Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 00:59:05.166 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 00:59:05.203 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 00:59:18.110 00:00:10.366 TCP 23.104.0.1:40710 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:59:31.647 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46994 10 6452 1 2025-11-18 01:00:18.512 00:00:10.363 TCP 23.104.0.1:58744 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:00:31.865 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36918 10 6452 1 2025-11-18 01:01:18.913 00:00:10.323 TCP 23.104.0.1:42670 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:01:32.087 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42048 10 6452 1 2025-11-18 01:02:19.275 00:00:10.363 TCP 23.104.0.1:45420 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:02:32.303 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55468 10 6452 1 2025-11-18 00:58:03.890 00:05:55.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 01:03:19.677 00:00:10.327 TCP 23.104.0.1:50392 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:03:32.518 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58764 10 6452 1 2025-11-18 00:59:03.887 00:05:55.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 01:04:05.255 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 01:04:05.296 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 01:04:20.045 00:00:10.366 TCP 23.104.0.1:35208 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:04:32.723 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51440 10 6452 1 2025-11-18 01:05:20.454 00:00:10.366 TCP 23.104.0.1:41544 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:05:32.941 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48664 10 6452 1 2025-11-18 01:06:20.858 00:00:10.339 TCP 23.104.0.1:43472 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:06:33.179 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47718 10 6452 1 2025-11-18 01:07:21.234 00:00:10.361 TCP 23.104.0.1:43404 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:07:33.394 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53024 10 6452 1 2025-11-18 01:08:21.630 00:00:10.363 TCP 23.104.0.1:51832 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:08:33.612 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55346 10 6452 1 2025-11-18 01:09:05.478 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 01:04:03.890 00:05:55.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 01:09:05.323 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 01:09:22.035 00:00:10.360 TCP 23.104.0.1:41026 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:09:33.826 00:00:11.332 TCP 1.101.0.1:3000 -> 22.102.0.1:39772 10 6452 1 2025-11-18 01:05:03.887 00:05:55.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 01:10:22.436 00:00:10.366 TCP 23.104.0.1:55238 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:10:35.196 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48186 10 6452 1 2025-11-18 01:11:22.842 00:00:10.348 TCP 23.104.0.1:34438 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:11:35.413 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40576 10 6452 1 2025-11-18 01:12:23.236 00:00:10.325 TCP 23.104.0.1:36996 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:12:35.631 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40244 10 6452 1 2025-11-18 01:13:23.603 00:00:10.364 TCP 23.104.0.1:57108 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:13:35.845 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52142 10 6452 1 2025-11-18 01:14:05.566 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 01:14:05.619 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 01:14:24.008 00:00:10.374 TCP 23.104.0.1:40508 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:14:36.076 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36610 10 6452 1 2025-11-18 01:10:03.891 00:05:55.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 01:15:24.425 00:00:10.368 TCP 23.104.0.1:34040 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:15:36.286 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41218 10 6452 1 2025-11-18 01:11:03.889 00:05:55.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 01:16:24.835 00:00:10.341 TCP 23.104.0.1:34750 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:16:36.503 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:48620 12 10369 1 2025-11-18 01:17:25.217 00:00:10.440 TCP 23.104.0.1:33490 -> 1.101.0.1:3000 15 1926 1 2025-11-18 01:17:36.749 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48604 10 6452 1 2025-11-18 01:18:25.697 00:00:11.522 TCP 23.104.0.1:60586 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:18:36.923 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:53912 10 6452 1 2025-11-18 01:19:05.519 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 01:19:05.427 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 01:19:27.266 00:00:10.362 TCP 23.104.0.1:44292 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:19:37.179 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50564 10 6452 1 2025-11-18 01:20:27.671 00:00:10.370 TCP 23.104.0.1:58464 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:20:37.351 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57052 10 6452 1 2025-11-18 01:16:03.894 00:05:55.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 01:21:28.101 00:00:10.365 TCP 23.104.0.1:45678 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:21:37.525 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51882 10 6452 1 2025-11-18 01:17:03.892 00:05:55.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 01:22:28.506 00:00:10.866 TCP 23.104.0.1:44558 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:22:37.742 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44360 10 6452 1 2025-11-18 01:23:29.411 00:00:10.368 TCP 23.104.0.1:58706 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:23:37.958 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:56252 10 6452 1 2025-11-18 01:24:06.034 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 01:24:05.813 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 01:24:29.811 00:00:10.363 TCP 23.104.0.1:58806 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:24:38.165 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52278 10 6452 1 2025-11-18 01:25:30.214 00:00:10.330 TCP 23.104.0.1:59474 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:25:38.375 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39306 10 6452 1 2025-11-18 01:26:30.584 00:00:10.366 TCP 23.104.0.1:43758 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:26:38.589 00:00:16.346 TCP 1.101.0.1:3000 -> 22.102.0.1:52114 10 6452 1 2025-11-18 01:22:03.896 00:05:55.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 01:27:30.987 00:00:10.367 TCP 23.104.0.1:56424 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:27:44.981 00:00:10.242 TCP 1.101.0.1:3000 -> 22.102.0.1:49854 11 6504 1 2025-11-18 01:23:03.894 00:05:55.