Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-12 18:58:51.353 00:00:10.369 TCP 23.104.0.1:55994 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:58:59.366 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51112 10 6452 1 2025-11-12 18:59:51.780 00:00:10.429 TCP 23.104.0.1:60460 -> 1.101.0.1:3000 11 1507 1 2025-11-12 18:59:59.581 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51456 10 6452 1 2025-11-12 19:00:52.253 00:00:10.369 TCP 23.104.0.1:53238 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:00:59.810 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48840 10 6452 1 2025-11-12 19:01:33.926 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 19:01:33.933 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 19:01:52.658 00:00:10.368 TCP 23.104.0.1:50944 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:02:00.037 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35320 10 6452 1 2025-11-12 19:02:53.097 00:00:10.365 TCP 23.104.0.1:38220 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:03:00.262 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42920 10 6452 1 2025-11-12 18:59:56.246 00:05:03.922 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 18:59:56.250 00:05:03.916 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 19:03:53.494 00:00:10.367 TCP 23.104.0.1:47492 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:04:00.475 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42668 10 6452 1 2025-11-12 19:04:53.897 00:00:10.369 TCP 23.104.0.1:32986 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:05:00.687 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36572 10 6452 1 2025-11-12 19:05:54.303 00:00:10.363 TCP 23.104.0.1:48180 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:06:00.902 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47374 12 6556 1 2025-11-12 19:06:34.044 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 19:06:33.740 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 19:06:54.702 00:00:10.363 TCP 23.104.0.1:51066 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:07:01.137 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40134 10 6452 1 2025-11-12 19:07:55.109 00:00:10.367 TCP 23.104.0.1:37826 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:08:01.357 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53066 10 6452 1 2025-11-12 19:08:55.510 00:00:10.381 TCP 23.104.0.1:44888 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:09:01.582 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50918 10 6452 1 2025-11-12 19:05:56.247 00:05:03.926 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 19:05:56.251 00:05:03.921 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 19:09:55.937 00:00:10.378 TCP 23.104.0.1:54166 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:10:01.794 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50532 10 6452 1 2025-11-12 19:10:56.353 00:00:10.330 TCP 23.104.0.1:36256 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:11:02.003 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:48464 10 6452 1 2025-11-12 19:11:34.096 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 19:11:34.047 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 19:11:56.717 00:00:10.376 TCP 23.104.0.1:32844 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:12:02.195 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36702 10 6452 1 2025-11-12 19:12:57.128 00:00:10.368 TCP 23.104.0.1:40706 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:13:02.406 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56558 10 6452 1 2025-11-12 19:13:57.539 00:00:10.364 TCP 23.104.0.1:50040 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:14:02.622 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:47872 10 6452 1 2025-11-12 19:14:57.937 00:00:10.373 TCP 23.104.0.1:38018 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:15:02.805 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42418 10 6452 1 2025-11-12 19:11:56.249 00:05:03.925 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 19:11:56.251 00:05:03.920 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 19:15:58.351 00:00:10.370 TCP 23.104.0.1:60200 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:16:03.021 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59678 10 6452 1 2025-11-12 19:16:34.238 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 19:16:34.247 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 19:16:58.761 00:00:10.379 TCP 23.104.0.1:41440 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:17:03.249 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45722 10 6452 1 2025-11-12 19:17:59.177 00:00:10.362 TCP 23.104.0.1:50418 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:18:03.465 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:41464 10 6452 1 2025-11-12 19:18:59.576 00:00:10.365 TCP 23.104.0.1:60998 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:19:03.639 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44368 10 6452 1 2025-11-12 19:19:59.980 00:00:10.371 TCP 23.104.0.1:44584 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:20:03.845 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33554 10 6452 1 2025-11-12 19:21:00.386 00:00:10.368 TCP 23.104.0.1:34576 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:21:04.077 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35490 10 6452 1 2025-11-12 19:21:34.173 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 19:21:34.238 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 19:17:56.249 00:05:03.925 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 19:17:56.252 00:05:03.921 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 19:22:00.781 00:00:10.360 TCP 23.104.0.1:40836 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:22:04.289 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58858 10 6452 1 2025-11-12 19:23:01.182 00:00:10.371 TCP 23.104.0.1:38372 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:23:04.508 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55882 10 6452 1 2025-11-12 19:24:01.591 00:00:10.417 TCP 23.104.0.1:51846 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:24:04.721 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35782 10 6452 1 2025-11-12 19:25:04.938 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:60352 10 6452 1 2025-11-12 19:25:02.052 00:00:10.360 TCP 23.104.0.1:39630 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:26:02.455 00:00:10.358 TCP 23.104.0.1:36222 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:26:05.176 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34800 10 6452 1 2025-11-12 19:26:34.451 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 19:26:34.327 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 19:27:05.389 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43380 10 6452 1 2025-11-12 19:27:02.853 00:00:10.337 TCP 23.104.0.1:56168 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:23:56.251 00:05:03.924 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 19:23:56.254 00:05:03.920 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 19:28:03.227 00:00:10.574 TCP 23.104.0.1:54186 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:28:05.601 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43878 10 6452 1 2025-11-12 19:29:05.821 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:44672 12 10369 1 2025-11-12 