Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 18:58:58.347 00:00:10.367 TCP 23.104.0.1:47780 -> 1.101.0.1:3000 11 1507 1 2025-12-01 18:55:06.306 00:05:04.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 18:55:06.302 00:05:04.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 18:59:30.826 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57472 10 6452 1 2025-12-01 18:59:58.752 00:00:10.345 TCP 23.104.0.1:51852 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:00:31.037 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33502 10 6452 1 2025-12-01 19:00:44.373 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 19:00:44.319 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 19:00:59.139 00:00:10.368 TCP 23.104.0.1:38426 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:01:31.249 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48080 10 6452 1 2025-12-01 19:01:59.548 00:00:10.365 TCP 23.104.0.1:37956 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:02:31.459 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45970 10 6452 1 2025-12-01 19:02:59.953 00:00:10.364 TCP 23.104.0.1:59438 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:03:31.672 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45672 10 6452 1 2025-12-01 19:04:00.357 00:00:10.365 TCP 23.104.0.1:41786 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:04:31.897 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60310 10 6452 1 2025-12-01 19:01:06.304 00:05:04.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 19:05:00.758 00:00:10.372 TCP 23.104.0.1:60866 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:01:06.306 00:05:04.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 19:05:44.415 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 19:05:44.269 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 19:05:32.115 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49722 10 6452 1 2025-12-01 19:06:01.171 00:00:10.361 TCP 23.104.0.1:56740 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:06:32.331 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58306 10 6452 1 2025-12-01 19:07:01.577 00:00:10.365 TCP 23.104.0.1:53674 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:07:32.541 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43104 10 6452 1 2025-12-01 19:08:01.980 00:00:10.369 TCP 23.104.0.1:36068 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:08:32.716 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34730 10 6452 1 2025-12-01 19:09:02.389 00:00:10.323 TCP 23.104.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:09:32.929 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:49126 10 6452 1 2025-12-01 19:10:02.751 00:00:10.322 TCP 23.104.0.1:33184 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:10:44.319 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 19:10:33.167 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60464 10 6452 1 2025-12-01 19:10:44.355 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 19:07:06.305 00:05:04.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 19:07:06.308 00:05:04.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 19:11:03.137 00:00:10.364 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:11:33.384 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:36332 10 6452 1 2025-12-01 19:12:03.543 00:00:10.372 TCP 23.104.0.1:38330 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:12:33.640 00:00:10.755 TCP 1.101.0.1:3000 -> 22.102.0.1:47976 10 6452 1 2025-12-01 19:13:03.961 00:00:10.359 TCP 23.104.0.1:40684 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:13:34.433 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51646 10 6452 1 2025-12-01 19:14:04.356 00:00:10.367 TCP 23.104.0.1:48112 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:14:34.644 00:00:10.339 TCP 1.101.0.1:3000 -> 22.102.0.1:56174 10 6452 1 2025-12-01 19:15:04.761 00:00:10.375 TCP 23.104.0.1:47190 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:15:44.363 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 19:15:35.046 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52816 10 6452 1 2025-12-01 19:15:44.263 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 19:16:05.175 00:00:10.323 TCP 23.104.0.1:52578 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:16:35.262 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36556 10 6452 1 2025-12-01 19:13:06.308 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 19:13:06.306 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 19:17:05.540 00:00:10.368 TCP 23.104.0.1:35000 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:17:35.438 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45934 10 6452 1 2025-12-01 19:18:05.947 00:00:10.372 TCP 23.104.0.1:44262 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:18:35.651 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53158 10 6452 1 2025-12-01 19:19:06.363 00:00:10.365 TCP 23.104.0.1:51780 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:19:35.864 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59932 10 6452 1 2025-12-01 19:20:06.766 00:00:10.375 TCP 23.104.0.1:60148 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:20:44.657 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 19:20:36.098 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44368 10 6452 1 2025-12-01 19:20:44.472 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 19:21:07.182 00:00:10.364 TCP 23.104.0.1:50250 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:21:36.274 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57580 10 6452 1 2025-12-01 19:22:07.587 00:00:10.369 TCP 23.104.0.1:36268 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:22:36.498 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46276 10 6452 1 2025-12-01 19:19:06.307 00:05:04.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 19:19:06.310 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 19:23:07.983 00:00:10.368 TCP 23.104.0.1:56182 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:23:36.715 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42754 10 6452 1 2025-12-01 19:24:08.389 00:00:10.365 TCP 23.104.0.1:39172 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:24:36.925 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:47630 10 6452 1 2025-12-01 19:25:08.789 00:00:10.372 TCP 23.104.0.1:33286 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:25:44.483 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 19:25:44.669 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 19:25:37.165 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46734 10 6452 1 2025-12-01 19:26:09.185 00:00:10.953 TCP 23.104.0.1:58926 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:26:37.383 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49832 10 6452 1 2025-12-01 19:27:10.172 00:00:10.365 TCP 23.104.0.1:42248 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:27:37.591 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56078 10 6452 1 2025-12-01 19:28:10.576 00:00:10.373 TCP 23.104.0.1:45858 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:28:37.800 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54180 10 6452 1 2025-12-01 19:25:06.309 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 19:25:06.310 00:05:04.