Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 23:59:09.594 00:00:10.369 TCP 23.104.0.1:47118 -> 1.101.0.1:3000 11 1507 1 2025-11-14 23:59:29.232 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44422 10 6452 1 2025-11-15 00:00:10.004 00:00:10.363 TCP 23.104.0.1:32870 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:00:29.450 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35580 10 6452 1 2025-11-15 00:01:10.405 00:00:10.366 TCP 23.104.0.1:39130 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:01:29.657 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50954 10 6452 1 2025-11-15 00:02:10.809 00:00:10.374 TCP 23.104.0.1:56340 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:02:29.876 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42412 10 6452 1 2025-11-15 00:02:37.635 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 00:02:37.416 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:03:11.222 00:00:10.369 TCP 23.104.0.1:44170 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:03:30.111 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:32988 10 6452 1 2025-11-14 23:59:57.241 00:05:04.506 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 23:59:57.244 00:05:04.501 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 00:04:11.630 00:00:10.366 TCP 23.104.0.1:59302 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:04:30.336 00:00:13.688 TCP 1.101.0.1:3000 -> 22.102.0.1:59990 10 6452 1 2025-11-15 00:05:12.035 00:00:10.362 TCP 23.104.0.1:46886 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:05:34.081 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57028 10 6452 1 2025-11-15 00:06:12.433 00:00:10.365 TCP 23.104.0.1:33580 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:06:34.302 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42998 10 6452 1 2025-11-15 00:07:12.838 00:00:10.384 TCP 23.104.0.1:41270 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:07:37.735 00:00:00.013 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:07:37.627 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 00:07:34.482 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53236 10 6452 1 2025-11-15 00:08:13.256 00:00:10.624 TCP 23.104.0.1:34776 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:08:34.696 00:00:10.896 TCP 1.101.0.1:3000 -> 22.102.0.1:44500 10 6452 1 2025-11-15 00:09:13.920 00:00:10.367 TCP 23.104.0.1:38460 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:09:35.632 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53874 10 6452 1 2025-11-15 00:05:57.244 00:05:04.502 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 00:05:57.242 00:05:04.507 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 00:10:14.326 00:00:10.364 TCP 23.104.0.1:43334 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:10:35.851 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52742 10 6452 1 2025-11-15 00:11:14.727 00:00:10.366 TCP 23.104.0.1:46972 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:11:36.084 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37234 10 6452 1 2025-11-15 00:12:15.130 00:00:10.362 TCP 23.104.0.1:41720 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:12:37.590 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 00:12:37.563 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:12:36.257 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45640 10 6452 1 2025-11-15 00:13:15.531 00:00:10.362 TCP 23.104.0.1:43014 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:13:36.474 00:00:10.534 TCP 1.101.0.1:3000 -> 22.102.0.1:48710 10 6452 1 2025-11-15 00:14:15.928 00:00:10.347 TCP 23.104.0.1:33190 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:14:37.070 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42588 10 6452 1 2025-11-15 00:15:16.312 00:00:10.361 TCP 23.104.0.1:45042 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:15:37.254 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59894 10 6452 1 2025-11-15 00:11:57.244 00:05:04.508 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 00:11:57.246 00:05:04.503 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 00:16:16.712 00:00:10.365 TCP 23.104.0.1:58822 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:16:37.477 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35174 10 6452 1 2025-11-15 00:17:17.113 00:00:10.364 TCP 23.104.0.1:49982 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:17:37.867 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 00:17:37.843 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:17:37.693 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57764 10 6452 1 2025-11-15 00:18:17.516 00:00:10.363 TCP 23.104.0.1:35370 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:18:37.864 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53162 10 6452 1 2025-11-15 00:19:17.919 00:00:10.368 TCP 23.104.0.1:41856 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:19:38.084 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54260 10 6452 1 2025-11-15 00:20:18.328 00:00:10.325 TCP 23.104.0.1:37420 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:20:38.307 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39806 10 6452 1 2025-11-15 00:21:18.692 00:00:10.380 TCP 23.104.0.1:39836 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:21:38.522 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41352 10 6452 1 2025-11-15 00:17:57.247 00:05:04.504 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 00:17:57.245 00:05:04.510 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 00:22:19.114 00:00:10.366 TCP 23.104.0.1:34012 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:22:37.875 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 00:22:37.865 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:22:38.735 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42748 10 6452 1 2025-11-15 00:23:19.521 00:00:10.369 TCP 23.104.0.1:59226 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:23:38.951 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:52300 10 6452 1 2025-11-15 00:24:19.928 00:00:10.372 TCP 23.104.0.1:53218 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:24:39.189 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52570 10 6452 1 2025-11-15 00:25:20.339 00:00:10.367 TCP 23.104.0.1:39458 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:25:39.406 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40076 10 6452 1 2025-11-15 00:26:20.747 00:00:10.368 TCP 23.104.0.1:41242 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:26:39.624 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39700 10 6452 1 2025-11-15 00:27:21.146 00:00:10.369 TCP 23.104.0.1:53814 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:27:37.772 00:00:00.016 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:27:38.137 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 00:27:39.841 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49750 10 6452 1 2025-11-15 00:23:57.247 00:05:04.509 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 00:23:57.249 00:05:04.505 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 00:28:21.553 00:00:10.364 TCP 23.104.0.1:47190 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:28:40.078 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53680 10 6452 1 2025-11-15 00:29:21.956 00:00:10.365 