Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 01:59:13.616 00:00:10.372 TCP 23.104.0.1:47494 -> 1.101.0.1:3000 11 1507 1 2025-11-13 01:59:30.550 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50980 10 6452 1 2025-11-13 02:00:14.024 00:00:10.382 TCP 23.104.0.1:44834 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:00:30.761 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34846 10 6452 1 2025-11-13 02:01:14.444 00:00:10.367 TCP 23.104.0.1:47874 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:01:30.941 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33756 10 6452 1 2025-11-13 02:01:42.036 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 02:01:42.146 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 02:02:14.851 00:00:10.384 TCP 23.104.0.1:50762 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:02:31.172 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59610 10 6452 1 2025-11-13 02:03:15.275 00:00:10.326 TCP 23.104.0.1:33970 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:03:31.387 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49964 10 6452 1 2025-11-13 01:59:56.373 00:05:03.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 01:59:56.376 00:05:03.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 02:04:15.645 00:00:10.364 TCP 23.104.0.1:47912 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:04:31.601 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45970 10 6452 1 2025-11-13 02:05:16.055 00:00:10.367 TCP 23.104.0.1:59786 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:05:31.778 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56648 10 6452 1 2025-11-13 02:06:16.458 00:00:10.325 TCP 23.104.0.1:50956 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:06:42.517 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 02:06:31.995 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34078 10 6452 1 2025-11-13 02:06:42.148 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 02:07:16.822 00:00:10.366 TCP 23.104.0.1:39518 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:07:32.173 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50712 10 6452 1 2025-11-13 02:08:17.227 00:00:11.047 TCP 23.104.0.1:33478 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:08:32.349 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56654 10 6452 1 2025-11-13 02:09:18.313 00:00:10.437 TCP 23.104.0.1:46772 -> 1.101.0.1:3000 15 1926 1 2025-11-13 02:09:32.562 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:45784 12 10369 1 2025-11-13 02:05:56.378 00:05:03.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 02:05:56.377 00:05:03.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 02:10:18.786 00:00:10.369 TCP 23.104.0.1:46238 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:10:32.803 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36538 10 6452 1 2025-11-13 02:11:19.188 00:00:10.371 TCP 23.104.0.1:43646 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:11:43.108 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 02:11:33.026 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:46630 10 6452 1 2025-11-13 02:11:43.135 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 02:12:19.596 00:00:10.325 TCP 23.104.0.1:34882 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:12:33.229 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59964 10 6452 1 2025-11-13 02:13:19.960 00:00:10.368 TCP 23.104.0.1:35066 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:13:33.448 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35332 10 6452 1 2025-11-13 02:14:20.367 00:00:10.368 TCP 23.104.0.1:48986 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:14:33.633 00:00:15.212 TCP 1.101.0.1:3000 -> 22.102.0.1:41954 10 6452 1 2025-11-13 02:15:20.765 00:00:10.379 TCP 23.104.0.1:48760 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:15:38.899 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39786 10 6452 1 2025-11-13 02:11:56.376 00:05:03.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 02:11:56.378 00:05:03.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 02:16:21.185 00:00:10.366 TCP 23.104.0.1:54952 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:16:43.179 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 02:16:42.714 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 02:16:39.127 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58674 10 6452 1 2025-11-13 02:17:21.589 00:00:10.359 TCP 23.104.0.1:40660 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:17:39.345 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42290 10 6452 1 2025-11-13 02:18:21.995 00:00:10.326 TCP 23.104.0.1:42456 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:18:39.568 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40768 10 6452 1 2025-11-13 02:19:22.363 00:00:10.342 TCP 23.104.0.1:57124 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:19:39.779 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39110 10 6452 1 2025-11-13 02:20:22.750 00:00:10.394 TCP 23.104.0.1:47392 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:20:40.001 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48066 10 6452 1 2025-11-13 02:21:23.183 00:00:10.368 TCP 23.104.0.1:36242 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:21:42.495 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 02:21:42.449 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 02:21:40.218 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41234 10 6452 1 2025-11-13 02:17:56.380 00:05:03.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 02:17:56.378 00:05:03.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 02:22:23.594 00:00:10.623 TCP 23.104.0.1:37704 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:22:40.437 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49240 10 6452 1 2025-11-13 02:23:24.253 00:00:10.367 TCP 23.104.0.1:59628 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:23:40.656 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49564 10 6452 1 2025-11-13 02:24:24.662 00:00:10.369 TCP 23.104.0.1:58150 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:24:40.870 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:60010 10 6452 1 2025-11-13 02:25:25.100 00:00:10.324 TCP 23.104.0.1:54576 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:25:41.106 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53162 10 6452 1 2025-11-13 02:26:25.463 00:00:10.366 TCP 23.104.0.1:56096 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:26:42.855 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 02:26:42.916 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 02:26:41.320 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39404 10 6452 1 2025-11-13 02:27:25.866 00:00:10.371 TCP 23.104.0.1:44198 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:27:41.531 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55036 10 6452 1 2025-11-13 02:23:56.389 00:05:03.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 02:23:56.386 00:05:03.