Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 01:59:13.947 00:00:10.366 TCP 23.104.0.1:50754 -> 1.101.0.1:3000 11 1507 1 2025-11-16 01:59:36.127 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34058 10 6452 1 2025-11-16 02:00:14.356 00:00:10.410 TCP 23.104.0.1:37474 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:00:36.340 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38004 10 6452 1 2025-11-16 02:01:14.806 00:00:10.369 TCP 23.104.0.1:49348 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:01:36.548 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43066 10 6452 1 2025-11-16 02:02:15.211 00:00:10.916 TCP 23.104.0.1:43490 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:02:36.724 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42810 10 6452 1 2025-11-16 02:03:08.706 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 02:03:08.795 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 02:03:16.180 00:00:10.365 TCP 23.104.0.1:33354 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:03:36.898 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38448 10 6452 1 2025-11-16 01:59:57.742 00:05:04.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 01:59:57.740 00:05:04.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 02:04:16.580 00:00:10.361 TCP 23.104.0.1:49384 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:04:37.084 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54312 10 6452 1 2025-11-16 02:05:16.978 00:00:10.367 TCP 23.104.0.1:56334 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:05:37.298 00:00:10.371 TCP 1.101.0.1:3000 -> 22.102.0.1:58672 10 6452 1 2025-11-16 02:06:17.387 00:00:10.322 TCP 23.104.0.1:37500 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:06:37.713 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53076 10 6452 1 2025-11-16 02:07:17.744 00:00:10.363 TCP 23.104.0.1:54874 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:07:37.918 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:35590 10 6452 1 2025-11-16 02:08:08.706 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 02:08:08.834 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 02:08:18.144 00:00:10.324 TCP 23.104.0.1:48478 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:08:38.110 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59392 10 6452 1 2025-11-16 02:09:18.510 00:00:10.369 TCP 23.104.0.1:58142 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:09:38.328 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41960 10 6452 1 2025-11-16 02:05:57.742 00:05:04.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 02:05:57.744 00:05:04.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 02:10:18.917 00:00:10.376 TCP 23.104.0.1:33498 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:10:38.549 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53730 10 6452 1 2025-11-16 02:11:19.332 00:00:10.366 TCP 23.104.0.1:39336 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:11:38.758 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57518 10 6452 1 2025-11-16 02:12:19.737 00:00:10.370 TCP 23.104.0.1:54754 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:12:38.974 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:37198 10 6452 1 2025-11-16 02:13:09.053 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 02:13:08.767 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 02:13:20.145 00:00:10.366 TCP 23.104.0.1:60342 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:13:39.214 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60718 10 6452 1 2025-11-16 02:14:20.550 00:00:10.362 TCP 23.104.0.1:48974 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:14:39.427 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46994 10 6452 1 2025-11-16 02:15:20.947 00:00:10.373 TCP 23.104.0.1:53444 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:15:39.600 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46538 10 6452 1 2025-11-16 02:11:57.748 00:05:04.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 02:11:57.746 00:05:04.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 02:16:21.360 00:00:10.370 TCP 23.104.0.1:39032 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:16:39.786 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:50408 10 6452 1 2025-11-16 02:17:21.764 00:00:10.330 TCP 23.104.0.1:38356 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:17:39.954 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37998 10 6452 1 2025-11-16 02:18:09.368 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 02:18:09.254 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 02:18:22.131 00:00:10.653 TCP 23.104.0.1:39878 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:18:40.189 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44538 10 6452 1 2025-11-16 02:19:22.822 00:00:10.368 TCP 23.104.0.1:50340 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:19:40.409 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53864 10 6452 1 2025-11-16 02:20:23.225 00:00:10.367 TCP 23.104.0.1:57480 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:20:40.620 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33302 10 6452 1 2025-11-16 02:21:23.628 00:00:10.360 TCP 23.104.0.1:59692 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:21:40.796 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38768 10 6452 1 2025-11-16 02:17:57.750 00:05:04.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 02:17:57.747 00:05:04.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 02:22:24.026 00:00:10.325 TCP 23.104.0.1:60746 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:22:41.016 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52102 10 6452 1 2025-11-16 02:23:09.128 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 02:23:09.228 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 02:23:24.388 00:00:10.368 TCP 23.104.0.1:54886 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:23:41.235 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57022 10 6452 1 2025-11-16 02:24:24.796 00:00:10.332 TCP 23.104.0.1:56150 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:24:41.411 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55616 10 6452 1 2025-11-16 02:25:25.162 00:00:10.368 TCP 23.104.0.1:53672 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:25:41.628 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50718 10 6452 1 2025-11-16 02:26:25.563 00:00:10.370 TCP 23.104.0.1:33706 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:26:41.840 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46238 10 6452 1 2025-11-16 02:27:25.971 00:00:10.372 TCP 23.104.0.1:43118 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:27:42.082 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36458 10 6452 1 2025-11-16 02:23:57.751 00:05:04.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 02:23:57.750 00:05:04.