 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46880 10 6452 1 2025-11-27 15:55:27.761 00:00:10.378 TCP 23.104.0.1:58168 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:55:32.559 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52038 10 6452 1 2025-11-27 15:56:28.171 00:00:10.363 TCP 23.104.0.1:39788 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:56:32.778 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:55834 10 6452 1 2025-11-27 15:57:28.574 00:00:10.369 TCP 23.104.0.1:39142 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:57:32.945 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58364 10 6452 1 2025-11-27 15:58:28.982 00:00:10.326 TCP 23.104.0.1:37950 -> 1.101.0.1:3000 11 1507 1 2025-11-27 15:58:45.031 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 15:58:44.961 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 15:58:33.175 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43298 10 6452 1 Summary: total flows: 164, total bytes: 502794, total packets: 1580, avg bps: 1069, avg pps: 0, avg bpp: 318 Time window: 2025-11-27 14:56:04 - 2025-11-27 15:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0047s User: 0.0016s Wall: 0.0026s flows/second: 63345.2 Runtime: 0.0026s