Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 15:58:43.023 00:00:10.369 TCP 23.104.0.1:35900 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:58:47.934 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51278 10 6452 1 2025-12-01 15:55:06.251 00:05:04.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 15:55:06.249 00:05:04.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 15:59:43.427 00:00:10.382 TCP 23.104.0.1:34060 -> 1.101.0.1:3000 11 1507 1 2025-12-01 15:59:48.159 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47020 10 6452 1 2025-12-01 16:00:40.534 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 16:00:40.544 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:00:43.848 00:00:10.377 TCP 23.104.0.1:38360 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:00:48.335 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52856 10 6452 1 2025-12-01 16:01:44.263 00:00:10.325 TCP 23.104.0.1:41114 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:01:48.553 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60768 10 6452 1 2025-12-01 16:02:44.634 00:00:10.362 TCP 23.104.0.1:36940 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:02:48.766 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40228 10 6452 1 2025-12-01 16:03:45.036 00:00:10.367 TCP 23.104.0.1:33660 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:03:48.978 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:36708 10 6452 1 2025-12-01 16:04:45.442 00:00:10.363 TCP 23.104.0.1:35024 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:04:49.213 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44704 10 6452 1 2025-12-01 16:01:06.252 00:05:04.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 16:01:06.255 00:05:04.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 16:05:40.667 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 16:05:40.510 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:05:45.847 00:00:10.388 TCP 23.104.0.1:37076 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:05:49.425 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33462 10 6452 1 2025-12-01 16:06:46.267 00:00:10.405 TCP 23.104.0.1:54418 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:06:49.644 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38274 10 6452 1 2025-12-01 16:07:46.708 00:00:10.380 TCP 23.104.0.1:52916 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:07:49.817 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53602 10 6452 1 2025-12-01 16:08:50.032 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35966 10 6452 1 2025-12-01 16:08:47.130 00:00:10.362 TCP 23.104.0.1:39496 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:09:50.247 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49080 10 6452 1 2025-12-01 16:09:47.532 00:00:10.389 TCP 23.104.0.1:42588 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:10:40.786 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 16:10:40.840 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:10:50.416 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49018 10 6452 1 2025-12-01 16:10:47.956 00:00:10.323 TCP 23.104.0.1:37630 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:07:06.254 00:05:04.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 16:07:06.256 00:05:04.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 16:11:50.633 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39724 10 6452 1 2025-12-01 16:11:48.317 00:00:11.133 TCP 23.104.0.1:39986 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:12:49.491 00:00:10.366 TCP 23.104.0.1:37488 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:12:50.850 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47618 10 6452 1 2025-12-01 16:13:51.029 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56620 10 6452 1 2025-12-01 16:13:49.902 00:00:10.362 TCP 23.104.0.1:41656 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:14:50.307 00:00:10.361 TCP 23.104.0.1:32958 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:14:51.248 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49214 10 6452 1 2025-12-01 16:15:40.940 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:15:41.281 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 16:15:51.466 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37672 10 6452 1 2025-12-01 16:15:50.704 00:00:10.324 TCP 23.104.0.1:44738 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:16:51.681 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54194 10 6452 1 2025-12-01 16:16:51.090 00:00:10.360 TCP 23.104.0.1:39614 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:13:06.255 00:05:04.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 16:13:06.259 00:05:04.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 16:17:51.494 00:00:10.374 TCP 23.104.0.1:37894 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:17:51.896 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60038 10 6452 1 2025-12-01 16:18:52.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59604 10 6452 1 2025-12-01 16:18:51.904 00:00:10.369 TCP 23.104.0.1:46228 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:19:52.296 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53828 10 6452 1 2025-12-01 16:19:52.305 00:00:10.363 TCP 23.104.0.1:35726 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:20:40.948 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:20:41.144 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 16:20:52.706 00:00:10.328 TCP 23.104.0.1:45136 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:20:52.514 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45488 10 6452 1 2025-12-01 16:21:53.098 00:00:10.330 TCP 23.104.0.1:38760 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:21:52.734 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37510 10 6452 1 2025-12-01 16:22:52.947 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:41588 10 6452 1 2025-12-01 16:19:06.257 00:05:04.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 16:22:53.480 00:00:10.324 TCP 23.104.0.1:49526 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:19:06.259 00:05:04.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 16:23:53.844 00:00:10.363 TCP 23.104.0.1:58138 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:23:53.144 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51166 10 6452 1 2025-12-01 16:24:53.359 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36732 10 6452 1 2025-12-01 16:24:54.249 00:00:10.369 TCP 23.104.0.1:59542 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:25:41.023 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:25:40.937 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 16:25:54.653 00:00:10.324 TCP 23.104.0.1:33344 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:25:53.531 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38306 10 6452 1 2025-12-01 16:26:55.011 00:00:10.368 TCP 23.104.0.1:58174 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:26:53.745 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39230 10 6452 1 2025-12-01 16:27:55.419 00:00:10.371 TCP 23.104.0.1:52050 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:27:53.955 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51648 10 6452 1 2025-12-01 16:28:54.183 00:00:10.643 TCP 1.101.0.1:3000 -> 22.102.0.1:36186 10 6452 1 2025-12-01 16:28:55.831 00:00:10.345 TCP 23.104.0.1:60318 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:25:06.258 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 16:25:06.261 00:05:04.