Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 14:58:43.672 00:00:10.368 TCP 23.104.0.1:55386 -> 1.101.0.1:3000 11 1507 1 2025-11-15 14:59:03.206 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38766 10 6452 1 2025-11-15 14:59:44.101 00:00:10.366 TCP 23.104.0.1:60032 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:00:03.433 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36654 10 6452 1 2025-11-15 15:00:44.506 00:00:10.366 TCP 23.104.0.1:45644 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:01:03.676 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39016 12 6556 1 2025-11-15 15:01:44.905 00:00:10.328 TCP 23.104.0.1:34160 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:02:03.889 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:58982 10 6452 1 2025-11-15 15:02:55.510 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:02:45.276 00:00:10.363 TCP 23.104.0.1:47154 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:02:55.741 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:03:04.127 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60536 10 6452 1 2025-11-15 15:03:45.676 00:00:10.370 TCP 23.104.0.1:56586 -> 1.101.0.1:3000 11 1507 1 2025-11-15 14:59:57.521 00:05:04.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 14:59:57.523 00:05:04.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:04:04.344 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52650 10 6452 1 2025-11-15 15:04:46.104 00:00:10.324 TCP 23.104.0.1:35530 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:05:04.570 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49214 10 6452 1 2025-11-15 15:05:46.465 00:00:10.326 TCP 23.104.0.1:34012 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:06:04.788 00:00:10.907 TCP 1.101.0.1:3000 -> 22.102.0.1:41534 10 6452 1 2025-11-15 15:06:46.834 00:00:10.383 TCP 23.104.0.1:55786 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:07:05.744 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49682 10 6452 1 2025-11-15 15:07:55.572 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:07:55.729 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:07:47.255 00:00:10.366 TCP 23.104.0.1:56590 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:08:05.922 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:41038 10 6452 1 2025-11-15 15:08:47.659 00:00:10.364 TCP 23.104.0.1:60324 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:09:06.160 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39414 10 6452 1 2025-11-15 15:09:48.089 00:00:10.365 TCP 23.104.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:05:57.522 00:05:04.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:05:57.523 00:05:04.664 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:10:06.382 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56780 10 6452 1 2025-11-15 15:10:48.495 00:00:10.365 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:11:06.600 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34312 10 6452 1 2025-11-15 15:11:48.898 00:00:10.351 TCP 23.104.0.1:46680 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:12:06.819 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37920 10 6452 1 2025-11-15 15:12:55.792 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:12:55.746 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:12:49.286 00:00:10.323 TCP 23.104.0.1:35748 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:13:07.054 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34094 10 6452 1 2025-11-15 15:13:49.650 00:00:10.372 TCP 23.104.0.1:51764 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:14:07.223 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53250 10 6452 1 2025-11-15 15:14:50.085 00:00:10.322 TCP 23.104.0.1:36276 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:15:07.444 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42468 10 6452 1 2025-11-15 15:15:50.462 00:00:10.367 TCP 23.104.0.1:44166 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:11:57.522 00:05:04.669 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:11:57.525 00:05:04.665 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:16:07.665 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43996 10 6452 1 2025-11-15 15:16:50.867 00:00:10.370 TCP 23.104.0.1:46040 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:17:07.887 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34610 10 6452 1 2025-11-15 15:17:56.442 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:17:56.441 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:17:51.270 00:00:10.368 TCP 23.104.0.1:42028 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:18:08.117 00:00:11.094 TCP 1.101.0.1:3000 -> 22.102.0.1:38002 10 6452 1 2025-11-15 15:18:51.678 00:00:10.381 TCP 23.104.0.1:34546 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:19:09.250 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43148 10 6452 1 2025-11-15 15:19:52.117 00:00:10.359 TCP 23.104.0.1:35724 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:20:09.472 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53566 10 6452 1 2025-11-15 15:20:52.517 00:00:10.369 TCP 23.104.0.1:55074 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:21:09.693 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50630 10 6452 1 2025-11-15 15:21:52.924 00:00:10.383 TCP 23.104.0.1:51770 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:17:57.525 00:05:04.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:17:57.522 00:05:04.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:22:09.909 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45364 10 6452 1 2025-11-15 15:22:56.156 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:22:56.088 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:22:53.345 00:00:10.364 TCP 23.104.0.1:44174 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:23:10.114 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53126 10 6452 1 2025-11-15 15:23:53.754 00:00:10.388 TCP 23.104.0.1:58128 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:24:10.327 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43650 10 6452 1 2025-11-15 15:24:54.180 00:00:10.365 TCP 23.104.0.1:40108 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:25:10.540 00:00:10.700 TCP 1.101.0.1:3000 -> 22.102.0.1:48186 10 6452 1 2025-11-15 15:25:54.585 00:00:10.325 TCP 23.104.0.1:59320 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:26:11.278 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:56458 10 6452 1 2025-11-15 15:26:54.949 00:00:10.368 TCP 23.104.0.1:47658 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:27:11.532 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42112 10 6452 1 2025-11-15 15:27:55.823 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:27:56.031 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:23:57.524 00:05:04.703 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:23:57.526 00:05:04.