Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 05:58:53.657 00:00:10.321 TCP 23.104.0.1:33748 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:59:33.349 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47642 10 6452 1 2025-11-16 05:59:54.022 00:00:10.365 TCP 23.104.0.1:49236 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:00:33.572 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60718 10 6452 1 2025-11-16 06:00:54.428 00:00:10.364 TCP 23.104.0.1:57706 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:01:33.785 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44868 10 6452 1 2025-11-16 06:01:54.841 00:00:10.341 TCP 23.104.0.1:33652 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:02:34.007 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48748 10 6452 1 2025-11-16 06:02:55.223 00:00:10.362 TCP 23.104.0.1:48442 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:03:14.005 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 06:03:13.772 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:03:34.221 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57098 10 6452 1 2025-11-16 05:59:57.860 00:05:04.713 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 06:03:55.625 00:00:10.369 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:59:57.858 00:05:04.718 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 06:04:34.433 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39234 10 6452 1 2025-11-16 06:04:56.030 00:00:10.365 TCP 23.104.0.1:59066 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:05:34.644 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:41956 10 6452 1 2025-11-16 06:05:56.431 00:00:10.328 TCP 23.104.0.1:37726 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:06:34.814 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38938 10 6452 1 2025-11-16 06:06:56.793 00:00:10.381 TCP 23.104.0.1:35364 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:07:35.036 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42506 10 6452 1 2025-11-16 06:07:57.205 00:00:10.370 TCP 23.104.0.1:51104 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:08:13.612 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:08:13.759 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 06:08:35.251 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45796 10 6452 1 2025-11-16 06:08:57.616 00:00:10.360 TCP 23.104.0.1:51046 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:09:35.468 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52940 10 6452 1 2025-11-16 06:05:57.857 00:05:04.718 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 06:05:57.861 00:05:04.713 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 06:09:58.017 00:00:10.368 TCP 23.104.0.1:60786 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:10:35.673 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50252 10 6452 1 2025-11-16 06:10:58.421 00:00:10.405 TCP 23.104.0.1:52388 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:11:35.887 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39746 10 6452 1 2025-11-16 06:11:58.870 00:00:10.368 TCP 23.104.0.1:51606 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:12:36.113 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58728 10 6452 1 2025-11-16 06:12:59.281 00:00:10.363 TCP 23.104.0.1:35852 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:13:13.912 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:13:13.662 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 06:13:36.329 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53448 10 6452 1 2025-11-16 06:13:59.681 00:00:10.365 TCP 23.104.0.1:48286 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:14:36.538 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46334 10 6452 1 2025-11-16 06:15:00.109 00:00:10.376 TCP 23.104.0.1:45688 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:15:36.748 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55214 10 6452 1 2025-11-16 06:11:57.862 00:05:04.723 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 06:11:57.861 00:05:04.727 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 06:16:00.518 00:00:10.365 TCP 23.104.0.1:49544 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:16:36.964 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45878 10 6452 1 2025-11-16 06:17:00.924 00:00:10.394 TCP 23.104.0.1:38812 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:17:37.181 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:60392 10 6452 1 2025-11-16 06:18:01.355 00:00:10.373 TCP 23.104.0.1:40574 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:18:13.884 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 06:18:13.812 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:18:37.378 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60040 10 6452 1 2025-11-16 06:19:01.768 00:00:10.331 TCP 23.104.0.1:41112 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:19:37.590 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43706 10 6452 1 2025-11-16 06:20:02.159 00:00:10.375 TCP 23.104.0.1:42048 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:20:37.808 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38648 10 6452 1 2025-11-16 06:21:02.572 00:00:10.374 TCP 23.104.0.1:48350 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:21:37.994 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:42598 12 10369 1 2025-11-16 06:17:57.862 00:05:04.727 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 06:17:57.864 00:05:04.722 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 06:22:02.986 00:00:10.446 TCP 23.104.0.1:46312 -> 1.101.0.1:3000 15 1926 1 2025-11-16 06:22:38.246 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42980 10 6452 1 2025-11-16 06:23:14.013 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 06:23:03.469 00:00:10.364 TCP 23.104.0.1:58184 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:23:14.289 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:23:38.468 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49872 10 6452 1 2025-11-16 06:24:03.876 00:00:10.365 TCP 23.104.0.1:52630 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:24:38.677 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59796 10 6452 1 2025-11-16 06:25:04.278 00:00:10.326 TCP 23.104.0.1:51042 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:25:38.895 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34596 10 6452 1 2025-11-16 06:26:04.641 00:00:10.365 TCP 23.104.0.1:35796 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:26:39.111 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53646 10 6452 1 2025-11-16 06:27:05.046 00:00:10.365 TCP 23.104.0.1:32922 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:27:39.318 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53464 10 6452 1 2025-11-16 06:23:57.861 00:05:04.729 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 06:23:57.865 00:05:04.723 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 06:28:14.420 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:28:05.451 00:00:10.362 TCP 23.104.0.1:33804 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:28:14.205 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 06:28:39.495 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56496 10 6452 1 2025-11-16 06:29:05.851 00:00:10.382 TCP 