Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 02:58:44.757 00:00:10.380 TCP 23.104.0.1:49012 -> 1.101.0.1:3000 11 1507 1 2025-12-01 02:58:45.903 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43756 10 6452 1 2025-12-01 02:55:05.998 00:05:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 667 1 2025-12-01 02:55:05.997 00:05:04.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 02:59:45.170 00:00:11.321 TCP 23.104.0.1:52550 -> 1.101.0.1:3000 11 1507 1 2025-12-01 02:59:46.125 00:00:10.294 TCP 1.101.0.1:3000 -> 22.102.0.1:42676 10 6452 1 2025-12-01 03:00:24.791 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 03:00:24.852 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 03:00:46.457 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57164 10 6452 1 2025-12-01 03:00:46.527 00:00:10.359 TCP 23.104.0.1:51074 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:01:46.664 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49784 10 6452 1 2025-12-01 03:01:46.927 00:00:10.393 TCP 23.104.0.1:36448 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:02:47.359 00:00:10.387 TCP 23.104.0.1:35228 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:02:46.885 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33158 10 6452 1 2025-12-01 03:03:47.115 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55244 10 6452 1 2025-12-01 03:03:47.785 00:00:10.363 TCP 23.104.0.1:55522 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:04:48.181 00:00:10.327 TCP 23.104.0.1:43284 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:04:47.301 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37476 10 6452 1 2025-12-01 03:01:05.996 00:05:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 686 1 2025-12-01 03:00:10.793 00:05:55.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 03:05:25.036 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 03:05:24.917 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 03:05:47.517 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40734 10 6452 1 2025-12-01 03:05:48.548 00:00:10.367 TCP 23.104.0.1:58596 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:06:48.950 00:00:10.327 TCP 23.104.0.1:33382 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:06:47.693 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44028 10 6452 1 2025-12-01 03:07:47.903 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53154 10 6452 1 2025-12-01 03:07:49.324 00:00:10.362 TCP 23.104.0.1:50142 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:08:49.724 00:00:10.328 TCP 23.104.0.1:41416 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:08:48.118 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46138 10 6452 1 2025-12-01 03:09:48.330 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35182 10 6452 1 2025-12-01 03:09:50.105 00:00:10.349 TCP 23.104.0.1:36228 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:10:25.137 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 03:10:25.310 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 03:10:50.504 00:00:10.364 TCP 23.104.0.1:35176 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:06:10.794 00:05:55.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 03:10:48.544 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49470 10 6452 1 2025-12-01 03:06:10.797 00:05:55.204 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 03:11:48.750 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39374 10 6452 1 2025-12-01 03:11:50.906 00:00:10.370 TCP 23.104.0.1:56102 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:12:48.963 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52954 10 6452 1 2025-12-01 03:12:51.315 00:00:10.365 TCP 23.104.0.1:39694 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:13:49.186 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45366 10 6452 1 2025-12-01 03:13:51.717 00:00:10.374 TCP 23.104.0.1:40922 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:14:49.404 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47762 10 6452 1 2025-12-01 03:14:52.135 00:00:10.366 TCP 23.104.0.1:44994 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:15:25.155 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 03:15:25.079 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 03:15:49.626 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53700 10 6452 1 2025-12-01 03:15:52.581 00:00:10.326 TCP 23.104.0.1:38596 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:16:49.842 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47596 10 6452 1 2025-12-01 03:12:10.800 00:05:55.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 03:16:52.948 00:00:10.368 TCP 23.104.0.1:34638 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:12:10.798 00:05:55.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 03:17:50.030 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48120 10 6452 1 2025-12-01 03:17:53.357 00:00:10.368 TCP 23.104.0.1:37622 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:18:50.244 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42132 10 6452 1 2025-12-01 03:18:53.760 00:00:10.340 TCP 23.104.0.1:57300 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:19:50.456 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37984 10 6452 1 2025-12-01 03:19:54.138 00:00:10.365 TCP 23.104.0.1:48108 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:20:25.455 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 03:20:25.335 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 03:20:50.668 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57280 10 6452 1 2025-12-01 03:20:54.541 00:00:10.369 TCP 23.104.0.1:48590 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:21:50.882 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50136 10 6452 1 2025-12-01 03:21:54.946 00:00:10.373 TCP 23.104.0.1:46498 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:22:51.112 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52166 10 6452 1 2025-12-01 03:18:10.800 00:05:55.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 03:22:55.352 00:00:10.367 TCP 23.104.0.1:41642 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:18:10.802 00:05:55.231 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 03:23:51.322 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56310 10 6452 1 2025-12-01 03:23:55.763 00:00:10.331 TCP 23.104.0.1:46836 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:24:51.496 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34108 10 6452 1 2025-12-01 03:24:56.136 00:00:10.369 TCP 23.104.0.1:44870 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:25:25.491 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 03:25:25.302 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 03:25:51.709 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46008 10 6452 1 2025-12-01 03:25:56.541 00:00:10.324 TCP 23.104.0.1:39018 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:26:51.917 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60642 10 6452 1 2025-12-01 03:26:56.903 00:00:10.369 TCP 23.104.0.1:43920 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:27:52.125 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60046 10 6452 1 2025-12-01 03:27:57.309 00:00:10.363 TCP 23.104.0.1:59234 -> 1.101.0.1:3000 12 1559 1 2025-12-01 03:24:10.804 00:05:55.232 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 03:24:10.806 00:05:55.