Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 04:58:52.926 00:00:10.397 TCP 23.104.0.1:53778 -> 1.101.0.1:3000 11 1507 1 2025-11-13 04:59:27.754 00:00:10.255 TCP 1.101.0.1:3000 -> 22.102.0.1:42292 10 6452 1 2025-11-13 04:59:53.366 00:00:10.368 TCP 23.104.0.1:55104 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:00:28.080 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36778 10 6452 1 2025-11-13 05:00:53.773 00:00:10.366 TCP 23.104.0.1:45598 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:01:28.242 00:00:10.467 TCP 1.101.0.1:3000 -> 22.102.0.1:46916 10 6452 1 2025-11-13 05:01:45.764 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 05:01:45.660 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 05:01:54.179 00:00:10.363 TCP 23.104.0.1:58930 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:02:28.759 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33344 10 6452 1 2025-11-13 05:02:54.584 00:00:10.364 TCP 23.104.0.1:57118 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:03:28.977 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:48202 10 6452 1 2025-11-13 04:59:56.424 00:05:04.047 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 04:59:56.426 00:05:04.042 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 05:03:54.989 00:00:10.369 TCP 23.104.0.1:50906 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:04:29.217 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52088 10 6452 1 2025-11-13 05:04:55.396 00:00:10.380 TCP 23.104.0.1:57648 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:05:29.434 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50604 10 6452 1 2025-11-13 05:05:55.815 00:00:10.367 TCP 23.104.0.1:53404 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:06:29.647 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54972 10 6452 1 2025-11-13 05:06:46.061 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 05:06:46.008 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 05:06:56.218 00:00:10.367 TCP 23.104.0.1:36602 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:07:29.867 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51656 10 6452 1 2025-11-13 05:07:56.623 00:00:10.362 TCP 23.104.0.1:57052 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:08:30.084 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:33738 10 6452 1 2025-11-13 05:08:57.024 00:00:10.365 TCP 23.104.0.1:53850 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:09:30.254 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36990 10 6452 1 2025-11-13 05:05:56.426 00:05:04.046 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 05:05:56.429 00:05:04.041 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 05:09:57.429 00:00:10.368 TCP 23.104.0.1:33684 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:10:30.468 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48926 10 6452 1 2025-11-13 05:10:57.841 00:00:10.388 TCP 23.104.0.1:32948 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:11:30.689 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:49742 10 6452 1 2025-11-13 05:11:45.945 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 05:11:46.303 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 05:11:58.267 00:00:10.365 TCP 23.104.0.1:58026 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:12:30.869 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:43230 10 6452 1 2025-11-13 05:12:58.664 00:00:10.366 TCP 23.104.0.1:51548 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:13:31.103 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54230 10 6452 1 2025-11-13 05:13:59.088 00:00:10.362 TCP 23.104.0.1:54306 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:14:31.317 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52240 10 6452 1 2025-11-13 05:14:59.487 00:00:10.324 TCP 23.104.0.1:33226 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:15:31.485 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52400 10 6452 1 2025-11-13 05:11:56.431 00:05:04.041 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 05:11:56.428 00:05:04.046 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 05:15:59.845 00:00:10.383 TCP 23.104.0.1:47486 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:16:31.701 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42184 10 6452 1 2025-11-13 05:16:45.928 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 05:16:46.236 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 05:17:00.265 00:00:10.362 TCP 23.104.0.1:39626 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:17:31.926 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:53240 10 6452 1 2025-11-13 05:18:00.667 00:00:10.362 TCP 23.104.0.1:55068 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:18:32.172 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57248 10 6452 1 2025-11-13 05:19:01.103 00:00:10.394 TCP 23.104.0.1:53196 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:19:32.383 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52694 10 6452 1 2025-11-13 05:20:01.535 00:00:10.366 TCP 23.104.0.1:51318 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:20:32.623 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38622 10 6452 1 2025-11-13 05:21:01.938 00:00:10.343 TCP 23.104.0.1:49008 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:21:46.278 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 05:21:32.833 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58414 10 6452 1 2025-11-13 05:21:46.209 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 05:17:56.432 00:05:04.041 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 05:17:56.430 00:05:04.046 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 05:22:02.318 00:00:10.372 TCP 23.104.0.1:56192 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:22:33.073 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:32864 10 6452 1 2025-11-13 05:23:02.735 00:00:10.327 TCP 23.104.0.1:52782 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:23:33.296 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34858 10 6452 1 2025-11-13 05:24:03.105 00:00:10.328 TCP 23.104.0.1:57150 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:24:33.515 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33488 10 6452 1 2025-11-13 05:25:03.470 00:00:10.369 TCP 23.104.0.1:51256 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:25:33.688 00:00:14.761 TCP 1.101.0.1:3000 -> 22.102.0.1:45990 10 6452 1 2025-11-13 05:26:03.876 00:00:10.369 TCP 23.104.0.1:50886 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:26:47.088 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 05:26:47.219 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 05:26:38.496 00:00:16.260 TCP 1.101.0.1:3000 -> 22.102.0.1:46838 10 6452 1 2025-11-13 05:27:04.282 00:00:10.371 TCP 23.104.0.1:59656 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:27:44.806 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34558 10 6452 1 2025-11-13 05:23:56.430 00:05:04.044 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 05:23:56.428 00:05:04.048 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 05:28:04.687 00:00:10.362 TCP 23.104.0.1:55230 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:28:45.029 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47910 10 6452 1 2025-11-13 05:29:05.102 00:00:10.364 TCP 