TCP 23.104.0.1:57298 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:29:40.301 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43880 10 6452 1 2025-11-15 00:30:22.356 00:00:10.366 TCP 23.104.0.1:49002 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:30:40.514 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43100 10 6452 1 2025-11-15 00:31:22.760 00:00:10.374 TCP 23.104.0.1:37164 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:31:40.730 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46196 10 6452 1 2025-11-15 00:32:23.176 00:00:10.371 TCP 23.104.0.1:33474 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:32:38.137 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 00:32:38.201 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:32:40.901 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54408 10 6452 1 2025-11-15 00:33:23.586 00:00:10.321 TCP 23.104.0.1:56834 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:33:41.121 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45506 10 6452 1 2025-11-15 00:29:57.251 00:05:04.509 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 00:29:57.254 00:05:04.504 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 00:34:23.943 00:00:10.376 TCP 23.104.0.1:56086 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:34:41.333 00:00:10.377 TCP 1.101.0.1:3000 -> 22.102.0.1:56334 10 6452 1 2025-11-15 00:35:24.358 00:00:10.362 TCP 23.104.0.1:47848 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:35:41.749 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39054 10 6452 1 2025-11-15 00:36:24.762 00:00:10.376 TCP 23.104.0.1:59638 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:36:41.973 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59716 13 6608 1 2025-11-15 00:37:25.174 00:00:10.364 TCP 23.104.0.1:57018 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:37:38.303 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:37:38.572 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 00:37:42.188 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60038 10 6452 1 2025-11-15 00:38:25.578 00:00:10.362 TCP 23.104.0.1:47516 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:38:42.416 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44840 10 6452 1 2025-11-15 00:39:25.980 00:00:10.324 TCP 23.104.0.1:44368 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:39:42.638 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49350 10 6452 1 2025-11-15 00:35:57.257 00:05:04.503 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 00:35:57.255 00:05:04.508 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 00:40:26.345 00:00:10.326 TCP 23.104.0.1:58182 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:40:42.872 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56048 10 6452 1 2025-11-15 00:41:26.705 00:00:10.368 TCP 23.104.0.1:59820 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:41:43.108 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43058 10 6452 1 2025-11-15 00:42:38.036 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:42:27.109 00:00:10.322 TCP 23.104.0.1:38938 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:42:38.200 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 00:42:43.287 00:00:14.367 TCP 1.101.0.1:3000 -> 22.102.0.1:43854 10 6452 1 2025-11-15 00:43:27.468 00:00:10.326 TCP 23.104.0.1:56052 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:43:47.694 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46490 10 6452 1 2025-11-15 00:44:27.832 00:00:10.385 TCP 23.104.0.1:47970 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:44:47.903 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39658 10 6452 1 2025-11-15 00:45:28.250 00:00:10.369 TCP 23.104.0.1:53752 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:45:48.126 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47554 10 6452 1 2025-11-15 00:41:57.256 00:05:04.507 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 00:41:57.259 00:05:04.502 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 00:46:28.659 00:00:10.326 TCP 23.104.0.1:36692 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:46:48.340 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47990 10 6452 1 2025-11-15 00:47:38.486 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:47:29.025 00:00:10.366 TCP 23.104.0.1:42868 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:47:38.497 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 00:47:48.555 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45548 10 6452 1 2025-11-15 00:48:29.432 00:00:10.327 TCP 23.104.0.1:56512 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:48:48.769 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45166 10 6452 1 2025-11-15 00:49:29.804 00:00:10.337 TCP 23.104.0.1:38732 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:49:48.995 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36960 10 6452 1 2025-11-15 00:50:30.178 00:00:10.364 TCP 23.104.0.1:46852 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:50:49.169 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38128 10 6452 1 2025-11-15 00:51:30.582 00:00:10.369 TCP 23.104.0.1:55380 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:51:49.388 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47770 10 6452 1 2025-11-15 00:47:57.259 00:05:04.514 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 00:47:57.262 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 00:52:39.254 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:52:30.994 00:00:10.362 TCP 23.104.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:52:39.134 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 00:52:49.611 00:00:10.578 TCP 1.101.0.1:3000 -> 22.102.0.1:52352 10 6452 1 2025-11-15 00:53:31.399 00:00:10.365 TCP 23.104.0.1:56816 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:53:50.226 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60744 10 6452 1 2025-11-15 00:54:31.803 00:00:10.336 TCP 23.104.0.1:58126 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:54:50.436 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46922 10 6452 1 2025-11-15 00:55:32.173 00:00:10.370 TCP 23.104.0.1:49454 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:55:50.650 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48212 10 6452 1 2025-11-15 00:56:32.584 00:00:10.325 TCP 23.104.0.1:51462 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:56:50.868 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56188 10 6452 1 2025-11-15 00:57:38.693 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 00:57:38.688 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 00:57:32.947 00:00:10.367 TCP 23.104.0.1:49996 -> 1.101.0.1:3000 11 1507 1 2025-11-15 00:57:51.097 00:00:10.584 TCP 1.101.0.1:3000 -> 22.102.0.1:51230 10 6452 1 2025-11-15 00:53:57.272 00:05:04.499 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 00:53:57.270 00:05:04.504 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 00:58:33.355 00:00:10.364 TCP 23.104.0.1:39434 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492052, total packets: 1565, avg bps: 1095, avg pps: 0, avg bpp: 314 Time window: 2025-11-14 23:59:09 - 2025-11-15 00:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0022s User: 0.0022s Wall: 0.0022s flows/second: 72638.3 Runtime: 0.0023s