Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 06:58:42.109 00:00:11.631 TCP 23.104.0.1:50162 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:59:18.227 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45476 10 6452 1 2025-11-13 06:59:43.782 00:00:10.362 TCP 23.104.0.1:54620 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:00:18.443 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50552 10 6452 1 2025-11-13 07:00:44.182 00:00:10.323 TCP 23.104.0.1:42610 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:01:18.660 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:53558 10 6452 1 2025-11-13 07:01:48.600 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 07:01:48.568 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 07:01:44.547 00:00:10.707 TCP 23.104.0.1:47346 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:02:18.856 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:54514 10 6452 1 2025-11-13 07:02:45.299 00:00:10.364 TCP 23.104.0.1:57348 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:03:19.092 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60134 10 6452 1 2025-11-13 07:03:45.703 00:00:10.361 TCP 23.104.0.1:48056 -> 1.101.0.1:3000 11 1507 1 2025-11-13 06:59:56.459 00:05:04.052 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 06:59:56.461 00:05:04.048 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 07:04:19.318 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41794 10 6452 1 2025-11-13 07:04:46.103 00:00:10.322 TCP 23.104.0.1:52362 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:05:19.539 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49514 10 6452 1 2025-11-13 07:05:46.466 00:00:10.365 TCP 23.104.0.1:58118 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:06:19.752 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54672 10 6452 1 2025-11-13 07:06:48.425 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 07:06:48.519 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 07:06:46.868 00:00:10.366 TCP 23.104.0.1:44568 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:07:19.972 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49068 10 6452 1 2025-11-13 07:07:47.270 00:00:10.366 TCP 23.104.0.1:47780 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:08:20.182 00:00:10.505 TCP 1.101.0.1:3000 -> 22.102.0.1:48168 10 6452 1 2025-11-13 07:08:47.669 00:00:10.370 TCP 23.104.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:09:20.727 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57064 10 6452 1 2025-11-13 07:05:56.462 00:05:04.051 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 07:09:48.101 00:00:10.364 TCP 23.104.0.1:50076 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:05:56.464 00:05:04.046 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 07:10:20.938 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:46278 10 6452 1 2025-11-13 07:10:48.507 00:00:10.366 TCP 23.104.0.1:46456 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:11:21.183 00:00:10.800 TCP 1.101.0.1:3000 -> 22.102.0.1:45150 10 6452 1 2025-11-13 07:11:48.390 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 07:11:48.192 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 07:11:48.913 00:00:10.321 TCP 23.104.0.1:47510 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:12:22.025 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59158 10 6452 1 2025-11-13 07:12:49.270 00:00:10.364 TCP 23.104.0.1:41246 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:13:22.243 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47676 10 6452 1 2025-11-13 07:13:49.670 00:00:10.325 TCP 23.104.0.1:41904 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:14:22.457 00:00:10.315 TCP 1.101.0.1:3000 -> 22.102.0.1:47712 10 6452 1 2025-11-13 07:14:50.031 00:00:10.361 TCP 23.104.0.1:39912 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:15:22.813 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42742 10 6452 1 2025-11-13 07:11:56.464 00:05:04.050 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 07:11:56.466 00:05:04.045 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 07:15:50.431 00:00:10.331 TCP 23.104.0.1:55946 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:16:23.034 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6452 1 2025-11-13 07:16:48.530 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 07:16:48.650 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 07:16:50.800 00:00:10.369 TCP 23.104.0.1:53768 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:17:23.240 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45898 10 6452 1 2025-11-13 07:17:51.209 00:00:10.365 TCP 23.104.0.1:55264 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:18:23.451 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 10 6452 1 2025-11-13 07:18:51.610 00:00:10.339 TCP 23.104.0.1:55924 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:19:23.678 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60900 12 6556 1 2025-11-13 07:19:51.998 00:00:10.364 TCP 23.104.0.1:50668 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:20:23.898 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59238 10 6452 1 2025-11-13 07:20:52.399 00:00:10.323 TCP 23.104.0.1:57610 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:21:24.122 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49026 10 6452 1 2025-11-13 07:21:48.965 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 07:21:49.060 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 07:17:56.469 00:05:04.045 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 07:17:56.467 00:05:04.050 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 07:21:52.755 00:00:10.386 TCP 23.104.0.1:48020 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:22:24.343 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41302 10 6452 1 2025-11-13 07:22:53.182 00:00:10.365 TCP 23.104.0.1:37470 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:23:24.571 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49392 10 6452 1 2025-11-13 07:23:53.581 00:00:10.437 TCP 23.104.0.1:46618 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:24:24.781 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34258 10 6452 1 2025-11-13 07:24:54.059 00:00:10.367 TCP 23.104.0.1:43458 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:25:24.993 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56482 10 6452 1 2025-11-13 07:25:54.465 00:00:10.378 TCP 23.104.0.1:50702 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:26:25.228 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:53728 10 6452 1 2025-11-13 07:26:48.857 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 07:26:48.785 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 07:26:54.885 00:00:10.385 TCP 23.104.0.1:36746 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:27:25.422 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59450 10 6452 1 2025-11-13 07:23:56.470 00:05:04.052 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 07:23:56.468 00:05:04.056 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 07:27:55.308 00:00:10.381 TCP 23.104.0.1:45284 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:28:25.640 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37058 10 6452 1 2025-11-13 07:28:55.726 00:00:10.322 TCP 23.104.0.1:55952 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:29:25.871 