Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 08:58:52.103 00:00:10.364 TCP 23.104.0.1:52810 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:55:07.472 00:05:04.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 08:55:07.475 00:05:04.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 08:59:40.503 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40532 10 6452 1 2025-12-04 08:59:52.504 00:00:10.329 TCP 23.104.0.1:45486 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:00:40.716 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37908 10 6452 1 2025-12-04 09:00:52.870 00:00:10.364 TCP 23.104.0.1:35982 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:01:40.928 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37582 10 6452 1 2025-12-04 09:01:58.867 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:01:58.924 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 09:01:53.275 00:00:10.364 TCP 23.104.0.1:59700 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:02:41.149 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50892 10 6452 1 2025-12-04 09:02:53.677 00:00:10.366 TCP 23.104.0.1:48920 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:03:41.368 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55478 10 6452 1 2025-12-04 09:03:54.102 00:00:10.371 TCP 23.104.0.1:32876 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:04:41.576 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35386 10 6452 1 2025-12-04 09:04:54.514 00:00:10.358 TCP 23.104.0.1:41982 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:01:07.474 00:05:04.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 09:01:07.477 00:05:04.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 09:05:41.789 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52828 10 6452 1 2025-12-04 09:05:54.917 00:00:10.367 TCP 23.104.0.1:59826 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:06:41.961 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55544 12 6556 1 2025-12-04 09:06:58.749 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 09:06:58.766 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:06:55.325 00:00:10.361 TCP 23.104.0.1:54026 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:07:42.193 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39982 10 6452 1 2025-12-04 09:07:55.726 00:00:10.332 TCP 23.104.0.1:49230 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:08:42.365 00:00:15.961 TCP 1.101.0.1:3000 -> 22.102.0.1:57580 10 6452 1 2025-12-04 09:08:56.132 00:00:10.372 TCP 23.104.0.1:41944 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:09:48.376 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55026 10 6452 1 2025-12-04 09:09:56.550 00:00:10.339 TCP 23.104.0.1:51732 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:10:48.593 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59590 10 6452 1 2025-12-04 09:10:56.928 00:00:10.383 TCP 23.104.0.1:40866 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:07:07.488 00:05:04.890 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 09:07:07.491 00:05:04.885 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 09:11:59.278 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:11:59.332 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 09:11:48.804 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34110 10 6452 1 2025-12-04 09:11:57.351 00:00:10.370 TCP 23.104.0.1:38400 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:12:49.035 00:00:10.950 TCP 1.101.0.1:3000 -> 22.102.0.1:40730 12 10375 1 2025-12-04 09:12:57.754 00:00:10.464 TCP 23.104.0.1:59652 -> 1.101.0.1:3000 15 1926 1 2025-12-04 09:13:50.023 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:39708 11 6504 1 2025-12-04 09:13:58.256 00:00:10.328 TCP 23.104.0.1:49962 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:14:50.298 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45682 10 6452 1 2025-12-04 09:14:58.621 00:00:10.362 TCP 23.104.0.1:37712 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:15:50.513 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34654 10 6452 1 2025-12-04 09:15:59.021 00:00:10.365 TCP 23.104.0.1:50826 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:16:59.076 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:16:50.733 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39282 10 6452 1 2025-12-04 09:16:59.012 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 09:16:59.424 00:00:10.338 TCP 23.104.0.1:41652 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:13:07.490 00:05:04.892 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 09:13:07.493 00:05:04.886 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 09:17:50.947 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:50906 10 6452 1 2025-12-04 09:17:59.807 00:00:10.365 TCP 23.104.0.1:33054 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:18:51.191 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48080 10 6452 1 2025-12-04 09:19:00.215 00:00:10.327 TCP 23.104.0.1:36302 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:19:51.365 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36010 10 6452 1 2025-12-04 09:20:00.578 00:00:10.366 TCP 23.104.0.1:57670 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:20:51.577 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33190 10 6452 1 2025-12-04 09:21:00.980 00:00:10.369 TCP 23.104.0.1:54754 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:21:51.792 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53216 10 6452 1 2025-12-04 09:21:58.963 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 09:21:58.907 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:22:01.386 00:00:10.363 TCP 23.104.0.1:49458 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:22:52.013 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56304 10 6452 1 2025-12-04 09:19:07.491 00:05:04.891 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 09:23:01.783 00:00:10.364 TCP 23.104.0.1:38332 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:19:07.494 00:05:04.886 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 09:23:52.235 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37124 10 6452 1 2025-12-04 09:24:02.187 00:00:10.331 TCP 23.104.0.1:49452 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:24:52.455 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49788 10 6452 1 2025-12-04 09:25:02.559 00:00:10.366 TCP 23.104.0.1:44978 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:25:52.673 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58222 10 6452 1 2025-12-04 09:26:02.964 00:00:10.328 TCP 23.104.0.1:40376 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:26:59.379 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 09:26:59.292 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:26:52.894 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39236 10 6452 1 2025-12-04 09:27:03.333 00:00:10.360 TCP 23.104.0.1:47010 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:27:53.116 00:00:10.848 TCP 1.101.0.1:3000 -> 22.102.0.1:50360 10 6452 1 2025-12-04 09:28:03.734 00:00:10.370 TCP 23.104.0.1:34784 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:28:54.005 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53754 12 6556 1 2025-12-04 09:25:07.497 00:05:04.884 