Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 01:58:42.175 00:00:10.363 TCP 23.104.0.1:40724 -> 1.101.0.1:3000 11 1507 1 2025-11-01 01:59:01.459 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43490 10 6452 1 2025-11-01 01:54:53.871 00:05:56.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 01:54:53.875 00:05:56.587 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 01:59:42.573 00:00:10.367 TCP 23.104.0.1:57038 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:00:01.672 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51744 10 6452 1 2025-11-01 02:00:55.842 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 02:00:42.982 00:00:10.377 TCP 23.104.0.1:49716 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:00:55.763 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 02:01:01.841 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54882 10 6452 1 2025-11-01 02:01:43.398 00:00:10.324 TCP 23.104.0.1:41222 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:02:02.071 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50450 10 6452 1 2025-11-01 02:02:43.759 00:00:10.380 TCP 23.104.0.1:39270 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:03:02.284 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44616 10 6452 1 2025-11-01 02:03:44.175 00:00:10.365 TCP 23.104.0.1:41170 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:04:02.503 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:56384 14 14298 1 2025-11-01 02:04:44.575 00:00:10.518 TCP 23.104.0.1:43978 -> 1.101.0.1:3000 17 2241 1 2025-11-01 02:05:02.784 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:56290 10 6452 1 2025-11-01 02:00:53.872 00:05:56.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 02:05:55.518 00:00:00.012 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 02:05:45.129 00:00:10.370 TCP 23.104.0.1:54584 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:00:53.876 00:05:56.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 02:05:55.659 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 02:06:02.983 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38776 10 6452 1 2025-11-01 02:06:45.533 00:00:10.369 TCP 23.104.0.1:34268 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:07:03.193 00:00:10.380 TCP 1.101.0.1:3000 -> 22.102.0.1:50914 10 6452 1 2025-11-01 02:07:45.936 00:00:10.379 TCP 23.104.0.1:52960 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:08:03.613 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47476 10 6452 1 2025-11-01 02:08:46.353 00:00:10.369 TCP 23.104.0.1:45240 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:09:03.842 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:47506 10 6452 1 2025-11-01 02:09:46.755 00:00:10.373 TCP 23.104.0.1:32960 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:10:04.085 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49808 10 6452 1 2025-11-01 02:10:55.721 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 02:10:55.837 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 02:10:47.166 00:00:10.896 TCP 23.104.0.1:40094 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:11:04.304 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49360 10 6452 1 2025-11-01 02:06:53.878 00:05:56.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 02:06:53.873 00:05:56.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 02:11:48.102 00:00:10.368 TCP 23.104.0.1:60700 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:12:04.526 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45870 10 6452 1 2025-11-01 02:12:48.508 00:00:10.361 TCP 23.104.0.1:46548 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:13:04.751 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60166 10 6452 1 2025-11-01 02:13:48.910 00:00:10.366 TCP 23.104.0.1:35666 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:14:04.928 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:38426 10 6452 1 2025-11-01 02:14:49.309 00:00:10.366 TCP 23.104.0.1:53640 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:15:05.119 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36644 10 6452 1 2025-11-01 02:15:55.823 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 02:15:55.890 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 02:15:49.714 00:00:10.384 TCP 23.104.0.1:60388 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:16:05.334 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53290 10 6452 1 2025-11-01 02:16:50.133 00:00:10.362 TCP 23.104.0.1:56974 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:17:05.504 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41148 10 6452 1 2025-11-01 02:12:53.876 00:05:56.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 02:12:53.877 00:05:56.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 02:17:50.529 00:00:10.500 TCP 23.104.0.1:42500 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:18:05.726 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53106 10 6452 1 2025-11-01 02:18:51.089 00:00:10.322 TCP 23.104.0.1:40396 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:19:05.938 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:57860 10 6452 1 2025-11-01 02:19:51.451 00:00:10.376 TCP 23.104.0.1:44750 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:20:06.176 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35470 10 6452 1 2025-11-01 02:20:55.827 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 02:20:56.070 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 02:20:51.861 00:00:10.331 TCP 23.104.0.1:56850 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:21:06.400 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53082 10 6452 1 2025-11-01 02:21:52.229 00:00:10.365 TCP 23.104.0.1:57416 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:22:06.615 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35560 10 6452 1 2025-11-01 02:22:52.634 00:00:10.376 TCP 23.104.0.1:43938 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:23:06.833 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55918 10 6452 1 2025-11-01 02:18:53.880 00:05:56.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 02:18:53.879 00:05:56.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 02:23:53.058 00:00:10.369 TCP 23.104.0.1:40866 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:24:07.070 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37242 10 6452 1 2025-11-01 02:24:53.460 00:00:12.439 TCP 23.104.0.1:37130 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:25:07.287 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45218 10 6452 1 2025-11-01 02:25:55.823 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 02:25:56.102 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 02:25:55.947 00:00:10.366 TCP 23.104.0.1:34232 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:26:07.509 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41830 10 6452 1 2025-11-01 02:26:56.349 00:00:10.318 TCP 23.104.0.1:42186 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:27:07.726 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36044 10 6452 1 2025-11-01 02:27:56.706 00:00:10.363 TCP 23.104.0.1:46086 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:28:07.959 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37364 12 6556 1 2025-11-01 02:28:57.108 00:00:10.365 TCP 23.104.0.1:48718 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:29:08.192 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54082 10 6452 1 2025-11-01 02:24:53.879 00:05:56.