Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 18:58:50.480 00:00:10.370 TCP 23.104.0.1:39414 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:58:53.365 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60618 10 6452 1 2025-11-14 18:59:50.891 00:00:10.342 TCP 23.104.0.1:56566 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:59:53.578 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58814 10 6452 1 2025-11-14 19:00:51.268 00:00:10.325 TCP 23.104.0.1:59322 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:00:53.790 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48784 10 6452 1 2025-11-14 19:01:51.630 00:00:10.366 TCP 23.104.0.1:41802 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:01:53.961 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:51748 10 6452 1 2025-11-14 19:02:31.314 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 19:02:31.510 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 19:02:52.031 00:00:10.365 TCP 23.104.0.1:40090 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:02:54.154 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35116 10 6452 1 2025-11-14 18:59:57.164 00:05:04.477 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 19:03:54.363 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40456 10 6452 1 2025-11-14 19:03:52.434 00:00:10.371 TCP 23.104.0.1:40910 -> 1.101.0.1:3000 11 1507 1 2025-11-14 18:59:57.167 00:05:04.472 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 19:04:52.834 00:00:10.344 TCP 23.104.0.1:37504 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:04:54.571 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40748 10 6452 1 2025-11-14 19:05:54.785 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35166 10 6452 1 2025-11-14 19:05:53.217 00:00:10.369 TCP 23.104.0.1:58684 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:06:53.621 00:00:10.371 TCP 23.104.0.1:55614 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:06:55.002 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37910 10 6452 1 2025-11-14 19:07:31.481 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 19:07:31.701 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 19:07:54.022 00:00:10.375 TCP 23.104.0.1:36462 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:07:55.232 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:42792 10 6452 1 2025-11-14 19:08:55.496 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37332 10 6452 1 2025-11-14 19:08:54.428 00:00:10.330 TCP 23.104.0.1:50190 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:05:57.167 00:05:04.473 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 19:09:54.794 00:00:10.374 TCP 23.104.0.1:60948 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:09:55.707 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57352 10 6452 1 2025-11-14 19:05:57.165 00:05:04.479 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 19:10:55.928 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:58980 10 6452 1 2025-11-14 19:10:55.205 00:00:10.377 TCP 23.104.0.1:33858 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:11:55.618 00:00:10.367 TCP 23.104.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:11:56.161 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44918 10 6452 1 2025-11-14 19:12:31.844 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 19:12:31.880 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 19:12:56.025 00:00:10.366 TCP 23.104.0.1:40118 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:12:56.386 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:32782 10 6452 1 2025-11-14 19:13:56.607 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37570 10 6452 1 2025-11-14 19:13:56.438 00:00:10.331 TCP 23.104.0.1:39396 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:14:56.801 00:00:10.366 TCP 23.104.0.1:47426 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:14:56.829 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42328 10 6452 1 2025-11-14 19:11:57.166 00:05:04.480 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 19:11:57.169 00:05:04.475 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 19:15:57.204 00:00:10.440 TCP 23.104.0.1:49020 -> 1.101.0.1:3000 15 1926 1 2025-11-14 19:15:57.070 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:48128 12 10369 1 2025-11-14 19:16:57.320 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51814 10 6452 1 2025-11-14 19:16:57.683 00:00:10.375 TCP 23.104.0.1:59394 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:17:31.892 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 19:17:31.765 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 19:17:57.531 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46030 10 6452 1 2025-11-14 19:17:58.105 00:00:10.364 TCP 23.104.0.1:41870 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:18:58.510 00:00:10.365 TCP 23.104.0.1:42494 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:18:57.738 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42004 10 6452 1 2025-11-14 19:19:58.912 00:00:10.364 TCP 23.104.0.1:39172 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:19:57.948 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47900 10 6452 1 2025-11-14 19:20:59.319 00:00:10.321 TCP 23.104.0.1:41254 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:20:58.174 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50000 10 6452 1 2025-11-14 19:17:57.170 00:05:04.474 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 19:17:57.168 00:05:04.479 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 19:21:58.350 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44164 10 6452 1 2025-11-14 19:21:59.679 00:00:10.368 TCP 23.104.0.1:48084 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:22:31.710 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 19:22:31.767 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 19:22:58.563 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45094 10 6452 1 2025-11-14 19:23:00.104 00:00:10.376 TCP 23.104.0.1:33434 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:23:58.729 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:43152 11 6504 1 2025-11-14 19:24:00.522 00:00:10.362 TCP 23.104.0.1:59482 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:24:58.997 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:48962 10 6452 1 2025-11-14 19:25:00.925 00:00:10.384 TCP 23.104.