Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 15:58:45.545 00:00:10.368 TCP 23.104.0.1:37674 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:58:50.723 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54230 10 6452 1 2025-12-03 15:55:07.156 00:05:04.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 15:55:07.159 00:05:04.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 15:59:45.950 00:00:10.327 TCP 23.104.0.1:57644 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:59:50.943 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57792 10 6452 1 2025-12-03 16:00:46.319 00:00:10.361 TCP 23.104.0.1:49660 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:00:51.175 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59330 10 6452 1 2025-12-03 16:01:38.211 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 16:01:38.312 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 16:01:51.388 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54328 10 6452 1 2025-12-03 16:01:46.720 00:00:10.324 TCP 23.104.0.1:40618 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:02:51.572 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60750 10 6452 1 2025-12-03 16:02:47.108 00:00:10.360 TCP 23.104.0.1:43556 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:03:51.782 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42640 10 6452 1 2025-12-03 16:03:47.511 00:00:10.375 TCP 23.104.0.1:55770 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:04:47.930 00:00:10.397 TCP 23.104.0.1:59048 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:04:51.960 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47116 10 6452 1 2025-12-03 16:01:07.160 00:05:04.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 16:01:07.158 00:05:04.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 16:05:48.366 00:00:10.871 TCP 23.104.0.1:42890 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:05:52.189 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45622 10 6452 1 2025-12-03 16:06:38.525 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 16:06:38.333 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 16:06:49.275 00:00:10.367 TCP 23.104.0.1:52768 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:06:52.362 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54066 10 6452 1 2025-12-03 16:07:49.679 00:00:10.335 TCP 23.104.0.1:47954 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:07:52.576 00:00:10.788 TCP 1.101.0.1:3000 -> 22.102.0.1:54396 10 6452 1 2025-12-03 16:08:50.060 00:00:10.361 TCP 23.104.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:08:53.403 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37838 10 6452 1 2025-12-03 16:09:50.466 00:00:10.377 TCP 23.104.0.1:52590 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:09:53.616 00:00:10.475 TCP 1.101.0.1:3000 -> 22.102.0.1:59396 10 6452 1 2025-12-03 16:10:50.877 00:00:10.350 TCP 23.104.0.1:60108 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:10:54.126 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:43040 10 6452 1 2025-12-03 16:07:07.160 00:05:04.873 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 16:07:07.158 00:05:04.878 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 16:11:38.559 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 16:11:38.296 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 16:11:51.264 00:00:10.363 TCP 23.104.0.1:56926 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:11:54.396 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34654 10 6452 1 2025-12-03 16:12:51.666 00:00:10.363 TCP 23.104.0.1:40758 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:12:54.608 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42620 10 6452 1 2025-12-03 16:13:52.091 00:00:10.360 TCP 23.104.0.1:36108 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:13:54.834 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37472 10 6452 1 2025-12-03 16:14:52.491 00:00:10.366 TCP 23.104.0.1:49736 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:14:55.081 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41588 10 6452 1 2025-12-03 16:15:52.902 00:00:10.326 TCP 23.104.0.1:58390 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:15:55.304 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45278 10 6452 1 2025-12-03 16:16:38.638 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 16:16:38.653 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 16:16:55.527 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57956 10 6452 1 2025-12-03 16:16:53.267 00:00:10.363 TCP 23.104.0.1:57208 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:13:07.162 00:05:04.873 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 16:13:07.159 00:05:04.878 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 16:17:53.671 00:00:10.364 TCP 23.104.0.1:36154 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:17:55.748 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:56258 10 6452 1 2025-12-03 16:18:55.930 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50676 10 6452 1 2025-12-03 16:18:54.103 00:00:10.360 TCP 23.104.0.1:48160 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:19:56.150 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60964 10 6452 1 2025-12-03 16:19:54.505 00:00:10.366 TCP 23.104.0.1:38864 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:20:56.358 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:53102 10 6452 1 2025-12-03 16:20:54.907 00:00:10.366 TCP 23.104.0.1:57302 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:21:38.952 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 16:21:38.628 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 16:21:56.632 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53294 10 6452 1 2025-12-03 16:21:55.305 00:00:10.363 TCP 23.104.0.1:55066 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:22:55.704 00:00:10.451 TCP 23.104.0.1:35120 -> 1.101.0.1:3000 15 1926 1 2025-12-03 16:22:56.850 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:47970 12 10375 1 2025-12-03 16:19:07.164 00:05:04.876 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 16:19:07.162 00:05:04.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 16:23:56.198 00:00:10.363 TCP 23.104.0.1:57680 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:23:57.112 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55028 10 6452 1 2025-12-03 16:24:56.598 00:00:10.365 TCP 23.104.0.1:60070 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:24:57.332 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57242 10 6452 1 2025-12-03 16:25:57.565 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39650 10 6452 1 2025-12-03 16:25:57.002 00:00:10.363 TCP 23.104.0.1:47744 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:26:38.763 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 16:26:38.833 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 16:26:57.400 00:00:10.330 TCP 23.104.0.1:54856 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:26:57.781 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33804 10 6452 1 2025-12-03 16:27:57.769 00:00:10.381 TCP 23.104.0.1:60120 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:27:58.010 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:36242 10 6452 1 2025-12-03 16:28:58.189 00:00:10.366 TCP 23.104.0.1:39526 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:25:07.166 00:05:04.