Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 12:58:50.354 00:00:10.321 TCP 23.104.0.1:43210 -> 1.101.0.1:3000 11 1507 1 2025-11-18 12:59:19.579 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 12:59:19.751 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 12:59:18.081 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48490 10 6452 1 2025-11-18 12:59:50.711 00:00:10.374 TCP 23.104.0.1:57300 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:00:18.298 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49606 10 6452 1 2025-11-18 13:00:51.123 00:00:10.366 TCP 23.104.0.1:38024 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:01:18.524 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58248 10 6452 1 2025-11-18 13:01:51.526 00:00:10.361 TCP 23.104.0.1:37910 -> 1.101.0.1:3000 11 1507 1 2025-11-18 12:57:59.342 00:05:04.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 13:02:18.745 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54304 10 6452 1 2025-11-18 13:02:51.927 00:00:10.388 TCP 23.104.0.1:37334 -> 1.101.0.1:3000 11 1507 1 2025-11-18 12:58:59.353 00:05:04.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 13:03:18.932 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38552 10 6452 1 2025-11-18 13:03:52.353 00:00:10.366 TCP 23.104.0.1:37228 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:04:20.348 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 13:04:19.975 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 13:04:19.144 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50386 10 6452 1 2025-11-18 13:04:52.758 00:00:10.384 TCP 23.104.0.1:44468 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:05:19.361 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46092 10 6452 1 2025-11-18 13:05:53.177 00:00:10.358 TCP 23.104.0.1:51554 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:06:19.573 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43860 10 6452 1 2025-11-18 13:06:53.577 00:00:10.373 TCP 23.104.0.1:35298 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:07:19.811 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35020 10 6452 1 2025-11-18 13:07:53.989 00:00:10.365 TCP 23.104.0.1:36082 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:03:59.352 00:05:04.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 13:08:20.042 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57834 10 6452 1 2025-11-18 13:08:54.389 00:00:10.363 TCP 23.104.0.1:55226 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:04:59.353 00:05:04.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 13:09:19.964 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 13:09:19.907 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 13:09:20.253 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48090 10 6452 1 2025-11-18 13:09:54.793 00:00:10.365 TCP 23.104.0.1:55574 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:10:20.465 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55346 10 6452 1 2025-11-18 13:10:55.200 00:00:10.364 TCP 23.104.0.1:59860 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:11:20.635 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56228 10 6452 1 2025-11-18 13:11:55.604 00:00:10.367 TCP 23.104.0.1:57440 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:12:20.851 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60604 10 6452 1 2025-11-18 13:12:56.014 00:00:10.365 TCP 23.104.0.1:59618 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:13:21.080 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51648 10 6452 1 2025-11-18 13:13:56.418 00:00:10.367 TCP 23.104.0.1:40540 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:09:59.354 00:05:04.895 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 13:14:20.205 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 13:14:20.305 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 13:14:21.320 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38388 10 6452 1 2025-11-18 13:10:59.356 00:05:04.890 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 13:14:56.828 00:00:10.375 TCP 23.104.0.1:36090 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:15:21.508 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52250 10 6452 1 2025-11-18 13:15:57.240 00:00:10.359 TCP 23.104.0.1:51066 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:16:21.724 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36094 10 6452 1 2025-11-18 13:16:57.637 00:00:10.457 TCP 23.104.0.1:34080 -> 1.101.0.1:3000 15 1926 1 2025-11-18 13:17:21.949 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60528 12 10369 1 2025-11-18 13:17:58.137 00:00:10.372 TCP 23.104.0.1:41024 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:18:22.174 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38308 10 6452 1 2025-11-18 13:18:58.551 00:00:10.364 TCP 23.104.0.1:54098 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:19:20.191 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 13:19:20.082 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 13:19:22.385 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49444 10 6452 1 2025-11-18 13:15:59.362 00:05:04.886 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 13:19:58.959 00:00:10.327 TCP 23.104.0.1:52292 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:20:22.596 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60962 10 6452 1 2025-11-18 13:16:59.365 00:05:04.881 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 13:20:59.323 00:00:10.374 TCP 23.104.0.1:53074 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:21:22.804 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35076 10 6452 1 2025-11-18 13:21:59.745 00:00:10.367 TCP 23.104.0.1:57868 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:22:23.021 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57106 10 6452 1 2025-11-18 13:23:00.149 00:00:10.369 TCP 23.104.0.1:46638 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:23:23.200 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57176 10 6452 1 2025-11-18 13:24:00.551 00:00:10.361 TCP 23.104.0.1:43520 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:24:20.166 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 13:24:20.242 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 13:24:23.370 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46892 10 6452 1 2025-11-18 13:25:00.953 00:00:10.749 TCP 23.104.0.1:48736 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:25:23.579 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54234 10 6452 1 2025-11-18 13:21:59.363 00:05:04.886 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 13:26:01.741 00:00:10.368 TCP 23.104.0.1:57224 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:26:23.785 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:59126 10 6452 1 2025-11-18 13:22:59.366 00:05:04.