Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 23:58:45.360 00:00:10.364 TCP 23.104.0.1:45930 -> 1.101.0.1:3000 11 1507 1 2025-11-23 23:59:17.537 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52314 10 6452 1 2025-11-23 23:59:45.763 00:00:10.376 TCP 23.104.0.1:40948 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:00:17.748 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34180 10 6452 1 2025-11-24 00:00:46.178 00:00:10.368 TCP 23.104.0.1:44364 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:01:17.966 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58288 12 6556 1 2025-11-24 00:01:46.584 00:00:10.363 TCP 23.104.0.1:38726 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:01:58.979 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 00:01:59.196 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 23:58:02.856 00:05:04.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 23:58:02.858 00:05:04.282 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 00:02:18.187 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33658 10 6452 1 2025-11-24 00:02:46.989 00:00:10.368 TCP 23.104.0.1:59434 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:03:18.396 00:00:10.748 TCP 1.101.0.1:3000 -> 22.102.0.1:54744 11 6504 1 2025-11-24 00:03:47.395 00:00:10.366 TCP 23.104.0.1:35350 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:04:19.186 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50646 10 6452 1 2025-11-24 00:04:47.798 00:00:10.368 TCP 23.104.0.1:47972 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:05:19.401 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54308 10 6452 1 2025-11-24 00:05:48.198 00:00:10.366 TCP 23.104.0.1:60922 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:06:19.616 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50732 10 6452 1 2025-11-24 00:06:59.145 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 00:06:59.230 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:06:48.603 00:00:10.366 TCP 23.104.0.1:40408 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:07:19.832 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42314 10 6452 1 2025-11-24 00:07:49.004 00:00:10.423 TCP 23.104.0.1:44776 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:04:02.856 00:05:04.289 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 00:04:02.859 00:05:04.283 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 00:08:20.079 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54516 10 6452 1 2025-11-24 00:08:49.463 00:00:10.364 TCP 23.104.0.1:34076 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:09:20.305 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35504 10 6452 1 2025-11-24 00:09:49.864 00:00:10.374 TCP 23.104.0.1:50992 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:10:20.514 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54350 10 6452 1 2025-11-24 00:10:50.272 00:00:10.382 TCP 23.104.0.1:57326 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:11:20.725 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57138 10 6452 1 2025-11-24 00:11:59.511 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 00:11:59.405 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:11:50.696 00:00:10.377 TCP 23.104.0.1:38600 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:12:20.939 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:48620 10 6452 1 2025-11-24 00:12:51.125 00:00:10.324 TCP 23.104.0.1:55346 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:13:21.190 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58920 10 6452 1 2025-11-24 00:13:51.486 00:00:10.367 TCP 23.104.0.1:54478 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:10:02.859 00:05:04.284 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 00:10:02.857 00:05:04.289 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 00:14:21.422 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34404 10 6452 1 2025-11-24 00:14:51.890 00:00:10.385 TCP 23.104.0.1:35122 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:15:21.645 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48222 10 6452 1 2025-11-24 00:15:52.308 00:00:10.364 TCP 23.104.0.1:44356 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:16:21.863 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42898 10 6452 1 2025-11-24 00:16:59.561 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 00:16:59.715 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:16:52.715 00:00:10.375 TCP 23.104.0.1:43710 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:17:22.097 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38914 10 6452 1 2025-11-24 00:17:53.130 00:00:10.361 TCP 23.104.0.1:42540 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:18:22.315 00:00:17.369 TCP 1.101.0.1:3000 -> 22.102.0.1:60852 11 6504 1 2025-11-24 00:18:53.534 00:00:10.332 TCP 23.104.0.1:57326 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:19:29.729 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38028 10 6452 1 2025-11-24 00:19:53.908 00:00:10.371 TCP 23.104.0.1:33278 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:16:02.860 00:05:04.285 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 00:16:02.859 00:05:04.290 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 00:20:29.944 00:00:11.330 TCP 1.101.0.1:3000 -> 22.102.0.1:36542 10 6452 1 2025-11-24 00:20:54.314 00:00:10.366 TCP 23.104.0.1:52404 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:21:31.313 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:41388 10 6452 1 2025-11-24 00:21:59.653 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:21:59.475 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 00:21:54.722 00:00:10.370 TCP 23.104.0.1:33448 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:22:31.476 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49788 10 6452 1 2025-11-24 00:22:55.129 00:00:10.367 TCP 23.104.0.1:40266 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:23:31.690 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44218 10 6452 1 2025-11-24 00:23:55.541 00:00:10.366 TCP 23.104.0.1:55766 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:24:31.903 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49314 10 6452 1 2025-11-24 00:24:55.944 00:00:10.374 TCP 23.104.0.1:53246 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:25:32.084 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40684 10 6452 1 2025-11-24 00:22:02.860 00:05:04.290 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 00:25:56.360 00:00:10.321 TCP 23.104.0.1:53292 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:22:02.863 00:05:04.284 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 00:26:32.298 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41340 10 6452 1 2025-11-24 00:26:59.607 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 00:26:59.653 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:26:56.722 00:00:10.371 TCP 23.104.0.1:40496 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:27:32.516 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43330 10 6452 1 2025-11-24 00:27:57.129 00:00:10.367 TCP 23.104.0.1:41730 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:28:32.694 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55240 10 6452 1 2025-11-24 00:28:57.538 00:00:10.330 TCP 23.104.0.1:56338 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:29:32.909 