Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 14:58:46.322 00:00:10.364 TCP 23.104.0.1:38594 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:55:06.703 00:05:04.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 14:55:06.699 00:05:04.768 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 14:59:29.192 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57706 10 6452 1 2025-12-02 14:59:46.722 00:00:10.375 TCP 23.104.0.1:52552 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:00:29.408 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51820 10 6452 1 2025-12-02 15:00:47.145 00:00:10.331 TCP 23.104.0.1:57776 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:01:08.732 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 15:01:08.772 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 15:01:29.632 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36196 10 6452 1 2025-12-02 15:01:47.521 00:00:10.422 TCP 23.104.0.1:41018 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:02:29.817 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48012 10 6452 1 2025-12-02 15:02:47.986 00:00:10.326 TCP 23.104.0.1:42588 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:03:30.044 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57668 10 6452 1 2025-12-02 15:03:48.348 00:00:10.365 TCP 23.104.0.1:38736 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:04:30.212 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41342 10 6452 1 2025-12-02 15:04:48.751 00:00:10.388 TCP 23.104.0.1:34692 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:01:06.704 00:05:04.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 15:01:06.700 00:05:04.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 15:05:30.424 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40704 10 6452 1 2025-12-02 15:05:49.174 00:00:10.329 TCP 23.104.0.1:51852 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:06:08.532 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 15:06:08.657 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 15:06:30.635 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58446 10 6452 1 2025-12-02 15:06:49.541 00:00:10.357 TCP 23.104.0.1:34866 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:07:30.843 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51290 10 6452 1 2025-12-02 15:07:49.936 00:00:10.334 TCP 23.104.0.1:57716 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:08:31.012 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53848 10 6452 1 2025-12-02 15:08:50.309 00:00:10.365 TCP 23.104.0.1:59732 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:09:31.226 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33332 10 6452 1 2025-12-02 15:09:50.713 00:00:10.361 TCP 23.104.0.1:48958 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:10:31.394 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33496 10 6452 1 2025-12-02 15:10:51.114 00:00:10.366 TCP 23.104.0.1:56356 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:11:08.498 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 15:07:06.703 00:05:04.768 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 15:11:08.456 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 15:07:06.706 00:05:04.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 15:11:31.564 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54046 10 6452 1 2025-12-02 15:11:51.515 00:00:10.324 TCP 23.104.0.1:41236 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:12:31.779 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41096 10 6452 1 2025-12-02 15:12:51.876 00:00:10.387 TCP 23.104.0.1:43758 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:13:31.994 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33352 10 6452 1 2025-12-02 15:13:52.339 00:00:10.363 TCP 23.104.0.1:58222 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:14:32.205 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53566 10 6452 1 2025-12-02 15:14:52.743 00:00:10.364 TCP 23.104.0.1:40620 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:15:32.380 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58242 10 6452 1 2025-12-02 15:15:53.143 00:00:10.365 TCP 23.104.0.1:57934 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:16:08.568 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 15:16:08.744 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 15:16:32.551 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35532 10 6452 1 2025-12-02 15:16:53.550 00:00:10.371 TCP 23.104.0.1:41850 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:13:06.707 00:05:04.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 15:13:06.703 00:05:04.768 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 15:17:32.761 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47422 10 6452 1 2025-12-02 15:17:53.957 00:00:10.369 TCP 23.104.0.1:52032 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:18:32.975 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:51200 10 6452 1 2025-12-02 15:18:54.359 00:00:10.361 TCP 23.104.0.1:43980 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:19:33.171 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48878 10 6452 1 2025-12-02 15:19:54.764 00:00:10.379 TCP 23.104.0.1:53876 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:20:33.389 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59872 10 6452 1 2025-12-02 15:20:55.181 00:00:10.366 TCP 23.104.0.1:57368 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:21:08.665 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 15:21:08.591 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 15:21:33.611 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54974 10 6452 1 2025-12-02 15:21:55.588 00:00:10.364 TCP 23.104.0.1:49400 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:22:33.784 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43420 10 6452 1 2025-12-02 15:22:55.993 00:00:10.364 TCP 23.104.0.1:46364 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:19:06.705 00:05:04.768 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 15:19:06.707 00:05:04.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 15:23:33.997 00:00:10.612 TCP 1.101.0.1:3000 -> 22.102.0.1:51824 10 6452 1 2025-12-02 15:23:56.391 00:00:16.051 TCP 23.104.0.1:60262 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:24:34.649 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37280 10 6452 1 2025-12-02 15:25:02.479 00:00:10.364 TCP 23.104.0.1:56350 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:25:34.866 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42306 10 6452 1 2025-12-02 15:26:08.877 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 15:26:08.800 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 15:26:02.883 00:00:10.393 TCP 23.104.0.1:58224 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:26:35.087 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56066 10 6452 1 2025-12-02 15:27:03.309 00:00:10.324 TCP 23.104.0.1:49674 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:27:35.261 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48570 10 6452 1 2025-12-02 15:28:03.662 00:00:10.367 TCP 23.104.0.1:54342 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:28:35.471 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44090 10 6452 1 2025-12-02 15:25:06.714 00:05:04.