Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 02:59:12.583 00:00:10.369 TCP 23.104.0.1:46766 -> 1.101.0.1:3000 11 1507 1 2025-11-20 02:59:38.116 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49130 10 6452 1 2025-11-20 03:00:05.536 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 03:00:05.567 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 03:00:12.988 00:00:10.368 TCP 23.104.0.1:55022 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:00:38.328 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51424 10 6452 1 2025-11-20 03:01:13.391 00:00:10.365 TCP 23.104.0.1:35984 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:01:38.546 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44294 10 6452 1 2025-11-20 02:57:05.005 00:05:55.516 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 02:58:00.522 00:05:04.508 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 03:02:13.790 00:00:10.372 TCP 23.104.0.1:40274 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:02:38.754 00:00:10.812 TCP 1.101.0.1:3000 -> 22.102.0.1:50248 10 6452 1 2025-11-20 03:03:14.191 00:00:10.329 TCP 23.104.0.1:42192 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:03:39.605 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39744 10 6452 1 2025-11-20 03:04:14.553 00:00:10.363 TCP 23.104.0.1:49860 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:04:39.823 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48242 10 6452 1 2025-11-20 03:05:05.766 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 03:05:05.455 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 03:05:14.961 00:00:10.331 TCP 23.104.0.1:57676 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:05:40.070 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44862 10 6452 1 2025-11-20 03:06:15.327 00:00:10.367 TCP 23.104.0.1:57388 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:06:40.294 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44708 10 6452 1 2025-11-20 03:07:15.733 00:00:10.368 TCP 23.104.0.1:34950 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:07:40.513 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51880 10 6452 1 2025-11-20 03:03:05.036 00:05:55.490 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 03:04:00.524 00:05:04.513 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 03:08:16.139 00:00:10.365 TCP 23.104.0.1:41236 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:08:40.733 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38464 10 6452 1 2025-11-20 03:09:16.541 00:00:10.362 TCP 23.104.0.1:42168 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:09:40.946 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50240 10 6452 1 2025-11-20 03:10:05.729 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 03:10:05.729 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 03:10:16.943 00:00:10.375 TCP 23.104.0.1:33040 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:10:41.173 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50134 10 6452 1 2025-11-20 03:11:17.357 00:00:10.363 TCP 23.104.0.1:54326 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:11:41.387 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55678 12 6556 1 2025-11-20 03:12:17.760 00:00:10.329 TCP 23.104.0.1:44626 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:12:41.598 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33400 12 10375 1 2025-11-20 03:13:18.127 00:00:10.443 TCP 23.104.0.1:49952 -> 1.101.0.1:3000 15 1926 1 2025-11-20 03:13:41.842 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53766 10 6452 1 2025-11-20 03:09:05.041 00:05:55.487 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 03:10:00.526 00:05:04.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 03:14:18.605 00:00:10.365 TCP 23.104.0.1:37006 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:14:42.078 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36042 10 6452 1 2025-11-20 03:15:05.599 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 03:15:05.886 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 03:15:19.008 00:00:10.320 TCP 23.104.0.1:45696 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:15:42.248 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33470 10 6452 1 2025-11-20 03:16:19.374 00:00:10.361 TCP 23.104.0.1:55244 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:16:42.464 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55124 10 6452 1 2025-11-20 03:17:19.775 00:00:10.369 TCP 23.104.0.1:59650 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:17:42.684 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52204 10 6452 1 2025-11-20 03:18:20.186 00:00:10.363 TCP 23.104.0.1:33216 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:18:42.900 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33028 10 6452 1 2025-11-20 03:19:20.599 00:00:10.365 TCP 23.104.0.1:39716 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:19:43.123 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40032 10 6452 1 2025-11-20 03:15:05.040 00:05:55.488 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 03:20:05.947 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 03:20:05.938 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 03:16:00.527 00:05:04.514 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 03:20:21.003 00:00:10.369 TCP 23.104.0.1:33832 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:20:43.348 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53288 10 6452 1 2025-11-20 03:21:21.413 00:00:10.363 TCP 23.104.0.1:40664 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:21:43.574 00:00:10.253 TCP 1.101.0.1:3000 -> 22.102.0.1:41208 11 6504 1 2025-11-20 03:22:21.816 00:00:10.822 TCP 23.104.0.1:49430 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:22:43.864 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52128 10 6452 1 2025-11-20 03:23:22.683 00:00:10.367 TCP 23.104.0.1:52558 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:23:44.089 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53236 10 6452 1 2025-11-20 03:24:23.103 00:00:10.332 TCP 23.104.0.1:40858 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:24:44.307 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35272 10 6452 1 2025-11-20 03:25:06.000 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 03:25:06.003 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 03:25:23.474 00:00:10.336 TCP 23.104.0.1:53410 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:25:44.530 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46956 10 6452 1 2025-11-20 03:21:05.045 00:05:55.487 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 03:22:00.532 00:05:04.513 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 03:26:23.844 00:00:10.388 TCP 23.104.0.1:48504 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:26:44.743 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45238 10 6452 1 2025-11-20 03:27:24.270 00:00:10.323 TCP 23.104.0.1:41094 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:27:44.918 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32874 10 6452 1 2025-11-20 03:28:24.634 00:00:10.361 TCP 23.104.0.1:39808 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:28:45.