Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-19 15:58:58.061 00:00:10.369 TCP 23.104.0.1:40476 -> 1.101.0.1:3000 11 1507 1 2025-11-19 15:59:14.826 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39544 10 6452 1 2025-11-19 15:59:52.571 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 15:59:52.557 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 15:59:58.467 00:00:10.367 TCP 23.104.0.1:55332 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:00:15.080 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54164 10 6452 1 2025-11-19 16:00:58.871 00:00:10.328 TCP 23.104.0.1:54828 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:01:15.263 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42476 10 6452 1 2025-11-19 15:57:04.794 00:05:55.457 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 16:01:59.227 00:00:10.363 TCP 23.104.0.1:55432 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:02:15.477 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56638 10 6452 1 2025-11-19 15:58:04.790 00:05:55.463 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 16:02:59.637 00:00:10.366 TCP 23.104.0.1:35594 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:03:15.687 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50056 10 6452 1 2025-11-19 16:04:00.057 00:00:10.368 TCP 23.104.0.1:34106 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:04:15.901 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58992 10 6452 1 2025-11-19 16:04:52.401 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 16:04:52.340 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 16:05:00.462 00:00:10.379 TCP 23.104.0.1:57700 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:05:16.119 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46174 10 6452 1 2025-11-19 16:06:00.880 00:00:10.386 TCP 23.104.0.1:56948 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:06:16.329 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:59044 10 6452 1 2025-11-19 16:07:01.305 00:00:10.363 TCP 23.104.0.1:54670 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:07:16.538 00:00:10.413 TCP 1.101.0.1:3000 -> 22.102.0.1:51584 10 6452 1 2025-11-19 16:03:04.795 00:05:55.456 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 16:08:01.705 00:00:12.170 TCP 23.104.0.1:60242 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:08:16.989 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:55344 10 6452 1 2025-11-19 16:04:04.792 00:05:55.462 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 16:09:03.912 00:00:10.363 TCP 23.104.0.1:44094 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:09:17.225 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41520 10 6452 1 2025-11-19 16:09:52.588 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 16:09:52.595 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 16:10:04.312 00:00:10.366 TCP 23.104.0.1:38190 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:10:17.451 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57010 10 6452 1 2025-11-19 16:11:04.730 00:00:10.342 TCP 23.104.0.1:36738 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:11:17.674 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49010 12 6556 1 2025-11-19 16:12:05.109 00:00:10.318 TCP 23.104.0.1:33784 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:12:17.896 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43406 10 6452 1 2025-11-19 16:13:05.470 00:00:10.320 TCP 23.104.0.1:36392 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:13:18.110 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60400 10 6452 1 2025-11-19 16:09:04.796 00:05:55.455 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 16:14:05.827 00:00:10.372 TCP 23.104.0.1:43894 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:14:18.292 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46102 10 6452 1 2025-11-19 16:14:52.569 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 16:14:52.827 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 16:10:04.795 00:05:55.460 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 16:15:06.227 00:00:10.325 TCP 23.104.0.1:38518 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:15:18.507 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60272 10 6452 1 2025-11-19 16:16:06.592 00:00:10.366 TCP 23.104.0.1:33320 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:16:18.712 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57604 10 6452 1 2025-11-19 16:17:06.994 00:00:10.364 TCP 23.104.0.1:39250 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:17:18.926 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:48862 10 6452 1 2025-11-19 16:18:07.399 00:00:10.324 TCP 23.104.0.1:50046 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:18:19.132 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:56120 10 6452 1 2025-11-19 16:19:07.760 00:00:11.051 TCP 23.104.0.1:34164 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:19:19.372 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33562 10 6452 1 2025-11-19 16:19:53.168 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 16:19:52.904 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 16:15:04.800 00:05:55.452 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 16:20:08.849 00:00:10.382 TCP 23.104.0.1:35434 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:20:19.583 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59214 10 6452 1 2025-11-19 16:16:04.799 00:05:55.457 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 16:21:09.271 00:00:10.365 TCP 23.104.0.1:47090 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:21:19.802 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42122 10 6452 1 2025-11-19 16:22:09.675 00:00:10.372 TCP 23.104.0.1:51372 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:22:20.036 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34484 10 6452 1 2025-11-19 16:23:10.104 00:00:10.439 TCP 23.104.0.1:42274 -> 1.101.0.1:3000 15 1926 1 2025-11-19 16:23:20.251 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:42882 12 10375 1 2025-11-19 16:24:10.580 00:00:10.365 TCP 23.104.0.1:41724 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:24:20.494 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51036 10 6452 1 2025-11-19 16:24:53.020 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 16:24:52.721 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 16:25:10.979 00:00:10.372 TCP 23.104.0.1:54152 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:25:20.727 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:34582 10 6452 1 2025-11-19 16:21:04.801 00:05:55.453 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 16:26:11.397 00:00:10.365 TCP 23.104.0.1:34472 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:26:20.906 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42726 10 6452 1 2025-11-19 16:22:04.799 00:05:55.458 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 16:27:11.801 00:00:10.368 TCP 23.104.0.1:53768 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:27:21.125 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41466 10 6452 1 2025-11-19 16:28:12.205 00:00:10.362 TCP 23.104.0.1:47896 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:28:21.340 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39208 10 6452 1 2025-11-19 16:29:12.604 00:00:11.365 TCP 23.104.0.1:57862 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:29:21.559 