Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 23:58:50.658 00:00:10.367 TCP 23.104.0.1:42336 -> 1.101.0.1:3000 11 1507 1 2025-11-17 23:59:04.066 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 23:59:03.996 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 23:59:18.182 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47310 10 6452 1 2025-11-17 23:59:51.090 00:00:10.359 TCP 23.104.0.1:34462 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:00:18.394 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43978 10 6452 1 2025-11-18 00:00:51.491 00:00:10.349 TCP 23.104.0.1:35308 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:01:18.607 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59410 10 6452 1 2025-11-18 00:01:51.874 00:00:10.366 TCP 23.104.0.1:60930 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:02:18.824 00:00:10.742 TCP 1.101.0.1:3000 -> 22.102.0.1:47454 10 6452 1 2025-11-17 23:58:58.985 00:05:04.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 00:02:52.278 00:00:10.365 TCP 23.104.0.1:34768 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:03:19.611 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44858 10 6452 1 2025-11-18 00:03:52.682 00:00:10.366 TCP 23.104.0.1:36398 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:04:04.319 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 23:59:58.987 00:05:04.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 00:04:04.120 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 00:04:19.828 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51134 10 6452 1 2025-11-18 00:04:53.099 00:00:10.364 TCP 23.104.0.1:35702 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:05:20.064 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43168 10 6452 1 2025-11-18 00:05:53.502 00:00:10.370 TCP 23.104.0.1:60668 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:06:20.275 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42234 10 6452 1 2025-11-18 00:06:53.904 00:00:10.364 TCP 23.104.0.1:58926 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:07:20.444 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56086 10 6452 1 2025-11-18 00:07:54.306 00:00:10.327 TCP 23.104.0.1:57558 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:08:20.657 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53950 10 6452 1 2025-11-18 00:09:04.330 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 00:08:54.674 00:00:10.361 TCP 23.104.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:09:04.410 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 00:04:58.986 00:05:04.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 00:09:20.825 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55540 10 6452 1 2025-11-18 00:09:55.104 00:00:10.319 TCP 23.104.0.1:48264 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:05:58.989 00:05:04.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 00:10:21.047 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39660 10 6452 1 2025-11-18 00:10:55.462 00:00:10.363 TCP 23.104.0.1:56412 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:11:21.262 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56162 10 6452 1 2025-11-18 00:11:55.862 00:00:10.370 TCP 23.104.0.1:35344 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:12:21.478 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36336 10 6452 1 2025-11-18 00:12:56.274 00:00:10.362 TCP 23.104.0.1:34156 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:13:21.688 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:55502 10 6452 1 2025-11-18 00:14:04.375 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 00:14:04.439 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 00:13:56.671 00:00:10.360 TCP 23.104.0.1:52758 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:14:21.895 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60546 10 6452 1 2025-11-18 00:10:58.988 00:05:04.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 00:14:57.101 00:00:10.318 TCP 23.104.0.1:50342 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:15:22.111 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59324 10 6452 1 2025-11-18 00:11:58.990 00:05:04.879 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 00:15:57.465 00:00:10.368 TCP 23.104.0.1:51082 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:16:22.328 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51746 10 6452 1 2025-11-18 00:16:57.888 00:00:10.385 TCP 23.104.0.1:33488 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:17:22.532 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56076 10 6452 1 2025-11-18 00:17:58.310 00:00:10.322 TCP 23.104.0.1:43874 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:18:22.759 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55160 10 6452 1 2025-11-18 00:19:04.352 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 00:19:04.425 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 00:18:58.670 00:00:10.649 TCP 23.104.0.1:32908 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:19:22.971 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55568 10 6452 1 2025-11-18 00:19:59.369 00:00:10.367 TCP 23.104.0.1:50350 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:20:23.199 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38020 10 6452 1 2025-11-18 00:16:58.990 00:05:04.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 00:20:59.772 00:00:10.934 TCP 23.104.0.1:52866 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:21:23.414 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50668 10 6452 1 2025-11-18 00:17:58.990 00:05:00.010 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 667 1 2025-11-18 00:22:00.761 00:00:10.375 TCP 23.104.0.1:47824 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:22:23.584 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48410 10 6452 1 2025-11-18 00:23:01.189 00:00:10.368 TCP 23.104.0.1:55856 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:23:23.800 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43142 10 6452 1 2025-11-18 00:24:04.802 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 00:24:04.501 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 00:24:01.600 00:00:10.365 TCP 23.104.0.1:57960 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:24:24.009 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37562 10 6452 1 2025-11-18 00:25:02.005 00:00:10.365 TCP 23.104.0.1:54576 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:25:24.223 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58596 10 6452 1 2025-11-18 00:26:02.409 00:00:10.363 TCP 23.104.0.1:41780 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:26:24.393 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33774 10 6452 1 2025-11-18 00:22:58.998 00:05:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 686 1 2025-11-18 00:27:02.815 00:00:10.437 TCP 23.104.0.1:40636 -> 1.101.0.1:3000 15 1926 1 2025-11-18 00:27:24.570 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45812 12 10375 1 2025-11-18 00:23:03.871 00:05:55.