Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 08:59:16.095 00:00:10.337 TCP 23.104.0.1:40856 -> 1.101.0.1:3000 11 1507 1 2025-11-14 08:59:33.894 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59160 10 6452 1 2025-11-14 09:00:16.468 00:00:10.367 TCP 23.104.0.1:57096 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:00:34.106 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45460 10 6452 1 2025-11-14 09:01:16.873 00:00:10.365 TCP 23.104.0.1:54560 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:01:34.325 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34756 10 6452 1 2025-11-14 09:02:19.605 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 09:02:19.679 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 09:02:17.281 00:00:10.329 TCP 23.104.0.1:33358 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:02:34.536 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37136 10 6452 1 2025-11-14 09:03:17.653 00:00:10.375 TCP 23.104.0.1:49806 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:03:34.745 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33576 10 6452 1 2025-11-14 08:59:56.961 00:05:04.409 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 08:59:56.960 00:05:04.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 09:04:18.095 00:00:10.366 TCP 23.104.0.1:52614 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:04:34.963 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:54234 10 6452 1 2025-11-14 09:05:18.502 00:00:10.326 TCP 23.104.0.1:47752 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:05:35.152 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57324 10 6452 1 2025-11-14 09:06:18.868 00:00:10.368 TCP 23.104.0.1:55222 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:06:35.361 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41670 10 6452 1 2025-11-14 09:07:19.635 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 09:07:19.712 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 09:07:19.274 00:00:10.319 TCP 23.104.0.1:52506 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:07:35.582 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54628 10 6452 1 2025-11-14 09:08:19.631 00:00:11.404 TCP 23.104.0.1:55760 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:08:35.798 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47922 10 6452 1 2025-11-14 09:09:21.104 00:00:10.326 TCP 23.104.0.1:34122 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:09:36.010 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37312 10 6452 1 2025-11-14 09:05:56.961 00:05:04.412 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 09:05:56.965 00:05:04.408 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 09:10:21.473 00:00:10.361 TCP 23.104.0.1:40238 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:10:36.219 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45472 10 6452 1 2025-11-14 09:11:21.874 00:00:10.365 TCP 23.104.0.1:51360 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:11:36.401 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60470 10 6452 1 2025-11-14 09:12:19.669 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 09:12:19.533 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 09:12:22.277 00:00:10.363 TCP 23.104.0.1:46464 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:12:36.619 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55162 10 6452 1 2025-11-14 09:13:22.680 00:00:10.367 TCP 23.104.0.1:58906 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:13:36.844 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58892 10 6452 1 2025-11-14 09:14:23.106 00:00:10.363 TCP 23.104.0.1:33716 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:14:37.081 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37466 12 10369 1 2025-11-14 09:15:23.506 00:00:10.442 TCP 23.104.0.1:35376 -> 1.101.0.1:3000 15 1926 1 2025-11-14 09:15:37.317 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55444 10 6452 1 2025-11-14 09:11:56.968 00:05:04.405 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 09:11:56.965 00:05:04.410 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 09:16:23.987 00:00:10.368 TCP 23.104.0.1:53934 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:16:37.527 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39376 10 6452 1 2025-11-14 09:17:19.619 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 09:17:19.694 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 09:17:24.399 00:00:10.362 TCP 23.104.0.1:54460 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:17:37.704 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50140 10 6452 1 2025-11-14 09:18:24.804 00:00:10.368 TCP 23.104.0.1:48130 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:18:37.934 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:43416 10 6452 1 2025-11-14 09:19:25.209 00:00:10.355 TCP 23.104.0.1:59570 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:19:38.178 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:32902 10 6452 1 2025-11-14 09:20:25.603 00:00:11.468 TCP 23.104.0.1:57196 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:20:38.405 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42704 10 6452 1 2025-11-14 09:21:27.113 00:00:10.360 TCP 23.104.0.1:57574 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:21:38.646 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41254 10 6452 1 2025-11-14 09:17:56.969 00:05:04.406 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 09:17:56.972 00:05:04.402 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 09:22:20.202 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 09:22:20.324 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 09:22:27.513 00:00:10.321 TCP 23.104.0.1:51714 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:22:38.870 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45428 10 6452 1 2025-11-14 09:23:27.873 00:00:10.364 TCP 23.104.0.1:39252 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:23:39.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50180 10 6452 1 2025-11-14 09:24:28.276 00:00:10.371 TCP 23.104.0.1:36792 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:24:39.295 00:00:17.278 TCP 1.101.0.1:3000 -> 22.102.0.1:44808 10 6452 1 2025-11-14 09:25:28.681 00:00:10.368 TCP 23.104.0.1:36730 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:25:46.617 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40916 10 6452 1 2025-11-14 09:26:29.103 00:00:10.357 TCP 23.104.0.1:45982 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:26:46.827 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46466 10 6452 1 2025-11-14 09:27:20.223 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 09:27:20.237 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 09:27:29.502 00:00:10.364 TCP 23.104.0.1:49848 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:23:56.971 00:05:04.408 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 09:27:47.004 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:39002 10 6452 1 2025-11-14 09:23:56.970 00:05:04.412 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 09:28:29.909 00:00:10.327 TCP 23.104.0.1:55688 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:28:47.186 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46768 10 6452 1 2025-11-14 