Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 17:58:42.273 00:00:10.364 TCP 23.104.0.1:46632 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:55:07.193 00:05:04.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 17:55:07.192 00:05:04.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 17:59:19.863 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58256 10 6452 1 2025-12-03 17:59:42.674 00:00:10.366 TCP 23.104.0.1:51544 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:00:20.085 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43290 11 6492 1 2025-12-03 18:00:43.106 00:00:10.365 TCP 23.104.0.1:38908 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:01:20.307 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54046 10 6452 1 2025-12-03 18:01:40.762 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 18:01:40.756 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 18:01:43.508 00:00:10.388 TCP 23.104.0.1:49156 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:02:20.521 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34760 10 6452 1 2025-12-03 18:02:43.933 00:00:10.376 TCP 23.104.0.1:45412 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:03:20.741 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51418 10 6452 1 2025-12-03 18:03:44.349 00:00:10.378 TCP 23.104.0.1:46550 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:04:20.955 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48942 10 6452 1 2025-12-03 18:04:44.757 00:00:10.647 TCP 23.104.0.1:57682 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:01:07.193 00:05:04.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 18:01:07.195 00:05:04.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 18:05:21.186 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53484 10 6452 1 2025-12-03 18:05:45.442 00:00:10.364 TCP 23.104.0.1:36646 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:06:21.402 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33430 10 6452 1 2025-12-03 18:06:41.122 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 18:06:41.083 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 18:06:45.843 00:00:10.377 TCP 23.104.0.1:60076 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:07:21.625 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34754 10 6452 1 2025-12-03 18:07:46.260 00:00:10.362 TCP 23.104.0.1:52644 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:08:21.843 00:00:10.247 TCP 1.101.0.1:3000 -> 22.102.0.1:60182 10 6452 1 2025-12-03 18:08:46.665 00:00:14.212 TCP 23.104.0.1:56312 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:09:22.136 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47464 10 6452 1 2025-12-03 18:09:50.922 00:00:10.376 TCP 23.104.0.1:53250 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:10:22.363 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56446 10 6452 1 2025-12-03 18:10:51.336 00:00:10.316 TCP 23.104.0.1:49064 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:07:07.195 00:05:04.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 18:07:07.196 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 18:11:41.085 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 18:11:22.576 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40860 10 6452 1 2025-12-03 18:11:40.642 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 18:11:51.696 00:00:10.325 TCP 23.104.0.1:43170 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:12:22.796 00:00:10.468 TCP 1.101.0.1:3000 -> 22.102.0.1:53886 10 6452 1 2025-12-03 18:12:52.060 00:00:10.442 TCP 23.104.0.1:60326 -> 1.101.0.1:3000 15 1926 1 2025-12-03 18:13:23.303 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:37864 12 10369 1 2025-12-03 18:13:52.535 00:00:10.359 TCP 23.104.0.1:40382 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:14:23.508 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33344 10 6452 1 2025-12-03 18:14:52.937 00:00:10.370 TCP 23.104.0.1:40184 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:15:23.733 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33940 10 6452 1 2025-12-03 18:15:53.353 00:00:10.322 TCP 23.104.0.1:57810 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:16:23.945 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38196 10 6452 1 2025-12-03 18:16:40.982 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 18:16:40.986 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 18:16:53.716 00:00:10.367 TCP 23.104.0.1:60520 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:13:07.198 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 18:13:07.195 00:05:04.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 18:17:24.182 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:54286 10 6452 1 2025-12-03 18:17:54.129 00:00:10.327 TCP 23.104.0.1:58390 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:18:24.363 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55150 10 6452 1 2025-12-03 18:18:54.492 00:00:10.366 TCP 23.104.0.1:45142 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:19:24.538 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53924 10 6452 1 2025-12-03 18:19:54.897 00:00:10.385 TCP 23.104.0.1:35080 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:20:24.752 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58432 10 6452 1 2025-12-03 18:20:55.323 00:00:10.324 TCP 23.104.0.1:48228 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:21:24.961 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48928 10 6452 1 2025-12-03 18:21:41.177 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 18:21:40.939 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 18:21:55.677 00:00:10.364 TCP 23.104.0.1:55574 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:22:25.201 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58682 10 6452 1 2025-12-03 18:22:56.111 00:00:10.364 TCP 23.104.0.1:46504 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:19:07.201 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 18:19:07.199 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 18:23:25.424 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:39774 12 6556 1 2025-12-03 18:23:56.516 00:00:10.366 TCP 23.104.0.1:57936 -> 1.101.0.1:3000 12 1559 1 2025-12-03 18:24:25.664 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45474 10 6452 1 2025-12-03 18:24:56.927 00:00:10.393 TCP 23.104.0.1:60482 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:25:25.833 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55928 10 6452 1 2025-12-03 18:25:57.357 00:00:10.362 TCP 23.104.0.1:43742 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:26:41.037 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 18:26:26.075 00:00:10.326 TCP 1.101.0.1:3000 -> 22.102.0.1:35470 10 6452 1 2025-12-03 18:26:41.202 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 18:26:57.757 00:00:10.377 TCP 23.104.0.1:35584 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:27:26.431 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52890 10 6452 1 2025-12-03 18:27:58.170 00:00:10.368 TCP 23.104.0.1:50814 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:28:26.599 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38536 10 6452 1 2025-12-03 18:28:58.571 00:00:10.361 TCP 23.104.0.1:56194 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:25:07.205 00:05:04.