19:29:03.852 00:00:10.460 TCP 23.104.0.1:59928 -> 1.101.0.1:3000 15 1926 1 2025-11-12 19:30:04.344 00:00:10.372 TCP 23.104.0.1:48230 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:30:06.090 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34658 10 6452 1 2025-11-12 19:31:06.300 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36226 10 6452 1 2025-11-12 19:31:04.757 00:00:10.333 TCP 23.104.0.1:37016 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:31:34.827 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 19:31:34.947 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 19:32:06.519 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45756 10 6452 1 2025-11-12 19:32:05.132 00:00:10.346 TCP 23.104.0.1:58272 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:33:06.693 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:51146 10 6452 1 2025-11-12 19:33:05.526 00:00:10.323 TCP 23.104.0.1:47112 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:29:56.252 00:05:03.925 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 19:29:56.255 00:05:03.920 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 19:34:05.886 00:00:10.377 TCP 23.104.0.1:39308 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:34:06.894 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52454 10 6452 1 2025-11-12 19:35:06.300 00:00:10.370 TCP 23.104.0.1:60002 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:35:07.111 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40218 10 6452 1 2025-11-12 19:36:07.320 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41092 10 6452 1 2025-11-12 19:36:06.713 00:00:10.382 TCP 23.104.0.1:58286 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:36:34.614 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 19:36:34.664 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 19:37:07.536 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:36882 10 6452 1 2025-11-12 19:37:07.140 00:00:10.324 TCP 23.104.0.1:52494 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:38:07.719 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48836 10 6452 1 2025-11-12 19:38:07.503 00:00:10.368 TCP 23.104.0.1:42276 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:39:07.940 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:58204 10 6452 1 2025-11-12 19:39:07.909 00:00:10.376 TCP 23.104.0.1:48828 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:35:56.253 00:05:03.926 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 19:35:56.257 00:05:03.920 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 19:40:08.318 00:00:10.365 TCP 23.104.0.1:55824 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:40:08.180 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34026 10 6452 1 2025-11-12 19:41:08.393 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39044 10 6452 1 2025-11-12 19:41:08.718 00:00:10.882 TCP 23.104.0.1:54170 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:41:34.618 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 19:41:34.645 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 19:42:08.611 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57856 10 6452 1 2025-11-12 19:42:09.636 00:00:10.372 TCP 23.104.0.1:51934 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:43:10.050 00:00:10.372 TCP 23.104.0.1:45792 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:43:08.835 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51822 10 6452 1 2025-11-12 19:44:09.081 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55620 10 6452 1 2025-11-12 19:44:10.455 00:00:10.902 TCP 23.104.0.1:43744 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:45:09.294 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39388 10 6452 1 2025-11-12 19:45:11.394 00:00:10.365 TCP 23.104.0.1:37438 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:41:56.256 00:05:03.921 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 19:41:56.255 00:05:03.926 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 19:46:09.505 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52680 10 6452 1 2025-11-12 19:46:11.797 00:00:10.368 TCP 23.104.0.1:42312 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:46:34.794 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 19:46:34.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 19:47:09.720 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59772 10 6452 1 2025-11-12 19:47:12.201 00:00:10.368 TCP 23.104.0.1:35816 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:48:09.891 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46384 10 6452 1 2025-11-12 19:48:12.605 00:00:10.366 TCP 23.104.0.1:39968 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:49:10.110 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50972 10 6452 1 2025-11-12 19:49:13.011 00:00:10.364 TCP 23.104.0.1:37304 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:50:10.334 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:48782 10 6452 1 2025-11-12 19:50:13.414 00:00:10.367 TCP 23.104.0.1:48676 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:51:10.506 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45606 10 6452 1 2025-11-12 19:51:13.818 00:00:10.366 TCP 23.104.0.1:51536 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:51:35.468 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 19:51:35.420 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 19:47:56.255 00:05:03.928 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 19:47:56.259 00:05:03.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 19:52:10.714 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47686 10 6452 1 2025-11-12 19:52:14.222 00:00:10.374 TCP 23.104.0.1:56318 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:53:10.880 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52362 10 6452 1 2025-11-12 19:53:14.637 00:00:10.378 TCP 23.104.0.1:59362 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:54:11.110 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52688 10 6452 1 2025-11-12 19:54:15.059 00:00:10.366 TCP 23.104.0.1:45334 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:55:11.322 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46414 10 6452 1 2025-11-12 19:55:15.461 00:00:10.413 TCP 23.104.0.1:54882 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:56:11.541 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56746 10 6452 1 2025-11-12 19:56:15.915 00:00:10.378 TCP 23.104.0.1:33340 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:56:34.906 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 19:56:34.771 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 19:57:11.767 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59552 10 6452 1 2025-11-12 19:57:16.320 00:00:10.321 TCP 23.104.0.1:36258 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:53:56.258 00:05:03.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 19:53:56.261 00:05:03.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 19:58:16.675 00:00:10.322 TCP 23.104.0.1:56236 -> 1.101.0.1:3000 11 1507 1 2025-11-12 19:58:11.987 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55244 10 6452 1 Summary: total flows: 164, total bytes: 502788, total packets: 1580, avg bps: 1114, avg pps: 0, avg bpp: 318 Time window: 2025-11-12 18:58:51 - 2025-11-12 19:59:00 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0053s User: 0.0009s Wall: 0.0017s flows/second: 94409.3 Runtime: 0.0018s