Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 08:58:43.437 00:00:10.361 TCP 23.104.0.1:33022 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:58:47.476 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42398 10 6452 1 2025-12-03 08:55:07.048 00:05:04.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 08:55:07.050 00:05:04.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 08:59:43.847 00:00:10.369 TCP 23.104.0.1:49622 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:59:47.699 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43852 10 6452 1 2025-12-03 09:00:44.254 00:00:10.377 TCP 23.104.0.1:44338 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:00:47.877 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38236 10 6452 1 2025-12-03 09:01:29.704 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 09:01:29.914 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 09:01:44.667 00:00:10.327 TCP 23.104.0.1:46778 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:01:48.103 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53744 10 6452 1 2025-12-03 09:02:45.029 00:00:10.364 TCP 23.104.0.1:36588 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:02:48.318 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58998 10 6452 1 2025-12-03 09:03:45.437 00:00:10.325 TCP 23.104.0.1:38314 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:03:48.528 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56078 10 6452 1 2025-12-03 09:04:45.804 00:00:10.377 TCP 23.104.0.1:50762 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:04:48.700 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53518 10 6452 1 2025-12-03 09:01:07.050 00:05:04.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 09:01:07.053 00:05:04.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 09:05:46.219 00:00:10.370 TCP 23.104.0.1:60942 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:05:48.913 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39944 10 6452 1 2025-12-03 09:06:30.048 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 09:06:29.931 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 09:06:46.625 00:00:10.370 TCP 23.104.0.1:34748 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:06:49.127 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:43042 10 6452 1 2025-12-03 09:07:47.034 00:00:10.359 TCP 23.104.0.1:47520 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:07:49.335 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47942 10 6452 1 2025-12-03 09:08:47.436 00:00:10.328 TCP 23.104.0.1:47890 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:08:49.545 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51002 10 6452 1 2025-12-03 09:09:47.801 00:00:10.372 TCP 23.104.0.1:42916 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:09:49.757 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54724 10 6452 1 2025-12-03 09:10:49.967 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38340 10 6452 1 2025-12-03 09:10:48.212 00:00:10.323 TCP 23.104.0.1:52826 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:07:07.054 00:05:04.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 09:07:07.051 00:05:04.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 09:11:30.032 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 09:11:29.986 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 09:11:50.197 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60052 10 6452 1 2025-12-03 09:11:48.572 00:00:10.367 TCP 23.104.0.1:33758 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:12:50.416 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37706 10 6452 1 2025-12-03 09:12:48.976 00:00:10.333 TCP 23.104.0.1:58312 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:13:50.628 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60950 10 6452 1 2025-12-03 09:13:49.346 00:00:10.364 TCP 23.104.0.1:48676 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:14:49.752 00:00:10.334 TCP 23.104.0.1:58544 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:14:50.841 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45350 10 6452 1 2025-12-03 09:15:50.127 00:00:10.365 TCP 23.104.0.1:42354 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:15:51.074 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49946 10 6452 1 2025-12-03 09:16:30.263 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 09:16:30.213 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 09:16:50.532 00:00:10.415 TCP 23.104.0.1:45968 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:16:51.280 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56542 10 6452 1 2025-12-03 09:13:07.056 00:05:04.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 09:13:07.058 00:05:04.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 09:17:50.984 00:00:10.368 TCP 23.104.0.1:44368 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:17:51.488 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46516 10 6452 1 2025-12-03 09:18:51.700 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49578 10 6452 1 2025-12-03 09:18:51.396 00:00:10.335 TCP 23.104.0.1:57618 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:19:51.878 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49366 10 6452 1 2025-12-03 09:19:51.775 00:00:10.374 TCP 23.104.0.1:33126 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:20:52.186 00:00:10.800 TCP 23.104.0.1:50958 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:20:52.104 00:00:10.797 TCP 1.101.0.1:3000 -> 22.102.0.1:45788 10 6452 1 2025-12-03 09:21:30.016 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 09:21:30.382 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 09:21:52.943 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:55914 10 6452 1 2025-12-03 09:21:53.032 00:00:10.359 TCP 23.104.0.1:49356 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:22:53.431 00:00:10.383 TCP 23.104.0.1:58902 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:22:53.177 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60786 10 6452 1 2025-12-03 09:19:07.058 00:05:04.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 09:19:07.060 00:05:04.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 09:23:53.398 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:35412 10 6452 1 2025-12-03 09:23:53.877 00:00:10.326 TCP 23.104.0.1:44790 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:24:53.652 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50106 10 6452 1 2025-12-03 09:24:54.233 00:00:10.375 TCP 23.104.0.1:53010 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:25:54.646 00:00:10.493 TCP 23.104.0.1:52344 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:25:53.875 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44146 10 6452 1 2025-12-03 09:26:30.810 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 09:26:30.851 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 09:26:54.102 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37208 10 6452 1 2025-12-03 09:26:55.187 00:00:10.363 TCP 23.104.0.1:44934 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:27:55.585 00:00:10.321 TCP 23.104.0.1:60582 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:27:54.331 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60674 10 6452 1 2025-12-03 09:28:54.547 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51096 10 6452 1 2025-12-03 09:28:55.950 00:00:10.371 TCP 23.104.0.1:42226 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:25:07.056 00:05:04.