Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 19:59:23.712 00:00:10.329 TCP 23.104.0.1:59844 -> 1.101.0.1:3000 11 1507 1 2025-11-16 19:59:27.401 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54128 10 6452 1 2025-11-16 20:00:24.097 00:00:10.363 TCP 23.104.0.1:50790 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:00:27.573 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:50256 10 6452 1 2025-11-16 20:01:24.501 00:00:10.364 TCP 23.104.0.1:54586 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:01:27.754 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48076 10 6452 1 2025-11-16 20:02:24.908 00:00:10.375 TCP 23.104.0.1:55800 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:02:27.962 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38974 10 6452 1 2025-11-16 20:03:30.398 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 20:03:30.381 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 20:03:25.317 00:00:10.360 TCP 23.104.0.1:58008 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:03:28.188 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35388 10 6452 1 2025-11-16 19:59:02.964 00:05:55.316 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 19:59:58.272 00:05:04.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 20:04:25.717 00:00:10.376 TCP 23.104.0.1:40590 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:04:28.401 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34240 10 6452 1 2025-11-16 20:05:26.133 00:00:10.326 TCP 23.104.0.1:47614 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:05:28.611 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47058 10 6452 1 2025-11-16 20:06:26.501 00:00:11.017 TCP 23.104.0.1:59304 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:06:28.827 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35948 10 6452 1 2025-11-16 20:07:28.997 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:32854 10 6452 1 2025-11-16 20:07:27.555 00:00:10.369 TCP 23.104.0.1:60016 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:08:30.716 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 20:08:30.438 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 20:08:29.218 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59386 10 6452 1 2025-11-16 20:08:27.953 00:00:10.897 TCP 23.104.0.1:39192 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:09:28.887 00:00:10.344 TCP 23.104.0.1:58472 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:09:29.437 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38662 10 6452 1 2025-11-16 20:05:02.965 00:05:55.316 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 20:05:58.290 00:05:04.672 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 20:10:29.653 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44784 10 6452 1 2025-11-16 20:10:29.267 00:00:10.327 TCP 23.104.0.1:45576 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:11:29.874 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37248 10 6452 1 2025-11-16 20:11:29.636 00:00:10.361 TCP 23.104.0.1:54848 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:12:30.035 00:00:10.364 TCP 23.104.0.1:47326 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:12:30.109 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52954 10 6452 1 2025-11-16 20:13:30.779 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 20:13:30.674 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 20:13:30.438 00:00:10.364 TCP 23.104.0.1:33118 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:13:30.281 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56646 10 6452 1 2025-11-16 20:14:30.839 00:00:10.349 TCP 23.104.0.1:34046 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:14:30.504 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60106 10 6452 1 2025-11-16 20:15:31.227 00:00:10.365 TCP 23.104.0.1:38018 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:15:30.739 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53286 10 6452 1 2025-11-16 20:11:02.965 00:05:55.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 20:11:58.283 00:05:04.682 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 20:16:30.953 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:55120 10 6452 1 2025-11-16 20:16:31.635 00:00:10.380 TCP 23.104.0.1:47516 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:17:31.203 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36978 10 6452 1 2025-11-16 20:17:32.079 00:00:10.384 TCP 23.104.0.1:43732 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:18:30.696 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 20:18:30.771 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 20:18:31.424 00:00:10.486 TCP 1.101.0.1:3000 -> 22.102.0.1:42190 10 6452 1 2025-11-16 20:18:32.519 00:00:10.364 TCP 23.104.0.1:34998 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:19:32.922 00:00:10.373 TCP 23.104.0.1:35654 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:19:31.946 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:47280 10 6452 1 2025-11-16 20:20:32.192 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39012 10 6452 1 2025-11-16 20:20:33.345 00:00:10.368 TCP 23.104.0.1:37538 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:21:32.417 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47022 10 6452 1 2025-11-16 20:21:33.749 00:00:10.382 TCP 23.104.0.1:57134 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:17:02.966 00:05:55.319 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 20:17:58.285 00:05:04.681 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 20:22:32.636 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33600 10 6452 1 2025-11-16 20:22:34.171 00:00:10.726 TCP 23.104.0.1:51626 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:23:30.835 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 20:23:30.881 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 20:23:34.938 00:00:10.378 TCP 23.104.0.1:40848 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:23:32.883 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:55796 10 6452 1 2025-11-16 20:24:33.106 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41396 10 6452 1 2025-11-16 20:24:35.353 00:00:10.372 TCP 23.104.0.1:34504 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:25:35.774 00:00:10.333 TCP 23.104.0.1:35762 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:25:33.310 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46972 10 6452 1 2025-11-16 20:26:33.528 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60110 10 6452 1 2025-11-16 20:26:36.147 00:00:10.364 TCP 23.104.0.1:47232 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:27:36.551 00:00:10.371 TCP 23.104.0.1:33078 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:27:33.745 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48936 10 6452 1 2025-11-16 20:23:02.968 00:05:55.323 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 20:23:58.288 00:05:04.678 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 20:28:31.002 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 20:28:31.068 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 20:28:33.920 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43588 10 6452 1 2025-11-16 20:28:36.964 00:00:10.368 TCP 23.104.0.1:46360 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:29:34.139 