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 02:28:26.277 00:00:10.370 TCP 23.104.0.1:42542 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:28:41.752 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42642 10 6452 1 2025-11-13 02:29:26.684 00:00:10.379 TCP 23.104.0.1:57104 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:29:41.962 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33428 10 6452 1 2025-11-13 02:30:27.104 00:00:10.366 TCP 23.104.0.1:35630 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:30:42.187 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57742 10 6452 1 2025-11-13 02:31:42.753 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 02:31:27.510 00:00:10.365 TCP 23.104.0.1:56234 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:31:42.630 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 02:31:42.365 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53708 10 6452 1 2025-11-13 02:32:27.914 00:00:11.008 TCP 23.104.0.1:52454 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:32:42.577 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38300 10 6452 1 2025-11-13 02:33:28.962 00:00:10.345 TCP 23.104.0.1:44918 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:33:42.790 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:55836 12 10375 1 2025-11-13 02:29:56.389 00:05:03.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 02:29:56.391 00:05:03.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 02:34:29.344 00:00:10.442 TCP 23.104.0.1:45526 -> 1.101.0.1:3000 15 1926 1 2025-11-13 02:34:43.049 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53030 10 6452 1 2025-11-13 02:35:29.821 00:00:10.366 TCP 23.104.0.1:58780 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:35:43.260 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38372 10 6452 1 2025-11-13 02:36:30.229 00:00:10.365 TCP 23.104.0.1:46760 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:36:42.941 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 02:36:42.955 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 02:36:43.477 00:00:10.358 TCP 1.101.0.1:3000 -> 22.102.0.1:48086 10 6452 1 2025-11-13 02:37:30.629 00:00:10.365 TCP 23.104.0.1:39710 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:37:43.882 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34800 10 6452 1 2025-11-13 02:38:31.036 00:00:10.370 TCP 23.104.0.1:50198 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:38:44.110 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:38826 10 6452 1 2025-11-13 02:39:31.447 00:00:10.320 TCP 23.104.0.1:45404 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:39:44.296 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41898 10 6452 1 2025-11-13 02:35:56.392 00:05:03.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 02:35:56.390 00:05:03.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 02:40:44.507 00:00:14.107 TCP 1.101.0.1:3000 -> 22.102.0.1:53382 10 6452 1 2025-11-13 02:40:31.809 00:00:26.801 TCP 23.104.0.1:53722 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:41:42.939 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 02:41:42.890 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 02:41:48.655 00:00:10.364 TCP 23.104.0.1:57750 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:41:48.656 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37122 10 6452 1 2025-11-13 02:42:48.874 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45496 10 6452 1 2025-11-13 02:42:49.057 00:00:10.369 TCP 23.104.0.1:49386 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:43:49.465 00:00:10.360 TCP 23.104.0.1:55576 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:43:49.100 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46358 10 6452 1 2025-11-13 02:44:49.328 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60900 10 6452 1 2025-11-13 02:44:49.866 00:00:10.737 TCP 23.104.0.1:46384 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:41:56.392 00:05:03.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 02:45:50.644 00:00:10.366 TCP 23.104.0.1:45910 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:41:56.392 00:05:03.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 02:45:49.508 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40654 10 6452 1 2025-11-13 02:46:42.967 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 02:46:43.028 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 02:46:51.061 00:00:10.361 TCP 23.104.0.1:41264 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:46:49.724 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51312 10 6452 1 2025-11-13 02:47:51.467 00:00:10.365 TCP 23.104.0.1:60536 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:47:49.941 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:41846 10 6452 1 2025-11-13 02:48:50.185 00:00:10.829 TCP 1.101.0.1:3000 -> 22.102.0.1:56042 10 6452 1 2025-11-13 02:48:51.876 00:00:10.364 TCP 23.104.0.1:35206 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:49:51.078 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52788 10 6452 1 2025-11-13 02:49:52.275 00:00:10.367 TCP 23.104.0.1:33184 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:50:51.292 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47962 10 6452 1 2025-11-13 02:50:52.691 00:00:10.369 TCP 23.104.0.1:38778 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:51:43.203 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 02:51:43.105 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 02:51:51.512 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54420 10 6452 1 2025-11-13 02:47:56.392 00:05:03.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 02:47:56.395 00:05:03.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 02:51:53.107 00:00:10.364 TCP 23.104.0.1:47496 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:52:51.729 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44176 10 6452 1 2025-11-13 02:52:53.512 00:00:10.326 TCP 23.104.0.1:55736 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:53:53.876 00:00:10.363 TCP 23.104.0.1:54210 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:53:51.947 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48298 10 6452 1 2025-11-13 02:54:54.285 00:00:10.365 TCP 23.104.0.1:55974 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:54:52.181 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33236 10 6452 1 2025-11-13 02:55:54.688 00:00:10.371 TCP 23.104.0.1:39832 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:55:52.393 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40292 10 6452 1 2025-11-13 02:56:43.486 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 02:56:43.493 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 02:56:55.105 00:00:10.363 TCP 23.104.0.1:36910 -> 1.101.0.1:3000 11 1507 1 2025-11-13 02:56:52.621 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57224 10 6452 1 2025-11-13 02:53:56.393 00:05:03.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 02:57:52.841 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34232 10 6452 1 2025-11-13 02:53:56.395 00:05:03.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 02:57:55.511 00:00:10.366 TCP 23.104.0.1:56540 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499067, total packets: 1563, avg bps: 1113, avg pps: 0, avg bpp: 319 Time window: 2025-11-13 01:59:13 - 2025-11-13 02:59:00 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0031s User: 0.0031s Wall: 0.0024s flows/second: 68179.5 Runtime: 0.0024s