Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 04:59:33.412 00:00:10.366 TCP 23.104.0.1:47210 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:59:41.817 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43168 10 6452 1 2025-11-12 05:00:33.816 00:00:10.364 TCP 23.104.0.1:48756 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:00:42.051 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39556 10 6452 1 2025-11-12 05:01:16.856 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 05:01:17.297 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 05:01:34.220 00:00:10.794 TCP 23.104.0.1:48598 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:01:42.230 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:51188 10 6452 1 2025-11-12 05:02:35.062 00:00:10.365 TCP 23.104.0.1:56040 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:02:42.403 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35016 10 6452 1 2025-11-12 05:03:35.467 00:00:10.366 TCP 23.104.0.1:51780 -> 1.101.0.1:3000 11 1507 1 2025-11-12 04:58:59.755 00:05:56.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 05:03:42.571 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58922 10 6452 1 2025-11-12 04:59:55.955 00:05:03.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 05:04:35.874 00:00:10.363 TCP 23.104.0.1:42396 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:04:42.776 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50070 10 6452 1 2025-11-12 05:05:36.281 00:00:10.368 TCP 23.104.0.1:54144 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:05:42.987 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42440 10 6452 1 2025-11-12 05:06:17.237 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 05:06:17.168 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 05:06:36.695 00:00:10.326 TCP 23.104.0.1:50630 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:06:43.215 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33610 10 6452 1 2025-11-12 05:07:43.428 00:00:12.618 TCP 1.101.0.1:3000 -> 22.102.0.1:58088 10 6452 1 2025-11-12 05:07:37.062 00:00:19.072 TCP 23.104.0.1:52112 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:08:46.086 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45016 10 6452 1 2025-11-12 05:08:46.174 00:00:10.365 TCP 23.104.0.1:40794 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:09:46.319 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51552 10 6452 1 2025-11-12 05:04:59.757 00:05:56.198 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 05:09:46.575 00:00:10.366 TCP 23.104.0.1:33066 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:05:55.956 00:05:03.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 05:10:46.545 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34144 10 6452 1 2025-11-12 05:10:46.986 00:00:10.368 TCP 23.104.0.1:38720 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:11:17.416 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 05:11:17.269 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 05:11:46.759 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:47746 10 6452 1 2025-11-12 05:11:47.392 00:00:10.677 TCP 23.104.0.1:49998 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:12:46.939 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:37828 10 6452 1 2025-11-12 05:12:48.118 00:00:10.364 TCP 23.104.0.1:45206 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:13:48.518 00:00:10.363 TCP 23.104.0.1:54368 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:13:47.177 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53638 10 6452 1 2025-11-12 05:14:47.388 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34724 10 6452 1 2025-11-12 05:14:48.920 00:00:10.382 TCP 23.104.0.1:54728 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:10:59.766 00:05:56.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 05:15:47.599 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36872 10 6452 1 2025-11-12 05:15:49.337 00:00:10.365 TCP 23.104.0.1:38314 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:11:55.957 00:05:03.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 05:16:17.422 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 05:16:17.730 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 05:16:47.771 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32968 10 6452 1 2025-11-12 05:16:49.740 00:00:10.367 TCP 23.104.0.1:43118 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:17:47.989 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:47094 10 6452 1 2025-11-12 05:17:50.138 00:00:10.364 TCP 23.104.0.1:47420 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:18:50.540 00:00:10.361 TCP 23.104.0.1:50894 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:18:48.261 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45048 10 6452 1 2025-11-12 05:19:50.941 00:00:10.395 TCP 23.104.0.1:49668 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:19:48.481 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:52950 10 6452 1 2025-11-12 05:20:51.381 00:00:10.362 TCP 23.104.0.1:39100 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:20:48.721 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33912 10 6452 1 2025-11-12 05:21:17.108 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 05:21:17.375 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 05:16:59.768 00:05:56.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 05:21:48.940 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:53332 10 6452 1 2025-11-12 05:17:55.959 00:05:03.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 05:21:51.779 00:00:10.370 TCP 23.104.0.1:53580 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:22:49.144 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45750 10 6452 1 2025-11-12 05:22:52.188 00:00:10.367 TCP 23.104.0.1:53390 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:23:49.358 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43104 10 6452 1 2025-11-12 05:23:52.592 00:00:10.366 TCP 23.104.0.1:33584 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:24:49.575 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46178 10 6452 1 2025-11-12 05:24:52.998 00:00:10.376 TCP 23.104.0.1:57568 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:25:49.794 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50160 10 6452 1 2025-11-12 05:25:53.418 00:00:10.325 TCP 23.104.0.1:50132 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:26:17.425 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 05:26:17.412 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 05:26:49.963 00:00:11.043 TCP 1.101.0.1:3000 -> 22.102.0.1:56300 10 6452 1 2025-11-12 05:26:53.784 00:00:10.370 TCP 23.104.0.1:41976 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:22:59.768 00:05:56.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 05:23:55.958 00:05:03.