Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 16:58:42.567 00:00:10.364 TCP 23.104.0.1:44788 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:58:56.663 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50270 10 6452 1 2025-12-02 16:55:06.741 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 16:55:06.744 00:05:04.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 16:59:42.970 00:00:10.366 TCP 23.104.0.1:54658 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:59:56.888 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 10 6452 1 2025-12-02 17:00:43.375 00:00:10.384 TCP 23.104.0.1:35988 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:01:10.801 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:00:57.117 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51834 10 6452 1 2025-12-02 17:01:10.556 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 17:01:43.803 00:00:10.367 TCP 23.104.0.1:45484 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:01:57.332 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55016 10 6452 1 2025-12-02 17:02:44.207 00:00:10.371 TCP 23.104.0.1:55470 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:02:57.541 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41586 10 6452 1 2025-12-02 17:03:44.622 00:00:10.364 TCP 23.104.0.1:57120 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:03:57.755 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47908 10 6452 1 2025-12-02 17:04:45.024 00:00:10.363 TCP 23.104.0.1:33260 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:04:57.965 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54018 10 6452 1 2025-12-02 17:01:06.746 00:05:04.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 17:01:06.742 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 17:05:45.424 00:00:10.331 TCP 23.104.0.1:60376 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:06:10.459 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:05:58.198 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51062 10 6452 1 2025-12-02 17:06:10.781 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 17:06:45.790 00:00:10.369 TCP 23.104.0.1:53784 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:06:58.407 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39558 10 6452 1 2025-12-02 17:07:46.220 00:00:10.361 TCP 23.104.0.1:45508 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:07:58.633 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51450 10 6452 1 2025-12-02 17:08:46.616 00:00:10.324 TCP 23.104.0.1:57096 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:08:58.847 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52388 10 6452 1 2025-12-02 17:09:46.978 00:00:10.365 TCP 23.104.0.1:39960 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:09:59.033 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35314 10 6452 1 2025-12-02 17:10:47.384 00:00:10.362 TCP 23.104.0.1:48380 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:07:06.744 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 17:10:59.243 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48784 10 6452 1 2025-12-02 17:11:10.719 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 17:11:10.769 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:07:06.747 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 17:11:47.785 00:00:10.369 TCP 23.104.0.1:57916 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:11:59.454 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50410 10 6452 1 2025-12-02 17:12:48.195 00:00:10.374 TCP 23.104.0.1:40634 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:12:59.672 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53564 10 6452 1 2025-12-02 17:13:48.606 00:00:10.366 TCP 23.104.0.1:51952 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:13:59.851 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42422 10 6452 1 2025-12-02 17:14:49.014 00:00:10.362 TCP 23.104.0.1:37738 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:15:00.029 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59420 10 6452 1 2025-12-02 17:15:49.416 00:00:10.376 TCP 23.104.0.1:44602 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:16:11.336 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:16:00.246 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51132 10 6452 1 2025-12-02 17:16:11.500 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 17:16:49.830 00:00:10.393 TCP 23.104.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:13:06.748 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 17:17:00.421 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46076 10 6452 1 2025-12-02 17:13:06.746 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 17:17:50.260 00:00:10.371 TCP 23.104.0.1:40032 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:18:00.634 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42470 10 6452 1 2025-12-02 17:18:50.669 00:00:10.364 TCP 23.104.0.1:46388 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:19:00.848 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55828 10 6452 1 2025-12-02 17:19:51.092 00:00:10.359 TCP 23.104.0.1:36288 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:20:01.079 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33558 10 6452 1 2025-12-02 17:20:51.490 00:00:10.369 TCP 23.104.0.1:51570 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:21:11.246 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:21:01.285 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60684 10 6452 1 2025-12-02 17:21:11.307 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 17:21:51.901 00:00:10.364 TCP 23.104.0.1:52674 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:22:01.461 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54986 10 6452 1 2025-12-02 17:22:52.303 00:00:10.373 TCP 23.104.0.1:42178 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:19:06.752 00:05:04.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 17:23:01.672 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47942 10 6452 1 2025-12-02 17:19:06.750 00:05:04.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 17:23:52.711 00:00:10.383 TCP 23.104.0.1:54482 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:24:01.881 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49810 11 6492 1 2025-12-02 17:24:53.135 00:00:10.330 TCP 23.104.0.1:51690 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:25:02.106 00:00:10.343 TCP 1.101.0.1:3000 -> 22.102.0.1:36812 10 6452 1 2025-12-02 17:25:53.503 00:00:10.367 TCP 23.104.0.1:38396 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:26:11.076 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:26:11.152 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 17:26:02.486 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52862 10 6452 1 2025-12-02 17:26:53.907 00:00:10.373 TCP 23.104.0.1:34312 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:27:02.709 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50562 10 6452 1 2025-12-02 17:27:54.336 00:00:10.433 TCP 23.104.0.1:44426 -> 1.101.0.1:3000 15 1926 1 2025-12-02 17:28:02.928 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:58096 12 10369 1 2025-12-02 17:28:54.813 00:00:10.371 TCP 23.104.0.1:54974 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:25:06.752 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 17:25:06.754 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 17:29:03.188 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49286 10 6452 1 2025-12-02 17:29:55.219 00:00:10.364 TCP 23.104.0.1:37272 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:30:03.401 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43732 10 6452 1 2025-12-02 17:30:55.625 00:00:10.363 TCP 23.104.0.1:35196 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:31:11.273 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 17:31:11.380 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:31:03.609 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51896 10 6452 1 2025-12-02 17:31:56.028 00:00:10.364 TCP 23.104.0.1:35622 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:32:03.824 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51132 10 6452 1 2025-12-02 17:32:56.432 00:00:10.377 TCP 23.104.