Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 11:58:48.378 00:00:10.372 TCP 23.104.0.1:46342 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:58:51.244 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46776 10 6452 1 2025-12-01 11:55:06.172 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 11:55:06.168 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 11:59:51.458 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58952 10 6452 1 2025-12-01 11:59:48.791 00:00:10.323 TCP 23.104.0.1:44144 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:00:35.840 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 12:00:35.867 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:00:51.639 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60068 10 6452 1 2025-12-01 12:00:49.151 00:00:10.363 TCP 23.104.0.1:41042 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:01:49.552 00:00:10.369 TCP 23.104.0.1:40708 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:01:51.863 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52920 10 6452 1 2025-12-01 12:02:49.956 00:00:10.327 TCP 23.104.0.1:37404 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:02:52.099 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36384 10 6452 1 2025-12-01 12:03:50.321 00:00:10.854 TCP 23.104.0.1:33742 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:03:52.273 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42070 10 6452 1 2025-12-01 12:04:51.210 00:00:10.363 TCP 23.104.0.1:41300 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:04:52.494 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37590 10 6452 1 2025-12-01 12:01:06.171 00:05:04.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 12:01:06.173 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 12:05:35.790 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:05:35.934 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 12:05:51.616 00:00:10.364 TCP 23.104.0.1:55430 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:05:52.710 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49740 10 6452 1 2025-12-01 12:06:52.933 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:52176 10 6452 1 2025-12-01 12:06:52.022 00:00:10.367 TCP 23.104.0.1:48994 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:07:52.427 00:00:10.363 TCP 23.104.0.1:41750 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:07:53.186 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42928 10 6452 1 2025-12-01 12:08:53.400 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44850 10 6452 1 2025-12-01 12:08:52.828 00:00:10.377 TCP 23.104.0.1:40924 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:09:53.624 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45172 10 6452 1 2025-12-01 12:09:53.243 00:00:10.323 TCP 23.104.0.1:54290 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:10:35.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:10:35.993 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 12:10:53.855 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46152 10 6452 1 2025-12-01 12:07:06.170 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 12:10:53.601 00:00:10.368 TCP 23.104.0.1:45004 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:07:06.173 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 12:11:54.008 00:00:10.329 TCP 23.104.0.1:39322 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:11:54.083 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48214 10 6452 1 2025-12-01 12:12:54.256 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56768 10 6452 1 2025-12-01 12:12:54.373 00:00:10.373 TCP 23.104.0.1:52406 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:13:54.466 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57884 10 6452 1 2025-12-01 12:13:54.774 00:00:10.374 TCP 23.104.0.1:37322 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:14:55.181 00:00:10.549 TCP 23.104.0.1:52738 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:14:54.677 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56158 10 6452 1 2025-12-01 12:15:36.051 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:15:35.912 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 12:15:55.771 00:00:10.372 TCP 23.104.0.1:37474 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:15:54.889 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46466 10 6452 1 2025-12-01 12:16:56.182 00:00:10.372 TCP 23.104.0.1:58568 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:16:55.110 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57792 10 6452 1 2025-12-01 12:13:06.172 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 12:13:06.173 00:05:04.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 12:17:56.590 00:00:10.365 TCP 23.104.0.1:59782 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:17:55.331 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52346 10 6452 1 2025-12-01 12:18:55.568 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53858 10 6452 1 2025-12-01 12:18:56.993 00:00:10.334 TCP 23.104.0.1:58458 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:19:55.791 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34068 10 6452 1 2025-12-01 12:19:57.365 00:00:10.372 TCP 23.104.0.1:58326 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:20:36.137 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:20:36.130 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 12:20:56.024 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38464 10 6452 1 2025-12-01 12:20:57.778 00:00:10.356 TCP 23.104.0.1:46870 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:21:56.236 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59604 10 6452 1 2025-12-01 12:21:58.176 00:00:10.369 TCP 23.104.0.1:60984 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:22:56.456 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58162 10 6452 1 2025-12-01 12:19:06.173 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 12:19:06.176 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 12:22:58.580 00:00:10.377 TCP 23.104.0.1:58594 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:23:56.666 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52306 10 6452 1 2025-12-01 12:23:58.990 00:00:10.368 TCP 23.104.0.1:57608 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:24:56.883 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37382 10 6452 1 2025-12-01 12:24:59.398 00:00:10.367 TCP 23.104.0.1:45718 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:25:36.670 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 12:25:36.781 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:25:57.084 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38790 10 6452 1 2025-12-01 12:25:59.801 00:00:10.373 TCP 23.104.0.1:40438 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:26:57.299 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59542 10 6452 1 2025-12-01 12:27:00.206 00:00:10.386 TCP 23.104.0.1:55800 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:27:57.521 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45382 10 6452 1 2025-12-01 12:28:00.641 00:00:10.368 TCP 23.104.0.1:47706 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:28:57.741 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59556 10 6452 1 2025-12-01 12:25:06.173 00:05:04.