Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 05:58:53.867 00:00:10.328 TCP 23.104.0.1:54736 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:59:06.243 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49548 10 6452 1 2025-11-14 05:59:54.236 00:00:10.359 TCP 23.104.0.1:40732 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:00:06.465 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50500 10 6452 1 2025-11-14 06:00:54.636 00:00:10.370 TCP 23.104.0.1:55988 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:01:06.682 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49862 10 6452 1 2025-11-14 06:01:55.049 00:00:10.368 TCP 23.104.0.1:56418 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:02:15.792 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 06:02:15.534 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 06:02:06.914 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56870 10 6452 1 2025-11-14 06:02:55.456 00:00:10.389 TCP 23.104.0.1:39090 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:03:07.129 00:00:10.277 TCP 1.101.0.1:3000 -> 22.102.0.1:56866 10 6452 1 2025-11-14 05:59:56.879 00:05:04.420 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 06:03:55.886 00:00:10.385 TCP 23.104.0.1:50698 -> 1.101.0.1:3000 11 1507 1 2025-11-14 05:59:56.877 00:05:04.425 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 06:04:07.452 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49008 10 6452 1 2025-11-14 06:04:56.312 00:00:10.367 TCP 23.104.0.1:57166 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:05:07.666 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57016 10 6452 1 2025-11-14 06:05:56.715 00:00:10.392 TCP 23.104.0.1:36712 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:06:07.877 00:00:21.487 TCP 1.101.0.1:3000 -> 22.102.0.1:52044 10 6452 1 2025-11-14 06:06:57.140 00:00:10.365 TCP 23.104.0.1:59700 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:07:15.895 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 06:07:15.950 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 06:07:19.416 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58122 10 6452 1 2025-11-14 06:07:57.542 00:00:10.370 TCP 23.104.0.1:47130 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:08:19.637 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45124 10 6452 1 2025-11-14 06:08:57.955 00:00:10.370 TCP 23.104.0.1:53034 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:09:19.818 00:00:11.404 TCP 1.101.0.1:3000 -> 22.102.0.1:46092 10 6452 1 2025-11-14 06:05:56.883 00:05:04.422 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 06:05:56.887 00:05:04.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 06:09:58.381 00:00:10.456 TCP 23.104.0.1:60484 -> 1.101.0.1:3000 15 1926 1 2025-11-14 06:10:21.261 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:44390 12 10369 1 2025-11-14 06:10:58.894 00:00:10.372 TCP 23.104.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:11:21.461 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58728 10 6452 1 2025-11-14 06:11:59.302 00:00:10.375 TCP 23.104.0.1:43810 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:12:16.052 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 06:12:16.011 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 06:12:21.672 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38196 10 6452 1 2025-11-14 06:12:59.719 00:00:10.335 TCP 23.104.0.1:41182 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:13:21.897 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59362 10 6452 1 2025-11-14 06:14:00.104 00:00:10.478 TCP 23.104.0.1:39834 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:14:22.114 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34818 10 6452 1 2025-11-14 06:15:00.617 00:00:10.371 TCP 23.104.0.1:52892 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:15:22.294 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39144 10 6452 1 2025-11-14 06:11:56.885 00:05:04.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 06:11:56.889 00:05:04.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 06:16:01.026 00:00:10.363 TCP 23.104.0.1:46410 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:16:22.509 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44824 10 6452 1 2025-11-14 06:17:01.429 00:00:10.361 TCP 23.104.0.1:56964 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:17:16.291 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 06:17:16.296 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 06:17:22.732 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:60018 10 6452 1 2025-11-14 06:18:01.832 00:00:10.383 TCP 23.104.0.1:38598 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:18:22.945 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:53802 10 6452 1 2025-11-14 06:19:02.259 00:00:11.235 TCP 23.104.0.1:49138 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:19:23.192 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40328 10 6452 1 2025-11-14 06:20:03.529 00:00:10.365 TCP 23.104.0.1:39660 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:20:23.406 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52834 10 6452 1 2025-11-14 06:21:03.932 00:00:10.342 TCP 23.104.0.1:46218 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:21:23.631 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36376 10 6452 1 2025-11-14 06:17:56.889 00:05:04.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 06:17:56.891 00:05:04.415 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 06:22:16.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 06:22:16.434 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 06:22:04.313 00:00:10.365 TCP 23.104.0.1:59066 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:22:23.834 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58202 10 6452 1 2025-11-14 06:23:04.719 00:00:10.328 TCP 23.104.0.1:37882 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:23:24.077 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47566 10 6452 1 2025-11-14 06:24:05.103 00:00:10.362 TCP 23.104.0.1:54386 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:24:24.299 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59058 10 6452 1 2025-11-14 06:25:05.505 00:00:10.438 TCP 23.104.0.1:39776 -> 1.101.0.1:3000 15 1926 1 2025-11-14 06:25:24.510 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:33908 12 10375 1 2025-11-14 06:26:05.985 00:00:10.376 TCP 23.104.0.1:56714 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:26:24.755 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34120 10 6452 1 2025-11-14 06:27:16.335 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 06:27:06.404 00:00:10.363 TCP 23.104.0.1:59838 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:27:16.433 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 06:27:24.976 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:50592 10 6452 1 2025-11-14 06:23:56.889 00:05:04.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 06:23:56.891 00:05:04.