Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 07:58:51.357 00:00:10.367 TCP 23.104.0.1:43846 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:59:01.295 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55476 10 6452 1 2025-11-16 07:59:51.762 00:00:10.368 TCP 23.104.0.1:54804 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:00:01.502 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40404 10 6452 1 2025-11-16 08:00:52.169 00:00:10.321 TCP 23.104.0.1:53354 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:01:01.711 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54722 10 6452 1 2025-11-16 08:01:52.530 00:00:10.359 TCP 23.104.0.1:48352 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:02:01.928 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:53620 10 6452 1 2025-11-16 08:02:52.928 00:00:10.381 TCP 23.104.0.1:51872 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:03:02.175 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35190 10 6452 1 2025-11-16 08:03:15.968 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 08:03:15.923 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 07:59:57.919 00:05:04.708 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 08:03:53.350 00:00:10.362 TCP 23.104.0.1:41058 -> 1.101.0.1:3000 11 1507 1 2025-11-16 07:59:57.921 00:05:04.703 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 08:04:02.390 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50698 10 6452 1 2025-11-16 08:04:53.754 00:00:10.382 TCP 23.104.0.1:53544 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:05:02.613 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38760 10 6452 1 2025-11-16 08:05:54.178 00:00:10.373 TCP 23.104.0.1:42396 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:06:02.841 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34064 10 6452 1 2025-11-16 08:06:54.596 00:00:10.445 TCP 23.104.0.1:47292 -> 1.101.0.1:3000 15 1926 1 2025-11-16 08:07:03.074 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:60416 12 10375 1 2025-11-16 08:07:55.105 00:00:10.365 TCP 23.104.0.1:51848 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:08:03.316 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48318 10 6452 1 2025-11-16 08:08:16.338 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 08:08:16.391 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 08:08:55.509 00:00:10.363 TCP 23.104.0.1:36404 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:09:03.533 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52810 10 6452 1 2025-11-16 08:05:57.919 00:05:04.719 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 08:09:55.912 00:00:10.368 TCP 23.104.0.1:45900 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:05:57.921 00:05:04.715 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 08:10:03.758 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59500 10 6452 1 2025-11-16 08:10:56.316 00:00:10.328 TCP 23.104.0.1:59674 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:11:03.969 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60456 12 6556 1 2025-11-16 08:11:56.681 00:00:10.361 TCP 23.104.0.1:60580 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:12:04.186 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50490 10 6452 1 2025-11-16 08:12:57.106 00:00:10.362 TCP 23.104.0.1:53174 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:13:16.248 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 08:13:04.400 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42724 10 6452 1 2025-11-16 08:13:16.006 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 08:13:57.506 00:00:10.327 TCP 23.104.0.1:49776 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:14:04.626 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47706 10 6452 1 2025-11-16 08:14:57.867 00:00:10.368 TCP 23.104.0.1:42756 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:15:04.844 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56136 10 6452 1 2025-11-16 08:11:57.926 00:05:04.715 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 08:11:57.930 00:05:04.709 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 08:15:58.272 00:00:10.366 TCP 23.104.0.1:39686 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:16:05.032 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37018 10 6452 1 2025-11-16 08:16:58.673 00:00:10.372 TCP 23.104.0.1:42732 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:17:05.248 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34104 10 6452 1 2025-11-16 08:18:05.460 00:00:10.258 TCP 1.101.0.1:3000 -> 22.102.0.1:45610 10 6452 1 2025-11-16 08:18:16.504 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 08:18:16.015 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 08:17:59.104 00:00:14.335 TCP 23.104.0.1:36682 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:19:05.761 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53628 10 6452 1 2025-11-16 08:19:03.489 00:00:10.367 TCP 23.104.0.1:32810 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:20:03.897 00:00:10.368 TCP 23.104.0.1:54496 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:20:05.974 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:53954 10 6452 1 2025-11-16 08:21:06.205 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42684 10 6452 1 2025-11-16 08:21:04.302 00:00:10.370 TCP 23.104.0.1:56264 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:17:57.928 00:05:04.714 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 08:17:57.931 00:05:04.709 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 08:22:04.713 00:00:10.357 TCP 23.104.0.1:45906 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:22:06.422 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60360 10 6452 1 2025-11-16 08:23:05.110 00:00:10.365 TCP 23.104.0.1:37694 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:23:16.303 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 08:23:06.598 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51448 10 6452 1 2025-11-16 08:23:16.425 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 08:24:06.808 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53786 12 6556 1 2025-11-16 08:24:05.516 00:00:10.365 TCP 23.104.0.1:41458 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:25:05.919 00:00:10.336 TCP 23.104.0.1:58500 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:25:07.026 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53174 10 6452 1 2025-11-16 08:26:06.296 00:00:10.365 TCP 23.104.0.1:42516 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:26:07.243 00:00:10.549 TCP 1.101.0.1:3000 -> 22.102.0.1:43088 10 6452 1 2025-11-16 08:27:07.829 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41656 10 6452 1 2025-11-16 08:27:06.698 00:00:10.369 TCP 23.104.0.1:36752 -> 1.101.0.1:3000 12 1559 1 2025-11-16 08:23:57.927 00:05:04.716 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 08:23:57.930 00:05:04.711 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 08:28:16.377 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 08:28:07.107 00:00:10.364 TCP 23.104.0.1:57140 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:28:16.577 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 08:28:08.069 00:00:10.713 TCP 1.101.0.1:3000 -> 22.102.0.1:47450 10 6452 1 2025-11-16 08:29:07.507 00:00:10.364 TCP 23.104.0.1:36910 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:29:08.820 00:00:10.959 TCP 1.101.0.1:3000 -> 22.102.0.1:43392 10 6452 1 2025-11-16 08:30:09.813 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40298 10 6452 1 2025-11-16 08:30:07.907 00:00:10.375 TCP 23.104.0.1:56222 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:31:10.031 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43890 10 6452 1 2025-11-16 08:31:08.321 00:00:10.384 TCP 23.104.0.1:39358 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:32:08.747 00:00:10.327 TCP 23.104.0.1:55268 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:32:10.248 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58432 10 6452 1 2025-11-16 08:33:16.765 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 08:33:09.119 00:00:10.370 TCP 23.104.0.1:56972 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:33:16.509 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 08:33:10.478 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55800 10 6452 1 2025-11-16 08:29:57.934 00:05:04.