Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 17:59:31.398 00:00:10.322 TCP 23.104.0.1:60704 -> 1.101.0.1:3000 11 1507 1 2025-11-13 17:59:38.846 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45328 10 6452 1 2025-11-13 18:00:31.757 00:00:10.382 TCP 23.104.0.1:52750 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:00:39.080 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56890 10 6452 1 2025-11-13 18:01:32.177 00:00:10.370 TCP 23.104.0.1:56920 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:01:39.287 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59778 10 6452 1 2025-11-13 18:02:01.470 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 18:02:01.470 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 18:02:32.584 00:00:10.371 TCP 23.104.0.1:42098 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:02:39.502 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57426 10 6452 1 2025-11-13 18:03:32.993 00:00:10.364 TCP 23.104.0.1:60558 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:03:39.720 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48790 10 6452 1 2025-11-13 17:59:56.651 00:05:04.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 17:59:56.656 00:05:04.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 18:04:33.395 00:00:10.360 TCP 23.104.0.1:34586 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:04:39.930 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:49006 10 6452 1 2025-11-13 18:05:33.794 00:00:10.361 TCP 23.104.0.1:33166 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:05:40.195 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36062 10 6452 1 2025-11-13 18:06:34.197 00:00:10.364 TCP 23.104.0.1:47438 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:06:40.407 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48400 10 6452 1 2025-11-13 18:07:01.737 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 18:07:01.433 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 18:07:34.594 00:00:10.360 TCP 23.104.0.1:46394 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:07:40.620 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53758 10 6452 1 2025-11-13 18:08:34.995 00:00:10.325 TCP 23.104.0.1:53804 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:08:40.838 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34340 10 6452 1 2025-11-13 18:09:35.357 00:00:10.370 TCP 23.104.0.1:36226 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:09:41.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35364 10 6452 1 2025-11-13 18:05:56.653 00:05:04.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 18:05:56.656 00:05:04.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 18:10:35.767 00:00:10.374 TCP 23.104.0.1:46774 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:10:41.292 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54600 10 6452 1 2025-11-13 18:11:36.177 00:00:10.367 TCP 23.104.0.1:54666 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:11:41.513 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58612 10 6452 1 2025-11-13 18:12:01.675 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 18:12:01.567 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 18:12:36.579 00:00:10.375 TCP 23.104.0.1:34744 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:12:41.736 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47266 10 6452 1 2025-11-13 18:13:36.992 00:00:10.364 TCP 23.104.0.1:48948 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:13:41.968 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:48180 10 6452 1 2025-11-13 18:14:37.392 00:00:10.366 TCP 23.104.0.1:60276 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:14:42.215 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39068 10 6452 1 2025-11-13 18:15:37.795 00:00:10.346 TCP 23.104.0.1:51882 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:15:42.442 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36634 10 6452 1 2025-11-13 18:11:56.654 00:05:04.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 18:11:56.656 00:05:04.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 18:16:38.174 00:00:10.364 TCP 23.104.0.1:55656 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:16:42.666 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53318 10 6452 1 2025-11-13 18:17:01.794 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 18:17:01.888 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 18:17:38.580 00:00:10.364 TCP 23.104.0.1:54582 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:17:42.888 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54798 10 6452 1 2025-11-13 18:18:38.986 00:00:10.322 TCP 23.104.0.1:57160 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:18:43.109 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49646 10 6452 1 2025-11-13 18:19:39.345 00:00:10.438 TCP 23.104.0.1:57178 -> 1.101.0.1:3000 15 1926 1 2025-11-13 18:19:43.287 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:42836 12 10375 1 2025-11-13 18:20:39.823 00:00:10.377 TCP 23.104.0.1:37496 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:20:43.531 00:00:11.084 TCP 1.101.0.1:3000 -> 22.102.0.1:39154 10 6452 1 2025-11-13 18:21:40.239 00:00:10.388 TCP 23.104.0.1:60210 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:21:44.652 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58276 10 6452 1 2025-11-13 18:22:01.849 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 18:17:56.656 00:05:04.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 18:22:01.756 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 18:17:56.657 00:05:04.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 18:22:40.696 00:00:10.326 TCP 23.104.0.1:37588 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:22:44.862 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39854 10 6452 1 2025-11-13 18:23:41.068 00:00:10.369 TCP 23.104.0.1:35950 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:23:45.094 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37692 10 6452 1 2025-11-13 18:24:41.469 00:00:10.366 TCP 23.104.0.1:42168 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:24:45.302 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58392 10 6452 1 2025-11-13 18:25:41.869 00:00:10.325 TCP 23.104.0.1:51472 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:25:45.521 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38338 10 6452 1 2025-11-13 18:26:45.735 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40542 10 6452 1 2025-11-13 18:27:01.922 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 18:26:42.230 00:00:10.361 TCP 23.104.0.1:55816 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:27:01.767 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 18:27:45.912 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50652 10 6452 1 2025-11-13 18:23:56.659 00:05:04.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 18:27:42.629 00:00:10.366 TCP 23.104.0.1:42084 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:23:56.661 00:05:04.