Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 23:58:44.424 00:00:10.364 TCP 23.104.0.1:44570 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:58:56.721 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37698 10 6452 1 2025-11-29 23:55:05.542 00:05:04.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 23:55:05.545 00:05:04.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 23:59:52.543 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 23:59:44.827 00:00:10.377 TCP 23.104.0.1:35610 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:59:52.484 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 23:59:56.930 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49486 10 6452 1 2025-11-30 00:00:45.238 00:00:10.324 TCP 23.104.0.1:42902 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:00:57.140 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38682 10 6452 1 2025-11-30 00:01:45.597 00:00:10.323 TCP 23.104.0.1:48880 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:01:57.314 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55292 10 6452 1 2025-11-30 00:02:45.968 00:00:10.371 TCP 23.104.0.1:34502 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:02:57.530 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48746 10 6452 1 2025-11-30 00:03:46.397 00:00:10.366 TCP 23.104.0.1:32944 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:03:57.745 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38154 10 6452 1 2025-11-30 00:04:52.363 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 00:04:52.593 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 00:04:46.799 00:00:10.364 TCP 23.104.0.1:53592 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:01:05.547 00:05:04.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 00:04:57.917 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57438 10 6452 1 2025-11-30 00:01:05.544 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 00:05:47.203 00:00:10.360 TCP 23.104.0.1:33500 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:05:58.126 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43122 10 6452 1 2025-11-30 00:06:47.603 00:00:10.362 TCP 23.104.0.1:60690 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:06:58.350 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50344 10 6452 1 2025-11-30 00:07:48.006 00:00:10.372 TCP 23.104.0.1:34188 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:07:58.575 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37474 10 6452 1 2025-11-30 00:08:48.420 00:00:10.370 TCP 23.104.0.1:53162 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:08:58.787 00:00:10.370 TCP 1.101.0.1:3000 -> 22.102.0.1:53552 10 6452 1 2025-11-30 00:09:52.743 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 00:09:52.838 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 00:09:48.823 00:00:10.365 TCP 23.104.0.1:41892 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:09:59.198 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52422 10 6452 1 2025-11-30 00:10:49.226 00:00:10.362 TCP 23.104.0.1:54186 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:07:05.547 00:05:04.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 00:10:59.417 00:00:10.389 TCP 1.101.0.1:3000 -> 22.102.0.1:51008 10 6452 1 2025-11-30 00:07:05.543 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 00:11:49.629 00:00:10.432 TCP 23.104.0.1:43646 -> 1.101.0.1:3000 15 1926 1 2025-11-30 00:11:59.846 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:40532 12 10369 1 2025-11-30 00:12:50.110 00:00:10.364 TCP 23.104.0.1:36576 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:13:00.120 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46370 10 6452 1 2025-11-30 00:13:50.509 00:00:10.374 TCP 23.104.0.1:35260 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:14:00.333 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39408 10 6452 1 2025-11-30 00:14:52.503 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 00:14:52.785 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 00:14:50.916 00:00:10.375 TCP 23.104.0.1:47948 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:15:00.548 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60062 10 6452 1 2025-11-30 00:15:51.329 00:00:10.367 TCP 23.104.0.1:42626 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:16:00.779 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58112 10 6452 1 2025-11-30 00:17:01.035 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34202 10 6452 1 2025-11-30 00:13:05.545 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 00:16:51.748 00:00:10.341 TCP 23.104.0.1:37382 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:13:05.548 00:05:04.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 00:17:52.130 00:00:10.325 TCP 23.104.0.1:44460 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:18:01.213 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33972 10 6452 1 2025-11-30 00:18:52.500 00:00:10.373 TCP 23.104.0.1:54924 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:19:01.431 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60672 10 6452 1 2025-11-30 00:19:52.824 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 00:19:52.892 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 00:19:52.914 00:00:10.371 TCP 23.104.0.1:57522 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:20:01.646 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56270 10 6452 1 2025-11-30 00:20:53.323 00:00:10.363 TCP 23.104.0.1:56456 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:21:01.859 00:00:10.381 TCP 1.101.0.1:3000 -> 22.102.0.1:38378 10 6452 1 2025-11-30 00:21:53.727 00:00:10.376 TCP 23.104.0.1:33294 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:22:02.276 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53748 10 6452 1 2025-11-30 00:22:54.140 00:00:10.360 TCP 23.104.0.1:35688 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:19:05.549 00:05:04.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 00:19:05.551 00:05:04.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 00:23:02.456 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33674 10 6452 1 2025-11-30 00:23:54.537 00:00:10.320 TCP 23.104.0.1:34464 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:24:02.668 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36466 10 6452 1 2025-11-30 00:24:52.753 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 00:24:53.028 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 00:24:54.896 00:00:10.374 TCP 23.104.0.1:36506 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:25:02.915 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:51700 10 6452 1 2025-11-30 00:25:55.311 00:00:10.366 TCP 23.104.0.1:32816 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:26:03.099 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58832 10 6452 1 2025-11-30 00:26:55.714 00:00:10.379 TCP 23.104.0.1:37726 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:27:03.321 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60620 10 6452 1 2025-11-30 00:27:56.133 00:00:10.368 TCP 23.104.0.1:34764 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:28:03.537 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47824 10 6452 1 2025-11-30 00:25:05.557 00:05:04.