23.104.0.1:57124 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:29:45.253 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-11-13 05:30:05.504 00:00:10.370 TCP 23.104.0.1:35306 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:30:45.467 00:00:10.395 TCP 1.101.0.1:3000 -> 22.102.0.1:53124 10 6452 1 2025-11-13 05:31:05.912 00:00:10.322 TCP 23.104.0.1:49350 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:31:46.432 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 05:31:46.372 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 05:31:45.897 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53140 10 6452 1 2025-11-13 05:32:06.273 00:00:10.361 TCP 23.104.0.1:41734 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:32:46.114 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58446 10 6452 1 2025-11-13 05:33:06.671 00:00:10.386 TCP 23.104.0.1:37158 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:29:56.433 00:05:04.047 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 05:33:46.319 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41670 10 6452 1 2025-11-13 05:29:56.429 00:05:04.052 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 05:34:07.099 00:00:10.439 TCP 23.104.0.1:39192 -> 1.101.0.1:3000 15 1926 1 2025-11-13 05:34:46.544 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58594 12 10375 1 2025-11-13 05:35:07.579 00:00:10.330 TCP 23.104.0.1:51010 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:35:46.784 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51206 10 6452 1 2025-11-13 05:36:07.943 00:00:10.378 TCP 23.104.0.1:50480 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:36:46.546 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 05:36:46.383 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 05:36:46.996 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51700 10 6452 1 2025-11-13 05:37:08.358 00:00:10.374 TCP 23.104.0.1:47326 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:37:47.211 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51102 10 6452 1 2025-11-13 05:38:08.767 00:00:10.329 TCP 23.104.0.1:35564 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:38:47.434 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35544 10 6452 1 2025-11-13 05:39:09.137 00:00:10.368 TCP 23.104.0.1:35172 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:35:56.433 00:05:04.047 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 05:39:47.655 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 10 6452 1 2025-11-13 05:35:56.429 00:05:04.053 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 05:40:09.540 00:00:10.367 TCP 23.104.0.1:39090 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:40:47.874 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56406 10 6452 1 2025-11-13 05:41:09.940 00:00:10.423 TCP 23.104.0.1:40458 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:41:46.922 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 05:41:46.664 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 05:41:48.111 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51634 10 6452 1 2025-11-13 05:42:10.400 00:00:10.576 TCP 23.104.0.1:58350 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:42:48.331 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54886 10 6452 1 2025-11-13 05:43:11.016 00:00:10.368 TCP 23.104.0.1:52546 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:43:48.548 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:34398 10 6452 1 2025-11-13 05:44:11.420 00:00:10.370 TCP 23.104.0.1:35186 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:44:48.791 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33882 10 6452 1 2025-11-13 05:45:11.823 00:00:10.364 TCP 23.104.0.1:40554 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:41:56.433 00:05:04.051 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 05:45:49.005 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46832 10 6452 1 2025-11-13 05:41:56.436 00:05:04.046 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 05:46:12.233 00:00:10.362 TCP 23.104.0.1:34702 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:46:46.563 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 05:46:46.681 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 05:46:49.222 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48532 10 6452 1 2025-11-13 05:47:12.640 00:00:10.363 TCP 23.104.0.1:36048 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:47:49.439 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55566 10 6452 1 2025-11-13 05:48:13.035 00:00:10.368 TCP 23.104.0.1:52414 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:48:49.616 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47526 10 6452 1 2025-11-13 05:49:13.440 00:00:10.370 TCP 23.104.0.1:51882 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:49:49.833 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33112 10 6452 1 2025-11-13 05:50:13.846 00:00:10.340 TCP 23.104.0.1:33640 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:50:50.078 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:57676 10 6452 1 2025-11-13 05:51:14.221 00:00:10.322 TCP 23.104.0.1:46762 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:51:46.902 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 05:51:46.850 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 05:47:56.434 00:05:04.051 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 05:51:50.264 00:00:10.304 TCP 1.101.0.1:3000 -> 22.102.0.1:58094 10 6452 1 2025-11-13 05:47:56.437 00:05:04.046 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 05:52:14.575 00:00:10.325 TCP 23.104.0.1:37708 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:52:50.604 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36464 10 6452 1 2025-11-13 05:53:14.947 00:00:10.375 TCP 23.104.0.1:54362 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:53:50.820 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52602 10 6452 1 2025-11-13 05:54:15.391 00:00:10.372 TCP 23.104.0.1:34390 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:54:51.039 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57352 10 6452 1 2025-11-13 05:55:15.802 00:00:10.364 TCP 23.104.0.1:58734 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:55:51.253 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57866 10 6452 1 2025-11-13 05:56:16.201 00:00:10.368 TCP 23.104.0.1:45028 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:56:46.884 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 05:56:46.718 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 05:56:51.481 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45210 10 6452 1 2025-11-13 05:57:16.599 00:00:10.368 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-11-13 05:53:56.437 00:05:04.045 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 05:57:51.700 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60454 10 6452 1 2025-11-13 05:53:56.435 00:05:04.050 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 05:58:17.001 00:00:11.024 TCP 23.104.0.1:57374 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496238, total packets: 1568, avg bps: 1100, avg pps: 0, avg bpp: 316 Time window: 2025-11-13 04:58:52 - 2025-11-13 05:59:00 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0029s Wall: 0.0025s flows/second: 66093.5 Runtime: 0.0025s