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47650 10 6452 1 2025-11-24 00:29:57.901 00:00:10.368 TCP 23.104.0.1:42330 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:30:33.123 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51704 10 6452 1 2025-11-24 00:30:58.308 00:00:10.373 TCP 23.104.0.1:50046 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:31:33.341 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48486 10 6452 1 2025-11-24 00:31:59.874 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 00:31:59.982 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:28:02.862 00:05:04.289 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 00:28:02.865 00:05:04.283 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 00:31:58.719 00:00:10.368 TCP 23.104.0.1:48658 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:32:33.555 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46908 10 6452 1 2025-11-24 00:32:59.132 00:00:10.363 TCP 23.104.0.1:51024 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:33:33.768 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58512 10 6452 1 2025-11-24 00:33:59.534 00:00:10.363 TCP 23.104.0.1:50758 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:34:33.989 00:00:11.121 TCP 1.101.0.1:3000 -> 22.102.0.1:53748 10 6452 1 2025-11-24 00:34:59.932 00:00:10.336 TCP 23.104.0.1:37192 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:35:35.149 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46474 10 6452 1 2025-11-24 00:36:00.309 00:00:10.351 TCP 23.104.0.1:57814 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:36:35.363 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56558 10 6452 1 2025-11-24 00:37:00.190 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 00:36:59.806 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:37:00.698 00:00:10.364 TCP 23.104.0.1:36444 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:37:35.571 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40310 10 6452 1 2025-11-24 00:38:01.106 00:00:10.328 TCP 23.104.0.1:54652 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:34:02.865 00:05:04.287 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 00:34:02.863 00:05:04.291 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 00:38:35.744 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:52034 10 6452 1 2025-11-24 00:39:01.479 00:00:10.367 TCP 23.104.0.1:38552 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:39:35.912 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47440 10 6452 1 2025-11-24 00:40:01.880 00:00:10.351 TCP 23.104.0.1:58342 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:40:36.126 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47666 10 6452 1 2025-11-24 00:41:02.267 00:00:10.368 TCP 23.104.0.1:48764 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:41:36.340 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53544 10 6452 1 2025-11-24 00:41:59.931 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:42:00.029 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 00:42:02.684 00:00:10.366 TCP 23.104.0.1:52726 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:42:36.560 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:60686 10 6452 1 2025-11-24 00:43:03.111 00:00:10.366 TCP 23.104.0.1:60258 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:43:36.760 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57326 10 6452 1 2025-11-24 00:40:02.866 00:05:04.291 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 00:40:02.863 00:05:04.296 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 00:44:03.519 00:00:10.328 TCP 23.104.0.1:46332 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:44:36.999 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34442 10 6452 1 2025-11-24 00:45:03.885 00:00:10.392 TCP 23.104.0.1:58536 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:45:37.224 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6452 1 2025-11-24 00:46:04.313 00:00:10.367 TCP 23.104.0.1:49958 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:46:37.480 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35294 10 6452 1 2025-11-24 00:47:00.221 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:46:59.947 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 00:47:04.717 00:00:10.323 TCP 23.104.0.1:59934 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:47:37.687 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39192 10 6452 1 2025-11-24 00:48:05.108 00:00:10.356 TCP 23.104.0.1:43888 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:48:37.905 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49916 10 6452 1 2025-11-24 00:49:05.503 00:00:10.364 TCP 23.104.0.1:35842 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:49:38.118 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51032 10 6452 1 2025-11-24 00:46:02.866 00:05:04.296 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 00:46:02.869 00:05:04.291 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 00:50:05.903 00:00:12.203 TCP 23.104.0.1:38198 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:50:38.331 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:37922 10 6452 1 2025-11-24 00:51:08.146 00:00:10.331 TCP 23.104.0.1:42200 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:51:38.503 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41782 10 6452 1 2025-11-24 00:51:59.932 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:52:00.097 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 00:52:08.514 00:00:10.368 TCP 23.104.0.1:53996 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:52:38.722 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46486 10 6452 1 2025-11-24 00:53:08.917 00:00:11.195 TCP 23.104.0.1:54178 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:53:38.936 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:60228 10 6452 1 2025-11-24 00:54:10.151 00:00:11.153 TCP 23.104.0.1:44302 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:54:39.178 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41732 10 6452 1 2025-11-24 00:55:11.336 00:00:10.367 TCP 23.104.0.1:54148 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:55:39.350 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52188 10 6452 1 2025-11-24 00:52:02.870 00:05:04.291 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 00:52:02.868 00:05:04.296 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 00:56:11.740 00:00:10.326 TCP 23.104.0.1:57188 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:56:39.563 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52538 10 6452 1 2025-11-24 00:57:00.296 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 00:57:00.107 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 00:57:12.107 00:00:10.364 TCP 23.104.0.1:48606 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:57:39.780 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56602 10 6452 1 2025-11-24 00:58:12.512 00:00:10.317 TCP 23.104.0.1:49820 -> 1.101.0.1:3000 11 1507 1 2025-11-24 00:58:39.951 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:60840 10 6452 1 Summary: total flows: 164, total bytes: 498556, total packets: 1576, avg bps: 1093, avg pps: 0, avg bpp: 316 Time window: 2025-11-23 23:58:02 - 2025-11-24 00:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0050s User: 0.0000s Wall: 0.0021s flows/second: 77506.0 Runtime: 0.0021s