Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 12:58:51.549 00:00:10.364 TCP 23.104.0.1:49572 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:59:28.106 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34472 10 6452 1 2025-11-15 12:59:51.949 00:00:10.376 TCP 23.104.0.1:38788 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:00:28.322 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38324 10 6452 1 2025-11-15 13:00:52.351 00:00:10.325 TCP 23.104.0.1:52014 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:01:28.536 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48486 10 6452 1 2025-11-15 13:01:52.716 00:00:10.376 TCP 23.104.0.1:36766 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:02:28.756 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34220 10 6452 1 2025-11-15 13:02:53.248 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 13:02:53.293 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 13:02:53.138 00:00:10.366 TCP 23.104.0.1:45804 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:03:28.971 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:60894 10 6452 1 2025-11-15 12:59:57.492 00:05:04.635 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 13:03:53.542 00:00:10.362 TCP 23.104.0.1:53426 -> 1.101.0.1:3000 11 1507 1 2025-11-15 12:59:57.490 00:05:04.640 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 13:04:29.215 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41736 10 6452 1 2025-11-15 13:04:53.941 00:00:10.341 TCP 23.104.0.1:59238 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:05:29.431 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38464 10 6452 1 2025-11-15 13:05:54.321 00:00:10.322 TCP 23.104.0.1:35942 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:06:29.610 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46202 10 6452 1 2025-11-15 13:06:54.680 00:00:10.372 TCP 23.104.0.1:48740 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:07:29.822 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39954 10 6452 1 2025-11-15 13:07:53.386 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 13:07:53.024 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 13:07:55.111 00:00:10.374 TCP 23.104.0.1:59090 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:08:30.079 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45644 10 6452 1 2025-11-15 13:08:55.516 00:00:10.369 TCP 23.104.0.1:60400 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:09:30.291 00:00:10.290 TCP 1.101.0.1:3000 -> 22.102.0.1:54390 10 6452 1 2025-11-15 13:05:57.489 00:05:04.643 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 13:09:55.921 00:00:10.387 TCP 23.104.0.1:43494 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:05:57.492 00:05:04.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 13:10:30.627 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45548 10 6452 1 2025-11-15 13:10:56.343 00:00:10.442 TCP 23.104.0.1:52918 -> 1.101.0.1:3000 15 1926 1 2025-11-15 13:11:30.847 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:49466 12 10369 1 2025-11-15 13:11:56.824 00:00:10.364 TCP 23.104.0.1:56252 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:12:31.098 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52480 10 6452 1 2025-11-15 13:12:53.509 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 13:12:53.179 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 13:12:57.222 00:00:10.324 TCP 23.104.0.1:60648 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:13:31.319 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39032 10 6452 1 2025-11-15 13:13:57.585 00:00:10.321 TCP 23.104.0.1:47918 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:14:31.538 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33162 10 6452 1 2025-11-15 13:14:57.947 00:00:10.372 TCP 23.104.0.1:48350 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:15:31.759 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53428 10 6452 1 2025-11-15 13:11:57.493 00:05:04.640 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 13:11:57.496 00:05:04.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 13:15:58.356 00:00:10.364 TCP 23.104.0.1:57870 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:16:31.981 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57620 10 6452 1 2025-11-15 13:16:58.774 00:00:10.369 TCP 23.104.0.1:49272 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:17:32.214 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35342 10 6452 1 2025-11-15 13:17:53.310 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 13:17:53.441 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 13:17:59.183 00:00:10.364 TCP 23.104.0.1:50808 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:18:32.426 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51510 10 6452 1 2025-11-15 13:18:59.587 00:00:10.366 TCP 23.104.0.1:60352 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:19:32.652 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39126 10 6452 1 2025-11-15 13:19:59.991 00:00:10.364 TCP 23.104.0.1:46934 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:20:32.860 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51668 10 6452 1 2025-11-15 13:21:00.394 00:00:10.325 TCP 23.104.0.1:34078 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:21:33.087 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41156 10 6452 1 2025-11-15 13:17:57.497 00:05:04.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 13:17:57.495 00:05:04.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 13:22:00.754 00:00:10.660 TCP 23.104.0.1:52338 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:22:33.259 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54670 10 6452 1 2025-11-15 13:22:53.806 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 13:22:53.611 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 13:23:01.451 00:00:10.358 TCP 23.104.0.1:50178 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:23:33.472 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55354 10 6452 1 2025-11-15 13:24:01.846 00:00:10.384 TCP 23.104.0.1:56054 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:24:33.681 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50578 10 6452 1 2025-11-15 13:25:02.268 00:00:10.366 TCP 23.104.0.1:38086 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:25:33.895 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57670 10 6452 1 2025-11-15 13:26:02.674 00:00:10.610 TCP 23.104.0.1:43010 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:26:34.112 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56632 10 6452 1 2025-11-15 13:27:03.323 00:00:10.369 TCP 23.104.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:27:34.334 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38672 10 6452 1 2025-11-15 13:27:53.670 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 13:27:53.676 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 13:23:57.496 00:05:04.