Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 12:59:05.766 00:00:10.374 TCP 23.104.0.1:58420 -> 1.101.0.1:3000 11 1507 1 2025-11-17 12:59:14.448 00:00:10.366 TCP 1.101.0.1:3000 -> 22.102.0.1:43420 10 6452 1 2025-11-17 13:00:06.181 00:00:10.362 TCP 23.104.0.1:36542 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:00:14.856 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:51240 13 6608 1 2025-11-17 13:01:06.583 00:00:10.876 TCP 23.104.0.1:46006 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:01:15.149 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39984 10 6452 1 2025-11-17 13:02:07.496 00:00:10.737 TCP 23.104.0.1:60054 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:02:15.361 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42918 10 6452 1 2025-11-17 12:58:58.717 00:05:04.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 13:03:08.267 00:00:10.362 TCP 23.104.0.1:41734 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:03:15.572 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:33390 10 6452 1 2025-11-17 13:03:51.040 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 13:03:50.963 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 12:59:58.718 00:05:04.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 13:04:08.665 00:00:10.367 TCP 23.104.0.1:36450 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:04:15.830 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41228 10 6452 1 2025-11-17 13:05:09.101 00:00:10.364 TCP 23.104.0.1:42132 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:05:16.011 00:00:10.930 TCP 1.101.0.1:3000 -> 22.102.0.1:50682 10 6452 1 2025-11-17 13:06:09.503 00:00:10.359 TCP 23.104.0.1:41064 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:06:16.979 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57502 10 6452 1 2025-11-17 13:07:09.907 00:00:10.362 TCP 23.104.0.1:53252 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:07:17.217 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33112 10 6452 1 2025-11-17 13:08:10.310 00:00:10.362 TCP 23.104.0.1:57114 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:08:17.433 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:36402 10 6452 1 2025-11-17 13:08:50.951 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 13:08:51.184 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 13:04:58.718 00:05:04.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 13:09:10.712 00:00:10.382 TCP 23.104.0.1:49292 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:09:17.615 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:43590 10 6452 1 2025-11-17 13:05:58.721 00:05:04.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 13:10:11.128 00:00:10.364 TCP 23.104.0.1:49074 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:10:17.820 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54366 10 6452 1 2025-11-17 13:11:11.537 00:00:10.363 TCP 23.104.0.1:34186 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:11:18.048 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36022 10 6452 1 2025-11-17 13:12:11.939 00:00:10.378 TCP 23.104.0.1:34948 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:12:18.264 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51198 10 6452 1 2025-11-17 13:13:12.355 00:00:10.324 TCP 23.104.0.1:37026 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:13:18.507 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33780 10 6452 1 2025-11-17 13:13:50.892 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 13:13:51.328 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 13:14:12.715 00:00:10.368 TCP 23.104.0.1:39746 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:14:18.719 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51116 10 6452 1 2025-11-17 13:10:58.726 00:05:04.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 13:15:13.120 00:00:10.362 TCP 23.104.0.1:50550 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:15:18.938 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45318 10 6452 1 2025-11-17 13:11:58.728 00:05:04.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 13:16:13.524 00:00:10.394 TCP 23.104.0.1:53020 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:16:19.171 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40036 10 6452 1 2025-11-17 13:17:13.937 00:00:10.381 TCP 23.104.0.1:58554 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:17:19.392 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57594 10 6452 1 2025-11-17 13:18:14.350 00:00:10.366 TCP 23.104.0.1:48500 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:18:19.613 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51470 10 6452 1 2025-11-17 13:18:51.230 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 13:18:51.287 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 13:19:14.758 00:00:10.347 TCP 23.104.0.1:36304 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:19:19.832 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49812 10 6452 1 2025-11-17 13:20:15.147 00:00:10.362 TCP 23.104.0.1:33114 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:20:20.017 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48236 10 6452 1 2025-11-17 13:16:58.727 00:05:04.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 13:21:15.552 00:00:10.321 TCP 23.104.0.1:34432 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:21:20.241 00:00:10.770 TCP 1.101.0.1:3000 -> 22.102.0.1:45422 10 6452 1 2025-11-17 13:17:58.730 00:05:04.858 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 13:22:15.913 00:00:10.446 TCP 23.104.0.1:49446 -> 1.101.0.1:3000 15 1926 1 2025-11-17 13:22:21.074 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:60632 12 10375 1 2025-11-17 13:23:16.401 00:00:10.371 TCP 23.104.0.1:51122 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:23:21.318 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42574 10 6452 1 2025-11-17 13:23:51.974 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 13:23:51.492 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 13:24:16.809 00:00:10.370 TCP 23.104.0.1:53726 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:24:21.530 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39920 10 6452 1 2025-11-17 13:25:21.760 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38678 10 6452 1 2025-11-17 13:25:17.217 00:00:10.363 TCP 23.104.0.1:48652 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:26:17.616 00:00:10.323 TCP 23.104.0.1:60964 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:26:21.986 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:59580 10 6452 1 2025-11-17 13:22:58.728 00:05:04.864 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 13:27:17.978 00:00:10.389 TCP 23.104.0.1:35788 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:27:22.242 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42558 10 6452 1 2025-11-17 13:23:58.731 00:05:04.860 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 13:28:18.404 00:00:10.367 TCP 23.104.0.1:53920 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:28:22.461 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45388 10 6452 1 2025-11-17 13:28:51.160 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 13:28:51.463 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 13:29:18.813 00:00:10.363 TCP 23.104.0.1:35218 