Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 16:58:51.668 00:00:10.372 TCP 23.104.0.1:40734 -> 1.101.0.1:3000 11 1507 1 2025-11-12 16:59:21.029 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53282 10 6452 1 2025-11-12 16:59:52.100 00:00:10.366 TCP 23.104.0.1:47462 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:00:21.244 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38022 10 6452 1 2025-11-12 17:00:52.503 00:00:10.363 TCP 23.104.0.1:34546 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:01:31.395 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 17:01:31.316 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 17:01:21.455 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:32816 10 6452 1 2025-11-12 17:01:52.903 00:00:10.362 TCP 23.104.0.1:41412 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:02:21.676 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48146 10 6452 1 2025-11-12 17:02:53.310 00:00:10.326 TCP 23.104.0.1:34682 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:03:21.901 00:00:19.465 TCP 1.101.0.1:3000 -> 22.102.0.1:44700 10 6452 1 2025-11-12 16:59:56.203 00:05:03.879 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 16:59:56.201 00:05:03.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 17:03:53.668 00:00:10.381 TCP 23.104.0.1:53292 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:04:31.406 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45228 10 6452 1 2025-11-12 17:04:54.106 00:00:10.366 TCP 23.104.0.1:35188 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:05:31.629 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50300 10 6452 1 2025-11-12 17:05:54.509 00:00:10.324 TCP 23.104.0.1:48996 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:06:31.512 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 17:06:31.501 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 17:06:31.846 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43148 10 6452 1 2025-11-12 17:06:54.871 00:00:10.368 TCP 23.104.0.1:51090 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:07:32.090 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46830 10 6452 1 2025-11-12 17:07:55.276 00:00:10.325 TCP 23.104.0.1:32862 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:08:32.295 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50080 10 6452 1 2025-11-12 17:08:55.639 00:00:10.367 TCP 23.104.0.1:57570 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:09:32.514 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41994 10 6452 1 2025-11-12 17:05:56.203 00:05:03.880 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 17:05:56.200 00:05:03.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 17:09:56.049 00:00:10.365 TCP 23.104.0.1:47792 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:10:32.730 00:00:11.433 TCP 1.101.0.1:3000 -> 22.102.0.1:50574 10 6452 1 2025-11-12 17:10:56.451 00:00:10.368 TCP 23.104.0.1:52646 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:11:31.482 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 17:11:31.509 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 17:11:34.198 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40888 10 6452 1 2025-11-12 17:11:56.862 00:00:10.370 TCP 23.104.0.1:60766 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:12:34.425 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34600 10 6452 1 2025-11-12 17:12:57.277 00:00:10.365 TCP 23.104.0.1:46718 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:13:34.600 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42958 10 6452 1 2025-11-12 17:13:57.681 00:00:10.687 TCP 23.104.0.1:35680 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:14:34.813 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35484 10 6452 1 2025-11-12 17:14:58.425 00:00:10.368 TCP 23.104.0.1:41612 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:15:35.033 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53096 10 6452 1 2025-11-12 17:11:56.206 00:05:03.880 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 17:11:56.203 00:05:03.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 17:15:58.830 00:00:10.367 TCP 23.104.0.1:53236 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:16:31.846 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 17:16:32.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 17:16:35.252 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47056 10 6452 1 2025-11-12 17:16:59.225 00:00:10.364 TCP 23.104.0.1:42694 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:17:35.460 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:54198 10 6452 1 2025-11-12 17:17:59.625 00:00:10.365 TCP 23.104.0.1:48194 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:18:35.651 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42532 10 6452 1 2025-11-12 17:19:00.066 00:00:10.363 TCP 23.104.0.1:52834 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:19:35.865 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38262 10 6452 1 2025-11-12 17:20:00.468 00:00:10.364 TCP 23.104.0.1:33844 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:20:36.100 00:00:10.338 TCP 1.101.0.1:3000 -> 22.102.0.1:49276 10 6452 1 2025-11-12 17:21:00.885 00:00:10.366 TCP 23.104.0.1:59308 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:21:31.750 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 17:21:31.681 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 17:21:36.480 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39732 10 6452 1 2025-11-12 17:17:56.206 00:05:03.883 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 17:17:56.204 00:05:03.887 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 17:22:01.287 00:00:10.326 TCP 23.104.0.1:58106 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:22:36.695 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36826 10 6452 1 2025-11-12 17:23:01.656 00:00:10.366 TCP 23.104.0.1:53256 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:23:36.868 00:00:10.697 TCP 1.101.0.1:3000 -> 22.102.0.1:49038 10 6452 1 2025-11-12 17:24:02.079 00:00:10.415 TCP 23.104.0.1:52130 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:24:37.613 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37046 10 6452 1 2025-11-12 17:25:02.530 00:00:10.366 TCP 23.104.0.1:38328 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:25:37.786 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49532 10 6452 1 2025-11-12 17:26:02.931 00:00:10.383 TCP 23.104.0.1:60158 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:26:31.925 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 17:26:31.819 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 17:26:37.996 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:58848 10 6452 1 2025-11-12 17:27:03.368 00:00:10.324 TCP 23.104.0.1:56922 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:27:38.183 00:00:10.412 TCP 1.101.0.1:3000 -> 22.102.0.1:43618 10 6452 1 2025-11-12 17:23:56.212 00:05:03.879 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 17:23:56.214 00:05:03.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 17:28:03.734 00:00:10.370 TCP 23.104.0.1:36028 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:28:38.635 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49806 10 6452 1 2025-11-12 17:29:04.136 00:00:10.493 TCP 23.104.0.1:34324 -> 1.101.0.1:3000 15 1926 1 2025-11-12 17:29:38.850 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45438 12 10375 1 2025-11-12 17:30:04.666 00:00:10.324 TCP 23.104.0.1:42048 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:30:39.