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 13:23:57.499 00:05:04.635 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 13:28:03.729 00:00:10.371 TCP 23.104.0.1:58524 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:28:34.543 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48944 10 6452 1 2025-11-15 13:29:04.137 00:00:10.325 TCP 23.104.0.1:53496 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:29:34.752 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41746 10 6452 1 2025-11-15 13:30:04.501 00:00:10.366 TCP 23.104.0.1:48696 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:30:34.925 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49104 10 6452 1 2025-11-15 13:31:04.903 00:00:10.466 TCP 23.104.0.1:46476 -> 1.101.0.1:3000 15 1926 1 2025-11-15 13:31:35.136 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:49128 12 10375 1 2025-11-15 13:32:05.408 00:00:10.375 TCP 23.104.0.1:59458 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:32:35.378 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33950 10 6452 1 2025-11-15 13:32:53.946 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 13:32:53.686 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 13:33:05.817 00:00:10.328 TCP 23.104.0.1:57592 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:33:35.591 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:42044 10 6452 1 2025-11-15 13:29:57.497 00:05:04.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 13:29:57.500 00:05:04.650 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 13:34:06.182 00:00:10.382 TCP 23.104.0.1:56978 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:34:35.784 00:00:10.827 TCP 1.101.0.1:3000 -> 22.102.0.1:45904 10 6452 1 2025-11-15 13:35:06.605 00:00:10.365 TCP 23.104.0.1:49292 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:35:36.649 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42954 10 6452 1 2025-11-15 13:36:07.010 00:00:10.364 TCP 23.104.0.1:39432 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:36:36.858 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60654 10 6452 1 2025-11-15 13:37:07.410 00:00:10.371 TCP 23.104.0.1:36276 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:37:37.086 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36650 10 6452 1 2025-11-15 13:37:53.926 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 13:37:53.790 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 13:38:07.817 00:00:10.363 TCP 23.104.0.1:38026 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:38:37.307 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49674 10 6452 1 2025-11-15 13:39:08.220 00:00:10.364 TCP 23.104.0.1:54574 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:39:37.531 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35142 10 6452 1 2025-11-15 13:35:57.501 00:05:04.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 13:35:57.504 00:05:04.647 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 13:40:08.618 00:00:10.323 TCP 23.104.0.1:47846 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:40:37.750 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42948 10 6452 1 2025-11-15 13:41:08.979 00:00:10.372 TCP 23.104.0.1:55336 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:41:37.964 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34504 12 6556 1 2025-11-15 13:42:09.386 00:00:10.324 TCP 23.104.0.1:46972 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:42:38.195 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56202 10 6452 1 2025-11-15 13:42:53.847 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 13:42:53.871 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 13:43:09.750 00:00:10.365 TCP 23.104.0.1:45654 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:43:38.420 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46246 10 6452 1 2025-11-15 13:44:10.146 00:00:10.367 TCP 23.104.0.1:55846 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:44:38.640 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53824 10 6452 1 2025-11-15 13:45:10.551 00:00:10.330 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:45:38.864 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:40426 10 6452 1 2025-11-15 13:41:57.501 00:05:04.654 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 13:41:57.504 00:05:04.649 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 13:46:10.936 00:00:10.375 TCP 23.104.0.1:57806 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:46:39.100 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58232 10 6452 1 2025-11-15 13:47:11.356 00:00:10.367 TCP 23.104.0.1:45812 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:47:39.273 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50032 10 6452 1 2025-11-15 13:47:54.113 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 13:47:54.008 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 13:48:11.762 00:00:10.380 TCP 23.104.0.1:44892 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:48:39.490 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36202 10 6452 1 2025-11-15 13:49:12.184 00:00:10.373 TCP 23.104.0.1:32770 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:49:39.699 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46822 10 6452 1 2025-11-15 13:50:12.592 00:00:10.324 TCP 23.104.0.1:47318 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:50:39.911 00:00:16.778 TCP 1.101.0.1:3000 -> 22.102.0.1:49758 10 6452 1 2025-11-15 13:51:12.957 00:00:10.366 TCP 23.104.0.1:42088 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:51:46.744 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49564 10 6452 1 2025-11-15 13:47:57.501 00:05:04.654 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 13:47:57.505 00:05:04.649 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 13:52:13.361 00:00:10.369 TCP 23.104.0.1:59542 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:52:54.217 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 13:52:54.084 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 13:52:46.912 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55610 10 6452 1 2025-11-15 13:53:13.767 00:00:10.328 TCP 23.104.0.1:32940 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:53:47.120 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55892 10 6452 1 2025-11-15 13:54:14.140 00:00:10.359 TCP 23.104.0.1:37946 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:54:47.343 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38578 10 6452 1 2025-11-15 13:55:14.537 00:00:10.364 TCP 23.104.0.1:42522 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:55:47.563 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52644 10 6452 1 2025-11-15 13:56:14.938 00:00:10.376 TCP 23.104.0.1:57976 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:56:47.785 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53052 10 6452 1 2025-11-15 13:57:15.353 00:00:10.590 TCP 23.104.0.1:57660 -> 1.101.0.1:3000 11 1507 1 2025-11-15 13:57:53.961 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 13:57:54.300 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 13:57:47.995 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51434 10 6452 1 2025-11-15 13:53:57.502 00:05:04.654 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 13:53:57.505 00:05:04.649 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 13:58:15.984 00:00:10.327 TCP 23.104.0.1:47768 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500678, total packets: 1576, avg bps: 1109, avg pps: 0, avg bpp: 317 Time window: 2025-11-15 12:58:51 - 2025-11-15 13:59:02 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0020s Wall: 0.0025s flows/second: 64969.3 Runtime: 0.0025s