Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 14:58:54.910 00:00:10.366 TCP 23.104.0.1:38812 -> 1.101.0.1:3000 11 1507 1 2025-11-16 14:59:10.500 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57826 10 6452 1 2025-11-16 14:59:55.311 00:00:10.365 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:00:10.722 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49880 10 6452 1 2025-11-16 15:00:55.717 00:00:10.375 TCP 23.104.0.1:47788 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:01:10.899 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:57670 10 6452 1 2025-11-16 15:01:56.123 00:00:10.368 TCP 23.104.0.1:60596 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:02:11.173 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59366 10 6452 1 2025-11-16 15:02:56.527 00:00:10.365 TCP 23.104.0.1:49250 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:03:11.387 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:34912 10 6452 1 2025-11-16 15:03:24.685 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:03:24.563 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 14:59:02.855 00:05:55.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 14:59:58.126 00:05:04.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:03:56.929 00:00:10.379 TCP 23.104.0.1:33238 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:04:11.679 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57770 10 6452 1 2025-11-16 15:04:57.351 00:00:10.325 TCP 23.104.0.1:52472 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:05:11.884 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43102 10 6452 1 2025-11-16 15:05:57.717 00:00:10.381 TCP 23.104.0.1:33604 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:06:12.119 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36798 10 6452 1 2025-11-16 15:06:58.135 00:00:10.366 TCP 23.104.0.1:58566 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:07:12.338 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41428 10 6452 1 2025-11-16 15:07:58.539 00:00:10.324 TCP 23.104.0.1:39060 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:08:24.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:08:12.564 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44500 10 6452 1 2025-11-16 15:08:24.586 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:08:58.900 00:00:10.368 TCP 23.104.0.1:36596 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:09:12.774 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59796 10 6452 1 2025-11-16 15:05:02.855 00:05:55.270 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:05:58.128 00:05:04.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:09:59.311 00:00:10.360 TCP 23.104.0.1:53100 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:10:12.988 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58142 10 6452 1 2025-11-16 15:10:59.716 00:00:10.464 TCP 23.104.0.1:57006 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:11:13.201 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58606 10 6452 1 2025-11-16 15:12:00.218 00:00:10.361 TCP 23.104.0.1:52568 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:12:13.413 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36736 10 6452 1 2025-11-16 15:13:00.624 00:00:10.321 TCP 23.104.0.1:57386 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:13:24.668 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:13:13.636 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40422 10 6452 1 2025-11-16 15:13:24.833 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:14:00.985 00:00:10.361 TCP 23.104.0.1:59282 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:14:13.859 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52250 10 6452 1 2025-11-16 15:15:01.386 00:00:10.362 TCP 23.104.0.1:49868 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:15:14.103 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:40546 10 6452 1 2025-11-16 15:11:02.858 00:05:55.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:11:58.129 00:05:04.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:16:01.787 00:00:10.372 TCP 23.104.0.1:41104 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:16:14.281 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43142 10 6452 1 2025-11-16 15:17:02.196 00:00:10.439 TCP 23.104.0.1:54322 -> 1.101.0.1:3000 15 1926 1 2025-11-16 15:17:14.492 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:36444 12 10578 1 2025-11-16 15:18:02.675 00:00:10.364 TCP 23.104.0.1:49546 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:18:24.778 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:18:14.731 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38250 10 6661 1 2025-11-16 15:18:24.716 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:19:03.106 00:00:11.177 TCP 23.104.0.1:45982 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:19:14.944 00:00:10.320 TCP 1.101.0.1:3000 -> 22.102.0.1:40084 10 6661 1 2025-11-16 15:20:04.316 00:00:10.374 TCP 23.104.0.1:57084 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:20:15.303 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33910 10 6661 1 2025-11-16 15:21:04.726 00:00:10.368 TCP 23.104.0.1:43894 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:21:15.517 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52748 10 6661 1 2025-11-16 15:17:02.859 00:05:55.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:17:58.130 00:05:04.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:22:05.130 00:00:11.181 TCP 23.104.0.1:39640 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:22:15.734 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41096 10 6661 1 2025-11-16 15:23:06.366 00:00:10.366 TCP 23.104.0.1:58492 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:23:25.020 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:23:15.954 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33546 10 6661 1 2025-11-16 15:23:25.139 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:24:06.770 00:00:10.369 TCP 23.104.0.1:56418 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:24:16.179 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50026 10 6661 1 2025-11-16 15:25:07.175 00:00:10.366 TCP 23.104.0.1:53112 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:25:16.351 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41468 10 6661 1 2025-11-16 15:26:07.586 00:00:10.364 TCP 23.104.0.1:32982 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:26:16.524 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49066 10 6661 1 2025-11-16 15:27:07.993 00:00:10.473 TCP 23.104.0.1:53028 -> 1.101.0.1:3000 17 2241 1 2025-11-16 15:27:16.737 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:49078 14 14925 1 2025-11-16 15:23:02.861 00:05:55.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:23:58.130 00:05:04.