Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 00:58:51.209 00:00:10.365 TCP 23.104.0.1:50868 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:55:05.961 00:05:04.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 00:55:05.964 00:05:04.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 00:59:14.494 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37190 10 6452 1 2025-12-01 00:59:51.626 00:00:10.364 TCP 23.104.0.1:49660 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:00:22.596 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 01:00:22.415 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 01:00:14.714 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57898 10 6452 1 2025-12-01 01:00:52.027 00:00:10.372 TCP 23.104.0.1:43880 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:01:14.934 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:33650 10 6452 1 2025-12-01 01:01:52.438 00:00:10.361 TCP 23.104.0.1:55480 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:02:15.129 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33692 12 10369 1 2025-12-01 01:02:52.845 00:00:10.461 TCP 23.104.0.1:34934 -> 1.101.0.1:3000 15 1926 1 2025-12-01 01:03:15.366 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51444 10 6452 1 2025-12-01 01:03:53.347 00:00:10.364 TCP 23.104.0.1:40846 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:04:15.586 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48984 10 6452 1 2025-12-01 01:01:05.965 00:05:04.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 01:04:53.752 00:00:10.981 TCP 23.104.0.1:44156 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:01:05.968 00:05:04.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 01:05:22.648 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 01:05:15.801 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58380 12 6556 1 2025-12-01 01:05:22.805 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 01:05:54.771 00:00:10.364 TCP 23.104.0.1:45660 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:06:16.029 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57482 10 6452 1 2025-12-01 01:06:55.173 00:00:10.360 TCP 23.104.0.1:50994 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:07:16.248 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44816 10 6452 1 2025-12-01 01:07:55.576 00:00:10.364 TCP 23.104.0.1:52154 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:08:16.428 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56052 10 6452 1 2025-12-01 01:08:55.986 00:00:10.366 TCP 23.104.0.1:58644 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:09:16.676 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52216 10 6452 1 2025-12-01 01:09:56.390 00:00:10.467 TCP 23.104.0.1:37338 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:10:23.099 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 01:10:22.769 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 01:10:16.899 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46324 10 6452 1 2025-12-01 01:07:05.972 00:05:04.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 01:10:56.892 00:00:10.365 TCP 23.104.0.1:53312 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:07:05.968 00:05:04.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 01:11:17.114 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39494 10 6452 1 2025-12-01 01:11:57.296 00:00:10.384 TCP 23.104.0.1:43182 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:12:17.340 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60532 10 6452 1 2025-12-01 01:12:57.714 00:00:10.385 TCP 23.104.0.1:42578 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:13:17.550 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39342 10 6452 1 2025-12-01 01:13:58.139 00:00:10.366 TCP 23.104.0.1:45242 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:14:17.720 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32844 10 6452 1 2025-12-01 01:14:58.549 00:00:10.791 TCP 23.104.0.1:59418 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:15:22.862 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 01:15:22.860 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 01:15:17.929 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:60240 10 6452 1 2025-12-01 01:15:59.380 00:00:10.332 TCP 23.104.0.1:60562 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:16:18.171 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35030 10 6452 1 2025-12-01 01:16:59.751 00:00:10.381 TCP 23.104.0.1:42180 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:13:05.973 00:05:04.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 01:13:05.971 00:05:04.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 01:17:18.388 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44516 10 6452 1 2025-12-01 01:18:00.165 00:00:10.364 TCP 23.104.0.1:54716 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:18:18.606 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45460 10 6452 1 2025-12-01 01:19:00.566 00:00:10.365 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:19:18.824 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45864 10 6452 1 2025-12-01 01:20:00.974 00:00:10.361 TCP 23.104.0.1:55760 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:20:22.912 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 01:20:23.076 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 01:20:19.038 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57178 10 6452 1 2025-12-01 01:21:01.378 00:00:10.362 TCP 23.104.0.1:38920 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:21:19.255 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41386 10 6452 1 2025-12-01 01:22:01.777 00:00:10.368 TCP 23.104.0.1:48928 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:22:19.428 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35298 10 6452 1 2025-12-01 01:19:05.974 00:05:04.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 01:19:05.971 00:05:04.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 01:23:02.184 00:00:10.364 TCP 23.104.0.1:41516 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:23:19.667 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43368 10 6452 1 2025-12-01 01:24:02.585 00:00:10.367 TCP 23.104.0.1:56510 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:24:19.877 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50188 10 6452 1 2025-12-01 01:25:02.994 00:00:10.361 TCP 23.104.0.1:39132 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:25:23.179 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 01:25:22.966 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 01:25:20.106 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:46234 10 6452 1 2025-12-01 01:26:03.394 00:00:10.365 TCP 23.104.0.1:53408 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:26:20.310 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38346 10 6452 1 2025-12-01 01:27:03.794 00:00:10.346 TCP 23.104.0.1:45930 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:27:20.517 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49122 10 6452 1 2025-12-01 01:28:04.174 00:00:10.361 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:28:20.730 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37198 10 6452 1 2025-12-01 01:25:05.977 00:05:04.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 01:25:05.974 00:05:04.