Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 02:58:47.140 00:00:10.367 TCP 23.104.0.1:54072 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:59:24.896 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42248 10 6452 1 2025-11-15 02:59:47.543 00:00:10.362 TCP 23.104.0.1:44368 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:00:25.118 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47332 10 6452 1 2025-11-15 03:00:47.947 00:00:10.371 TCP 23.104.0.1:35840 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:01:25.337 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33060 10 6452 1 2025-11-15 03:01:48.352 00:00:10.322 TCP 23.104.0.1:42702 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:02:25.559 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58424 10 6452 1 2025-11-15 03:02:40.857 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 03:02:41.065 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 03:02:48.710 00:00:10.368 TCP 23.104.0.1:58214 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:03:25.780 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:52114 10 6452 1 2025-11-15 03:03:49.119 00:00:10.366 TCP 23.104.0.1:57544 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:59:57.300 00:05:04.528 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 02:59:57.303 00:05:04.523 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 03:04:26.026 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:59554 10 6452 1 2025-11-15 03:04:49.522 00:00:10.361 TCP 23.104.0.1:55298 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:05:26.210 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:52504 12 10369 1 2025-11-15 03:05:49.931 00:00:10.458 TCP 23.104.0.1:59706 -> 1.101.0.1:3000 15 1926 1 2025-11-15 03:06:26.450 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59906 10 6452 1 2025-11-15 03:06:50.435 00:00:10.338 TCP 23.104.0.1:41632 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:07:41.165 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 03:07:26.673 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35354 10 6452 1 2025-11-15 03:07:40.918 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 03:07:50.810 00:00:10.370 TCP 23.104.0.1:48072 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:08:26.884 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58900 10 6452 1 2025-11-15 03:08:51.218 00:00:10.370 TCP 23.104.0.1:48930 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:09:27.112 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60522 10 6452 1 2025-11-15 03:09:51.623 00:00:10.364 TCP 23.104.0.1:59814 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:05:57.304 00:05:04.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 03:05:57.302 00:05:04.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 03:10:27.329 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43636 10 6452 1 2025-11-15 03:10:52.026 00:00:10.330 TCP 23.104.0.1:47198 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:11:27.546 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39190 10 6452 1 2025-11-15 03:11:52.392 00:00:10.417 TCP 23.104.0.1:43242 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:12:41.443 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 03:12:27.763 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34882 10 6452 1 2025-11-15 03:12:41.485 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 03:12:52.851 00:00:10.382 TCP 23.104.0.1:51382 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:13:27.980 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:59394 10 6452 1 2025-11-15 03:13:53.268 00:00:10.365 TCP 23.104.0.1:34528 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:14:28.224 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51688 10 6452 1 2025-11-15 03:14:53.666 00:00:10.367 TCP 23.104.0.1:56046 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:15:28.436 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42292 10 6452 1 2025-11-15 03:11:57.302 00:05:04.529 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 03:15:54.093 00:00:10.323 TCP 23.104.0.1:56212 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:11:57.303 00:05:04.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 03:16:28.659 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41548 10 6452 1 2025-11-15 03:16:54.459 00:00:10.322 TCP 23.104.0.1:36208 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:17:28.869 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53244 10 6452 1 2025-11-15 03:17:41.387 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 03:17:41.210 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 03:17:54.822 00:00:16.624 TCP 23.104.0.1:52078 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:18:29.102 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58004 10 6452 1 2025-11-15 03:19:01.505 00:00:10.367 TCP 23.104.0.1:60616 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:19:29.320 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34252 10 6452 1 2025-11-15 03:20:01.911 00:00:10.366 TCP 23.104.0.1:60240 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:20:29.492 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58656 10 6452 1 2025-11-15 03:21:02.317 00:00:10.321 TCP 23.104.0.1:43180 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:21:29.702 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36150 10 6452 1 2025-11-15 03:17:57.307 00:05:04.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 03:17:57.303 00:05:04.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 03:22:02.685 00:00:10.366 TCP 23.104.0.1:33720 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:22:29.925 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:55146 10 6452 1 2025-11-15 03:22:41.794 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 03:22:41.837 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 03:23:03.108 00:00:13.721 TCP 23.104.0.1:52260 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:23:30.119 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50900 10 6452 1 2025-11-15 03:24:06.869 00:00:10.380 TCP 23.104.0.1:34458 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:24:30.331 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53414 10 6452 1 2025-11-15 03:25:07.276 00:00:10.363 TCP 23.104.0.1:33280 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:25:30.548 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47102 10 6452 1 2025-11-15 03:26:07.675 00:00:10.368 TCP 23.104.0.1:59684 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:26:30.766 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:36272 10 6452 1 2025-11-15 03:27:08.102 00:00:10.365 TCP 23.104.0.1:59824 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:27:41.762 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 03:27:41.417 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 03:27:31.030 00:00:13.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57902 10 6452 1 2025-11-15 03:23:57.305 00:05:04.531 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 03:23:57.308 00:05:04.