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36546 10 6452 1 2025-11-20 03:29:25.036 00:00:10.361 TCP 23.104.0.1:48516 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:29:45.341 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:46830 10 6452 1 2025-11-20 03:30:06.134 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 03:30:06.319 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 03:30:25.431 00:00:10.370 TCP 23.104.0.1:33254 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:30:45.577 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38602 10 6452 1 2025-11-20 03:31:25.841 00:00:10.388 TCP 23.104.0.1:33282 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:31:45.792 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51172 10 6452 1 2025-11-20 03:27:05.047 00:05:55.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 03:28:00.533 00:05:04.513 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 03:32:26.264 00:00:10.366 TCP 23.104.0.1:40334 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:32:45.996 00:00:10.605 TCP 1.101.0.1:3000 -> 22.102.0.1:35346 10 6452 1 2025-11-20 03:33:26.669 00:00:10.365 TCP 23.104.0.1:46506 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:33:46.644 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47830 10 6452 1 2025-11-20 03:34:27.102 00:00:10.362 TCP 23.104.0.1:41680 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:34:46.855 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42208 10 6452 1 2025-11-20 03:35:06.281 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 03:35:06.165 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 03:35:27.506 00:00:10.367 TCP 23.104.0.1:54426 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:35:47.084 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39324 10 6452 1 2025-11-20 03:36:27.911 00:00:10.359 TCP 23.104.0.1:39556 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:36:47.299 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52536 10 6452 1 2025-11-20 03:37:28.311 00:00:10.362 TCP 23.104.0.1:46428 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:37:47.514 00:00:10.635 TCP 1.101.0.1:3000 -> 22.102.0.1:51684 10 6452 1 2025-11-20 03:33:05.050 00:05:55.491 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 03:34:00.542 00:05:04.506 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 03:38:28.712 00:00:10.384 TCP 23.104.0.1:47546 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:38:48.197 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56604 10 6452 1 2025-11-20 03:39:29.138 00:00:11.113 TCP 23.104.0.1:51822 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:39:48.370 00:00:11.083 TCP 1.101.0.1:3000 -> 22.102.0.1:33928 10 6452 1 2025-11-20 03:40:06.305 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 03:40:06.208 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 03:40:30.328 00:00:10.366 TCP 23.104.0.1:49682 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:40:49.490 00:00:10.770 TCP 1.101.0.1:3000 -> 22.102.0.1:43060 10 6452 1 2025-11-20 03:41:30.731 00:00:10.372 TCP 23.104.0.1:49174 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:41:50.302 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49764 10 6452 1 2025-11-20 03:42:31.141 00:00:10.367 TCP 23.104.0.1:53478 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:42:50.518 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33002 10 6452 1 2025-11-20 03:43:31.543 00:00:10.420 TCP 23.104.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:43:50.740 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57482 10 6452 1 2025-11-20 03:39:05.052 00:05:55.490 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 03:40:00.543 00:05:04.508 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 03:44:32.003 00:00:10.366 TCP 23.104.0.1:59608 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:44:50.958 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:35890 10 6452 1 2025-11-20 03:45:06.360 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 03:45:06.487 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 03:45:32.409 00:00:10.369 TCP 23.104.0.1:49772 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:45:51.192 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51414 10 6452 1 2025-11-20 03:46:32.820 00:00:10.364 TCP 23.104.0.1:36314 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:46:51.401 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45028 10 6452 1 2025-11-20 03:47:33.213 00:00:10.352 TCP 23.104.0.1:51784 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:47:51.620 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42428 10 6452 1 2025-11-20 03:48:33.607 00:00:10.361 TCP 23.104.0.1:34154 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:48:51.790 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 10 6452 1 2025-11-20 03:49:34.007 00:00:10.328 TCP 23.104.0.1:40796 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:45:05.053 00:05:55.501 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 03:49:52.009 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49402 10 6452 1 2025-11-20 03:50:06.513 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 03:50:06.386 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 03:46:00.545 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 03:50:34.372 00:00:10.364 TCP 23.104.0.1:32966 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:50:52.216 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38706 10 6452 1 2025-11-20 03:51:34.775 00:00:10.523 TCP 23.104.0.1:51642 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:51:52.425 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57930 10 6452 1 2025-11-20 03:52:35.335 00:00:10.385 TCP 23.104.0.1:45722 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:52:52.647 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51230 10 6452 1 2025-11-20 03:53:35.740 00:00:10.325 TCP 23.104.0.1:55862 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:53:52.859 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:58866 11 6492 1 2025-11-20 03:54:36.106 00:00:10.324 TCP 23.104.0.1:53930 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:54:53.089 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58492 10 6452 1 2025-11-20 03:55:07.428 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 03:55:07.348 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 03:55:36.466 00:00:10.376 TCP 23.104.0.1:53348 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:51:05.057 00:05:55.498 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 03:52:00.556 00:05:04.499 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 03:55:53.310 00:00:10.904 TCP 1.101.0.1:3000 -> 22.102.0.1:53502 10 6452 1 2025-11-20 03:56:36.877 00:00:10.368 TCP 23.104.0.1:53370 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:56:54.255 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49486 10 6452 1 2025-11-20 03:57:37.285 00:00:10.366 TCP 23.104.0.1:54434 -> 1.101.0.1:3000 11 1507 1 2025-11-20 03:57:54.464 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34790 10 6452 1 2025-11-20 03:58:37.688 00:00:10.375 TCP 23.104.0.1:52668 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496434, total packets: 1572, avg bps: 1072, avg pps: 0, avg bpp: 315 Time window: 2025-11-20 02:57:05 - 2025-11-20 03:58:48 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0018s Wall: 0.0016s flows/second: 103743.8 Runtime: 0.0016s