Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 22:58:58.021 00:00:10.362 TCP 23.104.0.1:59590 -> 1.101.0.1:3000 11 1507 1 2025-11-13 22:59:05.248 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51430 12 6556 1 2025-11-13 22:59:58.417 00:00:10.369 TCP 23.104.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:00:05.465 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47430 10 6452 1 2025-11-13 23:00:58.823 00:00:10.367 TCP 23.104.0.1:48026 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:01:05.680 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:41448 10 6452 1 2025-11-13 23:02:07.306 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:01:59.224 00:00:10.366 TCP 23.104.0.1:54188 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:02:07.444 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 23:02:05.867 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:46620 10 6452 1 2025-11-13 23:02:59.627 00:00:10.363 TCP 23.104.0.1:39884 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:03:06.106 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51280 10 6452 1 2025-11-13 22:59:56.753 00:05:04.291 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 22:59:56.750 00:05:04.296 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 23:04:00.029 00:00:10.366 TCP 23.104.0.1:60912 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:04:06.331 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47346 10 6452 1 2025-11-13 23:05:00.430 00:00:10.447 TCP 23.104.0.1:40958 -> 1.101.0.1:3000 15 1926 1 2025-11-13 23:05:06.547 00:00:10.247 TCP 1.101.0.1:3000 -> 22.102.0.1:42520 13 10427 1 2025-11-13 23:06:00.913 00:00:10.365 TCP 23.104.0.1:36522 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:06:06.837 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54204 10 6452 1 2025-11-13 23:07:07.311 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 23:07:01.313 00:00:10.377 TCP 23.104.0.1:40774 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:07:07.465 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:07:07.081 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45982 10 6452 1 2025-11-13 23:08:01.713 00:00:10.327 TCP 23.104.0.1:55688 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:08:07.297 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33106 10 6452 1 2025-11-13 23:09:02.102 00:00:10.371 TCP 23.104.0.1:34708 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:09:07.468 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48914 10 6452 1 2025-11-13 23:05:56.754 00:05:04.314 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 23:05:56.753 00:05:04.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 23:10:02.506 00:00:10.374 TCP 23.104.0.1:48810 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:10:07.682 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54326 10 6452 1 2025-11-13 23:11:02.916 00:00:10.380 TCP 23.104.0.1:53846 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:11:07.890 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45432 10 6452 1 2025-11-13 23:12:07.349 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 23:12:07.501 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:12:03.335 00:00:10.327 TCP 23.104.0.1:59178 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:12:08.106 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37166 10 6452 1 2025-11-13 23:13:03.707 00:00:10.317 TCP 23.104.0.1:59570 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:13:08.322 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45874 10 6452 1 2025-11-13 23:14:04.087 00:00:10.333 TCP 23.104.0.1:36348 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:14:08.491 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36646 10 6452 1 2025-11-13 23:15:04.463 00:00:10.328 TCP 23.104.0.1:58742 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:15:08.703 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44478 10 6452 1 2025-11-13 23:11:56.754 00:05:04.321 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 23:11:56.757 00:05:04.316 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 23:16:04.833 00:00:10.381 TCP 23.104.0.1:51940 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:16:08.919 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48972 10 6452 1 2025-11-13 23:17:07.769 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:17:07.693 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 23:17:05.256 00:00:10.358 TCP 23.104.0.1:60402 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:17:09.133 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49050 10 6452 1 2025-11-13 23:18:05.655 00:00:10.367 TCP 23.104.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:18:09.347 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42794 10 6452 1 2025-11-13 23:19:06.095 00:00:10.367 TCP 23.104.0.1:58692 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:19:09.555 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56232 10 6452 1 2025-11-13 23:20:06.504 00:00:10.326 TCP 23.104.0.1:55512 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:20:09.771 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45370 10 6452 1 2025-11-13 23:21:06.868 00:00:10.367 TCP 23.104.0.1:37578 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:21:09.986 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55924 10 6452 1 2025-11-13 23:17:56.756 00:05:04.321 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 23:17:56.757 00:05:04.317 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 23:22:07.890 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:22:07.916 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 23:22:07.275 00:00:10.367 TCP 23.104.0.1:54602 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:22:10.210 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60942 10 6452 1 2025-11-13 23:23:07.677 00:00:10.376 TCP 23.104.0.1:48474 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:23:10.382 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56216 10 6452 1 2025-11-13 23:24:08.105 00:00:10.364 TCP 23.104.0.1:57730 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:24:10.555 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50204 10 6452 1 2025-11-13 23:25:08.505 00:00:10.370 TCP 23.104.0.1:43054 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:25:10.765 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55352 10 6452 1 2025-11-13 23:26:10.981 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36668 10 6452 1 2025-11-13 23:26:08.910 00:00:10.365 TCP 23.104.0.1:54488 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:27:07.914 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 23:27:08.047 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:27:09.317 00:00:10.367 TCP 23.104.0.1:45946 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:27:11.211 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35992 10 6452 1 2025-11-13 23:23:56.759 00:05:04.317 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 23:23:56.757 00:05:04.