09:29:30.288 00:00:10.323 TCP 23.104.0.1:51438 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:29:47.400 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56090 10 6452 1 2025-11-14 09:30:30.657 00:00:10.365 TCP 23.104.0.1:45404 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:30:47.610 00:00:10.322 TCP 1.101.0.1:3000 -> 22.102.0.1:56150 10 6452 1 2025-11-14 09:31:31.101 00:00:10.362 TCP 23.104.0.1:54778 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:31:47.971 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50570 10 6452 1 2025-11-14 09:32:20.116 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 09:32:20.217 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 09:32:31.511 00:00:10.364 TCP 23.104.0.1:59138 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:32:48.173 00:00:12.232 TCP 1.101.0.1:3000 -> 22.102.0.1:49320 10 6452 1 2025-11-14 09:33:31.922 00:00:10.340 TCP 23.104.0.1:60300 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:29:56.978 00:05:04.402 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 09:33:50.447 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60872 10 6452 1 2025-11-14 09:29:56.975 00:05:04.407 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 09:34:32.301 00:00:23.823 TCP 23.104.0.1:57736 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:34:50.674 00:00:10.872 TCP 1.101.0.1:3000 -> 22.102.0.1:52910 10 6452 1 2025-11-14 09:35:46.179 00:00:10.363 TCP 23.104.0.1:38808 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:35:51.578 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39986 10 6452 1 2025-11-14 09:36:46.586 00:00:10.369 TCP 23.104.0.1:33384 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:36:51.805 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:52142 10 6452 1 2025-11-14 09:37:20.015 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 09:37:20.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 09:37:46.994 00:00:10.325 TCP 23.104.0.1:44874 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:37:52.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60728 10 6452 1 2025-11-14 09:38:47.355 00:00:10.363 TCP 23.104.0.1:54532 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:38:52.302 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48788 10 6452 1 2025-11-14 09:35:56.978 00:05:04.402 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 09:39:47.765 00:00:10.373 TCP 23.104.0.1:47012 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:35:56.975 00:05:04.408 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 09:39:52.519 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44534 10 6452 1 2025-11-14 09:40:48.191 00:00:10.325 TCP 23.104.0.1:55344 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:40:52.747 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33442 10 6452 1 2025-11-14 09:41:48.555 00:00:10.364 TCP 23.104.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:41:52.965 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44558 10 6452 1 2025-11-14 09:42:20.479 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 09:42:20.532 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 09:42:48.966 00:00:10.327 TCP 23.104.0.1:56646 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:42:53.181 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40104 10 6452 1 2025-11-14 09:43:49.323 00:00:10.364 TCP 23.104.0.1:43640 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:43:53.394 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41396 10 6452 1 2025-11-14 09:44:49.732 00:00:15.139 TCP 23.104.0.1:34704 -> 1.101.0.1:3000 15 1926 1 2025-11-14 09:44:53.612 00:00:11.145 TCP 1.101.0.1:3000 -> 22.102.0.1:49718 12 10375 1 2025-11-14 09:41:56.980 00:05:04.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 09:45:54.798 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48248 10 6452 1 2025-11-14 09:41:56.978 00:05:04.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 09:45:54.914 00:00:10.377 TCP 23.104.0.1:57320 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:46:55.333 00:00:10.365 TCP 23.104.0.1:43528 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:46:55.039 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47882 10 6452 1 2025-11-14 09:47:20.180 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 09:47:20.524 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 09:47:55.733 00:00:10.367 TCP 23.104.0.1:37658 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:47:55.252 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52618 10 6452 1 2025-11-14 09:48:56.139 00:00:10.510 TCP 23.104.0.1:32906 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:48:55.469 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52406 10 6452 1 2025-11-14 09:49:55.688 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:43784 10 6452 1 2025-11-14 09:49:56.683 00:00:10.359 TCP 23.104.0.1:56642 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:50:55.858 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37588 10 6452 1 2025-11-14 09:50:57.099 00:00:10.360 TCP 23.104.0.1:60394 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:47:56.983 00:05:04.424 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 09:47:56.984 00:05:04.419 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 09:51:56.086 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56920 10 6452 1 2025-11-14 09:51:57.495 00:00:10.485 TCP 23.104.0.1:46560 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:52:21.109 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 09:52:21.064 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 09:52:56.293 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:56934 10 6452 1 2025-11-14 09:52:58.018 00:00:10.372 TCP 23.104.0.1:51574 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:53:56.500 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33560 10 6452 1 2025-11-14 09:53:58.427 00:00:10.366 TCP 23.104.0.1:38886 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:54:56.724 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50694 10 6452 1 2025-11-14 09:54:58.832 00:00:10.336 TCP 23.104.0.1:55584 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:55:59.209 00:00:10.611 TCP 23.104.0.1:33926 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:55:56.940 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:50620 10 6452 1 2025-11-14 09:56:59.858 00:00:10.374 TCP 23.104.0.1:48634 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:56:57.204 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53494 10 6452 1 2025-11-14 09:57:20.605 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 09:57:20.559 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 09:53:56.986 00:05:04.418 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 09:53:56.984 00:05:04.423 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 09:58:00.272 00:00:10.377 TCP 23.104.0.1:55680 -> 1.101.0.1:3000 11 1507 1 2025-11-14 09:57:57.412 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59308 10 6452 1 Summary: total flows: 162, total bytes: 499067, total packets: 1563, avg bps: 1113, avg pps: 0, avg bpp: 319 Time window: 2025-11-14 08:59:16 - 2025-11-14 09:59:01 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0046s User: 0.0012s Wall: 0.0022s flows/second: 73736.0 Runtime: 0.0022s