Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 06:58:46.573 00:00:10.324 TCP 23.104.0.1:38690 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:55:06.971 00:05:04.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 06:55:06.976 00:05:04.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 06:59:17.435 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57208 10 6452 1 2025-12-03 06:59:46.939 00:00:10.385 TCP 23.104.0.1:52712 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:00:17.643 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54920 10 6452 1 2025-12-03 07:00:47.355 00:00:10.359 TCP 23.104.0.1:40444 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:01:27.478 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 07:01:17.851 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45684 10 6452 1 2025-12-03 07:01:27.529 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 07:01:47.754 00:00:14.935 TCP 23.104.0.1:41224 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:02:18.080 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35004 10 6452 1 2025-12-03 07:02:52.742 00:00:10.364 TCP 23.104.0.1:45788 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:03:18.298 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58790 10 6452 1 2025-12-03 07:03:53.149 00:00:10.370 TCP 23.104.0.1:37804 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:04:18.511 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42944 10 6452 1 2025-12-03 07:04:53.561 00:00:10.365 TCP 23.104.0.1:55038 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:01:06.975 00:05:04.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 07:01:06.973 00:05:04.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 07:05:18.717 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45258 10 6452 1 2025-12-03 07:05:53.966 00:00:10.368 TCP 23.104.0.1:52192 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:06:18.937 00:00:10.476 TCP 1.101.0.1:3000 -> 22.102.0.1:37356 10 6452 1 2025-12-03 07:06:27.582 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 07:06:27.560 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 07:06:54.391 00:00:10.364 TCP 23.104.0.1:54148 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:07:19.452 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48938 10 6452 1 2025-12-03 07:07:54.794 00:00:10.365 TCP 23.104.0.1:35876 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:08:19.671 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42880 10 6452 1 2025-12-03 07:08:55.202 00:00:10.364 TCP 23.104.0.1:44382 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:09:19.887 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59770 10 6452 1 2025-12-03 07:09:55.603 00:00:10.330 TCP 23.104.0.1:48996 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:10:20.103 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37286 10 6452 1 2025-12-03 07:10:55.962 00:00:10.367 TCP 23.104.0.1:36986 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:07:06.976 00:05:04.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 07:07:06.977 00:05:04.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 07:11:27.402 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 07:11:20.332 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35886 10 6452 1 2025-12-03 07:11:27.696 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 07:11:56.367 00:00:10.366 TCP 23.104.0.1:38956 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:12:20.506 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33398 10 6452 1 2025-12-03 07:12:56.769 00:00:10.441 TCP 23.104.0.1:60008 -> 1.101.0.1:3000 15 1926 1 2025-12-03 07:13:20.686 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39614 12 10375 1 2025-12-03 07:13:57.253 00:00:10.323 TCP 23.104.0.1:41110 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:14:20.924 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46138 10 6452 1 2025-12-03 07:14:57.616 00:00:10.367 TCP 23.104.0.1:52378 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:15:21.149 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:49840 10 6452 1 2025-12-03 07:15:58.020 00:00:10.365 TCP 23.104.0.1:56882 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:16:27.829 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 07:16:27.864 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 07:16:21.351 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39786 10 6452 1 2025-12-03 07:16:58.425 00:00:10.328 TCP 23.104.0.1:36846 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:13:06.981 00:05:04.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 07:13:06.979 00:05:04.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 07:17:21.561 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49544 10 6452 1 2025-12-03 07:17:58.798 00:00:10.365 TCP 23.104.0.1:50110 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:18:21.775 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57972 10 6452 1 2025-12-03 07:18:59.206 00:00:10.377 TCP 23.104.0.1:35422 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:19:21.987 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:49854 10 6452 1 2025-12-03 07:19:59.617 00:00:10.374 TCP 23.104.0.1:52832 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:20:22.222 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47942 10 6452 1 2025-12-03 07:21:00.032 00:00:10.364 TCP 23.104.0.1:57002 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:21:28.000 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 07:21:27.948 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 07:21:22.436 00:00:10.353 TCP 1.101.0.1:3000 -> 22.102.0.1:35358 10 6452 1 2025-12-03 07:22:00.435 00:00:10.365 TCP 23.104.0.1:47888 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:22:22.827 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45166 10 6452 1 2025-12-03 07:19:06.979 00:05:04.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 07:23:00.836 00:00:10.385 TCP 23.104.0.1:46582 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:19:06.981 00:05:04.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 07:23:23.071 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:55996 10 6452 1 2025-12-03 07:24:01.262 00:00:10.372 TCP 23.104.0.1:46522 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:24:23.312 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42812 10 6452 1 2025-12-03 07:25:01.675 00:00:10.323 TCP 23.104.0.1:51866 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:25:23.525 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56672 10 6452 1 2025-12-03 07:26:02.044 00:00:10.374 TCP 23.104.0.1:36682 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:26:28.249 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 07:26:28.276 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 07:26:23.733 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52522 10 6452 1 2025-12-03 07:27:02.462 00:00:10.365 TCP 23.104.0.1:57224 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:27:23.959 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:35700 12 6556 1 2025-12-03 07:28:02.868 00:00:10.368 TCP 23.104.0.1:39020 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:28:24.203 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37834 10 6452 1 2025-12-03 07:25:06.986 00:05:04.