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:29:22.679 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42262 10 6452 1 2025-11-17 13:30:19.221 00:00:10.327 TCP 23.104.0.1:39484 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:30:22.901 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49778 10 6452 1 2025-11-17 13:31:19.581 00:00:10.369 TCP 23.104.0.1:59472 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:31:23.117 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47754 10 6452 1 2025-11-17 13:32:19.985 00:00:10.373 TCP 23.104.0.1:46112 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:32:23.365 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:49016 10 6452 1 2025-11-17 13:28:58.730 00:05:04.866 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 13:33:20.395 00:00:10.367 TCP 23.104.0.1:53606 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:33:23.592 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46316 10 6452 1 2025-11-17 13:33:51.667 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 13:33:51.706 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 13:29:58.733 00:05:04.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 13:34:20.800 00:00:10.373 TCP 23.104.0.1:38026 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:34:23.817 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56790 10 6452 1 2025-11-17 13:35:21.204 00:00:10.367 TCP 23.104.0.1:40320 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:35:24.055 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53972 10 6452 1 2025-11-17 13:36:21.604 00:00:10.362 TCP 23.104.0.1:50334 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:36:24.273 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:32868 10 6452 1 2025-11-17 13:37:24.495 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36840 10 6452 1 2025-11-17 13:37:22.002 00:00:10.365 TCP 23.104.0.1:49134 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:38:22.402 00:00:10.361 TCP 23.104.0.1:35506 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:38:24.717 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51788 10 6452 1 2025-11-17 13:38:51.874 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 13:38:51.974 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 13:34:58.750 00:05:04.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 13:39:24.934 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37370 10 6452 1 2025-11-17 13:39:22.801 00:00:10.368 TCP 23.104.0.1:38090 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:35:58.749 00:05:04.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 13:40:25.144 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57912 10 6452 1 2025-11-17 13:40:23.207 00:00:10.367 TCP 23.104.0.1:58314 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:41:23.615 00:00:10.364 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:41:25.313 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44322 10 6452 1 2025-11-17 13:42:24.018 00:00:10.371 TCP 23.104.0.1:35098 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:42:25.534 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37482 10 6452 1 2025-11-17 13:43:24.433 00:00:10.366 TCP 23.104.0.1:41098 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:43:25.761 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42080 10 6452 1 2025-11-17 13:43:52.382 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 13:43:52.220 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 13:44:24.840 00:00:10.353 TCP 23.104.0.1:48698 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:44:25.996 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:43324 10 6452 1 2025-11-17 13:40:58.748 00:05:04.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 13:45:26.193 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55862 10 6452 1 2025-11-17 13:45:25.231 00:00:10.364 TCP 23.104.0.1:54522 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:41:58.750 00:05:04.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 13:46:25.628 00:00:10.465 TCP 23.104.0.1:50770 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:46:26.420 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51092 10 6452 1 2025-11-17 13:47:26.149 00:00:10.368 TCP 23.104.0.1:59202 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:47:26.652 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49410 10 6452 1 2025-11-17 13:48:26.863 00:00:10.705 TCP 1.101.0.1:3000 -> 22.102.0.1:35020 10 6452 1 2025-11-17 13:48:26.552 00:00:11.124 TCP 23.104.0.1:50418 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:48:51.580 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 13:48:51.714 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 13:49:27.602 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38682 10 6452 1 2025-11-17 13:49:27.692 00:00:10.365 TCP 23.104.0.1:57696 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:50:28.113 00:00:10.374 TCP 23.104.0.1:35840 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:50:27.813 00:00:10.398 TCP 1.101.0.1:3000 -> 22.102.0.1:55660 10 6452 1 2025-11-17 13:46:58.749 00:05:04.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 13:51:28.524 00:00:10.358 TCP 23.104.0.1:35616 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:51:28.250 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34576 10 6452 1 2025-11-17 13:47:58.759 00:05:04.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 13:52:28.922 00:00:10.436 TCP 23.104.0.1:39042 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:52:28.461 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35694 10 6452 1 2025-11-17 13:53:29.399 00:00:10.371 TCP 23.104.0.1:51852 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:53:28.638 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52672 10 6452 1 2025-11-17 13:53:51.971 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 13:53:51.959 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 13:54:29.805 00:00:10.370 TCP 23.104.0.1:57684 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:54:28.845 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33632 10 6452 1 2025-11-17 13:55:30.211 00:00:10.369 TCP 23.104.0.1:39046 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:55:29.031 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52802 10 6452 1 2025-11-17 13:56:29.253 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37960 10 6452 1 2025-11-17 13:56:30.617 00:00:10.330 TCP 23.104.0.1:52716 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:52:58.750 00:05:04.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 13:57:29.472 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39854 10 6452 1 2025-11-17 13:57:30.981 00:00:10.335 TCP 23.104.0.1:49174 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:53:58.753 00:05:04.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 13:58:29.688 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33218 10 6452 1 2025-11-17 13:58:31.351 00:00:10.368 TCP 23.104.0.1:55924 -> 1.101.0.1:3000 11 1507 1 2025-11-17 13:58:51.946 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 502594, total packets: 1578, avg bps: 1115, avg pps: 0, avg bpp: 318 Time window: 2025-11-17 12:58:58 - 2025-11-17 13:59:03 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0018s User: 0.0036s Wall: 0.0024s flows/second: 68456.1 Runtime: 0.0024s