Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 02:59:09.176 00:00:10.321 TCP 23.104.0.1:58400 -> 1.101.0.1:3000 11 1507 1 2025-11-01 02:59:15.527 00:00:10.755 TCP 1.101.0.1:3000 -> 22.102.0.1:44680 10 6452 1 2025-11-01 02:54:53.891 00:05:56.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 02:54:53.889 00:05:56.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 03:00:09.537 00:00:10.358 TCP 23.104.0.1:51884 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:00:16.317 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35882 10 6452 1 2025-11-01 03:00:56.581 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 03:00:56.729 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 03:01:09.938 00:00:10.370 TCP 23.104.0.1:45708 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:01:16.533 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53384 10 6452 1 2025-11-01 03:02:10.350 00:00:10.365 TCP 23.104.0.1:42646 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:02:16.747 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43320 10 6452 1 2025-11-01 03:03:16.955 00:00:10.771 TCP 1.101.0.1:3000 -> 22.102.0.1:60484 10 6452 1 2025-11-01 03:03:10.757 00:00:17.035 TCP 23.104.0.1:35850 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:04:17.764 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42520 10 6452 1 2025-11-01 03:04:17.829 00:00:10.402 TCP 23.104.0.1:50146 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:05:18.269 00:00:10.325 TCP 23.104.0.1:49152 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:05:18.030 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33156 10 6452 1 2025-11-01 03:00:53.891 00:05:56.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 03:00:53.896 00:05:56.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 03:05:56.944 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 03:05:56.927 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 03:06:18.636 00:00:10.366 TCP 23.104.0.1:35754 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:06:18.251 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38682 10 6452 1 2025-11-01 03:07:19.053 00:00:10.362 TCP 23.104.0.1:45510 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:07:18.466 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35144 10 6452 1 2025-11-01 03:08:19.454 00:00:10.358 TCP 23.104.0.1:42622 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:08:18.645 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38404 10 6452 1 2025-11-01 03:09:18.869 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:39594 10 6452 1 2025-11-01 03:09:19.855 00:00:10.378 TCP 23.104.0.1:36128 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:10:20.274 00:00:10.365 TCP 23.104.0.1:45554 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:10:19.100 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59920 10 6452 1 2025-11-01 03:10:56.939 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 03:10:56.939 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 03:11:19.320 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60154 10 6452 1 2025-11-01 03:11:20.677 00:00:10.373 TCP 23.104.0.1:47356 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:06:53.894 00:05:56.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 03:06:53.895 00:05:56.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 03:12:19.547 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38012 10 6452 1 2025-11-01 03:12:21.110 00:00:10.363 TCP 23.104.0.1:43916 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:13:21.511 00:00:10.371 TCP 23.104.0.1:46664 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:13:19.773 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55686 10 6452 1 2025-11-01 03:14:19.996 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50300 10 6452 1 2025-11-01 03:14:21.917 00:00:10.378 TCP 23.104.0.1:39470 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:15:20.227 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55896 12 6556 1 2025-11-01 03:15:22.334 00:00:10.371 TCP 23.104.0.1:34136 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:15:57.291 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 03:15:57.166 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 03:16:20.447 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:36196 10 6452 1 2025-11-01 03:16:22.743 00:00:10.373 TCP 23.104.0.1:58700 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:17:20.628 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37038 10 6452 1 2025-11-01 03:17:23.153 00:00:10.364 TCP 23.104.0.1:55866 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:12:53.898 00:05:56.600 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 03:12:53.895 00:05:56.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 03:18:20.868 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57338 10 6452 1 2025-11-01 03:18:23.556 00:00:10.370 TCP 23.104.0.1:35158 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:19:21.068 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55686 12 10375 1 2025-11-01 03:19:23.978 00:00:10.451 TCP 23.104.0.1:39528 -> 1.101.0.1:3000 15 1926 1 2025-11-01 03:20:21.308 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45752 10 6452 1 2025-11-01 03:20:24.465 00:00:10.371 TCP 23.104.0.1:51548 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:20:57.058 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 03:20:57.345 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 03:21:21.521 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50462 10 6452 1 2025-11-01 03:21:24.871 00:00:10.322 TCP 23.104.0.1:43138 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:22:21.735 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56584 10 6452 1 2025-11-01 03:22:25.231 00:00:10.367 TCP 23.104.0.1:39514 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:23:25.650 00:00:10.375 TCP 23.104.0.1:50354 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:23:21.920 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42282 10 6452 1 2025-11-01 03:18:53.898 00:05:56.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 03:18:53.899 00:05:56.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 03:24:26.077 00:00:10.368 TCP 23.104.0.1:33154 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:24:22.130 00:00:10.705 TCP 1.101.0.1:3000 -> 22.102.0.1:55224 10 6452 1 2025-11-01 03:25:26.485 00:00:10.330 TCP 23.104.0.1:42082 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:25:22.879 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38852 10 6452 1 2025-11-01 03:25:57.281 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 03:25:57.125 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 03:26:23.107 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50458 10 6452 1 2025-11-01 03:26:26.857 00:00:10.379 TCP 23.104.0.1:52348 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:27:23.333 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38116 10 6452 1 2025-11-01 03:27:27.274 00:00:10.367 TCP 23.104.0.1:38184 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:28:23.537 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45730 10 6452 1 2025-11-01 03:28:27.675 00:00:10.548 TCP 23.104.0.1:57052 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:29:23.755 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49412 10 6452 1 2025-11-01 03:29:28.262 00:00:10.369 TCP 23.104.0.1:55754 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:24:53.899 00:05:56.