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 23:28:09.721 00:00:10.365 TCP 23.104.0.1:35014 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:28:11.428 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58212 10 6452 1 2025-11-13 23:29:10.122 00:00:16.710 TCP 23.104.0.1:55148 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:29:11.647 00:00:15.093 TCP 1.101.0.1:3000 -> 22.102.0.1:39302 10 6452 1 2025-11-13 23:30:16.782 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46404 10 6452 1 2025-11-13 23:30:16.872 00:00:10.370 TCP 23.104.0.1:41280 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:31:16.997 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35024 10 6452 1 2025-11-13 23:31:17.286 00:00:10.323 TCP 23.104.0.1:41840 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:32:08.204 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 23:32:08.036 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:32:17.656 00:00:10.366 TCP 23.104.0.1:40930 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:32:17.230 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39056 10 6452 1 2025-11-13 23:33:17.457 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:42576 12 6556 1 2025-11-13 23:33:18.088 00:00:10.368 TCP 23.104.0.1:53734 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:29:56.757 00:05:04.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 23:29:56.760 00:05:04.317 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 23:34:17.659 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55598 10 6452 1 2025-11-13 23:34:18.495 00:00:10.367 TCP 23.104.0.1:37146 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:35:18.900 00:00:10.364 TCP 23.104.0.1:51056 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:35:17.874 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37916 10 6452 1 2025-11-13 23:36:18.104 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38342 10 6452 1 2025-11-13 23:36:19.301 00:00:10.360 TCP 23.104.0.1:55776 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:37:08.126 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 23:37:08.282 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:37:18.354 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52748 10 6452 1 2025-11-13 23:37:19.701 00:00:10.452 TCP 23.104.0.1:54456 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:38:20.217 00:00:10.371 TCP 23.104.0.1:57118 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:38:18.581 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:41530 10 6452 1 2025-11-13 23:39:18.768 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48610 10 6452 1 2025-11-13 23:39:20.626 00:00:10.331 TCP 23.104.0.1:53898 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:35:56.760 00:05:04.317 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 23:35:56.757 00:05:04.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 23:40:20.996 00:00:10.383 TCP 23.104.0.1:46652 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:40:18.988 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51554 10 6452 1 2025-11-13 23:41:21.413 00:00:10.367 TCP 23.104.0.1:32944 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:41:19.211 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40350 10 6452 1 2025-11-13 23:42:08.183 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:42:08.062 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 23:42:19.424 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52348 10 6452 1 2025-11-13 23:42:21.825 00:00:10.366 TCP 23.104.0.1:47916 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:43:19.639 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45278 10 6452 1 2025-11-13 23:43:22.229 00:00:10.326 TCP 23.104.0.1:55498 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:44:19.852 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39192 10 6452 1 2025-11-13 23:44:22.588 00:00:10.370 TCP 23.104.0.1:43308 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:45:20.084 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47766 10 6452 1 2025-11-13 23:45:22.997 00:00:10.367 TCP 23.104.0.1:55792 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:41:56.759 00:05:04.327 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 23:41:56.761 00:05:04.322 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 23:46:20.297 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38794 10 6452 1 2025-11-13 23:46:23.399 00:00:10.368 TCP 23.104.0.1:59642 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:47:08.384 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 23:47:08.201 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:47:20.509 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43466 10 6452 1 2025-11-13 23:47:23.802 00:00:10.367 TCP 23.104.0.1:36918 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:48:20.720 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57248 10 6452 1 2025-11-13 23:48:24.205 00:00:10.367 TCP 23.104.0.1:53908 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:49:20.929 00:00:10.704 TCP 1.101.0.1:3000 -> 22.102.0.1:43678 11 6504 1 2025-11-13 23:49:24.610 00:00:10.367 TCP 23.104.0.1:60774 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:50:21.670 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41712 10 6452 1 2025-11-13 23:50:25.017 00:00:10.364 TCP 23.104.0.1:37206 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:51:25.419 00:00:10.363 TCP 23.104.0.1:35122 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:51:21.842 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33578 10 6452 1 2025-11-13 23:47:56.759 00:05:04.328 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 23:47:56.763 00:05:04.323 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 23:52:08.441 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 23:52:08.388 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:52:25.823 00:00:10.365 TCP 23.104.0.1:58260 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:52:22.082 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56948 10 6452 1 2025-11-13 23:53:26.228 00:00:10.413 TCP 23.104.0.1:36558 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:53:22.254 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50540 10 6452 1 2025-11-13 23:54:22.418 00:00:10.988 TCP 1.101.0.1:3000 -> 22.102.0.1:50170 10 6452 1 2025-11-13 23:54:26.684 00:00:10.340 TCP 23.104.0.1:59400 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:55:23.446 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38980 10 6452 1 2025-11-13 23:55:27.091 00:00:10.368 TCP 23.104.0.1:50158 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:56:23.621 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46412 10 6452 1 2025-11-13 23:56:27.496 00:00:13.689 TCP 23.104.0.1:59072 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:57:09.020 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 23:57:08.711 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 23:57:23.831 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42686 10 6452 1 2025-11-13 23:57:31.254 00:00:10.375 TCP 23.104.0.1:53602 -> 1.101.0.1:3000 11 1507 1 2025-11-13 23:53:56.761 00:05:04.329 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 23:53:56.763 00:05:04.325 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 23:58:24.072 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36648 10 6452 1 2025-11-13 23:58:31.664 00:00:10.427 TCP 23.104.0.1:45970 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 503002, total packets: 1584, avg bps: 1116, avg pps: 0, avg bpp: 317 Time window: 2025-11-13 22:58:58 - 2025-11-13 23:59:01 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0032s Wall: 0.0022s flows/second: 74380.0 Runtime: 0.0022s