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 09:25:07.059 00:05:04.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 09:29:54.770 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37486 10 6452 1 2025-12-03 09:29:56.360 00:00:10.370 TCP 23.104.0.1:36818 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:30:54.992 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:51028 10 6452 1 2025-12-03 09:30:56.767 00:00:10.374 TCP 23.104.0.1:60470 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:31:30.609 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 09:31:30.524 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 09:31:55.222 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43568 10 6452 1 2025-12-03 09:31:57.178 00:00:10.322 TCP 23.104.0.1:54476 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:32:55.455 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36670 10 6452 1 2025-12-03 09:32:57.539 00:00:10.365 TCP 23.104.0.1:47152 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:33:55.671 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58160 10 6452 1 2025-12-03 09:33:57.942 00:00:10.337 TCP 23.104.0.1:50926 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:34:55.841 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35096 10 6452 1 2025-12-03 09:31:07.060 00:05:04.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 09:34:58.314 00:00:10.363 TCP 23.104.0.1:57664 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:31:07.058 00:05:04.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 09:35:56.087 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42218 10 6452 1 2025-12-03 09:35:58.717 00:00:10.375 TCP 23.104.0.1:52670 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:36:30.616 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 09:36:30.651 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 09:36:56.301 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59396 10 6452 1 2025-12-03 09:36:59.126 00:00:10.328 TCP 23.104.0.1:39292 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:37:56.521 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:49790 12 10375 1 2025-12-03 09:37:59.488 00:00:10.454 TCP 23.104.0.1:42288 -> 1.101.0.1:3000 15 1926 1 2025-12-03 09:38:56.771 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47802 10 6452 1 2025-12-03 09:38:59.973 00:00:10.332 TCP 23.104.0.1:50764 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:40:00.338 00:00:10.365 TCP 23.104.0.1:44640 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:39:56.994 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54770 10 6452 1 2025-12-03 09:41:00.742 00:00:10.864 TCP 23.104.0.1:38484 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:37:07.062 00:05:04.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 09:40:57.215 00:00:11.840 TCP 1.101.0.1:3000 -> 22.102.0.1:50826 10 6452 1 2025-12-03 09:37:07.064 00:05:04.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 09:41:30.700 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 09:41:30.553 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 09:41:59.088 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57454 10 6452 1 2025-12-03 09:42:01.648 00:00:10.385 TCP 23.104.0.1:41516 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:42:59.310 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43052 10 6452 1 2025-12-03 09:43:02.101 00:00:10.366 TCP 23.104.0.1:40922 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:43:59.526 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42650 10 6452 1 2025-12-03 09:44:02.496 00:00:10.367 TCP 23.104.0.1:53330 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:44:59.739 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58238 10 6452 1 2025-12-03 09:45:02.901 00:00:10.375 TCP 23.104.0.1:52650 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:45:59.963 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44756 12 6556 1 2025-12-03 09:46:03.315 00:00:11.252 TCP 23.104.0.1:58806 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:46:30.681 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 09:46:30.846 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 09:47:00.188 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36298 10 6452 1 2025-12-03 09:47:04.609 00:00:10.323 TCP 23.104.0.1:49108 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:43:07.067 00:05:04.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 09:43:07.065 00:05:04.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 09:48:00.409 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33592 10 6452 1 2025-12-03 09:48:04.971 00:00:10.374 TCP 23.104.0.1:59898 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:49:00.621 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40654 10 6452 1 2025-12-03 09:49:05.383 00:00:10.363 TCP 23.104.0.1:51302 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:50:00.857 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48828 10 6452 1 2025-12-03 09:50:05.789 00:00:10.381 TCP 23.104.0.1:41132 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:51:01.088 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35402 10 6452 1 2025-12-03 09:51:06.199 00:00:10.366 TCP 23.104.0.1:49830 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:51:30.979 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 09:51:31.028 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 09:52:01.313 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54064 10 6452 1 2025-12-03 09:52:06.602 00:00:10.362 TCP 23.104.0.1:46680 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:53:01.538 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52244 10 6452 1 2025-12-03 09:49:07.070 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 09:49:07.068 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 09:53:07.006 00:00:10.417 TCP 23.104.0.1:50706 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:54:01.755 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49240 10 6452 1 2025-12-03 09:54:07.469 00:00:10.366 TCP 23.104.0.1:60314 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:55:01.964 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59144 12 6556 1 2025-12-03 09:55:07.876 00:00:10.319 TCP 23.104.0.1:39516 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:56:02.184 00:00:10.677 TCP 1.101.0.1:3000 -> 22.102.0.1:37174 10 6452 1 2025-12-03 09:56:08.239 00:00:10.325 TCP 23.104.0.1:46926 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:56:30.669 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 09:56:31.039 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 09:57:02.897 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54320 10 6452 1 2025-12-03 09:57:08.604 00:00:10.363 TCP 23.104.0.1:57746 -> 1.101.0.1:3000 11 1507 1 2025-12-03 09:58:03.122 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33944 10 6452 1 2025-12-03 09:58:09.011 00:00:10.371 TCP 23.104.0.1:51244 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502898, total packets: 1582, avg bps: 1060, avg pps: 0, avg bpp: 317 Time window: 2025-12-03 08:55:07 - 2025-12-03 09:58:19 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0024s User: 0.0024s Wall: 0.0019s flows/second: 86775.1 Runtime: 0.0019s