Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 22:58:42.953 00:00:10.371 TCP 23.104.0.1:47412 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:55:06.394 00:05:04.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 22:55:06.393 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 22:59:39.877 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38516 10 6452 1 2025-12-01 22:59:43.357 00:00:10.369 TCP 23.104.0.1:52034 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:00:49.322 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 23:00:40.092 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55728 10 6452 1 2025-12-01 23:00:48.973 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 23:00:43.765 00:00:10.378 TCP 23.104.0.1:53084 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:01:40.317 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53894 10 6452 1 2025-12-01 23:01:44.176 00:00:10.324 TCP 23.104.0.1:60734 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:02:40.541 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36518 10 6452 1 2025-12-01 23:02:44.542 00:00:10.362 TCP 23.104.0.1:45204 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:03:40.766 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56016 10 6452 1 2025-12-01 23:03:44.943 00:00:10.364 TCP 23.104.0.1:47316 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:04:40.939 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:46946 10 6452 1 2025-12-01 23:04:45.345 00:00:10.367 TCP 23.104.0.1:39212 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:01:06.396 00:05:04.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 23:01:06.400 00:05:04.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 23:05:41.137 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36582 10 6452 1 2025-12-01 23:05:49.168 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 23:05:49.030 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 23:05:45.750 00:00:10.382 TCP 23.104.0.1:45714 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:06:41.347 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59498 10 6452 1 2025-12-01 23:06:46.170 00:00:10.370 TCP 23.104.0.1:45746 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:07:41.567 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46068 10 6452 1 2025-12-01 23:07:46.575 00:00:10.365 TCP 23.104.0.1:44836 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:08:41.789 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57032 10 6452 1 2025-12-01 23:08:46.979 00:00:10.377 TCP 23.104.0.1:34518 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:09:42.001 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43834 10 6452 1 2025-12-01 23:09:47.395 00:00:10.366 TCP 23.104.0.1:45378 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:10:49.254 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 23:10:49.063 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 23:10:42.236 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35370 10 6452 1 2025-12-01 23:10:47.796 00:00:10.365 TCP 23.104.0.1:59244 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:07:06.396 00:05:04.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 23:07:06.399 00:05:04.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 23:11:42.454 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55146 10 6452 1 2025-12-01 23:11:48.199 00:00:10.363 TCP 23.104.0.1:47054 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:12:42.673 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50508 10 6452 1 2025-12-01 23:12:48.602 00:00:10.363 TCP 23.104.0.1:57522 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:13:42.854 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37732 10 6452 1 2025-12-01 23:13:49.006 00:00:10.361 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:14:43.091 00:00:10.541 TCP 1.101.0.1:3000 -> 22.102.0.1:39908 10 6452 1 2025-12-01 23:14:49.413 00:00:10.374 TCP 23.104.0.1:55308 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:15:49.362 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 23:15:49.354 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 23:15:43.674 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:49594 10 6452 1 2025-12-01 23:15:49.829 00:00:10.352 TCP 23.104.0.1:54554 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:16:43.898 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35484 10 6452 1 2025-12-01 23:16:50.219 00:00:10.363 TCP 23.104.0.1:35386 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:13:06.399 00:05:04.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 23:13:06.402 00:05:04.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 23:17:44.114 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53972 10 6452 1 2025-12-01 23:17:50.621 00:00:10.362 TCP 23.104.0.1:52832 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:18:44.321 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34510 10 6452 1 2025-12-01 23:18:51.022 00:00:10.363 TCP 23.104.0.1:36322 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:19:44.539 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45060 10 6452 1 2025-12-01 23:19:51.430 00:00:10.371 TCP 23.104.0.1:46338 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:20:49.185 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 23:20:49.556 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 23:20:44.751 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40018 10 6452 1 2025-12-01 23:20:51.861 00:00:10.373 TCP 23.104.0.1:55702 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:21:44.964 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51106 10 6452 1 2025-12-01 23:21:52.272 00:00:10.366 TCP 23.104.0.1:46532 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:22:45.196 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50982 10 6452 1 2025-12-01 23:22:52.676 00:00:10.373 TCP 23.104.0.1:44316 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:19:06.400 00:05:04.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 23:19:06.403 00:05:04.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 23:23:45.411 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41930 10 6452 1 2025-12-01 23:23:53.107 00:00:10.364 TCP 23.104.0.1:35780 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:24:45.630 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34140 10 6452 1 2025-12-01 23:24:53.511 00:00:10.370 TCP 23.104.0.1:37104 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:25:49.477 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 23:25:49.472 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 23:25:45.857 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53654 10 6452 1 2025-12-01 23:25:53.915 00:00:10.341 TCP 23.104.0.1:43692 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:26:46.085 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49314 10 6452 1 2025-12-01 23:26:54.284 00:00:10.365 TCP 23.104.0.1:55948 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:27:46.300 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45044 10 6452 1 2025-12-01 23:27:54.687 00:00:10.360 TCP 23.104.0.1:49886 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:28:46.519 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:54940 10 6452 1 2025-12-01 23:25:06.402 00:05:04.