Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 23:59:03.506 00:00:10.378 TCP 23.104.0.1:49502 -> 1.101.0.1:3000 11 1507 1 2025-11-16 23:59:38.452 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44980 10 6452 1 2025-11-17 00:00:03.917 00:00:12.664 TCP 23.104.0.1:58840 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:00:38.668 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47084 10 6452 1 2025-11-17 00:01:06.618 00:00:10.363 TCP 23.104.0.1:56078 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:01:38.886 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60328 10 6452 1 2025-11-17 00:02:07.016 00:00:10.361 TCP 23.104.0.1:35454 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:02:39.114 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33316 10 6452 1 2025-11-16 23:58:58.368 00:05:04.774 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 00:03:07.414 00:00:10.367 TCP 23.104.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:03:35.297 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 00:03:35.278 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 00:03:39.328 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36782 10 6452 1 2025-11-16 23:59:58.370 00:05:04.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 00:04:07.818 00:00:10.371 TCP 23.104.0.1:49606 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:04:39.546 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36910 10 6452 1 2025-11-17 00:05:08.227 00:00:10.369 TCP 23.104.0.1:35474 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:05:39.765 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55262 10 6452 1 2025-11-17 00:06:08.634 00:00:10.364 TCP 23.104.0.1:60850 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:06:39.935 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48922 10 6452 1 2025-11-17 00:07:09.038 00:00:10.366 TCP 23.104.0.1:57084 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:07:40.177 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46984 10 6452 1 2025-11-17 00:08:09.440 00:00:10.361 TCP 23.104.0.1:46374 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:08:36.198 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 00:08:36.041 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 00:08:40.392 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44142 10 6452 1 2025-11-17 00:04:58.368 00:05:04.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 00:09:09.836 00:00:10.339 TCP 23.104.0.1:58280 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:09:40.613 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60432 10 6452 1 2025-11-17 00:05:58.370 00:05:04.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 00:10:10.213 00:00:10.366 TCP 23.104.0.1:39106 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:10:40.789 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38110 10 6452 1 2025-11-17 00:11:10.616 00:00:10.376 TCP 23.104.0.1:33346 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:11:41.013 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55722 10 6452 1 2025-11-17 00:12:11.050 00:00:10.365 TCP 23.104.0.1:56542 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:12:41.238 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58904 10 6452 1 2025-11-17 00:13:11.461 00:00:10.380 TCP 23.104.0.1:36992 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:13:35.550 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 00:13:35.561 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 00:13:41.467 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-11-17 00:14:11.893 00:00:10.369 TCP 23.104.0.1:33848 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:14:41.686 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60644 10 6452 1 2025-11-17 00:10:58.369 00:05:04.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 00:15:12.301 00:00:10.414 TCP 23.104.0.1:52350 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:15:41.907 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54412 10 6452 1 2025-11-17 00:11:58.372 00:05:04.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 00:16:12.760 00:00:10.388 TCP 23.104.0.1:48334 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:16:42.128 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34420 10 6452 1 2025-11-17 00:17:13.182 00:00:10.325 TCP 23.104.0.1:51664 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:17:42.340 00:00:10.356 TCP 1.101.0.1:3000 -> 22.102.0.1:56358 10 6452 1 2025-11-17 00:18:13.542 00:00:10.361 TCP 23.104.0.1:37968 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:18:35.501 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 00:18:35.475 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 00:18:42.734 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39626 10 6452 1 2025-11-17 00:19:13.937 00:00:10.337 TCP 23.104.0.1:42608 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:19:42.946 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49120 10 6452 1 2025-11-17 00:20:14.312 00:00:10.323 TCP 23.104.0.1:38914 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:20:43.179 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39484 10 6452 1 2025-11-17 00:16:58.372 00:05:04.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 00:21:14.676 00:00:10.317 TCP 23.104.0.1:60720 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:21:43.387 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51058 12 10369 1 2025-11-17 00:17:58.373 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 00:22:15.033 00:00:10.438 TCP 23.104.0.1:34172 -> 1.101.0.1:3000 15 1926 1 2025-11-17 00:22:43.629 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40020 10 6452 1 2025-11-17 00:23:15.511 00:00:10.329 TCP 23.104.0.1:36234 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:23:35.629 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 00:23:35.697 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 00:23:43.800 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54020 10 6452 1 2025-11-17 00:24:15.878 00:00:10.399 TCP 23.104.0.1:60192 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:24:44.037 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50760 10 6452 1 2025-11-17 00:25:16.306 00:00:10.364 TCP 23.104.0.1:56448 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:25:44.258 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57582 10 6452 1 2025-11-17 00:26:16.708 00:00:10.361 TCP 23.104.0.1:34104 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:26:44.467 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40912 10 6452 1 2025-11-17 00:22:58.371 00:05:04.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 00:27:17.110 00:00:10.376 TCP 23.104.0.1:57200 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:27:44.687 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57020 10 6452 1 2025-11-17 00:23:58.374 00:05:04.