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 02:24:53.881 00:05:56.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 02:29:57.513 00:00:10.364 TCP 23.104.0.1:60738 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:30:08.411 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50722 10 6452 1 2025-11-01 02:30:56.188 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 02:30:56.019 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 02:30:57.916 00:00:10.330 TCP 23.104.0.1:38394 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:31:08.632 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38670 10 6452 1 2025-11-01 02:31:58.291 00:00:10.363 TCP 23.104.0.1:48550 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:32:08.852 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59874 10 6452 1 2025-11-01 02:32:58.694 00:00:10.357 TCP 23.104.0.1:46296 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:33:09.088 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58920 10 6452 1 2025-11-01 02:33:59.104 00:00:10.360 TCP 23.104.0.1:45748 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:34:09.313 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58192 10 6452 1 2025-11-01 02:34:59.504 00:00:10.360 TCP 23.104.0.1:39640 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:35:09.524 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54844 10 6452 1 2025-11-01 02:30:53.880 00:05:56.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 02:30:53.883 00:05:56.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 02:35:56.318 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 02:35:56.326 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 02:35:59.901 00:00:10.364 TCP 23.104.0.1:46536 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:36:09.738 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60982 10 6452 1 2025-11-01 02:37:00.307 00:00:10.360 TCP 23.104.0.1:44120 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:37:09.955 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46476 12 6556 1 2025-11-01 02:38:00.706 00:00:10.373 TCP 23.104.0.1:45066 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:38:10.186 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44800 10 6452 1 2025-11-01 02:39:01.110 00:00:10.371 TCP 23.104.0.1:54940 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:39:10.422 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36112 10 6452 1 2025-11-01 02:40:01.518 00:00:10.366 TCP 23.104.0.1:45126 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:40:10.637 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37090 10 6452 1 2025-11-01 02:40:56.338 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 02:40:56.289 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 02:41:01.924 00:00:10.384 TCP 23.104.0.1:45464 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:41:10.815 00:00:10.842 TCP 1.101.0.1:3000 -> 22.102.0.1:53360 10 6452 1 2025-11-01 02:36:53.885 00:05:56.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 02:36:53.882 00:05:56.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 02:42:02.349 00:00:10.359 TCP 23.104.0.1:42000 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:42:11.696 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40768 10 6452 1 2025-11-01 02:43:02.744 00:00:10.366 TCP 23.104.0.1:37568 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:43:11.909 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53716 10 6452 1 2025-11-01 02:44:03.178 00:00:10.438 TCP 23.104.0.1:54048 -> 1.101.0.1:3000 15 1926 1 2025-11-01 02:44:12.123 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:40340 12 10375 1 2025-11-01 02:45:03.658 00:00:10.332 TCP 23.104.0.1:42266 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:45:12.321 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52414 10 6452 1 2025-11-01 02:45:56.752 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 02:45:56.294 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 02:46:04.031 00:00:10.328 TCP 23.104.0.1:49618 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:46:12.540 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44268 10 6452 1 2025-11-01 02:47:04.394 00:00:10.369 TCP 23.104.0.1:54936 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:47:12.752 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45676 10 6452 1 2025-11-01 02:42:53.888 00:05:56.594 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 02:42:53.885 00:05:56.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 02:48:04.799 00:00:10.369 TCP 23.104.0.1:50528 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:48:12.969 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46214 10 6452 1 2025-11-01 02:49:05.209 00:00:10.365 TCP 23.104.0.1:36438 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:49:13.208 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53450 10 6452 1 2025-11-01 02:50:05.614 00:00:10.382 TCP 23.104.0.1:39408 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:50:13.426 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45138 10 6452 1 2025-11-01 02:50:56.479 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 02:50:56.682 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 02:51:06.065 00:00:10.325 TCP 23.104.0.1:46746 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:51:13.640 00:00:10.267 TCP 1.101.0.1:3000 -> 22.102.0.1:58242 10 6452 1 2025-11-01 02:52:06.427 00:00:10.363 TCP 23.104.0.1:46380 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:52:13.945 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57860 10 6452 1 2025-11-01 02:53:06.830 00:00:10.348 TCP 23.104.0.1:50210 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:53:14.177 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34970 10 6452 1 2025-11-01 02:48:53.885 00:05:56.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 02:48:53.888 00:05:56.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 02:54:07.216 00:00:10.363 TCP 23.104.0.1:59428 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:54:14.399 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49312 10 6452 1 2025-11-01 02:55:07.617 00:00:10.327 TCP 23.104.0.1:34672 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:55:14.615 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45402 10 6452 1 2025-11-01 02:55:56.947 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 02:55:56.661 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 02:56:07.984 00:00:10.338 TCP 23.104.0.1:59052 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:56:14.826 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46038 10 6452 1 2025-11-01 02:57:08.359 00:00:10.365 TCP 23.104.0.1:45048 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:57:15.076 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39986 10 6452 1 2025-11-01 02:58:08.763 00:00:10.374 TCP 23.104.0.1:48548 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:58:15.291 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32968 10 6452 1 Summary: total flows: 164, total bytes: 511478, total packets: 1592, avg bps: 1073, avg pps: 0, avg bpp: 321 Time window: 2025-11-01 01:54:53 - 2025-11-01 02:58:25 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0015s Wall: 0.0024s flows/second: 69699.7 Runtime: 0.0024s