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:28:08.509 00:00:10.805 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:28:25.028 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:28:24.706 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:28:17.009 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58388 10 7079 1 2025-11-16 15:29:09.353 00:00:10.365 TCP 23.104.0.1:45740 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:29:17.226 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35724 10 7079 1 2025-11-16 15:30:09.763 00:00:10.340 TCP 23.104.0.1:45590 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:30:17.448 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:33512 10 7079 1 2025-11-16 15:31:10.173 00:00:10.367 TCP 23.104.0.1:46558 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:31:17.650 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41776 10 7079 1 2025-11-16 15:32:10.575 00:00:11.005 TCP 23.104.0.1:36836 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:32:17.860 00:00:10.591 TCP 1.101.0.1:3000 -> 22.102.0.1:59252 13 7518 1 2025-11-16 15:33:11.615 00:00:10.373 TCP 23.104.0.1:52552 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:33:25.037 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:33:24.840 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:33:18.493 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39176 10 7079 1 2025-11-16 15:29:02.862 00:05:55.269 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:29:58.131 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:34:12.026 00:00:10.365 TCP 23.104.0.1:51896 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:34:18.706 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60054 10 7079 1 2025-11-16 15:35:12.431 00:00:10.323 TCP 23.104.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:35:18.927 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:41770 10 7079 1 2025-11-16 15:36:12.797 00:00:11.100 TCP 23.104.0.1:39554 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:36:19.186 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50192 10 7079 1 2025-11-16 15:37:13.935 00:00:10.385 TCP 23.104.0.1:46488 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:37:19.360 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50236 10 7079 1 2025-11-16 15:38:25.194 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:38:14.350 00:00:10.365 TCP 23.104.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:38:25.008 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:38:19.577 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41216 10 7079 1 2025-11-16 15:39:14.753 00:00:10.377 TCP 23.104.0.1:34400 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:39:19.802 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55962 10 7079 1 2025-11-16 15:35:02.863 00:05:55.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:35:58.136 00:05:04.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:40:15.169 00:00:10.364 TCP 23.104.0.1:53946 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:40:20.032 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35344 10 7079 1 2025-11-16 15:41:20.251 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43738 10 7079 1 2025-11-16 15:41:15.576 00:00:13.686 TCP 23.104.0.1:45754 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:42:20.436 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41658 10 7079 1 2025-11-16 15:42:19.311 00:00:10.369 TCP 23.104.0.1:50268 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:43:25.672 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:43:20.652 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49088 10 7079 1 2025-11-16 15:43:25.637 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:43:19.714 00:00:10.363 TCP 23.104.0.1:58284 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:44:20.118 00:00:10.330 TCP 23.104.0.1:42506 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:44:20.869 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48794 10 7079 1 2025-11-16 15:45:20.491 00:00:10.369 TCP 23.104.0.1:53522 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:45:21.103 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50326 10 7079 1 2025-11-16 15:41:02.864 00:05:55.272 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:41:58.138 00:05:04.726 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:46:20.895 00:00:10.628 TCP 23.104.0.1:46440 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:46:21.284 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47158 10 7079 1 2025-11-16 15:47:21.501 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48446 10 7079 1 2025-11-16 15:47:21.561 00:00:10.361 TCP 23.104.0.1:39718 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:48:25.433 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:48:25.431 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:48:21.721 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45080 10 7079 1 2025-11-16 15:48:21.964 00:00:10.368 TCP 23.104.0.1:59498 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:49:21.943 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:35560 10 7079 1 2025-11-16 15:49:22.371 00:00:10.362 TCP 23.104.0.1:53564 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:50:22.770 00:00:10.377 TCP 23.104.0.1:36700 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:50:22.138 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53108 10 7079 1 2025-11-16 15:51:22.351 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57200 10 7079 1 2025-11-16 15:51:23.186 00:00:10.325 TCP 23.104.0.1:51046 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:47:02.867 00:05:55.277 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:47:58.140 00:05:04.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:52:23.550 00:00:10.364 TCP 23.104.0.1:46370 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:52:22.567 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33286 10 7079 1 2025-11-16 15:53:25.504 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:53:25.150 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:53:22.786 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38912 10 7079 1 2025-11-16 15:53:23.954 00:00:11.280 TCP 23.104.0.1:44792 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:54:23.013 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49618 10 7079 1 2025-11-16 15:54:25.269 00:00:10.328 TCP 23.104.0.1:60290 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:55:25.636 00:00:10.363 TCP 23.104.0.1:50400 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:55:23.232 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49674 10 7079 1 2025-11-16 15:56:26.057 00:00:10.364 TCP 23.104.0.1:33814 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:56:23.451 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39996 10 7079 1 2025-11-16 15:57:26.462 00:00:10.363 TCP 23.104.0.1:51116 -> 1.101.0.1:3000 11 1507 1 2025-11-16 15:57:23.669 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57752 12 7183 1 2025-11-16 15:53:02.870 00:05:55.275 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 15:53:58.146 00:05:04.722 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 15:58:25.551 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 15:58:25.391 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 15:58:23.885 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46308 10 7079 1 2025-11-16 15:58:26.862 00:00:10.333 TCP 23.104.0.1:50810 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 533961, total packets: 1593, avg bps: 1183, avg pps: 0, avg bpp: 335 Time window: 2025-11-16 14:58:54 - 2025-11-16 15:59:02 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0024s User: 0.0024s Wall: 0.0015s flows/second: 107765.3 Runtime: 0.0015s