Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 08:58:45.586 00:00:10.359 TCP 23.104.0.1:41802 -> 1.101.0.1:3000 11 1507 1 2025-11-10 08:53:58.551 00:05:56.658 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 08:58:47.709 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49544 10 6452 1 2025-11-10 08:59:45.986 00:00:10.370 TCP 23.104.0.1:46372 -> 1.101.0.1:3000 11 1507 1 2025-11-10 08:59:47.930 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56858 10 6452 1 2025-11-10 09:00:24.044 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 09:00:23.950 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 09:00:46.390 00:00:10.366 TCP 23.104.0.1:48142 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:00:48.148 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55660 10 6452 1 2025-11-10 09:01:48.361 00:00:10.425 TCP 1.101.0.1:3000 -> 22.102.0.1:36714 10 6452 1 2025-11-10 09:01:46.794 00:00:10.367 TCP 23.104.0.1:51474 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:02:48.825 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53850 10 6452 1 2025-11-10 09:02:47.202 00:00:10.333 TCP 23.104.0.1:36550 -> 1.101.0.1:3000 11 1507 1 2025-11-10 08:58:58.554 00:05:56.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 09:03:49.039 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44484 10 6452 1 2025-11-10 09:03:47.573 00:00:10.364 TCP 23.104.0.1:42906 -> 1.101.0.1:3000 11 1507 1 2025-11-10 08:59:58.552 00:05:56.658 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 09:04:49.251 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37872 10 6452 1 2025-11-10 09:04:47.975 00:00:10.327 TCP 23.104.0.1:52432 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:05:24.169 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 09:05:23.931 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 09:05:48.337 00:00:10.368 TCP 23.104.0.1:57364 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:05:49.469 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46912 10 6452 1 2025-11-10 09:06:49.648 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37110 10 6452 1 2025-11-10 09:06:48.745 00:00:10.366 TCP 23.104.0.1:59816 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:07:49.147 00:00:10.367 TCP 23.104.0.1:33824 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:07:49.865 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35306 10 6452 1 2025-11-10 09:08:49.551 00:00:10.361 TCP 23.104.0.1:38444 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:08:50.097 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51108 10 6452 1 2025-11-10 09:04:58.555 00:05:56.654 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 09:09:49.953 00:00:10.367 TCP 23.104.0.1:54550 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:09:50.308 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40918 10 6452 1 2025-11-10 09:10:24.304 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 09:10:24.174 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 09:10:50.521 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49504 10 6452 1 2025-11-10 09:05:58.552 00:05:56.659 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 09:10:50.359 00:00:10.368 TCP 23.104.0.1:36990 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:11:50.765 00:00:10.330 TCP 23.104.0.1:49186 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:11:50.737 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38914 10 6452 1 2025-11-10 09:12:51.133 00:00:10.444 TCP 23.104.0.1:60506 -> 1.101.0.1:3000 15 1926 1 2025-11-10 09:12:50.947 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:47686 12 10375 1 2025-11-10 09:13:51.618 00:00:10.367 TCP 23.104.0.1:43864 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:13:51.204 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35622 10 6452 1 2025-11-10 09:14:51.418 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57550 10 6452 1 2025-11-10 09:14:52.023 00:00:10.364 TCP 23.104.0.1:55888 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:15:24.205 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 09:15:24.226 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 09:10:58.555 00:05:56.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 09:15:51.636 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49178 10 6452 1 2025-11-10 09:15:52.429 00:00:10.363 TCP 23.104.0.1:48142 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:11:58.554 00:05:56.659 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 09:16:51.812 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58108 10 6452 1 2025-11-10 09:16:52.833 00:00:10.386 TCP 23.104.0.1:42422 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:17:51.983 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52686 10 6452 1 2025-11-10 09:17:53.256 00:00:10.365 TCP 23.104.0.1:56388 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:18:53.658 00:00:10.368 TCP 23.104.0.1:34578 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:18:52.210 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40268 10 6452 1 2025-11-10 09:19:54.080 00:00:10.325 TCP 23.104.0.1:39298 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:19:52.423 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43396 10 6452 1 2025-11-10 09:20:24.473 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 09:20:24.441 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 09:20:54.439 00:00:10.320 TCP 23.104.0.1:49564 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:20:52.639 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39926 10 6452 1 2025-11-10 09:16:58.558 00:05:56.654 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 09:21:54.797 00:00:10.375 TCP 23.104.0.1:48484 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:21:52.858 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35184 10 6452 1 2025-11-10 09:17:58.556 00:05:56.659 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 09:22:55.210 00:00:10.326 TCP 23.104.0.1:46636 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:22:53.096 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52450 10 6452 1 2025-11-10 09:23:55.575 00:00:10.367 TCP 23.104.0.1:51006 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:23:53.325 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36386 10 6452 1 2025-11-10 09:24:55.978 00:00:10.375 TCP 23.104.0.1:55906 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:24:53.549 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56362 10 6452 1 2025-11-10 09:25:24.741 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 09:25:24.681 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 09:25:56.425 00:00:10.366 TCP 23.104.0.1:43678 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:25:53.761 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36380 10 6452 1 2025-11-10 09:26:53.982 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49014 10 6452 1 2025-11-10 09:26:56.825 00:00:10.371 TCP 23.104.0.1:43718 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:22:58.559 00:05:56.