Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 13:58:58.012 00:00:10.364 TCP 23.104.0.1:42158 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:55:07.569 00:05:04.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 13:59:05.297 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45396 10 6452 1 2025-12-04 13:55:07.566 00:05:04.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 13:59:58.420 00:00:10.367 TCP 23.104.0.1:57038 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:00:05.516 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33630 10 6452 1 2025-12-04 14:00:58.824 00:00:10.324 TCP 23.104.0.1:55620 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:01:05.739 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50084 10 6452 1 2025-12-04 14:02:04.827 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 14:02:04.824 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 14:01:59.185 00:00:10.366 TCP 23.104.0.1:35646 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:02:05.955 00:00:10.922 TCP 1.101.0.1:3000 -> 22.102.0.1:51346 12 6556 1 2025-12-04 14:02:59.591 00:00:10.362 TCP 23.104.0.1:43842 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:03:06.910 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:57368 10 6452 1 2025-12-04 14:03:59.995 00:00:10.937 TCP 23.104.0.1:60246 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:04:07.105 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59196 10 6452 1 2025-12-04 14:05:00.966 00:00:10.364 TCP 23.104.0.1:35852 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:01:07.568 00:05:04.920 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 14:01:07.569 00:05:04.915 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 14:05:07.277 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42604 10 6452 1 2025-12-04 14:06:01.372 00:00:10.369 TCP 23.104.0.1:50298 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:06:07.498 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56850 10 6452 1 2025-12-04 14:07:04.900 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 14:07:04.839 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 14:07:01.776 00:00:10.371 TCP 23.104.0.1:35066 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:07:07.716 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50676 10 6452 1 2025-12-04 14:08:02.186 00:00:10.362 TCP 23.104.0.1:41592 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:08:07.926 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:60210 10 6452 1 2025-12-04 14:09:02.588 00:00:10.364 TCP 23.104.0.1:45450 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:09:08.114 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:46656 10 6452 1 2025-12-04 14:10:02.989 00:00:10.365 TCP 23.104.0.1:40618 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:10:08.280 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34252 10 6452 1 2025-12-04 14:07:07.568 00:05:04.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 14:11:03.393 00:00:10.329 TCP 23.104.0.1:47632 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:07:07.572 00:05:04.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 14:11:08.490 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56584 10 6452 1 2025-12-04 14:12:05.196 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 14:12:05.222 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 14:12:03.761 00:00:10.369 TCP 23.104.0.1:49712 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:12:08.694 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47454 10 6452 1 2025-12-04 14:13:04.165 00:00:10.365 TCP 23.104.0.1:40900 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:13:08.909 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53962 10 6452 1 2025-12-04 14:14:04.570 00:00:10.435 TCP 23.104.0.1:43822 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:14:09.093 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33712 10 6452 1 2025-12-04 14:15:05.057 00:00:10.366 TCP 23.104.0.1:56752 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:15:09.310 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41902 10 6452 1 2025-12-04 14:16:05.460 00:00:10.361 TCP 23.104.0.1:60564 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:16:09.518 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49070 10 6452 1 2025-12-04 14:17:05.093 00:00:00.061 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 14:17:05.186 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 14:13:07.572 00:05:04.916 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 14:17:05.864 00:00:10.377 TCP 23.104.0.1:55618 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:13:07.569 00:05:04.921 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 14:17:09.690 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54666 10 6452 1 2025-12-04 14:18:06.280 00:00:10.453 TCP 23.104.0.1:38760 -> 1.101.0.1:3000 15 1926 1 2025-12-04 14:18:09.902 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:44376 12 10369 1 2025-12-04 14:19:06.776 00:00:10.368 TCP 23.104.0.1:38668 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:19:10.148 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46292 10 6452 1 2025-12-04 14:20:10.361 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60510 10 6452 1 2025-12-04 14:20:07.187 00:00:10.374 TCP 23.104.0.1:53476 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:21:10.576 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47562 10 6452 1 2025-12-04 14:21:07.601 00:00:10.369 TCP 23.104.0.1:54762 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:22:05.255 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 14:22:05.311 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 14:22:10.812 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46236 10 6452 1 2025-12-04 14:22:08.004 00:00:10.365 TCP 23.104.0.1:37856 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:19:07.575 00:05:04.913 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 14:19:07.572 00:05:04.918 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 14:23:08.409 00:00:10.371 TCP 23.104.0.1:40484 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:23:10.992 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:55052 10 6452 1 2025-12-04 14:24:08.812 00:00:10.370 TCP 23.104.0.1:53632 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:24:11.182 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:48026 10 6452 1 2025-12-04 14:25:11.362 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38250 10 6452 1 2025-12-04 14:25:09.217 00:00:10.368 TCP 23.104.0.1:38000 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:26:11.575 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51726 10 6452 1 2025-12-04 14:26:09.624 00:00:10.370 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:27:05.387 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 14:27:05.336 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 14:27:11.791 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60150 10 6452 1 2025-12-04 14:27:10.031 00:00:10.362 TCP 23.104.0.1:39444 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:28:10.435 00:00:10.435 TCP 23.104.0.1:49792 -> 1.101.0.1:3000 15 1926 1 2025-12-04 14:28:12.000 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:34908 12 10375 1 2025-12-04 14:25:07.575 00:05:04.921 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 14:25:07.577 00:05:04.915 