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33710 10 6452 1 2025-11-12 17:31:05.034 00:00:10.364 TCP 23.104.0.1:37202 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:31:31.906 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 17:31:32.037 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 17:31:39.313 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55776 10 6452 1 2025-11-12 17:32:05.434 00:00:10.361 TCP 23.104.0.1:56666 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:32:39.529 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38366 10 6452 1 2025-11-12 17:33:05.831 00:00:12.849 TCP 23.104.0.1:43022 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:33:39.753 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50492 10 6452 1 2025-11-12 17:29:56.215 00:05:03.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 17:29:56.213 00:05:03.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 17:34:08.738 00:00:10.328 TCP 23.104.0.1:46486 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:34:39.996 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59910 10 6452 1 2025-11-12 17:35:09.106 00:00:10.366 TCP 23.104.0.1:51506 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:35:40.219 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47914 10 6452 1 2025-11-12 17:36:09.508 00:00:10.325 TCP 23.104.0.1:41002 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:36:31.871 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 17:36:31.850 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 17:36:40.438 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60502 10 6452 1 2025-11-12 17:37:09.868 00:00:10.373 TCP 23.104.0.1:40288 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:37:40.648 00:00:10.536 TCP 1.101.0.1:3000 -> 22.102.0.1:55914 10 6452 1 2025-11-12 17:38:10.283 00:00:10.367 TCP 23.104.0.1:46116 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:38:41.217 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41514 10 6452 1 2025-11-12 17:39:10.690 00:00:10.324 TCP 23.104.0.1:42082 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:39:41.430 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55964 10 6452 1 2025-11-12 17:35:56.222 00:05:03.871 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 17:35:56.220 00:05:03.876 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 17:40:11.062 00:00:10.376 TCP 23.104.0.1:38380 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:40:41.652 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55834 10 6452 1 2025-11-12 17:41:11.478 00:00:10.376 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:41:32.445 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 17:41:31.987 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 17:41:41.874 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:33416 10 6452 1 2025-11-12 17:42:11.893 00:00:10.603 TCP 23.104.0.1:34416 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:42:42.118 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52646 10 6452 1 2025-11-12 17:43:12.535 00:00:10.324 TCP 23.104.0.1:53384 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:43:42.335 00:00:10.232 TCP 1.101.0.1:3000 -> 22.102.0.1:39924 10 6452 1 2025-11-12 17:44:12.900 00:00:11.911 TCP 23.104.0.1:58194 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:44:42.604 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35094 10 6452 1 2025-11-12 17:45:14.860 00:00:10.380 TCP 23.104.0.1:39998 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:45:42.821 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6452 1 2025-11-12 17:41:56.225 00:05:03.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 17:41:56.222 00:05:03.875 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 17:46:15.278 00:00:10.363 TCP 23.104.0.1:34120 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:46:32.144 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 17:46:32.261 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 17:46:43.056 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57048 10 6452 1 2025-11-12 17:47:15.682 00:00:10.366 TCP 23.104.0.1:59684 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:47:43.283 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:53834 10 6452 1 2025-11-12 17:48:16.105 00:00:10.437 TCP 23.104.0.1:36308 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:48:43.512 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44150 10 6452 1 2025-11-12 17:49:16.583 00:00:10.365 TCP 23.104.0.1:36094 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:49:43.728 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49498 10 6452 1 2025-11-12 17:50:16.986 00:00:10.366 TCP 23.104.0.1:40178 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:50:43.944 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57826 10 6452 1 2025-11-12 17:51:17.390 00:00:10.334 TCP 23.104.0.1:60358 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:51:32.502 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 17:51:32.524 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 17:51:44.177 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:59378 10 6452 1 2025-11-12 17:47:56.226 00:05:03.874 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 17:47:56.223 00:05:03.879 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 17:52:17.754 00:00:10.711 TCP 23.104.0.1:41546 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:52:44.348 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55148 10 6452 1 2025-11-12 17:53:18.503 00:00:10.322 TCP 23.104.0.1:58206 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:53:44.556 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49960 10 6452 1 2025-11-12 17:54:18.860 00:00:10.331 TCP 23.104.0.1:42194 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:54:44.768 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56568 10 6452 1 2025-11-12 17:55:19.230 00:00:10.367 TCP 23.104.0.1:39466 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:55:44.977 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:45448 10 6452 1 2025-11-12 17:56:32.662 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 17:56:19.633 00:00:10.367 TCP 23.104.0.1:53022 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:56:32.719 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 17:56:45.216 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46110 10 6452 1 2025-11-12 17:57:20.047 00:00:10.367 TCP 23.104.0.1:43502 -> 1.101.0.1:3000 11 1507 1 2025-11-12 17:57:45.436 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43522 10 6452 1 2025-11-12 17:53:56.225 00:05:03.878 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 17:53:56.228 00:05:03.873 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 17:58:20.455 00:00:10.319 TCP 23.104.0.1:36086 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496238, total packets: 1568, avg bps: 1100, avg pps: 0, avg bpp: 316 Time window: 2025-11-12 16:58:51 - 2025-11-12 17:59:00 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0030s Wall: 0.0022s flows/second: 72769.7 Runtime: 0.0023s