Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 13:58:41.725 00:00:10.375 TCP 23.104.0.1:41748 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:55:06.199 00:05:04.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 13:55:06.201 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 13:59:19.313 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33656 10 6452 1 2025-12-01 13:59:42.137 00:00:10.365 TCP 23.104.0.1:37766 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:00:19.541 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58098 10 6452 1 2025-12-01 14:00:38.368 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 14:00:38.045 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 14:00:42.543 00:00:10.377 TCP 23.104.0.1:55254 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:01:19.708 00:00:10.786 TCP 1.101.0.1:3000 -> 22.102.0.1:41376 10 6452 1 2025-12-01 14:01:42.957 00:00:10.361 TCP 23.104.0.1:57968 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:02:20.539 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46764 10 6452 1 2025-12-01 14:02:43.358 00:00:10.326 TCP 23.104.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:03:20.762 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52764 10 6452 1 2025-12-01 14:03:43.718 00:00:10.381 TCP 23.104.0.1:39014 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:04:20.976 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36222 10 6452 1 2025-12-01 14:04:44.135 00:00:10.374 TCP 23.104.0.1:49278 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:01:06.204 00:05:04.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 14:01:06.206 00:05:04.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 14:05:21.218 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:40454 10 6452 1 2025-12-01 14:05:38.359 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 14:05:38.210 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 14:05:44.551 00:00:10.774 TCP 23.104.0.1:54172 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:06:21.395 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48538 10 6452 1 2025-12-01 14:06:45.370 00:00:10.369 TCP 23.104.0.1:60132 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:07:21.606 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58466 10 6452 1 2025-12-01 14:07:45.777 00:00:10.374 TCP 23.104.0.1:55842 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:08:21.820 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50074 10 6452 1 2025-12-01 14:08:46.193 00:00:10.372 TCP 23.104.0.1:43094 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:09:22.041 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33942 10 6452 1 2025-12-01 14:09:46.602 00:00:11.371 TCP 23.104.0.1:43474 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:10:22.255 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42710 10 6452 1 2025-12-01 14:10:38.296 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 14:10:38.355 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 14:10:48.012 00:00:10.365 TCP 23.104.0.1:44130 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:07:06.207 00:05:04.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 14:07:06.204 00:05:04.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 14:11:22.473 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58566 10 6452 1 2025-12-01 14:11:48.420 00:00:10.364 TCP 23.104.0.1:47114 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:12:22.681 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54608 10 6452 1 2025-12-01 14:12:48.821 00:00:10.362 TCP 23.104.0.1:59410 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:13:22.892 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48846 10 6452 1 2025-12-01 14:13:49.220 00:00:10.322 TCP 23.104.0.1:51722 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:14:23.110 00:00:10.959 TCP 1.101.0.1:3000 -> 22.102.0.1:42872 10 6452 1 2025-12-01 14:14:49.580 00:00:10.369 TCP 23.104.0.1:53790 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:15:24.105 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36206 10 6452 1 2025-12-01 14:15:38.455 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 14:15:38.495 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 14:15:49.986 00:00:10.328 TCP 23.104.0.1:54554 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:16:24.282 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41682 10 6452 1 2025-12-01 14:16:50.367 00:00:10.364 TCP 23.104.0.1:56654 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:13:06.208 00:05:04.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 14:13:06.207 00:05:04.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 14:17:24.496 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41158 10 6452 1 2025-12-01 14:17:50.774 00:00:10.367 TCP 23.104.0.1:52922 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:18:24.705 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41948 10 6452 1 2025-12-01 14:18:51.183 00:00:10.377 TCP 23.104.0.1:58138 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:19:24.924 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48914 10 6452 1 2025-12-01 14:19:51.599 00:00:10.364 TCP 23.104.0.1:55006 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:20:25.141 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55870 10 6452 1 2025-12-01 14:20:38.577 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 14:20:38.568 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 14:20:52.017 00:00:10.360 TCP 23.104.0.1:57874 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:21:25.324 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39070 10 6452 1 2025-12-01 14:21:52.422 00:00:10.371 TCP 23.104.0.1:54696 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:22:25.492 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59030 10 6452 1 2025-12-01 14:22:52.835 00:00:10.403 TCP 23.104.0.1:51780 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:19:06.209 00:05:04.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 14:19:06.207 00:05:04.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 14:23:25.672 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45498 10 6452 1 2025-12-01 14:23:53.280 00:00:10.362 TCP 23.104.0.1:42264 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:24:25.887 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35710 10 6452 1 2025-12-01 14:24:53.680 00:00:10.377 TCP 23.104.0.1:53154 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:25:26.111 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57266 10 6452 1 2025-12-01 14:25:38.600 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 14:25:38.711 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 14:25:54.102 00:00:10.362 TCP 23.104.0.1:45720 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:26:26.331 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49504 12 6556 1 2025-12-01 14:26:54.502 00:00:10.324 TCP 23.104.0.1:60258 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:27:26.552 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33816 10 6452 1 2025-12-01 14:27:54.864 00:00:10.327 TCP 23.104.0.1:45750 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:28:26.763 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46182 10 6452 1 2025-12-01 14:28:55.229 00:00:10.378 TCP 23.104.0.1:44832 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:25:06.209 00:05:04.