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 16:28:58.248 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34426 10 6452 1 2025-12-03 16:25:07.165 00:05:04.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 16:29:58.595 00:00:10.361 TCP 23.104.0.1:43650 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:29:58.467 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58848 10 6452 1 2025-12-03 16:30:58.999 00:00:10.361 TCP 23.104.0.1:43816 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:30:58.684 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60462 10 6452 1 2025-12-03 16:31:39.013 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 16:31:38.928 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 16:31:59.405 00:00:10.366 TCP 23.104.0.1:38088 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:31:58.900 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38070 10 6452 1 2025-12-03 16:32:59.118 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52738 10 6452 1 2025-12-03 16:32:59.808 00:00:10.368 TCP 23.104.0.1:51850 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:33:59.289 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54008 10 6452 1 2025-12-03 16:34:00.214 00:00:10.370 TCP 23.104.0.1:60208 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:34:59.517 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49230 10 6452 1 2025-12-03 16:35:00.630 00:00:10.367 TCP 23.104.0.1:42066 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:31:07.167 00:05:04.880 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 16:31:07.166 00:05:04.886 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 16:35:59.750 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:43016 10 6452 1 2025-12-03 16:36:01.037 00:00:10.365 TCP 23.104.0.1:50548 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:36:39.026 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 16:36:38.980 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 16:37:01.447 00:00:10.370 TCP 23.104.0.1:47024 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:36:59.963 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40224 10 6452 1 2025-12-03 16:38:00.185 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55550 10 6452 1 2025-12-03 16:38:01.856 00:00:10.336 TCP 23.104.0.1:57524 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:39:00.404 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37298 10 6452 1 2025-12-03 16:39:02.231 00:00:10.365 TCP 23.104.0.1:52140 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:40:00.613 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41226 10 6452 1 2025-12-03 16:40:02.635 00:00:10.377 TCP 23.104.0.1:36678 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:41:00.824 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47716 10 6452 1 2025-12-03 16:41:03.050 00:00:11.279 TCP 23.104.0.1:33772 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:37:07.172 00:05:04.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 16:37:07.169 00:05:04.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 16:41:39.497 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 16:41:39.475 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 16:42:01.070 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60718 10 6452 1 2025-12-03 16:42:04.369 00:00:10.362 TCP 23.104.0.1:43156 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:43:01.277 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:38132 12 10375 1 2025-12-03 16:43:04.774 00:00:10.447 TCP 23.104.0.1:53396 -> 1.101.0.1:3000 15 1926 1 2025-12-03 16:44:01.521 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49566 10 6452 1 2025-12-03 16:44:05.258 00:00:10.369 TCP 23.104.0.1:39810 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:45:01.736 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48180 10 6452 1 2025-12-03 16:45:05.665 00:00:10.364 TCP 23.104.0.1:45028 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:46:01.909 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58302 10 6452 1 2025-12-03 16:46:06.094 00:00:10.322 TCP 23.104.0.1:43740 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:46:39.084 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 16:46:39.170 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 16:47:02.118 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57456 10 6452 1 2025-12-03 16:43:07.170 00:05:04.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 16:43:07.173 00:05:04.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 16:47:06.454 00:00:10.367 TCP 23.104.0.1:38476 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:48:02.334 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54156 10 6452 1 2025-12-03 16:48:06.854 00:00:10.380 TCP 23.104.0.1:48606 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:49:02.543 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41650 10 6452 1 2025-12-03 16:49:07.270 00:00:10.327 TCP 23.104.0.1:36280 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:50:02.758 00:00:10.294 TCP 1.101.0.1:3000 -> 22.102.0.1:54402 10 6452 1 2025-12-03 16:50:07.638 00:00:10.368 TCP 23.104.0.1:38010 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:51:03.092 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53100 10 6452 1 2025-12-03 16:51:08.061 00:00:10.364 TCP 23.104.0.1:51144 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:51:39.223 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 16:51:39.236 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 16:52:03.315 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36570 10 6452 1 2025-12-03 16:52:08.463 00:00:10.364 TCP 23.104.0.1:55444 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:49:07.173 00:05:04.879 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 16:53:03.542 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46644 10 6452 1 2025-12-03 16:49:07.170 00:05:04.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 16:53:08.864 00:00:10.368 TCP 23.104.0.1:58822 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:54:03.756 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35288 10 6452 1 2025-12-03 16:54:09.274 00:00:10.365 TCP 23.104.0.1:44204 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:55:03.975 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:38542 10 6452 1 2025-12-03 16:55:09.678 00:00:10.386 TCP 23.104.0.1:47010 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:56:04.216 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:47946 10 6452 1 2025-12-03 16:56:10.112 00:00:10.365 TCP 23.104.0.1:33328 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:56:39.548 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 16:56:39.357 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 16:57:04.447 00:00:10.424 TCP 1.101.0.1:3000 -> 22.102.0.1:60702 10 6452 1 2025-12-03 16:57:10.513 00:00:10.376 TCP 23.104.0.1:46488 -> 1.101.0.1:3000 11 1507 1 2025-12-03 16:58:04.912 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35926 10 6452 1 2025-12-03 16:58:10.928 00:00:10.384 TCP 23.104.0.1:54092 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507032, total packets: 1584, avg bps: 1069, avg pps: 0, avg bpp: 320 Time window: 2025-12-03 15:55:07 - 2025-12-03 16:58:21 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0029s Wall: 0.0029s flows/second: 56665.8 Runtime: 0.0029s