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 00:28:56.539 00:00:10.323 TCP 23.104.0.1:35484 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:25:05.561 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 00:29:03.742 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47912 10 6452 1 2025-11-30 00:29:53.138 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 00:29:52.939 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 00:29:56.899 00:00:10.363 TCP 23.104.0.1:49484 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:30:03.915 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:51140 10 6452 1 2025-11-30 00:30:57.296 00:00:10.367 TCP 23.104.0.1:34210 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:31:04.104 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56634 10 6452 1 2025-11-30 00:31:57.701 00:00:10.447 TCP 23.104.0.1:60112 -> 1.101.0.1:3000 15 1926 1 2025-11-30 00:32:04.320 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:60878 12 10375 1 2025-11-30 00:32:58.186 00:00:10.367 TCP 23.104.0.1:40148 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:33:04.579 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50274 12 6556 1 2025-11-30 00:33:58.589 00:00:10.377 TCP 23.104.0.1:50772 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:34:04.799 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33088 10 6452 1 2025-11-30 00:34:52.823 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 00:34:53.226 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 00:31:05.561 00:05:04.732 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 00:31:05.563 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 00:34:58.993 00:00:10.357 TCP 23.104.0.1:41094 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:35:05.016 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53872 10 6452 1 2025-11-30 00:35:59.387 00:00:10.326 TCP 23.104.0.1:54624 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:36:05.238 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44922 10 6452 1 2025-11-30 00:36:59.752 00:00:10.380 TCP 23.104.0.1:45024 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:37:05.460 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47322 10 6452 1 2025-11-30 00:38:00.173 00:00:10.326 TCP 23.104.0.1:35956 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:38:05.672 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39948 10 6452 1 2025-11-30 00:39:00.540 00:00:10.367 TCP 23.104.0.1:41694 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:39:05.890 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55352 10 6452 1 2025-11-30 00:39:53.403 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 00:39:53.193 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 00:40:00.947 00:00:10.376 TCP 23.104.0.1:45936 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:40:06.110 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:53922 10 6452 1 2025-11-30 00:41:01.359 00:00:10.363 TCP 23.104.0.1:49882 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:37:05.563 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 00:37:05.561 00:05:04.732 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 00:41:06.355 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49342 10 6452 1 2025-11-30 00:42:06.568 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48260 12 10375 1 2025-11-30 00:42:01.766 00:00:10.454 TCP 23.104.0.1:38768 -> 1.101.0.1:3000 15 1926 1 2025-11-30 00:43:02.260 00:00:10.323 TCP 23.104.0.1:59258 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:43:06.803 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60778 10 6452 1 2025-11-30 00:44:02.621 00:00:10.361 TCP 23.104.0.1:60196 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:44:07.031 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52990 10 6452 1 2025-11-30 00:44:53.191 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 00:44:53.223 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 00:45:03.019 00:00:10.326 TCP 23.104.0.1:46304 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:45:07.203 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44940 10 6452 1 2025-11-30 00:46:03.381 00:00:10.327 TCP 23.104.0.1:36988 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:46:07.430 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34136 10 6452 1 2025-11-30 00:43:05.564 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 00:43:05.563 00:05:04.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 00:47:03.745 00:00:10.369 TCP 23.104.0.1:43186 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:47:07.651 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40558 10 6452 1 2025-11-30 00:48:04.149 00:00:10.374 TCP 23.104.0.1:40828 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:48:07.871 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49194 10 6452 1 2025-11-30 00:49:04.563 00:00:10.360 TCP 23.104.0.1:39798 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:49:08.097 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49542 10 6452 1 2025-11-30 00:49:53.507 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 00:49:53.349 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 00:50:04.962 00:00:10.368 TCP 23.104.0.1:46858 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:50:08.327 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41456 10 6452 1 2025-11-30 00:51:05.368 00:00:10.366 TCP 23.104.0.1:37862 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:51:08.557 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53034 10 6452 1 2025-11-30 00:52:05.774 00:00:10.367 TCP 23.104.0.1:46186 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:52:08.783 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52748 10 6452 1 2025-11-30 00:49:05.563 00:05:04.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 00:49:05.566 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 00:53:06.180 00:00:10.364 TCP 23.104.0.1:48218 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:53:09.002 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:43916 10 6452 1 2025-11-30 00:54:06.582 00:00:10.369 TCP 23.104.0.1:55298 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:54:09.248 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40020 10 6452 1 2025-11-30 00:54:53.301 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 00:54:53.387 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 00:55:06.986 00:00:10.371 TCP 23.104.0.1:34868 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:55:09.472 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60284 10 6452 1 2025-11-30 00:56:07.395 00:00:10.414 TCP 23.104.0.1:36354 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:56:09.707 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59264 10 6452 1 2025-11-30 00:57:07.852 00:00:10.381 TCP 23.104.0.1:58372 -> 1.101.0.1:3000 11 1507 1 2025-11-30 00:57:09.922 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56738 10 6452 1 2025-11-30 00:58:10.127 00:00:10.587 TCP 1.101.0.1:3000 -> 22.102.0.1:55494 10 6452 1 2025-11-30 00:58:08.270 00:00:10.366 TCP 23.104.0.1:56426 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511472, total packets: 1592, avg bps: 1078, avg pps: 0, avg bpp: 321 Time window: 2025-11-29 23:55:05 - 2025-11-30 00:58:20 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0022s Wall: 0.0057s flows/second: 28934.8 Runtime: 0.0057s