Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 01:58:44.676 00:00:10.376 TCP 23.104.0.1:49672 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:58:52.559 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49648 10 6452 1 2025-11-18 01:59:06.312 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 01:59:06.593 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 01:59:45.105 00:00:10.322 TCP 23.104.0.1:34204 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:59:52.774 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49836 10 6452 1 2025-11-18 02:00:45.466 00:00:10.365 TCP 23.104.0.1:39746 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:00:52.987 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:50196 10 6452 1 2025-11-18 02:01:45.871 00:00:10.325 TCP 23.104.0.1:35918 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:01:53.174 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44412 10 6452 1 2025-11-18 02:02:46.233 00:00:10.371 TCP 23.104.0.1:56110 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:58:03.914 00:05:55.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 02:02:53.341 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34086 10 6452 1 2025-11-18 02:03:46.640 00:00:13.018 TCP 23.104.0.1:39370 -> 1.101.0.1:3000 11 1507 1 2025-11-18 01:59:03.911 00:05:55.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 02:04:06.478 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 02:03:53.553 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54508 10 6452 1 2025-11-18 02:04:06.610 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:04:49.696 00:00:10.369 TCP 23.104.0.1:58538 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:04:53.770 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39232 10 6452 1 2025-11-18 02:05:50.112 00:00:10.329 TCP 23.104.0.1:40832 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:05:53.981 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43550 10 6452 1 2025-11-18 02:06:50.477 00:00:10.386 TCP 23.104.0.1:60188 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:06:54.202 00:00:10.717 TCP 1.101.0.1:3000 -> 22.102.0.1:34482 10 6452 1 2025-11-18 02:07:50.899 00:00:10.368 TCP 23.104.0.1:59280 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:07:54.954 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43056 10 6452 1 2025-11-18 02:08:51.310 00:00:10.365 TCP 23.104.0.1:35754 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:04:03.914 00:05:55.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 02:08:55.187 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36762 10 6452 1 2025-11-18 02:09:07.355 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:09:07.210 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 02:05:03.912 00:05:55.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 02:09:51.715 00:00:10.377 TCP 23.104.0.1:53988 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:09:55.361 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34012 10 6452 1 2025-11-18 02:10:52.127 00:00:10.365 TCP 23.104.0.1:35780 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:10:55.578 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:38062 13 6584 1 2025-11-18 02:11:55.795 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48850 12 10375 1 2025-11-18 02:11:52.532 00:00:10.402 TCP 23.104.0.1:39126 -> 1.101.0.1:3000 15 1926 1 2025-11-18 02:12:52.977 00:00:10.374 TCP 23.104.0.1:36866 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:12:56.043 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57170 10 6452 1 2025-11-18 02:13:56.258 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36476 10 6452 1 2025-11-18 02:13:53.387 00:00:10.359 TCP 23.104.0.1:55390 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:14:07.181 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:14:07.306 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 02:10:03.917 00:05:55.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 02:14:53.815 00:00:10.366 TCP 23.104.0.1:50394 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:14:56.431 00:00:10.450 TCP 1.101.0.1:3000 -> 22.102.0.1:45944 10 6452 1 2025-11-18 02:11:03.915 00:05:55.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 02:15:54.219 00:00:10.969 TCP 23.104.0.1:50894 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:15:56.926 00:00:10.286 TCP 1.101.0.1:3000 -> 22.102.0.1:47374 10 6452 1 2025-11-18 02:16:55.228 00:00:10.378 TCP 23.104.0.1:47182 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:16:57.251 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56740 10 6452 1 2025-11-18 02:17:55.647 00:00:10.375 TCP 23.104.0.1:41930 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:17:57.464 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38494 10 6452 1 2025-11-18 02:19:06.856 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:18:56.064 00:00:10.374 TCP 23.104.0.1:49348 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:19:06.795 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 02:18:57.635 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46936 10 6452 1 2025-11-18 02:19:56.482 00:00:10.366 TCP 23.104.0.1:38738 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:19:57.810 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55736 12 6556 1 2025-11-18 02:16:03.918 00:05:55.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 02:20:56.899 00:00:10.374 TCP 23.104.0.1:48142 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:20:58.043 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46502 10 6452 1 2025-11-18 02:17:03.915 00:05:55.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 02:21:57.313 00:00:10.365 TCP 23.104.0.1:46890 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:21:58.268 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45176 10 6452 1 2025-11-18 02:22:57.710 00:00:10.362 TCP 23.104.0.1:49546 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:22:58.482 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35646 10 6452 1 2025-11-18 02:24:06.828 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 02:24:06.885 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:23:58.110 00:00:10.368 TCP 23.104.0.1:33712 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:23:58.697 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58894 10 6452 1 2025-11-18 02:24:58.518 00:00:10.370 TCP 23.104.0.1:37762 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:24:58.917 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36762 10 6452 1 2025-11-18 02:25:59.133 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47394 10 6452 1 2025-11-18 02:25:58.929 00:00:10.389 TCP 23.104.0.1:50590 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:22:03.919 00:05:55.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 02:26:59.347 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50756 10 6452 1 2025-11-18 02:26:59.359 00:00:10.367 TCP 23.104.0.1:39944 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:23:03.917 00:05:55.