Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 02:59:03.186 00:00:10.363 TCP 23.104.0.1:49076 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:55:06.907 00:05:04.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 02:55:06.903 00:05:04.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 02:59:13.974 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:41986 10 6452 1 2025-12-03 03:00:03.583 00:00:10.367 TCP 23.104.0.1:48302 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:00:14.178 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49592 10 6452 1 2025-12-03 03:01:03.990 00:00:10.325 TCP 23.104.0.1:54066 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:01:22.588 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 03:01:14.388 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33232 10 6452 1 2025-12-03 03:01:22.527 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 03:02:04.352 00:00:10.369 TCP 23.104.0.1:59108 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:02:14.598 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47194 10 6452 1 2025-12-03 03:03:04.755 00:00:10.381 TCP 23.104.0.1:38266 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:03:14.764 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42660 10 6452 1 2025-12-03 03:04:05.173 00:00:10.326 TCP 23.104.0.1:37138 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:04:14.974 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:47316 10 6452 1 2025-12-03 03:05:05.538 00:00:10.335 TCP 23.104.0.1:58694 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:01:06.908 00:05:04.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 03:01:06.907 00:05:04.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 03:05:15.218 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40390 10 6452 1 2025-12-03 03:06:05.925 00:00:10.392 TCP 23.104.0.1:51444 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:06:22.780 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 03:06:15.432 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37502 10 6452 1 2025-12-03 03:06:22.693 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 03:07:06.363 00:00:10.363 TCP 23.104.0.1:33434 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:07:15.639 00:00:11.630 TCP 1.101.0.1:3000 -> 22.102.0.1:51964 10 6452 1 2025-12-03 03:08:06.769 00:00:10.374 TCP 23.104.0.1:40404 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:08:17.312 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41134 10 6452 1 2025-12-03 03:09:07.175 00:00:10.371 TCP 23.104.0.1:56084 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:09:17.535 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32826 10 6452 1 2025-12-03 03:10:07.582 00:00:10.367 TCP 23.104.0.1:33968 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:10:17.748 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55080 10 6452 1 2025-12-03 03:07:06.911 00:05:04.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 03:07:06.907 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 03:11:22.729 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 03:11:07.991 00:00:10.366 TCP 23.104.0.1:47532 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:11:22.800 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 03:11:17.964 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:44760 10 6452 1 2025-12-03 03:12:08.401 00:00:10.364 TCP 23.104.0.1:43302 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:12:18.157 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32964 10 6452 1 2025-12-03 03:13:08.807 00:00:10.372 TCP 23.104.0.1:48410 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:13:18.373 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53594 10 6452 1 2025-12-03 03:14:09.216 00:00:10.362 TCP 23.104.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:14:18.585 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52906 10 6452 1 2025-12-03 03:15:09.613 00:00:10.370 TCP 23.104.0.1:38360 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:15:18.812 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52538 10 6452 1 2025-12-03 03:16:10.022 00:00:10.368 TCP 23.104.0.1:58026 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:16:22.923 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 03:16:23.316 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 03:16:19.045 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38292 10 6452 1 2025-12-03 03:13:06.909 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 03:13:06.911 00:05:04.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 03:17:10.431 00:00:10.323 TCP 23.104.0.1:41340 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:17:19.263 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33824 10 6452 1 2025-12-03 03:18:10.793 00:00:10.369 TCP 23.104.0.1:34150 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:18:19.484 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51382 10 6452 1 2025-12-03 03:19:11.207 00:00:10.360 TCP 23.104.0.1:52396 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:19:19.660 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37002 10 6452 1 2025-12-03 03:20:11.607 00:00:10.363 TCP 23.104.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:20:19.872 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48370 10 6452 1 2025-12-03 03:21:22.993 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 03:21:12.011 00:00:10.324 TCP 23.104.0.1:46360 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:21:23.010 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 03:21:20.105 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35270 10 6452 1 2025-12-03 03:22:12.370 00:00:10.363 TCP 23.104.0.1:54268 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:22:20.311 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48134 10 6452 1 2025-12-03 03:19:06.914 00:05:04.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 03:19:06.911 00:05:04.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 03:23:12.777 00:00:10.365 TCP 23.104.0.1:46352 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:23:20.525 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57460 10 6452 1 2025-12-03 03:24:13.183 00:00:10.328 TCP 23.104.0.1:52658 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:24:20.737 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:52930 10 6452 1 2025-12-03 03:25:13.550 00:00:10.360 TCP 23.104.0.1:54210 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:25:20.909 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46736 10 6452 1 2025-12-03 03:26:23.080 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 03:26:13.956 00:00:10.364 TCP 23.104.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:26:23.189 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 03:26:21.125 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38260 10 6452 1 2025-12-03 03:27:14.361 00:00:10.326 TCP 23.104.0.1:47030 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:27:21.350 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37656 10 6452 1 2025-12-03 03:28:14.727 00:00:10.379 TCP 23.104.0.1:41670 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:28:21.530 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50412 10 6452 1 2025-12-03 03:25:06.911 00:05:04.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 03:25:06.914 00:05:04.