Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 10:58:58.000 00:00:10.360 TCP 23.104.0.1:56292 -> 1.101.0.1:3000 11 1507 1 2025-11-18 10:59:17.321 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 10:59:17.557 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 10:59:12.071 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35216 10 6452 1 2025-11-18 10:59:58.401 00:00:10.366 TCP 23.104.0.1:37670 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:00:12.295 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44056 10 6452 1 2025-11-18 11:00:58.809 00:00:10.366 TCP 23.104.0.1:33966 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:01:12.522 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57008 10 6452 1 2025-11-18 10:57:59.295 00:05:04.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 11:01:59.215 00:00:10.363 TCP 23.104.0.1:42056 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:02:12.740 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35598 10 6452 1 2025-11-18 10:58:59.297 00:05:04.880 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 11:02:59.621 00:00:10.365 TCP 23.104.0.1:44670 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:03:12.959 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40900 10 6452 1 2025-11-18 11:04:00.021 00:00:10.320 TCP 23.104.0.1:39974 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:04:17.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 11:04:17.423 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 11:04:13.193 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:58322 10 6452 1 2025-11-18 11:05:00.386 00:00:10.325 TCP 23.104.0.1:42880 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:05:13.360 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60926 10 6452 1 2025-11-18 11:06:00.748 00:00:10.396 TCP 23.104.0.1:59490 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:06:13.537 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41944 10 6452 1 2025-11-18 11:07:01.184 00:00:10.368 TCP 23.104.0.1:39582 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:07:13.748 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44576 10 6452 1 2025-11-18 11:03:59.294 00:05:04.886 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 11:08:01.593 00:00:10.364 TCP 23.104.0.1:39196 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:08:13.964 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:49662 10 6452 1 2025-11-18 11:04:59.298 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 11:09:02.000 00:00:10.380 TCP 23.104.0.1:34570 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:09:17.577 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 11:09:17.621 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 11:09:14.149 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41372 10 6452 1 2025-11-18 11:10:02.418 00:00:10.325 TCP 23.104.0.1:60264 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:10:14.360 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51720 10 6452 1 2025-11-18 11:11:02.783 00:00:10.367 TCP 23.104.0.1:58268 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:11:14.571 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57148 10 6452 1 2025-11-18 11:12:03.186 00:00:10.368 TCP 23.104.0.1:49220 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:12:14.783 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44940 10 6452 1 2025-11-18 11:13:03.593 00:00:10.362 TCP 23.104.0.1:54996 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:13:14.996 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32866 10 6452 1 2025-11-18 11:09:59.297 00:05:04.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 11:14:03.997 00:00:10.324 TCP 23.104.0.1:52846 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:14:17.607 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 11:14:17.445 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 11:14:15.216 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56164 10 6452 1 2025-11-18 11:10:59.299 00:05:04.899 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 11:15:04.359 00:00:10.362 TCP 23.104.0.1:44954 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:15:15.425 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46944 10 6452 1 2025-11-18 11:16:04.761 00:00:10.376 TCP 23.104.0.1:45968 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:16:15.642 00:00:10.362 TCP 1.101.0.1:3000 -> 22.102.0.1:36948 10 6452 1 2025-11-18 11:17:05.174 00:00:10.367 TCP 23.104.0.1:43848 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:17:16.067 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53318 10 6452 1 2025-11-18 11:18:05.580 00:00:10.362 TCP 23.104.0.1:36064 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:18:16.277 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:58220 10 6452 1 2025-11-18 11:19:05.980 00:00:10.330 TCP 23.104.0.1:45950 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:19:18.928 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 11:19:18.850 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 11:19:16.512 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49470 10 6452 1 2025-11-18 11:15:59.299 00:05:04.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 11:20:06.356 00:00:10.361 TCP 23.104.0.1:34196 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:20:16.737 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46550 10 6452 1 2025-11-18 11:16:59.302 00:05:04.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 11:21:06.755 00:00:10.389 TCP 23.104.0.1:43984 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:21:16.956 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52516 12 6556 1 2025-11-18 11:22:07.178 00:00:10.365 TCP 23.104.0.1:56158 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:22:17.196 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41852 10 6452 1 2025-11-18 11:23:07.582 00:00:11.107 TCP 23.104.0.1:50136 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:23:17.420 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:36940 10 6452 1 2025-11-18 11:24:17.849 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 11:24:08.729 00:00:10.629 TCP 23.104.0.1:36230 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:24:17.744 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 11:24:17.605 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33972 10 6452 1 2025-11-18 11:25:09.399 00:00:10.321 TCP 23.104.0.1:33906 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:25:17.823 00:00:10.980 TCP 1.101.0.1:3000 -> 22.102.0.1:55680 10 6452 1 2025-11-18 11:21:59.300 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 11:26:09.756 00:00:10.387 TCP 23.104.0.1:52718 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:26:18.842 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51956 10 6452 1 2025-11-18 11:22:59.308 00:05:04.