Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 23:59:21.465 00:00:10.371 TCP 23.104.0.1:50084 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:59:39.924 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:41874 10 6452 1 2025-11-23 00:00:21.868 00:00:10.373 TCP 23.104.0.1:42624 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:00:40.177 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43686 10 6452 1 2025-11-23 00:01:30.426 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 00:01:29.917 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 00:01:22.278 00:00:10.325 TCP 23.104.0.1:53254 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:01:40.350 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57574 10 6452 1 2025-11-22 23:58:02.430 00:05:04.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 23:58:02.427 00:05:04.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 00:02:22.635 00:00:10.366 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:02:40.562 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42106 10 6452 1 2025-11-23 00:03:23.049 00:00:10.363 TCP 23.104.0.1:38450 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:03:40.770 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50540 10 6452 1 2025-11-23 00:04:23.452 00:00:10.322 TCP 23.104.0.1:50546 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:04:40.981 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:33710 10 6452 1 2025-11-23 00:05:23.812 00:00:10.367 TCP 23.104.0.1:38740 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:05:41.177 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48036 10 6452 1 2025-11-23 00:06:30.306 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 00:06:30.355 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 00:06:24.218 00:00:10.364 TCP 23.104.0.1:54532 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:06:41.389 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:35736 10 6452 1 2025-11-23 00:07:24.624 00:00:10.366 TCP 23.104.0.1:59714 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:07:41.578 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:43190 10 6452 1 2025-11-23 00:04:02.428 00:05:04.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 00:04:02.431 00:05:04.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 00:08:25.022 00:00:10.366 TCP 23.104.0.1:56124 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:08:41.783 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41622 10 6452 1 2025-11-23 00:09:25.430 00:00:10.367 TCP 23.104.0.1:51232 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:09:42.006 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47878 10 6452 1 2025-11-23 00:10:25.840 00:00:10.387 TCP 23.104.0.1:42230 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:10:42.190 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:32978 10 6452 1 2025-11-23 00:11:30.484 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 00:11:30.214 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 00:11:26.269 00:00:10.370 TCP 23.104.0.1:57602 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:11:42.404 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58934 10 6452 1 2025-11-23 00:12:26.683 00:00:10.368 TCP 23.104.0.1:53950 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:12:42.616 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55440 10 6452 1 2025-11-23 00:13:27.106 00:00:10.325 TCP 23.104.0.1:55900 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:13:42.830 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51548 10 6452 1 2025-11-23 00:10:02.434 00:05:04.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 00:10:02.430 00:05:04.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 00:14:27.468 00:00:10.369 TCP 23.104.0.1:37368 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:14:43.005 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41596 10 6452 1 2025-11-23 00:15:27.873 00:00:10.366 TCP 23.104.0.1:36810 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:15:43.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33482 10 6452 1 2025-11-23 00:16:30.596 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 00:16:30.477 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 00:16:28.279 00:00:10.368 TCP 23.104.0.1:36286 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:16:43.433 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59026 10 6452 1 2025-11-23 00:17:28.688 00:00:10.368 TCP 23.104.0.1:35290 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:17:43.645 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55736 10 6452 1 2025-11-23 00:18:29.104 00:00:10.365 TCP 23.104.0.1:33290 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:18:43.819 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54970 10 6452 1 2025-11-23 00:19:29.505 00:00:10.364 TCP 23.104.0.1:45566 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:19:43.999 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43824 10 6452 1 2025-11-23 00:16:02.434 00:05:04.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 00:16:02.432 00:05:04.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 00:20:29.903 00:00:10.382 TCP 23.104.0.1:55264 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:20:44.174 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36226 10 6452 1 2025-11-23 00:21:31.224 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 00:21:31.320 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 00:21:30.325 00:00:10.369 TCP 23.104.0.1:42294 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:21:44.384 00:00:10.888 TCP 1.101.0.1:3000 -> 22.102.0.1:42568 10 6452 1 2025-11-23 00:22:30.733 00:00:10.373 TCP 23.104.0.1:53226 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:22:45.311 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60870 10 6452 1 2025-11-23 00:23:31.150 00:00:10.365 TCP 23.104.0.1:53418 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:23:45.489 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54780 10 6452 1 2025-11-23 00:24:31.553 00:00:10.337 TCP 23.104.0.1:39226 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:24:45.708 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:46740 10 6452 1 2025-11-23 00:25:31.938 00:00:10.380 TCP 23.104.0.1:57710 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:25:45.888 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59662 10 6452 1 2025-11-23 00:22:02.434 00:05:04.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 00:22:02.433 00:05:04.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 00:26:30.757 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 00:26:30.874 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 00:26:32.355 00:00:10.366 TCP 23.104.0.1:51928 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:26:46.113 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-11-23 00:27:32.756 00:00:10.393 TCP 23.104.0.1:46148 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:27:46.330 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58772 10 6452 1 2025-11-23 00:28:33.187 00:00:10.359 TCP 23.104.0.1:49236 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:28:46.553 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52486 10 6452 1 2025-11-23 00:29:33.591 00:00:10.363 TCP 23.104.0.1:42248 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:29:46.770 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60742 10 6452 1 2025-11-23 00:30:33.992 00:00:10.623 TCP 23.104.0.1:43942 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:30:46.953 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:36490 10 6452 1 2025-11-23 00:31:31.043 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 00:31:30.750 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 00:31:34.657 00:00:10.325 TCP 23.104.0.1:48192 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:31:47.184 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53718 10 6452 1 2025-11-23 00:28:02.435 00:05:04.