Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 15:58:47.930 00:00:10.393 TCP 23.104.0.1:35568 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:55:07.603 00:05:04.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 15:55:07.602 00:05:04.916 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 15:59:33.114 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:51298 10 6452 1 2025-12-04 15:59:48.368 00:00:10.323 TCP 23.104.0.1:34676 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:00:33.299 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60520 10 6452 1 2025-12-04 16:00:48.734 00:00:10.376 TCP 23.104.0.1:60706 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:01:33.518 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49914 12 6556 1 2025-12-04 16:01:49.147 00:00:10.810 TCP 23.104.0.1:41014 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:02:06.881 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 16:02:07.181 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 16:02:33.732 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36356 10 6452 1 2025-12-04 16:02:49.996 00:00:10.364 TCP 23.104.0.1:51798 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:03:33.946 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:37354 10 6452 1 2025-12-04 16:03:50.398 00:00:10.362 TCP 23.104.0.1:36314 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:04:34.140 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34188 10 6452 1 2025-12-04 16:04:50.794 00:00:10.370 TCP 23.104.0.1:33722 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:01:07.604 00:05:04.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 16:01:07.602 00:05:04.916 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 16:05:34.314 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44766 10 6452 1 2025-12-04 16:05:51.203 00:00:10.366 TCP 23.104.0.1:33330 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:06:34.530 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40100 10 6452 1 2025-12-04 16:06:51.601 00:00:10.324 TCP 23.104.0.1:56244 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:07:07.501 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 16:07:07.440 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 16:07:34.750 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52464 10 6452 1 2025-12-04 16:07:51.962 00:00:10.367 TCP 23.104.0.1:40546 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:08:34.958 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57416 10 6452 1 2025-12-04 16:08:52.364 00:00:10.363 TCP 23.104.0.1:55874 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:09:35.178 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59620 10 6452 1 2025-12-04 16:09:52.767 00:00:10.328 TCP 23.104.0.1:60850 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:10:35.399 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55558 10 6452 1 2025-12-04 16:10:53.129 00:00:10.361 TCP 23.104.0.1:51622 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:07:07.606 00:05:04.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 16:07:07.604 00:05:04.916 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 16:11:35.576 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:58344 10 6452 1 2025-12-04 16:12:07.733 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 16:11:53.530 00:00:10.327 TCP 23.104.0.1:60796 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:12:07.451 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 16:12:35.785 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53536 10 6452 1 2025-12-04 16:12:53.894 00:00:10.377 TCP 23.104.0.1:41362 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:13:36.016 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39760 10 6452 1 2025-12-04 16:13:54.317 00:00:10.364 TCP 23.104.0.1:36300 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:14:36.191 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47714 10 6452 1 2025-12-04 16:14:54.719 00:00:10.388 TCP 23.104.0.1:40744 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:15:36.408 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:32836 10 6452 1 2025-12-04 16:15:55.149 00:00:10.361 TCP 23.104.0.1:58570 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:16:36.613 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46692 10 6452 1 2025-12-04 16:16:55.555 00:00:10.329 TCP 23.104.0.1:56524 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:17:07.317 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 16:17:07.451 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 16:13:07.607 00:05:04.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 16:13:07.605 00:05:04.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 16:17:36.780 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58148 10 6452 1 2025-12-04 16:17:55.922 00:00:10.420 TCP 23.104.0.1:53092 -> 1.101.0.1:3000 15 1926 1 2025-12-04 16:18:36.992 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55920 12 10369 1 2025-12-04 16:18:56.378 00:00:10.416 TCP 23.104.0.1:50482 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:19:37.205 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44162 10 6452 1 2025-12-04 16:19:56.831 00:00:10.336 TCP 23.104.0.1:46670 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:20:37.413 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53166 10 6452 1 2025-12-04 16:20:57.205 00:00:10.325 TCP 23.104.0.1:47234 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:21:37.624 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39350 10 6452 1 2025-12-04 16:22:07.618 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 16:22:07.880 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 16:21:57.565 00:00:20.183 TCP 23.104.0.1:52096 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:22:37.839 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47732 10 6452 1 2025-12-04 16:19:07.605 00:05:04.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 16:19:07.609 00:05:04.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 16:23:07.801 00:00:10.370 TCP 23.104.0.1:60164 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:23:38.079 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43264 10 6452 1 2025-12-04 16:24:08.203 00:00:10.362 TCP 23.104.0.1:59318 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:24:38.292 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:44126 10 6452 1 2025-12-04 16:25:08.607 00:00:10.362 TCP 23.104.0.1:56556 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:25:38.469 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33196 10 6452 1 2025-12-04 16:26:09.004 00:00:10.371 TCP 23.104.0.1:58118 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:26:38.684 00:00:10.750 TCP 1.101.0.1:3000 -> 22.102.0.1:59688 10 6452 1 2025-12-04 16:27:07.480 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 16:27:07.639 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 16:27:09.416 00:00:10.365 TCP 23.104.