Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 08:59:25.828 00:00:10.344 TCP 23.104.0.1:44732 -> 1.101.0.1:3000 11 1507 1 2025-11-12 08:59:39.337 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32960 10 6452 1 2025-11-12 09:00:26.210 00:00:10.361 TCP 23.104.0.1:39704 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:00:39.555 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46718 10 6452 1 2025-11-12 09:01:21.827 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 09:01:21.839 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 09:01:26.610 00:00:10.363 TCP 23.104.0.1:39164 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:01:39.780 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40298 10 6452 1 2025-11-12 09:02:27.013 00:00:10.362 TCP 23.104.0.1:50978 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:02:40.003 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37872 10 6452 1 2025-11-12 09:03:27.415 00:00:10.366 TCP 23.104.0.1:33172 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:03:40.223 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53234 10 6452 1 2025-11-12 08:59:56.059 00:05:03.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 08:59:56.062 00:05:03.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 09:04:27.817 00:00:10.366 TCP 23.104.0.1:51868 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:04:40.429 00:00:10.783 TCP 1.101.0.1:3000 -> 22.102.0.1:40670 10 6452 1 2025-11-12 09:05:28.222 00:00:10.367 TCP 23.104.0.1:33656 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:05:41.250 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33084 10 6452 1 2025-11-12 09:06:22.154 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 09:06:22.045 00:00:00.051 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 09:06:28.627 00:00:10.325 TCP 23.104.0.1:49550 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:06:41.469 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52894 10 6452 1 2025-11-12 09:07:28.992 00:00:10.370 TCP 23.104.0.1:39160 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:07:41.689 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34848 10 6452 1 2025-11-12 09:08:29.405 00:00:10.534 TCP 23.104.0.1:33092 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:08:41.907 00:00:18.409 TCP 1.101.0.1:3000 -> 22.102.0.1:50122 10 6452 1 2025-11-12 09:09:29.979 00:00:10.371 TCP 23.104.0.1:38908 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:05:56.062 00:05:03.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 09:05:56.061 00:05:03.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 09:09:50.360 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:41134 10 6452 1 2025-11-12 09:10:30.386 00:00:10.335 TCP 23.104.0.1:39312 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:10:50.548 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33588 10 6452 1 2025-11-12 09:11:21.877 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 09:11:22.046 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 09:11:30.760 00:00:10.375 TCP 23.104.0.1:44484 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:11:50.755 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39994 10 6452 1 2025-11-12 09:12:31.184 00:00:10.324 TCP 23.104.0.1:38654 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:12:50.926 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57760 10 6452 1 2025-11-12 09:13:31.546 00:00:10.368 TCP 23.104.0.1:60612 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:13:51.134 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43624 10 6452 1 2025-11-12 09:14:31.953 00:00:10.373 TCP 23.104.0.1:42454 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:14:51.353 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37040 10 6452 1 2025-11-12 09:15:32.368 00:00:10.369 TCP 23.104.0.1:43148 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:11:56.063 00:05:03.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 09:11:56.062 00:05:03.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 09:15:51.569 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50566 10 6452 1 2025-11-12 09:16:21.908 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 09:16:22.079 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 09:16:32.774 00:00:10.369 TCP 23.104.0.1:38856 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:16:51.785 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44760 10 6452 1 2025-11-12 09:17:33.179 00:00:10.716 TCP 23.104.0.1:42796 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:17:52.015 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34832 10 6452 1 2025-11-12 09:18:33.930 00:00:10.370 TCP 23.104.0.1:45464 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:18:52.228 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37160 10 6452 1 2025-11-12 09:19:34.338 00:00:10.364 TCP 23.104.0.1:44912 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:19:52.441 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52106 10 6452 1 2025-11-12 09:20:34.744 00:00:10.368 TCP 23.104.0.1:38972 -> 1.101.0.1:3000 12 1559 1 2025-11-12 09:20:52.654 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57344 10 6452 1 2025-11-12 09:21:22.193 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 09:21:22.204 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 09:21:35.148 00:00:10.365 TCP 23.104.0.1:44544 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:17:56.063 00:05:03.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 09:17:56.065 00:05:03.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 09:21:52.863 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36496 10 6452 1 2025-11-12 09:22:35.548 00:00:10.369 TCP 23.104.0.1:35936 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:22:53.112 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57634 10 6452 1 2025-11-12 09:23:35.954 00:00:10.367 TCP 23.104.0.1:50516 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:23:53.329 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38148 10 6452 1 2025-11-12 09:24:36.358 00:00:10.370 TCP 23.104.0.1:32802 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:24:53.543 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:51530 10 6452 1 2025-11-12 09:25:36.767 00:00:10.377 TCP 23.104.0.1:40250 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:25:53.730 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56042 10 6452 1 2025-11-12 09:26:22.338 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 09:26:22.268 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 09:26:37.176 00:00:10.366 TCP 23.104.0.1:36020 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:26:53.946 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:50932 10 6452 1 2025-11-12 09:27:37.579 00:00:10.361 TCP 23.104.0.1:45180 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:23:56.066 00:05:03.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 09:23:56.064 00:05:03.