Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 07:58:57.720 00:00:10.333 TCP 23.104.0.1:43484 -> 1.101.0.1:3000 11 1507 1 2025-11-12 07:59:25.958 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:53158 10 6452 1 2025-11-12 07:59:58.109 00:00:10.368 TCP 23.104.0.1:50546 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:00:26.195 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43832 10 6452 1 2025-11-12 08:00:58.516 00:00:10.365 TCP 23.104.0.1:49628 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:01:20.433 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 08:01:20.623 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 08:01:26.408 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35758 10 6452 1 2025-11-12 08:01:58.919 00:00:10.370 TCP 23.104.0.1:42736 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:02:26.577 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58288 10 6452 1 2025-11-12 08:02:59.330 00:00:11.138 TCP 23.104.0.1:54852 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:03:26.792 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51820 10 6452 1 2025-11-12 07:58:59.831 00:05:56.206 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 07:58:59.830 00:05:56.211 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 08:04:00.502 00:00:10.361 TCP 23.104.0.1:33274 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:04:27.014 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36746 10 6452 1 2025-11-12 08:05:00.899 00:00:10.368 TCP 23.104.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:05:27.229 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36012 10 6452 1 2025-11-12 08:06:01.304 00:00:10.366 TCP 23.104.0.1:43854 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:06:20.754 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 08:06:20.695 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 08:06:27.436 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33492 10 6452 1 2025-11-12 08:07:01.707 00:00:10.536 TCP 23.104.0.1:53920 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:07:27.650 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41956 10 6452 1 2025-11-12 08:08:02.277 00:00:10.364 TCP 23.104.0.1:56130 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:08:27.865 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:37410 12 10369 1 2025-11-12 08:09:02.679 00:00:10.394 TCP 23.104.0.1:42556 -> 1.101.0.1:3000 15 1926 1 2025-11-12 08:09:28.112 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48608 10 6452 1 2025-11-12 08:04:59.832 00:05:56.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 08:04:59.834 00:05:56.201 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 08:10:03.118 00:00:10.366 TCP 23.104.0.1:35402 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:10:28.325 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49450 10 6452 1 2025-11-12 08:11:03.522 00:00:10.870 TCP 23.104.0.1:37038 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:11:20.897 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 08:11:20.691 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 08:11:28.542 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48590 10 6452 1 2025-11-12 08:12:04.429 00:00:10.325 TCP 23.104.0.1:41750 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:12:28.754 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40710 10 6452 1 2025-11-12 08:13:04.792 00:00:10.350 TCP 23.104.0.1:55572 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:13:28.975 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43516 10 6452 1 2025-11-12 08:14:05.182 00:00:10.522 TCP 23.104.0.1:34540 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:14:29.208 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58954 10 6452 1 2025-11-12 08:15:05.746 00:00:10.369 TCP 23.104.0.1:59722 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:15:29.435 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45428 10 6452 1 2025-11-12 08:10:59.836 00:05:56.205 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 08:10:59.834 00:05:56.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 08:16:06.150 00:00:10.327 TCP 23.104.0.1:51430 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:16:21.135 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 08:16:20.695 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 08:16:29.660 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58924 10 6452 1 2025-11-12 08:17:06.513 00:00:10.817 TCP 23.104.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:17:29.878 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49340 10 6452 1 2025-11-12 08:18:07.362 00:00:10.370 TCP 23.104.0.1:45682 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:18:30.120 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:48556 12 10375 1 2025-11-12 08:19:07.768 00:00:10.559 TCP 23.104.0.1:41030 -> 1.101.0.1:3000 15 1926 1 2025-11-12 08:19:30.322 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37562 10 6452 1 2025-11-12 08:20:08.366 00:00:10.365 TCP 23.104.0.1:57058 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:20:30.535 00:00:10.694 TCP 1.101.0.1:3000 -> 22.102.0.1:47768 10 6452 1 2025-11-12 08:21:20.941 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 08:21:08.774 00:00:10.373 TCP 23.104.0.1:40928 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:21:20.868 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 08:21:31.266 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37482 10 6452 1 2025-11-12 08:16:59.838 00:05:56.204 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 08:16:59.835 00:05:56.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 08:22:09.189 00:00:10.373 TCP 23.104.0.1:56482 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:22:31.493 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54912 10 6452 1 2025-11-12 08:23:09.601 00:00:10.362 TCP 23.104.0.1:54040 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:23:31.667 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58006 10 6452 1 2025-11-12 08:24:09.998 00:00:10.324 TCP 23.104.0.1:51544 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:24:31.876 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:49372 10 6452 1 2025-11-12 08:25:10.361 00:00:10.363 TCP 23.104.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:25:32.105 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49854 10 6452 1 2025-11-12 08:26:20.907 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 08:26:10.766 00:00:10.376 TCP 23.104.0.1:38506 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:26:20.875 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 08:26:32.319 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55310 10 6452 1 2025-11-12 08:27:11.181 00:00:10.364 TCP 23.104.0.1:33002 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:27:32.537 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53446 10 6452 1 2025-11-12 08:22:59.839 00:05:56.204 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 08:22:59.836 00:05:56.209 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 08:28:11.595 00:00:10.358 TCP 23.104.0.1:49454 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:28:32.745 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42478 10 6452 1 2025-11-12 08:29:11.998 00:00:10.327 TCP 23.104.0.1:34238 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:29:32.956 