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 08:29:57.931 00:05:04.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 08:34:09.528 00:00:10.379 TCP 23.104.0.1:58856 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:34:10.699 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59964 10 6452 1 2025-11-16 08:35:09.948 00:00:10.372 TCP 23.104.0.1:52116 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:35:10.944 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50360 10 6452 1 2025-11-16 08:36:11.173 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60856 10 6452 1 2025-11-16 08:36:10.354 00:00:10.367 TCP 23.104.0.1:51392 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:37:11.388 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46672 10 6452 1 2025-11-16 08:37:10.756 00:00:10.338 TCP 23.104.0.1:35404 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:38:16.780 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 08:38:11.565 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41638 10 6452 1 2025-11-16 08:38:17.028 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 08:38:11.128 00:00:10.365 TCP 23.104.0.1:45750 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:39:11.791 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53136 10 6452 1 2025-11-16 08:39:11.537 00:00:10.372 TCP 23.104.0.1:54638 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:35:57.936 00:05:04.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 08:35:57.933 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 08:40:12.003 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58050 10 6452 1 2025-11-16 08:40:11.949 00:00:10.371 TCP 23.104.0.1:34358 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:41:12.359 00:00:10.363 TCP 23.104.0.1:47434 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:41:12.225 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55608 10 6452 1 2025-11-16 08:42:12.431 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51796 10 6452 1 2025-11-16 08:42:12.761 00:00:10.381 TCP 23.104.0.1:39348 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:43:16.847 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 08:43:16.828 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 08:43:13.176 00:00:10.377 TCP 23.104.0.1:39614 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:43:12.641 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42910 10 6452 1 2025-11-16 08:44:12.856 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48832 10 6452 1 2025-11-16 08:44:13.607 00:00:10.372 TCP 23.104.0.1:35968 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:45:13.082 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:50372 10 6452 1 2025-11-16 08:45:14.014 00:00:10.366 TCP 23.104.0.1:42718 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:41:57.935 00:05:04.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 08:41:57.934 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 08:46:14.417 00:00:10.367 TCP 23.104.0.1:59782 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:46:13.287 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48354 10 6452 1 2025-11-16 08:47:14.820 00:00:10.364 TCP 23.104.0.1:35922 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:47:13.499 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56530 10 6452 1 2025-11-16 08:48:16.947 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 08:48:16.685 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 08:48:13.711 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56632 10 6452 1 2025-11-16 08:48:15.224 00:00:10.324 TCP 23.104.0.1:39182 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:49:13.921 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51942 10 6452 1 2025-11-16 08:49:15.583 00:00:10.333 TCP 23.104.0.1:41900 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:50:14.134 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52894 10 6452 1 2025-11-16 08:50:15.957 00:00:10.367 TCP 23.104.0.1:35910 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:51:16.357 00:00:10.325 TCP 23.104.0.1:60618 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:51:14.350 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59916 10 6452 1 2025-11-16 08:47:57.942 00:05:04.730 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 08:47:57.946 00:05:04.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 08:52:14.571 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33964 10 6452 1 2025-11-16 08:52:16.720 00:00:10.455 TCP 23.104.0.1:45044 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:53:17.756 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 08:53:17.821 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 08:53:14.777 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59480 10 6452 1 2025-11-16 08:53:17.208 00:00:10.376 TCP 23.104.0.1:58294 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:54:14.990 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:43974 10 6452 1 2025-11-16 08:54:17.607 00:00:10.324 TCP 23.104.0.1:57864 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:55:15.174 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45292 10 6452 1 2025-11-16 08:55:17.970 00:00:10.366 TCP 23.104.0.1:53994 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:56:15.402 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42274 10 6452 1 2025-11-16 08:56:18.376 00:00:10.365 TCP 23.104.0.1:50156 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:57:15.619 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42360 10 6452 1 2025-11-16 08:57:18.780 00:00:10.379 TCP 23.104.0.1:41332 -> 1.101.0.1:3000 11 1507 1 2025-11-16 08:53:57.942 00:05:04.731 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 08:53:57.945 00:05:04.725 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 08:58:16.997 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 08:58:17.414 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 08:58:15.792 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34486 10 6452 1 2025-11-16 08:58:19.208 00:00:10.370 TCP 23.104.0.1:54746 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502950, total packets: 1583, avg bps: 1114, avg pps: 0, avg bpp: 317 Time window: 2025-11-16 07:58:51 - 2025-11-16 08:59:02 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0010s Wall: 0.0017s flows/second: 94643.1 Runtime: 0.0017s