Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 12:59:02.494 00:00:10.369 TCP 23.104.0.1:46840 -> 1.101.0.1:3000 11 1507 1 2025-11-16 12:59:37.303 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44480 10 6452 1 2025-11-16 13:00:02.902 00:00:10.326 TCP 23.104.0.1:55654 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:00:37.520 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47130 10 6452 1 2025-11-16 13:01:03.268 00:00:10.365 TCP 23.104.0.1:43680 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:01:37.735 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51154 10 6452 1 2025-11-16 13:02:03.674 00:00:10.380 TCP 23.104.0.1:57964 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:02:37.956 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:44492 10 6452 1 2025-11-16 13:03:04.105 00:00:10.365 TCP 23.104.0.1:50974 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:03:21.934 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 13:03:22.055 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 13:03:38.192 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47522 10 6452 1 2025-11-16 12:59:02.798 00:05:55.289 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 12:59:58.086 00:05:04.711 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 13:04:04.504 00:00:10.358 TCP 23.104.0.1:53182 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:04:38.362 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58998 10 6452 1 2025-11-16 13:05:04.899 00:00:10.489 TCP 23.104.0.1:57920 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:05:38.577 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44914 10 6452 1 2025-11-16 13:06:05.428 00:00:10.366 TCP 23.104.0.1:38748 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:06:38.791 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35220 10 6452 1 2025-11-16 13:07:05.833 00:00:10.377 TCP 23.104.0.1:50026 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:07:39.004 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41546 10 6452 1 2025-11-16 13:08:06.249 00:00:10.360 TCP 23.104.0.1:32776 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:08:22.376 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 13:08:22.384 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 13:08:39.217 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38610 10 6452 1 2025-11-16 13:09:06.664 00:00:10.401 TCP 23.104.0.1:47838 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:09:39.428 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52650 10 6452 1 2025-11-16 13:05:02.799 00:05:55.292 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 13:05:58.090 00:05:04.714 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 13:10:07.178 00:00:10.371 TCP 23.104.0.1:52748 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:10:39.647 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33344 10 6452 1 2025-11-16 13:11:07.589 00:00:10.318 TCP 23.104.0.1:37966 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:11:39.901 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47824 10 6452 1 2025-11-16 13:12:07.947 00:00:10.383 TCP 23.104.0.1:54952 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:12:40.122 00:00:10.782 TCP 1.101.0.1:3000 -> 22.102.0.1:49524 10 6452 1 2025-11-16 13:13:08.372 00:00:10.360 TCP 23.104.0.1:36798 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:13:22.191 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 13:13:22.264 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 13:13:40.946 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38402 10 6452 1 2025-11-16 13:14:08.772 00:00:10.385 TCP 23.104.0.1:37940 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:14:41.159 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44100 10 6452 1 2025-11-16 13:15:09.197 00:00:10.336 TCP 23.104.0.1:55696 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:15:41.325 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47704 10 6452 1 2025-11-16 13:11:02.807 00:05:55.284 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 13:11:58.093 00:05:04.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 13:16:09.572 00:00:10.363 TCP 23.104.0.1:60464 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:16:41.537 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43528 10 6452 1 2025-11-16 13:17:09.975 00:00:10.373 TCP 23.104.0.1:59312 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:17:41.744 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55734 10 6452 1 2025-11-16 13:18:10.387 00:00:10.324 TCP 23.104.0.1:54074 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:18:22.204 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 13:18:22.439 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 13:18:41.915 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35948 10 6452 1 2025-11-16 13:19:10.748 00:00:10.364 TCP 23.104.0.1:37702 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:19:42.126 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55960 10 6452 1 2025-11-16 13:20:11.152 00:00:10.324 TCP 23.104.0.1:47606 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:20:42.297 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57906 10 6452 1 2025-11-16 13:21:11.514 00:00:10.367 TCP 23.104.0.1:60130 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:21:42.503 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58956 10 6452 1 2025-11-16 13:17:02.810 00:05:55.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 13:17:58.094 00:05:04.714 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 13:22:11.919 00:00:10.337 TCP 23.104.0.1:52162 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:22:42.676 00:00:15.631 TCP 1.101.0.1:3000 -> 22.102.0.1:44194 10 6452 1 2025-11-16 13:23:22.500 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 13:23:12.290 00:00:10.367 TCP 23.104.0.1:59208 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:23:22.499 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 13:23:48.348 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49996 10 6452 1 2025-11-16 13:24:12.691 00:00:10.372 TCP 23.104.0.1:33766 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:24:48.564 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57816 10 6452 1 2025-11-16 13:25:13.116 00:00:10.322 TCP 23.104.0.1:34274 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:25:48.790 00:00:10.423 TCP 1.101.0.1:3000 -> 22.102.0.1:39680 10 6452 1 2025-11-16 13:26:13.479 00:00:10.366 TCP 23.104.0.1:39262 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:26:49.253 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36256 10 6452 1 2025-11-16 13:27:13.887 00:00:10.386 TCP 23.104.0.1:48354 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:27:49.426 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40500 10 6452 1 2025-11-16 13:23:02.811 00:05:55.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 13:23:58.098 00:05:04.