Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-11 23:58:45.977 00:00:10.365 TCP 23.104.0.1:40566 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:59:23.643 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43606 10 6452 1 2025-11-11 23:59:46.381 00:00:10.399 TCP 23.104.0.1:51438 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:00:23.817 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44406 10 6452 1 2025-11-12 00:00:46.789 00:00:10.362 TCP 23.104.0.1:49016 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:01:10.944 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 00:01:11.182 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 00:01:24.041 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47168 10 6452 1 2025-11-12 00:01:47.188 00:00:10.361 TCP 23.104.0.1:44736 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:02:24.254 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41256 10 6452 1 2025-11-12 00:02:47.588 00:00:10.364 TCP 23.104.0.1:49536 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:03:24.469 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39340 10 6452 1 2025-11-11 23:58:59.619 00:05:56.254 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 00:03:47.991 00:00:10.366 TCP 23.104.0.1:56266 -> 1.101.0.1:3000 11 1507 1 2025-11-11 23:59:55.873 00:05:03.744 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 00:04:24.681 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53806 10 6452 1 2025-11-12 00:04:48.396 00:00:10.836 TCP 23.104.0.1:58564 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:05:24.890 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47612 10 6452 1 2025-11-12 00:05:49.268 00:00:10.371 TCP 23.104.0.1:40740 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:06:10.748 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 00:06:10.832 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 00:06:25.094 00:00:11.230 TCP 1.101.0.1:3000 -> 22.102.0.1:34046 10 6452 1 2025-11-12 00:06:49.691 00:00:10.401 TCP 23.104.0.1:43808 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:07:26.357 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53518 10 6452 1 2025-11-12 00:07:50.219 00:00:10.368 TCP 23.104.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:08:26.572 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44794 10 6452 1 2025-11-12 00:08:50.631 00:00:10.363 TCP 23.104.0.1:44338 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:09:26.791 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56352 10 6452 1 2025-11-12 00:04:59.621 00:05:56.253 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 00:09:51.033 00:00:10.366 TCP 23.104.0.1:60550 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:05:55.876 00:05:03.744 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 00:10:27.014 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48728 10 6452 1 2025-11-12 00:10:51.433 00:00:15.053 TCP 23.104.0.1:58806 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:11:11.259 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 00:11:10.991 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 00:11:27.243 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37668 10 6452 1 2025-11-12 00:11:56.544 00:00:10.363 TCP 23.104.0.1:48702 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:12:27.476 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55698 10 6452 1 2025-11-12 00:12:56.945 00:00:10.371 TCP 23.104.0.1:53970 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:13:27.654 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46002 10 6452 1 2025-11-12 00:13:57.353 00:00:10.366 TCP 23.104.0.1:34128 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:14:27.868 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41232 10 6452 1 2025-11-12 00:14:57.764 00:00:10.379 TCP 23.104.0.1:36900 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:15:28.101 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44692 10 6452 1 2025-11-12 00:10:59.622 00:05:56.253 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 00:11:55.877 00:05:03.747 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 00:16:11.193 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 00:15:58.180 00:00:10.368 TCP 23.104.0.1:44518 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:16:11.388 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 00:16:28.312 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49728 10 6452 1 2025-11-12 00:16:58.581 00:00:10.364 TCP 23.104.0.1:45844 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:17:28.487 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35974 10 6452 1 2025-11-12 00:17:58.983 00:00:10.329 TCP 23.104.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:18:28.698 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59846 10 6452 1 2025-11-12 00:18:59.354 00:00:10.362 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:19:28.915 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52888 10 6452 1 2025-11-12 00:19:59.753 00:00:10.383 TCP 23.104.0.1:57630 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:20:29.129 00:00:10.506 TCP 1.101.0.1:3000 -> 22.102.0.1:45400 10 6452 1 2025-11-12 00:21:11.603 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 00:21:11.372 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 00:21:00.177 00:00:10.368 TCP 23.104.0.1:40166 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:21:29.677 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50234 10 6452 1 2025-11-12 00:16:59.626 00:05:56.252 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 00:17:55.879 00:05:03.746 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 00:22:00.583 00:00:10.362 TCP 23.104.0.1:56442 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:22:29.892 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36348 10 6452 1 2025-11-12 00:23:00.982 00:00:10.369 TCP 23.104.0.1:35652 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:23:30.118 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43792 10 6452 1 2025-11-12 00:24:01.392 00:00:10.323 TCP 23.104.0.1:52976 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:24:30.338 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49318 10 6452 1 2025-11-12 00:25:01.762 00:00:10.375 TCP 23.104.0.1:34592 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:25:30.559 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57922 10 6452 1 2025-11-12 00:26:11.501 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 00:26:11.496 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 00:26:02.174 00:00:10.364 TCP 23.104.0.1:57228 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:26:30.782 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52114 10 6452 1 2025-11-12 00:27:02.579 00:00:10.367 TCP 23.104.0.1:35204 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:27:30.999 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54212 10 6452 1 2025-11-12 00:22:59.626 00:05:56.252 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 00:23:55.880 00:05:03.744 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 00:28:02.978 00:00:10.369 TCP 23.104.0.1:38396 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:28:31.214 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33038 10 6452 1 2025-11-12 00:29:03.379 00:00:10.369 TCP 23.104.0.1:42394 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:29:31.431 