Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 13:58:53.724 00:00:10.327 TCP 23.104.0.1:60866 -> 1.101.0.1:3000 11 1507 1 2025-11-14 13:59:15.379 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34664 10 6452 1 2025-11-14 13:59:54.105 00:00:10.366 TCP 23.104.0.1:58528 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:00:15.550 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38442 10 6452 1 2025-11-14 14:00:54.508 00:00:10.329 TCP 23.104.0.1:33796 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:01:15.758 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50684 10 6452 1 2025-11-14 14:01:54.873 00:00:10.339 TCP 23.104.0.1:40136 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:02:25.362 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 14:02:15.980 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:42142 10 6452 1 2025-11-14 14:02:25.487 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 14:02:55.253 00:00:10.365 TCP 23.104.0.1:44064 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:03:16.228 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59780 10 6452 1 2025-11-14 13:59:57.083 00:05:04.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 14:03:55.658 00:00:10.390 TCP 23.104.0.1:39352 -> 1.101.0.1:3000 11 1507 1 2025-11-14 13:59:57.080 00:05:04.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 14:04:16.458 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37868 10 6452 1 2025-11-14 14:04:56.108 00:00:10.326 TCP 23.104.0.1:39696 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:05:16.683 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34420 10 6452 1 2025-11-14 14:05:56.469 00:00:10.319 TCP 23.104.0.1:48886 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:06:16.862 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60282 10 6452 1 2025-11-14 14:06:56.823 00:00:10.370 TCP 23.104.0.1:60418 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:07:25.727 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 14:07:25.404 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 14:07:17.080 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38260 10 6452 1 2025-11-14 14:07:57.224 00:00:10.367 TCP 23.104.0.1:54288 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:08:17.300 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58194 10 6452 1 2025-11-14 14:08:57.626 00:00:10.375 TCP 23.104.0.1:41812 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:09:17.521 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42832 10 6452 1 2025-11-14 14:05:57.085 00:05:04.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 14:05:57.084 00:05:04.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 14:09:58.033 00:00:10.633 TCP 23.104.0.1:35782 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:10:17.734 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50846 10 6452 1 2025-11-14 14:10:58.709 00:00:10.363 TCP 23.104.0.1:58868 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:11:17.961 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:40514 12 6556 1 2025-11-14 14:11:59.111 00:00:10.365 TCP 23.104.0.1:43882 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:12:25.675 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 14:12:25.569 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 14:12:18.201 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57362 10 6452 1 2025-11-14 14:12:59.508 00:00:10.366 TCP 23.104.0.1:43092 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:13:18.392 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45330 10 6452 1 2025-11-14 14:13:59.910 00:00:10.324 TCP 23.104.0.1:35126 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:14:18.608 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35900 10 6452 1 2025-11-14 14:15:00.270 00:00:10.380 TCP 23.104.0.1:59404 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:15:18.821 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58662 10 6452 1 2025-11-14 14:11:57.085 00:05:04.431 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 14:11:57.087 00:05:04.427 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 14:16:00.688 00:00:10.375 TCP 23.104.0.1:36038 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:16:19.070 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52926 10 6452 1 2025-11-14 14:17:01.113 00:00:10.366 TCP 23.104.0.1:48402 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:17:25.648 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 14:17:25.898 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 14:17:19.289 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37952 10 6452 1 2025-11-14 14:18:01.517 00:00:11.053 TCP 23.104.0.1:43176 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:18:19.508 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60304 10 6452 1 2025-11-14 14:19:02.610 00:00:10.364 TCP 23.104.0.1:57904 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:19:19.737 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52296 10 6452 1 2025-11-14 14:20:03.013 00:00:10.368 TCP 23.104.0.1:41218 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:20:19.964 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45126 10 6452 1 2025-11-14 14:21:03.416 00:00:10.367 TCP 23.104.0.1:47658 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:21:20.148 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40222 10 6452 1 2025-11-14 14:17:57.088 00:05:04.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 14:17:57.087 00:05:04.461 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 14:22:03.819 00:00:10.365 TCP 23.104.0.1:42194 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:22:26.189 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 14:22:26.209 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 14:22:20.355 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48062 10 6452 1 2025-11-14 14:23:04.223 00:00:10.329 TCP 23.104.0.1:60658 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:23:20.565 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58010 10 6452 1 2025-11-14 14:24:04.589 00:00:10.367 TCP 23.104.0.1:43928 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:24:20.774 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39388 10 6452 1 2025-11-14 14:25:04.990 00:00:10.364 TCP 23.104.0.1:53378 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:25:20.954 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:39210 10 6452 1 2025-11-14 14:26:05.392 00:00:10.326 TCP 23.104.0.1:54234 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:26:21.146 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41798 10 6452 1 2025-11-14 14:27:05.758 00:00:10.339 TCP 23.104.0.1:45318 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:27:26.025 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 14:27:25.940 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 14:27:21.373 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48188 10 6452 1 2025-11-14 14:23:57.092 00:05:04.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 14:23:57.094 00:05:04.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 14:28:06.149 00:00:10.329 TCP 23.104.0.1:52130 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:28:21.588 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33848 10 6452 1 2025-11-14 14:29:06.521 00:00:10.366 TCP 23.104.0.1:47434 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:29:21.760 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58700 10 6452 1 2025-11-14 14:30:06.925 00:00:10.660 TCP 23.104.