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 13:28:22.382 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 13:28:22.558 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 13:28:14.308 00:00:10.355 TCP 23.104.0.1:51496 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:28:49.600 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58650 10 6452 1 2025-11-16 13:29:14.705 00:00:10.402 TCP 23.104.0.1:52030 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:29:49.811 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42160 10 6452 1 2025-11-16 13:30:15.149 00:00:10.367 TCP 23.104.0.1:44774 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:30:50.033 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56264 10 6452 1 2025-11-16 13:31:15.555 00:00:10.362 TCP 23.104.0.1:55962 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:31:50.244 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46172 10 6452 1 2025-11-16 13:32:15.952 00:00:10.330 TCP 23.104.0.1:46744 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:32:50.463 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:51334 10 6452 1 2025-11-16 13:33:22.666 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 13:33:16.316 00:00:10.363 TCP 23.104.0.1:56244 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:33:22.590 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 13:33:50.671 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33350 10 6452 1 2025-11-16 13:29:02.813 00:05:55.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 13:29:58.101 00:05:04.710 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 13:34:16.722 00:00:10.380 TCP 23.104.0.1:48034 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:34:50.879 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49764 10 6452 1 2025-11-16 13:35:17.140 00:00:10.371 TCP 23.104.0.1:35396 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:35:51.101 00:00:10.676 TCP 1.101.0.1:3000 -> 22.102.0.1:50090 10 6452 1 2025-11-16 13:36:17.550 00:00:10.336 TCP 23.104.0.1:41980 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:36:51.815 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53858 10 6452 1 2025-11-16 13:37:17.970 00:00:10.395 TCP 23.104.0.1:50440 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:37:51.983 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48378 10 6452 1 2025-11-16 13:38:22.917 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 13:38:22.733 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 13:38:18.404 00:00:10.366 TCP 23.104.0.1:34074 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:38:52.203 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38532 10 6452 1 2025-11-16 13:39:18.815 00:00:10.368 TCP 23.104.0.1:57720 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:35:02.813 00:05:55.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 13:35:58.101 00:05:04.710 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 13:39:52.420 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35468 10 6452 1 2025-11-16 13:40:19.229 00:00:10.365 TCP 23.104.0.1:37066 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:40:52.596 00:00:10.817 TCP 1.101.0.1:3000 -> 22.102.0.1:49872 10 6452 1 2025-11-16 13:41:19.636 00:00:10.454 TCP 23.104.0.1:52434 -> 1.101.0.1:3000 15 1926 1 2025-11-16 13:41:53.452 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:54792 12 10369 1 2025-11-16 13:42:20.129 00:00:10.368 TCP 23.104.0.1:43874 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:42:53.694 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43508 10 6452 1 2025-11-16 13:43:22.918 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 13:43:22.796 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 13:43:20.532 00:00:10.325 TCP 23.104.0.1:37490 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:43:53.928 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:46900 10 6452 1 2025-11-16 13:44:20.894 00:00:10.954 TCP 23.104.0.1:53720 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:44:54.169 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43622 10 6452 1 2025-11-16 13:45:21.885 00:00:10.381 TCP 23.104.0.1:56202 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:41:02.816 00:05:55.288 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 13:45:54.389 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54090 10 6452 1 2025-11-16 13:41:58.103 00:05:04.710 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 13:46:22.302 00:00:10.370 TCP 23.104.0.1:50110 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:46:54.615 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56490 10 6452 1 2025-11-16 13:47:22.706 00:00:10.371 TCP 23.104.0.1:39636 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:47:54.840 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55758 10 6452 1 2025-11-16 13:48:22.908 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 13:48:22.964 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 13:48:23.127 00:00:11.312 TCP 23.104.0.1:48070 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:48:55.073 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49010 10 6452 1 2025-11-16 13:49:24.477 00:00:10.326 TCP 23.104.0.1:40716 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:49:55.298 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51540 10 6452 1 2025-11-16 13:50:24.842 00:00:10.384 TCP 23.104.0.1:52556 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:50:55.522 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54496 10 6452 1 2025-11-16 13:51:25.261 00:00:10.371 TCP 23.104.0.1:46096 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:47:02.816 00:05:55.288 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 13:51:55.734 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50758 10 6452 1 2025-11-16 13:47:58.105 00:05:04.711 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 13:52:25.671 00:00:10.364 TCP 23.104.0.1:59522 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:52:55.914 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54352 10 6452 1 2025-11-16 13:53:22.941 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 13:53:22.995 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 13:53:26.095 00:00:10.373 TCP 23.104.0.1:41310 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:53:56.149 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40862 10 6452 1 2025-11-16 13:54:26.508 00:00:10.508 TCP 23.104.0.1:34640 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:54:56.363 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52366 10 6452 1 2025-11-16 13:55:27.058 00:00:10.365 TCP 23.104.0.1:51468 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:55:56.588 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56814 10 6452 1 2025-11-16 13:56:27.456 00:00:10.367 TCP 23.104.0.1:49260 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:56:56.766 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34110 10 6452 1 2025-11-16 13:57:27.859 00:00:10.385 TCP 23.104.0.1:50232 -> 1.101.0.1:3000 11 1507 1 2025-11-16 13:53:02.819 00:05:55.285 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 13:53:58.107 00:05:04.716 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 13:57:56.987 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33446 10 6452 1 2025-11-16 13:58:22.964 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 13:58:23.108 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 13:58:28.290 00:00:10.362 TCP 23.104.0.1:49506 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496232, total packets: 1568, avg bps: 1102, avg pps: 0, avg bpp: 316 Time window: 2025-11-16 12:59:02 - 2025-11-16 13:59:02 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0029s Wall: 0.0027s flows/second: 61233.5 Runtime: 0.0027s