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 09:27:54.191 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47116 10 6452 1 2025-11-12 09:28:37.985 00:00:10.326 TCP 23.104.0.1:47906 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:28:54.403 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58094 10 6452 1 2025-11-12 09:29:38.350 00:00:10.365 TCP 23.104.0.1:38358 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:29:54.629 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56258 10 6452 1 2025-11-12 09:30:38.755 00:00:10.377 TCP 23.104.0.1:42876 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:30:54.853 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55976 10 6452 1 2025-11-12 09:31:22.383 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 09:31:22.405 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 09:31:39.175 00:00:10.721 TCP 23.104.0.1:48814 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:31:55.097 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59702 10 6452 1 2025-11-12 09:32:39.934 00:00:10.375 TCP 23.104.0.1:55836 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:32:55.320 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:32852 10 6452 1 2025-11-12 09:33:40.345 00:00:10.366 TCP 23.104.0.1:41742 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:29:56.070 00:05:03.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 09:29:56.067 00:05:03.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 09:33:55.491 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43396 10 6452 1 2025-11-12 09:34:40.749 00:00:10.397 TCP 23.104.0.1:50064 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:34:55.704 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38388 10 6452 1 2025-11-12 09:35:41.187 00:00:10.367 TCP 23.104.0.1:46992 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:35:55.874 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34908 10 6452 1 2025-11-12 09:36:22.388 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 09:36:22.385 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 09:36:41.591 00:00:10.365 TCP 23.104.0.1:36348 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:36:56.078 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35422 10 6452 1 2025-11-12 09:37:41.995 00:00:10.365 TCP 23.104.0.1:60276 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:37:56.297 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39458 10 6452 1 2025-11-12 09:38:42.395 00:00:10.328 TCP 23.104.0.1:42858 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:38:56.507 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57480 10 6452 1 2025-11-12 09:39:42.758 00:00:10.373 TCP 23.104.0.1:50544 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:35:56.069 00:05:03.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 09:35:56.072 00:05:03.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 09:39:56.719 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35906 10 6452 1 2025-11-12 09:40:43.169 00:00:10.366 TCP 23.104.0.1:48702 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:40:56.927 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39376 10 6452 1 2025-11-12 09:41:22.327 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 09:41:22.681 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 09:41:43.572 00:00:15.438 TCP 23.104.0.1:53114 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:41:57.167 00:00:10.922 TCP 1.101.0.1:3000 -> 22.102.0.1:35170 10 6452 1 2025-11-12 09:42:49.059 00:00:10.365 TCP 23.104.0.1:44870 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:42:58.122 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40406 10 6452 1 2025-11-12 09:43:49.464 00:00:10.360 TCP 23.104.0.1:39190 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:43:58.340 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42488 10 6452 1 2025-11-12 09:44:49.867 00:00:11.060 TCP 23.104.0.1:57344 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:44:58.511 00:00:11.031 TCP 1.101.0.1:3000 -> 22.102.0.1:49126 10 6452 1 2025-11-12 09:45:50.965 00:00:10.370 TCP 23.104.0.1:35600 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:41:56.072 00:05:03.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 09:41:56.070 00:05:03.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 09:45:59.579 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58678 10 6452 1 2025-11-12 09:46:22.758 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 09:46:22.705 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 09:46:51.375 00:00:10.371 TCP 23.104.0.1:37216 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:46:59.798 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41112 10 6452 1 2025-11-12 09:47:51.784 00:00:10.378 TCP 23.104.0.1:51280 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:47:59.974 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:45316 13 6608 1 2025-11-12 09:48:52.201 00:00:10.321 TCP 23.104.0.1:51652 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:49:00.227 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36272 10 6452 1 2025-11-12 09:49:52.573 00:00:10.326 TCP 23.104.0.1:40256 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:50:00.450 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45160 10 6452 1 2025-11-12 09:50:52.941 00:00:10.335 TCP 23.104.0.1:47852 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:51:00.669 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47312 10 6452 1 2025-11-12 09:51:22.737 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 09:51:22.676 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 09:47:56.074 00:05:03.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 09:47:56.071 00:05:03.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 09:51:53.315 00:00:10.363 TCP 23.104.0.1:50770 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:52:00.886 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38304 10 6452 1 2025-11-12 09:52:53.718 00:00:10.372 TCP 23.104.0.1:55380 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:53:01.100 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58954 10 6452 1 2025-11-12 09:53:54.129 00:00:10.380 TCP 23.104.0.1:35496 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:54:01.315 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38988 10 6452 1 2025-11-12 09:54:54.547 00:00:10.362 TCP 23.104.0.1:45548 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:55:01.540 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32846 10 6452 1 2025-11-12 09:55:54.946 00:00:10.373 TCP 23.104.0.1:35724 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:56:01.760 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45354 10 6452 1 2025-11-12 09:56:22.723 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 09:56:23.005 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 09:56:55.360 00:00:10.374 TCP 23.104.0.1:44126 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:57:01.965 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39340 12 6556 1 2025-11-12 09:53:56.072 00:05:03.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 09:53:56.075 00:05:03.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 09:57:55.763 00:00:10.378 TCP 23.104.0.1:47064 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:58:02.190 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57654 10 6452 1 Summary: total flows: 162, total bytes: 490701, total packets: 1557, avg bps: 1098, avg pps: 0, avg bpp: 315 Time window: 2025-11-12 08:59:25 - 2025-11-12 09:58:59 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0029s User: 0.0029s Wall: 0.0022s flows/second: 75238.3 Runtime: 0.0022s