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 14:29:10.910 00:00:10.365 TCP 23.104.0.1:54952 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:29:12.242 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 10 6452 1 2025-12-04 14:30:11.311 00:00:10.327 TCP 23.104.0.1:38046 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:30:12.460 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46374 10 6452 1 2025-12-04 14:31:11.688 00:00:10.367 TCP 23.104.0.1:55016 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:31:12.673 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53836 10 6452 1 2025-12-04 14:32:05.436 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 14:32:05.539 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 14:32:12.886 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38620 10 6452 1 2025-12-04 14:32:12.099 00:00:10.364 TCP 23.104.0.1:45096 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:33:13.114 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60656 12 6556 1 2025-12-04 14:33:12.505 00:00:10.362 TCP 23.104.0.1:35638 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:34:12.905 00:00:10.323 TCP 23.104.0.1:47068 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:34:13.329 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35742 10 6452 1 2025-12-04 14:31:07.574 00:05:04.921 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 14:31:07.577 00:05:04.916 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 14:35:13.270 00:00:10.364 TCP 23.104.0.1:58150 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:35:13.503 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33866 10 6452 1 2025-12-04 14:36:13.715 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52852 10 6452 1 2025-12-04 14:36:13.675 00:00:10.363 TCP 23.104.0.1:44214 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:37:05.701 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 14:37:05.608 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 14:37:13.929 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:47878 10 6452 1 2025-12-04 14:37:14.100 00:00:10.354 TCP 23.104.0.1:46104 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:38:14.495 00:00:10.365 TCP 23.104.0.1:35008 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:38:14.120 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47620 10 6452 1 2025-12-04 14:39:14.294 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51228 10 6452 1 2025-12-04 14:39:14.899 00:00:10.370 TCP 23.104.0.1:42132 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:40:15.313 00:00:10.362 TCP 23.104.0.1:53186 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:40:14.465 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46716 10 6452 1 2025-12-04 14:37:07.577 00:05:04.920 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 14:37:07.580 00:05:04.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 14:41:14.678 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49516 10 6452 1 2025-12-04 14:41:15.714 00:00:10.378 TCP 23.104.0.1:44044 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:42:05.638 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 14:42:05.688 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 14:42:16.132 00:00:10.369 TCP 23.104.0.1:56850 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:42:14.892 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54334 10 6452 1 2025-12-04 14:43:16.546 00:00:10.327 TCP 23.104.0.1:53100 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:43:15.078 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60194 10 6452 1 2025-12-04 14:44:15.287 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48736 10 6452 1 2025-12-04 14:44:16.910 00:00:10.365 TCP 23.104.0.1:38218 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:45:15.505 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33856 10 6452 1 2025-12-04 14:45:17.310 00:00:10.367 TCP 23.104.0.1:37550 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:46:15.719 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40828 10 6452 1 2025-12-04 14:46:17.714 00:00:10.372 TCP 23.104.0.1:35014 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:47:05.644 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 14:47:05.581 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 14:43:07.583 00:05:04.915 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 14:43:07.581 00:05:04.920 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 14:47:15.932 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:53008 10 6452 1 2025-12-04 14:47:18.130 00:00:10.363 TCP 23.104.0.1:60930 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:48:16.169 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39998 10 6452 1 2025-12-04 14:48:18.531 00:00:10.365 TCP 23.104.0.1:54622 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:49:16.338 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47234 10 6452 1 2025-12-04 14:49:18.936 00:00:10.377 TCP 23.104.0.1:37062 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:50:16.545 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36828 10 6452 1 2025-12-04 14:50:19.348 00:00:10.365 TCP 23.104.0.1:50658 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:51:16.762 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59728 10 6452 1 2025-12-04 14:51:19.752 00:00:10.338 TCP 23.104.0.1:50430 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:52:05.845 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 14:52:05.942 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 14:52:16.976 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56232 12 6556 1 2025-12-04 14:52:20.130 00:00:10.363 TCP 23.104.0.1:60496 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:49:07.582 00:05:04.920 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 14:49:07.586 00:05:04.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 14:53:20.534 00:00:10.372 TCP 23.104.0.1:50356 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:53:17.205 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38598 10 6452 1 2025-12-04 14:54:20.943 00:00:10.373 TCP 23.104.0.1:54882 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:54:17.424 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58692 10 6452 1 2025-12-04 14:55:21.355 00:00:10.326 TCP 23.104.0.1:39324 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:55:17.596 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35162 10 6452 1 2025-12-04 14:56:17.771 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48704 10 6452 1 2025-12-04 14:56:21.731 00:00:10.367 TCP 23.104.0.1:54302 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:57:05.563 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 14:57:05.894 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 14:57:17.981 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58968 10 6452 1 2025-12-04 14:57:22.141 00:00:10.321 TCP 23.104.0.1:36514 -> 1.101.0.1:3000 11 1507 1 2025-12-04 14:58:18.203 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:48540 10 6452 1 2025-12-04 14:58:22.501 00:00:10.367 TCP 23.104.0.1:47800 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507338, total packets: 1590, avg bps: 1066, avg pps: 0, avg bpp: 319 Time window: 2025-12-04 13:55:07 - 2025-12-04 14:58:32 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0017s Wall: 0.0021s flows/second: 77210.2 Runtime: 0.0021s