Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 01:58:57.780 00:00:10.364 TCP 23.104.0.1:41718 -> 1.101.0.1:3000 11 1507 1 2025-11-17 01:59:04.963 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55224 12 6556 1 2025-11-17 01:59:58.181 00:00:10.368 TCP 23.104.0.1:40412 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:00:05.194 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33012 10 6452 1 2025-11-17 02:00:58.585 00:00:10.364 TCP 23.104.0.1:49796 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:01:05.373 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35236 10 6452 1 2025-11-17 02:01:58.993 00:00:10.370 TCP 23.104.0.1:39068 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:02:05.589 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45554 10 6452 1 2025-11-17 01:58:58.407 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 02:02:59.400 00:00:10.589 TCP 23.104.0.1:43522 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:03:05.805 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:41168 10 6452 1 2025-11-17 02:03:37.893 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 02:03:38.041 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 01:59:58.411 00:05:04.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 02:04:00.031 00:00:10.325 TCP 23.104.0.1:54998 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:04:06.081 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59144 10 6452 1 2025-11-17 02:05:00.395 00:00:14.221 TCP 23.104.0.1:41234 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:05:06.302 00:00:10.856 TCP 1.101.0.1:3000 -> 22.102.0.1:41442 10 6452 1 2025-11-17 02:06:04.672 00:00:10.361 TCP 23.104.0.1:41534 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:06:07.196 00:00:10.254 TCP 1.101.0.1:3000 -> 22.102.0.1:43532 10 6452 1 2025-11-17 02:07:05.103 00:00:10.772 TCP 23.104.0.1:35178 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:07:07.500 00:00:10.649 TCP 1.101.0.1:3000 -> 22.102.0.1:57610 10 6452 1 2025-11-17 02:08:05.912 00:00:10.333 TCP 23.104.0.1:37370 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:08:08.183 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58352 10 6452 1 2025-11-17 02:08:37.969 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 02:08:37.780 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 02:04:58.409 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 02:09:06.280 00:00:10.364 TCP 23.104.0.1:39376 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:09:08.389 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44694 10 6452 1 2025-11-17 02:05:58.412 00:05:04.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 02:10:08.562 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53040 12 6556 1 2025-11-17 02:10:06.687 00:00:10.326 TCP 23.104.0.1:54976 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:11:07.060 00:00:10.369 TCP 23.104.0.1:39424 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:11:08.773 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49094 10 6452 1 2025-11-17 02:12:08.995 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59982 10 6452 1 2025-11-17 02:12:07.472 00:00:10.361 TCP 23.104.0.1:41670 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:13:07.877 00:00:10.343 TCP 23.104.0.1:51868 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:13:09.217 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36778 10 6452 1 2025-11-17 02:13:37.801 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 02:13:38.020 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 02:14:08.262 00:00:10.319 TCP 23.104.0.1:53642 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:14:09.428 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35694 10 6452 1 2025-11-17 02:10:58.412 00:05:04.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 02:15:08.620 00:00:10.325 TCP 23.104.0.1:36942 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:15:09.644 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60688 10 6452 1 2025-11-17 02:11:58.414 00:05:04.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 02:16:09.855 00:00:14.111 TCP 1.101.0.1:3000 -> 22.102.0.1:49994 10 6452 1 2025-11-17 02:16:08.984 00:00:14.978 TCP 23.104.0.1:44336 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:17:14.022 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37308 12 10375 1 2025-11-17 02:17:14.021 00:00:10.444 TCP 23.104.0.1:38332 -> 1.101.0.1:3000 15 1926 1 2025-11-17 02:18:14.227 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57114 10 6452 1 2025-11-17 02:18:14.502 00:00:10.358 TCP 23.104.0.1:42156 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:18:37.918 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 02:18:37.966 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 02:19:14.901 00:00:10.372 TCP 23.104.0.1:36000 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:19:14.462 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33070 10 6452 1 2025-11-17 02:20:14.672 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47908 10 6452 1 2025-11-17 02:20:15.311 00:00:10.324 TCP 23.104.0.1:38688 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:16:58.412 00:05:04.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 02:21:14.890 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39358 10 6452 1 2025-11-17 02:21:15.678 00:00:10.364 TCP 23.104.0.1:43574 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:17:58.420 00:05:04.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 02:22:15.112 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58136 10 6452 1 2025-11-17 02:22:16.103 00:00:10.364 TCP 23.104.0.1:54884 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:23:16.510 00:00:10.323 TCP 23.104.0.1:37788 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:23:15.328 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50724 10 6452 1 2025-11-17 02:23:37.985 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 02:23:37.994 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 02:24:15.547 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59404 10 6452 1 2025-11-17 02:24:16.871 00:00:10.365 TCP 23.104.0.1:57030 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:25:15.758 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36138 10 6452 1 2025-11-17 02:25:17.273 00:00:10.367 TCP 23.104.0.1:51064 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:26:15.940 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35660 10 6452 1 2025-11-17 02:26:17.681 00:00:10.704 TCP 23.104.0.1:44944 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:22:58.427 00:05:04.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 02:27:16.169 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59882 10 6452 1 2025-11-17 02:27:18.425 00:00:10.364 TCP 23.104.0.1:59560 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:23:58.429 00:05:04.