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 18:28:43.050 00:00:10.323 TCP 23.104.0.1:45758 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:28:46.122 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56158 10 6452 1 2025-11-13 18:29:46.334 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47242 10 6452 1 2025-11-13 18:29:43.410 00:00:10.368 TCP 23.104.0.1:53850 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:30:43.816 00:00:10.964 TCP 23.104.0.1:57242 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:30:46.544 00:00:10.481 TCP 1.101.0.1:3000 -> 22.102.0.1:53602 10 6452 1 2025-11-13 18:31:44.833 00:00:10.389 TCP 23.104.0.1:42962 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:31:47.083 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39886 10 6452 1 2025-11-13 18:32:02.027 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 18:32:02.123 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 18:32:45.258 00:00:10.364 TCP 23.104.0.1:40470 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:32:47.310 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45310 10 6452 1 2025-11-13 18:33:47.534 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57832 10 6452 1 2025-11-13 18:29:56.660 00:05:04.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 18:33:45.664 00:00:10.361 TCP 23.104.0.1:54708 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:29:56.664 00:05:04.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 18:34:46.089 00:00:10.513 TCP 23.104.0.1:38418 -> 1.101.0.1:3000 17 2241 1 2025-11-13 18:34:47.749 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 14 14292 1 2025-11-13 18:35:46.644 00:00:10.369 TCP 23.104.0.1:35624 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:35:48.021 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44374 10 6452 1 2025-11-13 18:36:48.246 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56646 10 6452 1 2025-11-13 18:36:47.059 00:00:10.366 TCP 23.104.0.1:60248 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:37:02.090 00:00:00.052 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 18:37:02.026 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 18:37:47.470 00:00:10.364 TCP 23.104.0.1:56838 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:37:48.456 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56204 10 6452 1 2025-11-13 18:38:48.631 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45806 10 6452 1 2025-11-13 18:38:47.870 00:00:10.416 TCP 23.104.0.1:49286 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:35:56.660 00:05:04.197 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 18:39:48.847 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36424 10 6452 1 2025-11-13 18:35:56.663 00:05:04.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 18:39:48.328 00:00:10.368 TCP 23.104.0.1:41440 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:40:48.733 00:00:10.368 TCP 23.104.0.1:47346 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:40:49.080 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59386 10 6452 1 2025-11-13 18:41:49.286 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40120 10 6452 1 2025-11-13 18:42:02.263 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 18:41:49.140 00:00:10.366 TCP 23.104.0.1:40450 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:42:02.314 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 18:42:49.503 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57764 10 6452 1 2025-11-13 18:42:49.542 00:00:10.363 TCP 23.104.0.1:59214 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:43:49.716 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47672 10 6452 1 2025-11-13 18:43:49.941 00:00:10.368 TCP 23.104.0.1:58202 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:44:49.932 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33068 10 6452 1 2025-11-13 18:44:50.349 00:00:10.366 TCP 23.104.0.1:44474 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:45:50.756 00:00:10.385 TCP 23.104.0.1:43036 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:41:56.665 00:05:04.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 18:41:56.664 00:05:04.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 18:45:50.167 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37122 10 6452 1 2025-11-13 18:46:50.381 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41760 10 6452 1 2025-11-13 18:47:02.276 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 18:47:02.050 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 18:46:51.181 00:00:11.017 TCP 23.104.0.1:38212 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:47:50.612 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56204 12 6556 1 2025-11-13 18:47:52.239 00:00:10.364 TCP 23.104.0.1:45924 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:48:50.843 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41408 10 6452 1 2025-11-13 18:48:52.640 00:00:10.338 TCP 23.104.0.1:32810 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:49:51.083 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44066 10 6452 1 2025-11-13 18:49:53.018 00:00:10.392 TCP 23.104.0.1:53134 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:50:51.302 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33080 10 6452 1 2025-11-13 18:50:53.447 00:00:10.362 TCP 23.104.0.1:35022 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:47:56.665 00:05:04.199 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 18:51:51.517 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60356 10 6452 1 2025-11-13 18:52:01.854 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 18:52:01.884 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 18:47:56.666 00:05:04.194 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 18:51:53.846 00:00:10.389 TCP 23.104.0.1:36288 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:52:51.744 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51942 10 6452 1 2025-11-13 18:52:54.274 00:00:10.363 TCP 23.104.0.1:58992 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:53:51.948 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:43188 10 6452 1 2025-11-13 18:53:54.678 00:00:10.373 TCP 23.104.0.1:44114 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:54:55.105 00:00:10.363 TCP 23.104.0.1:59956 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:54:52.193 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52686 10 6452 1 2025-11-13 18:55:52.415 00:00:11.417 TCP 1.101.0.1:3000 -> 22.102.0.1:36802 10 6452 1 2025-11-13 18:55:55.508 00:00:10.365 TCP 23.104.0.1:44760 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:56:53.872 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51980 10 6452 1 2025-11-13 18:57:02.505 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 18:57:02.303 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 18:56:55.915 00:00:10.376 TCP 23.104.0.1:43280 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:53:56.666 00:05:04.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 18:53:56.667 00:05:04.194 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 18:57:56.334 00:00:10.366 TCP 23.104.0.1:38468 -> 1.101.0.1:3000 11 1507 1 2025-11-13 18:57:54.107 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47706 10 6452 1 Summary: total flows: 162, total bytes: 503409, total packets: 1569, avg bps: 1128, avg pps: 0, avg bpp: 320 Time window: 2025-11-13 17:59:31 - 2025-11-13 18:59:00 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0062s User: 0.0000s Wall: 0.0025s flows/second: 64466.5 Runtime: 0.0025s