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 03:24:53.902 00:05:56.600 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 03:30:23.977 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56990 10 6452 1 2025-11-01 03:30:28.667 00:00:10.367 TCP 23.104.0.1:38154 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:30:57.356 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 03:30:57.590 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 03:31:24.211 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46352 10 6452 1 2025-11-01 03:31:29.095 00:00:10.363 TCP 23.104.0.1:48706 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:32:24.387 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37322 10 6452 1 2025-11-01 03:32:29.497 00:00:10.364 TCP 23.104.0.1:51888 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:33:24.603 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42762 10 6452 1 2025-11-01 03:33:29.899 00:00:10.367 TCP 23.104.0.1:53210 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:34:24.827 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50942 10 6452 1 2025-11-01 03:34:30.309 00:00:10.367 TCP 23.104.0.1:51354 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:35:25.004 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50486 10 6452 1 2025-11-01 03:35:30.716 00:00:10.370 TCP 23.104.0.1:41044 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:30:53.904 00:05:56.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 03:30:53.901 00:05:56.606 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 03:35:57.406 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 03:35:57.635 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 03:36:25.235 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47204 10 6452 1 2025-11-01 03:36:31.124 00:00:10.326 TCP 23.104.0.1:54084 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:37:25.447 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:50930 10 6452 1 2025-11-01 03:37:31.487 00:00:10.363 TCP 23.104.0.1:54932 -> 1.101.0.1:3000 12 1559 1 2025-11-01 03:38:25.653 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51142 10 6452 1 2025-11-01 03:38:31.883 00:00:10.377 TCP 23.104.0.1:46222 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:39:25.868 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:52186 10 6452 1 2025-11-01 03:39:32.305 00:00:10.364 TCP 23.104.0.1:56034 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:40:26.115 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33602 10 6452 1 2025-11-01 03:40:32.707 00:00:10.322 TCP 23.104.0.1:58968 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:40:57.647 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 03:40:57.680 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 03:41:26.284 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50444 10 6452 1 2025-11-01 03:41:33.096 00:00:10.358 TCP 23.104.0.1:36922 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:36:53.907 00:05:56.600 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 03:36:53.905 00:05:56.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 03:42:26.500 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55094 10 6452 1 2025-11-01 03:42:33.496 00:00:10.366 TCP 23.104.0.1:57152 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:43:26.724 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:48666 10 6452 1 2025-11-01 03:43:33.899 00:00:10.366 TCP 23.104.0.1:33674 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:44:26.904 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35862 10 6452 1 2025-11-01 03:44:34.302 00:00:10.367 TCP 23.104.0.1:45592 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:45:27.118 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38042 10 6452 1 2025-11-01 03:45:34.705 00:00:10.371 TCP 23.104.0.1:47952 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:45:58.013 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 03:45:58.123 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 03:46:27.340 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45704 10 6452 1 2025-11-01 03:46:35.114 00:00:10.365 TCP 23.104.0.1:33282 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:47:27.563 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53366 10 6452 1 2025-11-01 03:47:35.517 00:00:10.326 TCP 23.104.0.1:50094 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:42:53.908 00:05:56.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 03:42:53.911 00:05:56.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 03:48:27.780 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59910 10 6452 1 2025-11-01 03:48:35.880 00:00:10.329 TCP 23.104.0.1:38598 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:49:27.994 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56280 10 6452 1 2025-11-01 03:49:36.244 00:00:10.369 TCP 23.104.0.1:55808 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:50:28.215 00:00:10.833 TCP 1.101.0.1:3000 -> 22.102.0.1:51646 10 6452 1 2025-11-01 03:50:36.651 00:00:10.367 TCP 23.104.0.1:57654 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:50:57.821 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 03:50:57.856 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 03:51:29.091 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44240 10 6452 1 2025-11-01 03:51:37.058 00:00:10.374 TCP 23.104.0.1:58516 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:52:29.307 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60704 10 6452 1 2025-11-01 03:52:37.468 00:00:10.381 TCP 23.104.0.1:50048 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:53:29.521 00:00:10.744 TCP 1.101.0.1:3000 -> 22.102.0.1:38660 10 6452 1 2025-11-01 03:48:53.911 00:05:56.603 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 03:53:37.882 00:00:10.381 TCP 23.104.0.1:48136 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:48:53.908 00:05:56.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 03:54:30.305 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51526 12 10375 1 2025-11-01 03:54:38.301 00:00:10.445 TCP 23.104.0.1:57924 -> 1.101.0.1:3000 15 1926 1 2025-11-01 03:55:30.549 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55452 12 6556 1 2025-11-01 03:55:38.787 00:00:10.364 TCP 23.104.0.1:47570 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:55:57.910 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 03:55:58.090 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 03:56:30.798 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42722 10 6452 1 2025-11-01 03:56:39.194 00:00:10.362 TCP 23.104.0.1:56714 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:57:31.014 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43366 10 6452 1 2025-11-01 03:57:39.595 00:00:10.896 TCP 23.104.0.1:51266 -> 1.101.0.1:3000 11 1507 1 2025-11-01 03:58:31.229 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46854 10 6452 1 2025-11-01 03:58:40.526 00:00:10.326 TCP 23.104.0.1:35046 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507292, total packets: 1589, avg bps: 1057, avg pps: 0, avg bpp: 319 Time window: 2025-11-01 02:54:53 - 2025-11-01 03:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0021s Wall: 0.0024s flows/second: 68044.9 Runtime: 0.0024s