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 02:28:09.362 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 02:28:09.414 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 02:28:26.387 00:00:10.367 TCP 23.104.0.1:38738 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:28:42.296 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38890 10 6452 1 2025-11-16 02:29:26.800 00:00:10.370 TCP 23.104.0.1:44854 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:29:42.472 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56600 10 6452 1 2025-11-16 02:30:27.204 00:00:10.327 TCP 23.104.0.1:39646 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:30:42.682 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33768 10 6452 1 2025-11-16 02:31:27.570 00:00:10.366 TCP 23.104.0.1:43232 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:31:42.893 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47966 10 6452 1 2025-11-16 02:32:27.972 00:00:10.328 TCP 23.104.0.1:43344 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:32:43.084 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60128 10 6452 1 2025-11-16 02:33:09.471 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 02:33:09.465 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 02:33:28.342 00:00:10.381 TCP 23.104.0.1:57320 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:33:43.299 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57734 10 6452 1 2025-11-16 02:29:57.759 00:05:04.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 02:29:57.758 00:05:04.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 02:34:28.767 00:00:10.334 TCP 23.104.0.1:59084 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:34:43.513 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60236 10 6452 1 2025-11-16 02:35:29.139 00:00:10.642 TCP 23.104.0.1:38980 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:35:43.729 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38760 10 6452 1 2025-11-16 02:36:29.821 00:00:10.363 TCP 23.104.0.1:56066 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:36:43.938 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:46016 10 6452 1 2025-11-16 02:37:30.216 00:00:10.419 TCP 23.104.0.1:42578 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:37:44.178 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41732 10 6452 1 2025-11-16 02:38:09.482 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 02:38:09.654 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 02:38:30.675 00:00:10.369 TCP 23.104.0.1:43870 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:38:44.392 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57808 10 6452 1 2025-11-16 02:39:31.104 00:00:10.994 TCP 23.104.0.1:58066 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:39:44.597 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47308 10 6452 1 2025-11-16 02:35:57.760 00:05:04.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 02:35:57.758 00:05:04.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 02:40:32.133 00:00:10.368 TCP 23.104.0.1:45870 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:40:44.773 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50352 10 6452 1 2025-11-16 02:41:32.542 00:00:10.366 TCP 23.104.0.1:36610 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:41:44.993 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50964 10 6452 1 2025-11-16 02:42:32.946 00:00:10.356 TCP 23.104.0.1:36522 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:42:45.219 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55312 10 6452 1 2025-11-16 02:43:09.752 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 02:43:09.850 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 02:43:33.310 00:00:10.322 TCP 23.104.0.1:34824 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:43:45.430 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57182 10 6452 1 2025-11-16 02:44:33.670 00:00:10.374 TCP 23.104.0.1:50516 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:44:45.649 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:35364 10 6452 1 2025-11-16 02:45:34.103 00:00:10.371 TCP 23.104.0.1:52376 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:45:45.843 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37002 10 6452 1 2025-11-16 02:41:57.770 00:05:04.743 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 02:41:57.768 00:05:04.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 02:46:34.502 00:00:10.365 TCP 23.104.0.1:54436 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:46:46.077 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33522 10 6452 1 2025-11-16 02:47:34.910 00:00:10.364 TCP 23.104.0.1:46580 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:47:46.290 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33492 10 6452 1 2025-11-16 02:48:09.833 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 02:48:09.662 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 02:48:35.315 00:00:10.371 TCP 23.104.0.1:55542 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:48:46.460 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40536 10 6452 1 2025-11-16 02:49:35.725 00:00:10.375 TCP 23.104.0.1:46936 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:49:46.631 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33988 10 6452 1 2025-11-16 02:50:36.134 00:00:10.664 TCP 23.104.0.1:49260 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:50:46.801 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35360 10 6452 1 2025-11-16 02:51:36.838 00:00:10.346 TCP 23.104.0.1:52994 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:51:47.038 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37826 10 6452 1 2025-11-16 02:47:57.770 00:05:04.747 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 02:47:57.773 00:05:04.742 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 02:52:37.221 00:00:10.369 TCP 23.104.0.1:36946 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:52:47.257 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32846 10 6452 1 2025-11-16 02:53:09.721 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 02:53:09.566 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 02:53:37.621 00:00:10.359 TCP 23.104.0.1:36188 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:53:47.467 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53238 10 6452 1 2025-11-16 02:54:38.016 00:00:10.364 TCP 23.104.0.1:46656 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:54:47.649 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50492 10 6452 1 2025-11-16 02:55:38.455 00:00:10.360 TCP 23.104.0.1:41894 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:55:47.859 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39154 10 6452 1 2025-11-16 02:56:38.853 00:00:10.371 TCP 23.104.0.1:57350 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:56:48.087 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41508 10 6452 1 2025-11-16 02:57:39.264 00:00:10.323 TCP 23.104.0.1:37918 -> 1.101.0.1:3000 11 1507 1 2025-11-16 02:57:48.301 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37764 10 6452 1 2025-11-16 02:53:57.780 00:05:04.736 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 02:53:57.777 00:05:04.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 02:58:09.829 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 02:58:09.926 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 02:58:39.626 00:00:10.361 TCP 23.104.0.1:34568 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 491896, total packets: 1562, avg bps: 1096, avg pps: 0, avg bpp: 314 Time window: 2025-11-16 01:59:13 - 2025-11-16 02:59:02 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0043s User: 0.0009s Wall: 0.0013s flows/second: 121476.8 Runtime: 0.0014s