Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 00:58:59.017 00:00:10.325 TCP 23.104.0.1:44050 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:55:07.320 00:05:04.910 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 00:55:07.322 00:05:04.905 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 00:59:20.229 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54584 10 6452 1 2025-12-04 00:59:59.384 00:00:10.363 TCP 23.104.0.1:59902 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:00:20.444 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:44612 10 6452 1 2025-12-04 01:00:59.787 00:00:10.322 TCP 23.104.0.1:54956 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:01:20.634 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53760 10 6452 1 2025-12-04 01:01:49.176 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 01:01:49.346 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 01:02:00.148 00:00:10.322 TCP 23.104.0.1:44500 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:02:20.846 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:56494 10 6452 1 2025-12-04 01:03:00.509 00:00:10.370 TCP 23.104.0.1:34694 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:03:21.038 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37020 10 6452 1 2025-12-04 01:04:00.919 00:00:10.376 TCP 23.104.0.1:41234 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:04:21.257 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54656 10 6452 1 2025-12-04 01:05:01.333 00:00:10.363 TCP 23.104.0.1:44300 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:01:07.323 00:05:04.910 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 01:01:07.325 00:05:04.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 01:05:21.449 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47058 10 6452 1 2025-12-04 01:06:01.739 00:00:10.367 TCP 23.104.0.1:53620 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:06:21.621 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56184 10 6452 1 2025-12-04 01:06:50.524 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 01:06:50.049 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 01:07:02.144 00:00:10.365 TCP 23.104.0.1:60514 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:07:21.840 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60672 10 6452 1 2025-12-04 01:08:02.548 00:00:10.363 TCP 23.104.0.1:53592 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:08:22.028 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41666 10 6452 1 2025-12-04 01:09:02.951 00:00:10.367 TCP 23.104.0.1:48992 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:09:22.242 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47076 10 6452 1 2025-12-04 01:10:03.357 00:00:10.326 TCP 23.104.0.1:45912 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:10:22.453 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57786 10 6452 1 2025-12-04 01:07:07.325 00:05:04.905 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 01:11:03.728 00:00:10.372 TCP 23.104.0.1:58438 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:07:07.322 00:05:04.909 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 01:11:22.661 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49082 10 6452 1 2025-12-04 01:11:49.348 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 01:11:49.072 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 01:12:04.142 00:00:10.374 TCP 23.104.0.1:34128 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:12:22.872 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:34192 10 6452 1 2025-12-04 01:13:04.549 00:00:10.321 TCP 23.104.0.1:33726 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:13:23.104 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47994 10 6452 1 2025-12-04 01:14:04.911 00:00:10.365 TCP 23.104.0.1:57350 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:14:23.325 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38628 10 6452 1 2025-12-04 01:15:05.314 00:00:10.369 TCP 23.104.0.1:54286 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:15:23.539 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39012 10 6452 1 2025-12-04 01:16:05.723 00:00:10.373 TCP 23.104.0.1:33536 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:16:23.750 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47802 10 6452 1 2025-12-04 01:16:49.078 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 01:16:49.283 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 01:13:07.326 00:05:04.909 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 01:17:06.136 00:00:10.360 TCP 23.104.0.1:45470 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:13:07.328 00:05:04.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 01:17:23.959 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53558 10 6452 1 2025-12-04 01:18:06.536 00:00:10.363 TCP 23.104.0.1:45064 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:18:24.182 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56768 10 6452 1 2025-12-04 01:19:06.941 00:00:10.376 TCP 23.104.0.1:60182 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:19:24.396 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45844 10 6452 1 2025-12-04 01:20:07.355 00:00:10.363 TCP 23.104.0.1:58304 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:20:24.608 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35582 10 6452 1 2025-12-04 01:21:07.759 00:00:10.391 TCP 23.104.0.1:40516 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:21:24.828 00:00:10.670 TCP 1.101.0.1:3000 -> 22.102.0.1:55256 10 6452 1 2025-12-04 01:21:49.569 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 01:21:49.600 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 01:22:08.186 00:00:10.346 TCP 23.104.0.1:40230 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:22:25.538 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45322 10 6452 1 2025-12-04 01:19:07.328 00:05:04.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 01:19:07.331 00:05:04.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 01:23:08.570 00:00:10.366 TCP 23.104.0.1:45462 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:23:25.720 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42870 10 6452 1 2025-12-04 01:24:08.969 00:00:10.397 TCP 23.104.0.1:50888 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:24:25.936 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54108 12 6556 1 2025-12-04 01:25:09.404 00:00:10.388 TCP 23.104.0.1:50370 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:25:26.174 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35232 10 6452 1 2025-12-04 01:26:09.827 00:00:10.381 TCP 23.104.0.1:55466 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:26:26.343 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38178 10 6452 1 2025-12-04 01:26:49.657 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 01:26:49.619 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 01:27:10.251 00:00:10.369 TCP 23.104.0.1:46710 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:27:26.553 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36758 10 6452 1 2025-12-04 01:28:10.651 00:00:10.367 TCP 23.104.0.1:48248 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:28:26.749 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42638 10 6452 1 2025-12-04 01:25:07.333 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 