Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 00:58:48.347 00:00:10.320 TCP 23.104.0.1:60932 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:59:04.292 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43096 10 6452 1 2025-11-13 00:59:48.707 00:00:10.342 TCP 23.104.0.1:38220 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:00:04.504 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48522 10 6452 1 2025-11-13 01:00:49.101 00:00:10.337 TCP 23.104.0.1:35366 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:01:04.712 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58988 10 6452 1 2025-11-13 01:01:41.219 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 01:01:41.126 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 01:01:49.487 00:00:10.368 TCP 23.104.0.1:55524 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:02:04.923 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39822 10 6452 1 2025-11-13 01:02:49.891 00:00:10.331 TCP 23.104.0.1:43118 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:03:05.133 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53880 10 6452 1 2025-11-13 01:03:50.262 00:00:10.367 TCP 23.104.0.1:39036 -> 1.101.0.1:3000 11 1507 1 2025-11-13 00:59:56.353 00:05:03.987 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 00:59:56.352 00:05:03.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 01:04:05.342 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:40388 10 6452 1 2025-11-13 01:04:50.663 00:00:10.368 TCP 23.104.0.1:38362 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:05:05.515 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39802 10 6452 1 2025-11-13 01:05:51.100 00:00:10.365 TCP 23.104.0.1:36840 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:06:05.721 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:54692 11 6504 1 2025-11-13 01:06:41.064 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 01:06:41.064 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 01:06:51.507 00:00:10.365 TCP 23.104.0.1:51264 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:07:05.991 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48084 10 6452 1 2025-11-13 01:07:51.914 00:00:10.367 TCP 23.104.0.1:55674 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:08:06.219 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54376 10 6452 1 2025-11-13 01:08:52.313 00:00:10.326 TCP 23.104.0.1:52334 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:09:06.445 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:37440 10 6452 1 2025-11-13 01:05:56.356 00:05:03.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 01:05:56.357 00:05:03.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 01:09:52.672 00:00:10.371 TCP 23.104.0.1:42856 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:10:06.655 00:00:10.922 TCP 1.101.0.1:3000 -> 22.102.0.1:39176 10 6452 1 2025-11-13 01:10:53.103 00:00:10.341 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:11:07.615 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57240 10 6452 1 2025-11-13 01:11:41.428 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 01:11:41.727 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 01:11:53.484 00:00:10.366 TCP 23.104.0.1:52854 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:12:07.827 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57586 10 6452 1 2025-11-13 01:12:53.887 00:00:10.381 TCP 23.104.0.1:47684 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:13:08.046 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:39910 10 6452 1 2025-11-13 01:13:54.309 00:00:10.440 TCP 23.104.0.1:56684 -> 1.101.0.1:3000 15 1926 1 2025-11-13 01:14:08.237 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:46428 13 13949 1 2025-11-13 01:14:54.785 00:00:10.368 TCP 23.104.0.1:58062 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:15:08.488 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51208 10 6452 1 2025-11-13 01:11:56.356 00:05:03.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 01:11:56.359 00:05:03.994 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 01:15:55.191 00:00:10.321 TCP 23.104.0.1:41336 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:16:08.665 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53976 10 6452 1 2025-11-13 01:16:41.305 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 01:16:41.239 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 01:16:55.554 00:00:10.369 TCP 23.104.0.1:53660 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:17:08.875 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:37360 10 6452 1 2025-11-13 01:17:55.958 00:00:10.369 TCP 23.104.0.1:60228 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:18:09.085 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52510 10 6452 1 2025-11-13 01:18:56.367 00:00:10.366 TCP 23.104.0.1:40608 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:19:09.296 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47648 10 6452 1 2025-11-13 01:19:56.771 00:00:10.947 TCP 23.104.0.1:37848 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:20:09.528 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57200 10 6452 1 2025-11-13 01:20:57.753 00:00:10.376 TCP 23.104.0.1:54638 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:21:09.739 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49004 10 6452 1 2025-11-13 01:21:41.480 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 01:21:41.461 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 01:17:56.360 00:05:03.993 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 01:17:56.358 00:05:03.999 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 01:21:58.163 00:00:10.362 TCP 23.104.0.1:57118 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:22:09.960 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35456 10 6452 1 2025-11-13 01:22:58.565 00:00:10.371 TCP 23.104.0.1:38472 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:23:10.175 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37884 10 6452 1 2025-11-13 01:23:58.967 00:00:10.369 TCP 23.104.0.1:44044 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:24:10.391 00:00:10.315 TCP 1.101.0.1:3000 -> 22.102.0.1:52166 10 6452 1 2025-11-13 01:24:59.378 00:00:10.380 TCP 23.104.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:25:10.740 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37296 10 6452 1 2025-11-13 01:25:59.803 00:00:10.357 TCP 23.104.0.1:60720 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:26:10.949 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:32846 10 6452 1 2025-11-13 01:26:41.367 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 01:26:41.584 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 01:27:00.204 00:00:10.367 TCP 23.104.0.1:35710 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:27:11.184 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40776 10 6452 1 2025-11-13 01:23:56.360 00:05:03.998 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 01:23:56.358 00:05:04.