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 00:28:03.292 00:00:10.368 TCP 23.104.0.1:60664 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:28:24.809 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47268 10 6452 1 2025-11-18 00:29:04.721 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 00:29:04.790 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 00:29:03.696 00:00:10.329 TCP 23.104.0.1:39290 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:29:25.039 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60990 10 6452 1 2025-11-18 00:30:04.086 00:00:10.360 TCP 23.104.0.1:36724 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:30:25.254 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40446 10 6452 1 2025-11-18 00:31:04.490 00:00:10.323 TCP 23.104.0.1:38598 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:31:25.468 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34926 10 6452 1 2025-11-18 00:32:04.851 00:00:10.387 TCP 23.104.0.1:50484 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:32:25.686 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51684 10 6452 1 2025-11-18 00:28:03.878 00:05:55.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 00:33:05.272 00:00:10.320 TCP 23.104.0.1:41562 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:33:25.904 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44388 10 6452 1 2025-11-18 00:29:03.872 00:05:55.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 00:34:04.477 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 00:34:04.768 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 00:34:05.633 00:00:10.369 TCP 23.104.0.1:41254 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:34:26.114 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46820 10 6452 1 2025-11-18 00:35:06.036 00:00:10.369 TCP 23.104.0.1:36684 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:35:26.359 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35116 10 6452 1 2025-11-18 00:36:06.444 00:00:10.364 TCP 23.104.0.1:45156 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:36:26.587 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52996 10 6452 1 2025-11-18 00:37:06.846 00:00:11.049 TCP 23.104.0.1:56702 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:37:26.799 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58096 10 6452 1 2025-11-18 00:38:07.933 00:00:10.393 TCP 23.104.0.1:44868 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:38:27.021 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53712 10 6452 1 2025-11-18 00:34:03.874 00:05:55.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 00:39:05.227 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 00:39:04.883 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 00:39:08.364 00:00:10.362 TCP 23.104.0.1:37690 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:39:27.231 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35048 10 6452 1 2025-11-18 00:35:03.872 00:05:55.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 00:40:08.763 00:00:10.375 TCP 23.104.0.1:34726 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:40:27.444 00:00:10.272 TCP 1.101.0.1:3000 -> 22.102.0.1:44212 10 6452 1 2025-11-18 00:41:09.176 00:00:10.373 TCP 23.104.0.1:42338 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:41:27.753 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56376 10 6452 1 2025-11-18 00:42:09.584 00:00:10.437 TCP 23.104.0.1:43340 -> 1.101.0.1:3000 15 1926 1 2025-11-18 00:42:27.969 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39502 12 10375 1 2025-11-18 00:43:10.083 00:00:10.364 TCP 23.104.0.1:59006 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:43:28.180 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54274 10 6452 1 2025-11-18 00:44:05.155 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 00:44:04.842 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 00:44:10.486 00:00:11.153 TCP 23.104.0.1:51324 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:44:28.353 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59426 10 6452 1 2025-11-18 00:40:03.879 00:05:55.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 00:45:11.677 00:00:10.367 TCP 23.104.0.1:51638 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:45:28.572 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34632 10 6452 1 2025-11-18 00:41:03.877 00:05:55.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 00:46:12.110 00:00:10.361 TCP 23.104.0.1:38296 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:46:28.798 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44564 10 6452 1 2025-11-18 00:47:12.512 00:00:10.370 TCP 23.104.0.1:41390 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:47:28.977 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56822 10 6452 1 2025-11-18 00:48:12.918 00:00:10.353 TCP 23.104.0.1:56658 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:48:29.198 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58396 10 6452 1 2025-11-18 00:49:05.082 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 00:49:04.949 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 00:49:13.321 00:00:10.370 TCP 23.104.0.1:46068 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:49:29.406 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42432 10 6452 1 2025-11-18 00:50:13.736 00:00:10.370 TCP 23.104.0.1:50610 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:50:29.633 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39664 10 6452 1 2025-11-18 00:46:03.886 00:05:55.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 00:51:14.140 00:00:10.364 TCP 23.104.0.1:57928 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:51:29.861 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60398 10 6452 1 2025-11-18 00:47:03.885 00:05:55.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 00:52:14.542 00:00:10.362 TCP 23.104.0.1:46350 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:52:30.096 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60688 10 6452 1 2025-11-18 00:53:14.947 00:00:11.135 TCP 23.104.0.1:46306 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:53:30.311 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39916 10 6452 1 2025-11-18 00:54:05.186 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 00:54:05.302 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 00:54:16.124 00:00:10.361 TCP 23.104.0.1:43136 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:54:30.528 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49446 10 6452 1 2025-11-18 00:55:16.523 00:00:10.324 TCP 23.104.0.1:44544 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:55:30.743 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58338 10 6452 1 2025-11-18 00:56:16.885 00:00:10.379 TCP 23.104.0.1:36204 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:56:30.951 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60596 10 6452 1 2025-11-18 00:52:03.888 00:05:55.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 00:57:17.302 00:00:10.366 TCP 23.104.0.1:41130 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:57:31.189 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59480 10 6452 1 2025-11-18 00:53:03.887 00:05:55.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 00:58:17.704 00:00:10.363 TCP 23.104.0.1:51840 -> 1.101.0.1:3000 11 1507 1 2025-11-18 00:58:31.424 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54676 10 6452 1 Summary: total flows: 164, total bytes: 506909, total packets: 1582, avg bps: 1123, avg pps: 0, avg bpp: 320 Time window: 2025-11-17 23:58:50 - 2025-11-18 00:58:59 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0050s User: 0.0017s Wall: 0.0023s flows/second: 70543.1 Runtime: 0.0023s