Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 19:59:20.442 00:00:10.371 TCP 23.104.0.1:32842 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:59:16.920 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43640 10 6452 1 2025-11-14 20:00:17.133 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52370 10 6452 1 2025-11-14 20:00:20.844 00:00:10.389 TCP 23.104.0.1:60320 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:01:17.308 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34758 10 6452 1 2025-11-14 20:01:21.267 00:00:19.308 TCP 23.104.0.1:37132 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:02:17.519 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53534 10 6452 1 2025-11-14 20:02:32.912 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 20:02:32.717 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 20:02:30.622 00:00:10.367 TCP 23.104.0.1:48660 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:03:17.733 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57328 10 6452 1 2025-11-14 20:03:31.023 00:00:10.362 TCP 23.104.0.1:48632 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:59:57.180 00:05:04.486 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 19:59:57.177 00:05:04.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 20:04:17.965 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36326 12 6556 1 2025-11-14 20:04:31.423 00:00:10.367 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:05:18.206 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50978 10 6452 1 2025-11-14 20:05:31.832 00:00:10.387 TCP 23.104.0.1:48350 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:06:18.418 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54154 10 6452 1 2025-11-14 20:06:32.253 00:00:10.325 TCP 23.104.0.1:54486 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:07:18.635 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54728 10 6452 1 2025-11-14 20:07:32.754 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 20:07:32.869 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 20:07:32.615 00:00:10.362 TCP 23.104.0.1:57186 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:08:18.844 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42186 10 6452 1 2025-11-14 20:08:33.016 00:00:10.326 TCP 23.104.0.1:58534 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:09:19.085 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50250 10 6452 1 2025-11-14 20:09:33.383 00:00:10.364 TCP 23.104.0.1:48780 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:05:57.183 00:05:04.489 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 20:05:57.186 00:05:04.483 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 20:10:19.300 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:41890 12 10375 1 2025-11-14 20:10:33.782 00:00:10.443 TCP 23.104.0.1:40308 -> 1.101.0.1:3000 15 1926 1 2025-11-14 20:11:19.546 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56304 10 6452 1 2025-11-14 20:11:34.260 00:00:10.324 TCP 23.104.0.1:54010 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:12:19.761 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58788 10 6452 1 2025-11-14 20:12:32.751 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 20:12:32.975 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 20:12:34.623 00:00:10.321 TCP 23.104.0.1:33714 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:13:19.975 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50356 10 6452 1 2025-11-14 20:13:34.980 00:00:10.372 TCP 23.104.0.1:55378 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:14:20.224 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50478 10 6452 1 2025-11-14 20:14:35.388 00:00:10.360 TCP 23.104.0.1:60884 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:15:20.444 00:00:11.150 TCP 1.101.0.1:3000 -> 22.102.0.1:37268 10 6452 1 2025-11-14 20:15:35.788 00:00:10.345 TCP 23.104.0.1:40892 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:11:57.186 00:05:04.487 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 20:11:57.183 00:05:04.492 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 20:16:21.633 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58466 10 6452 1 2025-11-14 20:16:36.169 00:00:10.327 TCP 23.104.0.1:36296 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:17:21.862 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45824 10 6452 1 2025-11-14 20:17:32.852 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 20:17:32.991 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 20:17:36.535 00:00:10.362 TCP 23.104.0.1:51534 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:18:22.081 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34980 10 6452 1 2025-11-14 20:18:36.937 00:00:10.340 TCP 23.104.0.1:48550 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:19:22.302 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39800 10 6452 1 2025-11-14 20:19:37.324 00:00:10.364 TCP 23.104.0.1:57154 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:20:22.480 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36602 10 6452 1 2025-11-14 20:20:37.726 00:00:10.374 TCP 23.104.0.1:57492 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:21:22.691 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57206 10 6452 1 2025-11-14 20:21:38.144 00:00:10.369 TCP 23.104.0.1:33204 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:17:57.185 00:05:04.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 20:17:57.187 00:05:04.486 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 20:22:33.147 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 20:22:22.865 00:00:10.417 TCP 1.101.0.1:3000 -> 22.102.0.1:39272 10 6452 1 2025-11-14 20:22:33.102 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 20:22:38.548 00:00:10.327 TCP 23.104.0.1:57308 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:23:23.320 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41310 10 6452 1 2025-11-14 20:23:38.918 00:00:10.380 TCP 23.104.0.1:57730 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:24:23.542 00:00:17.238 TCP 1.101.0.1:3000 -> 22.102.0.1:58286 10 6452 1 2025-11-14 20:24:39.340 00:00:10.326 TCP 23.104.0.1:38540 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:25:30.833 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54276 10 6452 1 2025-11-14 20:25:39.702 00:00:10.367 TCP 23.104.0.1:44214 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:26:31.