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 01:28:00.608 00:00:10.371 TCP 23.104.0.1:36736 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:28:11.395 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41678 10 6452 1 2025-11-13 01:29:01.017 00:00:10.365 TCP 23.104.0.1:38462 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:29:11.614 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57114 10 6452 1 2025-11-13 01:30:01.418 00:00:10.369 TCP 23.104.0.1:49032 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:30:11.824 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40072 10 6452 1 2025-11-13 01:31:01.826 00:00:10.376 TCP 23.104.0.1:36054 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:31:12.059 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48650 10 6452 1 2025-11-13 01:31:41.620 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 01:31:41.359 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 01:32:02.244 00:00:10.329 TCP 23.104.0.1:49486 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:32:12.273 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51064 10 6452 1 2025-11-13 01:33:02.610 00:00:10.363 TCP 23.104.0.1:36566 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:33:12.448 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39468 10 6452 1 2025-11-13 01:29:56.358 00:05:04.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 01:29:56.362 00:05:03.997 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 01:34:03.014 00:00:10.364 TCP 23.104.0.1:39206 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:34:12.674 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50024 10 6452 1 2025-11-13 01:35:03.416 00:00:10.327 TCP 23.104.0.1:59952 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:35:12.890 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58926 10 6452 1 2025-11-13 01:36:03.777 00:00:10.366 TCP 23.104.0.1:52146 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:36:13.122 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46606 10 6452 1 2025-11-13 01:36:41.754 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 01:36:41.621 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 01:37:04.180 00:00:10.372 TCP 23.104.0.1:35482 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:37:13.346 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60340 10 6452 1 2025-11-13 01:38:04.588 00:00:10.364 TCP 23.104.0.1:52370 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:38:13.558 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58500 10 6452 1 2025-11-13 01:39:04.990 00:00:10.323 TCP 23.104.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:39:13.776 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38622 10 6452 1 2025-11-13 01:35:56.362 00:05:04.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 01:35:56.364 00:05:03.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 01:40:05.361 00:00:10.361 TCP 23.104.0.1:52736 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:40:14.003 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46212 10 6452 1 2025-11-13 01:41:05.760 00:00:10.382 TCP 23.104.0.1:34216 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:41:14.217 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59582 10 6452 1 2025-11-13 01:41:41.788 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 01:41:41.893 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 01:42:06.191 00:00:10.363 TCP 23.104.0.1:40362 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:42:14.433 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60146 10 6452 1 2025-11-13 01:43:06.594 00:00:10.378 TCP 23.104.0.1:58052 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:43:14.656 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54416 10 6452 1 2025-11-13 01:44:07.015 00:00:10.320 TCP 23.104.0.1:45970 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:44:14.874 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36220 10 6452 1 2025-11-13 01:45:07.382 00:00:10.365 TCP 23.104.0.1:48842 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:45:15.092 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52328 10 6452 1 2025-11-13 01:41:56.363 00:05:04.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 01:41:56.365 00:05:03.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 01:46:07.785 00:00:10.891 TCP 23.104.0.1:52336 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:46:15.306 00:00:10.919 TCP 1.101.0.1:3000 -> 22.102.0.1:33562 10 6452 1 2025-11-13 01:46:41.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 01:46:42.008 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 01:47:08.714 00:00:10.361 TCP 23.104.0.1:55250 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:47:16.268 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38246 10 6452 1 2025-11-13 01:48:09.111 00:00:10.442 TCP 23.104.0.1:39258 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:48:16.483 00:00:22.058 TCP 1.101.0.1:3000 -> 22.102.0.1:42166 10 6452 1 2025-11-13 01:49:09.605 00:00:10.366 TCP 23.104.0.1:47574 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:49:28.584 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40228 10 6452 1 2025-11-13 01:50:10.012 00:00:10.364 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:50:28.801 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42430 10 6452 1 2025-11-13 01:51:10.414 00:00:10.364 TCP 23.104.0.1:45804 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:51:29.016 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34488 10 6452 1 2025-11-13 01:51:42.154 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 01:51:42.040 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 01:47:56.370 00:05:03.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 01:47:56.373 00:05:03.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 01:52:10.818 00:00:10.363 TCP 23.104.0.1:55704 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:52:29.220 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:57768 10 6452 1 2025-11-13 01:53:11.221 00:00:10.323 TCP 23.104.0.1:33092 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:53:29.401 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50382 10 6452 1 2025-11-13 01:54:11.583 00:00:10.363 TCP 23.104.0.1:59968 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:54:29.571 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33172 10 6452 1 2025-11-13 01:55:11.983 00:00:10.371 TCP 23.104.0.1:39314 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:55:29.740 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51442 10 6452 1 2025-11-13 01:56:12.423 00:00:10.328 TCP 23.104.0.1:33152 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:56:29.922 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54428 10 6452 1 2025-11-13 01:56:42.571 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 01:56:42.308 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 01:57:12.789 00:00:10.375 TCP 23.104.0.1:41302 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:57:30.131 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57502 10 6452 1 2025-11-13 01:53:56.373 00:05:03.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 01:53:56.375 00:05:03.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 01:58:13.206 00:00:10.365 TCP 23.104.0.1:53092 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:58:30.344 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49654 10 6452 1 Summary: total flows: 164, total bytes: 506316, total packets: 1580, avg bps: 1121, avg pps: 0, avg bpp: 320 Time window: 2025-11-13 00:58:48 - 2025-11-13 01:59:00 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0023s User: 0.0023s Wall: 0.0020s flows/second: 80471.0 Runtime: 0.0020s