Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 16:58:57.388 00:00:10.383 TCP 23.104.0.1:49818 -> 1.101.0.1:3000 11 1507 1 2025-11-13 16:59:25.259 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33198 10 6452 1 2025-11-13 16:59:57.809 00:00:10.365 TCP 23.104.0.1:37916 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:00:25.478 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36048 10 6452 1 2025-11-13 17:00:58.208 00:00:10.374 TCP 23.104.0.1:60784 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:01:25.647 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34488 10 6452 1 2025-11-13 17:02:00.427 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 17:02:00.602 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 17:01:58.630 00:00:10.381 TCP 23.104.0.1:40962 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:02:25.855 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35614 10 6452 1 2025-11-13 17:02:59.080 00:00:10.323 TCP 23.104.0.1:55708 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:03:26.076 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56712 10 6452 1 2025-11-13 16:59:56.637 00:05:04.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 16:59:56.634 00:05:04.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 17:03:59.445 00:00:10.361 TCP 23.104.0.1:48178 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:04:26.301 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:42072 12 10375 1 2025-11-13 17:04:59.853 00:00:10.449 TCP 23.104.0.1:40348 -> 1.101.0.1:3000 15 1926 1 2025-11-13 17:05:26.544 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 10 6452 1 2025-11-13 17:06:00.341 00:00:10.369 TCP 23.104.0.1:51304 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:06:26.764 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47840 10 6452 1 2025-11-13 17:07:00.471 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 17:07:00.216 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 17:07:00.751 00:00:10.378 TCP 23.104.0.1:46988 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:07:26.979 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:38914 10 6452 1 2025-11-13 17:08:01.166 00:00:10.368 TCP 23.104.0.1:40798 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:08:27.220 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56962 10 6452 1 2025-11-13 17:09:01.576 00:00:10.365 TCP 23.104.0.1:51934 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:09:27.434 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49720 10 6452 1 2025-11-13 17:05:56.636 00:05:04.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 17:05:56.635 00:05:04.178 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 17:10:01.976 00:00:10.369 TCP 23.104.0.1:59908 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:10:27.611 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57508 10 6452 1 2025-11-13 17:11:02.383 00:00:10.393 TCP 23.104.0.1:37240 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:11:27.826 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57434 10 6452 1 2025-11-13 17:12:00.483 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 17:12:00.407 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 17:12:02.814 00:00:10.324 TCP 23.104.0.1:50026 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:12:28.074 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52996 10 6452 1 2025-11-13 17:13:03.176 00:00:10.366 TCP 23.104.0.1:57446 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:13:28.308 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33760 10 6452 1 2025-11-13 17:14:03.577 00:00:10.363 TCP 23.104.0.1:53484 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:14:28.525 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59228 10 6452 1 2025-11-13 17:15:03.979 00:00:10.372 TCP 23.104.0.1:56722 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:15:28.742 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49014 10 6452 1 2025-11-13 17:11:56.638 00:05:04.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 17:11:56.635 00:05:04.180 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 17:16:04.390 00:00:10.365 TCP 23.104.0.1:36288 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:16:28.965 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57010 10 6452 1 2025-11-13 17:17:00.248 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 17:17:00.579 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 17:17:04.793 00:00:10.359 TCP 23.104.0.1:54164 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:17:29.198 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60340 10 6452 1 2025-11-13 17:18:05.186 00:00:10.327 TCP 23.104.0.1:45534 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:18:29.415 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41274 10 6452 1 2025-11-13 17:19:05.554 00:00:10.368 TCP 23.104.0.1:52588 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:19:29.629 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55478 10 6452 1 2025-11-13 17:20:05.958 00:00:18.322 TCP 23.104.0.1:33446 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:20:29.844 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51790 10 6452 1 2025-11-13 17:21:14.321 00:00:10.378 TCP 23.104.0.1:35222 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:21:30.091 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:44610 10 6452 1 2025-11-13 17:22:01.023 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 17:17:56.636 00:05:04.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 17:22:01.100 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 17:17:56.638 00:05:04.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 17:22:14.732 00:00:10.372 TCP 23.104.0.1:60414 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:22:30.282 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42700 10 6452 1 2025-11-13 17:23:15.137 00:00:11.085 TCP 23.104.0.1:60050 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:23:30.514 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53224 10 6452 1 2025-11-13 17:24:16.256 00:00:10.365 TCP 23.104.0.1:46880 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:24:30.745 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46834 10 6452 1 2025-11-13 17:25:16.666 00:00:10.364 TCP 23.104.0.1:39604 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:25:30.975 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:43330 10 6452 1 2025-11-13 17:26:17.099 00:00:10.322 TCP 23.104.0.1:49766 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:26:31.224 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:56642 10 6452 1 2025-11-13 17:27:00.845 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 17:27:00.458 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 17:27:17.458 00:00:10.360 TCP 23.104.0.1:40602 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:27:31.404 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57452 10 6452 1 2025-11-13 17:23:56.640 00:05:04.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 17:23:56.638 00:05:04.