Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 00:59:20.474 00:00:10.363 TCP 23.104.0.1:39938 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:59:39.485 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34096 10 6452 1 2025-11-12 01:00:20.875 00:00:10.365 TCP 23.104.0.1:57626 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:00:39.699 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50140 10 6452 1 2025-11-12 01:01:12.046 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 01:01:12.149 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 01:01:21.278 00:00:10.363 TCP 23.104.0.1:56482 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:01:39.911 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57560 10 6452 1 2025-11-12 01:02:21.682 00:00:10.326 TCP 23.104.0.1:52240 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:02:40.127 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53442 10 6452 1 2025-11-12 01:03:22.060 00:00:10.369 TCP 23.104.0.1:36480 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:03:40.349 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47804 10 6452 1 2025-11-12 00:58:59.653 00:05:56.232 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 00:59:55.889 00:05:03.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 01:04:22.466 00:00:10.472 TCP 23.104.0.1:58116 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:04:40.524 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54946 10 6452 1 2025-11-12 01:05:22.976 00:00:10.369 TCP 23.104.0.1:46150 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:05:40.740 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60196 10 6452 1 2025-11-12 01:06:12.274 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 01:06:12.388 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 01:06:23.382 00:00:10.366 TCP 23.104.0.1:35744 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:06:40.949 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39028 10 6452 1 2025-11-12 01:07:23.782 00:00:10.323 TCP 23.104.0.1:34276 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:07:41.175 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40702 10 6452 1 2025-11-12 01:08:24.138 00:00:10.551 TCP 23.104.0.1:33050 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:08:41.400 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33030 10 6452 1 2025-11-12 01:09:24.728 00:00:10.368 TCP 23.104.0.1:52562 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:09:41.612 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44798 10 6452 1 2025-11-12 01:04:59.653 00:05:56.232 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 01:05:55.887 00:05:03.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 01:10:25.139 00:00:10.328 TCP 23.104.0.1:45746 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:10:41.827 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37940 10 6452 1 2025-11-12 01:11:12.406 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 01:11:12.468 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 01:11:25.503 00:00:10.373 TCP 23.104.0.1:43872 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:11:42.005 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49288 10 6452 1 2025-11-12 01:12:25.906 00:00:10.325 TCP 23.104.0.1:51148 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:12:42.217 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56520 10 6452 1 2025-11-12 01:13:26.271 00:00:10.321 TCP 23.104.0.1:38862 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:13:42.430 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 10 6452 1 2025-11-12 01:14:26.629 00:00:18.612 TCP 23.104.0.1:42170 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:14:42.644 00:00:11.306 TCP 1.101.0.1:3000 -> 22.102.0.1:41948 10 6452 1 2025-11-12 01:15:35.284 00:00:10.362 TCP 23.104.0.1:37792 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:10:59.653 00:05:56.232 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 01:15:43.986 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58258 10 6452 1 2025-11-12 01:11:55.888 00:05:03.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 01:16:12.368 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 01:16:12.165 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 01:16:35.683 00:00:10.367 TCP 23.104.0.1:33596 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:16:44.204 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33290 10 6452 1 2025-11-12 01:17:36.100 00:00:10.839 TCP 23.104.0.1:38962 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:17:44.417 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46478 10 6452 1 2025-11-12 01:18:36.974 00:00:10.441 TCP 23.104.0.1:41038 -> 1.101.0.1:3000 15 1926 1 2025-11-12 01:18:44.592 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51738 12 10375 1 2025-11-12 01:19:37.451 00:00:10.363 TCP 23.104.0.1:56324 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:19:44.836 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:57606 10 6452 1 2025-11-12 01:20:37.851 00:00:10.845 TCP 23.104.0.1:32840 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:20:45.010 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34562 10 6452 1 2025-11-12 01:21:12.441 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 01:21:12.608 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 01:21:38.737 00:00:10.370 TCP 23.104.0.1:39334 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:21:45.233 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50372 10 6452 1 2025-11-12 01:16:59.654 00:05:56.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 01:17:55.889 00:05:03.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 01:22:39.150 00:00:10.320 TCP 23.104.0.1:41686 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:22:45.415 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48084 10 6452 1 2025-11-12 01:23:39.517 00:00:10.367 TCP 23.104.0.1:53684 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:23:45.629 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32900 10 6452 1 2025-11-12 01:24:39.925 00:00:10.394 TCP 23.104.0.1:47986 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:24:45.843 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-11-12 01:25:40.359 00:00:10.364 TCP 23.104.0.1:60876 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:25:46.038 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36052 10 6452 1 2025-11-12 01:26:12.258 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 01:26:12.635 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 01:26:40.763 00:00:10.377 TCP 23.104.0.1:38894 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:26:46.251 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50392 10 6452 1 2025-11-12 01:27:41.178 00:00:10.335 TCP 23.104.0.1:51592 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:27:46.462 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46256 10 6452 1 2025-11-12 01:22:59.655 00:05:56.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 01:23:55.889 00:05:03.