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 00:28:17.524 00:00:10.366 TCP 23.104.0.1:48624 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:28:36.190 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 00:28:36.138 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 00:28:44.901 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58878 10 6452 1 2025-11-17 00:29:17.932 00:00:10.376 TCP 23.104.0.1:44256 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:29:45.120 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53930 10 6452 1 2025-11-17 00:30:18.350 00:00:10.361 TCP 23.104.0.1:49346 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:30:45.339 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39472 10 6452 1 2025-11-17 00:31:18.755 00:00:10.343 TCP 23.104.0.1:35102 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:31:45.562 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49504 10 6452 1 2025-11-17 00:32:19.137 00:00:10.372 TCP 23.104.0.1:46738 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:32:45.774 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46290 10 6452 1 2025-11-17 00:28:58.372 00:05:04.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 00:33:19.543 00:00:10.364 TCP 23.104.0.1:49328 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:33:35.971 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 00:33:35.844 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 00:33:46.005 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56668 10 6452 1 2025-11-17 00:29:58.375 00:05:04.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 00:34:19.940 00:00:11.045 TCP 23.104.0.1:37142 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:34:46.224 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37302 10 6452 1 2025-11-17 00:35:21.028 00:00:10.371 TCP 23.104.0.1:46034 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:35:46.446 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54860 10 6452 1 2025-11-17 00:36:21.434 00:00:10.373 TCP 23.104.0.1:34884 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:36:46.662 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51564 10 6452 1 2025-11-17 00:37:21.845 00:00:10.389 TCP 23.104.0.1:43160 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:37:46.886 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41742 10 6452 1 2025-11-17 00:38:35.979 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 00:38:22.269 00:00:10.872 TCP 23.104.0.1:45852 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:38:35.895 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 00:38:47.126 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58240 10 6452 1 2025-11-17 00:34:58.374 00:05:04.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 00:39:23.176 00:00:10.366 TCP 23.104.0.1:57008 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:39:47.347 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47840 10 6452 1 2025-11-17 00:35:58.376 00:05:04.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 00:40:23.579 00:00:10.377 TCP 23.104.0.1:59354 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:40:47.565 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36662 10 6452 1 2025-11-17 00:41:23.996 00:00:10.360 TCP 23.104.0.1:59026 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:41:47.734 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42966 10 6452 1 2025-11-17 00:42:24.395 00:00:10.373 TCP 23.104.0.1:52636 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:42:47.960 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50870 12 6556 1 2025-11-17 00:43:36.102 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 00:43:24.805 00:00:10.336 TCP 23.104.0.1:40830 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:43:35.963 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 00:43:48.183 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47584 10 6452 1 2025-11-17 00:44:25.180 00:00:10.385 TCP 23.104.0.1:45238 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:44:48.395 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:47056 10 6452 1 2025-11-17 00:40:58.374 00:05:04.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 00:45:25.614 00:00:10.365 TCP 23.104.0.1:45218 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:45:48.575 00:00:10.250 TCP 1.101.0.1:3000 -> 22.102.0.1:44848 10 6452 1 2025-11-17 00:41:58.377 00:05:04.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 00:46:26.014 00:00:10.370 TCP 23.104.0.1:54500 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:46:48.865 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35036 10 6452 1 2025-11-17 00:47:26.423 00:00:10.331 TCP 23.104.0.1:50860 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:47:49.094 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50888 10 6452 1 2025-11-17 00:48:36.241 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 00:48:36.356 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 00:48:26.794 00:00:10.346 TCP 23.104.0.1:44644 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:48:49.265 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45660 10 6452 1 2025-11-17 00:49:27.185 00:00:10.362 TCP 23.104.0.1:53288 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:49:49.478 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46876 10 6452 1 2025-11-17 00:50:27.588 00:00:10.374 TCP 23.104.0.1:33488 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:50:49.697 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57392 10 6452 1 2025-11-17 00:46:58.380 00:05:04.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 00:51:28.006 00:00:10.320 TCP 23.104.0.1:53000 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:51:49.908 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46484 10 6452 1 2025-11-17 00:47:58.387 00:05:04.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 00:52:28.365 00:00:10.361 TCP 23.104.0.1:48580 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:52:50.123 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50414 10 6452 1 2025-11-17 00:53:36.772 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 00:53:36.768 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 00:53:28.762 00:00:10.366 TCP 23.104.0.1:58686 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:53:50.341 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40230 10 6452 1 2025-11-17 00:54:29.166 00:00:10.368 TCP 23.104.0.1:51324 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:54:50.555 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48386 10 6452 1 2025-11-17 00:55:29.569 00:00:10.362 TCP 23.104.0.1:33664 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:55:50.772 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35586 10 6452 1 2025-11-17 00:56:29.968 00:00:10.491 TCP 23.104.0.1:33170 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:56:50.983 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:43828 10 6452 1 2025-11-17 00:52:58.385 00:05:04.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 00:57:30.494 00:00:10.376 TCP 23.104.0.1:58224 -> 1.101.0.1:3000 11 1507 1 2025-11-17 00:57:51.182 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41642 10 6452 1 2025-11-17 00:53:58.389 00:05:04.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 00:58:36.217 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 00:58:36.275 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 00:58:30.902 00:00:10.372 TCP 23.104.0.1:43614 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496336, total packets: 1570, avg bps: 1101, avg pps: 0, avg bpp: 316 Time window: 2025-11-16 23:58:58 - 2025-11-17 00:59:03 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0051s User: 0.0010s Wall: 0.0030s flows/second: 55010.6 Runtime: 0.0030s