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 02:28:16.389 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57706 10 6452 1 2025-11-17 02:28:18.827 00:00:10.387 TCP 23.104.0.1:43198 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:28:38.062 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 02:28:38.143 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 02:29:16.608 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50480 10 6452 1 2025-11-17 02:29:19.251 00:00:10.597 TCP 23.104.0.1:53328 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:30:16.822 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:52146 10 6452 1 2025-11-17 02:30:19.878 00:00:10.387 TCP 23.104.0.1:56942 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:31:20.308 00:00:10.363 TCP 23.104.0.1:41750 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:31:16.994 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50842 10 6452 1 2025-11-17 02:32:17.211 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40354 10 6452 1 2025-11-17 02:32:20.711 00:00:10.370 TCP 23.104.0.1:34632 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:28:58.426 00:05:04.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 02:33:21.115 00:00:10.366 TCP 23.104.0.1:58280 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:33:17.427 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47028 10 6452 1 2025-11-17 02:33:38.272 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 02:33:38.311 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 02:29:58.431 00:05:04.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 02:34:21.524 00:00:10.376 TCP 23.104.0.1:49568 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:34:17.641 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52410 10 6452 1 2025-11-17 02:35:17.848 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44772 10 6452 1 2025-11-17 02:35:21.937 00:00:10.341 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:36:18.035 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46462 10 6452 1 2025-11-17 02:36:22.320 00:00:10.368 TCP 23.104.0.1:36222 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:37:18.258 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49784 10 6452 1 2025-11-17 02:37:22.731 00:00:10.330 TCP 23.104.0.1:49798 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:38:18.482 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54502 10 6452 1 2025-11-17 02:38:23.106 00:00:10.368 TCP 23.104.0.1:43422 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:38:38.541 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 02:38:38.361 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 02:34:58.429 00:05:04.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 02:39:18.706 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35724 10 6452 1 2025-11-17 02:39:23.514 00:00:10.330 TCP 23.104.0.1:36774 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:35:58.432 00:05:04.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 02:40:18.944 00:00:13.252 TCP 1.101.0.1:3000 -> 22.102.0.1:33216 10 6452 1 2025-11-17 02:40:23.898 00:00:10.382 TCP 23.104.0.1:33256 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:41:24.335 00:00:15.388 TCP 23.104.0.1:50612 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:41:22.238 00:00:17.329 TCP 1.101.0.1:3000 -> 22.102.0.1:52412 10 6452 1 2025-11-17 02:42:29.622 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32878 10 6452 1 2025-11-17 02:42:29.783 00:00:10.323 TCP 23.104.0.1:44858 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:43:38.476 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 02:43:29.836 00:00:10.874 TCP 1.101.0.1:3000 -> 22.102.0.1:52012 11 6504 1 2025-11-17 02:43:38.541 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 02:43:30.145 00:00:10.739 TCP 23.104.0.1:35320 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:44:30.924 00:00:10.374 TCP 23.104.0.1:59076 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:44:30.751 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42404 10 6452 1 2025-11-17 02:40:58.430 00:05:04.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 02:45:31.333 00:00:10.365 TCP 23.104.0.1:35374 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:45:30.960 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45646 10 6452 1 2025-11-17 02:41:58.433 00:05:04.816 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 02:46:31.189 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35438 10 6452 1 2025-11-17 02:46:31.738 00:00:10.374 TCP 23.104.0.1:53478 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:47:31.368 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39998 10 6452 1 2025-11-17 02:47:32.143 00:00:10.365 TCP 23.104.0.1:49426 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:48:38.626 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 02:48:31.590 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41966 10 6452 1 2025-11-17 02:48:38.716 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 02:48:32.544 00:00:10.365 TCP 23.104.0.1:45206 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:49:31.807 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36118 10 6452 1 2025-11-17 02:49:32.944 00:00:10.370 TCP 23.104.0.1:54144 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:50:32.015 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42950 10 6452 1 2025-11-17 02:50:33.347 00:00:10.366 TCP 23.104.0.1:33162 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:46:58.430 00:05:04.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 02:51:33.752 00:00:10.378 TCP 23.104.0.1:58212 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:51:32.234 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59344 10 6452 1 2025-11-17 02:47:58.433 00:05:04.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 02:52:32.403 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35016 10 6452 1 2025-11-17 02:52:34.169 00:00:10.362 TCP 23.104.0.1:38040 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:53:38.608 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 02:53:32.628 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36872 10 6452 1 2025-11-17 02:53:38.755 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 02:53:34.571 00:00:10.370 TCP 23.104.0.1:49972 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:54:32.842 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34436 10 6452 1 2025-11-17 02:54:34.986 00:00:10.370 TCP 23.104.0.1:51116 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:55:35.389 00:00:10.367 TCP 23.104.0.1:40166 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:55:33.079 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56682 10 6452 1 2025-11-17 02:56:35.790 00:00:10.340 TCP 23.104.0.1:40196 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:56:33.294 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39620 10 6452 1 2025-11-17 02:52:58.431 00:05:04.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 02:57:33.517 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45446 10 6452 1 2025-11-17 02:57:36.168 00:00:10.372 TCP 23.104.0.1:34930 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:53:58.435 00:05:04.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 02:58:38.656 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 02:58:36.575 00:00:10.370 TCP 23.104.0.1:52000 -> 1.101.0.1:3000 11 1507 1 2025-11-17 02:58:38.653 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 02:58:33.727 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35430 10 6452 1 Summary: total flows: 164, total bytes: 502950, total packets: 1583, avg bps: 1115, avg pps: 0, avg bpp: 317 Time window: 2025-11-17 01:58:57 - 2025-11-17 02:59:03 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0027s Wall: 0.0023s flows/second: 70478.1 Runtime: 0.0023s