Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 17:58:52.762 00:00:10.709 TCP 23.104.0.1:42448 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:55:07.629 00:05:04.926 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 17:55:07.626 00:05:04.932 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 17:59:10.132 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49704 10 6452 1 2025-12-04 17:59:53.513 00:00:10.369 TCP 23.104.0.1:55604 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:00:10.351 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58028 10 6452 1 2025-12-04 18:00:53.918 00:00:10.568 TCP 23.104.0.1:54172 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:01:10.567 00:00:15.703 TCP 1.101.0.1:3000 -> 22.102.0.1:54584 10 6452 1 2025-12-04 18:01:54.529 00:00:10.366 TCP 23.104.0.1:35552 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:02:09.574 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 18:02:09.626 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 18:02:16.310 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33520 10 6452 1 2025-12-04 18:02:54.935 00:00:10.443 TCP 23.104.0.1:41948 -> 1.101.0.1:3000 15 1926 1 2025-12-04 18:03:16.525 00:00:11.697 TCP 1.101.0.1:3000 -> 22.102.0.1:54458 12 10369 1 2025-12-04 18:03:55.422 00:00:10.334 TCP 23.104.0.1:41174 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:04:18.264 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37842 10 6452 1 2025-12-04 18:04:55.799 00:00:10.363 TCP 23.104.0.1:45508 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:01:07.629 00:05:04.927 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 18:01:07.627 00:05:04.932 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 18:05:18.434 00:00:11.035 TCP 1.101.0.1:3000 -> 22.102.0.1:42752 10 6452 1 2025-12-04 18:05:56.200 00:00:10.365 TCP 23.104.0.1:60630 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:06:19.509 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45278 10 6452 1 2025-12-04 18:06:56.601 00:00:10.332 TCP 23.104.0.1:46506 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:07:09.588 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 18:07:09.749 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 18:07:19.722 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41176 10 6452 1 2025-12-04 18:07:56.977 00:00:10.370 TCP 23.104.0.1:49302 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:08:19.894 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:53410 10 6452 1 2025-12-04 18:08:57.384 00:00:10.360 TCP 23.104.0.1:59262 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:09:20.085 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43930 10 6452 1 2025-12-04 18:09:57.784 00:00:10.366 TCP 23.104.0.1:49026 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:10:20.257 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:56484 10 6452 1 2025-12-04 18:10:58.198 00:00:10.389 TCP 23.104.0.1:44448 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:07:07.630 00:05:04.931 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 18:07:07.633 00:05:04.926 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 18:11:20.456 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52024 10 6452 1 2025-12-04 18:12:09.757 00:00:00.013 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 18:11:58.603 00:00:10.774 TCP 23.104.0.1:35282 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:12:09.943 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 18:12:20.679 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57328 10 6452 1 2025-12-04 18:12:59.422 00:00:10.360 TCP 23.104.0.1:53784 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:13:20.894 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46616 10 6452 1 2025-12-04 18:13:59.822 00:00:10.376 TCP 23.104.0.1:49398 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:14:21.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43804 10 6452 1 2025-12-04 18:15:00.245 00:00:10.367 TCP 23.104.0.1:54590 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:15:21.295 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42936 10 6452 1 2025-12-04 18:16:00.651 00:00:10.366 TCP 23.104.0.1:59316 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:16:21.513 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49050 10 6452 1 2025-12-04 18:17:09.734 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 18:17:01.061 00:00:10.363 TCP 23.104.0.1:40122 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:17:10.029 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 18:13:07.629 00:05:04.935 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 18:13:07.631 00:05:04.930 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 18:17:21.727 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39628 10 6452 1 2025-12-04 18:18:01.464 00:00:10.320 TCP 23.104.0.1:49844 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:18:21.938 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:59048 10 6452 1 2025-12-04 18:19:01.824 00:00:10.366 TCP 23.104.0.1:36316 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:19:22.193 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47376 10 6452 1 2025-12-04 18:20:02.233 00:00:10.326 TCP 23.104.0.1:55650 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:20:22.419 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:33002 10 6452 1 2025-12-04 18:21:02.597 00:00:10.365 TCP 23.104.0.1:46562 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:21:22.602 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42120 10 6452 1 2025-12-04 18:22:09.801 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 18:22:09.826 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 18:22:03.002 00:00:10.358 TCP 23.104.0.1:40316 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:22:22.814 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37918 10 6452 1 2025-12-04 18:19:07.633 00:05:04.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 18:23:03.400 00:00:10.361 TCP 23.104.0.1:57016 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:19:07.631 00:05:04.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 18:23:23.045 00:00:10.319 TCP 1.101.0.1:3000 -> 22.102.0.1:51642 10 6452 1 2025-12-04 18:24:03.802 00:00:10.372 TCP 23.104.0.1:60364 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:24:23.404 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:59628 10 6452 1 2025-12-04 18:25:04.211 00:00:10.328 TCP 23.104.0.1:57018 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:25:23.570 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52856 10 6452 1 2025-12-04 18:26:04.577 00:00:10.367 TCP 23.104.0.1:56148 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:26:23.790 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45192 10 6452 1 2025-12-04 18:27:10.010 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 18:27:10.017 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 18:27:04.979 00:00:10.374 TCP 23.104.0.1:47078 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:27:24.006 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33136 10 6452 1 2025-12-04 18:28:05.392 00:00:10.377 TCP 23.104.0.1:58250 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:28:24.181 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45342 10 6452 1 2025-12-04 18:25:07.633 00:05:04.