Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 00:59:17.388 00:00:10.364 TCP 23.104.0.1:35332 -> 1.101.0.1:3000 11 1507 1 2025-11-01 00:59:36.464 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35090 10 6452 1 2025-11-01 00:54:53.794 00:05:56.653 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 00:54:53.798 00:05:56.648 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 01:00:17.792 00:00:10.362 TCP 23.104.0.1:36830 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:00:36.631 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52022 10 6452 1 2025-11-01 01:00:54.367 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 01:00:54.581 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 01:01:18.192 00:00:10.366 TCP 23.104.0.1:38400 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:01:36.843 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46542 10 6452 1 2025-11-01 01:02:18.595 00:00:10.325 TCP 23.104.0.1:38884 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:02:37.034 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49582 10 6452 1 2025-11-01 01:03:18.962 00:00:10.366 TCP 23.104.0.1:47380 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:03:37.242 00:00:18.712 TCP 1.101.0.1:3000 -> 22.102.0.1:54084 10 6452 1 2025-11-01 01:04:19.369 00:00:10.362 TCP 23.104.0.1:55980 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:04:46.030 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39724 10 6452 1 2025-11-01 01:05:19.777 00:00:10.384 TCP 23.104.0.1:36780 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:00:53.805 00:05:56.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 01:00:53.802 00:05:56.646 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 01:05:54.742 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 01:05:46.249 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45096 10 6452 1 2025-11-01 01:05:54.397 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 01:06:20.217 00:00:10.368 TCP 23.104.0.1:41514 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:06:46.459 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56576 12 6556 1 2025-11-01 01:07:20.625 00:00:10.361 TCP 23.104.0.1:58470 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:07:46.669 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45732 10 6452 1 2025-11-01 01:08:21.032 00:00:10.367 TCP 23.104.0.1:55306 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:08:46.836 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50800 10 6452 1 2025-11-01 01:09:21.438 00:00:10.363 TCP 23.104.0.1:55002 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:09:47.069 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55986 10 6452 1 2025-11-01 01:10:21.841 00:00:10.337 TCP 23.104.0.1:53266 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:10:54.568 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 01:10:54.599 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 01:10:47.288 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35154 10 6452 1 2025-11-01 01:11:22.217 00:00:10.361 TCP 23.104.0.1:39872 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:06:53.805 00:05:56.644 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 01:06:53.808 00:05:56.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 01:11:47.508 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60842 10 6452 1 2025-11-01 01:12:22.618 00:00:10.372 TCP 23.104.0.1:60208 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:12:47.723 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37872 10 6452 1 2025-11-01 01:13:23.029 00:00:10.368 TCP 23.104.0.1:42376 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:13:47.945 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56976 10 6452 1 2025-11-01 01:14:23.434 00:00:11.261 TCP 23.104.0.1:58934 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:14:48.178 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52344 10 6452 1 2025-11-01 01:15:24.735 00:00:10.371 TCP 23.104.0.1:47792 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:15:54.864 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 01:15:54.734 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 01:15:48.397 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:32974 10 6452 1 2025-11-01 01:16:25.146 00:00:10.363 TCP 23.104.0.1:47682 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:16:48.620 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34126 10 6452 1 2025-11-01 01:17:25.549 00:00:10.363 TCP 23.104.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:12:53.809 00:05:56.640 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 01:12:53.806 00:05:56.644 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 01:17:48.833 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37478 10 6452 1 2025-11-01 01:18:25.946 00:00:10.375 TCP 23.104.0.1:54662 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:18:49.007 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43832 10 6452 1 2025-11-01 01:19:26.362 00:00:10.370 TCP 23.104.0.1:34248 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:19:49.224 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45548 10 6452 1 2025-11-01 01:20:26.766 00:00:10.374 TCP 23.104.0.1:52370 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:20:54.729 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 01:20:54.918 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 01:20:49.397 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:42918 10 6452 1 2025-11-01 01:21:27.180 00:00:10.363 TCP 23.104.0.1:38460 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:21:49.585 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57170 10 6452 1 2025-11-01 01:22:27.581 00:00:10.369 TCP 23.104.0.1:44908 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:22:49.801 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51234 10 6452 1 2025-11-01 01:23:27.984 00:00:10.372 TCP 23.104.0.1:43852 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:18:53.836 00:05:56.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 01:18:53.838 00:05:56.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 01:23:50.037 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53148 10 6452 1 2025-11-01 01:24:28.391 00:00:10.365 TCP 23.104.0.1:34532 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:24:50.259 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53452 10 6452 1 2025-11-01 01:25:28.791 00:00:10.335 TCP 23.104.0.1:54534 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:25:55.002 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 01:25:54.854 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 01:25:50.479 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35882 10 6452 1 2025-11-01 01:26:29.160 00:00:10.320 TCP 23.104.0.1:36210 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:26:50.655 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35956 10 6452 1 2025-11-01 01:27:29.523 00:00:10.371 TCP 23.104.0.1:58492 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:27:50.875 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49618 10 6452 1 2025-11-01 01:28:29.949 00:00:10.331 TCP 23.104.0.1:46566 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:28:51.094 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37320 10 6452 1 2025-11-01 01:29:30.331 00:00:10.368 TCP 23.104.0.1:42032 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:24:53.841 00:05:56.