Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 09:58:56.180 00:00:10.367 TCP 23.104.0.1:45052 -> 1.101.0.1:3000 11 1507 1 2025-11-12 09:59:02.404 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37300 10 6452 1 2025-11-12 09:59:56.585 00:00:10.366 TCP 23.104.0.1:50016 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:00:02.615 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49916 10 6452 1 2025-11-12 10:00:56.990 00:00:10.363 TCP 23.104.0.1:38656 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:01:02.824 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48630 10 6452 1 2025-11-12 10:01:23.383 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:01:23.324 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 10:01:57.388 00:00:10.361 TCP 23.104.0.1:54534 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:02:03.042 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47930 10 6452 1 2025-11-12 10:02:57.790 00:00:10.362 TCP 23.104.0.1:59642 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:03:03.217 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52534 10 6452 1 2025-11-12 09:59:56.075 00:05:03.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 09:59:56.072 00:05:03.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 10:03:58.189 00:00:10.366 TCP 23.104.0.1:38476 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:04:03.448 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:51962 10 6452 1 2025-11-12 10:04:58.595 00:00:10.324 TCP 23.104.0.1:45184 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:05:03.711 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37518 10 6452 1 2025-11-12 10:05:58.957 00:00:10.322 TCP 23.104.0.1:48338 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:06:03.886 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43932 10 6452 1 2025-11-12 10:06:23.075 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:06:23.024 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 10:06:59.319 00:00:10.318 TCP 23.104.0.1:33132 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:07:04.082 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38728 10 6452 1 2025-11-12 10:07:59.674 00:00:10.323 TCP 23.104.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:08:04.289 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46048 10 6452 1 2025-11-12 10:09:00.058 00:00:10.438 TCP 23.104.0.1:39924 -> 1.101.0.1:3000 15 1926 1 2025-11-12 10:09:04.503 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:54610 12 10375 1 2025-11-12 10:05:56.078 00:05:03.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 10:05:56.076 00:05:03.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 10:10:00.543 00:00:10.732 TCP 23.104.0.1:34584 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:10:04.761 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49806 10 6452 1 2025-11-12 10:11:01.316 00:00:10.369 TCP 23.104.0.1:58270 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:11:04.978 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:39944 10 6452 1 2025-11-12 10:11:23.269 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:11:23.058 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 10:12:01.720 00:00:10.380 TCP 23.104.0.1:58292 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:12:05.220 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59210 10 6452 1 2025-11-12 10:13:05.438 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47300 10 6452 1 2025-11-12 10:13:02.138 00:00:10.371 TCP 23.104.0.1:52070 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:14:02.543 00:00:10.323 TCP 23.104.0.1:48796 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:14:05.608 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35744 10 6452 1 2025-11-12 10:15:02.902 00:00:10.334 TCP 23.104.0.1:38508 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:15:05.826 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38836 10 6452 1 2025-11-12 10:11:56.077 00:05:03.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 10:11:56.079 00:05:03.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 10:16:03.290 00:00:10.365 TCP 23.104.0.1:45160 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:16:06.075 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54064 10 6452 1 2025-11-12 10:16:23.497 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 10:16:23.533 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:17:06.300 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41928 10 6452 1 2025-11-12 10:17:03.697 00:00:10.368 TCP 23.104.0.1:52922 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:18:06.519 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33668 12 6556 1 2025-11-12 10:18:04.113 00:00:10.368 TCP 23.104.0.1:48296 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:19:06.737 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42276 10 6452 1 2025-11-12 10:19:04.519 00:00:10.366 TCP 23.104.0.1:50894 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:20:04.919 00:00:10.385 TCP 23.104.0.1:48300 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:20:06.969 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:46422 10 6452 1 2025-11-12 10:21:05.344 00:00:10.364 TCP 23.104.0.1:54018 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:21:23.451 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:21:07.204 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58294 10 6452 1 2025-11-12 10:21:23.319 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 10:17:56.078 00:05:03.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 10:17:56.080 00:05:03.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 10:22:05.749 00:00:10.368 TCP 23.104.0.1:52422 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:22:07.377 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57268 10 6452 1 2025-11-12 10:23:06.153 00:00:10.328 TCP 23.104.0.1:58238 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:23:07.588 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55788 10 6452 1 2025-11-12 10:24:06.513 00:00:10.371 TCP 23.104.0.1:38038 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:24:07.799 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37280 10 6452 1 2025-11-12 10:25:08.025 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53224 10 6452 1 2025-11-12 10:25:06.957 00:00:10.373 TCP 23.104.0.1:52076 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:26:07.367 00:00:10.324 TCP 23.104.0.1:46246 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:26:08.198 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42040 10 6452 1 2025-11-12 10:26:23.606 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 10:26:23.758 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:27:07.729 00:00:10.372 TCP 23.104.0.1:44666 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:27:08.409 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38470 10 6452 1 2025-11-12 10:23:56.090 00:05:03.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 10:23:56.093 00:05:03.