Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 12:58:52.266 00:00:10.365 TCP 23.104.0.1:43258 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:58:57.685 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40550 10 6452 1 2025-11-12 12:59:52.672 00:00:10.368 TCP 23.104.0.1:40348 -> 1.101.0.1:3000 11 1507 1 2025-11-12 12:59:57.913 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46824 10 6452 1 2025-11-12 13:00:53.110 00:00:10.330 TCP 23.104.0.1:56236 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:00:58.123 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54718 10 6452 1 2025-11-12 13:01:26.676 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 13:01:26.534 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 13:01:53.482 00:00:10.366 TCP 23.104.0.1:53838 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:01:58.338 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38518 10 6452 1 2025-11-12 13:02:53.887 00:00:10.370 TCP 23.104.0.1:42852 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:02:58.550 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52732 10 6452 1 2025-11-12 12:59:56.129 00:05:03.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 12:59:56.127 00:05:03.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 13:03:54.297 00:00:10.322 TCP 23.104.0.1:45508 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:03:58.719 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41306 10 6452 1 2025-11-12 13:04:54.654 00:00:10.364 TCP 23.104.0.1:37972 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:04:58.937 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:39660 10 6452 1 2025-11-12 13:05:55.056 00:00:10.366 TCP 23.104.0.1:56652 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:05:59.130 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52882 10 6452 1 2025-11-12 13:06:26.422 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 13:06:26.594 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 13:06:55.461 00:00:10.324 TCP 23.104.0.1:51270 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:06:59.345 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 10 6452 1 2025-11-12 13:07:55.824 00:00:10.386 TCP 23.104.0.1:45612 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:07:59.515 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44008 10 6452 1 2025-11-12 13:08:56.259 00:00:10.368 TCP 23.104.0.1:40796 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:08:59.726 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51616 10 6452 1 2025-11-12 13:05:56.128 00:05:03.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 13:05:56.131 00:05:03.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 13:09:56.664 00:00:10.364 TCP 23.104.0.1:33046 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:09:59.937 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:54994 10 6452 1 2025-11-12 13:11:00.186 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33542 10 6452 1 2025-11-12 13:10:57.098 00:00:10.363 TCP 23.104.0.1:41868 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:11:26.812 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 13:11:26.710 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 13:11:57.502 00:00:10.369 TCP 23.104.0.1:58530 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:12:00.364 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34108 10 6452 1 2025-11-12 13:13:00.592 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:57606 10 6452 1 2025-11-12 13:12:57.908 00:00:10.365 TCP 23.104.0.1:47420 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:14:00.755 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57950 10 6452 1 2025-11-12 13:13:58.305 00:00:10.369 TCP 23.104.0.1:52812 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:15:00.966 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:36008 10 6452 1 2025-11-12 13:14:58.713 00:00:10.374 TCP 23.104.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:11:56.131 00:05:03.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 13:11:56.130 00:05:03.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 13:15:59.164 00:00:10.369 TCP 23.104.0.1:40108 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:16:01.170 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35886 10 6452 1 2025-11-12 13:16:26.868 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 13:16:26.692 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 13:16:59.572 00:00:10.369 TCP 23.104.0.1:55682 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:17:01.402 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53896 10 6452 1 2025-11-12 13:17:59.980 00:00:10.398 TCP 23.104.0.1:46538 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:18:01.574 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39936 10 6452 1 2025-11-12 13:19:01.788 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60194 10 6452 1 2025-11-12 13:19:00.414 00:00:10.326 TCP 23.104.0.1:51656 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:20:00.772 00:00:10.370 TCP 23.104.0.1:42230 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:20:02.001 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48460 10 6452 1 2025-11-12 13:21:01.183 00:00:10.363 TCP 23.104.0.1:38724 -> 1.101.0.1:3000 12 1559 1 2025-11-12 13:21:02.214 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41684 10 6452 1 2025-11-12 13:21:26.786 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 13:21:27.034 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 13:17:56.134 00:05:03.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 13:17:56.132 00:05:03.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 13:22:01.583 00:00:10.365 TCP 23.104.0.1:36170 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:22:02.424 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42384 10 6452 1 2025-11-12 13:23:02.637 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33556 10 6452 1 2025-11-12 13:23:01.982 00:00:10.329 TCP 23.104.0.1:46164 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:24:02.347 00:00:10.322 TCP 23.104.0.1:60142 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:24:02.851 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57300 10 6452 1 2025-11-12 13:25:02.712 00:00:10.335 TCP 23.104.0.1:47316 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:25:03.087 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:51712 10 6452 1 2025-11-12 13:26:03.287 00:00:10.383 TCP 1.101.0.1:3000 -> 22.102.0.1:49374 10 6452 1 2025-11-12 13:26:03.105 00:00:10.650 TCP 23.104.0.1:38366 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:26:27.194 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 13:26:27.006 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 13:27:03.705 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57016 10 6452 1 2025-11-12 13:27:03.798 00:00:10.360 TCP 23.104.0.1:53690 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:23:56.137 00:05:03.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 13:23:56.134 00:05:03.