Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 16:59:01.017 00:00:10.320 TCP 23.104.0.1:33744 -> 1.101.0.1:3000 11 1507 1 2025-11-20 16:59:13.541 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48258 10 6452 1 2025-11-20 17:00:01.376 00:00:10.362 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:00:13.753 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36550 10 6452 1 2025-11-20 17:00:24.008 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:00:23.811 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:01:01.774 00:00:10.370 TCP 23.104.0.1:54326 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:01:13.928 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:38958 10 6452 1 2025-11-20 16:57:05.322 00:05:55.673 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 16:57:05.319 00:05:55.679 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:02:02.179 00:00:10.326 TCP 23.104.0.1:55156 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:02:14.172 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43496 10 6452 1 2025-11-20 17:03:02.542 00:00:10.360 TCP 23.104.0.1:47122 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:03:14.386 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34342 10 6452 1 2025-11-20 17:04:02.944 00:00:10.331 TCP 23.104.0.1:36366 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:04:14.601 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45584 10 6452 1 2025-11-20 17:05:03.318 00:00:10.361 TCP 23.104.0.1:45364 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:05:24.172 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:05:24.045 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:05:14.772 00:00:17.776 TCP 1.101.0.1:3000 -> 22.102.0.1:52836 10 6452 1 2025-11-20 17:06:03.724 00:00:10.381 TCP 23.104.0.1:57208 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:06:22.589 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57340 10 6452 1 2025-11-20 17:07:04.132 00:00:10.363 TCP 23.104.0.1:52036 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:07:22.814 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59558 10 6452 1 2025-11-20 17:03:05.325 00:05:55.672 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:03:05.321 00:05:55.677 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:08:04.538 00:00:10.367 TCP 23.104.0.1:43878 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:08:23.047 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52028 10 6452 1 2025-11-20 17:09:04.949 00:00:10.370 TCP 23.104.0.1:39212 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:09:23.262 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53682 10 6452 1 2025-11-20 17:10:05.358 00:00:10.363 TCP 23.104.0.1:42830 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:10:24.268 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:10:24.342 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:10:23.483 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48998 10 6452 1 2025-11-20 17:11:05.764 00:00:10.350 TCP 23.104.0.1:48854 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:11:23.705 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39740 10 6452 1 2025-11-20 17:12:06.194 00:00:10.324 TCP 23.104.0.1:49154 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:12:23.938 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55312 10 6452 1 2025-11-20 17:13:06.554 00:00:10.334 TCP 23.104.0.1:44240 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:13:24.150 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52294 10 6452 1 2025-11-20 17:09:05.330 00:05:55.666 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:09:05.327 00:05:55.671 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:14:06.929 00:00:10.333 TCP 23.104.0.1:46828 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:14:24.372 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56588 10 6452 1 2025-11-20 17:15:07.301 00:00:10.798 TCP 23.104.0.1:54092 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:15:24.159 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:15:24.329 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:15:24.584 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58186 10 6452 1 2025-11-20 17:16:08.142 00:00:10.367 TCP 23.104.0.1:36022 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:16:24.792 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36544 10 6452 1 2025-11-20 17:17:08.550 00:00:10.361 TCP 23.104.0.1:34146 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:17:25.005 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57882 10 6452 1 2025-11-20 17:18:08.950 00:00:10.370 TCP 23.104.0.1:50166 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:18:25.223 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37964 10 6452 1 2025-11-20 17:19:09.359 00:00:10.365 TCP 23.104.0.1:57526 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:19:25.437 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59128 10 6452 1 2025-11-20 17:15:05.332 00:05:55.665 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:15:05.329 00:05:55.672 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:20:09.764 00:00:10.378 TCP 23.104.0.1:59052 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:20:24.461 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:20:24.388 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:20:25.656 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56178 10 6452 1 2025-11-20 17:21:10.179 00:00:10.365 TCP 23.104.0.1:58130 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:21:25.873 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44710 10 6452 1 2025-11-20 17:22:10.577 00:00:10.326 TCP 23.104.0.1:42980 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:22:26.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39538 10 6452 1 2025-11-20 17:23:10.934 00:00:10.380 TCP 23.104.0.1:53262 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:23:26.314 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36904 10 6452 1 2025-11-20 17:24:11.352 00:00:10.368 TCP 23.104.0.1:37668 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:24:26.484 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40506 10 6452 1 2025-11-20 17:25:24.727 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:25:11.800 00:00:10.363 TCP 23.104.0.1:43744 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:25:24.207 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:25:26.699 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36464 10 6452 1 2025-11-20 17:21:05.331 00:05:55.671 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:21:05.333 00:05:55.665 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:26:12.213 00:00:10.366 TCP 23.104.0.1:48852 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:26:26.904 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46054 10 6452 1 2025-11-20 17:27:12.615 00:00:10.370 TCP 23.104.0.1:37448 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:27:27.