23.104.0.1:47748 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:29:39.709 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40600 10 6452 1 2025-11-16 06:30:06.272 00:00:10.360 TCP 23.104.0.1:38426 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:30:39.923 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:44430 10 6452 1 2025-11-16 06:31:06.672 00:00:10.365 TCP 23.104.0.1:39036 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:31:40.124 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59528 10 6452 1 2025-11-16 06:32:07.103 00:00:11.824 TCP 23.104.0.1:48726 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:32:40.338 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47414 10 6452 1 2025-11-16 06:33:14.218 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 06:33:14.188 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:33:08.967 00:00:10.367 TCP 23.104.0.1:50566 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:33:40.554 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48116 10 6452 1 2025-11-16 06:29:57.864 00:05:04.728 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 06:29:57.866 00:05:04.723 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 06:34:09.373 00:00:10.365 TCP 23.104.0.1:55850 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:34:40.776 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38926 10 6452 1 2025-11-16 06:35:09.778 00:00:10.326 TCP 23.104.0.1:56026 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:35:40.985 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57262 10 6452 1 2025-11-16 06:36:10.143 00:00:10.360 TCP 23.104.0.1:46392 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:36:41.221 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36210 10 6452 1 2025-11-16 06:37:10.540 00:00:10.362 TCP 23.104.0.1:36326 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:37:41.397 00:00:10.792 TCP 1.101.0.1:3000 -> 22.102.0.1:37112 10 6452 1 2025-11-16 06:38:14.338 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 06:38:14.167 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:38:10.942 00:00:10.369 TCP 23.104.0.1:52846 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:38:42.230 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34702 10 6452 1 2025-11-16 06:39:11.352 00:00:10.364 TCP 23.104.0.1:40732 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:39:42.402 00:00:10.404 TCP 1.101.0.1:3000 -> 22.102.0.1:33640 10 6452 1 2025-11-16 06:35:57.867 00:05:04.723 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 06:35:57.865 00:05:04.728 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 06:40:11.755 00:00:10.378 TCP 23.104.0.1:53780 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:40:42.843 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35114 10 6452 1 2025-11-16 06:41:12.172 00:00:10.365 TCP 23.104.0.1:52306 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:41:43.085 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:43840 10 6452 1 2025-11-16 06:42:12.579 00:00:10.365 TCP 23.104.0.1:33920 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:42:43.254 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43384 10 6452 1 2025-11-16 06:43:14.534 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:43:14.383 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 06:43:12.985 00:00:10.370 TCP 23.104.0.1:40438 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:43:43.460 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52272 10 6452 1 2025-11-16 06:44:13.397 00:00:10.324 TCP 23.104.0.1:58722 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:44:43.640 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38390 10 6452 1 2025-11-16 06:45:13.755 00:00:10.379 TCP 23.104.0.1:51784 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:45:43.860 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34078 10 6452 1 2025-11-16 06:41:57.871 00:05:04.723 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 06:41:57.868 00:05:04.728 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 06:46:14.182 00:00:10.405 TCP 23.104.0.1:35388 -> 1.101.0.1:3000 15 1926 1 2025-11-16 06:46:44.093 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:45812 12 10369 1 2025-11-16 06:47:14.625 00:00:10.364 TCP 23.104.0.1:55720 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:47:44.286 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55404 10 6452 1 2025-11-16 06:48:14.839 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:48:14.847 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 06:48:15.027 00:00:10.317 TCP 23.104.0.1:38528 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:48:44.503 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46038 10 6452 1 2025-11-16 06:49:15.389 00:00:10.330 TCP 23.104.0.1:40708 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:49:44.735 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49262 10 6452 1 2025-11-16 06:50:15.766 00:00:10.378 TCP 23.104.0.1:45622 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:50:44.912 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52484 10 6452 1 2025-11-16 06:51:16.189 00:00:10.325 TCP 23.104.0.1:46652 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:51:45.131 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34002 10 6452 1 2025-11-16 06:47:57.875 00:05:04.720 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 06:47:57.872 00:05:04.726 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 06:52:16.553 00:00:10.325 TCP 23.104.0.1:51792 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:52:45.340 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48280 10 6452 1 2025-11-16 06:53:14.658 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:53:14.623 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 06:53:16.919 00:00:10.378 TCP 23.104.0.1:38632 -> 1.101.0.1:3000 12 1559 1 2025-11-16 06:53:45.550 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44674 10 6452 1 2025-11-16 06:54:17.337 00:00:10.366 TCP 23.104.0.1:41250 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:54:45.766 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33744 10 6452 1 2025-11-16 06:55:17.745 00:00:10.362 TCP 23.104.0.1:60534 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:55:45.938 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49862 10 6452 1 2025-11-16 06:56:18.146 00:00:10.364 TCP 23.104.0.1:46784 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:56:46.169 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48714 10 6452 1 2025-11-16 06:57:18.546 00:00:10.363 TCP 23.104.0.1:57312 -> 1.101.0.1:3000 11 1507 1 2025-11-16 06:57:46.387 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44688 10 6452 1 2025-11-16 06:53:57.874 00:05:04.727 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 06:53:57.876 00:05:04.722 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 06:58:14.557 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 06:58:14.487 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 06:58:18.950 00:00:10.367 TCP 23.104.0.1:47024 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500620, total packets: 1575, avg bps: 1109, avg pps: 0, avg bpp: 317 Time window: 2025-11-16 05:58:53 - 2025-11-16 06:59:02 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0021s Wall: 0.0021s flows/second: 76782.5 Runtime: 0.0021s