Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 14:58:55.719 00:00:10.376 TCP 23.104.0.1:44660 -> 1.101.0.1:3000 11 1507 1 2025-11-13 14:59:30.693 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49656 12 10369 1 2025-11-13 14:59:56.133 00:00:14.852 TCP 23.104.0.1:46164 -> 1.101.0.1:3000 15 1926 1 2025-11-13 15:00:30.932 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:59572 10 6452 1 2025-11-13 15:01:01.027 00:00:10.482 TCP 23.104.0.1:52782 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:01:31.130 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49372 10 6452 1 2025-11-13 15:01:57.861 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 15:01:57.963 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 15:02:01.548 00:00:10.324 TCP 23.104.0.1:36738 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:02:31.350 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38180 10 6452 1 2025-11-13 15:03:01.913 00:00:10.358 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:03:31.526 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40668 10 6452 1 2025-11-13 14:59:56.598 00:05:04.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 14:59:56.601 00:05:04.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 15:04:02.313 00:00:10.362 TCP 23.104.0.1:36834 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:04:31.743 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51378 10 6452 1 2025-11-13 15:05:02.714 00:00:10.329 TCP 23.104.0.1:42632 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:05:31.965 00:00:10.748 TCP 1.101.0.1:3000 -> 22.102.0.1:49156 12 6556 1 2025-11-13 15:06:03.117 00:00:10.328 TCP 23.104.0.1:52372 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:06:32.755 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:52772 10 6452 1 2025-11-13 15:06:57.935 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 15:06:57.806 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 15:07:03.484 00:00:10.360 TCP 23.104.0.1:35694 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:07:32.938 00:00:19.911 TCP 1.101.0.1:3000 -> 22.102.0.1:59828 10 6452 1 2025-11-13 15:08:03.881 00:00:10.368 TCP 23.104.0.1:52260 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:08:42.890 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40592 10 6452 1 2025-11-13 15:09:04.288 00:00:10.363 TCP 23.104.0.1:36980 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:09:43.125 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:47496 10 6452 1 2025-11-13 15:05:56.599 00:05:04.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 15:05:56.604 00:05:04.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 15:10:04.686 00:00:10.327 TCP 23.104.0.1:45032 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:10:43.305 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48636 10 6452 1 2025-11-13 15:11:05.059 00:00:10.324 TCP 23.104.0.1:53478 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:11:43.526 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46778 10 6452 1 2025-11-13 15:11:57.927 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 15:11:58.343 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 15:12:05.426 00:00:10.361 TCP 23.104.0.1:36996 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:12:43.745 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43242 10 6452 1 2025-11-13 15:13:05.828 00:00:10.363 TCP 23.104.0.1:52262 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:13:43.961 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:59700 10 6452 1 2025-11-13 15:14:06.231 00:00:10.366 TCP 23.104.0.1:34248 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:14:44.147 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54474 10 6452 1 2025-11-13 15:15:06.633 00:00:10.325 TCP 23.104.0.1:59628 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:15:44.375 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55544 10 6452 1 2025-11-13 15:11:56.603 00:05:04.140 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 15:11:56.601 00:05:04.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 15:16:06.994 00:00:10.330 TCP 23.104.0.1:40062 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:16:44.589 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37014 10 6452 1 2025-11-13 15:16:58.081 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 15:16:58.229 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 15:17:07.364 00:00:10.365 TCP 23.104.0.1:46702 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:17:44.807 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41332 10 6452 1 2025-11-13 15:18:07.765 00:00:10.369 TCP 23.104.0.1:44238 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:18:45.024 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49518 10 6452 1 2025-11-13 15:19:08.174 00:00:10.369 TCP 23.104.0.1:35258 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:19:45.247 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50876 10 6452 1 2025-11-13 15:20:08.582 00:00:10.335 TCP 23.104.0.1:44614 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:20:45.419 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43296 10 6452 1 2025-11-13 15:21:08.955 00:00:10.366 TCP 23.104.0.1:38550 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:21:45.635 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56492 10 6452 1 2025-11-13 15:21:58.564 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 15:17:56.602 00:05:04.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 15:21:58.378 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 15:17:56.603 00:05:04.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 15:22:09.358 00:00:10.368 TCP 23.104.0.1:35164 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:22:45.844 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44658 10 6452 1 2025-11-13 15:23:09.780 00:00:10.365 TCP 23.104.0.1:58912 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:23:46.081 00:00:19.015 TCP 1.101.0.1:3000 -> 22.102.0.1:47956 10 6452 1 2025-11-13 15:24:10.186 00:00:10.327 TCP 23.104.0.1:47136 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:24:55.150 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43794 10 6452 1 2025-11-13 15:25:10.558 00:00:10.359 TCP 23.104.0.1:41210 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:25:55.370 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51566 10 6452 1 2025-11-13 15:26:10.957 00:00:10.366 TCP 23.104.0.1:39058 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:26:58.272 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 15:26:58.255 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 15:26:55.598 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54868 10 6452 1 2025-11-13 15:27:11.366 00:00:10.365 TCP 23.104.0.1:52058 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:23:56.602 00:05:04.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 15:23:56.605 00:05:04.