Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 04:59:03.671 00:00:10.365 TCP 23.104.0.1:55726 -> 1.101.0.1:3000 11 1507 1 2025-11-20 04:59:19.684 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45548 10 6452 1 2025-11-20 05:00:07.929 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:00:07.944 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:00:04.101 00:00:10.364 TCP 23.104.0.1:42900 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:00:19.905 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41450 10 6452 1 2025-11-20 05:01:04.500 00:00:10.366 TCP 23.104.0.1:50034 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:01:20.124 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39044 10 6452 1 2025-11-20 04:57:05.070 00:05:55.520 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 04:58:00.589 00:05:04.482 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:02:04.901 00:00:10.366 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:02:20.347 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34928 10 6452 1 2025-11-20 05:03:05.309 00:00:10.368 TCP 23.104.0.1:40346 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:03:20.565 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38474 10 6452 1 2025-11-20 05:04:05.714 00:00:10.382 TCP 23.104.0.1:52098 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:04:20.794 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41474 10 6452 1 2025-11-20 05:05:07.897 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:05:07.897 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:05:06.137 00:00:10.364 TCP 23.104.0.1:55874 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:05:20.969 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:43180 10 6452 1 2025-11-20 05:06:06.535 00:00:10.368 TCP 23.104.0.1:38630 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:06:21.166 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58530 10 6452 1 2025-11-20 05:07:06.964 00:00:10.385 TCP 23.104.0.1:54530 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:07:21.377 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39704 10 6452 1 2025-11-20 05:03:05.073 00:05:55.518 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:04:00.593 00:05:04.481 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:08:07.388 00:00:10.510 TCP 23.104.0.1:58546 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:08:21.589 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:36502 10 6452 1 2025-11-20 05:09:07.952 00:00:10.330 TCP 23.104.0.1:59712 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:09:21.834 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59546 10 6452 1 2025-11-20 05:10:08.039 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:10:08.143 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:10:08.320 00:00:10.372 TCP 23.104.0.1:60232 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:10:22.079 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36972 10 6452 1 2025-11-20 05:11:08.733 00:00:10.331 TCP 23.104.0.1:36678 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:11:22.296 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46164 10 6452 1 2025-11-20 05:12:09.108 00:00:10.368 TCP 23.104.0.1:41284 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:12:22.519 00:00:10.378 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 10 6452 1 2025-11-20 05:13:09.513 00:00:10.366 TCP 23.104.0.1:42230 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:13:22.938 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:57902 10 6452 1 2025-11-20 05:09:05.077 00:05:55.516 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:10:00.594 00:05:04.494 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:14:09.919 00:00:10.371 TCP 23.104.0.1:50856 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:14:23.178 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39304 10 6452 1 2025-11-20 05:15:08.017 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:15:08.174 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:15:10.326 00:00:10.364 TCP 23.104.0.1:54304 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:15:23.384 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57752 10 6452 1 2025-11-20 05:16:10.731 00:00:10.373 TCP 23.104.0.1:53074 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:16:23.596 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46702 12 6556 1 2025-11-20 05:17:11.144 00:00:10.367 TCP 23.104.0.1:43032 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:17:23.811 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48636 10 6452 1 2025-11-20 05:18:11.554 00:00:10.364 TCP 23.104.0.1:48812 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:18:23.983 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55124 10 6452 1 2025-11-20 05:19:11.955 00:00:10.366 TCP 23.104.0.1:46624 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:19:24.217 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45974 10 6452 1 2025-11-20 05:15:05.090 00:05:55.504 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:16:00.595 00:05:04.494 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:20:08.297 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:20:08.465 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:20:12.363 00:00:10.362 TCP 23.104.0.1:44338 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:20:24.398 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:51980 10 6452 1 2025-11-20 05:21:12.773 00:00:10.368 TCP 23.104.0.1:38932 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:21:24.638 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39078 10 6452 1 2025-11-20 05:22:13.188 00:00:10.360 TCP 23.104.0.1:37490 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:22:24.857 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:34926 10 6452 1 2025-11-20 05:23:13.587 00:00:10.362 TCP 23.104.0.1:33882 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:23:25.085 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43666 10 6452 1 2025-11-20 05:24:13.989 00:00:10.362 TCP 23.104.0.1:41786 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:24:25.308 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48920 10 6452 1 2025-11-20 05:25:08.417 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:25:08.519 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:25:14.392 00:00:10.373 TCP 23.104.0.1:49770 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:25:25.529 00:00:10.547 TCP 1.101.0.1:3000 -> 22.102.0.1:58018 10 6452 1 2025-11-20 05:21:05.091 00:05:55.503 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:22:00.596 00:05:04.494 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:26:14.804 00:00:10.366 TCP 23.104.0.1:58012 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:26:26.126 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49914 10 6452 1 2025-11-20 05:27:15.211 00:00:10.328 TCP 23.104.0.1:60800 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:27:26.298 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47610 10 6452 1 2025-11-20 05:28:15.578 00:00:10.368 TCP 23.104.0.1:57808 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:28:26.523 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46860 10 6452 1 2025-11-20 05:29:15.986 00:00:10.369 TCP 23.104.0.1:32968 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:29:26.742 