Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 01:58:46.595 00:00:10.362 TCP 23.104.0.1:56912 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:59:24.386 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35158 10 6452 1 2025-11-20 01:59:46.996 00:00:10.364 TCP 23.104.0.1:34416 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:00:04.540 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 02:00:04.452 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 02:00:24.596 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52236 10 6452 1 2025-11-20 02:00:47.402 00:00:10.367 TCP 23.104.0.1:59462 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:01:24.811 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45460 10 6452 1 2025-11-20 02:01:47.806 00:00:10.363 TCP 23.104.0.1:40670 -> 1.101.0.1:3000 11 1507 1 2025-11-20 01:57:04.987 00:05:55.524 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 02:02:25.041 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:33750 10 6452 1 2025-11-20 01:58:04.985 00:05:55.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 02:02:48.205 00:00:10.364 TCP 23.104.0.1:34486 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:03:25.245 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58026 10 6452 1 2025-11-20 02:03:48.607 00:00:10.366 TCP 23.104.0.1:45450 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:04:25.420 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38804 10 6452 1 2025-11-20 02:04:49.013 00:00:10.537 TCP 23.104.0.1:34806 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:05:04.309 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 02:05:04.308 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 02:05:25.596 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45918 10 6452 1 2025-11-20 02:05:49.586 00:00:10.328 TCP 23.104.0.1:56868 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:06:25.824 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59318 10 6452 1 2025-11-20 02:06:49.961 00:00:10.378 TCP 23.104.0.1:56032 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:07:26.045 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:59848 12 10375 1 2025-11-20 02:07:50.381 00:00:10.401 TCP 23.104.0.1:34038 -> 1.101.0.1:3000 15 1926 1 2025-11-20 02:03:04.988 00:05:55.524 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 02:08:26.282 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43778 10 6452 1 2025-11-20 02:08:50.814 00:00:10.365 TCP 23.104.0.1:44594 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:04:04.985 00:05:55.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 02:09:26.497 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34982 10 6452 1 2025-11-20 02:09:51.215 00:00:10.364 TCP 23.104.0.1:47446 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:10:04.554 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 02:10:04.497 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 02:10:26.713 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44152 10 6452 1 2025-11-20 02:10:51.613 00:00:10.351 TCP 23.104.0.1:59322 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:11:26.922 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:57616 10 6452 1 2025-11-20 02:11:52.000 00:00:10.362 TCP 23.104.0.1:42938 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:12:27.116 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33048 10 6452 1 2025-11-20 02:12:52.399 00:00:10.361 TCP 23.104.0.1:42474 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:13:27.335 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51424 10 6452 1 2025-11-20 02:09:04.989 00:05:55.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 02:13:52.797 00:00:10.369 TCP 23.104.0.1:51008 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:14:27.547 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50568 10 6452 1 2025-11-20 02:10:04.987 00:05:55.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 02:15:04.548 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 02:14:53.201 00:00:10.367 TCP 23.104.0.1:47362 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:15:04.588 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 02:15:27.757 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53174 10 6452 1 2025-11-20 02:15:53.608 00:00:10.367 TCP 23.104.0.1:55262 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:16:27.977 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:39730 10 6452 1 2025-11-20 02:16:54.013 00:00:10.363 TCP 23.104.0.1:48840 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:17:28.218 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44444 10 6452 1 2025-11-20 02:17:54.412 00:00:10.367 TCP 23.104.0.1:60564 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:18:28.429 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42290 10 6452 1 2025-11-20 02:18:54.823 00:00:10.328 TCP 23.104.0.1:46054 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:19:28.600 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37774 10 6452 1 2025-11-20 02:15:04.991 00:05:55.524 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 02:19:55.187 00:00:10.364 TCP 23.104.0.1:55232 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:20:04.605 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 02:20:04.716 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 02:20:28.816 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42234 10 6452 1 2025-11-20 02:16:04.989 00:05:55.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 02:20:55.589 00:00:10.368 TCP 23.104.0.1:36824 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:21:29.041 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:53014 10 6452 1 2025-11-20 02:21:55.995 00:00:10.361 TCP 23.104.0.1:43178 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:22:29.284 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47916 10 6452 1 2025-11-20 02:22:56.397 00:00:10.382 TCP 23.104.0.1:50180 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:23:29.499 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44912 10 6452 1 2025-11-20 02:23:56.815 00:00:10.810 TCP 23.104.0.1:38604 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:24:29.714 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52586 10 6452 1 2025-11-20 02:25:05.138 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 02:25:05.251 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 02:24:57.671 00:00:10.377 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:25:29.933 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34964 10 6452 1 2025-11-20 02:21:04.992 00:05:55.523 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 02:25:58.102 00:00:11.342 TCP 23.104.0.1:32792 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:26:30.166 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54586 10 6452 1 2025-11-20 02:22:04.990 00:05:55.