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36838 10 6452 1 2025-11-12 08:30:12.361 00:00:10.368 TCP 23.104.0.1:50262 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:30:33.192 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52358 10 6452 1 2025-11-12 08:31:21.318 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 08:31:21.295 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 08:31:12.767 00:00:10.377 TCP 23.104.0.1:53166 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:31:33.367 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50416 10 6452 1 2025-11-12 08:32:13.182 00:00:10.363 TCP 23.104.0.1:40254 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:32:33.574 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 10 6452 1 2025-11-12 08:33:13.583 00:00:11.452 TCP 23.104.0.1:53078 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:33:33.752 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60440 10 6452 1 2025-11-12 08:28:59.838 00:05:56.209 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 08:28:59.843 00:05:56.203 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 08:34:15.107 00:00:10.368 TCP 23.104.0.1:52528 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:34:33.964 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54382 10 6452 1 2025-11-12 08:35:15.509 00:00:10.370 TCP 23.104.0.1:44610 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:35:34.146 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56174 10 6452 1 2025-11-12 08:36:21.183 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 08:36:21.328 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 08:36:15.918 00:00:10.362 TCP 23.104.0.1:39628 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:36:34.360 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36098 10 6452 1 2025-11-12 08:37:16.316 00:00:10.365 TCP 23.104.0.1:54502 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:37:34.534 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58630 10 6452 1 2025-11-12 08:38:16.717 00:00:10.377 TCP 23.104.0.1:59106 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:38:34.755 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51780 10 6452 1 2025-11-12 08:39:17.133 00:00:10.361 TCP 23.104.0.1:60332 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:39:34.983 00:00:10.268 TCP 1.101.0.1:3000 -> 22.102.0.1:48708 10 6452 1 2025-11-12 08:34:59.842 00:05:56.206 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 08:34:59.838 00:05:56.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 08:40:17.534 00:00:10.369 TCP 23.104.0.1:50250 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:40:35.293 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59512 10 6452 1 2025-11-12 08:41:21.297 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 08:41:21.369 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 08:41:17.940 00:00:10.331 TCP 23.104.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:41:35.519 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41112 10 6452 1 2025-11-12 08:42:18.311 00:00:10.365 TCP 23.104.0.1:57090 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:42:35.738 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:46716 10 6452 1 2025-11-12 08:43:18.711 00:00:10.617 TCP 23.104.0.1:48460 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:43:35.974 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39900 10 6452 1 2025-11-12 08:44:19.368 00:00:10.364 TCP 23.104.0.1:36914 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:44:36.209 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52140 10 6452 1 2025-11-12 08:45:19.772 00:00:10.325 TCP 23.104.0.1:38382 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:45:36.419 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53430 10 6452 1 2025-11-12 08:40:59.850 00:05:56.201 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 08:40:59.847 00:05:56.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 08:46:21.279 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 08:46:21.164 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 08:46:20.136 00:00:10.362 TCP 23.104.0.1:33792 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:46:36.630 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56002 10 6452 1 2025-11-12 08:47:20.535 00:00:10.325 TCP 23.104.0.1:56250 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:47:36.841 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40680 10 6452 1 2025-11-12 08:48:20.896 00:00:10.328 TCP 23.104.0.1:37066 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:48:37.070 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52568 10 6452 1 2025-11-12 08:49:21.262 00:00:10.601 TCP 23.104.0.1:56048 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:49:37.281 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46756 10 6452 1 2025-11-12 08:50:21.897 00:00:10.429 TCP 23.104.0.1:60380 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:50:37.491 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39200 10 6452 1 2025-11-12 08:51:21.406 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 08:51:21.471 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 08:51:22.365 00:00:10.444 TCP 23.104.0.1:46964 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:51:37.707 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36216 10 6452 1 2025-11-12 08:46:59.847 00:05:56.213 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 08:46:59.850 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-11-12 08:52:22.849 00:00:10.380 TCP 23.104.0.1:38004 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:52:37.914 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58420 10 6452 1 2025-11-12 08:53:23.269 00:00:10.383 TCP 23.104.0.1:47442 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:53:38.129 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41554 10 6452 1 2025-11-12 08:54:23.683 00:00:10.363 TCP 23.104.0.1:36484 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:54:38.303 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47658 10 6452 1 2025-11-12 08:55:24.105 00:00:10.371 TCP 23.104.0.1:54664 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:55:38.493 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33940 10 6452 1 2025-11-12 08:56:21.547 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 08:56:21.698 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 08:56:24.521 00:00:10.374 TCP 23.104.0.1:49208 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:56:38.704 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36330 10 6452 1 2025-11-12 08:57:24.929 00:00:10.384 TCP 23.104.0.1:48900 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:57:38.921 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58004 10 6452 1 2025-11-12 08:53:56.057 00:05:03.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 08:52:59.849 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-11-12 08:58:25.352 00:00:10.446 TCP 23.104.0.1:58260 -> 1.101.0.1:3000 15 1926 1 2025-11-12 08:58:39.132 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:59126 12 10375 1 Summary: total flows: 164, total bytes: 511491, total packets: 1592, avg bps: 1135, avg pps: 0, avg bpp: 321 Time window: 2025-11-12 07:58:57 - 2025-11-12 08:58:59 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0050s User: 0.0010s Wall: 0.0023s flows/second: 72346.0 Runtime: 0.0023s