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 18:29:05.831 00:00:10.362 TCP 23.104.0.1:51130 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:25:07.635 00:05:04.932 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 18:29:24.393 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44036 10 6452 1 2025-12-04 18:30:06.232 00:00:10.366 TCP 23.104.0.1:35144 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:30:24.573 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52124 10 6452 1 2025-12-04 18:31:06.639 00:00:10.370 TCP 23.104.0.1:33354 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:31:24.794 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46448 10 6452 1 2025-12-04 18:32:10.219 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 18:32:10.354 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 18:32:07.052 00:00:10.322 TCP 23.104.0.1:39622 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:32:25.010 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35282 10 6452 1 2025-12-04 18:33:07.418 00:00:10.441 TCP 23.104.0.1:42346 -> 1.101.0.1:3000 15 1926 1 2025-12-04 18:33:25.226 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39374 12 10369 1 2025-12-04 18:34:07.896 00:00:10.407 TCP 23.104.0.1:43310 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:34:25.429 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:36204 10 6452 1 2025-12-04 18:31:07.633 00:05:04.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 18:31:07.636 00:05:04.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 18:35:08.346 00:00:10.363 TCP 23.104.0.1:34126 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:35:25.598 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49256 10 6452 1 2025-12-04 18:36:08.748 00:00:10.324 TCP 23.104.0.1:42840 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:36:25.812 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39304 10 6452 1 2025-12-04 18:37:10.447 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 18:37:10.428 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 18:37:09.111 00:00:10.323 TCP 23.104.0.1:49096 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:37:26.044 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35576 10 6452 1 2025-12-04 18:38:09.474 00:00:10.320 TCP 23.104.0.1:46560 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:38:26.260 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37208 10 6452 1 2025-12-04 18:39:09.834 00:00:10.396 TCP 23.104.0.1:60956 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:39:26.430 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46596 10 6452 1 2025-12-04 18:40:10.267 00:00:10.364 TCP 23.104.0.1:52200 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:40:26.651 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:50940 10 6452 1 2025-12-04 18:37:07.641 00:05:04.934 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 18:37:07.643 00:05:04.929 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 18:41:10.668 00:00:10.363 TCP 23.104.0.1:37904 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:41:26.907 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56892 10 6452 1 2025-12-04 18:42:10.424 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 18:42:10.033 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 18:42:11.098 00:00:10.323 TCP 23.104.0.1:51002 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:42:27.095 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:37606 10 6452 1 2025-12-04 18:43:11.465 00:00:10.365 TCP 23.104.0.1:57022 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:43:27.295 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60380 10 6452 1 2025-12-04 18:44:11.870 00:00:10.372 TCP 23.104.0.1:36628 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:44:27.509 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48304 10 6452 1 2025-12-04 18:45:12.279 00:00:10.364 TCP 23.104.0.1:41942 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:45:27.676 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52638 10 6452 1 2025-12-04 18:46:12.680 00:00:10.373 TCP 23.104.0.1:37316 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:46:27.890 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38926 10 6452 1 2025-12-04 18:47:10.435 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 18:47:10.478 00:00:00.019 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 18:43:07.644 00:05:04.928 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 18:43:07.642 00:05:04.934 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 18:47:13.108 00:00:10.369 TCP 23.104.0.1:50090 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:47:28.114 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50208 10 6452 1 2025-12-04 18:48:13.512 00:00:10.364 TCP 23.104.0.1:48432 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:48:28.326 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58466 10 6452 1 2025-12-04 18:49:13.912 00:00:10.395 TCP 23.104.0.1:40534 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:49:28.497 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46506 10 6452 1 2025-12-04 18:50:14.353 00:00:10.362 TCP 23.104.0.1:47186 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:50:28.672 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:39792 10 6452 1 2025-12-04 18:51:14.760 00:00:10.332 TCP 23.104.0.1:56898 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:51:28.868 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56604 10 6452 1 2025-12-04 18:52:10.792 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 18:52:10.811 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 18:52:15.133 00:00:10.364 TCP 23.104.0.1:48950 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:52:29.085 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47726 10 6452 1 2025-12-04 18:49:07.647 00:05:04.929 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 18:49:07.645 00:05:04.933 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 18:53:15.546 00:00:10.368 TCP 23.104.0.1:45786 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:53:29.304 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38856 10 6452 1 2025-12-04 18:54:15.953 00:00:10.380 TCP 23.104.0.1:49008 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:54:29.517 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56768 10 6452 1 2025-12-04 18:55:16.394 00:00:10.365 TCP 23.104.0.1:54574 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:55:29.730 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32952 10 6452 1 2025-12-04 18:56:16.801 00:00:10.330 TCP 23.104.0.1:32940 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:56:29.941 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:53898 10 6452 1 2025-12-04 18:57:10.840 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 18:57:10.878 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 18:57:17.173 00:00:10.363 TCP 23.104.0.1:43950 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:57:30.174 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52762 10 6452 1 2025-12-04 18:58:17.574 00:00:10.326 TCP 23.104.0.1:39608 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:58:30.384 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57140 10 6452 1 Summary: total flows: 164, total bytes: 507020, total packets: 1584, avg bps: 1063, avg pps: 0, avg bpp: 320 Time window: 2025-12-04 17:55:07 - 2025-12-04 18:58:40 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0018s Wall: 0.0018s flows/second: 90354.1 Runtime: 0.0018s