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:27:39.475 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52682 10 6452 1 2025-12-04 16:28:09.824 00:00:10.364 TCP 23.104.0.1:37984 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:28:39.686 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41708 10 6452 1 2025-12-04 16:25:07.608 00:05:04.917 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 16:25:07.607 00:05:04.922 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 16:29:10.229 00:00:10.750 TCP 23.104.0.1:48648 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:29:39.901 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52336 10 6452 1 2025-12-04 16:30:11.021 00:00:10.366 TCP 23.104.0.1:55590 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:30:40.114 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56628 10 6452 1 2025-12-04 16:31:11.419 00:00:11.442 TCP 23.104.0.1:49024 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:31:40.330 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38296 10 6452 1 2025-12-04 16:32:08.106 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 16:32:08.006 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 16:32:12.899 00:00:10.385 TCP 23.104.0.1:52954 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:32:40.540 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35460 10 6452 1 2025-12-04 16:33:13.316 00:00:10.366 TCP 23.104.0.1:58868 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:33:40.761 00:00:14.255 TCP 1.101.0.1:3000 -> 22.102.0.1:43766 10 6452 1 2025-12-04 16:34:13.718 00:00:10.335 TCP 23.104.0.1:41608 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:34:45.081 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59908 10 6452 1 2025-12-04 16:31:07.611 00:05:04.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 16:31:07.609 00:05:04.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 16:35:14.104 00:00:10.360 TCP 23.104.0.1:36318 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:35:45.300 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38778 10 6452 1 2025-12-04 16:36:14.505 00:00:11.908 TCP 23.104.0.1:53674 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:36:45.483 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57164 10 6452 1 2025-12-04 16:37:07.841 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 16:37:08.124 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 16:37:16.448 00:00:10.365 TCP 23.104.0.1:37206 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:37:45.706 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48028 10 6452 1 2025-12-04 16:38:16.853 00:00:10.335 TCP 23.104.0.1:35560 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:38:45.925 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50800 10 6452 1 2025-12-04 16:39:17.227 00:00:10.363 TCP 23.104.0.1:38608 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:39:46.130 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57434 10 6452 1 2025-12-04 16:40:17.632 00:00:10.365 TCP 23.104.0.1:40770 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:40:46.341 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52400 10 6452 1 2025-12-04 16:37:07.611 00:05:04.926 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 16:37:07.613 00:05:04.922 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 16:41:18.055 00:00:10.327 TCP 23.104.0.1:57344 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:41:46.552 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59454 10 6452 1 2025-12-04 16:42:07.825 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 16:42:07.966 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 16:42:18.421 00:00:10.364 TCP 23.104.0.1:58448 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:42:46.773 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:37326 10 6452 1 2025-12-04 16:43:18.825 00:00:10.379 TCP 23.104.0.1:41586 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:43:47.024 00:00:10.917 TCP 1.101.0.1:3000 -> 22.102.0.1:35182 10 6452 1 2025-12-04 16:44:19.250 00:00:10.363 TCP 23.104.0.1:53750 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:44:47.982 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:53674 10 6452 1 2025-12-04 16:45:19.657 00:00:10.325 TCP 23.104.0.1:60684 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:45:48.224 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:35498 10 6452 1 2025-12-04 16:46:20.023 00:00:10.358 TCP 23.104.0.1:36010 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:46:48.420 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48832 10 6452 1 2025-12-04 16:47:07.934 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 16:47:08.127 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 16:43:07.614 00:05:04.922 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 16:43:07.610 00:05:04.927 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 16:47:20.422 00:00:10.388 TCP 23.104.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:47:48.594 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59750 10 6452 1 2025-12-04 16:48:20.865 00:00:10.441 TCP 23.104.0.1:53192 -> 1.101.0.1:3000 15 1926 1 2025-12-04 16:48:48.804 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:45776 12 10375 1 2025-12-04 16:49:21.346 00:00:10.325 TCP 23.104.0.1:38006 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:49:49.074 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40554 10 6452 1 2025-12-04 16:50:21.718 00:00:10.322 TCP 23.104.0.1:57456 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:50:49.288 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34520 10 6452 1 2025-12-04 16:51:22.104 00:00:10.407 TCP 23.104.0.1:46344 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:51:49.499 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47628 10 6452 1 2025-12-04 16:52:08.835 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 16:52:08.663 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 16:52:22.553 00:00:10.320 TCP 23.104.0.1:60000 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:52:49.709 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40270 10 6452 1 2025-12-04 16:49:07.613 00:05:04.927 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 16:49:07.615 00:05:04.922 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 16:53:22.911 00:00:10.326 TCP 23.104.0.1:38520 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:53:49.918 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58340 10 6452 1 2025-12-04 16:54:23.275 00:00:10.362 TCP 23.104.0.1:55654 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:54:50.124 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36696 10 6452 1 2025-12-04 16:55:23.676 00:00:10.374 TCP 23.104.0.1:48666 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:55:50.335 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41880 10 6452 1 2025-12-04 16:56:24.104 00:00:10.363 TCP 23.104.0.1:42156 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:56:50.505 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43462 10 6452 1 2025-12-04 16:57:08.286 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 16:57:08.411 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 16:57:24.502 00:00:10.324 TCP 23.104.0.1:56178 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:57:50.730 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48196 10 6452 1 2025-12-04 16:58:24.863 00:00:10.448 TCP 23.104.0.1:56866 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 163, total bytes: 501097, total packets: 1580, avg bps: 1052, avg pps: 0, avg bpp: 317 Time window: 2025-12-04 15:55:07 - 2025-12-04 16:58:35 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0051s User: 0.0000s Wall: 0.0017s flows/second: 98017.4 Runtime: 0.0017s