Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-19 04:59:25.505 00:00:10.593 TCP 23.104.0.1:52006 -> 1.101.0.1:3000 11 1507 1 2025-11-19 04:59:39.185 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 04:59:39.171 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 04:59:37.755 00:00:10.608 TCP 1.101.0.1:3000 -> 22.102.0.1:49248 10 6452 1 2025-11-19 05:00:26.143 00:00:10.365 TCP 23.104.0.1:43976 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:00:38.402 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52174 10 6452 1 2025-11-19 05:01:26.551 00:00:10.361 TCP 23.104.0.1:55100 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:01:38.613 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54478 10 6452 1 2025-11-19 04:57:59.811 00:05:04.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 05:02:26.949 00:00:10.370 TCP 23.104.0.1:57100 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:02:38.829 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54378 10 6452 1 2025-11-19 04:58:59.814 00:05:04.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 05:03:27.366 00:00:10.341 TCP 23.104.0.1:43214 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:03:39.065 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34406 10 6452 1 2025-11-19 05:04:38.969 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 05:04:39.304 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 05:04:27.746 00:00:10.363 TCP 23.104.0.1:49806 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:04:39.275 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49272 10 6452 1 2025-11-19 05:05:28.149 00:00:10.363 TCP 23.104.0.1:46600 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:05:39.488 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42208 10 6452 1 2025-11-19 05:06:28.552 00:00:10.317 TCP 23.104.0.1:37394 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:06:39.706 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42390 10 6452 1 2025-11-19 05:07:28.914 00:00:10.633 TCP 23.104.0.1:34148 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:07:39.878 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60658 10 6452 1 2025-11-19 05:03:59.813 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 05:08:29.583 00:00:10.369 TCP 23.104.0.1:59782 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:08:40.114 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37224 10 6452 1 2025-11-19 05:04:59.837 00:05:04.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 05:09:39.304 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 05:09:29.993 00:00:10.361 TCP 23.104.0.1:55210 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:09:39.052 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 05:09:40.329 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45908 10 6452 1 2025-11-19 05:10:30.395 00:00:10.364 TCP 23.104.0.1:58410 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:10:40.542 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60626 10 6452 1 2025-11-19 05:11:30.795 00:00:10.417 TCP 23.104.0.1:50860 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:11:40.716 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36862 10 6452 1 2025-11-19 05:12:31.254 00:00:10.365 TCP 23.104.0.1:45574 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:12:40.893 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:50930 10 6452 1 2025-11-19 05:13:31.655 00:00:10.366 TCP 23.104.0.1:44128 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:13:41.134 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43870 10 6452 1 2025-11-19 05:09:59.864 00:05:04.711 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 05:14:39.256 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 05:14:39.350 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 05:14:32.091 00:00:10.322 TCP 23.104.0.1:54688 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:14:41.349 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33034 10 6452 1 2025-11-19 05:10:59.867 00:05:04.706 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 05:15:32.451 00:00:10.329 TCP 23.104.0.1:52502 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:15:41.562 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39844 10 6452 1 2025-11-19 05:16:32.816 00:00:10.369 TCP 23.104.0.1:54572 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:16:41.790 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44050 10 6452 1 2025-11-19 05:17:33.225 00:00:10.324 TCP 23.104.0.1:60162 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:17:42.011 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50630 10 6452 1 2025-11-19 05:18:33.585 00:00:10.363 TCP 23.104.0.1:50004 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:18:42.231 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44746 10 6452 1 2025-11-19 05:19:39.516 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 05:19:39.453 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 05:19:33.986 00:00:10.370 TCP 23.104.0.1:44306 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:19:42.446 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59484 10 6452 1 2025-11-19 05:15:59.865 00:05:04.711 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 05:20:34.395 00:00:10.847 TCP 23.104.0.1:33100 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:20:42.661 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55364 10 6452 1 2025-11-19 05:16:59.867 00:05:04.707 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 05:21:35.281 00:00:10.366 TCP 23.104.0.1:36790 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:21:42.876 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44638 10 6452 1 2025-11-19 05:22:35.689 00:00:10.369 TCP 23.104.0.1:51564 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:22:43.105 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53660 10 6452 1 2025-11-19 05:23:36.106 00:00:10.365 TCP 23.104.0.1:45154 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:23:43.326 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58606 10 6452 1 2025-11-19 05:24:39.891 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 05:24:39.866 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 05:24:36.510 00:00:10.674 TCP 23.104.0.1:40446 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:24:43.550 00:00:10.634 TCP 1.101.0.1:3000 -> 22.102.0.1:56716 10 6452 1 2025-11-19 05:25:37.221 00:00:10.357 TCP 23.104.0.1:53568 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:25:44.219 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49496 10 6452 1 2025-11-19 05:21:59.867 00:05:04.711 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 05:26:37.620 00:00:10.362 TCP 23.104.0.1:45854 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:26:44.435 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36154 10 6452 1 2025-11-19 05:22:59.870 00:05:04.705 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 05:27:38.023 00:00:10.437 TCP 23.104.0.1:44350 -> 1.101.0.1:3000 15 1926 1 2025-11-19 05:27:44.609 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:41518 12 10369 1 2025-11-19 05:28:38.496 00:00:10.363 TCP 23.104.0.1:46912 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:28:44.868 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60522 10 6452 1 2025-11-19 05:29:39.816 