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 01:28:41.555 00:00:10.321 TCP 23.104.0.1:52936 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:28:46.684 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56016 10 6452 1 2025-11-12 01:29:41.916 00:00:10.382 TCP 23.104.0.1:37610 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:29:46.892 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33260 10 6452 1 2025-11-12 01:30:42.335 00:00:10.367 TCP 23.104.0.1:54782 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:30:47.108 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50014 10 6452 1 2025-11-12 01:31:12.499 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 01:31:12.755 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 01:31:42.736 00:00:10.372 TCP 23.104.0.1:40162 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:31:47.282 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58166 10 6452 1 2025-11-12 01:32:43.143 00:00:10.366 TCP 23.104.0.1:49972 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:32:47.457 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44512 10 6452 1 2025-11-12 01:28:59.665 00:05:56.228 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 01:33:43.542 00:00:10.404 TCP 23.104.0.1:33274 -> 1.101.0.1:3000 15 1926 1 2025-11-12 01:29:55.891 00:05:03.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 01:33:47.666 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35624 12 10375 1 2025-11-12 01:34:43.991 00:00:10.374 TCP 23.104.0.1:47418 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:34:47.908 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45780 10 6452 1 2025-11-12 01:35:44.396 00:00:10.363 TCP 23.104.0.1:60844 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:35:48.119 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42754 10 6452 1 2025-11-12 01:36:12.886 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 01:36:12.886 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 01:36:44.803 00:00:10.375 TCP 23.104.0.1:56248 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:36:48.330 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35572 10 6452 1 2025-11-12 01:37:45.211 00:00:10.327 TCP 23.104.0.1:48008 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:37:48.504 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54298 10 6452 1 2025-11-12 01:38:45.574 00:00:10.367 TCP 23.104.0.1:34108 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:38:48.717 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60158 10 6452 1 2025-11-12 01:39:45.978 00:00:10.368 TCP 23.104.0.1:39758 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:34:59.667 00:05:56.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 01:35:55.895 00:05:03.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 01:39:48.925 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42422 10 6452 1 2025-11-12 01:40:46.382 00:00:10.385 TCP 23.104.0.1:42468 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:40:49.148 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:48600 10 6452 1 2025-11-12 01:41:13.052 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 01:41:12.926 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 01:41:46.805 00:00:10.335 TCP 23.104.0.1:35842 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:41:49.317 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58068 10 6452 1 2025-11-12 01:42:47.178 00:00:10.368 TCP 23.104.0.1:52862 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:42:49.502 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37990 10 6452 1 2025-11-12 01:43:49.723 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56026 10 6452 1 2025-11-12 01:43:47.584 00:00:10.372 TCP 23.104.0.1:58632 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:44:49.931 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38698 10 6452 1 2025-11-12 01:44:47.992 00:00:10.364 TCP 23.104.0.1:37522 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:40:59.668 00:05:56.229 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 01:41:55.898 00:05:03.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 01:45:48.397 00:00:10.365 TCP 23.104.0.1:56374 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:45:50.158 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41572 10 6452 1 2025-11-12 01:46:12.952 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 01:46:13.246 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 01:46:50.376 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35384 10 6452 1 2025-11-12 01:46:48.800 00:00:10.363 TCP 23.104.0.1:56862 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:47:49.212 00:00:10.369 TCP 23.104.0.1:48136 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:47:50.549 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37082 10 6452 1 2025-11-12 01:48:50.765 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44414 10 6452 1 2025-11-12 01:48:49.620 00:00:10.376 TCP 23.104.0.1:57668 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:49:50.987 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47608 12 6556 1 2025-11-12 01:49:50.047 00:00:10.365 TCP 23.104.0.1:45562 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:50:51.214 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44242 10 6452 1 2025-11-12 01:50:50.452 00:00:10.358 TCP 23.104.0.1:42674 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:51:13.029 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 01:51:13.194 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 01:46:59.668 00:05:56.228 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 01:51:51.422 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37774 10 6452 1 2025-11-12 01:47:55.899 00:05:03.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 01:51:50.848 00:00:10.382 TCP 23.104.0.1:38728 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:52:51.280 00:00:10.351 TCP 23.104.0.1:52438 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:52:51.588 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45178 10 6452 1 2025-11-12 01:53:51.807 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33474 10 6452 1 2025-11-12 01:53:51.668 00:00:10.366 TCP 23.104.0.1:47326 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:54:52.033 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51568 10 6452 1 2025-11-12 01:54:52.093 00:00:10.363 TCP 23.104.0.1:37872 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:55:52.493 00:00:10.363 TCP 23.104.0.1:33668 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:55:52.246 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60650 10 6452 1 2025-11-12 01:56:13.290 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 01:56:12.934 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 01:56:52.895 00:00:10.367 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-11-12 01:56:52.459 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53460 10 6452 1 2025-11-12 01:52:59.671 00:05:56.229 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 01:53:55.900 00:05:03.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 01:57:52.674 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39240 10 6452 1 2025-11-12 01:57:53.299 00:00:10.360 TCP 23.104.0.1:59196 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499177, total packets: 1565, avg bps: 1109, avg pps: 0, avg bpp: 318 Time window: 2025-11-12 00:58:59 - 2025-11-12 01:58:59 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0050s User: 0.0008s Wall: 0.0026s flows/second: 61524.6 Runtime: 0.0027s