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41810 10 6452 1 2025-11-16 20:29:37.370 00:00:10.324 TCP 23.104.0.1:44512 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:30:34.352 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38042 10 6452 1 2025-11-16 20:30:37.732 00:00:10.372 TCP 23.104.0.1:58776 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:31:34.563 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38798 10 6452 1 2025-11-16 20:31:38.141 00:00:10.361 TCP 23.104.0.1:48818 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:32:34.773 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54206 10 6452 1 2025-11-16 20:32:38.542 00:00:10.324 TCP 23.104.0.1:55060 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:33:31.133 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 20:33:30.921 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 20:33:34.989 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50808 10 6452 1 2025-11-16 20:33:38.908 00:00:10.367 TCP 23.104.0.1:35108 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:29:02.969 00:05:55.325 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 20:29:58.293 00:05:04.673 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 20:34:35.210 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44524 10 6452 1 2025-11-16 20:34:39.311 00:00:10.362 TCP 23.104.0.1:57084 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:35:35.418 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47486 10 6452 1 2025-11-16 20:35:39.712 00:00:10.364 TCP 23.104.0.1:50686 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:36:35.637 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:55876 10 6452 1 2025-11-16 20:36:40.117 00:00:10.365 TCP 23.104.0.1:46284 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:37:35.825 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39436 10 6452 1 2025-11-16 20:37:40.518 00:00:10.364 TCP 23.104.0.1:51184 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:38:31.268 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 20:38:31.224 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 20:38:36.038 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51310 10 6452 1 2025-11-16 20:38:40.922 00:00:10.386 TCP 23.104.0.1:44358 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:39:36.255 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57450 10 6452 1 2025-11-16 20:39:41.350 00:00:10.330 TCP 23.104.0.1:54932 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:35:02.970 00:05:55.325 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 20:35:58.295 00:05:04.673 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 20:40:36.504 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48512 10 6452 1 2025-11-16 20:40:41.718 00:00:10.380 TCP 23.104.0.1:35424 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:41:36.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51934 10 6452 1 2025-11-16 20:41:42.132 00:00:10.364 TCP 23.104.0.1:35692 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:42:36.884 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57304 10 6452 1 2025-11-16 20:42:42.534 00:00:10.378 TCP 23.104.0.1:50082 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:43:30.994 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 20:43:31.246 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 20:43:37.080 00:00:10.535 TCP 1.101.0.1:3000 -> 22.102.0.1:40524 10 6452 1 2025-11-16 20:43:42.977 00:00:10.820 TCP 23.104.0.1:36444 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:44:37.656 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44360 10 6452 1 2025-11-16 20:44:43.841 00:00:10.385 TCP 23.104.0.1:52154 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:45:37.879 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45036 10 6452 1 2025-11-16 20:45:44.268 00:00:10.366 TCP 23.104.0.1:37438 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:41:02.971 00:05:55.327 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 20:41:58.299 00:05:04.678 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 20:46:38.109 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39040 10 6452 1 2025-11-16 20:46:44.676 00:00:10.326 TCP 23.104.0.1:47530 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:47:38.324 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41730 10 6452 1 2025-11-16 20:47:45.058 00:00:10.366 TCP 23.104.0.1:53766 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:48:31.276 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 20:48:31.309 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 20:48:38.496 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50166 10 6452 1 2025-11-16 20:48:45.464 00:00:10.367 TCP 23.104.0.1:42006 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:49:38.676 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45872 10 6452 1 2025-11-16 20:49:45.882 00:00:10.393 TCP 23.104.0.1:59248 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:50:38.894 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35042 10 6452 1 2025-11-16 20:50:46.314 00:00:10.365 TCP 23.104.0.1:56070 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:51:39.117 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46150 10 6452 1 2025-11-16 20:47:02.978 00:05:55.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 20:51:46.716 00:00:10.332 TCP 23.104.0.1:40866 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:47:58.299 00:05:04.678 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 20:52:39.294 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48194 10 6452 1 2025-11-16 20:52:47.110 00:00:10.362 TCP 23.104.0.1:53060 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:53:33.023 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 20:53:32.956 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 20:53:39.475 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60820 10 6452 1 2025-11-16 20:53:47.512 00:00:10.365 TCP 23.104.0.1:47530 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:54:39.690 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46358 10 6452 1 2025-11-16 20:54:47.917 00:00:10.371 TCP 23.104.0.1:34446 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:55:39.905 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45102 10 6452 1 2025-11-16 20:55:48.324 00:00:10.368 TCP 23.104.0.1:38646 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:56:40.125 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41214 10 6452 1 2025-11-16 20:56:48.728 00:00:10.372 TCP 23.104.0.1:46106 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:57:40.343 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:60512 10 6452 1 2025-11-16 20:57:49.140 00:00:10.369 TCP 23.104.0.1:46522 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:53:02.980 00:05:55.321 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 20:53:58.302 00:05:04.678 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 20:58:31.554 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 20:58:31.580 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 20:58:40.598 00:00:10.560 TCP 1.101.0.1:3000 -> 22.102.0.1:48356 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1104, avg pps: 0, avg bpp: 318 Time window: 2025-11-16 19:59:02 - 2025-11-16 20:59:02 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0010s Wall: 0.0027s flows/second: 59274.5 Runtime: 0.0028s