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 16:29:54.863 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49954 10 6452 1 2025-12-01 16:29:56.212 00:00:10.321 TCP 23.104.0.1:39232 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:30:41.134 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 16:30:41.198 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:30:55.036 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37172 10 6452 1 2025-12-01 16:30:56.574 00:00:10.360 TCP 23.104.0.1:46818 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:31:55.251 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59546 10 6452 1 2025-12-01 16:31:56.973 00:00:10.367 TCP 23.104.0.1:50948 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:32:55.460 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39012 10 6452 1 2025-12-01 16:32:57.377 00:00:10.361 TCP 23.104.0.1:33212 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:33:55.674 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50670 10 6452 1 2025-12-01 16:33:57.780 00:00:10.364 TCP 23.104.0.1:53700 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:34:55.889 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42344 10 6452 1 2025-12-01 16:34:58.185 00:00:10.358 TCP 23.104.0.1:59278 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:31:06.263 00:05:04.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 16:31:06.261 00:05:04.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 16:35:41.379 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 16:35:41.412 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:35:56.108 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41146 10 6452 1 2025-12-01 16:35:58.582 00:00:10.362 TCP 23.104.0.1:49146 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:36:56.318 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42868 10 6452 1 2025-12-01 16:36:58.981 00:00:10.362 TCP 23.104.0.1:58946 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:37:56.534 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48982 10 6452 1 2025-12-01 16:37:59.384 00:00:10.320 TCP 23.104.0.1:47490 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:38:56.755 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34322 10 6452 1 2025-12-01 16:38:59.743 00:00:10.365 TCP 23.104.0.1:52682 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:40:00.148 00:00:10.371 TCP 23.104.0.1:56788 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:39:56.967 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34608 10 6452 1 2025-12-01 16:40:41.551 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 16:40:41.446 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:41:00.556 00:00:10.365 TCP 23.104.0.1:50138 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:37:06.269 00:05:04.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 16:40:57.196 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34096 10 6452 1 2025-12-01 16:37:06.266 00:05:04.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 16:41:57.375 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:48514 10 6452 1 2025-12-01 16:42:00.959 00:00:10.361 TCP 23.104.0.1:56552 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:42:57.641 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53348 10 6452 1 2025-12-01 16:43:01.357 00:00:10.365 TCP 23.104.0.1:39252 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:43:57.868 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37204 10 6452 1 2025-12-01 16:44:01.767 00:00:10.705 TCP 23.104.0.1:43934 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:44:58.097 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:48310 10 6452 1 2025-12-01 16:45:02.507 00:00:10.364 TCP 23.104.0.1:44602 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:45:41.463 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 16:45:41.453 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:45:58.350 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37932 10 6452 1 2025-12-01 16:46:02.913 00:00:10.372 TCP 23.104.0.1:37878 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:43:06.268 00:05:04.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 16:46:58.569 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54204 10 6452 1 2025-12-01 16:43:06.270 00:05:04.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 16:47:03.322 00:00:10.370 TCP 23.104.0.1:58816 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:47:58.781 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39664 10 6452 1 2025-12-01 16:48:03.731 00:00:10.370 TCP 23.104.0.1:49694 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:48:59.008 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35424 10 6452 1 2025-12-01 16:49:04.138 00:00:10.366 TCP 23.104.0.1:54720 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:49:59.226 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46076 10 6452 1 2025-12-01 16:50:04.552 00:00:10.328 TCP 23.104.0.1:45654 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:50:41.568 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 16:50:41.821 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:50:59.440 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49186 10 6452 1 2025-12-01 16:51:04.915 00:00:10.403 TCP 23.104.0.1:41796 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:51:59.661 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60760 10 6452 1 2025-12-01 16:52:05.355 00:00:10.326 TCP 23.104.0.1:43340 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:49:06.272 00:05:04.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 16:52:59.886 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60844 10 6452 1 2025-12-01 16:49:06.270 00:05:04.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 16:53:05.717 00:00:10.370 TCP 23.104.0.1:51812 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:54:00.098 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43790 10 6452 1 2025-12-01 16:54:06.127 00:00:10.367 TCP 23.104.0.1:51134 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:55:00.313 00:00:10.890 TCP 1.101.0.1:3000 -> 22.102.0.1:59190 11 6504 1 2025-12-01 16:55:06.524 00:00:10.362 TCP 23.104.0.1:47248 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:55:41.771 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 16:55:41.958 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 16:56:01.238 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40366 10 6452 1 2025-12-01 16:56:06.924 00:00:10.395 TCP 23.104.0.1:59516 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:57:01.458 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54628 12 6556 1 2025-12-01 16:57:07.356 00:00:10.321 TCP 23.104.0.1:42122 -> 1.101.0.1:3000 11 1507 1 2025-12-01 16:58:01.686 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54846 10 6452 1 2025-12-01 16:58:07.722 00:00:10.365 TCP 23.104.0.1:60360 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498504, total packets: 1575, avg bps: 1051, avg pps: 0, avg bpp: 316 Time window: 2025-12-01 15:55:06 - 2025-12-01 16:58:18 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0022s Wall: 0.0028s flows/second: 59273.2 Runtime: 0.0028s