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 02:27:59.520 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55354 10 6452 1 2025-11-18 02:27:59.758 00:00:10.333 TCP 23.104.0.1:35422 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:29:07.073 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:29:00.127 00:00:10.358 TCP 23.104.0.1:43056 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:28:59.732 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45408 10 6452 1 2025-11-18 02:29:07.155 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 02:30:00.525 00:00:11.007 TCP 23.104.0.1:53442 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:29:59.948 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37694 10 6452 1 2025-11-18 02:31:00.179 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34832 10 6452 1 2025-11-18 02:31:01.570 00:00:10.365 TCP 23.104.0.1:50814 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:32:00.350 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50060 10 6452 1 2025-11-18 02:32:01.975 00:00:10.372 TCP 23.104.0.1:36738 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:28:03.926 00:05:55.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 02:33:00.562 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:34348 10 6452 1 2025-11-18 02:33:02.383 00:00:10.369 TCP 23.104.0.1:52864 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:29:03.923 00:05:55.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 02:34:07.156 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:34:00.809 00:00:10.292 TCP 1.101.0.1:3000 -> 22.102.0.1:38990 10 6452 1 2025-11-18 02:34:07.166 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 02:34:02.786 00:00:10.853 TCP 23.104.0.1:57994 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:35:01.142 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55024 10 6452 1 2025-11-18 02:35:03.672 00:00:10.323 TCP 23.104.0.1:59864 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:36:01.361 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46980 10 6452 1 2025-11-18 02:36:04.032 00:00:10.363 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:37:01.529 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53278 10 6452 1 2025-11-18 02:37:04.434 00:00:10.372 TCP 23.104.0.1:56334 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:38:01.750 00:00:10.515 TCP 1.101.0.1:3000 -> 22.102.0.1:58722 10 6452 1 2025-11-18 02:38:04.844 00:00:10.387 TCP 23.104.0.1:33844 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:34:03.932 00:05:55.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 02:39:07.275 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:39:07.278 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 02:39:02.308 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49964 10 6452 1 2025-11-18 02:39:05.265 00:00:10.324 TCP 23.104.0.1:40880 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:35:03.929 00:05:55.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 02:40:05.631 00:00:10.366 TCP 23.104.0.1:48416 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:40:02.520 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57104 10 6452 1 2025-11-18 02:41:06.047 00:00:10.368 TCP 23.104.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:41:02.738 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36420 10 6452 1 2025-11-18 02:42:06.452 00:00:10.323 TCP 23.104.0.1:43832 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:42:02.952 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52768 10 6452 1 2025-11-18 02:43:03.174 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51424 10 6452 1 2025-11-18 02:43:06.809 00:00:10.364 TCP 23.104.0.1:43776 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:44:07.355 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 02:44:07.181 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:44:03.381 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49336 10 6452 1 2025-11-18 02:44:07.213 00:00:10.320 TCP 23.104.0.1:50110 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:40:03.932 00:05:55.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 02:45:03.590 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45330 10 6452 1 2025-11-18 02:45:07.570 00:00:10.324 TCP 23.104.0.1:43270 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:41:03.930 00:05:55.160 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 02:46:03.805 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40150 10 6452 1 2025-11-18 02:46:07.936 00:00:10.389 TCP 23.104.0.1:55642 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:47:04.038 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38310 10 6452 1 2025-11-18 02:47:08.353 00:00:10.320 TCP 23.104.0.1:58026 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:48:04.263 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48806 10 6452 1 2025-11-18 02:48:08.712 00:00:10.322 TCP 23.104.0.1:36934 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:49:07.363 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:49:07.199 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 02:49:04.434 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49340 10 6452 1 2025-11-18 02:49:09.099 00:00:10.324 TCP 23.104.0.1:40626 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:50:04.648 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38092 10 6452 1 2025-11-18 02:50:09.458 00:00:10.325 TCP 23.104.0.1:36790 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:46:03.935 00:05:55.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 02:51:04.863 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:59852 10 6452 1 2025-11-18 02:51:09.822 00:00:10.363 TCP 23.104.0.1:46114 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:47:03.931 00:05:55.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 02:52:05.075 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51666 10 6452 1 2025-11-18 02:52:10.220 00:00:10.367 TCP 23.104.0.1:41874 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:53:05.250 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57134 10 6452 1 2025-11-18 02:53:10.632 00:00:10.375 TCP 23.104.0.1:60492 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:54:07.677 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 02:54:07.673 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 02:54:05.468 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42290 10 6452 1 2025-11-18 02:54:11.051 00:00:10.378 TCP 23.104.0.1:59198 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:55:05.682 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55752 10 6452 1 2025-11-18 02:55:11.465 00:00:10.363 TCP 23.104.0.1:55892 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:56:05.852 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36876 10 6452 1 2025-11-18 02:56:11.871 00:00:10.368 TCP 23.104.0.1:47634 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:52:03.934 00:05:55.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 02:57:06.081 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33778 10 6452 1 2025-11-18 02:57:12.279 00:00:10.333 TCP 23.104.0.1:55884 -> 1.101.0.1:3000 11 1507 1 2025-11-18 02:53:03.933 00:05:55.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 02:58:06.301 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49758 10 6452 1 2025-11-18 02:58:12.648 00:00:12.159 TCP 23.104.0.1:48914 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502926, total packets: 1583, avg bps: 1100, avg pps: 0, avg bpp: 317 Time window: 2025-11-18 01:58:03 - 2025-11-18 02:58:59 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0026s Wall: 0.0025s flows/second: 65132.6 Runtime: 0.0025s