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 05:27:51.070 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47430 10 6452 1 2025-11-12 05:27:54.188 00:00:10.359 TCP 23.104.0.1:45310 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:28:51.286 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53174 10 6452 1 2025-11-12 05:28:54.587 00:00:10.366 TCP 23.104.0.1:60460 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:29:51.506 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38174 10 6452 1 2025-11-12 05:29:54.990 00:00:10.363 TCP 23.104.0.1:35052 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:30:51.675 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:57928 10 6452 1 2025-11-12 05:30:55.396 00:00:10.320 TCP 23.104.0.1:57092 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:31:17.272 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 05:31:17.553 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 05:31:51.952 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59022 12 6556 1 2025-11-12 05:31:55.759 00:00:10.376 TCP 23.104.0.1:38292 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:32:52.176 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33914 10 6452 1 2025-11-12 05:32:56.172 00:00:10.367 TCP 23.104.0.1:54026 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:28:59.771 00:05:56.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 05:29:55.962 00:05:03.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 05:33:56.578 00:00:10.367 TCP 23.104.0.1:46794 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:33:52.397 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54888 10 6452 1 2025-11-12 05:34:52.604 00:00:10.478 TCP 1.101.0.1:3000 -> 22.102.0.1:41384 10 6452 1 2025-11-12 05:34:56.984 00:00:10.328 TCP 23.104.0.1:41258 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:35:53.122 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51030 10 6452 1 2025-11-12 05:35:57.351 00:00:10.365 TCP 23.104.0.1:59128 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:36:17.543 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 05:36:17.746 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 05:36:53.342 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56264 10 6452 1 2025-11-12 05:36:57.756 00:00:10.379 TCP 23.104.0.1:56184 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:37:53.564 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40550 10 6452 1 2025-11-12 05:37:58.176 00:00:10.366 TCP 23.104.0.1:41026 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:38:53.778 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51442 10 6452 1 2025-11-12 05:38:58.581 00:00:10.366 TCP 23.104.0.1:33954 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:34:59.770 00:05:56.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 05:35:55.963 00:05:03.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 05:39:53.992 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35090 10 6452 1 2025-11-12 05:39:58.985 00:00:10.372 TCP 23.104.0.1:38152 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:40:54.230 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59874 10 6452 1 2025-11-12 05:40:59.394 00:00:10.325 TCP 23.104.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:41:18.015 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 05:41:17.849 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 05:41:54.455 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55650 10 6452 1 2025-11-12 05:41:59.760 00:00:10.341 TCP 23.104.0.1:47000 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:42:54.674 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59626 10 6452 1 2025-11-12 05:43:00.138 00:00:10.946 TCP 23.104.0.1:52470 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:43:54.896 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35814 10 6452 1 2025-11-12 05:44:01.119 00:00:10.369 TCP 23.104.0.1:59516 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:44:55.123 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60842 10 6452 1 2025-11-12 05:45:01.524 00:00:10.359 TCP 23.104.0.1:47858 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:40:59.773 00:05:56.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 05:41:55.964 00:05:03.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 05:45:55.347 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34242 12 6556 1 2025-11-12 05:46:01.919 00:00:10.383 TCP 23.104.0.1:48334 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:46:17.892 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 05:46:17.798 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 05:46:55.562 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50180 10 6452 1 2025-11-12 05:47:02.343 00:00:10.365 TCP 23.104.0.1:42400 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:47:55.778 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:46584 10 6452 1 2025-11-12 05:48:02.749 00:00:10.364 TCP 23.104.0.1:38562 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:48:55.967 00:00:10.262 TCP 1.101.0.1:3000 -> 22.102.0.1:54110 10 6452 1 2025-11-12 05:49:03.151 00:00:10.337 TCP 23.104.0.1:37970 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:49:56.272 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53350 10 6452 1 2025-11-12 05:50:03.524 00:00:10.363 TCP 23.104.0.1:45046 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:50:56.483 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39984 10 6452 1 2025-11-12 05:51:03.925 00:00:10.380 TCP 23.104.0.1:56768 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:51:18.036 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 05:51:17.852 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 05:46:59.774 00:05:56.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 05:47:55.965 00:05:03.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 05:51:56.655 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37724 10 6452 1 2025-11-12 05:52:04.348 00:00:10.324 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:52:56.874 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60874 10 6452 1 2025-11-12 05:53:04.714 00:00:10.385 TCP 23.104.0.1:44242 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:53:57.102 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59390 10 6452 1 2025-11-12 05:54:05.138 00:00:10.366 TCP 23.104.0.1:38990 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:54:57.322 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44646 10 6452 1 2025-11-12 05:55:05.543 00:00:10.370 TCP 23.104.0.1:35856 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:55:57.544 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48606 10 6452 1 2025-11-12 05:56:05.955 00:00:10.320 TCP 23.104.0.1:51106 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:56:18.043 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 05:56:18.063 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 05:56:57.763 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43482 10 6452 1 2025-11-12 05:57:06.313 00:00:10.370 TCP 23.104.0.1:46728 -> 1.101.0.1:3000 11 1507 1 2025-11-12 05:52:59.794 00:05:56.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 05:53:55.966 00:05:03.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 05:57:57.986 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:46404 10 6452 1 2025-11-12 05:58:06.719 00:00:10.380 TCP 23.104.0.1:42998 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490597, total packets: 1555, avg bps: 1090, avg pps: 0, avg bpp: 315 Time window: 2025-11-12 04:58:59 - 2025-11-12 05:58:59 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0041s User: 0.0010s Wall: 0.0020s flows/second: 80468.6 Runtime: 0.0020s