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 14:25:06.209 00:05:04.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 14:29:26.973 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38856 10 6452 1 2025-12-01 14:29:55.648 00:00:10.329 TCP 23.104.0.1:45600 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:30:38.778 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 14:30:27.209 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55592 10 6452 1 2025-12-01 14:30:38.885 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 14:30:56.013 00:00:10.370 TCP 23.104.0.1:57498 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:31:27.422 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:37988 10 6452 1 2025-12-01 14:31:56.423 00:00:10.364 TCP 23.104.0.1:50404 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:32:27.589 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48070 10 6452 1 2025-12-01 14:32:56.824 00:00:10.359 TCP 23.104.0.1:34944 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:33:27.801 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37424 10 6452 1 2025-12-01 14:33:57.219 00:00:10.364 TCP 23.104.0.1:42170 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:34:28.015 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35534 10 6452 1 2025-12-01 14:34:57.625 00:00:10.365 TCP 23.104.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:31:06.211 00:05:04.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 14:31:06.208 00:05:04.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 14:35:38.890 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 14:35:28.227 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57034 10 6452 1 2025-12-01 14:35:39.022 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 14:35:58.028 00:00:10.364 TCP 23.104.0.1:54004 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:36:28.434 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36342 10 6452 1 2025-12-01 14:36:58.432 00:00:10.361 TCP 23.104.0.1:39610 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:37:28.602 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60092 10 6452 1 2025-12-01 14:37:58.833 00:00:10.403 TCP 23.104.0.1:56508 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:38:28.817 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34118 10 6452 1 2025-12-01 14:38:59.284 00:00:10.364 TCP 23.104.0.1:53152 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:39:29.038 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40456 10 6452 1 2025-12-01 14:39:59.683 00:00:10.370 TCP 23.104.0.1:60570 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:40:29.248 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51734 10 6452 1 2025-12-01 14:40:39.020 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 14:40:38.978 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 14:37:06.211 00:05:04.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 14:41:00.103 00:00:10.361 TCP 23.104.0.1:37858 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:37:06.214 00:05:04.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 14:41:29.459 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37388 10 6452 1 2025-12-01 14:42:00.505 00:00:10.363 TCP 23.104.0.1:44996 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:42:29.673 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33992 10 6452 1 2025-12-01 14:43:00.911 00:00:10.362 TCP 23.104.0.1:56724 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:43:29.885 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34150 10 6452 1 2025-12-01 14:44:01.312 00:00:10.369 TCP 23.104.0.1:34186 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:44:30.108 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46444 10 6452 1 2025-12-01 14:45:01.717 00:00:10.373 TCP 23.104.0.1:50036 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:45:30.284 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39034 10 6452 1 2025-12-01 14:45:39.036 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 14:45:38.815 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 14:46:02.134 00:00:10.364 TCP 23.104.0.1:51142 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:46:30.498 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46840 10 6452 1 2025-12-01 14:43:06.215 00:05:04.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 14:43:06.212 00:05:04.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 14:47:02.536 00:00:10.371 TCP 23.104.0.1:53874 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:47:30.708 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50842 10 6452 1 2025-12-01 14:48:02.947 00:00:10.335 TCP 23.104.0.1:40124 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:48:30.921 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40114 10 6452 1 2025-12-01 14:49:03.317 00:00:10.365 TCP 23.104.0.1:38888 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:49:31.141 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34474 10 6452 1 2025-12-01 14:50:03.724 00:00:10.381 TCP 23.104.0.1:52190 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:50:31.313 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58498 10 6452 1 2025-12-01 14:50:39.207 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 14:50:39.155 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 14:51:04.134 00:00:10.364 TCP 23.104.0.1:37694 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:51:31.527 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41966 10 6452 1 2025-12-01 14:52:04.541 00:00:10.323 TCP 23.104.0.1:41194 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:52:31.749 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59054 10 6452 1 2025-12-01 14:49:06.213 00:05:04.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 14:49:06.216 00:05:04.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 14:53:04.906 00:00:10.326 TCP 23.104.0.1:33332 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:53:31.968 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:45054 10 6452 1 2025-12-01 14:54:05.265 00:00:10.364 TCP 23.104.0.1:46804 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:54:32.214 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55142 10 6452 1 2025-12-01 14:55:05.670 00:00:10.367 TCP 23.104.0.1:58230 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:55:39.374 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 14:55:39.507 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 14:55:32.428 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59032 10 6452 1 2025-12-01 14:56:06.106 00:00:10.324 TCP 23.104.0.1:45750 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:56:32.643 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59878 10 6452 1 2025-12-01 14:57:06.472 00:00:10.360 TCP 23.104.0.1:37288 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:57:32.864 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54278 10 6452 1 2025-12-01 14:58:06.871 00:00:10.379 TCP 23.104.0.1:49262 -> 1.101.0.1:3000 11 1507 1 2025-12-01 14:58:33.036 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59478 10 6452 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1044, avg pps: 0, avg bpp: 316 Time window: 2025-12-01 13:55:06 - 2025-12-01 14:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0048s User: 0.0010s Wall: 0.0023s flows/second: 72437.4 Runtime: 0.0023s