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 23:28:55.108 00:00:10.368 TCP 23.104.0.1:32884 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:25:06.405 00:05:04.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 23:29:46.730 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38910 10 6452 1 2025-12-01 23:29:55.510 00:00:10.335 TCP 23.104.0.1:58474 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:30:49.601 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 23:30:49.355 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 23:30:46.953 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35348 10 6452 1 2025-12-01 23:30:55.879 00:00:10.379 TCP 23.104.0.1:60040 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:31:47.192 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48478 10 6452 1 2025-12-01 23:31:56.296 00:00:10.325 TCP 23.104.0.1:34928 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:32:47.364 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:53210 12 10369 1 2025-12-01 23:32:56.659 00:00:10.444 TCP 23.104.0.1:36744 -> 1.101.0.1:3000 15 1926 1 2025-12-01 23:33:47.607 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42816 10 6452 1 2025-12-01 23:33:57.142 00:00:10.329 TCP 23.104.0.1:53294 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:34:47.780 00:00:11.749 TCP 1.101.0.1:3000 -> 22.102.0.1:39842 10 6452 1 2025-12-01 23:31:06.407 00:05:04.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 23:34:57.520 00:00:10.360 TCP 23.104.0.1:52580 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:31:06.404 00:05:04.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 23:35:49.684 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 23:35:49.844 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 23:35:49.568 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39640 10 6452 1 2025-12-01 23:35:57.918 00:00:10.387 TCP 23.104.0.1:58768 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:36:49.777 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43522 10 6452 1 2025-12-01 23:36:58.343 00:00:10.367 TCP 23.104.0.1:58544 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:37:50.001 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51060 10 6452 1 2025-12-01 23:37:58.749 00:00:10.325 TCP 23.104.0.1:46366 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:38:50.221 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51420 10 6452 1 2025-12-01 23:38:59.113 00:00:10.370 TCP 23.104.0.1:60648 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:39:50.440 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42082 10 6452 1 2025-12-01 23:39:59.517 00:00:10.367 TCP 23.104.0.1:41096 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:40:50.018 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 23:40:50.016 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 23:40:50.658 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33186 10 6452 1 2025-12-01 23:37:06.408 00:05:04.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 23:37:06.404 00:05:04.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 23:41:50.900 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57150 10 6452 1 2025-12-01 23:40:59.922 00:01:10.786 TCP 23.104.0.1:56478 -> 1.101.0.1:3000 22 3014 1 2025-12-01 23:42:51.110 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44404 10 6452 1 2025-12-01 23:43:00.752 00:00:10.397 TCP 23.104.0.1:56490 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:43:51.326 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58244 10 6452 1 2025-12-01 23:44:01.185 00:00:10.371 TCP 23.104.0.1:49140 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:44:51.494 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40440 10 6452 1 2025-12-01 23:45:01.592 00:00:10.363 TCP 23.104.0.1:38330 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:45:49.935 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 23:45:49.987 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 23:45:51.710 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46622 10 6452 1 2025-12-01 23:46:01.994 00:00:10.365 TCP 23.104.0.1:45274 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:46:51.934 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:32898 10 6452 1 2025-12-01 23:43:06.408 00:05:04.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 23:43:06.406 00:05:04.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 23:47:02.398 00:00:10.358 TCP 23.104.0.1:39982 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:47:52.168 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45636 10 6452 1 2025-12-01 23:48:02.801 00:00:10.377 TCP 23.104.0.1:40634 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:48:52.382 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:38186 10 6452 1 2025-12-01 23:49:03.219 00:00:10.344 TCP 23.104.0.1:38004 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:49:52.626 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40014 10 6452 1 2025-12-01 23:50:03.605 00:00:13.900 TCP 23.104.0.1:36226 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:50:49.878 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 23:50:50.059 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 23:50:52.834 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41600 10 6452 1 2025-12-01 23:51:07.628 00:00:10.364 TCP 23.104.0.1:40044 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:51:53.067 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39858 10 6452 1 2025-12-01 23:52:08.033 00:00:10.365 TCP 23.104.0.1:54266 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:52:53.290 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33292 10 6452 1 2025-12-01 23:49:06.409 00:05:04.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 23:49:06.406 00:05:04.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 23:53:08.441 00:00:10.367 TCP 23.104.0.1:56880 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:53:53.501 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35140 10 6452 1 2025-12-01 23:54:08.851 00:00:10.371 TCP 23.104.0.1:56398 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:54:53.717 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:34886 10 6452 1 2025-12-01 23:55:09.266 00:00:10.362 TCP 23.104.0.1:56302 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:55:50.629 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 23:55:50.441 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 23:55:53.886 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51328 10 6452 1 2025-12-01 23:56:09.681 00:00:10.377 TCP 23.104.0.1:38614 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:56:54.103 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39174 10 6452 1 2025-12-01 23:57:10.107 00:00:10.366 TCP 23.104.0.1:56544 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:57:54.318 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51320 10 6452 1 2025-12-01 23:58:10.513 00:00:10.324 TCP 23.104.0.1:38306 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 496232, total packets: 1568, avg bps: 1046, avg pps: 0, avg bpp: 316 Time window: 2025-12-01 22:55:06 - 2025-12-01 23:58:20 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0053s User: 0.0009s Wall: 0.0020s flows/second: 81083.2 Runtime: 0.0020s