Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 09:58:47.473 00:00:10.363 TCP 23.104.0.1:44378 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:59:30.984 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:36888 10 6452 1 2025-11-16 09:59:47.878 00:00:10.328 TCP 23.104.0.1:38766 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:00:31.245 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52912 10 6452 1 2025-11-16 10:00:48.245 00:00:10.361 TCP 23.104.0.1:41802 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:01:31.457 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36968 10 6452 1 2025-11-16 10:01:48.646 00:00:10.367 TCP 23.104.0.1:42770 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:02:31.675 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53192 10 6452 1 2025-11-16 10:02:49.061 00:00:10.367 TCP 23.104.0.1:56962 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:03:18.540 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 10:03:18.477 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:03:31.856 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51902 10 6452 1 2025-11-16 09:59:57.970 00:05:04.723 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 10:03:49.460 00:00:10.364 TCP 23.104.0.1:47730 -> 1.101.0.1:3000 11 1507 1 2025-11-16 09:59:57.972 00:05:04.718 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 10:04:32.086 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50944 10 6452 1 2025-11-16 10:04:49.862 00:00:10.370 TCP 23.104.0.1:41072 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:05:32.296 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37936 10 6452 1 2025-11-16 10:05:50.268 00:00:10.366 TCP 23.104.0.1:53564 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:06:32.515 00:00:24.424 TCP 1.101.0.1:3000 -> 22.102.0.1:57746 10 6452 1 2025-11-16 10:06:50.676 00:00:10.367 TCP 23.104.0.1:49698 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:07:46.990 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53840 10 6452 1 2025-11-16 10:07:51.109 00:00:10.371 TCP 23.104.0.1:38742 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:08:18.602 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 10:08:18.670 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:08:47.215 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40316 10 6452 1 2025-11-16 10:08:51.516 00:00:10.331 TCP 23.104.0.1:57376 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:09:47.427 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45244 10 6452 1 2025-11-16 10:05:57.971 00:05:04.723 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 10:05:57.973 00:05:04.717 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 10:09:51.885 00:00:10.390 TCP 23.104.0.1:38172 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:10:47.643 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58856 10 6452 1 2025-11-16 10:10:52.311 00:00:10.328 TCP 23.104.0.1:42514 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:11:47.859 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57326 10 6452 1 2025-11-16 10:11:52.682 00:00:10.381 TCP 23.104.0.1:41914 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:12:48.083 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42202 10 6452 1 2025-11-16 10:12:53.109 00:00:10.370 TCP 23.104.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:13:18.698 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 10:13:18.866 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:13:48.302 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56902 10 6452 1 2025-11-16 10:13:53.514 00:00:10.365 TCP 23.104.0.1:39726 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:14:48.516 00:00:10.281 TCP 1.101.0.1:3000 -> 22.102.0.1:52856 10 6452 1 2025-11-16 10:14:53.915 00:00:10.362 TCP 23.104.0.1:49938 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:15:48.835 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46796 10 6452 1 2025-11-16 10:11:57.979 00:05:04.716 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 10:15:54.318 00:00:10.363 TCP 23.104.0.1:34700 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:11:57.982 00:05:04.711 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 10:16:49.069 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47924 10 6452 1 2025-11-16 10:16:54.722 00:00:10.372 TCP 23.104.0.1:51612 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:17:49.281 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6452 1 2025-11-16 10:17:55.128 00:00:10.366 TCP 23.104.0.1:49350 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:18:18.559 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 10:18:18.784 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:18:49.493 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49440 10 6452 1 2025-11-16 10:18:55.530 00:00:10.368 TCP 23.104.0.1:58390 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:19:49.706 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57832 10 6452 1 2025-11-16 10:19:55.935 00:00:10.378 TCP 23.104.0.1:51088 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:20:49.918 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54582 10 6452 1 2025-11-16 10:20:56.351 00:00:10.327 TCP 23.104.0.1:49286 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:21:50.135 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40774 10 6452 1 2025-11-16 10:17:57.981 00:05:04.716 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 10:17:57.983 00:05:04.711 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 10:21:56.717 00:00:10.332 TCP 23.104.0.1:37790 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:22:50.347 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:32864 10 6452 1 2025-11-16 10:22:57.100 00:00:10.369 TCP 23.104.0.1:35418 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:23:18.964 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 10:23:18.621 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:23:50.551 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33366 10 6452 1 2025-11-16 10:23:57.511 00:00:10.365 TCP 23.104.0.1:56732 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:24:50.766 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39560 10 6452 1 2025-11-16 10:24:57.914 00:00:10.371 TCP 23.104.0.1:58698 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:25:50.932 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:34490 10 6452 1 2025-11-16 10:25:58.325 00:00:10.366 TCP 23.104.0.1:53654 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:26:51.174 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57776 10 6452 1 2025-11-16 10:26:58.735 00:00:10.372 TCP 23.104.0.1:45426 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:27:51.381 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40570 10 6452 1 2025-11-16 10:23:57.987 00:05:04.708 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 10:23:57.984 00:05:04.713 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 10:27:59.144 00:00:10.374 TCP 23.104.0.1:47958 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:28:19.227 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 10:28:19.264 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:28:51.590 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55294 10 6452 1 2025-11-16 10:28:59.560 00:00:10.367 TCP 