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 13:27:02.142 00:00:10.364 TCP 23.104.0.1:53218 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:27:24.042 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49394 10 6452 1 2025-11-18 13:28:02.542 00:00:11.223 TCP 23.104.0.1:47046 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:28:24.254 00:00:10.297 TCP 1.101.0.1:3000 -> 22.102.0.1:36082 10 6452 1 2025-11-18 13:29:03.807 00:00:10.370 TCP 23.104.0.1:44636 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:29:20.399 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 13:29:20.236 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 13:29:24.595 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40118 10 6452 1 2025-11-18 13:30:04.217 00:00:10.644 TCP 23.104.0.1:49172 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:30:24.767 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55840 10 6452 1 2025-11-18 13:31:04.904 00:00:10.366 TCP 23.104.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:31:24.980 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:57784 10 6452 1 2025-11-18 13:27:59.364 00:05:04.894 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 13:32:05.310 00:00:10.462 TCP 23.104.0.1:42336 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:32:25.164 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56924 10 6452 1 2025-11-18 13:28:59.366 00:05:04.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 13:33:05.816 00:00:10.329 TCP 23.104.0.1:46688 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:33:25.387 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60398 10 6452 1 2025-11-18 13:34:06.193 00:00:10.372 TCP 23.104.0.1:36186 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:34:20.728 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 13:34:20.758 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 13:34:25.561 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50912 10 6452 1 2025-11-18 13:35:06.626 00:00:10.366 TCP 23.104.0.1:47254 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:35:25.772 00:00:10.361 TCP 1.101.0.1:3000 -> 22.102.0.1:34156 10 6452 1 2025-11-18 13:36:07.033 00:00:10.366 TCP 23.104.0.1:44730 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:36:26.177 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:50118 10 6452 1 2025-11-18 13:37:07.438 00:00:10.367 TCP 23.104.0.1:55710 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:37:26.434 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52050 10 6452 1 2025-11-18 13:33:59.372 00:05:04.887 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 13:38:07.842 00:00:10.351 TCP 23.104.0.1:55058 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:38:26.611 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49932 10 6452 1 2025-11-18 13:34:59.373 00:05:04.882 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 13:39:20.504 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 13:39:08.229 00:00:10.363 TCP 23.104.0.1:57566 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:39:20.416 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 13:39:26.826 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55976 10 6452 1 2025-11-18 13:40:08.630 00:00:10.364 TCP 23.104.0.1:59196 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:40:27.039 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51168 10 6452 1 2025-11-18 13:41:09.032 00:00:10.362 TCP 23.104.0.1:38302 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:41:27.254 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55104 10 6452 1 2025-11-18 13:42:09.430 00:00:10.395 TCP 23.104.0.1:37958 -> 1.101.0.1:3000 15 1926 1 2025-11-18 13:42:27.462 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:33470 12 10375 1 2025-11-18 13:43:09.870 00:00:10.367 TCP 23.104.0.1:39870 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:43:27.657 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51432 10 6452 1 2025-11-18 13:39:59.372 00:05:04.893 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 13:44:20.502 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 13:44:10.277 00:00:10.323 TCP 23.104.0.1:56522 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:44:20.461 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 13:44:27.870 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45598 10 6452 1 2025-11-18 13:40:59.375 00:05:04.887 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 13:45:10.637 00:00:10.375 TCP 23.104.0.1:40106 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:45:28.059 00:00:10.845 TCP 1.101.0.1:3000 -> 22.102.0.1:41162 10 6452 1 2025-11-18 13:46:11.054 00:00:10.372 TCP 23.104.0.1:59710 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:46:28.942 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:53740 10 6452 1 2025-11-18 13:47:11.472 00:00:10.367 TCP 23.104.0.1:35146 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:47:29.137 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35854 10 6452 1 2025-11-18 13:48:11.872 00:00:10.371 TCP 23.104.0.1:57428 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:48:29.345 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39904 10 6452 1 2025-11-18 13:49:20.780 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 13:49:20.788 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 13:49:12.289 00:00:10.368 TCP 23.104.0.1:59426 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:49:29.557 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56998 10 6452 1 2025-11-18 13:45:59.373 00:05:04.892 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 13:50:12.695 00:00:10.368 TCP 23.104.0.1:44356 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:50:29.771 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38968 10 6452 1 2025-11-18 13:46:59.384 00:05:04.879 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 13:51:13.105 00:00:10.373 TCP 23.104.0.1:47696 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:51:29.990 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:57976 10 6452 1 2025-11-18 13:52:13.515 00:00:10.841 TCP 23.104.0.1:39312 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:52:30.183 00:00:22.229 TCP 1.101.0.1:3000 -> 22.102.0.1:54370 10 6452 1 2025-11-18 13:53:14.396 00:00:10.374 TCP 23.104.0.1:50834 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:53:42.462 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59812 10 6452 1 2025-11-18 13:54:20.588 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 13:54:20.889 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 13:54:14.815 00:00:10.370 TCP 23.104.0.1:35256 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:54:42.687 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35036 10 6452 1 2025-11-18 13:55:15.222 00:00:10.365 TCP 23.104.0.1:36400 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:55:42.909 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38138 10 6452 1 2025-11-18 13:51:59.384 00:05:04.883 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 13:56:15.626 00:00:10.323 TCP 23.104.0.1:56794 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:56:43.130 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36898 10 6452 1 2025-11-18 13:52:59.386 00:05:04.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 13:57:15.989 00:00:10.330 TCP 23.104.0.1:46014 -> 1.101.0.1:3000 11 1507 1 2025-11-18 13:57:43.343 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:35950 10 6452 1 2025-11-18 13:58:16.358 00:00:10.314 TCP 23.104.0.1:60338 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500574, total packets: 1574, avg bps: 1104, avg pps: 0, avg bpp: 318 Time window: 2025-11-18 12:57:59 - 2025-11-18 13:58:26 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0023s Wall: 0.0019s flows/second: 83896.4 Runtime: 0.0020s