Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 00:59:01.824 00:00:10.363 TCP 23.104.0.1:33446 -> 1.101.0.1:3000 11 1507 1 2025-11-14 00:59:38.253 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44010 10 6452 1 2025-11-14 01:00:02.222 00:00:10.367 TCP 23.104.0.1:58876 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:00:38.486 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:48826 10 6452 1 2025-11-14 01:01:02.634 00:00:10.319 TCP 23.104.0.1:57850 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:01:38.667 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37750 10 6452 1 2025-11-14 01:02:10.112 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 01:02:09.931 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 01:02:02.989 00:00:10.327 TCP 23.104.0.1:56366 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:02:38.881 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50364 10 6452 1 2025-11-14 01:03:03.352 00:00:10.329 TCP 23.104.0.1:46504 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:03:39.122 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59648 10 6452 1 2025-11-14 00:59:56.773 00:05:04.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 00:59:56.770 00:05:04.344 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 01:04:03.717 00:00:10.370 TCP 23.104.0.1:35864 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:04:39.338 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33136 10 6452 1 2025-11-14 01:05:04.125 00:00:10.320 TCP 23.104.0.1:55428 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:05:39.550 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57068 10 6452 1 2025-11-14 01:06:04.485 00:00:10.321 TCP 23.104.0.1:50424 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:06:39.760 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53890 10 6452 1 2025-11-14 01:07:09.847 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 01:07:10.007 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 01:07:04.851 00:00:10.379 TCP 23.104.0.1:50848 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:07:39.976 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:60930 10 6452 1 2025-11-14 01:08:05.271 00:00:10.362 TCP 23.104.0.1:34492 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:08:40.215 00:00:10.384 TCP 1.101.0.1:3000 -> 22.102.0.1:33622 10 6452 1 2025-11-14 01:09:05.673 00:00:10.365 TCP 23.104.0.1:43054 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:09:40.637 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43530 10 6452 1 2025-11-14 01:05:56.777 00:05:04.339 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 01:05:56.773 00:05:04.344 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 01:10:06.096 00:00:10.359 TCP 23.104.0.1:48084 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:10:40.808 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36702 10 6452 1 2025-11-14 01:11:06.498 00:00:10.368 TCP 23.104.0.1:40510 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:11:40.986 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46232 10 6452 1 2025-11-14 01:12:10.101 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 01:12:09.969 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 01:12:06.901 00:00:10.370 TCP 23.104.0.1:44072 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:12:41.210 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48724 10 6452 1 2025-11-14 01:13:07.317 00:00:10.366 TCP 23.104.0.1:46224 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:13:41.418 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43006 10 6452 1 2025-11-14 01:14:07.720 00:00:10.377 TCP 23.104.0.1:33506 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:14:41.630 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58810 10 6452 1 2025-11-14 01:15:08.139 00:00:10.366 TCP 23.104.0.1:49370 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:15:41.851 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60314 10 6452 1 2025-11-14 01:11:56.780 00:05:04.337 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 01:11:56.777 00:05:04.342 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 01:16:08.541 00:00:10.419 TCP 23.104.0.1:51494 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:16:42.083 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:48644 10 6452 1 2025-11-14 01:17:10.056 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 01:17:09.974 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 01:17:08.999 00:00:10.367 TCP 23.104.0.1:39600 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:17:42.270 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34312 10 6452 1 2025-11-14 01:18:09.403 00:00:10.365 TCP 23.104.0.1:40172 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:18:42.487 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52934 10 6452 1 2025-11-14 01:19:09.806 00:00:10.332 TCP 23.104.0.1:45974 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:19:42.708 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41022 10 6452 1 2025-11-14 01:20:10.173 00:00:27.572 TCP 23.104.0.1:60542 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:20:42.879 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48770 10 6452 1 2025-11-14 01:21:27.782 00:00:10.365 TCP 23.104.0.1:35674 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:21:43.111 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34666 10 6452 1 2025-11-14 01:17:56.778 00:05:04.352 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 01:17:56.780 00:05:04.346 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 01:22:10.266 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 01:22:10.371 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 01:22:28.186 00:00:10.363 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:22:43.327 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42146 10 6452 1 2025-11-14 01:23:28.593 00:00:10.361 TCP 23.104.0.1:45192 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:23:43.501 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59004 10 6452 1 2025-11-14 01:24:28.996 00:00:10.362 TCP 23.104.0.1:46140 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:24:43.669 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:49590 12 10375 1 2025-11-14 01:25:29.398 00:00:10.441 TCP 23.104.0.1:54976 -> 1.101.0.1:3000 15 1926 1 2025-11-14 01:25:43.865 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42100 10 6452 1 2025-11-14 01:26:29.880 00:00:10.326 TCP 23.104.0.1:55120 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:26:44.