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 03:29:15.144 00:00:10.364 TCP 23.104.0.1:49046 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:29:21.706 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33434 10 6452 1 2025-12-03 03:30:15.551 00:00:10.319 TCP 23.104.0.1:37202 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:30:21.915 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37190 10 6452 1 2025-12-03 03:31:23.352 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 03:31:15.911 00:00:10.390 TCP 23.104.0.1:40456 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:31:22.973 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 03:31:22.135 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60498 10 6452 1 2025-12-03 03:32:16.340 00:00:10.369 TCP 23.104.0.1:42268 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:32:22.310 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49756 10 6452 1 2025-12-03 03:33:16.752 00:00:10.385 TCP 23.104.0.1:44744 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:33:22.526 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56748 10 6452 1 2025-12-03 03:34:17.181 00:00:10.364 TCP 23.104.0.1:57272 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:34:22.739 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35290 10 6452 1 2025-12-03 03:31:06.915 00:05:04.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 03:31:06.912 00:05:04.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 03:35:17.588 00:00:10.393 TCP 23.104.0.1:56606 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:35:22.957 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35544 12 6556 1 2025-12-03 03:36:23.661 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 03:36:23.566 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 03:36:18.022 00:00:10.369 TCP 23.104.0.1:35028 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:36:23.191 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51528 10 6452 1 2025-12-03 03:37:18.428 00:00:10.325 TCP 23.104.0.1:53184 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:37:23.413 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60464 10 6452 1 2025-12-03 03:38:18.791 00:00:10.366 TCP 23.104.0.1:52238 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:38:23.649 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35040 10 6452 1 2025-12-03 03:39:19.205 00:00:10.329 TCP 23.104.0.1:45854 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:39:23.819 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47026 10 6452 1 2025-12-03 03:40:19.573 00:00:10.368 TCP 23.104.0.1:34588 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:40:24.048 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:32850 10 6452 1 2025-12-03 03:37:06.917 00:05:04.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 03:37:06.915 00:05:04.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 03:41:23.546 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 03:41:23.530 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 03:41:19.981 00:00:10.371 TCP 23.104.0.1:55702 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:41:24.285 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55086 10 6452 1 2025-12-03 03:42:20.391 00:00:10.366 TCP 23.104.0.1:39804 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:42:24.500 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50916 10 6452 1 2025-12-03 03:43:20.797 00:00:10.369 TCP 23.104.0.1:36080 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:43:24.714 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42586 10 6452 1 2025-12-03 03:44:21.213 00:00:10.327 TCP 23.104.0.1:41110 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:44:24.885 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56198 10 6452 1 2025-12-03 03:45:25.104 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33586 10 6452 1 2025-12-03 03:45:21.576 00:00:10.479 TCP 23.104.0.1:51276 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:46:23.557 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 03:46:23.553 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 03:46:25.313 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43546 10 6452 1 2025-12-03 03:46:22.107 00:00:10.364 TCP 23.104.0.1:49418 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:43:06.919 00:05:04.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 03:43:06.917 00:05:04.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 03:47:22.508 00:00:10.369 TCP 23.104.0.1:46020 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:47:25.526 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50434 10 6452 1 2025-12-03 03:48:22.911 00:00:10.363 TCP 23.104.0.1:46216 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:48:25.737 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:37426 11 6504 1 2025-12-03 03:49:23.311 00:00:10.363 TCP 23.104.0.1:54236 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:49:26.007 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54238 10 6452 1 2025-12-03 03:50:23.714 00:00:10.746 TCP 23.104.0.1:58132 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:50:26.221 00:00:10.539 TCP 1.101.0.1:3000 -> 22.102.0.1:51952 10 6452 1 2025-12-03 03:51:24.226 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 03:51:24.046 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 03:51:26.800 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38830 10 6452 1 2025-12-03 03:51:24.503 00:00:10.366 TCP 23.104.0.1:56396 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:52:24.908 00:00:10.370 TCP 23.104.0.1:40592 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:52:27.023 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36200 10 6452 1 2025-12-03 03:49:06.921 00:05:04.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 03:49:06.918 00:05:04.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 03:53:25.346 00:00:10.403 TCP 23.104.0.1:34990 -> 1.101.0.1:3000 15 1926 1 2025-12-03 03:53:27.239 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54304 12 10375 1 2025-12-03 03:54:25.798 00:00:10.378 TCP 23.104.0.1:58948 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:54:27.483 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47894 10 6452 1 2025-12-03 03:55:26.211 00:00:10.333 TCP 23.104.0.1:52292 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:55:27.703 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37922 10 6452 1 2025-12-03 03:56:23.658 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 03:56:23.891 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 03:56:26.584 00:00:10.364 TCP 23.104.0.1:59802 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:56:27.914 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50514 10 6452 1 2025-12-03 03:57:26.991 00:00:10.364 TCP 23.104.0.1:49156 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:57:28.133 00:00:10.443 TCP 1.101.0.1:3000 -> 22.102.0.1:53480 10 6452 1 2025-12-03 03:58:27.392 00:00:10.324 TCP 23.104.0.1:46954 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:58:28.625 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34424 10 6452 1 Summary: total flows: 164, total bytes: 502846, total packets: 1581, avg bps: 1055, avg pps: 0, avg bpp: 318 Time window: 2025-12-03 02:55:06 - 2025-12-03 03:58:38 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0062s User: 0.0010s Wall: 0.0021s flows/second: 79256.3 Runtime: 0.0021s