Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 12:58:54.403 00:00:10.361 TCP 23.104.0.1:46950 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:55:06.658 00:05:04.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 12:59:02.593 00:00:10.474 TCP 1.101.0.1:3000 -> 22.102.0.1:37080 10 6452 1 2025-12-02 12:55:06.656 00:05:04.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 12:59:54.802 00:00:10.363 TCP 23.104.0.1:56826 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:00:03.107 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44274 10 6452 1 2025-12-02 13:01:05.685 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 13:01:06.097 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 13:00:55.204 00:00:10.366 TCP 23.104.0.1:57418 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:01:03.318 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57626 10 6452 1 2025-12-02 13:01:55.609 00:00:10.323 TCP 23.104.0.1:58608 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:02:03.533 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53838 10 6452 1 2025-12-02 13:02:55.972 00:00:10.370 TCP 23.104.0.1:60430 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:03:03.748 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56616 10 6452 1 2025-12-02 13:03:56.375 00:00:10.365 TCP 23.104.0.1:46946 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:04:03.966 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34568 10 6452 1 2025-12-02 13:04:56.785 00:00:10.366 TCP 23.104.0.1:40804 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:01:06.657 00:05:04.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 13:01:06.660 00:05:04.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 13:05:04.180 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59746 10 6452 1 2025-12-02 13:06:05.875 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 13:06:05.820 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 13:05:57.193 00:00:10.364 TCP 23.104.0.1:35854 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:06:04.351 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57884 10 6452 1 2025-12-02 13:06:57.599 00:00:10.326 TCP 23.104.0.1:44760 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:07:04.560 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59442 10 6452 1 2025-12-02 13:07:57.959 00:00:10.451 TCP 23.104.0.1:50012 -> 1.101.0.1:3000 15 1926 1 2025-12-02 13:08:04.731 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45222 12 10375 1 2025-12-02 13:08:58.449 00:00:10.369 TCP 23.104.0.1:38702 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:09:04.974 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:58222 10 6452 1 2025-12-02 13:09:58.858 00:00:10.376 TCP 23.104.0.1:47848 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:10:05.211 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54194 10 6452 1 2025-12-02 13:11:06.205 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 13:11:06.157 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 13:07:06.661 00:05:04.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 13:10:59.274 00:00:10.361 TCP 23.104.0.1:53532 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:11:05.422 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49662 10 6452 1 2025-12-02 13:07:06.658 00:05:04.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 13:11:59.675 00:00:10.364 TCP 23.104.0.1:55630 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:12:05.600 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47578 10 6452 1 2025-12-02 13:13:00.108 00:00:10.367 TCP 23.104.0.1:45146 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:13:05.831 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59896 10 6452 1 2025-12-02 13:14:00.510 00:00:10.326 TCP 23.104.0.1:33714 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:14:06.073 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40602 10 6452 1 2025-12-02 13:15:00.873 00:00:10.370 TCP 23.104.0.1:40648 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:15:06.281 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51886 10 6452 1 2025-12-02 13:16:06.161 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 13:16:06.040 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 13:16:01.280 00:00:10.415 TCP 23.104.0.1:33998 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:16:06.493 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38972 10 6452 1 2025-12-02 13:13:06.661 00:05:04.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 13:17:06.715 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42288 10 6452 1 2025-12-02 13:17:01.736 00:00:10.361 TCP 23.104.0.1:35084 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:13:06.663 00:05:04.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 13:18:02.137 00:00:10.363 TCP 23.104.0.1:34814 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:18:06.928 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34386 10 6452 1 2025-12-02 13:19:02.543 00:00:10.361 TCP 23.104.0.1:42372 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:19:07.157 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40016 10 6452 1 2025-12-02 13:20:02.953 00:00:10.382 TCP 23.104.0.1:51294 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:20:07.375 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37568 10 6452 1 2025-12-02 13:21:06.036 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 13:21:06.286 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 13:21:03.375 00:00:10.364 TCP 23.104.0.1:56252 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:21:07.587 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38352 10 6452 1 2025-12-02 13:22:03.780 00:00:10.335 TCP 23.104.0.1:57014 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:22:07.802 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:33990 10 6452 1 2025-12-02 13:19:06.665 00:05:04.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 13:23:04.144 00:00:10.370 TCP 23.104.0.1:39884 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:19:06.663 00:05:04.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 13:23:07.970 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:58822 10 6452 1 2025-12-02 13:24:04.553 00:00:12.830 TCP 23.104.0.1:53412 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:24:08.152 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48592 10 6452 1 2025-12-02 13:25:08.367 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33336 10 6452 1 2025-12-02 13:25:07.436 00:00:10.365 TCP 23.104.0.1:34424 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:26:06.300 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 13:26:06.317 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 13:26:08.542 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39384 10 6452 1 2025-12-02 13:26:07.839 00:00:10.396 TCP 23.104.0.1:43680 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:27:08.752 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44136 10 6452 1 2025-12-02 13:27:08.279 00:00:10.356 TCP 23.104.0.1:55390 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:28:08.679 00:00:10.373 TCP 23.104.0.1:38076 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:28:08.965 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:49868 10 6452 1 2025-12-02 13:25:06.664 00:05:04.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 13:25:06.667 00:05:04.