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 03:28:08.502 00:00:10.757 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:28:34.245 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35584 10 6452 1 2025-11-15 03:29:09.294 00:00:10.368 TCP 23.104.0.1:45754 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:29:34.412 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49958 10 6452 1 2025-11-15 03:30:09.695 00:00:10.331 TCP 23.104.0.1:60146 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:30:34.622 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36144 12 10375 1 2025-11-15 03:31:10.090 00:00:10.437 TCP 23.104.0.1:39782 -> 1.101.0.1:3000 15 1926 1 2025-11-15 03:31:34.836 00:00:10.710 TCP 1.101.0.1:3000 -> 22.102.0.1:41566 10 6452 1 2025-11-15 03:32:10.567 00:00:10.419 TCP 23.104.0.1:46522 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:32:41.557 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 03:32:41.644 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 03:32:35.584 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50272 10 6452 1 2025-11-15 03:33:11.444 00:00:10.367 TCP 23.104.0.1:34538 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:33:35.809 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58854 10 6452 1 2025-11-15 03:29:57.309 00:05:04.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 03:29:57.306 00:05:04.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 03:34:11.853 00:00:10.375 TCP 23.104.0.1:36472 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:34:36.029 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60448 10 6452 1 2025-11-15 03:35:12.269 00:00:10.362 TCP 23.104.0.1:57136 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:35:36.241 00:00:10.709 TCP 1.101.0.1:3000 -> 22.102.0.1:55510 10 6452 1 2025-11-15 03:36:12.669 00:00:10.369 TCP 23.104.0.1:38802 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:36:37.013 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:52156 10 6452 1 2025-11-15 03:37:13.095 00:00:10.360 TCP 23.104.0.1:60796 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:37:41.651 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 03:37:41.998 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 03:37:37.198 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54098 10 6452 1 2025-11-15 03:38:13.496 00:00:10.337 TCP 23.104.0.1:53552 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:38:37.377 00:00:10.892 TCP 1.101.0.1:3000 -> 22.102.0.1:52658 10 6452 1 2025-11-15 03:39:13.892 00:00:10.370 TCP 23.104.0.1:58452 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:39:38.304 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37584 10 6452 1 2025-11-15 03:35:57.308 00:05:04.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 03:35:57.310 00:05:04.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 03:40:14.303 00:00:10.366 TCP 23.104.0.1:46338 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:40:38.522 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36382 10 6452 1 2025-11-15 03:41:14.709 00:00:10.364 TCP 23.104.0.1:35104 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:41:38.741 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48798 10 6452 1 2025-11-15 03:42:15.114 00:00:10.368 TCP 23.104.0.1:53564 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:42:41.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 03:42:41.978 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 03:42:38.953 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:59548 12 6556 1 2025-11-15 03:43:15.518 00:00:10.369 TCP 23.104.0.1:35430 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:43:39.189 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60706 10 6452 1 2025-11-15 03:44:15.927 00:00:10.344 TCP 23.104.0.1:53364 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:44:39.404 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33748 10 6452 1 2025-11-15 03:45:16.310 00:00:10.935 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:45:39.625 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58864 10 6452 1 2025-11-15 03:41:57.308 00:05:04.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 03:41:57.310 00:05:04.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 03:46:17.283 00:00:10.367 TCP 23.104.0.1:37794 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:46:39.848 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60354 10 6452 1 2025-11-15 03:47:17.693 00:00:10.370 TCP 23.104.0.1:36990 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:47:41.912 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 03:47:41.939 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 03:47:40.079 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37524 10 6452 1 2025-11-15 03:48:18.111 00:00:10.369 TCP 23.104.0.1:36684 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:48:40.300 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60356 10 6452 1 2025-11-15 03:49:18.516 00:00:10.326 TCP 23.104.0.1:45964 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:49:40.531 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48542 10 6452 1 2025-11-15 03:50:18.877 00:00:10.365 TCP 23.104.0.1:53996 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:50:40.739 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54146 10 6452 1 2025-11-15 03:51:19.278 00:00:10.367 TCP 23.104.0.1:47400 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:51:40.959 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:45508 10 6452 1 2025-11-15 03:47:57.311 00:05:04.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 03:47:57.308 00:05:04.534 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 03:52:19.682 00:00:10.366 TCP 23.104.0.1:59730 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:52:42.155 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 03:52:42.215 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 03:52:41.147 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:32990 10 6452 1 2025-11-15 03:53:20.105 00:00:10.366 TCP 23.104.0.1:36632 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:53:41.360 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37682 10 6452 1 2025-11-15 03:54:20.509 00:00:10.362 TCP 23.104.0.1:50492 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:54:41.572 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51798 10 6452 1 2025-11-15 03:55:20.911 00:00:10.321 TCP 23.104.0.1:59494 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:55:41.792 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:48682 10 6452 1 2025-11-15 03:56:21.276 00:00:10.365 TCP 23.104.0.1:37160 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:56:42.040 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41448 10 6452 1 2025-11-15 03:57:21.685 00:00:10.368 TCP 23.104.0.1:41060 -> 1.101.0.1:3000 11 1507 1 2025-11-15 03:57:42.033 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 03:57:42.334 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 03:57:42.249 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44882 10 6452 1 2025-11-15 03:53:57.309 00:05:04.534 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 03:53:57.312 00:05:04.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 03:58:22.102 00:00:10.365 TCP 23.104.0.1:46676 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500678, total packets: 1576, avg bps: 1108, avg pps: 0, avg bpp: 317 Time window: 2025-11-15 02:58:47 - 2025-11-15 03:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0043s User: 0.0017s Wall: 0.0024s flows/second: 68176.3 Runtime: 0.0024s