Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 13:58:44.261 00:00:10.363 TCP 23.104.0.1:47518 -> 1.101.0.1:3000 11 1507 1 2025-11-04 13:54:52.464 00:05:03.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 13:59:34.605 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41776 10 6452 1 2025-11-04 13:59:44.663 00:00:10.368 TCP 23.104.0.1:60644 -> 1.101.0.1:3000 11 1507 1 2025-11-04 13:55:52.465 00:05:03.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 14:00:34.816 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:57978 10 6452 1 2025-11-04 14:00:45.095 00:00:10.363 TCP 23.104.0.1:49542 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:01:35.001 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39862 10 6452 1 2025-11-04 14:01:45.493 00:00:10.370 TCP 23.104.0.1:44746 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:02:36.884 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 14:02:36.582 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 14:02:35.222 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54364 10 6452 1 2025-11-04 14:02:45.900 00:00:10.341 TCP 23.104.0.1:34888 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:03:35.451 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51314 10 6452 1 2025-11-04 14:03:46.290 00:00:10.367 TCP 23.104.0.1:51794 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:04:35.667 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57746 10 6452 1 2025-11-04 14:00:52.465 00:05:03.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 14:04:46.697 00:00:10.372 TCP 23.104.0.1:50778 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:05:35.893 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-11-04 14:01:52.468 00:05:03.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 14:05:47.107 00:00:10.369 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:06:36.111 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49542 10 6452 1 2025-11-04 14:06:47.516 00:00:10.419 TCP 23.104.0.1:48114 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:07:36.831 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 14:07:36.843 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 14:07:36.333 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43760 10 6452 1 2025-11-04 14:07:47.978 00:00:10.366 TCP 23.104.0.1:52506 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:08:36.552 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 10 6452 1 2025-11-04 14:08:48.383 00:00:10.365 TCP 23.104.0.1:56396 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:09:36.760 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35316 10 6452 1 2025-11-04 14:09:48.793 00:00:10.370 TCP 23.104.0.1:41528 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:10:36.981 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55090 10 6452 1 2025-11-04 14:06:52.465 00:05:03.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 14:10:49.208 00:00:10.328 TCP 23.104.0.1:51540 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:11:37.213 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51102 10 6452 1 2025-11-04 14:07:52.469 00:05:03.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 14:11:49.576 00:00:10.319 TCP 23.104.0.1:51826 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:12:37.165 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 14:12:37.057 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 14:12:37.420 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58548 10 6452 1 2025-11-04 14:12:49.936 00:00:10.378 TCP 23.104.0.1:41962 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:13:37.635 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:60136 11 6504 1 2025-11-04 14:13:50.348 00:00:10.365 TCP 23.104.0.1:36832 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:14:37.905 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33564 10 6452 1 2025-11-04 14:14:50.749 00:00:10.364 TCP 23.104.0.1:38962 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:15:38.118 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52866 10 6452 1 2025-11-04 14:15:51.149 00:00:22.633 TCP 23.104.0.1:51860 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:16:38.331 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38970 10 6452 1 2025-11-04 14:12:52.467 00:05:03.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 14:17:03.846 00:00:10.381 TCP 23.104.0.1:58806 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:17:37.080 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 14:17:37.299 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 14:17:38.543 00:00:12.084 TCP 1.101.0.1:3000 -> 22.102.0.1:50412 11 6504 1 2025-11-04 14:13:52.471 00:05:03.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 14:18:04.262 00:00:10.363 TCP 23.104.0.1:46004 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:18:40.663 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36314 10 6452 1 2025-11-04 14:19:04.668 00:00:10.363 TCP 23.104.0.1:36122 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:19:40.880 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34068 10 6452 1 2025-11-04 14:20:05.099 00:00:10.326 TCP 23.104.0.1:38526 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:20:41.106 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:33720 10 6452 1 2025-11-04 14:21:05.471 00:00:10.327 TCP 23.104.0.1:52960 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:21:41.302 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42326 10 6452 1 2025-11-04 14:22:05.834 00:00:10.397 TCP 23.104.0.1:41060 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:22:37.278 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 14:22:37.025 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 14:22:41.513 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58650 10 6452 1 2025-11-04 14:18:52.467 00:05:03.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 14:23:06.266 00:00:10.363 TCP 23.104.0.1:41394 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:23:41.729 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:40300 10 6452 1 2025-11-04 14:19:52.470 00:05:03.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 14:24:06.673 00:00:10.367 TCP 23.104.0.1:36546 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:24:41.934 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:45620 10 6452 1 2025-11-04 14:25:07.100 00:00:10.321 TCP 23.104.0.1:32834 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:25:42.175 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34454 10 6452 1 2025-11-04 14:26:07.463 00:00:10.363 TCP 23.104.0.1:46178 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:26:42.346 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52626 10 6452 1 2025-11-04 14:27:07.865 00:00:10.366 TCP 23.104.0.1:55322 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:27:37.345 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 14:27:37.227 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 14:27:42.563 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33876 10 6452 1 2025-11-04 14:28:08.277 00:00:10.363 TCP 23.104.0.1:58426 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:28:42.775 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50188 10 6452 1 2025-11-04 14:24:52.469 00:05:03.