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 06:28:06.806 00:00:10.330 TCP 23.104.0.1:39060 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:28:25.210 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56042 10 6452 1 2025-11-14 06:29:07.176 00:00:10.370 TCP 23.104.0.1:39172 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:29:25.427 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56084 10 6452 1 2025-11-14 06:30:07.587 00:00:10.363 TCP 23.104.0.1:58748 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:30:25.639 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55898 10 6452 1 2025-11-14 06:31:07.993 00:00:10.368 TCP 23.104.0.1:33454 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:31:25.855 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50060 10 6452 1 2025-11-14 06:32:16.449 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 06:32:16.510 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 06:32:08.432 00:00:10.367 TCP 23.104.0.1:39204 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:32:26.085 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55168 10 6452 1 2025-11-14 06:33:08.840 00:00:10.346 TCP 23.104.0.1:39444 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:33:26.305 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41624 10 6452 1 2025-11-14 06:29:56.893 00:05:04.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 06:29:56.891 00:05:04.421 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 06:34:09.229 00:00:10.327 TCP 23.104.0.1:40634 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:34:26.521 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56716 10 6452 1 2025-11-14 06:35:09.590 00:00:10.439 TCP 23.104.0.1:59502 -> 1.101.0.1:3000 15 1926 1 2025-11-14 06:35:26.736 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:56942 12 10375 1 2025-11-14 06:36:10.090 00:00:10.321 TCP 23.104.0.1:36218 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:36:26.981 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34866 10 6452 1 2025-11-14 06:37:16.589 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 06:37:16.795 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 06:37:10.451 00:00:14.025 TCP 23.104.0.1:34768 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:37:27.210 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40332 10 6452 1 2025-11-14 06:38:14.515 00:00:10.363 TCP 23.104.0.1:52912 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:38:27.426 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49686 10 6452 1 2025-11-14 06:39:14.912 00:00:10.329 TCP 23.104.0.1:33396 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:39:27.638 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54246 10 6452 1 2025-11-14 06:35:56.892 00:05:04.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 06:35:56.894 00:05:04.417 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 06:40:15.284 00:00:10.365 TCP 23.104.0.1:43182 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:40:27.853 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56086 10 6452 1 2025-11-14 06:41:15.688 00:00:10.735 TCP 23.104.0.1:50146 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:41:28.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53168 10 6452 1 2025-11-14 06:42:16.609 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 06:42:16.694 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 06:42:16.463 00:00:10.361 TCP 23.104.0.1:39786 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:42:28.302 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38396 10 6452 1 2025-11-14 06:43:16.863 00:00:10.361 TCP 23.104.0.1:48234 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:43:28.521 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:40558 10 6452 1 2025-11-14 06:44:17.264 00:00:10.368 TCP 23.104.0.1:40112 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:44:28.783 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51600 10 6452 1 2025-11-14 06:45:17.668 00:00:10.367 TCP 23.104.0.1:54292 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:45:29.003 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:60706 10 6452 1 2025-11-14 06:41:56.898 00:05:04.416 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 06:41:56.896 00:05:04.420 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 06:46:18.095 00:00:10.366 TCP 23.104.0.1:60952 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:46:29.196 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34968 10 6452 1 2025-11-14 06:47:16.762 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 06:47:16.682 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 06:47:18.498 00:00:10.364 TCP 23.104.0.1:50898 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:47:29.414 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52120 10 6452 1 2025-11-14 06:48:18.899 00:00:10.367 TCP 23.104.0.1:45528 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:48:29.632 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35026 10 6452 1 2025-11-14 06:49:19.304 00:00:10.364 TCP 23.104.0.1:54796 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:49:29.854 00:00:10.690 TCP 1.101.0.1:3000 -> 22.102.0.1:45922 10 6452 1 2025-11-14 06:50:19.704 00:00:10.331 TCP 23.104.0.1:56556 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:50:30.581 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46394 10 6452 1 2025-11-14 06:51:20.098 00:00:10.320 TCP 23.104.0.1:45262 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:51:30.805 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51240 10 6452 1 2025-11-14 06:47:56.898 00:05:04.419 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 06:47:56.899 00:05:04.414 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 06:52:17.105 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 06:52:17.170 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 06:52:20.457 00:00:10.317 TCP 23.104.0.1:56538 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:52:31.036 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47278 10 6452 1 2025-11-14 06:53:20.814 00:00:10.367 TCP 23.104.0.1:55896 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:53:31.244 00:00:25.409 TCP 1.101.0.1:3000 -> 22.102.0.1:57866 10 6452 1 2025-11-14 06:54:21.212 00:00:10.361 TCP 23.104.0.1:59806 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:54:46.715 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44354 10 6452 1 2025-11-14 06:55:21.610 00:00:10.386 TCP 23.104.0.1:37606 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:55:46.936 00:00:10.445 TCP 1.101.0.1:3000 -> 22.102.0.1:45480 10 6452 1 2025-11-14 06:56:22.050 00:00:10.364 TCP 23.104.0.1:48974 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:56:47.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50722 10 6452 1 2025-11-14 06:57:16.687 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 06:57:16.937 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 06:57:22.454 00:00:10.590 TCP 23.104.0.1:39306 -> 1.101.0.1:3000 11 1507 1 2025-11-14 06:53:56.917 00:05:04.398 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 06:57:47.646 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35890 10 6452 1 2025-11-14 06:53:56.914 00:05:04.403 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 06:58:23.107 00:00:10.371 TCP 23.104.0.1:33342 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 504916, total packets: 1580, avg bps: 1119, avg pps: 0, avg bpp: 319 Time window: 2025-11-14 05:58:53 - 2025-11-14 06:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0015s Wall: 0.0013s flows/second: 121628.1 Runtime: 0.0014s