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52218 10 6452 1 2025-11-20 17:28:13.021 00:00:10.325 TCP 23.104.0.1:52758 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:28:27.306 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:60960 10 6452 1 2025-11-20 17:29:13.383 00:00:10.365 TCP 23.104.0.1:54264 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:29:27.512 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45580 10 6452 1 2025-11-20 17:30:13.787 00:00:10.359 TCP 23.104.0.1:53106 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:30:24.657 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:30:24.489 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:30:27.722 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33676 10 6452 1 2025-11-20 17:31:14.188 00:00:10.578 TCP 23.104.0.1:33702 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:31:27.894 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:37194 10 6452 1 2025-11-20 17:27:05.334 00:05:55.671 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:27:05.336 00:05:55.666 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:32:14.801 00:00:10.365 TCP 23.104.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:32:28.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36382 10 6452 1 2025-11-20 17:33:15.218 00:00:10.360 TCP 23.104.0.1:52732 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:33:28.301 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39800 10 6452 1 2025-11-20 17:34:15.618 00:00:10.364 TCP 23.104.0.1:36950 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:34:28.517 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56328 10 6452 1 2025-11-20 17:35:24.777 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:35:16.027 00:00:10.366 TCP 23.104.0.1:35174 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:35:24.764 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:35:28.732 00:00:10.830 TCP 1.101.0.1:3000 -> 22.102.0.1:59850 10 6452 1 2025-11-20 17:36:16.434 00:00:10.369 TCP 23.104.0.1:60284 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:36:29.601 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57368 10 6452 1 2025-11-20 17:37:16.836 00:00:10.343 TCP 23.104.0.1:49486 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:37:29.814 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33638 10 6452 1 2025-11-20 17:33:05.338 00:05:55.664 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:33:05.336 00:05:55.669 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:38:17.220 00:00:10.324 TCP 23.104.0.1:55754 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:38:30.031 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43644 10 6452 1 2025-11-20 17:39:17.587 00:00:10.363 TCP 23.104.0.1:53434 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:39:30.258 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47438 10 6452 1 2025-11-20 17:40:24.818 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:40:24.701 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:40:17.995 00:00:10.362 TCP 23.104.0.1:50106 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:40:30.470 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56514 10 6452 1 2025-11-20 17:41:18.398 00:00:10.360 TCP 23.104.0.1:36586 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:41:30.699 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44554 10 6452 1 2025-11-20 17:42:18.796 00:00:10.347 TCP 23.104.0.1:53702 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:42:30.915 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53728 10 6452 1 2025-11-20 17:43:19.187 00:00:10.361 TCP 23.104.0.1:55508 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:43:31.137 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-11-20 17:39:05.337 00:05:55.699 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:39:05.341 00:05:55.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:44:31.355 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-11-20 17:44:19.587 00:00:18.349 TCP 23.104.0.1:42312 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:45:24.985 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:45:24.835 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:45:27.975 00:00:10.375 TCP 23.104.0.1:43368 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:45:31.569 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46448 10 6452 1 2025-11-20 17:46:31.791 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43972 10 6452 1 2025-11-20 17:46:28.394 00:00:10.366 TCP 23.104.0.1:42114 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:47:28.791 00:00:10.365 TCP 23.104.0.1:37410 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:47:32.025 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50458 10 6452 1 2025-11-20 17:48:29.201 00:00:10.368 TCP 23.104.0.1:49064 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:48:32.198 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46636 10 6452 1 2025-11-20 17:49:29.602 00:00:10.324 TCP 23.104.0.1:55326 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:49:32.414 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60652 10 6452 1 2025-11-20 17:45:05.342 00:05:55.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:45:05.343 00:05:55.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:50:25.885 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:50:25.457 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:50:29.971 00:00:10.367 TCP 23.104.0.1:56952 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:50:32.643 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53754 10 6452 1 2025-11-20 17:51:30.377 00:00:10.361 TCP 23.104.0.1:47598 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:51:32.856 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35442 10 6452 1 2025-11-20 17:52:30.776 00:00:10.371 TCP 23.104.0.1:38292 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:52:33.086 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38238 10 6452 1 2025-11-20 17:53:31.184 00:00:10.365 TCP 23.104.0.1:40540 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:53:33.301 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51578 10 6452 1 2025-11-20 17:54:31.587 00:00:10.381 TCP 23.104.0.1:33144 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:54:33.479 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55848 10 6452 1 2025-11-20 17:55:25.148 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 17:55:25.116 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 17:55:32.018 00:00:10.367 TCP 23.104.0.1:44612 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:55:33.686 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43412 10 6452 1 2025-11-20 17:51:05.342 00:05:55.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 17:51:05.346 00:05:55.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 17:56:33.901 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59052 10 6452 1 2025-11-20 17:56:32.428 00:00:10.367 TCP 23.104.0.1:37766 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:57:32.836 00:00:10.351 TCP 23.104.0.1:56746 -> 1.101.0.1:3000 11 1507 1 2025-11-20 17:57:34.115 00:00:10.613 TCP 1.101.0.1:3000 -> 22.102.0.1:55490 11 6504 1 2025-11-20 17:58:34.767 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53038 10 6452 1 2025-11-20 17:58:33.237 00:00:10.334 TCP 23.104.0.1:52680 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498400, total packets: 1573, avg bps: 1077, avg pps: 0, avg bpp: 316 Time window: 2025-11-20 16:57:05 - 2025-11-20 17:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0018s Wall: 0.0022s flows/second: 74646.3 Runtime: 0.0022s