Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 03:59:01.280 00:00:10.441 TCP 23.104.0.1:43676 -> 1.101.0.1:3000 15 1926 1 2025-11-12 03:59:27.366 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45728 10 6452 1 2025-11-12 04:00:01.762 00:00:10.321 TCP 23.104.0.1:47170 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:00:27.541 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54148 10 6452 1 2025-11-12 04:01:02.121 00:00:10.369 TCP 23.104.0.1:38704 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:01:15.949 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 04:01:15.972 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 04:01:27.761 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45456 10 6452 1 2025-11-12 04:02:02.524 00:00:10.365 TCP 23.104.0.1:55246 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:02:27.971 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48792 10 6452 1 2025-11-12 04:03:02.925 00:00:10.392 TCP 23.104.0.1:46078 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:03:28.200 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39486 10 6452 1 2025-11-12 03:58:59.721 00:05:56.216 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 03:59:55.939 00:05:03.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 04:04:03.360 00:00:10.363 TCP 23.104.0.1:43416 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:04:28.377 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57508 10 6452 1 2025-11-12 04:05:03.764 00:00:10.331 TCP 23.104.0.1:49296 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:05:28.588 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44476 10 6452 1 2025-11-12 04:06:16.111 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 04:06:04.131 00:00:10.321 TCP 23.104.0.1:47124 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:06:15.975 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 04:06:28.758 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38512 10 6452 1 2025-11-12 04:07:04.496 00:00:10.663 TCP 23.104.0.1:57898 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:07:28.973 00:00:10.320 TCP 1.101.0.1:3000 -> 22.102.0.1:58902 10 6452 1 2025-11-12 04:08:05.199 00:00:10.369 TCP 23.104.0.1:32920 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:08:29.345 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37428 10 6452 1 2025-11-12 04:09:05.605 00:00:10.367 TCP 23.104.0.1:38024 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:09:29.570 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56608 10 6452 1 2025-11-12 04:04:59.723 00:05:56.221 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 04:05:55.941 00:05:03.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 04:10:06.012 00:00:10.335 TCP 23.104.0.1:51348 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:10:29.793 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37492 10 6452 1 2025-11-12 04:11:15.692 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 04:11:06.392 00:00:10.361 TCP 23.104.0.1:50900 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:11:15.747 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 04:11:30.006 00:00:10.376 TCP 1.101.0.1:3000 -> 22.102.0.1:56496 10 6452 1 2025-11-12 04:12:06.793 00:00:10.369 TCP 23.104.0.1:59238 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:12:30.422 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38334 10 6452 1 2025-11-12 04:13:07.202 00:00:10.367 TCP 23.104.0.1:57312 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:13:30.636 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55726 10 6452 1 2025-11-12 04:14:07.606 00:00:10.365 TCP 23.104.0.1:53256 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:14:30.815 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42264 10 6452 1 2025-11-12 04:15:08.006 00:00:10.362 TCP 23.104.0.1:56556 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:15:31.048 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55820 10 6452 1 2025-11-12 04:10:59.724 00:05:56.221 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 04:11:55.946 00:05:03.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 04:16:16.056 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 04:16:16.337 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 04:16:08.402 00:00:10.367 TCP 23.104.0.1:52422 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:16:31.264 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60952 10 6452 1 2025-11-12 04:17:08.806 00:00:10.379 TCP 23.104.0.1:45348 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:17:31.476 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45326 10 6452 1 2025-11-12 04:18:09.224 00:00:10.328 TCP 23.104.0.1:60446 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:18:31.688 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42748 10 6452 1 2025-11-12 04:19:09.593 00:00:10.332 TCP 23.104.0.1:44850 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:19:31.906 00:00:11.599 TCP 1.101.0.1:3000 -> 22.102.0.1:56702 10 6452 1 2025-11-12 04:20:09.957 00:00:10.366 TCP 23.104.0.1:43904 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:20:33.547 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51600 10 6452 1 2025-11-12 04:21:16.182 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 04:21:15.993 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 04:21:10.362 00:00:10.365 TCP 23.104.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:21:33.768 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59058 10 6452 1 2025-11-12 04:16:59.726 00:05:56.219 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 04:17:55.946 00:05:03.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 04:22:10.765 00:00:10.372 TCP 23.104.0.1:59838 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:22:33.984 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55546 10 6452 1 2025-11-12 04:23:11.177 00:00:10.495 TCP 23.104.0.1:45460 -> 1.101.0.1:3000 15 1926 1 2025-11-12 04:23:34.220 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:52298 12 10369 1 2025-11-12 04:24:11.713 00:00:10.341 TCP 23.104.0.1:39832 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:24:34.468 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56154 10 6452 1 2025-11-12 04:25:12.092 00:00:10.368 TCP 23.104.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:25:34.678 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:32782 10 6452 1 2025-11-12 04:26:16.089 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 04:26:16.204 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 04:26:12.494 00:00:10.363 TCP 23.104.0.1:47720 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:26:34.848 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40864 10 6452 1 2025-11-12 04:27:12.896 00:00:10.324 TCP 23.104.0.1:44092 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:27:35.031 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44746 10 6452 1 2025-11-12 04:22:59.730 00:05:56.214 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 04:23:55.948 00:05:03.