Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 18:58:55.467 00:00:10.360 TCP 23.104.0.1:57278 -> 1.101.0.1:3000 11 1507 1 2025-11-18 18:58:57.802 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52158 10 6452 1 2025-11-18 18:59:26.895 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 18:59:26.916 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 18:59:55.863 00:00:10.371 TCP 23.104.0.1:35610 -> 1.101.0.1:3000 11 1507 1 2025-11-18 18:59:58.029 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:39314 10 6452 1 2025-11-18 19:00:56.274 00:00:11.927 TCP 23.104.0.1:42292 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:00:58.259 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:57492 10 6452 1 2025-11-18 18:57:59.541 00:05:04.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 19:01:58.445 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34026 10 6452 1 2025-11-18 19:01:58.241 00:00:10.363 TCP 23.104.0.1:51250 -> 1.101.0.1:3000 11 1507 1 2025-11-18 18:58:59.544 00:05:04.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 19:02:58.662 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:43976 12 10584 1 2025-11-18 19:02:58.642 00:00:10.455 TCP 23.104.0.1:48070 -> 1.101.0.1:3000 15 1926 1 2025-11-18 19:03:59.136 00:00:10.323 TCP 23.104.0.1:53898 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:03:58.912 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37918 10 6661 1 2025-11-18 19:04:26.913 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 19:04:26.951 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 19:04:59.125 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50932 10 6661 1 2025-11-18 19:04:59.497 00:00:10.351 TCP 23.104.0.1:44496 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:05:59.348 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52908 10 6661 1 2025-11-18 19:05:59.880 00:00:10.386 TCP 23.104.0.1:60078 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:07:00.297 00:00:10.366 TCP 23.104.0.1:48630 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:06:59.563 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41530 10 6661 1 2025-11-18 19:03:59.541 00:05:04.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 19:07:59.785 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37136 10 6661 1 2025-11-18 19:08:00.695 00:00:10.367 TCP 23.104.0.1:48608 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:04:59.552 00:05:04.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 19:09:00.001 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38888 10 6661 1 2025-11-18 19:09:01.108 00:00:10.371 TCP 23.104.0.1:35150 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:09:27.143 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 19:09:27.131 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 19:10:01.517 00:00:10.374 TCP 23.104.0.1:51846 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:10:00.221 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60096 10 6661 1 2025-11-18 19:11:00.391 00:00:10.453 TCP 1.101.0.1:3000 -> 22.102.0.1:55744 10 6661 1 2025-11-18 19:11:01.930 00:00:10.394 TCP 23.104.0.1:59576 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:12:00.879 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46932 10 6661 1 2025-11-18 19:12:02.362 00:00:10.364 TCP 23.104.0.1:55174 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:13:01.109 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60856 10 6661 1 2025-11-18 19:13:02.763 00:00:10.374 TCP 23.104.0.1:37430 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:09:59.551 00:05:04.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 19:14:01.332 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44938 10 6661 1 2025-11-18 19:14:03.179 00:00:10.360 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:14:27.765 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 19:14:27.397 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 19:10:59.553 00:05:04.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 19:15:01.560 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35190 10 6661 1 2025-11-18 19:15:03.579 00:00:10.366 TCP 23.104.0.1:44104 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:16:01.777 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34232 10 6661 1 2025-11-18 19:16:03.983 00:00:10.369 TCP 23.104.0.1:52166 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:17:01.993 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34132 10 6661 1 2025-11-18 19:17:04.390 00:00:10.364 TCP 23.104.0.1:51714 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:18:02.174 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:46690 10 6661 1 2025-11-18 19:18:04.792 00:00:10.371 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:19:05.205 00:00:10.365 TCP 23.104.0.1:34196 -> 1.101.0.1:3000 12 1559 1 2025-11-18 19:19:02.411 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54274 10 6661 1 2025-11-18 19:19:27.133 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 19:19:27.048 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 19:15:59.554 00:05:04.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 19:20:05.609 00:00:10.364 TCP 23.104.0.1:39776 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:20:02.646 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36946 10 6661 1 2025-11-18 19:16:59.557 00:05:04.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 19:21:06.017 00:00:10.378 TCP 23.104.0.1:39840 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:21:02.867 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56966 10 6661 1 2025-11-18 19:22:03.106 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50900 10 6661 1 2025-11-18 19:22:06.439 00:00:10.359 TCP 23.104.0.1:58990 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:23:03.321 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36916 10 6661 1 2025-11-18 19:23:06.838 00:00:10.391 TCP 23.104.0.1:58876 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:24:03.538 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42356 10 6661 1 2025-11-18 19:24:07.265 00:00:10.365 TCP 23.104.0.1:34324 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:24:27.532 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 19:24:27.303 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 19:25:03.762 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:55126 10 6661 1 2025-11-18 19:25:07.672 00:00:10.373 TCP 23.104.0.1:39856 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:21:59.560 00:05:04.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 19:26:03.993 00:00:10.904 TCP 1.101.0.1:3000 -> 22.102.0.1:57212 10 6661 1 2025-11-18 19:26:08.110 00:00:23.837 TCP 23.104.0.1:37044 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:22:59.563 00:05:04.