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48926 10 6452 1 2025-11-14 01:27:10.202 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 01:27:10.709 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 01:27:30.247 00:00:10.323 TCP 23.104.0.1:56904 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:27:44.291 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53350 10 6452 1 2025-11-14 01:23:56.778 00:05:04.351 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 01:23:56.782 00:05:04.345 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 01:28:30.609 00:00:10.361 TCP 23.104.0.1:44222 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:28:44.509 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38656 10 6452 1 2025-11-14 01:29:31.010 00:00:10.322 TCP 23.104.0.1:43766 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:29:44.726 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44654 10 6452 1 2025-11-14 01:30:31.373 00:00:10.371 TCP 23.104.0.1:48516 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:30:44.944 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:36078 10 6452 1 2025-11-14 01:31:31.781 00:00:10.328 TCP 23.104.0.1:56720 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:31:45.187 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33082 10 6452 1 2025-11-14 01:32:10.584 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 01:32:10.462 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 01:32:32.141 00:00:10.672 TCP 23.104.0.1:49998 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:32:45.403 00:00:10.393 TCP 1.101.0.1:3000 -> 22.102.0.1:48856 10 6452 1 2025-11-14 01:33:32.848 00:00:10.383 TCP 23.104.0.1:47738 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:33:45.845 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35946 10 6452 1 2025-11-14 01:29:56.783 00:05:04.347 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 01:29:56.781 00:05:04.352 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 01:34:33.271 00:00:10.325 TCP 23.104.0.1:41772 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:34:46.084 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56964 10 6452 1 2025-11-14 01:35:33.634 00:00:10.372 TCP 23.104.0.1:51354 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:35:46.307 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51764 10 6452 1 2025-11-14 01:36:34.052 00:00:10.368 TCP 23.104.0.1:58808 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:36:46.532 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49548 10 6452 1 2025-11-14 01:37:10.690 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 01:37:10.631 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 01:37:34.458 00:00:10.364 TCP 23.104.0.1:35508 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:37:46.747 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52796 10 6452 1 2025-11-14 01:38:34.857 00:00:10.366 TCP 23.104.0.1:39978 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:38:46.973 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37464 10 6452 1 2025-11-14 01:39:35.263 00:00:10.372 TCP 23.104.0.1:50456 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:35:56.786 00:05:04.346 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 01:39:47.195 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34896 10 6452 1 2025-11-14 01:35:56.784 00:05:04.350 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 01:40:35.686 00:00:10.364 TCP 23.104.0.1:53090 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:40:47.412 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51504 10 6452 1 2025-11-14 01:41:36.106 00:00:10.366 TCP 23.104.0.1:37642 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:41:47.582 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55766 10 6452 1 2025-11-14 01:42:10.466 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 01:42:10.670 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 01:42:36.510 00:00:10.325 TCP 23.104.0.1:59708 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:42:47.797 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:37962 10 6452 1 2025-11-14 01:43:36.876 00:00:10.419 TCP 23.104.0.1:35182 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:43:47.999 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53006 10 6452 1 2025-11-14 01:44:37.338 00:00:10.320 TCP 23.104.0.1:56850 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:44:48.219 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36488 10 6452 1 2025-11-14 01:45:37.697 00:00:10.393 TCP 23.104.0.1:47858 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:41:56.786 00:05:04.346 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 01:45:48.399 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52896 10 6452 1 2025-11-14 01:41:56.785 00:05:04.352 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 01:46:38.132 00:00:10.364 TCP 23.104.0.1:40532 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:46:48.567 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51072 10 6452 1 2025-11-14 01:47:10.840 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 01:47:10.824 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 01:47:38.533 00:00:10.366 TCP 23.104.0.1:58664 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:47:48.783 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:46486 10 6452 1 2025-11-14 01:48:38.941 00:00:10.385 TCP 23.104.0.1:52202 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:48:48.957 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:57830 10 6452 1 2025-11-14 01:49:39.366 00:00:10.359 TCP 23.104.0.1:46476 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:49:49.139 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56628 10 6452 1 2025-11-14 01:50:39.765 00:00:10.378 TCP 23.104.0.1:39918 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:50:49.353 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37122 10 6452 1 2025-11-14 01:51:40.187 00:00:10.370 TCP 23.104.0.1:34150 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:47:56.785 00:05:04.351 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 01:51:49.524 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52802 10 6452 1 2025-11-14 01:47:56.789 00:05:04.346 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 01:52:10.785 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 01:52:11.255 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 01:52:40.596 00:00:10.334 TCP 23.104.0.1:59314 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:52:49.744 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37688 10 6452 1 2025-11-14 01:53:40.969 00:00:10.378 TCP 23.104.0.1:38550 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:53:49.960 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51806 10 6452 1 2025-11-14 01:54:41.385 00:00:10.369 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:54:50.179 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51794 10 6452 1 2025-11-14 01:55:41.792 00:00:10.370 TCP 23.104.0.1:52186 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:55:50.398 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58980 10 6452 1 2025-11-14 01:56:42.201 00:00:10.367 TCP 23.104.0.1:53680 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:56:50.618 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57914 10 6452 1 2025-11-14 01:57:10.957 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 01:57:10.892 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 01:57:42.604 00:00:10.376 TCP 23.104.0.1:51468 -> 1.101.0.1:3000 11 1507 1 2025-11-14 01:57:50.828 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39704 10 6452 1 2025-11-14 01:53:56.790 00:05:04.345 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 01:53:56.789 00:05:04.350 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 162, total bytes: 494731, total packets: 1557, avg bps: 1099, avg pps: 0, avg bpp: 317 Time window: 2025-11-14 00:59:01 - 2025-11-14 01:59:01 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0051s User: 0.0017s Wall: 0.0025s flows/second: 64928.5 Runtime: 0.0025s