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 11:27:10.190 00:00:10.388 TCP 23.104.0.1:48186 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:27:19.071 00:00:16.026 TCP 1.101.0.1:3000 -> 22.102.0.1:36740 10 6452 1 2025-11-18 11:28:10.635 00:00:10.374 TCP 23.104.0.1:60476 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:28:25.135 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52932 10 6452 1 2025-11-18 11:29:17.800 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 11:29:17.736 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 11:29:11.059 00:00:11.986 TCP 23.104.0.1:52540 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:29:25.311 00:00:10.512 TCP 1.101.0.1:3000 -> 22.102.0.1:36892 10 6452 1 2025-11-18 11:30:13.107 00:00:10.366 TCP 23.104.0.1:44686 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:30:25.861 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:58018 10 6452 1 2025-11-18 11:31:13.513 00:00:10.361 TCP 23.104.0.1:60754 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:31:26.103 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52822 10 6452 1 2025-11-18 11:27:59.306 00:05:04.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 11:32:13.915 00:00:10.357 TCP 23.104.0.1:43880 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:32:26.320 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57628 10 6452 1 2025-11-18 11:28:59.313 00:05:04.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 11:33:14.315 00:00:10.323 TCP 23.104.0.1:41354 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:33:26.533 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54612 10 6452 1 2025-11-18 11:34:17.901 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 11:34:18.037 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 11:34:14.684 00:00:10.324 TCP 23.104.0.1:50576 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:34:26.754 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48970 10 6452 1 2025-11-18 11:35:15.060 00:00:10.364 TCP 23.104.0.1:35298 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:35:26.969 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:60440 10 6452 1 2025-11-18 11:36:15.467 00:00:10.367 TCP 23.104.0.1:40084 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:36:27.153 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43196 10 6452 1 2025-11-18 11:37:15.872 00:00:10.367 TCP 23.104.0.1:59464 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:37:27.377 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39714 10 6452 1 2025-11-18 11:33:59.311 00:05:04.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 11:38:16.279 00:00:10.368 TCP 23.104.0.1:37922 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:38:27.563 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35892 10 6452 1 2025-11-18 11:34:59.310 00:05:04.892 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 11:39:18.191 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 11:39:17.879 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 11:39:16.690 00:00:10.374 TCP 23.104.0.1:42924 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:39:27.740 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46864 10 6452 1 2025-11-18 11:40:17.107 00:00:10.364 TCP 23.104.0.1:47426 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:40:27.956 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:49258 12 6556 1 2025-11-18 11:41:17.505 00:00:10.390 TCP 23.104.0.1:51196 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:41:28.188 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55482 10 6452 1 2025-11-18 11:42:17.915 00:00:10.368 TCP 23.104.0.1:39376 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:42:28.395 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43456 10 6452 1 2025-11-18 11:43:18.318 00:00:10.368 TCP 23.104.0.1:42754 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:43:28.610 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43850 10 6452 1 2025-11-18 11:39:59.309 00:05:04.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 11:44:18.269 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 11:44:18.284 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 11:44:18.723 00:00:10.370 TCP 23.104.0.1:39968 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:44:28.817 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36954 10 6452 1 2025-11-18 11:40:59.311 00:05:04.892 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 11:45:19.132 00:00:10.370 TCP 23.104.0.1:46058 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:45:29.042 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49220 10 6452 1 2025-11-18 11:46:19.536 00:00:10.364 TCP 23.104.0.1:47346 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:46:29.255 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56516 10 6452 1 2025-11-18 11:47:19.940 00:00:10.333 TCP 23.104.0.1:41848 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:47:29.480 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53002 10 6452 1 2025-11-18 11:48:20.310 00:00:10.365 TCP 23.104.0.1:38682 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:48:29.656 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44594 10 6452 1 2025-11-18 11:49:18.273 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 11:49:18.419 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 11:49:20.709 00:00:10.359 TCP 23.104.0.1:56068 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:49:29.863 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56896 10 6452 1 2025-11-18 11:45:59.316 00:05:04.891 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 11:50:21.109 00:00:10.362 TCP 23.104.0.1:55082 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:50:30.052 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42636 10 6452 1 2025-11-18 11:46:59.319 00:05:04.887 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 11:51:21.511 00:00:10.368 TCP 23.104.0.1:49258 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:51:30.262 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44106 10 6452 1 2025-11-18 11:52:21.918 00:00:10.368 TCP 23.104.0.1:54154 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:52:30.474 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59144 10 6452 1 2025-11-18 11:53:22.323 00:00:10.373 TCP 23.104.0.1:54500 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:53:30.688 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57006 10 6452 1 2025-11-18 11:54:18.426 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 11:54:18.256 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 11:54:22.736 00:00:10.367 TCP 23.104.0.1:46346 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:54:30.897 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56610 10 6452 1 2025-11-18 11:55:23.141 00:00:10.370 TCP 23.104.0.1:41074 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:55:31.110 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51812 10 6452 1 2025-11-18 11:51:59.327 00:05:04.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 11:56:23.545 00:00:10.325 TCP 23.104.0.1:60856 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:56:31.325 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59266 10 6452 1 2025-11-18 11:52:59.331 00:05:04.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 11:57:23.903 00:00:10.369 TCP 23.104.0.1:56372 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:57:31.552 00:00:13.239 TCP 1.101.0.1:3000 -> 22.102.0.1:42334 10 6452 1 2025-11-18 11:58:24.311 00:00:10.364 TCP 23.104.0.1:36880 -> 1.101.0.1:3000 11 1507 1 2025-11-18 11:58:34.842 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55280 10 6452 1 Summary: total flows: 164, total bytes: 498556, total packets: 1576, avg bps: 1094, avg pps: 0, avg bpp: 316 Time window: 2025-11-18 10:57:59 - 2025-11-18 11:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0051s User: 0.0010s Wall: 0.0023s flows/second: 72697.7 Runtime: 0.0023s