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:33:04.072 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58144 10 6452 1 2025-12-02 17:33:56.848 00:00:10.383 TCP 23.104.0.1:49138 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:34:04.293 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46198 10 6452 1 2025-12-02 17:34:57.271 00:00:10.364 TCP 23.104.0.1:34904 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:31:06.756 00:05:04.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 17:35:04.512 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51562 10 6452 1 2025-12-02 17:31:06.753 00:05:04.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 17:36:11.176 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 17:36:11.322 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:35:57.672 00:00:10.372 TCP 23.104.0.1:46222 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:36:04.684 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45424 10 6452 1 2025-12-02 17:36:58.105 00:00:10.366 TCP 23.104.0.1:35466 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:37:04.895 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55962 10 6452 1 2025-12-02 17:37:58.506 00:00:10.366 TCP 23.104.0.1:59836 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:38:05.117 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34728 10 6452 1 2025-12-02 17:38:58.913 00:00:10.318 TCP 23.104.0.1:52046 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:39:05.338 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60892 10 6452 1 2025-12-02 17:39:59.274 00:00:10.365 TCP 23.104.0.1:34944 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:40:05.559 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49456 10 6452 1 2025-12-02 17:41:11.301 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:40:59.681 00:00:10.372 TCP 23.104.0.1:44062 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:41:11.499 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 17:37:06.755 00:05:04.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 17:37:06.758 00:05:04.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 17:41:05.736 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38732 10 6452 1 2025-12-02 17:42:00.102 00:00:10.367 TCP 23.104.0.1:52494 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:42:05.947 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35430 10 6452 1 2025-12-02 17:43:00.508 00:00:10.365 TCP 23.104.0.1:39880 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:43:06.179 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52964 10 6452 1 2025-12-02 17:44:00.915 00:00:10.358 TCP 23.104.0.1:35118 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:44:06.389 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52858 10 6452 1 2025-12-02 17:45:01.315 00:00:10.369 TCP 23.104.0.1:35300 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:45:06.609 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56218 10 6452 1 2025-12-02 17:46:11.678 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 17:46:11.522 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:46:01.719 00:00:10.388 TCP 23.104.0.1:49152 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:46:06.823 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48530 10 6452 1 2025-12-02 17:43:06.760 00:05:04.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 17:43:06.756 00:05:04.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 17:47:02.143 00:00:11.890 TCP 23.104.0.1:53032 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:47:07.043 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48376 10 6452 1 2025-12-02 17:48:04.099 00:00:10.366 TCP 23.104.0.1:38434 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:48:07.260 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50930 10 6452 1 2025-12-02 17:49:04.498 00:00:10.326 TCP 23.104.0.1:60554 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:49:07.477 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45410 10 6452 1 2025-12-02 17:50:04.860 00:00:10.369 TCP 23.104.0.1:37362 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:50:07.696 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46756 10 6452 1 2025-12-02 17:51:11.631 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 17:51:11.337 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:51:05.270 00:00:10.365 TCP 23.104.0.1:44024 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:51:07.908 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47068 10 6452 1 2025-12-02 17:52:05.669 00:00:10.366 TCP 23.104.0.1:47520 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:52:08.148 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51608 10 6452 1 2025-12-02 17:49:06.757 00:05:04.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 17:53:06.099 00:00:10.368 TCP 23.104.0.1:57454 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:49:06.760 00:05:04.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 17:53:08.326 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35316 10 6452 1 2025-12-02 17:54:06.508 00:00:10.361 TCP 23.104.0.1:36656 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:54:08.536 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44902 10 6452 1 2025-12-02 17:55:08.752 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55200 10 6452 1 2025-12-02 17:55:06.900 00:00:10.372 TCP 23.104.0.1:37524 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:56:11.712 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 17:56:11.847 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 17:56:07.315 00:00:10.367 TCP 23.104.0.1:57152 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:56:08.976 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:41466 11 6492 1 2025-12-02 17:57:07.722 00:00:10.403 TCP 23.104.0.1:35162 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:57:09.220 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58740 10 6452 1 2025-12-02 17:58:08.135 00:00:10.368 TCP 23.104.0.1:59326 -> 1.101.0.1:3000 11 1507 1 2025-12-02 17:58:09.446 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:40696 10 6452 1 Summary: total flows: 164, total bytes: 502764, total packets: 1580, avg bps: 1060, avg pps: 0, avg bpp: 318 Time window: 2025-12-02 16:55:06 - 2025-12-02 17:58:19 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0057s User: 0.0009s Wall: 0.0020s flows/second: 80792.3 Runtime: 0.0020s