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 10:28:08.137 00:00:10.377 TCP 23.104.0.1:58952 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:28:08.628 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37186 10 6452 1 2025-11-12 10:29:08.847 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46752 10 6452 1 2025-11-12 10:29:08.544 00:00:10.323 TCP 23.104.0.1:55842 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:30:08.907 00:00:10.373 TCP 23.104.0.1:51322 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:30:09.080 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37846 10 6452 1 2025-11-12 10:31:09.320 00:00:10.376 TCP 23.104.0.1:37696 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:31:23.595 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:31:09.299 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35030 10 6452 1 2025-11-12 10:31:23.545 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 10:32:09.508 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48604 10 6452 1 2025-11-12 10:32:09.737 00:00:10.368 TCP 23.104.0.1:44262 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:33:10.144 00:00:10.372 TCP 23.104.0.1:51072 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:33:09.719 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:59060 10 6452 1 2025-11-12 10:29:56.091 00:05:03.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 10:29:56.094 00:05:03.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 10:34:10.552 00:00:10.368 TCP 23.104.0.1:49814 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:34:09.910 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40016 10 6452 1 2025-11-12 10:35:10.960 00:00:10.366 TCP 23.104.0.1:59408 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:35:10.134 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54272 10 6452 1 2025-11-12 10:36:10.348 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51238 10 6452 1 2025-11-12 10:36:11.356 00:00:10.365 TCP 23.104.0.1:54150 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:36:23.496 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 10:36:23.650 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:37:10.563 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56226 10 6452 1 2025-11-12 10:37:11.761 00:00:10.331 TCP 23.104.0.1:60454 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:38:10.741 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43978 12 6556 1 2025-11-12 10:38:12.130 00:00:10.325 TCP 23.104.0.1:52784 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:39:10.960 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:44264 10 6452 1 2025-11-12 10:39:12.499 00:00:10.327 TCP 23.104.0.1:50306 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:35:56.095 00:05:03.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 10:35:56.093 00:05:03.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 10:40:11.144 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53136 10 6452 1 2025-11-12 10:40:12.862 00:00:10.364 TCP 23.104.0.1:59592 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:41:11.365 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45400 10 6452 1 2025-11-12 10:41:23.595 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:41:13.273 00:00:10.323 TCP 23.104.0.1:38760 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:41:23.807 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 10:42:11.595 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33562 10 6452 1 2025-11-12 10:42:13.639 00:00:10.320 TCP 23.104.0.1:34632 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:43:11.817 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39474 10 6452 1 2025-11-12 10:43:14.001 00:00:10.375 TCP 23.104.0.1:58870 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:44:14.426 00:00:23.139 TCP 23.104.0.1:53992 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:44:12.035 00:00:25.417 TCP 1.101.0.1:3000 -> 22.102.0.1:40614 10 6452 1 2025-11-12 10:45:27.645 00:00:10.373 TCP 23.104.0.1:39346 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:45:27.501 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:44710 10 6452 1 2025-11-12 10:41:56.096 00:05:03.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 10:41:56.093 00:05:03.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 10:46:23.889 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:46:23.632 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 10:46:28.080 00:00:10.363 TCP 23.104.0.1:34096 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:46:27.664 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52606 10 6452 1 2025-11-12 10:47:27.885 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56984 10 6452 1 2025-11-12 10:47:28.478 00:00:10.366 TCP 23.104.0.1:43820 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:48:28.112 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41162 10 6452 1 2025-11-12 10:48:28.886 00:00:10.377 TCP 23.104.0.1:54076 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:49:28.332 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42390 10 6452 1 2025-11-12 10:49:29.307 00:00:10.325 TCP 23.104.0.1:51028 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:50:28.552 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:44996 10 6452 1 2025-11-12 10:50:29.667 00:00:10.363 TCP 23.104.0.1:39580 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:51:23.734 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:51:23.765 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 10:51:28.735 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36846 10 6452 1 2025-11-12 10:51:30.116 00:00:10.322 TCP 23.104.0.1:41654 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:47:56.096 00:05:03.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 10:47:56.099 00:05:03.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 10:52:28.949 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44166 10 6452 1 2025-11-12 10:52:30.480 00:00:10.366 TCP 23.104.0.1:42106 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:53:30.882 00:00:10.447 TCP 23.104.0.1:54792 -> 1.101.0.1:3000 15 1926 1 2025-11-12 10:53:29.178 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:38128 12 10369 1 2025-11-12 10:54:31.366 00:00:10.368 TCP 23.104.0.1:43526 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:54:29.426 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42240 10 6452 1 2025-11-12 10:55:29.639 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50392 10 6452 1 2025-11-12 10:55:31.772 00:00:10.373 TCP 23.104.0.1:57158 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:56:24.194 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 10:56:23.867 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 10:56:29.860 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36274 10 6452 1 2025-11-12 10:56:32.185 00:00:10.323 TCP 23.104.0.1:58970 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:57:30.084 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56230 10 6452 1 2025-11-12 10:57:32.548 00:00:10.364 TCP 23.104.0.1:54992 -> 1.101.0.1:3000 11 1507 1 2025-11-12 10:53:56.099 00:05:03.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 10:53:56.097 00:05:03.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 10:58:30.295 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48868 10 6452 1 2025-11-12 10:58:32.948 00:00:10.380 TCP 23.104.0.1:50392 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507234, total packets: 1588, avg bps: 1126, avg pps: 0, avg bpp: 319 Time window: 2025-11-12 09:58:56 - 2025-11-12 10:58:59 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0024s Wall: 0.0023s flows/second: 70906.7 Runtime: 0.0023s