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37778 10 6452 1 2025-11-14 20:26:40.110 00:00:10.378 TCP 23.104.0.1:59308 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:27:32.901 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 20:27:32.959 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 20:27:31.294 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45880 10 6452 1 2025-11-14 20:27:40.551 00:00:10.363 TCP 23.104.0.1:54566 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:23:57.189 00:05:04.491 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 20:23:57.188 00:05:04.496 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 20:28:31.515 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59746 10 6452 1 2025-11-14 20:28:40.945 00:00:10.369 TCP 23.104.0.1:55834 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:29:31.734 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37752 10 6452 1 2025-11-14 20:29:41.346 00:00:10.363 TCP 23.104.0.1:41170 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:30:31.949 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34304 10 6452 1 2025-11-14 20:30:41.749 00:00:10.420 TCP 23.104.0.1:48720 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:31:32.187 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59910 10 6452 1 2025-11-14 20:31:42.212 00:00:10.362 TCP 23.104.0.1:41398 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:32:33.302 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 20:32:33.375 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 20:32:32.364 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:36222 10 6452 1 2025-11-14 20:32:42.610 00:00:10.381 TCP 23.104.0.1:54806 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:33:32.530 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46034 10 6452 1 2025-11-14 20:33:43.056 00:00:10.364 TCP 23.104.0.1:52218 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:29:57.190 00:05:04.491 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 20:29:57.189 00:05:04.495 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 20:34:32.744 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48894 10 6452 1 2025-11-14 20:34:43.459 00:00:10.330 TCP 23.104.0.1:39454 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:35:32.971 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59490 10 6452 1 2025-11-14 20:35:43.822 00:00:10.364 TCP 23.104.0.1:55736 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:36:33.193 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53846 10 6452 1 2025-11-14 20:36:44.226 00:00:10.363 TCP 23.104.0.1:54022 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:37:33.442 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 20:37:33.495 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 20:37:33.365 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53828 10 6452 1 2025-11-14 20:37:44.629 00:00:10.366 TCP 23.104.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:38:33.578 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54700 10 6452 1 2025-11-14 20:38:45.030 00:00:10.363 TCP 23.104.0.1:35340 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:39:33.798 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39018 10 6452 1 2025-11-14 20:39:45.433 00:00:10.322 TCP 23.104.0.1:48272 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:35:57.188 00:05:04.497 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 20:35:57.191 00:05:04.491 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 20:40:34.033 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39946 10 6452 1 2025-11-14 20:40:45.795 00:00:10.365 TCP 23.104.0.1:55834 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:41:34.253 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39422 10 6452 1 2025-11-14 20:41:46.196 00:00:10.364 TCP 23.104.0.1:38516 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:42:33.353 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 20:42:33.747 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 20:42:34.429 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52394 10 6452 1 2025-11-14 20:42:46.596 00:00:10.364 TCP 23.104.0.1:33528 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:43:34.613 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54324 10 6452 1 2025-11-14 20:43:47.002 00:00:10.364 TCP 23.104.0.1:45476 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:44:34.829 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55396 10 6452 1 2025-11-14 20:44:47.409 00:00:10.363 TCP 23.104.0.1:57888 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:45:35.067 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53290 10 6452 1 2025-11-14 20:45:47.806 00:00:10.370 TCP 23.104.0.1:49394 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:41:57.192 00:05:04.491 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 20:41:57.190 00:05:04.497 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 20:46:35.277 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46614 10 6452 1 2025-11-14 20:46:48.215 00:00:10.324 TCP 23.104.0.1:35354 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:47:33.760 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 20:47:33.671 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 20:47:35.449 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37760 10 6452 1 2025-11-14 20:47:48.578 00:00:10.369 TCP 23.104.0.1:40018 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:48:35.625 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34520 10 6452 1 2025-11-14 20:48:48.986 00:00:10.325 TCP 23.104.0.1:39212 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:49:35.839 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59302 10 6452 1 2025-11-14 20:49:49.348 00:00:10.366 TCP 23.104.0.1:33316 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:50:36.009 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39448 10 6452 1 2025-11-14 20:50:49.748 00:00:10.322 TCP 23.104.0.1:50150 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:51:36.229 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57044 10 6452 1 2025-11-14 20:51:50.113 00:00:10.366 TCP 23.104.0.1:43082 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:47:57.190 00:05:04.497 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 20:47:57.193 00:05:04.492 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 20:52:33.763 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 20:52:33.760 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 20:52:36.438 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46562 10 6452 1 2025-11-14 20:52:50.520 00:00:10.417 TCP 23.104.0.1:53360 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:53:36.653 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38254 10 6452 1 2025-11-14 20:53:50.973 00:00:10.331 TCP 23.104.0.1:47374 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:54:36.863 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58484 10 6452 1 2025-11-14 20:54:51.344 00:00:10.369 TCP 23.104.0.1:53574 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:55:37.087 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43852 10 6452 1 2025-11-14 20:55:51.755 00:00:10.371 TCP 23.104.0.1:44670 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:56:37.300 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46800 10 6452 1 2025-11-14 20:56:52.167 00:00:10.370 TCP 23.104.0.1:36696 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:57:33.926 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 20:57:33.788 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 20:57:37.468 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42636 10 6452 1 2025-11-14 20:53:57.194 00:05:04.491 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 20:53:57.192 00:05:04.496 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 20:57:52.574 00:00:10.373 TCP 23.104.0.1:38984 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:58:37.680 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41020 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1118, avg pps: 0, avg bpp: 319 Time window: 2025-11-14 19:59:16 - 2025-11-14 20:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0049s User: 0.0010s Wall: 0.0026s flows/second: 61536.6 Runtime: 0.0027s