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 15:25:06.711 00:05:04.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 15:29:04.094 00:00:11.154 TCP 23.104.0.1:54400 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:29:35.687 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56974 10 6452 1 2025-12-02 15:30:05.287 00:00:10.364 TCP 23.104.0.1:57284 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:30:35.901 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:51904 10 6452 1 2025-12-02 15:31:08.857 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 15:31:08.841 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 15:31:05.689 00:00:10.336 TCP 23.104.0.1:45724 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:31:36.086 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53016 10 6452 1 2025-12-02 15:32:06.090 00:00:10.364 TCP 23.104.0.1:37540 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:32:36.292 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48782 10 6452 1 2025-12-02 15:33:06.490 00:00:10.333 TCP 23.104.0.1:58608 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:33:36.507 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34320 10 6452 1 2025-12-02 15:34:06.864 00:00:10.373 TCP 23.104.0.1:39912 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:34:36.731 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44306 10 6452 1 2025-12-02 15:31:06.717 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 15:31:06.721 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 15:35:07.274 00:00:10.367 TCP 23.104.0.1:47962 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:35:36.960 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46030 10 6452 1 2025-12-02 15:36:09.067 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 15:36:09.006 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 15:36:07.675 00:00:10.370 TCP 23.104.0.1:48778 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:36:37.146 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:52234 10 6452 1 2025-12-02 15:37:08.106 00:00:10.371 TCP 23.104.0.1:32842 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:37:37.343 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52738 10 6452 1 2025-12-02 15:38:08.516 00:00:10.320 TCP 23.104.0.1:53356 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:38:37.556 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59396 10 6452 1 2025-12-02 15:39:08.877 00:00:10.363 TCP 23.104.0.1:48210 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:39:37.762 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47280 10 6452 1 2025-12-02 15:40:09.287 00:00:10.369 TCP 23.104.0.1:35072 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:40:37.977 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:50626 10 6452 1 2025-12-02 15:41:08.925 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 15:41:09.035 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 15:37:06.720 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 15:37:06.719 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 15:41:09.695 00:00:10.370 TCP 23.104.0.1:50180 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:41:38.222 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39720 10 6452 1 2025-12-02 15:42:10.108 00:00:10.378 TCP 23.104.0.1:35904 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:42:38.437 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59734 10 6452 1 2025-12-02 15:43:10.522 00:00:10.364 TCP 23.104.0.1:43992 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:43:38.666 00:00:11.074 TCP 1.101.0.1:3000 -> 22.102.0.1:50618 10 6452 1 2025-12-02 15:44:10.937 00:00:10.376 TCP 23.104.0.1:33858 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:44:39.778 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41924 10 6452 1 2025-12-02 15:45:11.350 00:00:10.369 TCP 23.104.0.1:43886 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:45:40.008 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:60600 10 6452 1 2025-12-02 15:46:09.044 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 15:46:09.082 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 15:46:11.758 00:00:10.381 TCP 23.104.0.1:45304 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:46:40.173 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52664 10 6452 1 2025-12-02 15:43:06.719 00:05:04.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 15:43:06.721 00:05:04.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 15:47:12.179 00:00:10.322 TCP 23.104.0.1:40226 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:47:40.345 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53984 10 6452 1 2025-12-02 15:48:12.545 00:00:10.366 TCP 23.104.0.1:49480 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:48:40.557 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54986 10 6452 1 2025-12-02 15:49:12.948 00:00:10.374 TCP 23.104.0.1:35468 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:49:40.773 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56654 10 6452 1 2025-12-02 15:50:13.355 00:00:10.372 TCP 23.104.0.1:58208 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:50:40.988 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45262 10 6452 1 2025-12-02 15:51:09.541 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 15:51:09.391 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 15:51:13.764 00:00:10.377 TCP 23.104.0.1:48206 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:51:41.209 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40652 10 6452 1 2025-12-02 15:52:14.179 00:00:10.364 TCP 23.104.0.1:56294 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:52:41.428 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33370 10 6452 1 2025-12-02 15:49:06.720 00:05:04.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 15:49:06.723 00:05:04.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 15:53:14.581 00:00:10.366 TCP 23.104.0.1:49468 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:53:41.634 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46454 10 6452 1 2025-12-02 15:54:14.982 00:00:10.370 TCP 23.104.0.1:59302 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:54:41.817 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33456 10 6452 1 2025-12-02 15:55:15.391 00:00:10.371 TCP 23.104.0.1:34142 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:55:42.037 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37402 10 6452 1 2025-12-02 15:56:09.275 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 15:56:09.339 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 15:56:15.796 00:00:10.336 TCP 23.104.0.1:44588 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:56:42.205 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41412 10 6452 1 2025-12-02 15:57:16.172 00:00:10.366 TCP 23.104.0.1:54334 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:57:42.418 00:00:11.078 TCP 1.101.0.1:3000 -> 22.102.0.1:50526 12 10375 1 2025-12-02 15:58:16.581 00:00:10.438 TCP 23.104.0.1:37432 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 163, total bytes: 496238, total packets: 1568, avg bps: 1044, avg pps: 0, avg bpp: 316 Time window: 2025-12-02 14:55:06 - 2025-12-02 15:58:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0054s User: 0.0000s Wall: 0.0014s flows/second: 116093.0 Runtime: 0.0014s