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 17:28:17.860 00:00:10.329 TCP 23.104.0.1:34664 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:28:31.617 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49126 10 6452 1 2025-11-13 17:29:18.226 00:00:10.371 TCP 23.104.0.1:43958 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:29:31.826 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54030 10 6452 1 2025-11-13 17:30:18.641 00:00:10.365 TCP 23.104.0.1:34278 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:30:32.071 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50806 10 6452 1 2025-11-13 17:31:19.057 00:00:10.327 TCP 23.104.0.1:51286 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:31:32.291 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52262 10 6452 1 2025-11-13 17:32:00.973 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 17:32:00.787 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 17:32:19.419 00:00:10.361 TCP 23.104.0.1:40708 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:32:32.509 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48610 10 6452 1 2025-11-13 17:33:19.823 00:00:10.368 TCP 23.104.0.1:32910 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:33:32.726 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34712 10 6452 1 2025-11-13 17:29:56.640 00:05:04.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 17:29:56.643 00:05:04.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 17:34:20.224 00:00:10.884 TCP 23.104.0.1:52206 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:34:32.950 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54838 12 6556 1 2025-11-13 17:35:21.146 00:00:10.324 TCP 23.104.0.1:52376 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:35:33.186 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35240 10 6452 1 2025-11-13 17:36:21.508 00:00:10.333 TCP 23.104.0.1:40910 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:36:33.355 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41522 10 6452 1 2025-11-13 17:37:01.501 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 17:37:01.443 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 17:37:21.889 00:00:10.390 TCP 23.104.0.1:57874 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:37:33.567 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58362 10 6452 1 2025-11-13 17:38:22.315 00:00:10.329 TCP 23.104.0.1:56390 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:38:33.744 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34930 10 6452 1 2025-11-13 17:39:22.700 00:00:10.326 TCP 23.104.0.1:35020 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:39:33.952 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:53202 10 6452 1 2025-11-13 17:35:56.643 00:05:04.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 17:35:56.642 00:05:04.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 17:40:23.095 00:00:10.365 TCP 23.104.0.1:60686 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:40:34.189 00:00:10.564 TCP 1.101.0.1:3000 -> 22.102.0.1:44786 10 6452 1 2025-11-13 17:41:23.498 00:00:10.419 TCP 23.104.0.1:58182 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:41:34.789 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55042 10 6452 1 2025-11-13 17:42:01.386 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 17:42:01.182 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 17:42:23.961 00:00:10.365 TCP 23.104.0.1:41268 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:42:35.007 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54420 10 6452 1 2025-11-13 17:43:24.363 00:00:10.358 TCP 23.104.0.1:47830 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:43:35.220 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35402 10 6452 1 2025-11-13 17:44:24.762 00:00:10.381 TCP 23.104.0.1:37264 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:44:35.390 00:00:10.527 TCP 1.101.0.1:3000 -> 22.102.0.1:35676 10 6452 1 2025-11-13 17:45:25.184 00:00:10.365 TCP 23.104.0.1:40988 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:45:35.956 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:41462 10 6452 1 2025-11-13 17:41:56.645 00:05:04.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 17:41:56.647 00:05:04.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 17:46:25.589 00:00:10.368 TCP 23.104.0.1:36834 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:46:36.152 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51060 10 6452 1 2025-11-13 17:47:00.905 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 17:47:01.328 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 17:47:25.998 00:00:10.366 TCP 23.104.0.1:41906 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:47:36.395 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58366 10 6452 1 2025-11-13 17:48:26.403 00:00:10.364 TCP 23.104.0.1:37092 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:48:36.614 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:53136 10 6452 1 2025-11-13 17:49:26.810 00:00:10.368 TCP 23.104.0.1:57754 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:49:36.807 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51440 10 6452 1 2025-11-13 17:50:27.222 00:00:10.366 TCP 23.104.0.1:54222 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:50:37.032 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57084 10 6452 1 2025-11-13 17:51:27.625 00:00:10.365 TCP 23.104.0.1:55592 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:51:37.245 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45956 10 6452 1 2025-11-13 17:52:01.249 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 17:47:56.649 00:05:04.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 17:52:01.026 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 17:47:56.651 00:05:04.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 17:52:28.026 00:00:10.841 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:52:37.457 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56202 10 6452 1 2025-11-13 17:53:28.907 00:00:10.368 TCP 23.104.0.1:40910 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:53:37.637 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47396 10 6452 1 2025-11-13 17:54:29.308 00:00:10.365 TCP 23.104.0.1:58002 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:54:37.811 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38764 10 6452 1 2025-11-13 17:55:29.716 00:00:10.373 TCP 23.104.0.1:55594 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:55:38.034 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53350 10 6452 1 2025-11-13 17:56:30.134 00:00:10.384 TCP 23.104.0.1:44828 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:56:38.203 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49000 10 6452 1 2025-11-13 17:57:01.880 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 17:57:01.986 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 17:57:30.562 00:00:10.364 TCP 23.104.0.1:49878 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:57:38.421 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34750 10 6452 1 2025-11-13 17:53:56.651 00:05:04.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 17:53:56.655 00:05:04.181 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 17:58:30.967 00:00:10.388 TCP 23.104.0.1:56666 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:58:38.630 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36482 10 6452 1 Summary: total flows: 164, total bytes: 502794, total packets: 1580, avg bps: 1116, avg pps: 0, avg bpp: 318 Time window: 2025-11-13 16:58:57 - 2025-11-13 17:59:00 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0020s User: 0.0030s Wall: 0.0020s flows/second: 81231.2 Runtime: 0.0020s