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 09:27:54.205 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60484 10 6452 1 2025-11-10 09:27:57.233 00:00:10.374 TCP 23.104.0.1:54900 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:23:58.556 00:05:56.661 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 09:28:54.412 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41066 10 6452 1 2025-11-10 09:28:57.643 00:00:10.365 TCP 23.104.0.1:56824 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:29:54.629 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37444 10 6452 1 2025-11-10 09:29:58.056 00:00:10.362 TCP 23.104.0.1:41022 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:30:24.850 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 09:30:24.633 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 09:30:54.846 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42246 10 6452 1 2025-11-10 09:30:58.459 00:00:10.370 TCP 23.104.0.1:55918 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:31:55.022 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59332 10 6452 1 2025-11-10 09:31:58.865 00:00:10.368 TCP 23.104.0.1:53174 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:32:55.234 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55158 10 6452 1 2025-11-10 09:32:59.274 00:00:10.368 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:28:58.561 00:05:56.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 09:33:55.447 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56694 10 6452 1 2025-11-10 09:33:59.675 00:00:10.372 TCP 23.104.0.1:37904 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:29:58.557 00:05:56.661 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 09:34:55.656 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53442 10 6452 1 2025-11-10 09:35:00.103 00:00:10.369 TCP 23.104.0.1:33278 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:35:24.649 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 09:35:24.648 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 09:35:55.871 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:56406 10 6452 1 2025-11-10 09:36:00.505 00:00:10.369 TCP 23.104.0.1:58720 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:36:56.101 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54968 10 6452 1 2025-11-10 09:37:00.911 00:00:10.364 TCP 23.104.0.1:42306 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:37:56.322 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54006 10 6452 1 2025-11-10 09:38:01.317 00:00:10.369 TCP 23.104.0.1:47136 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:38:56.498 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52384 10 6452 1 2025-11-10 09:39:01.722 00:00:10.329 TCP 23.104.0.1:58556 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:34:58.561 00:05:56.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 09:39:56.668 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43208 10 6452 1 2025-11-10 09:40:02.107 00:00:10.364 TCP 23.104.0.1:32850 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:40:24.782 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 09:40:24.726 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 09:35:58.559 00:05:56.659 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 09:40:56.882 00:00:10.710 TCP 1.101.0.1:3000 -> 22.102.0.1:47202 10 6452 1 2025-11-10 09:41:02.510 00:00:10.364 TCP 23.104.0.1:50266 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:41:57.636 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:48052 10 6452 1 2025-11-10 09:42:02.916 00:00:10.323 TCP 23.104.0.1:55830 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:42:57.810 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42264 10 6452 1 2025-11-10 09:43:03.278 00:00:10.367 TCP 23.104.0.1:47638 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:43:58.036 00:00:10.285 TCP 1.101.0.1:3000 -> 22.102.0.1:42768 10 6452 1 2025-11-10 09:44:03.682 00:00:10.330 TCP 23.104.0.1:49492 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:44:58.360 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38216 10 6452 1 2025-11-10 09:45:04.061 00:00:10.364 TCP 23.104.0.1:58976 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:45:24.746 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 09:45:24.942 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 09:40:58.561 00:05:56.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 09:45:58.586 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39282 10 6452 1 2025-11-10 09:46:04.463 00:00:10.372 TCP 23.104.0.1:42838 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:41:58.560 00:05:56.659 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 09:46:58.817 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:52946 10 6452 1 2025-11-10 09:47:04.875 00:00:10.322 TCP 23.104.0.1:33642 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:47:59.087 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:51174 12 10369 1 2025-11-10 09:48:05.235 00:00:10.463 TCP 23.104.0.1:54466 -> 1.101.0.1:3000 15 1926 1 2025-11-10 09:48:59.320 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56230 10 6452 1 2025-11-10 09:49:05.738 00:00:10.368 TCP 23.104.0.1:41554 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:49:59.541 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33586 10 6452 1 2025-11-10 09:50:06.140 00:00:10.702 TCP 23.104.0.1:44504 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:50:24.922 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 09:50:25.059 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 09:50:59.753 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39202 10 6452 1 2025-11-10 09:51:06.881 00:00:10.385 TCP 23.104.0.1:34616 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:46:58.566 00:05:56.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 09:51:59.925 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:40630 10 6452 1 2025-11-10 09:52:07.312 00:00:10.387 TCP 23.104.0.1:53122 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:47:58.563 00:05:56.659 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 09:53:00.107 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43502 10 6452 1 2025-11-10 09:53:07.742 00:00:10.396 TCP 23.104.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:54:00.325 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60914 10 6452 1 2025-11-10 09:54:08.180 00:00:10.326 TCP 23.104.0.1:37236 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:55:00.541 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54518 10 6452 1 2025-11-10 09:55:08.561 00:00:10.370 TCP 23.104.0.1:58910 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:55:24.957 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 09:55:24.901 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 09:56:00.755 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50534 10 6452 1 2025-11-10 09:56:08.970 00:00:10.364 TCP 23.104.0.1:41068 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:57:00.965 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41568 10 6452 1 2025-11-10 09:57:09.375 00:00:10.371 TCP 23.104.0.1:44898 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:52:58.567 00:05:56.652 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 09:58:01.198 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53534 10 6452 1 2025-11-10 09:58:09.789 00:00:10.361 TCP 23.104.0.1:59298 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507026, total packets: 1584, avg bps: 1040, avg pps: 0, avg bpp: 320 Time window: 2025-11-10 08:53:58 - 2025-11-10 09:58:55 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0022s User: 0.0033s Wall: 0.0027s flows/second: 61378.2 Runtime: 0.0027s