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 18:25:07.203 00:05:04.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 18:29:26.827 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56792 10 6452 1 2025-12-03 18:29:58.975 00:00:10.369 TCP 23.104.0.1:52276 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:30:27.071 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42602 10 6452 1 2025-12-03 18:30:59.389 00:00:10.362 TCP 23.104.0.1:55456 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:31:27.288 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38688 10 6452 1 2025-12-03 18:31:41.177 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 18:31:41.377 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 18:31:59.792 00:00:10.369 TCP 23.104.0.1:46064 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:32:27.507 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54332 10 6452 1 2025-12-03 18:33:00.216 00:00:10.366 TCP 23.104.0.1:40506 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:33:27.745 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:36204 10 6452 1 2025-12-03 18:34:00.627 00:00:10.366 TCP 23.104.0.1:51654 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:34:27.993 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:37312 10 6452 1 2025-12-03 18:35:01.035 00:00:10.368 TCP 23.104.0.1:49704 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:31:07.204 00:05:04.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 18:31:07.206 00:05:04.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 18:35:28.235 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60856 10 6452 1 2025-12-03 18:36:01.440 00:00:10.367 TCP 23.104.0.1:34726 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:36:28.448 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59882 10 6452 1 2025-12-03 18:36:41.525 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 18:36:41.454 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 18:37:01.844 00:00:10.386 TCP 23.104.0.1:44360 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:37:28.663 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51502 10 6452 1 2025-12-03 18:38:02.269 00:00:10.367 TCP 23.104.0.1:35404 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:38:28.880 00:00:10.388 TCP 1.101.0.1:3000 -> 22.102.0.1:37466 10 6452 1 2025-12-03 18:39:02.673 00:00:10.367 TCP 23.104.0.1:43594 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:39:29.305 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47544 10 6452 1 2025-12-03 18:40:03.109 00:00:10.372 TCP 23.104.0.1:54786 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:40:29.532 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44984 10 6452 1 2025-12-03 18:37:07.204 00:05:04.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 18:41:03.514 00:00:10.372 TCP 23.104.0.1:41478 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:37:07.207 00:05:04.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 18:41:41.605 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 18:41:29.750 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56916 10 6452 1 2025-12-03 18:41:41.890 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 18:42:03.925 00:00:10.384 TCP 23.104.0.1:36742 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:42:29.960 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44808 10 6452 1 2025-12-03 18:43:04.350 00:00:10.361 TCP 23.104.0.1:50100 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:43:30.193 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42770 10 6452 1 2025-12-03 18:44:04.751 00:00:10.375 TCP 23.104.0.1:48362 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:44:30.424 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45382 10 6452 1 2025-12-03 18:45:05.163 00:00:10.360 TCP 23.104.0.1:46176 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:45:30.640 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59160 10 6452 1 2025-12-03 18:46:05.564 00:00:10.362 TCP 23.104.0.1:37782 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:46:30.847 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41094 10 6452 1 2025-12-03 18:46:41.399 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 18:46:41.550 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 18:43:07.210 00:05:04.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 18:47:05.966 00:00:10.366 TCP 23.104.0.1:58914 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:43:07.207 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 18:47:31.081 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39704 10 6452 1 2025-12-03 18:48:06.370 00:00:10.320 TCP 23.104.0.1:42226 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:48:31.300 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:60648 10 6452 1 2025-12-03 18:49:06.737 00:00:10.362 TCP 23.104.0.1:38852 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:49:31.543 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41204 10 6452 1 2025-12-03 18:50:07.136 00:00:10.367 TCP 23.104.0.1:46130 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:50:31.765 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33498 10 6452 1 2025-12-03 18:51:07.542 00:00:10.365 TCP 23.104.0.1:34332 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:51:41.581 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 18:51:41.702 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 18:51:31.987 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39662 10 6452 1 2025-12-03 18:52:07.952 00:00:10.371 TCP 23.104.0.1:34296 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:52:32.225 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47470 10 6452 1 2025-12-03 18:49:07.211 00:05:04.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 18:49:07.208 00:05:04.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 18:53:08.358 00:00:20.234 TCP 23.104.0.1:34596 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:53:32.448 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40716 10 6452 1 2025-12-03 18:54:18.633 00:00:10.353 TCP 23.104.0.1:51018 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:54:32.667 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48508 10 6452 1 2025-12-03 18:55:19.029 00:00:10.369 TCP 23.104.0.1:48138 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:55:32.894 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37478 10 6452 1 2025-12-03 18:56:19.435 00:00:10.364 TCP 23.104.0.1:34110 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:56:41.775 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 18:56:41.765 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 18:56:33.112 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41738 10 6452 1 2025-12-03 18:57:19.842 00:00:10.381 TCP 23.104.0.1:42180 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:57:33.335 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34284 10 6452 1 2025-12-03 18:58:20.264 00:00:11.029 TCP 23.104.0.1:38912 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:58:33.547 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38418 10 6452 1 Summary: total flows: 164, total bytes: 502880, total packets: 1582, avg bps: 1054, avg pps: 0, avg bpp: 317 Time window: 2025-12-03 17:55:07 - 2025-12-03 18:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0058s User: 0.0008s Wall: 0.0024s flows/second: 66965.1 Runtime: 0.0025s