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 13:29:09.106 00:00:10.330 TCP 23.104.0.1:47026 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:29:09.157 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47156 10 6452 1 2025-12-02 13:30:09.481 00:00:10.395 TCP 23.104.0.1:33520 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:30:09.372 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:53768 10 6452 1 2025-12-02 13:31:06.413 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 13:31:06.398 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 13:31:09.583 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59838 10 6452 1 2025-12-02 13:31:09.917 00:00:10.409 TCP 23.104.0.1:57974 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:32:09.798 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41152 10 6452 1 2025-12-02 13:32:10.368 00:00:10.318 TCP 23.104.0.1:40226 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:33:10.727 00:00:10.448 TCP 23.104.0.1:33998 -> 1.101.0.1:3000 15 1926 1 2025-12-02 13:33:10.012 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58414 12 10375 1 2025-12-02 13:34:11.219 00:00:10.374 TCP 23.104.0.1:56612 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:34:10.251 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54780 10 6452 1 2025-12-02 13:31:06.670 00:05:04.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 13:31:06.671 00:05:04.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 13:35:11.631 00:00:10.362 TCP 23.104.0.1:35276 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:35:10.469 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54468 10 6452 1 2025-12-02 13:36:06.584 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 13:36:06.474 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 13:36:10.679 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57228 10 6452 1 2025-12-02 13:36:12.036 00:00:10.321 TCP 23.104.0.1:40872 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:37:10.888 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32892 10 6452 1 2025-12-02 13:37:12.391 00:00:10.363 TCP 23.104.0.1:52470 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:38:11.107 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37982 10 6452 1 2025-12-02 13:38:12.789 00:00:10.348 TCP 23.104.0.1:41090 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:39:11.321 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32978 10 6452 1 2025-12-02 13:39:13.178 00:00:10.372 TCP 23.104.0.1:53530 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:40:11.538 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43318 10 6452 1 2025-12-02 13:40:13.582 00:00:10.330 TCP 23.104.0.1:43544 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:41:06.610 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 13:41:06.723 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 13:37:06.674 00:05:04.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 13:37:06.671 00:05:04.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 13:41:11.752 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50414 10 6452 1 2025-12-02 13:41:13.947 00:00:10.380 TCP 23.104.0.1:60834 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:42:14.362 00:00:10.364 TCP 23.104.0.1:46722 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:42:11.964 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:40308 10 6452 1 2025-12-02 13:43:12.198 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58956 10 6452 1 2025-12-02 13:43:14.764 00:00:10.379 TCP 23.104.0.1:54702 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:44:15.183 00:00:10.365 TCP 23.104.0.1:42292 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:44:12.410 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40832 10 6452 1 2025-12-02 13:45:15.593 00:00:10.368 TCP 23.104.0.1:36910 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:45:12.626 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47560 10 6452 1 2025-12-02 13:46:06.969 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 13:46:06.991 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 13:46:12.846 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:48054 10 6452 1 2025-12-02 13:46:16.001 00:00:10.317 TCP 23.104.0.1:59396 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:43:06.673 00:05:04.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 13:43:06.676 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 13:47:13.029 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57368 10 6452 1 2025-12-02 13:47:16.356 00:00:10.364 TCP 23.104.0.1:45062 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:48:13.246 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59018 10 6452 1 2025-12-02 13:48:16.757 00:00:10.387 TCP 23.104.0.1:34294 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:49:13.465 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37892 10 6452 1 2025-12-02 13:49:17.185 00:00:10.320 TCP 23.104.0.1:49758 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:50:13.697 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44108 10 6452 1 2025-12-02 13:50:17.553 00:00:10.333 TCP 23.104.0.1:43562 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:51:06.968 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 13:51:06.810 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 13:51:13.910 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52574 10 6452 1 2025-12-02 13:51:17.928 00:00:10.369 TCP 23.104.0.1:35788 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:52:14.126 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36886 10 6452 1 2025-12-02 13:52:18.337 00:00:10.369 TCP 23.104.0.1:53488 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:49:06.678 00:05:04.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 13:49:06.676 00:05:04.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 13:53:14.346 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42902 10 6452 1 2025-12-02 13:53:18.788 00:00:10.364 TCP 23.104.0.1:60204 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:54:14.559 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50670 10 6452 1 2025-12-02 13:54:19.191 00:00:10.366 TCP 23.104.0.1:44298 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:55:14.771 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36026 10 6452 1 2025-12-02 13:55:19.603 00:00:10.369 TCP 23.104.0.1:50506 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:56:06.850 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 13:56:06.638 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 13:56:14.980 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33348 10 6452 1 2025-12-02 13:56:20.006 00:00:10.367 TCP 23.104.0.1:56416 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:57:15.203 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42676 10 6452 1 2025-12-02 13:57:20.418 00:00:10.368 TCP 23.104.0.1:36068 -> 1.101.0.1:3000 11 1507 1 2025-12-02 13:58:15.411 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56120 12 10369 1 2025-12-02 13:58:20.824 00:00:10.440 TCP 23.104.0.1:40538 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 164, total bytes: 511368, total packets: 1590, avg bps: 1075, avg pps: 0, avg bpp: 321 Time window: 2025-12-02 12:55:06 - 2025-12-02 13:58:31 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0021s Wall: 0.0022s flows/second: 73639.4 Runtime: 0.0022s