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 02:26:59.486 00:00:10.325 TCP 23.104.0.1:37214 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:27:30.384 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53894 10 6452 1 2025-11-20 02:27:59.849 00:00:10.379 TCP 23.104.0.1:52738 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:28:30.599 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52624 10 6452 1 2025-11-20 02:29:00.264 00:00:10.367 TCP 23.104.0.1:33508 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:29:30.814 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60076 10 6452 1 2025-11-20 02:30:04.911 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 02:30:04.918 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 02:30:00.669 00:00:10.367 TCP 23.104.0.1:46636 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:30:31.034 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48578 10 6452 1 2025-11-20 02:31:01.104 00:00:10.364 TCP 23.104.0.1:50918 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:31:31.248 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40444 10 6452 1 2025-11-20 02:27:04.995 00:05:55.522 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 02:32:01.508 00:00:10.370 TCP 23.104.0.1:47356 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:32:31.462 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47372 10 6452 1 2025-11-20 02:28:04.991 00:05:55.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 02:33:01.914 00:00:10.367 TCP 23.104.0.1:42314 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:33:31.668 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58610 10 6452 1 2025-11-20 02:34:02.317 00:00:10.368 TCP 23.104.0.1:59354 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:34:31.834 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39092 10 6452 1 2025-11-20 02:35:04.669 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 02:35:05.001 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 02:35:02.723 00:00:10.371 TCP 23.104.0.1:50976 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:35:32.069 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39664 10 6452 1 2025-11-20 02:36:03.133 00:00:10.366 TCP 23.104.0.1:32956 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:36:32.238 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41122 10 6452 1 2025-11-20 02:37:03.543 00:00:10.372 TCP 23.104.0.1:40222 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:37:32.446 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40802 10 6452 1 2025-11-20 02:33:04.998 00:05:55.521 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 02:38:03.949 00:00:10.371 TCP 23.104.0.1:35990 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:38:32.622 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48886 10 6452 1 2025-11-20 02:34:04.994 00:05:55.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 02:39:04.361 00:00:10.507 TCP 23.104.0.1:48918 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:39:32.831 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45670 10 6452 1 2025-11-20 02:40:05.002 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 02:40:05.002 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 02:40:04.905 00:00:10.361 TCP 23.104.0.1:60342 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:40:33.005 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57294 10 6452 1 2025-11-20 02:41:05.303 00:00:10.365 TCP 23.104.0.1:51944 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:41:33.222 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55426 10 6452 1 2025-11-20 02:42:05.705 00:00:10.366 TCP 23.104.0.1:46308 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:42:33.442 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41468 12 6556 1 2025-11-20 02:43:06.111 00:00:10.324 TCP 23.104.0.1:46448 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:43:33.658 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34506 10 6452 1 2025-11-20 02:39:05.001 00:05:55.518 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 02:44:06.489 00:00:10.365 TCP 23.104.0.1:58122 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:44:33.889 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48606 10 6452 1 2025-11-20 02:45:04.918 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 02:40:04.997 00:05:55.524 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 02:45:05.166 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 02:45:06.895 00:00:10.372 TCP 23.104.0.1:37450 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:45:34.116 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34744 10 6452 1 2025-11-20 02:46:07.311 00:00:10.366 TCP 23.104.0.1:58952 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:46:34.325 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37506 10 6452 1 2025-11-20 02:47:07.715 00:00:10.377 TCP 23.104.0.1:45256 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:47:34.543 00:00:11.048 TCP 1.101.0.1:3000 -> 22.102.0.1:48726 10 6452 1 2025-11-20 02:48:08.132 00:00:10.363 TCP 23.104.0.1:54470 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:48:35.636 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35584 10 6452 1 2025-11-20 02:49:08.533 00:00:10.364 TCP 23.104.0.1:59676 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:49:35.851 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:48924 10 6452 1 2025-11-20 02:45:05.001 00:05:55.517 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 02:50:04.993 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 02:50:05.403 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 02:46:04.998 00:05:00.003 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 686 1 2025-11-20 02:50:08.936 00:00:10.337 TCP 23.104.0.1:47386 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:50:36.097 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:57574 10 6452 1 2025-11-20 02:51:09.310 00:00:10.315 TCP 23.104.0.1:53082 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:51:36.288 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35432 10 6452 1 2025-11-20 02:52:09.667 00:00:10.330 TCP 23.104.0.1:37286 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:52:36.513 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51832 10 6452 1 2025-11-20 02:53:10.040 00:00:10.369 TCP 23.104.0.1:45548 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:53:36.730 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44214 10 6452 1 2025-11-20 02:54:10.452 00:00:10.365 TCP 23.104.0.1:55920 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:54:36.953 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35834 10 6452 1 2025-11-20 02:55:05.521 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 02:55:05.521 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 02:55:10.852 00:00:10.386 TCP 23.104.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:55:37.186 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51498 10 6452 1 2025-11-20 02:51:05.003 00:05:55.517 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 02:52:00.521 00:05:04.480 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 02:56:11.274 00:00:10.368 TCP 23.104.0.1:42370 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:56:37.405 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49670 10 6452 1 2025-11-20 02:57:11.675 00:00:10.374 TCP 23.104.0.1:51890 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:57:37.632 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:49820 12 10369 1 2025-11-20 02:58:12.103 00:00:10.443 TCP 23.104.0.1:50846 -> 1.101.0.1:3000 15 1926 1 2025-11-20 02:58:37.886 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56632 10 6452 1 Summary: total flows: 164, total bytes: 507078, total packets: 1585, avg bps: 1095, avg pps: 0, avg bpp: 319 Time window: 2025-11-20 01:57:04 - 2025-11-20 02:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0016s Wall: 0.0026s flows/second: 63078.0 Runtime: 0.0026s