00:00:10.578 TCP 1.101.0.1:3000 -> 22.102.0.1:57960 10 6452 1 2025-11-19 16:29:52.845 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 16:29:52.771 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 16:30:14.010 00:00:10.362 TCP 23.104.0.1:36072 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:30:22.175 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37514 10 6452 1 2025-11-19 16:31:14.406 00:00:10.363 TCP 23.104.0.1:36740 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:31:22.390 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:56632 10 6452 1 2025-11-19 16:27:04.802 00:05:55.454 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 16:32:14.804 00:00:10.368 TCP 23.104.0.1:45844 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:32:22.653 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48022 10 6452 1 2025-11-19 16:28:04.801 00:05:55.459 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 16:33:15.210 00:00:10.325 TCP 23.104.0.1:44956 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:33:22.872 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36824 10 6452 1 2025-11-19 16:34:15.581 00:00:10.368 TCP 23.104.0.1:38602 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:34:23.072 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40310 10 6452 1 2025-11-19 16:34:52.695 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 16:34:53.051 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 16:35:15.986 00:00:10.418 TCP 23.104.0.1:38620 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:35:23.282 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34380 10 6452 1 2025-11-19 16:36:16.459 00:00:10.364 TCP 23.104.0.1:32922 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:36:23.498 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42430 10 6452 1 2025-11-19 16:37:16.865 00:00:10.325 TCP 23.104.0.1:57842 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:37:23.715 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:44078 12 10369 1 2025-11-19 16:33:04.805 00:05:55.455 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 16:38:17.237 00:00:10.434 TCP 23.104.0.1:51222 -> 1.101.0.1:3000 15 1926 1 2025-11-19 16:38:23.960 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49810 12 6556 1 2025-11-19 16:34:04.802 00:05:55.459 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 16:39:17.714 00:00:10.368 TCP 23.104.0.1:52078 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:39:24.182 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33298 10 6452 1 2025-11-19 16:39:52.942 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 16:39:52.861 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 16:40:18.122 00:00:10.827 TCP 23.104.0.1:55532 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:40:24.396 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47718 10 6452 1 2025-11-19 16:41:18.993 00:00:10.362 TCP 23.104.0.1:51786 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:41:24.618 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43846 10 6452 1 2025-11-19 16:42:19.393 00:00:10.327 TCP 23.104.0.1:48318 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:42:24.828 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40138 10 6452 1 2025-11-19 16:43:19.760 00:00:10.392 TCP 23.104.0.1:32772 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:43:25.068 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:56238 10 6452 1 2025-11-19 16:39:04.805 00:05:55.459 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 16:44:20.188 00:00:10.375 TCP 23.104.0.1:44434 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:44:25.247 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33274 10 6452 1 2025-11-19 16:44:53.183 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 16:44:53.343 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 16:40:04.803 00:05:55.463 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 16:45:20.599 00:00:10.368 TCP 23.104.0.1:52436 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:45:25.472 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33208 10 6452 1 2025-11-19 16:46:21.004 00:00:10.360 TCP 23.104.0.1:54732 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:46:25.689 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60884 10 6452 1 2025-11-19 16:47:21.404 00:00:10.364 TCP 23.104.0.1:54778 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:47:25.904 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:34368 12 10369 1 2025-11-19 16:48:21.804 00:00:10.437 TCP 23.104.0.1:50026 -> 1.101.0.1:3000 15 1926 1 2025-11-19 16:48:26.143 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33704 10 6452 1 2025-11-19 16:49:26.362 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36044 10 6452 1 2025-11-19 16:49:22.289 00:00:10.366 TCP 23.104.0.1:55250 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:49:53.354 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 16:49:53.165 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 16:45:04.807 00:05:55.458 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 16:50:22.693 00:00:10.323 TCP 23.104.0.1:53760 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:50:26.581 00:00:12.231 TCP 1.101.0.1:3000 -> 22.102.0.1:53582 10 6452 1 2025-11-19 16:46:04.805 00:05:55.464 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 16:51:23.064 00:00:10.362 TCP 23.104.0.1:38066 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:51:28.852 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41842 10 6452 1 2025-11-19 16:52:23.463 00:00:10.367 TCP 23.104.0.1:45794 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:52:29.080 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50542 10 6452 1 2025-11-19 16:53:23.874 00:00:10.432 TCP 23.104.0.1:53080 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:53:29.303 00:00:10.369 TCP 1.101.0.1:3000 -> 22.102.0.1:37950 10 6452 1 2025-11-19 16:54:24.345 00:00:10.367 TCP 23.104.0.1:39612 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:54:29.710 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42018 10 6452 1 2025-11-19 16:54:53.071 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-19 16:54:53.366 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-19 16:55:24.747 00:00:11.106 TCP 23.104.0.1:38778 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:55:29.882 00:00:10.376 TCP 1.101.0.1:3000 -> 22.102.0.1:40256 10 6452 1 2025-11-19 16:51:04.807 00:05:55.461 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-19 16:56:25.893 00:00:10.386 TCP 23.104.0.1:47786 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:56:30.301 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53264 10 6452 1 2025-11-19 16:52:04.806 00:05:55.466 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-19 16:57:26.317 00:00:10.323 TCP 23.104.0.1:35362 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:57:30.518 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37956 10 6452 1 2025-11-19 16:58:26.679 00:00:22.174 TCP 23.104.0.1:39818 -> 1.101.0.1:3000 11 1507 1 2025-11-19 16:58:30.748 00:00:18.104 TCP 1.101.0.1:3000 -> 22.102.0.1:44482 10 6452 1 Summary: total flows: 164, total bytes: 511570, total packets: 1594, avg bps: 1104, avg pps: 0, avg bpp: 320 Time window: 2025-11-19 15:57:04 - 2025-11-19 16:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0027s Wall: 0.0028s flows/second: 58973.4 Runtime: 0.0028s