Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 19:58:41.636 00:00:10.367 TCP 23.104.0.1:47942 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:58:44.776 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57220 10 6452 1 2025-12-04 19:55:07.670 00:05:04.928 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 19:55:07.667 00:05:04.934 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 19:59:42.055 00:00:10.365 TCP 23.104.0.1:34656 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:59:44.993 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57636 10 6452 1 2025-12-04 20:00:42.458 00:00:10.330 TCP 23.104.0.1:43408 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:00:45.227 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:59464 10 6452 1 2025-12-04 20:01:45.428 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39192 10 6452 1 2025-12-04 20:01:42.826 00:00:10.352 TCP 23.104.0.1:36954 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:02:11.646 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 20:02:12.055 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 20:02:45.595 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47312 10 6452 1 2025-12-04 20:02:43.216 00:00:10.367 TCP 23.104.0.1:36896 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:03:43.623 00:00:10.327 TCP 23.104.0.1:36866 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:03:45.812 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59494 10 6452 1 2025-12-04 20:04:46.034 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58490 10 6452 1 2025-12-04 20:04:43.989 00:00:10.369 TCP 23.104.0.1:53968 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:01:07.670 00:05:04.928 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 20:01:07.667 00:05:04.933 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 20:05:46.248 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56428 10 6452 1 2025-12-04 20:05:44.395 00:00:10.367 TCP 23.104.0.1:54522 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:06:44.797 00:00:10.367 TCP 23.104.0.1:47280 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:06:46.465 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40278 10 6452 1 2025-12-04 20:07:12.019 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 20:07:12.066 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 20:07:45.202 00:00:10.343 TCP 23.104.0.1:34578 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:07:46.679 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45748 10 6452 1 2025-12-04 20:08:45.567 00:00:10.395 TCP 23.104.0.1:38322 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:08:46.896 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47162 10 6452 1 2025-12-04 20:09:45.994 00:00:10.368 TCP 23.104.0.1:53212 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:09:47.083 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43252 10 6452 1 2025-12-04 20:10:46.399 00:00:10.365 TCP 23.104.0.1:37612 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:10:47.265 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:42142 10 6452 1 2025-12-04 20:07:07.671 00:05:04.928 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 20:07:07.668 00:05:04.933 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 20:11:46.799 00:00:10.377 TCP 23.104.0.1:35252 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:11:47.433 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40266 10 6452 1 2025-12-04 20:12:12.267 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 20:12:12.195 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 20:12:47.211 00:00:10.360 TCP 23.104.0.1:49260 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:12:47.656 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47908 10 6452 1 2025-12-04 20:13:47.608 00:00:10.363 TCP 23.104.0.1:32870 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:13:47.869 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39300 10 6452 1 2025-12-04 20:14:48.004 00:00:10.324 TCP 23.104.0.1:57226 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:14:48.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34316 10 6452 1 2025-12-04 20:15:48.362 00:00:10.738 TCP 23.104.0.1:58188 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:15:48.293 00:00:10.656 TCP 1.101.0.1:3000 -> 22.102.0.1:38932 10 6452 1 2025-12-04 20:16:48.984 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42252 10 6452 1 2025-12-04 20:16:49.139 00:00:10.362 TCP 23.104.0.1:54148 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:17:12.274 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 20:13:07.670 00:05:04.934 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 20:17:12.365 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 20:13:07.672 00:05:04.929 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 20:17:49.535 00:00:10.364 TCP 23.104.0.1:35058 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:17:49.209 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57266 10 6452 1 2025-12-04 20:18:49.935 00:00:10.327 TCP 23.104.0.1:40622 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:18:49.421 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45852 10 6452 1 2025-12-04 20:19:50.299 00:00:10.324 TCP 23.104.0.1:51730 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:19:49.633 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46452 10 6452 1 2025-12-04 20:20:49.843 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49894 10 6452 1 2025-12-04 20:20:50.670 00:00:10.364 TCP 23.104.0.1:36322 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:21:51.102 00:00:10.339 TCP 23.104.0.1:38978 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:21:50.081 00:00:10.296 TCP 1.101.0.1:3000 -> 22.102.0.1:46784 10 6452 1 2025-12-04 20:22:12.307 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 20:22:12.263 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 20:22:51.481 00:00:10.347 TCP 23.104.0.1:37106 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:22:50.429 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50176 10 6452 1 2025-12-04 20:19:07.679 00:05:04.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 20:19:07.676 00:05:04.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 20:23:50.636 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54676 10 6452 1 2025-12-04 20:23:51.888 00:00:10.379 TCP 23.104.0.1:58644 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:24:50.815 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36298 10 6452 1 2025-12-04 20:24:52.302 00:00:10.368 TCP 23.104.0.1:51570 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:25:51.048 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35858 10 6452 1 2025-12-04 20:25:52.706 00:00:10.381 TCP 23.104.0.1:42506 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:26:51.257 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44358 10 6452 1 2025-12-04 20:26:53.126 00:00:10.366 TCP 23.104.0.1:34618 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:27:12.655 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 20:27:12.229 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 20:27:51.468 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41952 10 6452 1 2025-12-04 20:27:53.528 00:00:10.324 TCP 23.104.0.1:37658 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:28:51.647 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57268 10 6452 1 2025-12-04 20:28:53.891 00:00:10.345 TCP 23.104.0.1:54418 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:25:07.677 00:05:04.931 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 20:25:07.681 00:05:04.