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 14:29:08.680 00:00:10.365 TCP 23.104.0.1:49282 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:25:52.472 00:05:03.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 14:29:42.995 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:40268 10 6452 1 2025-11-04 14:30:09.101 00:00:10.324 TCP 23.104.0.1:33416 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:30:43.224 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:32988 10 6452 1 2025-11-04 14:31:09.466 00:00:10.330 TCP 23.104.0.1:47470 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:31:43.445 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39608 10 6452 1 2025-11-04 14:32:09.837 00:00:10.385 TCP 23.104.0.1:38196 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:32:37.595 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 14:32:37.592 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 14:32:43.655 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57180 10 6452 1 2025-11-04 14:33:10.260 00:00:10.372 TCP 23.104.0.1:49142 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:33:43.867 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:60556 11 6504 1 2025-11-04 14:34:10.675 00:00:10.370 TCP 23.104.0.1:34430 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:30:52.470 00:05:03.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 14:34:44.152 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40000 10 6452 1 2025-11-04 14:35:11.103 00:00:10.366 TCP 23.104.0.1:39092 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:35:44.380 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44952 10 6452 1 2025-11-04 14:31:52.472 00:05:03.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 14:36:11.511 00:00:10.372 TCP 23.104.0.1:59288 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:36:44.601 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57880 10 6452 1 2025-11-04 14:37:11.922 00:00:10.368 TCP 23.104.0.1:49552 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:37:37.512 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 14:37:37.537 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 14:37:44.775 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58576 10 6452 1 2025-11-04 14:38:12.330 00:00:10.368 TCP 23.104.0.1:47902 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:38:44.994 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39200 10 6452 1 2025-11-04 14:39:12.742 00:00:10.371 TCP 23.104.0.1:43302 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:39:45.233 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48538 10 6452 1 2025-11-04 14:40:13.147 00:00:10.364 TCP 23.104.0.1:53710 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:40:45.459 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46478 10 6452 1 2025-11-04 14:36:52.470 00:05:03.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 14:41:13.547 00:00:10.368 TCP 23.104.0.1:57334 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:41:45.687 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60634 10 6452 1 2025-11-04 14:37:52.473 00:05:03.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 14:42:13.957 00:00:10.358 TCP 23.104.0.1:41562 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:42:37.587 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 14:42:37.558 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 14:42:45.905 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43632 10 6452 1 2025-11-04 14:43:14.354 00:00:10.368 TCP 23.104.0.1:56376 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:43:46.112 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56632 10 6452 1 2025-11-04 14:44:14.759 00:00:10.917 TCP 23.104.0.1:45926 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:44:46.287 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37784 10 6452 1 2025-11-04 14:45:15.714 00:00:10.380 TCP 23.104.0.1:48508 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:45:46.507 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45268 10 6452 1 2025-11-04 14:46:16.130 00:00:10.362 TCP 23.104.0.1:42902 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:46:46.731 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55624 10 6452 1 2025-11-04 14:42:52.470 00:05:03.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 14:47:16.535 00:00:10.320 TCP 23.104.0.1:60162 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:47:37.625 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 14:47:37.639 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 14:43:52.473 00:05:03.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 14:47:46.945 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55246 10 6452 1 2025-11-04 14:48:16.895 00:00:10.376 TCP 23.104.0.1:54806 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:48:47.176 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35336 10 6452 1 2025-11-04 14:49:17.311 00:00:10.364 TCP 23.104.0.1:48648 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:49:47.386 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39660 10 6452 1 2025-11-04 14:50:17.713 00:00:10.372 TCP 23.104.0.1:43156 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:50:47.605 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38260 10 6452 1 2025-11-04 14:51:18.123 00:00:10.366 TCP 23.104.0.1:58464 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:51:47.820 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32952 11 6813 1 2025-11-04 14:52:18.525 00:00:10.365 TCP 23.104.0.1:57710 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:52:37.826 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 14:52:37.836 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 14:48:52.495 00:05:03.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 14:52:48.062 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58924 10 6452 1 2025-11-04 14:53:18.929 00:00:10.386 TCP 23.104.0.1:46332 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:49:52.499 00:05:03.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 14:53:48.274 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33934 10 6452 1 2025-11-04 14:54:19.355 00:00:10.363 TCP 23.104.0.1:36334 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:54:48.490 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46562 10 6452 1 2025-11-04 14:55:19.758 00:00:10.375 TCP 23.104.0.1:53096 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:55:48.706 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45438 10 6452 1 2025-11-04 14:56:20.173 00:00:10.361 TCP 23.104.0.1:35624 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:56:48.917 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50488 10 6452 1 2025-11-04 14:57:20.573 00:00:10.330 TCP 23.104.0.1:45490 -> 1.101.0.1:3000 11 1507 1 2025-11-04 14:57:37.930 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 14:57:37.825 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 14:57:49.123 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47692 10 6452 1 2025-11-04 14:58:20.938 00:00:10.375 TCP 23.104.0.1:48558 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492413, total packets: 1566, avg bps: 1031, avg pps: 0, avg bpp: 314 Time window: 2025-11-04 13:54:52 - 2025-11-04 14:58:31 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0020s Wall: 0.0020s flows/second: 79709.9 Runtime: 0.0021s