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 03:28:52.339 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:60710 10 6452 1 2025-12-01 03:28:57.708 00:00:10.320 TCP 23.104.0.1:56110 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:29:52.507 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45904 10 6452 1 2025-12-01 03:29:58.096 00:00:10.377 TCP 23.104.0.1:52658 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:30:25.409 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 03:30:25.563 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 03:30:52.725 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53138 10 6452 1 2025-12-01 03:30:58.496 00:00:10.368 TCP 23.104.0.1:48026 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:31:52.938 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:33842 10 6452 1 2025-12-01 03:31:58.900 00:00:10.374 TCP 23.104.0.1:46822 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:32:53.183 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:38472 10 6452 1 2025-12-01 03:32:59.308 00:00:10.371 TCP 23.104.0.1:45896 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:33:53.421 00:00:10.695 TCP 1.101.0.1:3000 -> 22.102.0.1:55338 10 6452 1 2025-12-01 03:33:59.715 00:00:10.323 TCP 23.104.0.1:54734 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:30:10.802 00:05:55.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 03:30:10.804 00:05:55.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 03:34:54.156 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50114 10 6452 1 2025-12-01 03:35:00.101 00:00:10.327 TCP 23.104.0.1:42656 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:35:25.648 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 03:35:25.510 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 03:35:54.331 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47414 10 6452 1 2025-12-01 03:36:00.465 00:00:10.368 TCP 23.104.0.1:58242 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:36:54.503 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33226 10 6452 1 2025-12-01 03:37:00.870 00:00:10.363 TCP 23.104.0.1:38522 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:37:54.716 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43988 10 6452 1 2025-12-01 03:38:01.271 00:00:10.369 TCP 23.104.0.1:42278 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:38:54.926 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:47562 10 6452 1 2025-12-01 03:39:01.680 00:00:10.376 TCP 23.104.0.1:60790 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:39:55.168 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41312 10 6452 1 2025-12-01 03:40:02.110 00:00:10.367 TCP 23.104.0.1:58672 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:40:25.513 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 03:40:25.760 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 03:40:55.380 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60836 10 6452 1 2025-12-01 03:36:10.806 00:05:55.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 03:36:10.802 00:05:55.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 03:41:02.514 00:00:10.383 TCP 23.104.0.1:45804 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:41:55.594 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57486 10 6452 1 2025-12-01 03:42:02.935 00:00:10.338 TCP 23.104.0.1:58346 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:42:55.769 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38810 10 6452 1 2025-12-01 03:43:03.313 00:00:10.367 TCP 23.104.0.1:41930 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:43:55.989 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:42642 10 6452 1 2025-12-01 03:44:03.716 00:00:10.370 TCP 23.104.0.1:55990 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:44:56.172 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42028 10 6452 1 2025-12-01 03:45:04.121 00:00:10.359 TCP 23.104.0.1:53182 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:45:25.659 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 03:45:25.916 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 03:45:56.390 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44786 10 6452 1 2025-12-01 03:46:04.521 00:00:10.369 TCP 23.104.0.1:48496 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:42:10.805 00:05:55.236 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 03:46:56.605 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36392 10 6452 1 2025-12-01 03:42:10.807 00:05:55.231 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 03:47:04.929 00:00:10.345 TCP 23.104.0.1:50850 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:47:56.818 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:39136 10 6452 1 2025-12-01 03:48:05.320 00:00:10.372 TCP 23.104.0.1:54166 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:48:57.031 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56836 10 6452 1 2025-12-01 03:49:05.729 00:00:10.368 TCP 23.104.0.1:34456 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:49:57.240 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52998 10 6452 1 2025-12-01 03:50:06.136 00:00:10.363 TCP 23.104.0.1:43346 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:50:25.858 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 03:50:25.859 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 03:50:57.452 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58766 10 6452 1 2025-12-01 03:51:06.537 00:00:10.370 TCP 23.104.0.1:52280 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:51:57.664 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46966 10 6452 1 2025-12-01 03:52:06.945 00:00:10.448 TCP 23.104.0.1:36860 -> 1.101.0.1:3000 15 1926 1 2025-12-01 03:48:10.810 00:05:55.229 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 03:48:10.807 00:05:55.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 03:52:57.883 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:45282 13 10409 1 2025-12-01 03:53:07.441 00:00:10.364 TCP 23.104.0.1:52810 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:53:58.129 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35200 10 6452 1 2025-12-01 03:54:07.843 00:00:10.380 TCP 23.104.0.1:39846 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:54:58.350 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49372 10 6452 1 2025-12-01 03:55:08.260 00:00:10.367 TCP 23.104.0.1:40064 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:55:25.993 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 03:55:26.111 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 03:55:58.559 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46894 10 6452 1 2025-12-01 03:56:08.664 00:00:10.364 TCP 23.104.0.1:53272 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:56:58.733 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38088 10 6452 1 2025-12-01 03:57:09.095 00:00:10.439 TCP 23.104.0.1:60740 -> 1.101.0.1:3000 15 1926 1 2025-12-01 03:57:58.906 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:50464 12 10375 1 2025-12-01 03:58:09.568 00:00:10.365 TCP 23.104.0.1:47100 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 506995, total packets: 1584, avg bps: 1069, avg pps: 0, avg bpp: 320 Time window: 2025-12-01 02:55:05 - 2025-12-01 03:58:19 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0017s Wall: 0.0022s flows/second: 74751.8 Runtime: 0.0022s