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 20:29:54.275 00:00:10.364 TCP 23.104.0.1:34452 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:29:51.855 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47534 10 6452 1 2025-12-04 20:30:52.078 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53086 10 6452 1 2025-12-04 20:30:54.677 00:00:10.378 TCP 23.104.0.1:59472 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:31:52.300 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58366 10 6452 1 2025-12-04 20:31:55.103 00:00:10.369 TCP 23.104.0.1:41292 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:32:12.660 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 20:32:12.866 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 20:32:55.511 00:00:10.440 TCP 23.104.0.1:44598 -> 1.101.0.1:3000 15 1926 1 2025-12-04 20:32:52.476 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44730 10 6452 1 2025-12-04 20:33:55.989 00:00:10.365 TCP 23.104.0.1:56706 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:33:52.651 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:42486 12 10375 1 2025-12-04 20:34:56.404 00:00:10.332 TCP 23.104.0.1:45826 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:34:52.888 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49118 10 6452 1 2025-12-04 20:31:07.682 00:05:04.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 20:31:07.681 00:05:04.930 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 20:35:53.110 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34570 10 6452 1 2025-12-04 20:35:56.773 00:00:10.372 TCP 23.104.0.1:42088 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:36:53.319 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49102 10 6452 1 2025-12-04 20:36:57.182 00:00:10.368 TCP 23.104.0.1:47974 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:37:12.868 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 20:37:12.896 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 20:37:53.488 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33716 10 6452 1 2025-12-04 20:37:57.585 00:00:10.374 TCP 23.104.0.1:47474 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:38:53.713 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54438 10 6452 1 2025-12-04 20:38:58.000 00:00:10.364 TCP 23.104.0.1:35738 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:39:53.881 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:50888 10 6452 1 2025-12-04 20:39:58.401 00:00:10.364 TCP 23.104.0.1:33168 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:40:54.128 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55060 10 6452 1 2025-12-04 20:40:58.804 00:00:10.365 TCP 23.104.0.1:39738 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:37:07.681 00:05:04.931 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 20:37:07.683 00:05:04.927 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 20:41:54.305 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36908 10 6452 1 2025-12-04 20:41:59.206 00:00:10.363 TCP 23.104.0.1:51832 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:42:12.934 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 20:42:12.935 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 20:42:54.475 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41394 10 6452 1 2025-12-04 20:42:59.608 00:00:10.369 TCP 23.104.0.1:56536 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:43:54.689 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49360 10 6452 1 2025-12-04 20:44:00.019 00:00:10.495 TCP 23.104.0.1:35010 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:44:54.907 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43110 10 6452 1 2025-12-04 20:45:00.560 00:00:10.360 TCP 23.104.0.1:38962 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:45:55.089 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59230 10 6452 1 2025-12-04 20:46:00.960 00:00:10.367 TCP 23.104.0.1:52894 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:46:55.305 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57680 10 6452 1 2025-12-04 20:47:01.359 00:00:10.368 TCP 23.104.0.1:43812 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:47:13.027 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 20:43:07.681 00:05:04.931 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 20:43:07.685 00:05:04.926 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 20:47:13.036 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 20:47:55.480 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39428 10 6452 1 2025-12-04 20:48:01.766 00:00:10.372 TCP 23.104.0.1:36012 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:48:55.709 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:50570 10 6452 1 2025-12-04 20:49:02.175 00:00:10.366 TCP 23.104.0.1:53558 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:49:55.952 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:54508 10 6452 1 2025-12-04 20:50:02.582 00:00:10.365 TCP 23.104.0.1:35226 -> 1.101.0.1:3000 12 1559 1 2025-12-04 20:50:56.158 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51732 10 6452 1 2025-12-04 20:51:02.983 00:00:10.373 TCP 23.104.0.1:39736 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:51:56.365 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39954 10 6452 1 2025-12-04 20:52:13.026 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 20:52:03.393 00:00:10.368 TCP 23.104.0.1:56500 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:52:13.295 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 20:52:56.543 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42836 10 6452 1 2025-12-04 20:49:07.688 00:05:04.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 20:53:03.799 00:00:10.365 TCP 23.104.0.1:52618 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:49:07.685 00:05:04.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 20:53:56.766 00:00:10.354 TCP 1.101.0.1:3000 -> 22.102.0.1:52422 10 6452 1 2025-12-04 20:54:04.208 00:00:10.368 TCP 23.104.0.1:35376 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:54:57.159 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52078 10 6452 1 2025-12-04 20:55:04.614 00:00:10.327 TCP 23.104.0.1:49554 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:55:57.372 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56396 10 6452 1 2025-12-04 20:56:04.978 00:00:10.381 TCP 23.104.0.1:54772 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:56:57.544 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48544 10 6452 1 2025-12-04 20:57:13.251 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 20:57:13.229 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 20:57:05.397 00:00:10.419 TCP 23.104.0.1:48018 -> 1.101.0.1:3000 11 1507 1 2025-12-04 20:57:57.719 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:60696 14 14292 1 2025-12-04 20:58:05.858 00:00:10.526 TCP 23.104.0.1:41184 -> 1.101.0.1:3000 17 2241 1 Summary: total flows: 164, total bytes: 511316, total packets: 1589, avg bps: 1079, avg pps: 0, avg bpp: 321 Time window: 2025-12-04 19:55:07 - 2025-12-04 20:58:16 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0049s User: 0.0016s Wall: 0.0022s flows/second: 74890.1 Runtime: 0.0022s