23.104.0.1:40574 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:29:51.807 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45506 10 6452 1 2025-11-16 10:29:59.969 00:00:10.405 TCP 23.104.0.1:49880 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:30:52.026 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53800 10 6452 1 2025-11-16 10:31:00.423 00:00:10.375 TCP 23.104.0.1:37286 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:31:52.194 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42894 10 6452 1 2025-11-16 10:32:00.842 00:00:10.391 TCP 23.104.0.1:54800 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:32:52.417 00:00:10.323 TCP 1.101.0.1:3000 -> 22.102.0.1:58276 10 6452 1 2025-11-16 10:33:01.272 00:00:10.929 TCP 23.104.0.1:42240 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:33:19.631 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:33:19.494 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 10:33:52.777 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58578 10 6452 1 2025-11-16 10:29:57.985 00:05:04.725 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 10:29:57.988 00:05:04.720 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 10:34:02.236 00:00:10.362 TCP 23.104.0.1:41398 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:34:52.992 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53596 10 6452 1 2025-11-16 10:35:02.641 00:00:10.368 TCP 23.104.0.1:48808 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:35:53.227 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50366 10 6452 1 2025-11-16 10:36:03.053 00:00:10.322 TCP 23.104.0.1:45820 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:36:53.462 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51058 10 6452 1 2025-11-16 10:37:03.421 00:00:10.325 TCP 23.104.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:37:53.671 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60258 10 6452 1 2025-11-16 10:38:03.784 00:00:10.365 TCP 23.104.0.1:50728 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:38:19.132 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 10:38:19.065 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:38:53.885 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57226 10 6452 1 2025-11-16 10:39:04.189 00:00:10.324 TCP 23.104.0.1:46468 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:39:54.110 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59046 10 6452 1 2025-11-16 10:35:57.988 00:05:04.726 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 10:35:57.991 00:05:04.721 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 10:40:04.551 00:00:10.322 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:40:54.284 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55460 10 6452 1 2025-11-16 10:41:04.914 00:00:10.362 TCP 23.104.0.1:36926 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:41:54.490 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34468 10 6452 1 2025-11-16 10:42:05.313 00:00:10.367 TCP 23.104.0.1:56768 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:42:54.701 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59202 10 6452 1 2025-11-16 10:43:05.720 00:00:10.369 TCP 23.104.0.1:37518 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:43:19.243 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 10:43:19.212 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:43:54.920 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49420 10 6452 1 2025-11-16 10:44:06.127 00:00:10.368 TCP 23.104.0.1:58566 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:44:55.136 00:00:10.447 TCP 1.101.0.1:3000 -> 22.102.0.1:43178 10 6452 1 2025-11-16 10:45:06.537 00:00:10.370 TCP 23.104.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:41:57.994 00:05:04.722 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 10:41:57.992 00:05:04.727 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 10:45:55.619 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43646 10 6452 1 2025-11-16 10:46:06.942 00:00:10.380 TCP 23.104.0.1:49652 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:46:55.837 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49056 10 6452 1 2025-11-16 10:47:07.372 00:00:10.362 TCP 23.104.0.1:44938 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:47:56.076 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41498 10 6452 1 2025-11-16 10:48:19.415 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 10:48:19.315 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:48:07.771 00:00:10.372 TCP 23.104.0.1:42634 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:48:56.294 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50500 10 6452 1 2025-11-16 10:49:08.179 00:00:10.362 TCP 23.104.0.1:41682 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:49:56.506 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58944 10 6452 1 2025-11-16 10:50:08.582 00:00:10.365 TCP 23.104.0.1:44468 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:50:56.720 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39480 10 6452 1 2025-11-16 10:51:08.984 00:00:10.338 TCP 23.104.0.1:46178 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:47:57.997 00:05:00.006 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 686 1 2025-11-16 10:47:58.000 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 10:51:56.934 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33110 10 6452 1 2025-11-16 10:52:09.350 00:00:10.361 TCP 23.104.0.1:50938 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:52:57.171 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36176 10 6452 1 2025-11-16 10:53:19.302 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 10:53:19.353 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:53:09.749 00:00:10.377 TCP 23.104.0.1:40578 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:53:57.388 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42726 10 6452 1 2025-11-16 10:54:10.165 00:00:10.365 TCP 23.104.0.1:53846 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:54:57.600 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42550 10 6452 1 2025-11-16 10:55:10.572 00:00:10.364 TCP 23.104.0.1:38480 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:55:57.811 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55402 10 6452 1 2025-11-16 10:56:10.977 00:00:10.334 TCP 23.104.0.1:53116 -> 1.101.0.1:3000 11 1507 1 2025-11-16 10:56:58.027 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:41086 12 10375 1 2025-11-16 10:57:11.352 00:00:10.402 TCP 23.104.0.1:36502 -> 1.101.0.1:3000 15 1926 1 2025-11-16 10:53:02.733 00:05:55.300 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 10:53:58.023 00:05:04.708 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 10:57:58.224 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35860 10 6452 1 2025-11-16 10:58:19.516 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 10:58:19.605 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 10:58:11.792 00:00:10.410 TCP 23.104.0.1:44924 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496186, total packets: 1567, avg bps: 1097, avg pps: 0, avg bpp: 316 Time window: 2025-11-16 09:58:47 - 2025-11-16 10:59:02 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0021s Wall: 0.0029s flows/second: 57110.6 Runtime: 0.0029s