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 12:25:06.176 00:05:04.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 12:29:01.054 00:00:10.368 TCP 23.104.0.1:38644 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:29:57.960 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46324 12 6556 1 2025-12-01 12:30:01.460 00:00:10.326 TCP 23.104.0.1:53222 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:30:36.520 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 12:30:36.706 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:30:58.185 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39596 10 6452 1 2025-12-01 12:31:01.825 00:00:10.365 TCP 23.104.0.1:37868 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:31:58.403 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40892 10 6452 1 2025-12-01 12:32:02.230 00:00:10.361 TCP 23.104.0.1:59836 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:32:58.633 00:00:10.951 TCP 1.101.0.1:3000 -> 22.102.0.1:60776 12 6556 1 2025-12-01 12:33:02.624 00:00:10.368 TCP 23.104.0.1:52690 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:33:59.622 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:41852 10 6452 1 2025-12-01 12:34:03.035 00:00:10.364 TCP 23.104.0.1:56868 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:34:59.830 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35406 10 6452 1 2025-12-01 12:31:06.175 00:05:04.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 12:31:06.179 00:05:04.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 12:35:03.439 00:00:10.323 TCP 23.104.0.1:42202 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:35:36.336 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 12:35:36.225 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:36:00.069 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43444 10 6452 1 2025-12-01 12:36:03.800 00:00:10.368 TCP 23.104.0.1:54478 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:37:00.287 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47870 10 6452 1 2025-12-01 12:37:04.209 00:00:10.369 TCP 23.104.0.1:43922 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:38:00.503 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39338 10 6452 1 2025-12-01 12:38:04.611 00:00:10.363 TCP 23.104.0.1:58132 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:39:00.718 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35570 10 6452 1 2025-12-01 12:39:05.018 00:00:10.361 TCP 23.104.0.1:57972 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:40:00.936 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:33668 10 6452 1 2025-12-01 12:40:05.420 00:00:10.328 TCP 23.104.0.1:47450 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:40:36.416 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:40:36.655 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 12:37:06.180 00:05:04.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 12:41:01.172 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46284 10 6452 1 2025-12-01 12:37:06.179 00:05:04.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 12:41:05.786 00:00:10.366 TCP 23.104.0.1:46972 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:42:01.388 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32868 10 6452 1 2025-12-01 12:42:06.189 00:00:10.367 TCP 23.104.0.1:37512 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:43:01.604 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40944 10 6452 1 2025-12-01 12:43:06.593 00:00:10.363 TCP 23.104.0.1:47506 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:44:01.830 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52578 10 6452 1 2025-12-01 12:44:06.995 00:00:10.365 TCP 23.104.0.1:41544 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:45:02.088 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42136 10 6452 1 2025-12-01 12:45:07.407 00:00:10.320 TCP 23.104.0.1:41040 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:45:36.744 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:45:36.510 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 12:46:02.296 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55578 10 6452 1 2025-12-01 12:46:07.770 00:00:10.369 TCP 23.104.0.1:36316 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:43:06.179 00:05:04.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 12:43:06.182 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 12:47:02.509 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54802 10 6452 1 2025-12-01 12:47:08.180 00:00:10.361 TCP 23.104.0.1:34998 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:48:02.722 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51662 10 6452 1 2025-12-01 12:48:08.576 00:00:10.380 TCP 23.104.0.1:37730 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:49:02.931 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:46798 10 6452 1 2025-12-01 12:49:08.995 00:00:10.368 TCP 23.104.0.1:51342 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:50:03.170 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:34494 10 6452 1 2025-12-01 12:50:09.395 00:00:10.365 TCP 23.104.0.1:44114 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:50:36.657 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 12:50:36.504 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:51:03.369 00:00:10.409 TCP 1.101.0.1:3000 -> 22.102.0.1:42106 10 6452 1 2025-12-01 12:51:09.796 00:00:10.367 TCP 23.104.0.1:53086 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:52:03.816 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59976 10 6452 1 2025-12-01 12:52:10.199 00:00:10.364 TCP 23.104.0.1:57698 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:49:06.183 00:05:04.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 12:49:06.185 00:05:04.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 12:53:03.985 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54524 10 6452 1 2025-12-01 12:53:10.603 00:00:10.362 TCP 23.104.0.1:58890 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:54:04.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59104 10 6452 1 2025-12-01 12:54:11.007 00:00:10.346 TCP 23.104.0.1:50388 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:55:04.426 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:38518 10 6452 1 2025-12-01 12:55:11.391 00:00:10.371 TCP 23.104.0.1:33190 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:55:36.902 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 12:55:36.950 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 12:56:04.637 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:41000 10 6452 1 2025-12-01 12:56:11.804 00:00:10.368 TCP 23.104.0.1:34932 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:57:04.812 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57808 10 6452 1 2025-12-01 12:57:12.219 00:00:10.373 TCP 23.104.0.1:59472 -> 1.101.0.1:3000 11 1507 1 2025-12-01 12:58:05.033 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58580 10 6452 1 2025-12-01 12:58:12.632 00:00:10.372 TCP 23.104.0.1:38786 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498556, total packets: 1576, avg bps: 1050, avg pps: 0, avg bpp: 316 Time window: 2025-12-01 11:55:06 - 2025-12-01 12:58:23 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0017s Wall: 0.0022s flows/second: 75889.9 Runtime: 0.0022s