Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 00:58:49.262 00:00:10.362 TCP 23.104.0.1:38934 -> 1.101.0.1:3000 11 1507 1 2025-11-16 00:59:21.277 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33362 10 6452 1 2025-11-16 00:59:49.666 00:00:10.368 TCP 23.104.0.1:43918 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:00:21.489 00:00:10.901 TCP 1.101.0.1:3000 -> 22.102.0.1:41084 10 6452 1 2025-11-16 01:00:50.100 00:00:10.367 TCP 23.104.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:01:22.428 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40274 10 6452 1 2025-11-16 01:01:50.504 00:00:10.363 TCP 23.104.0.1:50942 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:02:22.599 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47848 10 6452 1 2025-11-16 01:02:50.907 00:00:10.365 TCP 23.104.0.1:49590 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:03:07.526 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 01:03:07.588 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 01:03:22.828 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53272 10 6452 1 2025-11-16 01:03:51.311 00:00:10.366 TCP 23.104.0.1:42924 -> 1.101.0.1:3000 11 1507 1 2025-11-16 00:59:57.707 00:05:04.753 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 00:59:57.710 00:05:04.747 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 01:04:23.067 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42420 10 6452 1 2025-11-16 01:04:51.721 00:00:10.379 TCP 23.104.0.1:50498 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:05:23.286 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57382 10 6452 1 2025-11-16 01:05:52.137 00:00:10.366 TCP 23.104.0.1:52074 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:06:23.508 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39344 10 6452 1 2025-11-16 01:06:52.540 00:00:10.368 TCP 23.104.0.1:45386 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:07:23.722 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48210 10 6452 1 2025-11-16 01:07:52.949 00:00:10.369 TCP 23.104.0.1:48910 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:08:07.824 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 01:08:07.680 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 01:08:23.940 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:45452 10 6452 1 2025-11-16 01:08:53.353 00:00:10.358 TCP 23.104.0.1:42190 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:09:24.136 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51608 10 6452 1 2025-11-16 01:09:53.750 00:00:10.366 TCP 23.104.0.1:33710 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:05:57.712 00:05:04.746 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 01:05:57.711 00:05:04.751 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 01:10:24.352 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53960 10 6452 1 2025-11-16 01:10:54.155 00:00:10.365 TCP 23.104.0.1:33742 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:11:24.568 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59254 10 6452 1 2025-11-16 01:11:54.567 00:00:10.360 TCP 23.104.0.1:48096 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:12:24.786 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43138 10 6452 1 2025-11-16 01:12:54.973 00:00:10.372 TCP 23.104.0.1:55070 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:13:07.901 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 01:13:07.865 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 01:13:25.014 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34486 10 6452 1 2025-11-16 01:13:55.392 00:00:10.374 TCP 23.104.0.1:59728 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:14:25.239 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54914 10 6452 1 2025-11-16 01:14:55.822 00:00:10.327 TCP 23.104.0.1:54612 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:15:25.467 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41988 10 6452 1 2025-11-16 01:11:57.714 00:05:04.747 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 01:15:56.187 00:00:10.358 TCP 23.104.0.1:49072 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:11:57.711 00:05:04.752 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 01:16:25.688 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59644 10 6452 1 2025-11-16 01:16:56.584 00:00:10.327 TCP 23.104.0.1:34730 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:17:25.906 00:00:11.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42066 10 6452 1 2025-11-16 01:18:07.949 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 01:18:08.012 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 01:17:56.950 00:00:10.378 TCP 23.104.0.1:52058 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:18:27.144 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34720 10 6452 1 2025-11-16 01:18:57.369 00:00:10.366 TCP 23.104.0.1:45234 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:19:27.362 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38526 10 6452 1 2025-11-16 01:19:57.776 00:00:10.376 TCP 23.104.0.1:49164 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:20:27.587 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50162 10 6452 1 2025-11-16 01:20:58.194 00:00:10.366 TCP 23.104.0.1:54286 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:21:27.808 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:35404 12 10375 1 2025-11-16 01:17:57.726 00:05:04.747 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 01:17:57.729 00:05:04.741 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 01:21:58.600 00:00:10.448 TCP 23.104.0.1:38802 -> 1.101.0.1:3000 15 1926 1 2025-11-16 01:22:28.088 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52816 10 6452 1 2025-11-16 01:23:07.973 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 01:23:08.026 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 01:22:59.103 00:00:10.368 TCP 23.104.0.1:33234 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:23:28.309 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49750 10 6452 1 2025-11-16 01:23:59.507 00:00:10.371 TCP 23.104.0.1:33028 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:24:28.529 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53064 10 6452 1 2025-11-16 01:24:59.915 00:00:10.360 TCP 23.104.0.1:34120 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:25:28.750 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38176 10 6452 1 2025-11-16 01:26:00.313 00:00:10.370 TCP 23.104.0.1:56502 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:26:28.967 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:38270 12 10375 1 2025-11-16 01:27:00.720 00:00:10.446 TCP 23.104.0.1:43986 -> 1.101.0.1:3000 15 1926 1 2025-11-16 01:27:29.232 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36366 10 6452 1 2025-11-16 01:23:57.727 00:05:04.747 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 01:23:57.730 00:05:04.741 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 01:28:01.203 00:00:10.729 TCP 23.104.0.1:40814 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:28:07.832 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 01:28:08.041 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 01:28:29.446 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40480 10 6452 1 2025-11-16 01:29:01.964 00:00:10.372 TCP 23.104.0.1:50500 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:29:29.654 