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 01:24:53.838 00:05:56.614 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 01:29:51.309 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56322 10 6452 1 2025-11-01 01:30:30.742 00:00:10.369 TCP 23.104.0.1:51640 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:30:54.782 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 01:30:55.031 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 01:30:51.520 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35888 10 6452 1 2025-11-01 01:31:31.160 00:00:10.365 TCP 23.104.0.1:39584 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:31:51.734 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35278 10 6452 1 2025-11-01 01:32:31.566 00:00:10.367 TCP 23.104.0.1:49838 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:32:51.943 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33500 10 6452 1 2025-11-01 01:33:31.974 00:00:10.362 TCP 23.104.0.1:37696 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:33:52.180 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48716 10 6452 1 2025-11-01 01:34:32.388 00:00:10.368 TCP 23.104.0.1:60194 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:34:52.388 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44680 10 6452 1 2025-11-01 01:35:32.787 00:00:10.347 TCP 23.104.0.1:37864 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:30:53.843 00:05:56.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 01:30:53.839 00:05:56.619 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 01:35:55.252 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 01:35:55.187 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 01:35:52.598 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59324 10 6452 1 2025-11-01 01:36:33.175 00:00:10.364 TCP 23.104.0.1:35962 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:36:52.830 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43042 10 6452 1 2025-11-01 01:37:33.582 00:00:10.365 TCP 23.104.0.1:58464 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:37:53.001 00:00:10.276 TCP 1.101.0.1:3000 -> 22.102.0.1:50278 10 6452 1 2025-11-01 01:38:33.991 00:00:10.364 TCP 23.104.0.1:59666 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:38:53.316 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45054 10 6452 1 2025-11-01 01:39:34.391 00:00:10.360 TCP 23.104.0.1:40658 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:39:53.524 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:59694 10 6452 1 2025-11-01 01:40:34.792 00:00:10.497 TCP 23.104.0.1:48044 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:40:54.978 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 01:40:55.252 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 01:40:53.706 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46600 10 6452 1 2025-11-01 01:41:35.329 00:00:10.361 TCP 23.104.0.1:56998 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:36:53.844 00:05:56.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 01:36:53.841 00:05:56.618 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 01:41:53.886 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57114 10 6452 1 2025-11-01 01:42:35.734 00:00:10.368 TCP 23.104.0.1:55590 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:42:54.123 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32936 10 6452 1 2025-11-01 01:43:36.139 00:00:10.364 TCP 23.104.0.1:50806 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:43:54.335 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33568 10 6452 1 2025-11-01 01:44:36.541 00:00:10.362 TCP 23.104.0.1:52574 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:44:54.553 00:00:14.052 TCP 1.101.0.1:3000 -> 22.102.0.1:36896 10 6452 1 2025-11-01 01:45:36.941 00:00:10.368 TCP 23.104.0.1:47722 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:45:55.401 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 01:45:55.168 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 01:45:58.652 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46932 10 6452 1 2025-11-01 01:46:37.351 00:00:10.365 TCP 23.104.0.1:40110 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:46:58.879 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57232 10 6452 1 2025-11-01 01:47:37.756 00:00:10.334 TCP 23.104.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:42:53.868 00:05:56.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 01:42:53.870 00:05:56.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 01:47:59.108 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48308 10 6452 1 2025-11-01 01:48:38.131 00:00:10.346 TCP 23.104.0.1:57218 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:48:59.319 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55914 10 6452 1 2025-11-01 01:49:38.546 00:00:10.367 TCP 23.104.0.1:35598 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:49:59.536 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45744 10 6452 1 2025-11-01 01:50:38.950 00:00:10.369 TCP 23.104.0.1:47090 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:50:55.182 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 01:50:55.458 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 01:50:59.762 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38808 10 6452 1 2025-11-01 01:51:39.356 00:00:10.325 TCP 23.104.0.1:33476 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:51:59.979 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43626 10 6452 1 2025-11-01 01:52:39.720 00:00:10.368 TCP 23.104.0.1:51426 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:53:00.218 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57020 10 6452 1 2025-11-01 01:48:53.873 00:05:56.587 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 01:53:40.125 00:00:10.358 TCP 23.104.0.1:46820 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:48:53.870 00:05:56.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 01:54:00.393 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49684 10 6452 1 2025-11-01 01:54:40.526 00:00:10.375 TCP 23.104.0.1:48876 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:55:00.602 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54736 10 6452 1 2025-11-01 01:55:40.933 00:00:10.387 TCP 23.104.0.1:56200 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:55:55.455 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 01:55:55.465 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 01:56:00.813 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34084 10 6452 1 2025-11-01 01:56:41.363 00:00:10.369 TCP 23.104.0.1:56882 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:57:01.038 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44786 10 6452 1 2025-11-01 01:57:41.764 00:00:10.375 TCP 23.104.0.1:45716 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:58:01.245 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46204 10 6452 1 Summary: total flows: 162, total bytes: 490493, total packets: 1553, avg bps: 1033, avg pps: 0, avg bpp: 315 Time window: 2025-11-01 00:54:53 - 2025-11-01 01:58:11 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0041s User: 0.0014s Wall: 0.0040s flows/second: 40148.7 Runtime: 0.0041s