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:26:01.346 00:00:10.326 TCP 23.104.0.1:33832 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:25:59.185 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56096 10 6452 1 2025-11-14 19:26:59.402 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:34072 10 6452 1 2025-11-14 19:27:01.709 00:00:10.366 TCP 23.104.0.1:50968 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:27:31.900 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 19:27:32.036 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 19:23:57.170 00:05:04.480 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 19:23:57.172 00:05:04.475 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 19:27:59.584 00:00:10.352 TCP 1.101.0.1:3000 -> 22.102.0.1:56240 10 6452 1 2025-11-14 19:28:02.117 00:00:10.367 TCP 23.104.0.1:57384 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:28:59.975 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:60288 10 6452 1 2025-11-14 19:29:02.523 00:00:10.331 TCP 23.104.0.1:47226 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:30:00.209 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40116 10 6452 1 2025-11-14 19:30:02.892 00:00:10.369 TCP 23.104.0.1:60554 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:31:00.420 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49350 10 6452 1 2025-11-14 19:31:03.304 00:00:10.326 TCP 23.104.0.1:46220 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:32:00.636 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34422 10 6452 1 2025-11-14 19:32:03.668 00:00:10.846 TCP 23.104.0.1:33006 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:32:32.147 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 19:32:32.155 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 19:33:00.815 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41290 10 6452 1 2025-11-14 19:33:04.556 00:00:10.363 TCP 23.104.0.1:43912 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:29:57.172 00:05:04.477 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 19:29:57.169 00:05:04.482 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 19:34:01.031 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40130 10 6452 1 2025-11-14 19:34:04.957 00:00:10.365 TCP 23.104.0.1:58040 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:35:01.203 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59918 10 6452 1 2025-11-14 19:35:05.365 00:00:10.323 TCP 23.104.0.1:54602 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:36:01.420 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43844 10 6452 1 2025-11-14 19:36:05.733 00:00:10.351 TCP 23.104.0.1:57584 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:37:01.645 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58996 10 6452 1 2025-11-14 19:37:06.127 00:00:10.324 TCP 23.104.0.1:35320 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:37:32.266 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 19:37:32.194 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 19:38:06.490 00:00:10.366 TCP 23.104.0.1:51184 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:38:01.857 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42418 10 6452 1 2025-11-14 19:39:02.096 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50832 10 6452 1 2025-11-14 19:39:06.895 00:00:10.367 TCP 23.104.0.1:54324 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:35:57.171 00:05:04.482 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 19:35:57.173 00:05:04.477 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 19:40:02.273 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60778 10 6452 1 2025-11-14 19:40:07.304 00:00:10.377 TCP 23.104.0.1:51266 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:41:02.484 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58562 10 6452 1 2025-11-14 19:41:07.715 00:00:10.359 TCP 23.104.0.1:59658 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:42:02.697 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36868 10 6452 1 2025-11-14 19:42:08.114 00:00:10.876 TCP 23.104.0.1:58540 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:42:32.376 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 19:42:32.299 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 19:43:02.912 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49342 10 6452 1 2025-11-14 19:43:09.028 00:00:10.364 TCP 23.104.0.1:44260 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:44:09.430 00:00:14.538 TCP 23.104.0.1:45572 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:44:03.127 00:00:20.755 TCP 1.101.0.1:3000 -> 22.102.0.1:42152 10 6452 1 2025-11-14 19:45:13.925 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53160 10 6452 1 2025-11-14 19:45:14.010 00:00:10.365 TCP 23.104.0.1:52420 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:41:57.171 00:05:04.487 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 19:41:57.175 00:05:04.477 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 19:46:14.156 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-11-14 19:46:14.416 00:00:10.322 TCP 23.104.0.1:46282 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:47:14.776 00:00:10.365 TCP 23.104.0.1:52214 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:47:14.359 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53800 10 6452 1 2025-11-14 19:47:32.976 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 19:47:33.167 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 19:48:14.539 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33748 10 6452 1 2025-11-14 19:48:15.181 00:00:11.243 TCP 23.104.0.1:51820 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:49:16.469 00:00:10.372 TCP 23.104.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:49:14.764 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:42312 10 6452 1 2025-11-14 19:50:15.035 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40658 10 6452 1 2025-11-14 19:50:16.881 00:00:10.341 TCP 23.104.0.1:58604 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:51:15.246 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43322 10 6452 1 2025-11-14 19:51:17.275 00:00:10.367 TCP 23.104.0.1:59182 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:47:57.178 00:05:04.493 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 19:47:57.176 00:05:04.498 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 19:52:15.464 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41694 10 6452 1 2025-11-14 19:52:17.675 00:00:10.369 TCP 23.104.0.1:58842 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:52:32.975 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 19:52:32.916 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 19:53:15.644 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53962 10 6452 1 2025-11-14 19:53:18.105 00:00:10.366 TCP 23.104.0.1:36812 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:54:15.860 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42964 10 6452 1 2025-11-14 19:54:18.508 00:00:10.361 TCP 23.104.0.1:56870 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:55:16.087 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59888 10 6452 1 2025-11-14 19:55:18.905 00:00:10.372 TCP 23.104.0.1:50768 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:56:16.312 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44702 10 6452 1 2025-11-14 19:56:19.309 00:00:10.323 TCP 23.104.0.1:54680 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:57:16.487 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35618 10 6452 1 2025-11-14 19:57:19.670 00:00:10.325 TCP 23.104.0.1:39934 -> 1.101.0.1:3000 11 1507 1 2025-11-14 19:57:32.571 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 19:57:32.481 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 19:53:57.178 00:05:04.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 19:53:57.180 00:05:04.486 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 19:58:16.703 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47724 10 6452 1 2025-11-14 19:58:20.034 00:00:10.365 TCP 23.104.0.1:55804 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502736, total packets: 1579, avg bps: 1113, avg pps: 0, avg bpp: 318 Time window: 2025-11-14 18:58:50 - 2025-11-14 19:59:01 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0021s Wall: 0.0018s flows/second: 89368.0 Runtime: 0.0018s