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 00:28:02.437 00:05:04.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 00:32:35.019 00:00:10.321 TCP 23.104.0.1:56782 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:32:47.399 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60546 10 6452 1 2025-11-23 00:33:35.384 00:00:10.373 TCP 23.104.0.1:55486 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:33:47.618 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:37604 10 6452 1 2025-11-23 00:34:35.789 00:00:10.374 TCP 23.104.0.1:60966 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:34:47.808 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50902 10 6452 1 2025-11-23 00:35:36.204 00:00:10.326 TCP 23.104.0.1:36388 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:35:47.990 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:49678 10 6452 1 2025-11-23 00:36:30.792 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 00:36:31.028 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 00:36:36.566 00:00:10.365 TCP 23.104.0.1:50050 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:36:48.234 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:38406 10 6452 1 2025-11-23 00:37:36.973 00:00:10.369 TCP 23.104.0.1:51460 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:37:48.448 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39214 10 6452 1 2025-11-23 00:34:02.436 00:05:04.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 00:34:02.439 00:05:04.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 00:38:37.391 00:00:10.360 TCP 23.104.0.1:55422 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:38:48.670 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48564 10 6452 1 2025-11-23 00:39:37.790 00:00:10.339 TCP 23.104.0.1:37266 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:39:48.880 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:36126 10 6452 1 2025-11-23 00:40:38.170 00:00:10.367 TCP 23.104.0.1:39364 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:40:49.112 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38858 10 6452 1 2025-11-23 00:41:31.169 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 00:41:31.170 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 00:41:38.577 00:00:10.364 TCP 23.104.0.1:51724 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:41:49.338 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48918 10 6452 1 2025-11-23 00:42:38.979 00:00:10.366 TCP 23.104.0.1:56704 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:42:49.508 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48214 10 6452 1 2025-11-23 00:43:39.382 00:00:10.408 TCP 23.104.0.1:54134 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:40:02.445 00:05:04.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 00:43:49.729 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39458 10 6452 1 2025-11-23 00:40:02.444 00:05:04.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 00:44:39.832 00:00:10.347 TCP 23.104.0.1:60176 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:44:49.945 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:36384 10 6452 1 2025-11-23 00:45:40.217 00:00:10.364 TCP 23.104.0.1:45408 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:45:50.183 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48710 10 6452 1 2025-11-23 00:46:31.045 00:00:00.051 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 00:46:30.877 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 00:46:40.623 00:00:10.325 TCP 23.104.0.1:44650 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:46:50.408 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60928 10 6452 1 2025-11-23 00:47:40.982 00:00:10.324 TCP 23.104.0.1:53864 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:47:50.641 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50540 10 6452 1 2025-11-23 00:48:41.346 00:00:10.329 TCP 23.104.0.1:33712 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:48:50.865 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34558 10 6452 1 2025-11-23 00:49:41.708 00:00:10.364 TCP 23.104.0.1:47538 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:49:51.095 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40754 10 6452 1 2025-11-23 00:46:02.447 00:05:04.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 00:46:02.445 00:05:04.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 00:50:42.108 00:00:10.334 TCP 23.104.0.1:47380 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:50:51.316 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53072 10 6452 1 2025-11-23 00:51:31.538 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 00:51:31.271 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 00:51:42.474 00:00:10.325 TCP 23.104.0.1:34830 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:51:51.493 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56500 10 6452 1 2025-11-23 00:52:42.837 00:00:10.384 TCP 23.104.0.1:39438 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:52:51.721 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38814 10 6452 1 2025-11-23 00:53:43.257 00:00:10.367 TCP 23.104.0.1:48346 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:53:51.951 00:00:10.479 TCP 1.101.0.1:3000 -> 22.102.0.1:58850 10 6452 1 2025-11-23 00:54:43.661 00:00:10.365 TCP 23.104.0.1:38368 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:54:52.474 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37622 10 6452 1 2025-11-23 00:55:44.094 00:00:10.364 TCP 23.104.0.1:41700 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:55:52.679 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56970 10 6452 1 2025-11-23 00:52:02.444 00:05:04.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 00:52:02.449 00:05:04.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 00:56:31.657 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 00:56:31.688 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 00:56:44.495 00:00:10.366 TCP 23.104.0.1:42670 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:56:52.897 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37760 10 6452 1 2025-11-23 00:57:44.904 00:00:10.366 TCP 23.104.0.1:45728 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:57:53.122 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54632 10 6452 1 Summary: total flows: 162, total bytes: 490389, total packets: 1551, avg bps: 1089, avg pps: 0, avg bpp: 316 Time window: 2025-11-22 23:58:02 - 2025-11-23 00:58:03 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0054s User: 0.0011s Wall: 0.0030s flows/second: 53999.6 Runtime: 0.0030s