Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 17:59:09.514 00:00:10.368 TCP 23.104.0.1:36310 -> 1.101.0.1:3000 11 1507 1 2025-11-14 17:59:37.199 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:48704 10 6452 1 2025-11-14 18:00:09.923 00:00:10.385 TCP 23.104.0.1:37434 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:00:37.484 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43330 10 6452 1 2025-11-14 18:01:10.359 00:00:10.386 TCP 23.104.0.1:38540 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:01:37.697 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51294 10 6452 1 2025-11-14 18:02:10.788 00:00:10.323 TCP 23.104.0.1:35624 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:02:30.384 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 18:02:30.607 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 18:02:37.922 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:47084 10 6452 1 2025-11-14 18:03:11.149 00:00:10.369 TCP 23.104.0.1:56934 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:03:38.163 00:00:12.540 TCP 1.101.0.1:3000 -> 22.102.0.1:45208 10 6452 1 2025-11-14 17:59:57.147 00:05:04.472 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 17:59:57.145 00:05:04.477 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 18:04:11.557 00:00:10.364 TCP 23.104.0.1:60202 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:04:40.741 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:59450 10 6452 1 2025-11-14 18:05:11.967 00:00:10.373 TCP 23.104.0.1:51990 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:05:40.926 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53042 10 6452 1 2025-11-14 18:06:12.375 00:00:10.364 TCP 23.104.0.1:39710 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:06:41.140 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49402 10 6452 1 2025-11-14 18:07:12.775 00:00:10.368 TCP 23.104.0.1:47840 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:07:30.433 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 18:07:30.365 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 18:07:41.355 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40504 10 6452 1 2025-11-14 18:08:13.183 00:00:10.325 TCP 23.104.0.1:44782 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:08:41.570 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49598 10 6452 1 2025-11-14 18:09:13.543 00:00:10.371 TCP 23.104.0.1:56138 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:09:41.790 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39190 10 6452 1 2025-11-14 18:05:57.148 00:05:04.476 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 18:05:57.150 00:05:04.471 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 18:10:13.949 00:00:10.369 TCP 23.104.0.1:39100 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:10:42.005 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47190 10 6452 1 2025-11-14 18:11:14.355 00:00:10.319 TCP 23.104.0.1:56962 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:11:42.228 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56574 10 6452 1 2025-11-14 18:12:14.712 00:00:10.960 TCP 23.104.0.1:36588 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:12:30.842 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 18:12:30.802 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 18:12:42.452 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54592 10 6452 1 2025-11-14 18:13:15.707 00:00:10.372 TCP 23.104.0.1:44248 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:13:42.661 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59776 10 6452 1 2025-11-14 18:14:16.110 00:00:10.365 TCP 23.104.0.1:59016 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:14:42.881 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56626 10 6452 1 2025-11-14 18:15:16.513 00:00:10.362 TCP 23.104.0.1:53958 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:15:43.108 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:53502 10 6452 1 2025-11-14 18:11:57.152 00:05:04.470 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 18:11:57.149 00:05:04.476 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 18:16:16.916 00:00:10.810 TCP 23.104.0.1:56436 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:16:43.353 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:35540 10 6452 1 2025-11-14 18:17:30.572 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 18:17:17.762 00:00:10.370 TCP 23.104.0.1:53880 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:17:30.690 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 18:17:43.564 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60846 10 6452 1 2025-11-14 18:18:18.172 00:00:10.368 TCP 23.104.0.1:48624 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:18:43.791 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47950 10 6452 1 2025-11-14 18:19:18.573 00:00:10.328 TCP 23.104.0.1:42756 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:19:44.015 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43364 10 6452 1 2025-11-14 18:20:18.935 00:00:10.376 TCP 23.104.0.1:59936 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:20:44.231 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57288 10 6452 1 2025-11-14 18:21:19.349 00:00:10.366 TCP 23.104.0.1:43530 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:21:44.454 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35120 10 6452 1 2025-11-14 18:17:57.149 00:05:04.477 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 18:17:57.152 00:05:04.471 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 18:22:30.748 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 18:22:19.757 00:00:10.334 TCP 23.104.0.1:54956 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:22:30.588 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 18:22:44.676 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39512 10 6452 1 2025-11-14 18:23:20.129 00:00:10.364 TCP 23.104.0.1:52048 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:23:44.847 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:48284 10 6452 1 2025-11-14 18:24:20.530 00:00:10.367 TCP 23.104.0.1:48624 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:24:45.085 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44208 10 6452 1 2025-11-14 18:25:20.931 00:00:10.584 TCP 23.104.0.1:60556 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:25:45.308 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60348 10 6452 1 2025-11-14 18:26:21.556 00:00:10.374 TCP 23.104.0.1:44394 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:26:45.529 00:00:10.538 TCP 1.101.0.1:3000 -> 22.102.0.1:39092 10 6452 1 2025-11-14 18:27:30.893 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 18:27:30.667 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 18:27:21.963 00:00:10.325 TCP 23.104.0.1:52722 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:27:46.107 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55214 10 6452 1 2025-11-14 18:23:57.152 00:05:04.473 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 18:23:57.150 00:05:04.478 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 18:28:22.325 00:00:25.479 TCP 23.104.0.1:52562 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:28:46.319 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:58320 10 6452 1 2025-11-14 18:29:37.859 