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 04:28:13.257 00:00:10.439 TCP 23.104.0.1:60644 -> 1.101.0.1:3000 15 1926 1 2025-11-12 04:28:35.261 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39316 12 10375 1 2025-11-12 04:29:13.733 00:00:10.367 TCP 23.104.0.1:38724 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:29:35.504 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40970 10 6452 1 2025-11-12 04:30:14.138 00:00:10.363 TCP 23.104.0.1:37686 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:30:35.720 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42628 10 6452 1 2025-11-12 04:31:16.332 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 04:31:16.175 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 04:31:14.538 00:00:17.275 TCP 23.104.0.1:57888 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:31:35.917 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46330 10 6452 1 2025-11-12 04:32:21.890 00:00:10.366 TCP 23.104.0.1:45658 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:32:36.127 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58338 10 6452 1 2025-11-12 04:33:22.297 00:00:10.595 TCP 23.104.0.1:43678 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:33:36.338 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38530 10 6452 1 2025-11-12 04:28:59.728 00:05:56.218 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 04:29:55.948 00:05:03.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 04:34:22.933 00:00:10.384 TCP 23.104.0.1:37506 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:34:36.552 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:54156 10 6452 1 2025-11-12 04:35:23.356 00:00:10.371 TCP 23.104.0.1:55894 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:35:36.816 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33052 10 6452 1 2025-11-12 04:36:16.619 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 04:36:16.160 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 04:36:23.768 00:00:10.372 TCP 23.104.0.1:36916 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:36:36.990 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:35092 10 6452 1 2025-11-12 04:37:24.180 00:00:10.362 TCP 23.104.0.1:60694 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:37:37.204 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49198 10 6452 1 2025-11-12 04:38:24.580 00:00:10.365 TCP 23.104.0.1:50002 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:38:37.427 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35628 10 6452 1 2025-11-12 04:39:24.994 00:00:10.364 TCP 23.104.0.1:60748 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:39:37.641 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48676 10 6452 1 2025-11-12 04:34:59.728 00:05:56.219 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 04:35:55.949 00:05:03.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 04:40:25.402 00:00:10.369 TCP 23.104.0.1:45768 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:40:37.814 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55302 10 6452 1 2025-11-12 04:41:16.907 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 04:41:16.628 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 04:41:25.810 00:00:10.365 TCP 23.104.0.1:41566 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:41:38.041 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46522 10 6452 1 2025-11-12 04:42:26.219 00:00:10.365 TCP 23.104.0.1:51412 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:42:38.253 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59070 10 6452 1 2025-11-12 04:43:26.623 00:00:10.369 TCP 23.104.0.1:60088 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:43:38.466 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34032 10 6452 1 2025-11-12 04:44:27.030 00:00:10.318 TCP 23.104.0.1:42886 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:44:38.635 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38718 10 6452 1 2025-11-12 04:45:27.385 00:00:10.726 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:45:38.810 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42290 10 6452 1 2025-11-12 04:40:59.739 00:05:56.211 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 04:41:55.949 00:05:03.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 04:46:16.495 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 04:46:16.486 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 04:46:28.150 00:00:10.367 TCP 23.104.0.1:38722 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:46:39.035 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49236 10 6452 1 2025-11-12 04:47:28.561 00:00:10.337 TCP 23.104.0.1:56436 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:47:39.214 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54016 10 6452 1 2025-11-12 04:48:28.941 00:00:10.378 TCP 23.104.0.1:46338 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:48:39.428 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60502 10 6452 1 2025-11-12 04:49:29.361 00:00:10.367 TCP 23.104.0.1:37054 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:49:39.653 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33624 10 6452 1 2025-11-12 04:50:29.763 00:00:10.373 TCP 23.104.0.1:46692 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:50:39.868 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38112 10 6452 1 2025-11-12 04:51:16.911 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 04:51:16.724 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 04:51:30.175 00:00:10.367 TCP 23.104.0.1:41420 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:51:40.068 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54814 10 6452 1 2025-11-12 04:46:59.742 00:05:56.210 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 04:47:55.953 00:05:03.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 04:52:30.581 00:00:10.366 TCP 23.104.0.1:51410 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:52:40.282 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34734 10 6452 1 2025-11-12 04:53:30.986 00:00:10.365 TCP 23.104.0.1:39120 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:53:40.496 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40512 10 6452 1 2025-11-12 04:54:31.391 00:00:10.365 TCP 23.104.0.1:47632 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:54:40.713 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39970 10 6452 1 2025-11-12 04:55:31.798 00:00:10.360 TCP 23.104.0.1:33880 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:55:40.929 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:46396 10 6452 1 2025-11-12 04:56:16.907 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 04:56:16.578 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 04:56:32.197 00:00:10.322 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:56:41.159 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38888 10 6452 1 2025-11-12 04:57:32.558 00:00:10.412 TCP 23.104.0.1:58192 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:57:41.376 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54030 10 6452 1 2025-11-12 04:52:59.742 00:05:56.209 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 04:53:55.954 00:05:03.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 04:58:33.008 00:00:10.370 TCP 23.104.0.1:35140 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:58:41.600 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46732 10 6452 1 Summary: total flows: 164, total bytes: 507445, total packets: 1588, avg bps: 1127, avg pps: 0, avg bpp: 319 Time window: 2025-11-12 03:58:59 - 2025-11-12 04:58:59 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0023s Wall: 0.0024s flows/second: 69615.0 Runtime: 0.0024s