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 09:29:04.141 00:00:10.364 TCP 23.104.0.1:54546 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:25:07.494 00:05:04.889 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 09:29:54.213 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53844 10 6452 1 2025-12-04 09:30:04.544 00:00:10.363 TCP 23.104.0.1:57634 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:30:54.426 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45888 10 6452 1 2025-12-04 09:31:04.950 00:00:10.368 TCP 23.104.0.1:55030 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:31:59.365 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:31:59.220 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 09:31:54.595 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50910 10 6452 1 2025-12-04 09:32:05.353 00:00:10.364 TCP 23.104.0.1:49558 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:32:54.821 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44464 10 6452 1 2025-12-04 09:33:05.759 00:00:10.374 TCP 23.104.0.1:60378 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:33:55.057 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35518 12 6556 1 2025-12-04 09:34:06.168 00:00:10.381 TCP 23.104.0.1:37494 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:34:55.279 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53736 10 6452 1 2025-12-04 09:31:07.497 00:05:04.888 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 09:35:06.569 00:00:10.363 TCP 23.104.0.1:44026 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:31:07.500 00:05:04.882 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 09:35:55.494 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51068 10 6452 1 2025-12-04 09:36:06.973 00:00:10.371 TCP 23.104.0.1:38928 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:36:59.527 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:36:59.255 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 09:36:55.709 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57396 10 6452 1 2025-12-04 09:37:07.393 00:00:10.321 TCP 23.104.0.1:37788 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:37:55.927 00:00:10.710 TCP 1.101.0.1:3000 -> 22.102.0.1:40338 10 6452 1 2025-12-04 09:38:07.753 00:00:10.358 TCP 23.104.0.1:55146 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:38:56.673 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37430 10 6452 1 2025-12-04 09:39:08.150 00:00:10.324 TCP 23.104.0.1:52574 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:39:56.885 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59292 10 6452 1 2025-12-04 09:40:08.519 00:00:10.361 TCP 23.104.0.1:44862 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:40:57.078 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34834 10 6452 1 2025-12-04 09:37:07.499 00:05:04.892 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 09:37:07.501 00:05:04.887 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 09:41:08.918 00:00:10.331 TCP 23.104.0.1:43876 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:41:59.580 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 09:41:59.500 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:41:57.291 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53284 10 6452 1 2025-12-04 09:42:09.281 00:00:10.363 TCP 23.104.0.1:58776 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:42:57.505 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53264 10 6452 1 2025-12-04 09:43:09.686 00:00:10.326 TCP 23.104.0.1:55586 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:43:57.720 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49354 10 6452 1 2025-12-04 09:44:10.057 00:00:10.363 TCP 23.104.0.1:38128 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:44:57.932 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56676 10 6452 1 2025-12-04 09:45:10.457 00:00:10.362 TCP 23.104.0.1:44010 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:45:58.173 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41744 10 6452 1 2025-12-04 09:46:10.861 00:00:10.368 TCP 23.104.0.1:57854 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:46:59.730 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:46:59.676 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 09:46:58.388 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53332 10 6452 1 2025-12-04 09:43:07.502 00:05:04.890 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 09:43:07.506 00:05:04.884 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 09:47:11.268 00:00:10.329 TCP 23.104.0.1:44920 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:47:58.599 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57294 10 6452 1 2025-12-04 09:48:11.633 00:00:10.363 TCP 23.104.0.1:32898 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:48:58.807 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41454 10 6452 1 2025-12-04 09:49:12.050 00:00:10.369 TCP 23.104.0.1:55674 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:49:59.039 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49566 10 6452 1 2025-12-04 09:50:12.460 00:00:10.369 TCP 23.104.0.1:52422 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:50:59.256 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:51898 10 6452 1 2025-12-04 09:51:12.861 00:00:10.376 TCP 23.104.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:51:59.604 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:51:59.870 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 09:51:59.502 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44720 10 6452 1 2025-12-04 09:52:13.277 00:00:10.363 TCP 23.104.0.1:56514 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:52:59.712 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58850 12 10375 1 2025-12-04 09:49:07.507 00:05:04.884 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 09:49:07.505 00:05:04.889 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 09:53:13.676 00:00:10.439 TCP 23.104.0.1:57640 -> 1.101.0.1:3000 15 1926 1 2025-12-04 09:53:59.952 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50542 10 6452 1 2025-12-04 09:54:14.152 00:00:10.365 TCP 23.104.0.1:53250 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:55:00.180 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37322 10 6452 1 2025-12-04 09:55:14.554 00:00:10.365 TCP 23.104.0.1:36048 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:56:00.393 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39898 10 6452 1 2025-12-04 09:56:14.958 00:00:10.362 TCP 23.104.0.1:45550 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:57:00.009 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 09:56:59.683 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 09:57:00.603 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51890 10 6452 1 2025-12-04 09:57:15.360 00:00:10.357 TCP 23.104.0.1:33184 -> 1.101.0.1:3000 11 1507 1 2025-12-04 09:58:00.819 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52136 10 6452 1 2025-12-04 09:58:15.755 00:00:10.334 TCP 23.104.0.1:56272 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500944, total packets: 1581, avg bps: 1055, avg pps: 0, avg bpp: 316 Time window: 2025-12-04 08:55:07 - 2025-12-04 09:58:26 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0010s Wall: 0.0020s flows/second: 80460.3 Runtime: 0.0020s