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 15:27:55.815 00:00:10.479 TCP 1.101.0.1:3000 -> 22.102.0.1:51480 10 6452 1 2025-11-13 15:28:11.774 00:00:10.507 TCP 23.104.0.1:33712 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:28:56.337 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54116 10 6452 1 2025-11-13 15:29:12.318 00:00:10.321 TCP 23.104.0.1:41692 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:29:56.557 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:39986 10 6452 1 2025-11-13 15:30:12.674 00:00:10.359 TCP 23.104.0.1:40568 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:30:56.748 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42218 10 6452 1 2025-11-13 15:31:13.109 00:00:10.366 TCP 23.104.0.1:51604 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:31:58.495 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 15:31:58.194 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 15:31:56.960 00:00:10.775 TCP 1.101.0.1:3000 -> 22.102.0.1:37252 10 6452 1 2025-11-13 15:32:13.513 00:00:10.866 TCP 23.104.0.1:45434 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:32:57.773 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42460 10 6452 1 2025-11-13 15:33:14.417 00:00:10.323 TCP 23.104.0.1:51654 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:29:56.604 00:05:04.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 15:29:56.608 00:05:04.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 15:33:57.997 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54340 10 6452 1 2025-11-13 15:34:14.783 00:00:10.438 TCP 23.104.0.1:59910 -> 1.101.0.1:3000 15 1926 1 2025-11-13 15:34:58.217 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:33884 12 10369 1 2025-11-13 15:35:15.260 00:00:10.324 TCP 23.104.0.1:53162 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:35:58.462 00:00:10.549 TCP 1.101.0.1:3000 -> 22.102.0.1:55046 10 6452 1 2025-11-13 15:36:15.625 00:00:10.362 TCP 23.104.0.1:35508 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:36:58.425 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 15:36:58.626 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 15:36:59.074 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40918 10 6452 1 2025-11-13 15:37:16.032 00:00:10.363 TCP 23.104.0.1:45580 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:37:59.288 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41292 10 6452 1 2025-11-13 15:38:16.432 00:00:10.373 TCP 23.104.0.1:40410 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:38:59.469 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52094 10 6452 1 2025-11-13 15:39:16.852 00:00:10.377 TCP 23.104.0.1:60888 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:35:56.607 00:05:04.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 15:35:56.605 00:05:04.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 15:39:59.688 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34954 10 6452 1 2025-11-13 15:40:17.267 00:00:10.360 TCP 23.104.0.1:37050 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:40:59.909 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:47498 10 6452 1 2025-11-13 15:41:17.668 00:00:10.369 TCP 23.104.0.1:40774 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:41:58.721 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 15:41:58.564 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 15:42:00.173 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46368 10 6452 1 2025-11-13 15:42:18.111 00:00:10.365 TCP 23.104.0.1:44160 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:43:00.397 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52366 10 6452 1 2025-11-13 15:43:18.516 00:00:10.368 TCP 23.104.0.1:58720 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:44:00.617 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46926 10 6452 1 2025-11-13 15:44:18.919 00:00:10.382 TCP 23.104.0.1:53982 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:45:00.839 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55066 10 6452 1 2025-11-13 15:45:19.334 00:00:10.370 TCP 23.104.0.1:39562 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:41:56.607 00:05:04.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 15:41:56.609 00:05:04.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 15:46:01.083 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59764 10 6452 1 2025-11-13 15:46:19.746 00:00:10.329 TCP 23.104.0.1:57478 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:46:58.984 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 15:46:58.952 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 15:47:01.301 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44462 10 6452 1 2025-11-13 15:47:20.109 00:00:18.539 TCP 23.104.0.1:38830 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:48:01.483 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47210 10 6452 1 2025-11-13 15:48:28.709 00:00:10.360 TCP 23.104.0.1:33962 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:49:01.713 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58814 10 6452 1 2025-11-13 15:49:29.113 00:00:10.364 TCP 23.104.0.1:42410 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:50:01.928 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:59314 10 6452 1 2025-11-13 15:50:29.517 00:00:10.321 TCP 23.104.0.1:35918 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:51:02.198 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60880 10 6452 1 2025-11-13 15:51:29.881 00:00:10.375 TCP 23.104.0.1:43666 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:51:58.598 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 15:47:56.610 00:05:04.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 15:51:58.853 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 15:47:56.614 00:05:04.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 15:52:02.421 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38842 10 6452 1 2025-11-13 15:52:30.298 00:00:10.360 TCP 23.104.0.1:38616 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:53:02.644 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36732 10 6452 1 2025-11-13 15:53:30.699 00:00:10.397 TCP 23.104.0.1:57574 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:54:02.865 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:45798 10 6452 1 2025-11-13 15:54:31.132 00:00:10.439 TCP 23.104.0.1:33972 -> 1.101.0.1:3000 15 1926 1 2025-11-13 15:55:03.100 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:49816 12 10375 1 2025-11-13 15:55:31.608 00:00:10.372 TCP 23.104.0.1:48096 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:56:03.337 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:41942 10 6452 1 2025-11-13 15:56:32.022 00:00:10.324 TCP 23.104.0.1:50248 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:56:58.904 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 15:56:58.852 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 15:57:03.530 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48640 10 6452 1 2025-11-13 15:57:32.386 00:00:10.368 TCP 23.104.0.1:38898 -> 1.101.0.1:3000 11 1507 1 2025-11-13 15:53:56.612 00:05:04.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 15:53:56.614 00:05:04.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 15:58:03.737 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33060 10 6452 1 2025-11-13 15:58:32.789 00:00:10.325 TCP 23.104.0.1:46968 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505014, total packets: 1582, avg bps: 1120, avg pps: 0, avg bpp: 319 Time window: 2025-11-13 14:58:55 - 2025-11-13 15:59:00 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0018s Wall: 0.0023s flows/second: 70228.2 Runtime: 0.0023s