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47118 10 6452 1 2025-11-13 07:29:56.097 00:00:10.365 TCP 23.104.0.1:34692 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:30:26.107 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50150 10 6452 1 2025-11-13 07:30:56.497 00:00:10.326 TCP 23.104.0.1:54202 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:31:26.318 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43262 10 6452 1 2025-11-13 07:31:48.787 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 07:31:48.699 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 07:31:56.857 00:00:10.374 TCP 23.104.0.1:49600 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:32:26.537 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55244 10 6452 1 2025-11-13 07:32:57.267 00:00:10.369 TCP 23.104.0.1:52022 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:33:26.752 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42836 10 6452 1 2025-11-13 07:29:56.469 00:05:04.056 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 07:29:56.473 00:05:04.050 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 07:33:57.676 00:00:10.365 TCP 23.104.0.1:59074 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:34:26.961 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:59654 10 6452 1 2025-11-13 07:34:58.103 00:00:10.743 TCP 23.104.0.1:54010 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:35:27.157 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45818 10 6452 1 2025-11-13 07:35:58.881 00:00:10.384 TCP 23.104.0.1:34468 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:36:27.369 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48110 10 6452 1 2025-11-13 07:36:48.910 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 07:36:48.851 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 07:36:59.301 00:00:10.372 TCP 23.104.0.1:46236 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:37:27.572 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59966 10 6452 1 2025-11-13 07:37:59.709 00:00:10.375 TCP 23.104.0.1:57718 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:38:27.786 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:34304 10 6452 1 2025-11-13 07:39:00.129 00:00:10.361 TCP 23.104.0.1:41076 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:39:28.065 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59542 10 6452 1 2025-11-13 07:35:56.473 00:05:04.051 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 07:35:56.471 00:05:04.056 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 07:40:00.534 00:00:10.372 TCP 23.104.0.1:48228 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:40:28.278 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34834 10 6452 1 2025-11-13 07:41:00.947 00:00:10.368 TCP 23.104.0.1:36458 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:41:28.503 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38618 10 6452 1 2025-11-13 07:41:49.023 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 07:41:48.844 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 07:42:01.355 00:00:10.323 TCP 23.104.0.1:44966 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:42:28.681 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38592 10 6452 1 2025-11-13 07:43:01.716 00:00:10.878 TCP 23.104.0.1:56172 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:43:28.900 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46038 10 6452 1 2025-11-13 07:44:02.633 00:00:10.367 TCP 23.104.0.1:49314 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:44:29.121 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43092 10 6452 1 2025-11-13 07:45:03.057 00:00:10.367 TCP 23.104.0.1:59392 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:45:29.337 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42064 10 6452 1 2025-11-13 07:41:56.473 00:05:04.056 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 07:41:56.476 00:05:04.051 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 07:46:03.460 00:00:10.366 TCP 23.104.0.1:51052 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:46:29.560 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37712 10 6452 1 2025-11-13 07:46:49.578 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 07:46:49.734 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 07:47:03.875 00:00:10.361 TCP 23.104.0.1:57760 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:47:29.781 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45092 10 6452 1 2025-11-13 07:48:04.278 00:00:10.363 TCP 23.104.0.1:44784 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:48:30.006 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60048 11 6492 1 2025-11-13 07:49:04.685 00:00:10.318 TCP 23.104.0.1:34094 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:49:30.225 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51228 10 6452 1 2025-11-13 07:50:05.061 00:00:10.363 TCP 23.104.0.1:50936 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:50:30.439 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58896 10 6452 1 2025-11-13 07:51:05.468 00:00:10.552 TCP 23.104.0.1:44276 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:51:30.656 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43726 10 6452 1 2025-11-13 07:51:49.196 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 07:51:49.230 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 07:47:56.473 00:05:04.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 07:47:56.475 00:05:04.054 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 07:52:06.062 00:00:10.392 TCP 23.104.0.1:46570 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:52:30.832 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34272 10 6452 1 2025-11-13 07:53:06.521 00:00:10.368 TCP 23.104.0.1:58588 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:53:31.071 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60454 10 6452 1 2025-11-13 07:54:06.925 00:00:10.351 TCP 23.104.0.1:58624 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:54:31.278 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44832 10 6452 1 2025-11-13 07:55:07.317 00:00:10.368 TCP 23.104.0.1:33588 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:55:31.499 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49664 10 6452 1 2025-11-13 07:56:07.721 00:00:10.328 TCP 23.104.0.1:53972 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:56:31.717 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45000 10 6452 1 2025-11-13 07:56:49.328 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 07:56:49.330 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 07:57:08.103 00:00:10.366 TCP 23.104.0.1:60588 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:57:31.927 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:58060 10 6452 1 2025-11-13 07:53:56.476 00:05:04.059 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 07:53:56.478 00:05:04.055 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 07:58:08.508 00:00:10.366 TCP 23.104.0.1:59658 -> 1.101.0.1:3000 11 1507 1 2025-11-13 07:58:32.178 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41510 10 6452 1 Summary: total flows: 164, total bytes: 498492, total packets: 1575, avg bps: 1102, avg pps: 0, avg bpp: 316 Time window: 2025-11-13 06:58:42 - 2025-11-13 07:59:00 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0022s Wall: 0.0031s flows/second: 53718.5 Runtime: 0.0031s