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:27:55.353 00:00:10.373 TCP 23.104.0.1:45052 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:28:11.705 00:00:10.776 TCP 1.101.0.1:3000 -> 22.102.0.1:54710 10 6452 1 2025-11-15 15:28:55.762 00:00:10.377 TCP 23.104.0.1:48810 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:29:12.520 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43676 10 6452 1 2025-11-15 15:29:56.178 00:00:10.364 TCP 23.104.0.1:56744 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:30:12.695 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36570 10 6452 1 2025-11-15 15:30:56.590 00:00:10.367 TCP 23.104.0.1:34544 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:31:12.912 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39930 10 6452 1 2025-11-15 15:31:56.989 00:00:10.367 TCP 23.104.0.1:34684 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:32:13.127 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43270 10 6452 1 2025-11-15 15:32:56.289 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:32:56.430 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:32:57.406 00:00:10.365 TCP 23.104.0.1:44638 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:33:13.348 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37108 10 6452 1 2025-11-15 15:29:57.529 00:05:04.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:29:57.531 00:05:04.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:33:57.807 00:00:10.333 TCP 23.104.0.1:50830 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:34:13.564 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55786 10 6452 1 2025-11-15 15:34:58.173 00:00:10.365 TCP 23.104.0.1:35094 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:35:13.782 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41010 10 6452 1 2025-11-15 15:35:58.574 00:00:10.382 TCP 23.104.0.1:45218 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:36:14.005 00:00:10.763 TCP 1.101.0.1:3000 -> 22.102.0.1:60092 10 6452 1 2025-11-15 15:36:59.005 00:00:10.359 TCP 23.104.0.1:40394 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:37:14.803 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37382 10 6452 1 2025-11-15 15:37:56.411 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:37:56.301 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:37:59.409 00:00:10.382 TCP 23.104.0.1:60662 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:38:15.025 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45252 10 6452 1 2025-11-15 15:38:59.841 00:00:10.385 TCP 23.104.0.1:38530 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:39:15.238 00:00:10.962 TCP 1.101.0.1:3000 -> 22.102.0.1:32918 10 6452 1 2025-11-15 15:35:57.534 00:05:04.697 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:35:57.537 00:05:04.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:40:00.273 00:00:10.364 TCP 23.104.0.1:39370 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:40:16.232 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46974 10 6452 1 2025-11-15 15:41:00.678 00:00:10.367 TCP 23.104.0.1:41928 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:41:16.441 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43514 10 6452 1 2025-11-15 15:42:01.103 00:00:10.919 TCP 23.104.0.1:33602 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:42:16.649 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55904 10 6452 1 2025-11-15 15:42:56.361 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:42:56.413 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:43:02.079 00:00:10.369 TCP 23.104.0.1:42012 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:43:16.862 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42654 10 6452 1 2025-11-15 15:44:02.482 00:00:10.319 TCP 23.104.0.1:53258 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:44:17.089 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:32860 10 6452 1 2025-11-15 15:45:02.839 00:00:10.385 TCP 23.104.0.1:39990 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:45:17.385 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52586 10 6452 1 2025-11-15 15:41:57.540 00:05:04.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:41:57.542 00:05:04.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:46:03.262 00:00:10.365 TCP 23.104.0.1:33926 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:46:17.599 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36406 10 6452 1 2025-11-15 15:47:03.666 00:00:10.370 TCP 23.104.0.1:44624 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:47:17.816 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60382 10 6452 1 2025-11-15 15:47:56.832 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:47:56.680 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:48:04.104 00:00:10.371 TCP 23.104.0.1:37220 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:48:18.057 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41182 10 6452 1 2025-11-15 15:49:04.514 00:00:10.366 TCP 23.104.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:49:18.269 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41552 10 6452 1 2025-11-15 15:50:04.917 00:00:10.370 TCP 23.104.0.1:48800 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:50:18.483 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55916 10 6452 1 2025-11-15 15:51:05.325 00:00:10.442 TCP 23.104.0.1:54308 -> 1.101.0.1:3000 15 1926 1 2025-11-15 15:51:18.695 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:50318 12 10375 1 2025-11-15 15:47:57.544 00:05:04.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:47:57.541 00:05:04.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:52:05.807 00:00:10.364 TCP 23.104.0.1:53814 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:52:18.892 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51110 10 6452 1 2025-11-15 15:52:56.439 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:52:56.610 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:53:06.207 00:00:10.364 TCP 23.104.0.1:33170 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:53:19.111 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51030 10 6452 1 2025-11-15 15:54:06.610 00:00:10.324 TCP 23.104.0.1:36676 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:54:19.315 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56458 10 6452 1 2025-11-15 15:55:06.971 00:00:10.382 TCP 23.104.0.1:40636 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:55:19.527 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34436 10 6452 1 2025-11-15 15:56:07.399 00:00:10.448 TCP 23.104.0.1:39196 -> 1.101.0.1:3000 15 1926 1 2025-11-15 15:56:19.746 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:35072 12 10375 1 2025-11-15 15:57:07.884 00:00:10.394 TCP 23.104.0.1:58484 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:57:19.983 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 10 6452 1 2025-11-15 15:57:56.763 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 15:57:56.870 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 15:53:57.543 00:05:04.695 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 15:53:57.546 00:05:04.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 15:58:08.321 00:00:12.532 TCP 23.104.0.1:58168 -> 1.101.0.1:3000 11 1507 1 2025-11-15 15:58:20.216 00:00:19.852 TCP 1.101.0.1:3000 -> 22.102.0.1:39974 10 6452 1 Summary: total flows: 164, total bytes: 507136, total packets: 1586, avg bps: 1121, avg pps: 0, avg bpp: 319 Time window: 2025-11-15 14:58:43 - 2025-11-15 15:59:02 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0050s User: 0.0000s Wall: 0.0024s flows/second: 67023.9 Runtime: 0.0025s