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 01:29:04.577 00:00:10.368 TCP 23.104.0.1:52482 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:29:20.941 00:00:13.728 TCP 1.101.0.1:3000 -> 22.102.0.1:33392 10 6452 1 2025-12-01 01:30:04.987 00:00:10.371 TCP 23.104.0.1:46330 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:30:23.268 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 01:30:22.814 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 01:30:24.721 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52092 10 6452 1 2025-12-01 01:31:05.398 00:00:10.356 TCP 23.104.0.1:35758 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:31:24.938 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:37922 10 6452 1 2025-12-01 01:32:05.795 00:00:10.365 TCP 23.104.0.1:60816 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:32:25.180 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38072 10 6452 1 2025-12-01 01:33:06.203 00:00:10.369 TCP 23.104.0.1:33472 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:33:25.392 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51678 10 6452 1 2025-12-01 01:34:06.605 00:00:10.320 TCP 23.104.0.1:59504 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:34:25.610 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54738 10 6452 1 2025-12-01 01:31:05.981 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 01:31:05.978 00:05:04.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 01:35:06.966 00:00:10.367 TCP 23.104.0.1:32788 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:35:23.063 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 01:35:23.320 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 01:35:25.830 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60998 10 6452 1 2025-12-01 01:36:07.370 00:00:10.364 TCP 23.104.0.1:59424 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:36:26.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52178 10 6452 1 2025-12-01 01:37:07.773 00:00:10.330 TCP 23.104.0.1:57598 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:37:26.298 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33138 10 6452 1 2025-12-01 01:38:08.139 00:00:10.324 TCP 23.104.0.1:55710 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:38:26.512 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60992 10 6452 1 2025-12-01 01:39:08.500 00:00:10.332 TCP 23.104.0.1:51640 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:39:26.735 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48706 10 6452 1 2025-12-01 01:40:23.015 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 01:40:08.870 00:00:10.365 TCP 23.104.0.1:37268 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:40:23.333 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 01:40:26.951 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51430 10 6452 1 2025-12-01 01:37:05.982 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 01:37:05.979 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 01:41:09.273 00:00:10.362 TCP 23.104.0.1:38340 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:41:27.173 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35798 10 6452 1 2025-12-01 01:42:09.678 00:00:10.367 TCP 23.104.0.1:40084 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:42:27.383 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39168 10 6452 1 2025-12-01 01:43:10.104 00:00:10.369 TCP 23.104.0.1:40302 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:43:27.603 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58964 10 6452 1 2025-12-01 01:44:10.501 00:00:10.321 TCP 23.104.0.1:44558 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:44:27.823 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56158 10 6452 1 2025-12-01 01:45:10.863 00:00:10.950 TCP 23.104.0.1:40470 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:45:23.464 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 01:45:23.204 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 01:45:28.075 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41410 10 6452 1 2025-12-01 01:46:11.852 00:00:10.380 TCP 23.104.0.1:48246 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:46:28.288 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35496 10 6452 1 2025-12-01 01:43:05.984 00:05:04.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 01:43:05.982 00:05:04.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 01:47:12.272 00:00:10.364 TCP 23.104.0.1:37100 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:47:28.500 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48340 10 6452 1 2025-12-01 01:48:12.676 00:00:10.367 TCP 23.104.0.1:40384 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:48:28.714 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59358 10 6452 1 2025-12-01 01:49:13.107 00:00:10.362 TCP 23.104.0.1:50416 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:49:28.885 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55102 10 6452 1 2025-12-01 01:50:13.509 00:00:10.361 TCP 23.104.0.1:54450 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:50:23.443 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 01:50:23.628 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 01:50:29.101 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35020 10 6452 1 2025-12-01 01:51:13.908 00:00:10.365 TCP 23.104.0.1:47316 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:51:29.270 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54422 10 6452 1 2025-12-01 01:52:14.313 00:00:10.372 TCP 23.104.0.1:42458 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:52:29.482 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47576 10 6452 1 2025-12-01 01:49:05.982 00:05:04.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 01:49:05.985 00:05:04.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 01:53:14.728 00:00:10.372 TCP 23.104.0.1:37710 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:53:29.658 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34532 10 6452 1 2025-12-01 01:54:15.142 00:00:10.326 TCP 23.104.0.1:42886 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:54:29.830 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39578 10 6452 1 2025-12-01 01:55:23.679 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 01:55:15.511 00:00:10.364 TCP 23.104.0.1:57444 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:55:23.615 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 01:55:30.067 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60556 10 6452 1 2025-12-01 01:56:15.918 00:00:10.369 TCP 23.104.0.1:47524 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:56:30.284 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43870 10 6452 1 2025-12-01 01:57:16.328 00:00:10.367 TCP 23.104.0.1:45716 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:57:30.506 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59328 10 6452 1 2025-12-01 01:58:16.735 00:00:10.368 TCP 23.104.0.1:38404 -> 1.101.0.1:3000 11 1507 1 2025-12-01 01:58:30.681 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60076 10 6452 1 Summary: total flows: 164, total bytes: 502788, total packets: 1580, avg bps: 1054, avg pps: 0, avg bpp: 318 Time window: 2025-12-01 00:55:05 - 2025-12-01 01:58:40 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0041s User: 0.0010s Wall: 0.0021s flows/second: 78317.9 Runtime: 0.0021s