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 01:28:31.397 00:00:10.365 TCP 23.104.0.1:46812 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:28:45.264 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46202 10 6452 1 2025-11-18 01:29:05.741 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 01:29:05.910 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 01:29:31.797 00:00:10.343 TCP 23.104.0.1:34832 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:29:45.432 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57270 10 6452 1 2025-11-18 01:30:32.181 00:00:10.333 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:30:45.653 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51190 10 6452 1 2025-11-18 01:31:32.551 00:00:10.366 TCP 23.104.0.1:45982 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:31:45.869 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48888 10 6452 1 2025-11-18 01:32:32.957 00:00:10.365 TCP 23.104.0.1:54908 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:32:46.099 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43842 10 6452 1 2025-11-18 01:28:03.898 00:05:55.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 01:33:33.363 00:00:10.360 TCP 23.104.0.1:45360 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:33:46.314 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46186 10 6452 1 2025-11-18 01:29:03.895 00:05:55.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 01:34:05.940 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 01:34:05.868 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 01:34:33.766 00:00:10.385 TCP 23.104.0.1:43726 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:34:46.533 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45072 10 6452 1 2025-11-18 01:35:34.187 00:00:10.372 TCP 23.104.0.1:50274 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:35:46.705 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48960 10 6452 1 2025-11-18 01:36:34.592 00:00:10.366 TCP 23.104.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:36:46.921 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38170 10 6452 1 2025-11-18 01:37:34.994 00:00:10.371 TCP 23.104.0.1:42764 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:37:47.105 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41558 10 6452 1 2025-11-18 01:38:35.403 00:00:10.368 TCP 23.104.0.1:39482 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:38:47.313 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39758 10 6452 1 2025-11-18 01:34:03.899 00:05:55.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 01:39:06.277 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 01:39:06.317 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 01:39:35.812 00:00:10.369 TCP 23.104.0.1:46424 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:39:47.482 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57922 10 6452 1 2025-11-18 01:35:03.897 00:05:55.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 01:40:36.231 00:00:10.626 TCP 23.104.0.1:49386 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:40:47.694 00:00:10.430 TCP 1.101.0.1:3000 -> 22.102.0.1:37050 10 6452 1 2025-11-18 01:41:36.907 00:00:10.365 TCP 23.104.0.1:42702 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:41:48.161 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 10 6452 1 2025-11-18 01:42:37.306 00:00:10.326 TCP 23.104.0.1:34668 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:42:48.371 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48094 10 6452 1 2025-11-18 01:43:37.666 00:00:10.369 TCP 23.104.0.1:58056 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:43:48.550 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54000 10 6452 1 2025-11-18 01:44:06.191 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 01:44:06.222 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 01:44:38.105 00:00:10.363 TCP 23.104.0.1:54098 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:44:48.769 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45698 10 6452 1 2025-11-18 01:40:03.910 00:05:55.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 01:45:38.504 00:00:10.364 TCP 23.104.0.1:45798 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:45:48.991 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:53258 10 6452 1 2025-11-18 01:41:03.908 00:05:55.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 01:46:38.905 00:00:10.369 TCP 23.104.0.1:49138 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:46:49.176 00:00:10.851 TCP 1.101.0.1:3000 -> 22.102.0.1:43928 10 6452 1 2025-11-18 01:47:39.312 00:00:10.362 TCP 23.104.0.1:39504 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:47:50.085 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58110 10 6452 1 2025-11-18 01:48:39.712 00:00:10.375 TCP 23.104.0.1:56020 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:48:50.299 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36588 10 6452 1 2025-11-18 01:49:06.287 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 01:49:06.244 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 01:49:40.123 00:00:10.375 TCP 23.104.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:49:50.537 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46598 10 6452 1 2025-11-18 01:50:40.535 00:00:10.361 TCP 23.104.0.1:33956 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:50:50.751 00:00:10.353 TCP 1.101.0.1:3000 -> 22.102.0.1:59238 10 6452 1 2025-11-18 01:46:03.911 00:05:55.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 01:51:40.940 00:00:10.337 TCP 23.104.0.1:39736 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:47:03.908 00:05:55.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 01:51:51.148 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55126 10 6452 1 2025-11-18 01:52:41.314 00:00:10.370 TCP 23.104.0.1:51314 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:52:51.355 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44014 10 6452 1 2025-11-18 01:53:41.719 00:00:11.198 TCP 23.104.0.1:35728 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:53:51.564 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42350 10 6452 1 2025-11-18 01:54:06.953 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 01:54:06.897 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 01:54:42.962 00:00:10.371 TCP 23.104.0.1:38856 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:54:51.747 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48226 10 6452 1 2025-11-18 01:55:43.371 00:00:10.328 TCP 23.104.0.1:43184 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:55:51.959 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:46386 10 6452 1 2025-11-18 01:56:43.746 00:00:10.442 TCP 23.104.0.1:58258 -> 1.101.0.1:3000 15 1926 1 2025-11-18 01:52:03.911 00:05:55.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 01:56:52.145 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49348 13 13949 1 2025-11-18 01:57:44.226 00:00:10.376 TCP 23.104.0.1:43266 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:53:03.910 00:05:55.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 01:57:52.385 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35186 10 6452 1 Summary: total flows: 162, total bytes: 502693, total packets: 1565, avg bps: 1100, avg pps: 0, avg bpp: 321 Time window: 2025-11-18 00:58:03 - 2025-11-18 01:58:59 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0029s User: 0.0038s Wall: 0.0025s flows/second: 65009.3 Runtime: 0.0025s