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56644 10 6452 1 2025-11-20 05:30:08.636 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:30:08.399 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:30:16.392 00:00:10.362 TCP 23.104.0.1:51506 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:30:26.952 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51166 10 6452 1 2025-11-20 05:31:16.793 00:00:10.377 TCP 23.104.0.1:46966 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:31:27.183 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:59384 10 6452 1 2025-11-20 05:27:05.093 00:05:55.506 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:28:00.598 00:05:04.493 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:32:17.206 00:00:10.363 TCP 23.104.0.1:51804 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:32:27.351 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53218 10 6452 1 2025-11-20 05:33:17.610 00:00:10.364 TCP 23.104.0.1:54110 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:33:27.567 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33828 10 6452 1 2025-11-20 05:34:18.014 00:00:10.320 TCP 23.104.0.1:42430 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:34:27.784 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46344 10 6452 1 2025-11-20 05:35:08.842 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:35:08.491 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:35:18.373 00:00:10.364 TCP 23.104.0.1:45788 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:35:28.005 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6452 1 2025-11-20 05:36:18.776 00:00:10.368 TCP 23.104.0.1:52612 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:36:28.228 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44816 10 6452 1 2025-11-20 05:37:19.182 00:00:10.374 TCP 23.104.0.1:50712 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:37:28.462 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36608 10 6452 1 2025-11-20 05:33:05.094 00:05:55.506 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:34:00.601 00:05:04.491 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:38:19.597 00:00:10.365 TCP 23.104.0.1:39616 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:38:28.684 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48918 10 6452 1 2025-11-20 05:39:20.006 00:00:10.371 TCP 23.104.0.1:51470 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:39:28.900 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42648 10 6452 1 2025-11-20 05:40:08.666 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:40:08.820 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:40:20.419 00:00:10.376 TCP 23.104.0.1:50474 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:40:29.122 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51052 10 6452 1 2025-11-20 05:41:20.834 00:00:10.390 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:41:29.351 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39418 10 6452 1 2025-11-20 05:42:21.271 00:00:10.361 TCP 23.104.0.1:55392 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:42:29.571 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56830 10 6452 1 2025-11-20 05:43:21.669 00:00:10.360 TCP 23.104.0.1:57650 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:43:29.797 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52364 10 6452 1 2025-11-20 05:39:05.095 00:05:55.506 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:40:00.604 00:05:04.493 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:44:22.089 00:00:10.323 TCP 23.104.0.1:39200 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:44:30.023 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43590 10 6452 1 2025-11-20 05:45:08.972 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:45:08.696 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:45:22.452 00:00:10.339 TCP 23.104.0.1:49660 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:45:30.242 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49542 10 6452 1 2025-11-20 05:46:22.830 00:00:10.379 TCP 23.104.0.1:40952 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:46:30.457 00:00:10.524 TCP 1.101.0.1:3000 -> 22.102.0.1:46320 10 6452 1 2025-11-20 05:47:23.247 00:00:10.322 TCP 23.104.0.1:42394 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:47:31.035 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47360 10 6452 1 2025-11-20 05:48:23.606 00:00:10.364 TCP 23.104.0.1:46350 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:48:31.210 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37798 10 6452 1 2025-11-20 05:49:24.014 00:00:10.369 TCP 23.104.0.1:53936 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:49:31.436 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42430 10 6452 1 2025-11-20 05:45:05.100 00:05:55.508 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:46:00.604 00:05:04.497 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:50:08.907 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:50:09.207 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:50:24.419 00:00:10.367 TCP 23.104.0.1:54830 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:50:31.644 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60270 10 6452 1 2025-11-20 05:51:24.825 00:00:10.368 TCP 23.104.0.1:60742 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:51:31.859 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51352 10 6452 1 2025-11-20 05:52:25.244 00:00:10.366 TCP 23.104.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:52:32.086 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33184 10 6452 1 2025-11-20 05:53:25.646 00:00:10.325 TCP 23.104.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:53:32.299 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6452 1 2025-11-20 05:54:26.012 00:00:10.364 TCP 23.104.0.1:47062 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:54:32.519 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52266 10 6452 1 2025-11-20 05:55:08.939 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 05:55:09.174 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 05:55:26.421 00:00:10.363 TCP 23.104.0.1:39380 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:55:32.738 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43444 10 6452 1 2025-11-20 05:51:05.110 00:05:55.507 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 05:52:00.610 00:05:04.490 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 05:56:26.823 00:00:10.362 TCP 23.104.0.1:47934 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:56:32.956 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47600 12 6556 1 2025-11-20 05:57:27.236 00:00:10.439 TCP 23.104.0.1:51872 -> 1.101.0.1:3000 15 1926 1 2025-11-20 05:57:33.187 00:00:10.700 TCP 1.101.0.1:3000 -> 22.102.0.1:48266 12 10375 1 2025-11-20 05:58:27.717 00:00:10.378 TCP 23.104.0.1:34680 -> 1.101.0.1:3000 11 1507 1 2025-11-20 05:58:33.933 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:35872 10 6452 1 Summary: total flows: 164, total bytes: 502898, total packets: 1582, avg bps: 1087, avg pps: 0, avg bpp: 317 Time window: 2025-11-20 04:57:05 - 2025-11-20 05:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0043s User: 0.0011s Wall: 0.0015s flows/second: 108667.6 Runtime: 0.0015s