00:00:10.372 TCP 23.104.0.1:59960 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:29:46.564 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44660 10 6452 1 2025-11-14 18:30:38.269 00:00:10.360 TCP 23.104.0.1:55984 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:30:46.789 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40448 10 6452 1 2025-11-14 18:31:38.671 00:00:10.363 TCP 23.104.0.1:46608 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:31:47.002 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44514 10 6452 1 2025-11-14 18:32:30.893 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 18:32:30.781 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 18:32:39.113 00:00:10.328 TCP 23.104.0.1:46460 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:32:47.223 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:47442 10 6452 1 2025-11-14 18:33:39.474 00:00:10.436 TCP 23.104.0.1:47886 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:29:57.151 00:05:04.479 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 18:33:47.454 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40712 10 6452 1 2025-11-14 18:29:57.155 00:05:04.474 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 18:34:39.951 00:00:10.374 TCP 23.104.0.1:50932 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:34:47.679 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33484 10 6452 1 2025-11-14 18:35:40.361 00:00:10.364 TCP 23.104.0.1:58066 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:35:47.906 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47264 10 6452 1 2025-11-14 18:36:40.770 00:00:10.371 TCP 23.104.0.1:34324 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:36:48.127 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33016 10 6452 1 2025-11-14 18:37:31.215 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 18:37:31.042 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 18:37:41.181 00:00:10.362 TCP 23.104.0.1:52714 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:37:48.343 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48480 10 6452 1 2025-11-14 18:38:41.581 00:00:10.371 TCP 23.104.0.1:60522 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:38:48.562 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45932 10 6452 1 2025-11-14 18:39:41.987 00:00:10.324 TCP 23.104.0.1:41898 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:39:48.773 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55914 10 6452 1 2025-11-14 18:35:57.155 00:05:04.475 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 18:35:57.153 00:05:04.480 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 18:40:42.351 00:00:10.326 TCP 23.104.0.1:36298 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:40:48.992 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54022 10 6452 1 2025-11-14 18:41:42.719 00:00:10.377 TCP 23.104.0.1:39018 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:41:49.215 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51908 10 6452 1 2025-11-14 18:42:31.345 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 18:42:31.389 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 18:42:43.130 00:00:10.365 TCP 23.104.0.1:35142 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:42:49.426 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53702 10 6452 1 2025-11-14 18:43:43.533 00:00:10.365 TCP 23.104.0.1:49538 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:43:49.634 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37518 10 6452 1 2025-11-14 18:44:43.939 00:00:10.338 TCP 23.104.0.1:46080 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:44:49.847 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59216 10 6452 1 2025-11-14 18:45:44.316 00:00:10.369 TCP 23.104.0.1:44878 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:45:50.029 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55128 10 6452 1 2025-11-14 18:41:57.156 00:05:04.478 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 18:41:57.158 00:05:04.474 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 18:46:44.721 00:00:10.371 TCP 23.104.0.1:36484 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:46:50.250 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49732 10 6452 1 2025-11-14 18:47:31.062 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 18:47:31.177 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 18:47:45.129 00:00:10.365 TCP 23.104.0.1:53370 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:47:50.466 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59078 10 6452 1 2025-11-14 18:48:45.534 00:00:10.365 TCP 23.104.0.1:55672 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:48:50.677 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52950 10 6452 1 2025-11-14 18:49:45.942 00:00:10.385 TCP 23.104.0.1:51980 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:49:50.898 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37060 10 6452 1 2025-11-14 18:50:46.361 00:00:10.326 TCP 23.104.0.1:48466 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:50:51.113 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33396 10 6452 1 2025-11-14 18:51:46.726 00:00:10.369 TCP 23.104.0.1:32876 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:47:57.162 00:05:04.471 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 18:51:51.324 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38638 10 6452 1 2025-11-14 18:47:57.160 00:05:04.477 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 18:52:31.189 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 18:52:31.274 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 18:52:47.134 00:00:10.388 TCP 23.104.0.1:43572 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:52:51.540 00:00:10.700 TCP 1.101.0.1:3000 -> 22.102.0.1:54880 10 6452 1 2025-11-14 18:53:47.562 00:00:10.365 TCP 23.104.0.1:44418 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:53:52.277 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50770 10 6452 1 2025-11-14 18:54:47.968 00:00:10.373 TCP 23.104.0.1:57774 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:54:52.500 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35674 10 6452 1 2025-11-14 18:55:48.382 00:00:10.328 TCP 23.104.0.1:49218 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:55:52.677 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:37580 10 6452 1 2025-11-14 18:56:48.746 00:00:10.369 TCP 23.104.0.1:43348 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:56:52.860 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50084 10 6452 1 2025-11-14 18:57:31.589 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 18:57:31.503 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 18:57:49.151 00:00:11.270 TCP 23.104.0.1:52404 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:53:57.164 00:05:04.471 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 18:57:53.084 00:00:10.247 TCP 1.101.0.1:3000 -> 22.102.0.1:52650 10 6452 1 2025-11-14 18:53:57.162 00:05:04.477 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 162, total bytes: 490389, total packets: 1551, avg bps: 1092, avg pps: 0, avg bpp: 316 Time window: 2025-11-14 17:59:09 - 2025-11-14 18:59:01 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0035s User: 0.0035s Wall: 0.0033s flows/second: 49330.4 Runtime: 0.0033s