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 19:29:10.988 00:00:10.364 TCP 23.104.0.1:52452 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:29:38.012 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55534 10 6452 1 2025-12-01 19:30:11.389 00:00:10.362 TCP 23.104.0.1:36360 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:30:44.707 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 19:30:44.932 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 19:30:38.230 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48252 10 6452 1 2025-12-01 19:31:11.791 00:00:10.317 TCP 23.104.0.1:59078 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:31:38.402 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54572 10 6452 1 2025-12-01 19:32:12.147 00:00:10.317 TCP 23.104.0.1:43402 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:32:38.581 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34930 10 6452 1 2025-12-01 19:33:12.505 00:00:10.381 TCP 23.104.0.1:46792 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:33:38.788 00:00:10.414 TCP 1.101.0.1:3000 -> 22.102.0.1:60350 10 6452 1 2025-12-01 19:34:12.928 00:00:10.349 TCP 23.104.0.1:51758 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:34:39.242 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47922 10 6452 1 2025-12-01 19:31:06.310 00:05:04.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 19:31:06.312 00:05:04.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 19:35:13.310 00:00:10.366 TCP 23.104.0.1:60618 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:35:44.975 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 19:35:44.957 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 19:35:39.449 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:46192 10 6452 1 2025-12-01 19:36:13.708 00:00:10.368 TCP 23.104.0.1:33954 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:36:39.649 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42758 10 6452 1 2025-12-01 19:37:14.110 00:00:10.361 TCP 23.104.0.1:46892 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:37:39.873 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54200 10 6452 1 2025-12-01 19:38:14.512 00:00:10.372 TCP 23.104.0.1:51194 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:38:40.109 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35474 10 6452 1 2025-12-01 19:39:14.923 00:00:10.387 TCP 23.104.0.1:49596 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:39:40.324 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39422 10 6452 1 2025-12-01 19:40:15.346 00:00:10.368 TCP 23.104.0.1:45582 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:40:44.884 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 19:40:45.026 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 19:40:40.535 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55944 10 6452 1 2025-12-01 19:37:06.313 00:05:04.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 19:37:06.311 00:05:04.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 19:41:15.763 00:00:10.337 TCP 23.104.0.1:55446 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:41:40.756 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37806 10 6452 1 2025-12-01 19:42:16.139 00:00:10.367 TCP 23.104.0.1:52242 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:42:40.928 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:48528 10 6452 1 2025-12-01 19:43:16.546 00:00:10.363 TCP 23.104.0.1:45948 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:43:41.126 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37444 10 6452 1 2025-12-01 19:44:16.950 00:00:10.330 TCP 23.104.0.1:49168 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:44:41.304 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48702 10 6452 1 2025-12-01 19:45:17.317 00:00:10.326 TCP 23.104.0.1:35746 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:45:45.471 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 19:45:45.236 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 19:45:41.483 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53424 10 6452 1 2025-12-01 19:46:17.693 00:00:10.368 TCP 23.104.0.1:34576 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:46:41.691 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60208 10 6452 1 2025-12-01 19:43:06.314 00:05:04.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 19:43:06.312 00:05:04.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 19:47:18.107 00:00:10.363 TCP 23.104.0.1:59026 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:47:41.869 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33104 10 6452 1 2025-12-01 19:48:18.513 00:00:10.367 TCP 23.104.0.1:58342 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:48:42.069 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44252 10 6452 1 2025-12-01 19:49:18.919 00:00:10.408 TCP 23.104.0.1:54560 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:49:42.243 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39110 10 6452 1 2025-12-01 19:50:19.378 00:00:10.365 TCP 23.104.0.1:52024 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:50:45.286 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 19:50:45.240 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 19:50:42.455 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:39268 10 6452 1 2025-12-01 19:51:19.777 00:00:10.366 TCP 23.104.0.1:52850 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:51:42.648 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-12-01 19:52:20.184 00:00:10.366 TCP 23.104.0.1:33440 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:52:42.816 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37752 10 6452 1 2025-12-01 19:49:06.313 00:05:04.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 19:49:06.316 00:05:04.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 19:53:20.592 00:00:10.364 TCP 23.104.0.1:34288 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:53:43.036 00:00:11.465 TCP 1.101.0.1:3000 -> 22.102.0.1:37830 10 6452 1 2025-12-01 19:54:20.991 00:00:10.359 TCP 23.104.0.1:47502 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:54:44.542 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45110 10 6452 1 2025-12-01 19:55:21.393 00:00:10.362 TCP 23.104.0.1:38374 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:55:44.987 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 19:55:45.306 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 19:55:44.759 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56770 10 6452 1 2025-12-01 19:56:21.795 00:00:10.381 TCP 23.104.0.1:50098 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:56:44.969 00:00:11.747 TCP 1.101.0.1:3000 -> 22.102.0.1:36998 12 6556 1 2025-12-01 19:57:22.205 00:00:10.367 TCP 23.104.0.1:39304 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:57:46.755 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35954 10 6452 1 2025-12-01 19:58:22.614 00:00:10.980 TCP 23.104.0.1:55682 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492000, total packets: 1564, avg bps: 1033, avg pps: 0, avg bpp: 314 Time window: 2025-12-01 18:55:06 - 2025-12-01 19:58:33 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0059s User: 0.0000s Wall: 0.0026s flows/second: 61809.2 Runtime: 0.0027s