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 07:29:03.276 00:00:10.319 TCP 23.104.0.1:45888 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:25:06.984 00:05:04.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 07:29:24.416 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33282 10 6452 1 2025-12-03 07:30:03.633 00:00:10.368 TCP 23.104.0.1:38904 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:30:24.630 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53062 10 6452 1 2025-12-03 07:31:04.053 00:00:10.365 TCP 23.104.0.1:58322 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:31:27.809 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 07:31:28.171 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 07:31:24.841 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55630 10 6452 1 2025-12-03 07:32:04.457 00:00:10.370 TCP 23.104.0.1:37188 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:32:25.085 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42572 10 6452 1 2025-12-03 07:33:04.867 00:00:11.128 TCP 23.104.0.1:49996 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:33:25.304 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42228 10 6452 1 2025-12-03 07:34:06.045 00:00:10.322 TCP 23.104.0.1:60066 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:34:25.525 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52708 10 6452 1 2025-12-03 07:31:06.988 00:05:04.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 07:35:06.406 00:00:10.371 TCP 23.104.0.1:47030 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:31:06.986 00:05:04.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 07:35:25.736 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43116 10 6452 1 2025-12-03 07:36:06.814 00:00:10.376 TCP 23.104.0.1:34548 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:36:28.232 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 07:36:28.181 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 07:36:25.950 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:42704 12 6556 1 2025-12-03 07:37:07.232 00:00:10.373 TCP 23.104.0.1:38046 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:37:26.185 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54026 10 6452 1 2025-12-03 07:38:07.645 00:00:10.369 TCP 23.104.0.1:51240 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:38:26.401 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50238 10 6452 1 2025-12-03 07:39:08.064 00:00:10.324 TCP 23.104.0.1:55196 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:39:26.574 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51744 10 6452 1 2025-12-03 07:40:08.428 00:00:10.326 TCP 23.104.0.1:39572 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:40:26.747 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33068 10 6452 1 2025-12-03 07:37:06.991 00:05:04.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 07:37:06.988 00:05:04.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 07:41:08.790 00:00:10.377 TCP 23.104.0.1:46584 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:41:28.418 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 07:41:28.361 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 07:41:26.963 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47878 10 6452 1 2025-12-03 07:42:09.199 00:00:10.362 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:42:27.191 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35198 10 6452 1 2025-12-03 07:43:09.602 00:00:10.341 TCP 23.104.0.1:34764 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:43:27.413 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48360 10 6452 1 2025-12-03 07:44:09.996 00:00:10.322 TCP 23.104.0.1:57588 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:44:27.641 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38524 10 6452 1 2025-12-03 07:45:10.355 00:00:10.328 TCP 23.104.0.1:46450 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:45:27.868 00:00:10.592 TCP 1.101.0.1:3000 -> 22.102.0.1:49686 10 6452 1 2025-12-03 07:46:10.727 00:00:10.374 TCP 23.104.0.1:54038 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:46:28.413 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 07:46:28.390 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 07:46:28.498 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37400 10 6452 1 2025-12-03 07:43:06.992 00:05:04.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 07:43:06.994 00:05:04.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 07:47:11.138 00:00:10.369 TCP 23.104.0.1:58114 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:47:28.715 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43094 10 6452 1 2025-12-03 07:48:11.545 00:00:10.375 TCP 23.104.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:48:28.943 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:55640 10 6452 1 2025-12-03 07:49:11.957 00:00:11.150 TCP 23.104.0.1:39420 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:49:29.182 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60386 10 6452 1 2025-12-03 07:50:13.144 00:00:10.359 TCP 23.104.0.1:43054 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:50:29.390 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57926 10 6452 1 2025-12-03 07:51:13.543 00:00:10.365 TCP 23.104.0.1:54322 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:51:28.208 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 07:51:28.449 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 07:51:29.558 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59828 10 6452 1 2025-12-03 07:52:13.948 00:00:10.379 TCP 23.104.0.1:58230 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:52:29.768 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50596 10 6452 1 2025-12-03 07:49:06.998 00:05:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 11 667 1 2025-12-03 07:49:06.995 00:05:04.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 07:53:14.382 00:00:10.442 TCP 23.104.0.1:44972 -> 1.101.0.1:3000 15 1926 1 2025-12-03 07:53:29.989 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:38404 12 10369 1 2025-12-03 07:54:14.865 00:00:10.328 TCP 23.104.0.1:55168 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:54:30.244 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40672 10 6452 1 2025-12-03 07:55:15.232 00:00:10.367 TCP 23.104.0.1:60276 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:55:30.468 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59512 10 6452 1 2025-12-03 07:56:15.635 00:00:10.366 TCP 23.104.0.1:36176 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:56:28.724 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 07:56:28.454 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 07:56:30.685 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:55474 10 6452 1 2025-12-03 07:57:16.065 00:00:10.324 TCP 23.104.0.1:49488 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:57:30.941 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:38582 10 6452 1 2025-12-03 07:58:16.426 00:00:10.368 TCP 23.104.0.1:47810 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:58:31.182 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50526 10 6452 1 Summary: total flows: 164, total bytes: 507163, total packets: 1587, avg bps: 1063, avg pps: 0, avg bpp: 319 Time window: 2025-12-03 06:55:06 - 2025-12-03 07:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0030s Wall: 0.0023s flows/second: 72598.0 Runtime: 0.0023s