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54062 10 6452 1 2025-11-12 00:30:03.787 00:00:10.370 TCP 23.104.0.1:58924 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:30:31.603 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42490 10 6452 1 2025-11-12 00:31:11.241 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 00:31:11.547 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 00:31:04.192 00:00:10.368 TCP 23.104.0.1:40738 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:31:31.778 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46626 10 6452 1 2025-11-12 00:32:04.594 00:00:10.323 TCP 23.104.0.1:33720 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:32:32.008 00:00:10.730 TCP 1.101.0.1:3000 -> 22.102.0.1:41432 10 6452 1 2025-11-12 00:33:04.959 00:00:10.361 TCP 23.104.0.1:39704 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:33:32.773 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37482 10 6452 1 2025-11-12 00:28:59.627 00:05:56.252 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 00:29:55.883 00:05:03.745 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 00:34:05.369 00:00:10.364 TCP 23.104.0.1:41312 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:34:32.987 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39766 10 6452 1 2025-11-12 00:35:05.769 00:00:10.377 TCP 23.104.0.1:37576 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:35:33.211 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54364 10 6452 1 2025-11-12 00:36:11.627 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 00:36:11.704 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 00:36:06.191 00:00:10.364 TCP 23.104.0.1:44488 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:36:33.425 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38936 10 6452 1 2025-11-12 00:37:06.595 00:00:10.365 TCP 23.104.0.1:50104 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:37:33.598 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50080 10 6452 1 2025-11-12 00:38:07.001 00:00:10.364 TCP 23.104.0.1:55460 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:38:33.834 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:48454 12 10375 1 2025-11-12 00:39:07.404 00:00:10.441 TCP 23.104.0.1:36642 -> 1.101.0.1:3000 15 1926 1 2025-11-12 00:39:34.103 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38494 10 6452 1 2025-11-12 00:34:59.630 00:05:56.251 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 00:35:55.882 00:05:03.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 00:40:07.891 00:00:10.329 TCP 23.104.0.1:35844 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:40:34.313 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56584 10 6452 1 2025-11-12 00:41:11.713 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 00:41:11.645 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 00:41:08.262 00:00:10.409 TCP 23.104.0.1:58688 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:41:34.539 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56530 10 6452 1 2025-11-12 00:42:08.725 00:00:10.326 TCP 23.104.0.1:39780 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:42:34.751 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52728 10 6452 1 2025-11-12 00:43:09.103 00:00:10.362 TCP 23.104.0.1:41710 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:43:34.963 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45800 10 6452 1 2025-11-12 00:44:09.502 00:00:10.367 TCP 23.104.0.1:34710 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:44:35.182 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:32880 10 6452 1 2025-11-12 00:45:09.910 00:00:10.371 TCP 23.104.0.1:48150 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:45:35.403 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33624 10 6452 1 2025-11-12 00:40:59.644 00:05:56.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 00:41:55.882 00:05:03.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 00:46:11.923 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 00:46:12.051 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 00:46:10.328 00:00:10.364 TCP 23.104.0.1:42716 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:46:35.631 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53816 10 6452 1 2025-11-12 00:47:10.735 00:00:10.368 TCP 23.104.0.1:41464 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:47:35.802 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57848 10 6452 1 2025-11-12 00:48:11.141 00:00:11.115 TCP 23.104.0.1:43974 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:48:36.008 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57010 10 6452 1 2025-11-12 00:49:12.295 00:00:10.364 TCP 23.104.0.1:60854 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:49:36.220 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56558 10 6452 1 2025-11-12 00:50:12.697 00:00:10.365 TCP 23.104.0.1:48514 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:50:36.450 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40994 10 6452 1 2025-11-12 00:51:11.865 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 00:51:12.008 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 00:51:13.108 00:00:10.364 TCP 23.104.0.1:55686 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:51:36.663 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38132 10 6452 1 2025-11-12 00:46:59.647 00:05:56.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 00:47:55.883 00:05:03.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 00:52:13.507 00:00:10.325 TCP 23.104.0.1:53130 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:52:36.873 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40944 10 6452 1 2025-11-12 00:53:13.867 00:00:10.375 TCP 23.104.0.1:33804 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:53:37.070 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50150 10 6452 1 2025-11-12 00:54:14.274 00:00:10.367 TCP 23.104.0.1:53318 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:54:37.283 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:37090 10 6452 1 2025-11-12 00:55:14.678 00:00:14.114 TCP 23.104.0.1:56590 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:55:37.451 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41570 10 6452 1 2025-11-12 00:56:12.007 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-12 00:56:12.042 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-12 00:56:18.880 00:00:10.360 TCP 23.104.0.1:50004 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:56:37.665 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48454 10 6452 1 2025-11-12 00:57:19.277 00:00:10.319 TCP 23.104.0.1:59926 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:57:37.876 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39848 10 6452 1 2025-11-12 00:52:59.649 00:05:56.235 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-12 00:53:55.885 00:05:03.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-12 00:58:19.633 00:00:10.796 TCP 23.104.0.1:45446 -> 1.101.0.1:3000 11 1507 1 2025-11-12 00:58:38.101 00:00:11.344 TCP 1.101.0.1:3000 -> 22.102.0.1:43924 10 6452 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1112, avg pps: 0, avg bpp: 318 Time window: 2025-11-11 23:58:45 - 2025-11-12 00:58:59 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0057s User: 0.0010s Wall: 0.0026s flows/second: 63638.3 Runtime: 0.0026s