01:25:07.330 00:05:04.905 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 01:29:11.072 00:00:10.370 TCP 23.104.0.1:42200 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:29:26.968 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33652 10 6452 1 2025-12-04 01:30:11.481 00:00:10.363 TCP 23.104.0.1:49776 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:30:27.194 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33636 10 6452 1 2025-12-04 01:31:11.883 00:00:10.369 TCP 23.104.0.1:54610 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:31:27.408 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49584 10 6452 1 2025-12-04 01:31:49.623 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 01:31:49.702 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 01:32:12.288 00:00:10.367 TCP 23.104.0.1:59592 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:32:27.615 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48386 10 6452 1 2025-12-04 01:33:12.691 00:00:10.325 TCP 23.104.0.1:40936 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:33:27.830 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59992 10 6452 1 2025-12-04 01:34:13.062 00:00:10.367 TCP 23.104.0.1:39678 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:34:28.079 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33534 10 6452 1 2025-12-04 01:31:07.332 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 01:31:07.335 00:05:04.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 01:35:13.468 00:00:10.369 TCP 23.104.0.1:39064 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:35:28.290 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55124 10 6452 1 2025-12-04 01:36:13.879 00:00:10.350 TCP 23.104.0.1:38756 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:36:28.500 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43370 10 6452 1 2025-12-04 01:36:49.669 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 01:36:49.882 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 01:37:14.263 00:00:10.345 TCP 23.104.0.1:33184 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:37:28.718 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59398 10 6452 1 2025-12-04 01:38:14.653 00:00:10.367 TCP 23.104.0.1:57136 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:38:28.936 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:59674 10 6452 1 2025-12-04 01:39:15.088 00:00:10.370 TCP 23.104.0.1:38254 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:39:29.128 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48982 10 6452 1 2025-12-04 01:40:15.493 00:00:10.376 TCP 23.104.0.1:38182 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:40:29.342 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55256 10 6452 1 2025-12-04 01:37:07.334 00:05:04.905 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 01:37:07.336 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 01:41:15.913 00:00:10.367 TCP 23.104.0.1:34808 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:41:29.552 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39418 10 6452 1 2025-12-04 01:41:49.778 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 01:41:50.057 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 01:42:16.322 00:00:10.324 TCP 23.104.0.1:38218 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:42:29.761 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44304 10 6452 1 2025-12-04 01:43:16.685 00:00:10.378 TCP 23.104.0.1:37708 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:43:29.976 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:56216 10 6452 1 2025-12-04 01:44:17.106 00:00:10.362 TCP 23.104.0.1:45440 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:44:30.209 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35410 10 6452 1 2025-12-04 01:45:17.507 00:00:10.369 TCP 23.104.0.1:39352 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:45:30.423 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51974 10 6452 1 2025-12-04 01:46:17.933 00:00:10.340 TCP 23.104.0.1:54948 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:46:30.645 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39906 10 6452 1 2025-12-04 01:46:50.036 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 01:46:50.025 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 01:43:07.336 00:05:04.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 01:43:07.338 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 01:47:18.313 00:00:10.369 TCP 23.104.0.1:45268 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:47:30.861 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47086 10 6452 1 2025-12-04 01:48:18.739 00:00:10.364 TCP 23.104.0.1:52968 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:48:31.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52606 10 6452 1 2025-12-04 01:49:19.141 00:00:10.323 TCP 23.104.0.1:57614 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:49:31.298 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58348 10 6452 1 2025-12-04 01:50:19.509 00:00:10.364 TCP 23.104.0.1:60406 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:50:31.466 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57012 10 6452 1 2025-12-04 01:51:19.910 00:00:10.365 TCP 23.104.0.1:55838 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:51:31.679 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32990 10 6452 1 2025-12-04 01:51:49.986 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 01:51:50.057 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 01:52:20.318 00:00:10.376 TCP 23.104.0.1:34562 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:52:31.892 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58470 10 6452 1 2025-12-04 01:49:07.340 00:05:04.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 01:49:07.338 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 01:53:20.734 00:00:10.443 TCP 23.104.0.1:43370 -> 1.101.0.1:3000 15 1926 1 2025-12-04 01:53:32.110 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42010 12 10369 1 2025-12-04 01:54:21.219 00:00:10.470 TCP 23.104.0.1:35246 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:54:32.354 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59670 10 6452 1 2025-12-04 01:55:21.729 00:00:10.371 TCP 23.104.0.1:39670 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:55:32.572 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45730 10 6452 1 2025-12-04 01:56:22.140 00:00:10.578 TCP 23.104.0.1:32790 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:56:32.786 00:00:10.257 TCP 1.101.0.1:3000 -> 22.102.0.1:41358 10 6452 1 2025-12-04 01:56:50.306 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 01:56:50.165 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 01:57:22.759 00:00:10.369 TCP 23.104.0.1:35714 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:57:33.083 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37282 10 6452 1 2025-12-04 01:58:23.170 00:00:10.323 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:58:33.294 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34440 10 6452 1 Summary: total flows: 164, total bytes: 502788, total packets: 1580, avg bps: 1054, avg pps: 0, avg bpp: 318 Time window: 2025-12-04 00:55:07 - 2025-12-04 01:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0025s Wall: 0.0023s flows/second: 72368.8 Runtime: 0.0023s