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:30:21.976 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38062 10 6452 1 2025-11-14 14:31:07.650 00:00:10.321 TCP 23.104.0.1:47432 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:31:22.204 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53084 10 6452 1 2025-11-14 14:32:08.012 00:00:10.365 TCP 23.104.0.1:40258 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:32:25.746 00:00:00.018 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 14:32:25.762 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 14:32:22.374 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48790 10 6452 1 2025-11-14 14:33:08.420 00:00:10.436 TCP 23.104.0.1:51314 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:33:22.554 00:00:10.801 TCP 1.101.0.1:3000 -> 22.102.0.1:44498 10 6452 1 2025-11-14 14:29:57.090 00:05:04.428 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 14:29:57.089 00:05:04.432 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 14:34:08.901 00:00:10.367 TCP 23.104.0.1:42900 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:34:23.382 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52712 10 6452 1 2025-11-14 14:35:09.301 00:00:10.375 TCP 23.104.0.1:41608 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:35:23.608 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49946 10 6452 1 2025-11-14 14:36:09.711 00:00:10.384 TCP 23.104.0.1:35712 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:36:23.824 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55774 10 6452 1 2025-11-14 14:37:10.128 00:00:10.417 TCP 23.104.0.1:56482 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:37:26.038 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 14:37:26.071 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 14:37:24.069 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47702 10 6452 1 2025-11-14 14:38:10.584 00:00:10.944 TCP 23.104.0.1:52804 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:38:24.290 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41524 10 6452 1 2025-11-14 14:39:11.567 00:00:10.324 TCP 23.104.0.1:45886 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:39:24.506 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46300 10 6452 1 2025-11-14 14:35:57.089 00:05:04.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 14:35:57.091 00:05:04.440 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 14:40:11.927 00:00:10.466 TCP 23.104.0.1:51370 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:40:24.691 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48170 10 6452 1 2025-11-14 14:41:12.451 00:00:10.364 TCP 23.104.0.1:37260 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:41:24.908 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46484 10 6452 1 2025-11-14 14:42:26.131 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 14:42:12.851 00:00:10.380 TCP 23.104.0.1:42500 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:42:26.436 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 14:42:25.121 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35056 10 6452 1 2025-11-14 14:43:13.264 00:00:10.410 TCP 23.104.0.1:46036 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:43:25.335 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42600 10 6452 1 2025-11-14 14:44:13.694 00:00:10.368 TCP 23.104.0.1:52338 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:44:25.513 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40164 10 6452 1 2025-11-14 14:45:14.105 00:00:10.439 TCP 23.104.0.1:47058 -> 1.101.0.1:3000 15 1926 1 2025-11-14 14:45:25.723 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:49712 12 10375 1 2025-11-14 14:41:57.094 00:05:04.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 14:41:57.092 00:05:04.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 14:46:14.582 00:00:10.366 TCP 23.104.0.1:42594 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:46:25.972 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:46068 10 6452 1 2025-11-14 14:47:14.988 00:00:10.357 TCP 23.104.0.1:46260 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:47:26.509 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 14:47:26.477 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 14:47:26.215 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37482 10 6452 1 2025-11-14 14:48:15.384 00:00:10.374 TCP 23.104.0.1:54516 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:48:26.436 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47346 10 6452 1 2025-11-14 14:49:15.795 00:00:10.370 TCP 23.104.0.1:35532 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:49:26.608 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47964 10 6452 1 2025-11-14 14:50:16.197 00:00:10.364 TCP 23.104.0.1:48948 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:50:26.831 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44216 10 6452 1 2025-11-14 14:51:16.597 00:00:10.372 TCP 23.104.0.1:45684 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:51:27.078 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38108 10 6452 1 2025-11-14 14:47:57.094 00:05:04.439 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 14:47:57.091 00:05:04.444 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 14:52:26.473 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 14:52:26.369 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 14:52:17.006 00:00:10.357 TCP 23.104.0.1:41952 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:52:27.247 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57910 10 6452 1 2025-11-14 14:53:17.405 00:00:10.364 TCP 23.104.0.1:55580 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:53:27.472 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60872 10 6452 1 2025-11-14 14:54:17.808 00:00:10.365 TCP 23.104.0.1:58396 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:54:27.679 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37606 10 6452 1 2025-11-14 14:55:18.212 00:00:10.366 TCP 23.104.0.1:53558 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:55:27.891 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60206 10 6452 1 2025-11-14 14:56:18.615 00:00:10.573 TCP 23.104.0.1:48518 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:56:28.112 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48844 10 6452 1 2025-11-14 14:57:26.539 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 14:57:26.565 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 14:57:19.229 00:00:10.365 TCP 23.104.0.1:39912 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:57:28.327 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39030 10 6452 1 2025-11-14 14:53:57.095 00:05:04.449 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 14:53:57.094 00:05:04.455 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 14:58:19.632 00:00:10.363 TCP 23.104.0.1:42428 -> 1.101.0.1:3000 11 1507 1 2025-11-14 14:58:28.540 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33528 10 6452 1 Summary: total flows: 164, total bytes: 502794, total packets: 1580, avg bps: 1114, avg pps: 0, avg bpp: 318 Time window: 2025-11-14 13:58:53 - 2025-11-14 14:59:01 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0053s User: 0.0018s Wall: 0.0027s flows/second: 60386.8 Runtime: 0.0027s