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 05:29:39.675 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 05:29:38.898 00:00:10.328 TCP 23.104.0.1:60090 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:29:45.088 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:40902 10 6452 1 2025-11-19 05:30:39.267 00:00:10.321 TCP 23.104.0.1:46286 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:30:45.257 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47944 10 6452 1 2025-11-19 05:31:39.627 00:00:10.332 TCP 23.104.0.1:52454 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:31:45.468 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58126 10 6452 1 2025-11-19 05:27:59.870 00:05:04.708 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 05:32:40.001 00:00:10.370 TCP 23.104.0.1:53514 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:32:45.677 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42972 10 6452 1 2025-11-19 05:28:59.874 00:05:04.702 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 05:33:40.416 00:00:18.314 TCP 23.104.0.1:46596 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:33:45.846 00:00:12.844 TCP 1.101.0.1:3000 -> 22.102.0.1:44592 10 6452 1 2025-11-19 05:34:39.664 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 05:34:39.486 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 05:34:48.742 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:46010 10 6452 1 2025-11-19 05:34:48.810 00:00:10.371 TCP 23.104.0.1:39144 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:35:49.219 00:00:10.361 TCP 23.104.0.1:50228 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:35:48.932 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:34436 10 6452 1 2025-11-19 05:36:49.620 00:00:10.318 TCP 23.104.0.1:48796 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:36:49.164 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35386 10 6452 1 2025-11-19 05:37:49.979 00:00:10.366 TCP 23.104.0.1:33114 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:37:49.374 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56726 10 6452 1 2025-11-19 05:33:59.873 00:05:04.708 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 05:38:50.386 00:00:10.364 TCP 23.104.0.1:47134 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:38:49.599 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52116 10 6452 1 2025-11-19 05:34:59.878 00:05:04.702 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 05:39:39.577 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 05:39:39.832 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 05:39:50.790 00:00:10.367 TCP 23.104.0.1:36092 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:39:49.823 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54228 10 6452 1 2025-11-19 05:40:49.994 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54534 10 6452 1 2025-11-19 05:40:51.199 00:00:10.362 TCP 23.104.0.1:34940 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:41:50.216 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50718 10 6452 1 2025-11-19 05:41:51.599 00:00:10.642 TCP 23.104.0.1:35320 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:42:50.428 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33534 10 6452 1 2025-11-19 05:42:52.280 00:00:10.368 TCP 23.104.0.1:50052 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:43:50.641 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54044 10 6452 1 2025-11-19 05:43:52.683 00:00:10.366 TCP 23.104.0.1:53682 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:39:59.875 00:05:04.707 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 05:44:39.924 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 05:44:39.765 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 05:44:50.856 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35254 10 6452 1 2025-11-19 05:44:53.101 00:00:10.366 TCP 23.104.0.1:55370 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:40:59.879 00:05:04.702 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 05:45:51.043 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35164 10 6452 1 2025-11-19 05:45:53.502 00:00:10.368 TCP 23.104.0.1:54110 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:46:51.254 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39302 10 6452 1 2025-11-19 05:46:53.909 00:00:10.438 TCP 23.104.0.1:57080 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:47:51.468 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41992 10 6452 1 2025-11-19 05:47:54.388 00:00:10.368 TCP 23.104.0.1:44250 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:48:51.693 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57332 10 6452 1 2025-11-19 05:48:54.796 00:00:10.330 TCP 23.104.0.1:58332 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:49:39.940 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 05:49:40.054 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 05:49:55.162 00:00:10.970 TCP 23.104.0.1:46848 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:49:51.914 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49180 10 6452 1 2025-11-19 05:45:59.880 00:05:04.705 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 05:50:52.128 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58030 10 6452 1 2025-11-19 05:50:56.168 00:00:10.359 TCP 23.104.0.1:59038 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:46:59.881 00:05:04.701 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 05:51:56.562 00:00:10.371 TCP 23.104.0.1:40054 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:51:52.302 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49238 10 6452 1 2025-11-19 05:52:52.486 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35756 10 6452 1 2025-11-19 05:52:56.972 00:00:10.375 TCP 23.104.0.1:53514 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:53:52.710 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54092 10 6452 1 2025-11-19 05:53:57.395 00:00:10.359 TCP 23.104.0.1:49104 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:54:39.987 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 05:54:39.995 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 05:54:52.926 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:60474 10 6452 1 2025-11-19 05:54:57.792 00:00:10.367 TCP 23.104.0.1:33760 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:55:53.125 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36506 10 6452 1 2025-11-19 05:51:59.880 00:05:04.709 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 05:55:58.196 00:00:10.372 TCP 23.104.0.1:37454 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:52:59.883 00:05:04.703 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 05:56:53.340 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47476 10 6452 1 2025-11-19 05:56:58.604 00:00:10.359 TCP 23.104.0.1:40454 -> 1.101.0.1:3000 11 1507 1 2025-11-19 05:57:53.519 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55478 10 6452 1 2025-11-19 05:57:59.007 00:00:10.364 TCP 23.104.0.1:49804 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494725, total packets: 1557, avg bps: 1096, avg pps: 0, avg bpp: 317 Time window: 2025-11-19 04:57:59 - 2025-11-19 05:58:09 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0031s User: 0.0021s Wall: 0.0026s flows/second: 61928.3 Runtime: 0.0026s