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59384 10 6452 1 2025-11-16 01:30:02.374 00:00:10.366 TCP 23.104.0.1:44734 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:30:29.869 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48930 10 6452 1 2025-11-16 01:31:02.773 00:00:10.372 TCP 23.104.0.1:42900 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:31:30.086 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59572 10 6452 1 2025-11-16 01:32:03.182 00:00:10.320 TCP 23.104.0.1:54332 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:32:30.305 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49272 10 6452 1 2025-11-16 01:33:08.150 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 01:33:07.969 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 01:33:03.547 00:00:10.371 TCP 23.104.0.1:50188 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:33:30.535 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48436 10 6452 1 2025-11-16 01:29:57.728 00:05:04.748 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 01:29:57.731 00:05:04.743 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 01:34:03.959 00:00:10.371 TCP 23.104.0.1:57884 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:34:30.754 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:44354 10 6452 1 2025-11-16 01:35:04.361 00:00:10.363 TCP 23.104.0.1:46330 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:35:30.947 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:50068 10 6452 1 2025-11-16 01:36:04.763 00:00:10.385 TCP 23.104.0.1:46012 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:36:31.129 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60190 10 6452 1 2025-11-16 01:37:05.186 00:00:10.369 TCP 23.104.0.1:44766 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:37:31.339 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33716 10 6452 1 2025-11-16 01:38:08.614 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 01:38:08.603 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 01:38:05.593 00:00:10.369 TCP 23.104.0.1:46712 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:38:31.551 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39438 10 6452 1 2025-11-16 01:39:06.019 00:00:10.366 TCP 23.104.0.1:46168 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:39:31.758 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34166 10 6452 1 2025-11-16 01:35:57.738 00:05:04.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 01:35:57.736 00:05:04.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 01:40:06.421 00:00:10.364 TCP 23.104.0.1:40602 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:40:31.976 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:46986 10 6452 1 2025-11-16 01:41:06.824 00:00:10.375 TCP 23.104.0.1:37328 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:41:32.170 00:00:10.332 TCP 1.101.0.1:3000 -> 22.102.0.1:41796 12 10375 1 2025-11-16 01:42:07.240 00:00:10.439 TCP 23.104.0.1:54190 -> 1.101.0.1:3000 15 1926 1 2025-11-16 01:42:32.541 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33688 10 6452 1 2025-11-16 01:43:08.344 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 01:43:08.450 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 01:43:07.719 00:00:10.328 TCP 23.104.0.1:60196 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:43:32.759 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51654 10 6452 1 2025-11-16 01:44:08.108 00:00:10.363 TCP 23.104.0.1:36246 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:44:32.970 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45166 10 6452 1 2025-11-16 01:45:08.514 00:00:10.324 TCP 23.104.0.1:57960 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:45:33.204 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55900 10 6452 1 2025-11-16 01:41:57.737 00:05:04.752 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 01:41:57.739 00:05:04.747 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 01:46:08.875 00:00:10.372 TCP 23.104.0.1:47310 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:46:33.425 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33522 10 6452 1 2025-11-16 01:47:09.286 00:00:10.323 TCP 23.104.0.1:56830 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:47:33.635 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50342 10 6452 1 2025-11-16 01:48:08.383 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 01:48:08.435 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 01:48:09.651 00:00:10.362 TCP 23.104.0.1:35384 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:48:33.810 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54860 10 6452 1 2025-11-16 01:49:10.060 00:00:10.369 TCP 23.104.0.1:56190 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:49:33.998 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56444 10 6452 1 2025-11-16 01:50:10.465 00:00:10.361 TCP 23.104.0.1:47594 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:50:34.224 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48680 10 6452 1 2025-11-16 01:51:10.862 00:00:10.374 TCP 23.104.0.1:60976 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:51:34.454 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42798 10 6452 1 2025-11-16 01:47:57.740 00:05:04.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 01:47:57.738 00:05:04.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 01:52:11.277 00:00:10.365 TCP 23.104.0.1:39844 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:52:34.670 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35744 10 6452 1 2025-11-16 01:53:08.666 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 01:53:08.513 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 01:53:11.677 00:00:10.321 TCP 23.104.0.1:56728 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:53:34.885 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36814 10 6452 1 2025-11-16 01:54:12.050 00:00:10.323 TCP 23.104.0.1:60960 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:54:35.074 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46876 10 6452 1 2025-11-16 01:55:12.409 00:00:10.329 TCP 23.104.0.1:39266 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:55:35.285 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50344 10 6452 1 2025-11-16 01:56:12.774 00:00:10.332 TCP 23.104.0.1:42070 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:56:35.461 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46822 10 6452 1 2025-11-16 01:57:13.143 00:00:10.364 TCP 23.104.0.1:55458 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:57:35.677 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46028 10 6452 1 2025-11-16 01:53:57.739 00:05:04.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 01:53:57.741 00:05:04.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 01:58:08.992 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 01:58:08.877 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 01:58:13.544 00:00:10.365 TCP 23.104.0.1:45480 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:58:35.896 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43278 10 6452 1 Summary: total flows: 164, total bytes: 511374, total packets: 1590, avg bps: 1132, avg pps: 0, avg bpp: 321 Time window: 2025-11-16 00:58:49 - 2025-11-16 01:59:02 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0056s User: 0.0000s Wall: 0.0021s flows/second: 78131.1 Runtime: 0.0021s