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 19:27:04.931 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:48852 10 6661 1 2025-11-18 19:27:22.018 00:00:10.362 TCP 23.104.0.1:46988 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:28:05.174 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6661 1 2025-11-18 19:28:22.421 00:00:10.360 TCP 23.104.0.1:58884 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:29:05.424 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44446 10 6661 1 2025-11-18 19:29:27.446 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 19:29:27.528 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 19:29:22.823 00:00:10.942 TCP 23.104.0.1:56764 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:30:05.642 00:00:10.715 TCP 1.101.0.1:3000 -> 22.102.0.1:39224 10 6661 1 2025-11-18 19:30:23.806 00:00:15.641 TCP 23.104.0.1:50120 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:31:06.390 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35018 10 6661 1 2025-11-18 19:31:29.496 00:00:10.320 TCP 23.104.0.1:60170 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:27:59.563 00:05:04.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 19:32:06.612 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43882 10 6661 1 2025-11-18 19:32:29.857 00:00:10.326 TCP 23.104.0.1:36010 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:28:59.566 00:05:04.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 19:33:06.822 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52418 10 6661 1 2025-11-18 19:33:30.219 00:00:10.363 TCP 23.104.0.1:37510 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:34:07.039 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42746 10 6661 1 2025-11-18 19:34:27.704 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 19:34:27.731 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 19:34:30.620 00:00:10.365 TCP 23.104.0.1:44198 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:35:07.221 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41154 10 6661 1 2025-11-18 19:35:31.026 00:00:10.365 TCP 23.104.0.1:49194 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:36:07.447 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40500 10 6661 1 2025-11-18 19:36:31.431 00:00:10.362 TCP 23.104.0.1:44302 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:37:07.674 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58004 10 6661 1 2025-11-18 19:37:31.832 00:00:10.375 TCP 23.104.0.1:51276 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:33:59.564 00:05:04.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 19:38:07.892 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56708 10 6661 1 2025-11-18 19:38:32.246 00:00:10.368 TCP 23.104.0.1:59010 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:34:59.567 00:05:04.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 19:39:08.109 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35746 10 6661 1 2025-11-18 19:39:27.882 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 19:39:27.870 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 19:39:32.652 00:00:10.359 TCP 23.104.0.1:35460 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:40:08.323 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44604 10 6661 1 2025-11-18 19:40:33.059 00:00:10.362 TCP 23.104.0.1:55450 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:41:08.538 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:35526 10 6661 1 2025-11-18 19:41:33.463 00:00:10.364 TCP 23.104.0.1:40024 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:42:08.706 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32816 10 6661 1 2025-11-18 19:42:33.867 00:00:10.326 TCP 23.104.0.1:51736 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:43:08.924 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:44746 10 6661 1 2025-11-18 19:43:34.232 00:00:10.367 TCP 23.104.0.1:60010 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:39:59.565 00:05:04.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 19:44:09.160 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37268 10 6661 1 2025-11-18 19:44:27.660 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 19:44:27.935 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 19:44:34.634 00:00:10.384 TCP 23.104.0.1:54014 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:40:59.567 00:05:04.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 19:45:09.380 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56606 10 6661 1 2025-11-18 19:45:35.070 00:00:10.365 TCP 23.104.0.1:36722 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:46:09.612 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38088 10 6661 1 2025-11-18 19:46:35.480 00:00:10.372 TCP 23.104.0.1:41934 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:47:09.852 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43296 10 6661 1 2025-11-18 19:47:35.884 00:00:10.445 TCP 23.104.0.1:43756 -> 1.101.0.1:3000 15 1926 1 2025-11-18 19:48:10.083 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:38722 12 10787 1 2025-11-18 19:48:36.371 00:00:10.363 TCP 23.104.0.1:41428 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:49:10.283 00:00:10.693 TCP 1.101.0.1:3000 -> 22.102.0.1:35858 10 6870 1 2025-11-18 19:49:27.952 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 19:49:27.856 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 19:49:36.772 00:00:10.372 TCP 23.104.0.1:58496 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:45:59.565 00:05:04.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 19:50:11.022 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:59608 10 6870 1 2025-11-18 19:50:37.182 00:00:10.363 TCP 23.104.0.1:43978 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:46:59.568 00:05:04.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 19:51:11.201 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:41886 10 6870 1 2025-11-18 19:51:37.582 00:00:10.334 TCP 23.104.0.1:57000 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:52:11.399 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53188 10 6870 1 2025-11-18 19:52:37.962 00:00:10.327 TCP 23.104.0.1:38254 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:53:11.615 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38056 10 6870 1 2025-11-18 19:53:38.328 00:00:10.366 TCP 23.104.0.1:46596 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:54:11.831 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38038 10 6870 1 2025-11-18 19:54:28.060 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 19:54:28.141 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 19:54:38.731 00:00:10.327 TCP 23.104.0.1:51786 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:55:12.014 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:39164 10 6870 1 2025-11-18 19:55:39.111 00:00:10.365 TCP 23.104.0.1:57364 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:51:59.569 00:05:04.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 19:56:12.220 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51694 10 6870 1 2025-11-18 19:56:39.520 00:00:10.393 TCP 23.104.0.1:59656 -> 1.101.0.1:3000 11 1507 1 2025-11-18 19:52:59.570 00:05:04.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 19:57:12.435 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54126 10 6870 1 2025-11-18 19:57:39.948 00:00:10.396 TCP 23.104.0.1:55064 -> 1.101.0.1:3000 15 1926 1 2025-11-18 19:58:12.651 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:35468 12 10793 1 2025-11-18 19:58:40.385 00:00:10.367 TCP 23.104.0.1:38592 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 525423, total packets: 1591, avg bps: 1151, avg pps: 0, avg bpp: 330 Time window: 2025-11-18 18:57:59 - 2025-11-18 19:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0054s User: 0.0011s Wall: 0.0025s flows/second: 64868.5 Runtime: 0.0025s