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 13:28:04.197 00:00:10.363 TCP 23.104.0.1:36114 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:28:03.918 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60688 10 6452 1 2025-11-12 13:29:04.125 00:00:10.675 TCP 1.101.0.1:3000 -> 22.102.0.1:38808 10 6452 1 2025-11-12 13:29:04.598 00:00:10.363 TCP 23.104.0.1:53710 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:30:04.838 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49818 10 6452 1 2025-11-12 13:30:05.002 00:00:10.364 TCP 23.104.0.1:47208 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:31:05.082 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50462 10 6452 1 2025-11-12 13:31:05.411 00:00:10.350 TCP 23.104.0.1:45610 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:31:26.956 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 13:31:27.128 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 13:32:05.800 00:00:10.334 TCP 23.104.0.1:44930 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:32:05.317 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50502 10 6452 1 2025-11-12 13:33:06.169 00:00:10.322 TCP 23.104.0.1:43582 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:33:05.532 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51662 10 6452 1 2025-11-12 13:29:56.139 00:05:03.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 13:29:56.136 00:05:03.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 13:34:06.530 00:00:10.365 TCP 23.104.0.1:36096 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:34:05.755 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35464 10 6452 1 2025-11-12 13:35:05.967 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45532 10 6452 1 2025-11-12 13:35:06.935 00:00:10.382 TCP 23.104.0.1:37614 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:36:06.196 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:32886 10 6452 1 2025-11-12 13:36:07.354 00:00:10.327 TCP 23.104.0.1:50602 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:36:27.298 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 13:36:27.233 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 13:37:06.368 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52988 10 6452 1 2025-11-12 13:37:07.718 00:00:10.370 TCP 23.104.0.1:45004 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:38:06.579 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59648 10 6452 1 2025-11-12 13:38:08.126 00:00:10.365 TCP 23.104.0.1:60078 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:39:06.789 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41196 10 6452 1 2025-11-12 13:39:08.525 00:00:10.370 TCP 23.104.0.1:60546 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:35:56.140 00:05:03.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 13:35:56.137 00:05:03.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 13:40:07.004 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35926 10 6452 1 2025-11-12 13:40:08.932 00:00:10.384 TCP 23.104.0.1:39636 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:41:09.355 00:00:10.366 TCP 23.104.0.1:47700 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:41:07.224 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45696 10 6452 1 2025-11-12 13:41:27.190 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 13:41:27.362 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 13:42:07.397 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54024 10 6452 1 2025-11-12 13:42:09.770 00:00:10.429 TCP 23.104.0.1:35206 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:43:10.238 00:00:10.328 TCP 23.104.0.1:35840 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:43:07.611 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39606 10 6452 1 2025-11-12 13:44:10.598 00:00:10.370 TCP 23.104.0.1:48652 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:44:07.824 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34084 10 6452 1 2025-11-12 13:45:11.011 00:00:10.372 TCP 23.104.0.1:45770 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:45:08.071 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60646 10 6452 1 2025-11-12 13:41:56.138 00:05:03.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 13:41:56.141 00:05:03.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 13:46:08.246 00:00:10.677 TCP 1.101.0.1:3000 -> 22.102.0.1:48900 10 6452 1 2025-11-12 13:46:11.428 00:00:10.367 TCP 23.104.0.1:60714 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:46:27.398 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 13:46:27.465 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 13:47:08.962 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43440 10 6452 1 2025-11-12 13:47:11.830 00:00:10.372 TCP 23.104.0.1:33426 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:48:09.186 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45742 10 6452 1 2025-11-12 13:48:12.242 00:00:10.368 TCP 23.104.0.1:47790 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:49:09.402 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54230 10 6452 1 2025-11-12 13:49:12.648 00:00:10.363 TCP 23.104.0.1:59256 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:50:09.632 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59964 10 6452 1 2025-11-12 13:50:13.055 00:00:10.364 TCP 23.104.0.1:39534 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:51:09.861 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:48730 10 6452 1 2025-11-12 13:51:13.456 00:00:10.363 TCP 23.104.0.1:50140 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:51:27.392 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 13:51:27.606 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 13:47:56.142 00:05:03.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 13:47:56.139 00:05:03.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 13:52:10.092 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44774 10 6452 1 2025-11-12 13:52:13.859 00:00:10.372 TCP 23.104.0.1:39018 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:53:10.311 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41110 10 6452 1 2025-11-12 13:53:14.277 00:00:10.326 TCP 23.104.0.1:43756 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:54:10.530 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37106 10 6452 1 2025-11-12 13:54:14.645 00:00:10.365 TCP 23.104.0.1:49644 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:55:10.745 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38518 10 6452 1 2025-11-12 13:55:15.050 00:00:10.370 TCP 23.104.0.1:53420 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:56:10.963 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46668 10 6452 1 2025-11-12 13:56:15.466 00:00:10.366 TCP 23.104.0.1:33420 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:56:27.752 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 13:56:27.689 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 13:57:11.139 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44022 10 6452 1 2025-11-12 13:57:15.874 00:00:10.365 TCP 23.104.0.1:50310 -> 1.101.0.1:3000 11 1507 1 2025-11-12 13:53:56.142 00:05:03.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 13:53:56.145 00:05:03.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 13:58:11.363 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58380 10 6452 1 2025-11-12 13:58:16.275 00:00:10.365 TCP 23.104.0.1:42432 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498400, total packets: 1573, avg bps: 1105, avg pps: 0, avg bpp: 316 Time window: 2025-11-12 12:58:52 - 2025-11-12 13:58:59 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0046s User: 0.0018s Wall: 0.0022s flows/second: 73678.9 Runtime: 0.0022s