Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 15:58:46.218 00:00:10.366 TCP 23.104.0.1:56498 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:54:12.992 00:05:55.132 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 15:55:08.124 00:05:04.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 15:59:09.724 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57250 10 6452 1 2025-12-05 15:59:46.634 00:00:10.366 TCP 23.104.0.1:38844 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:00:09.944 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:54210 10 6452 1 2025-12-05 16:00:47.055 00:00:10.324 TCP 23.104.0.1:48652 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:01:10.189 00:00:10.727 TCP 1.101.0.1:3000 -> 22.102.0.1:33166 10 6452 1 2025-12-05 16:01:47.415 00:00:10.368 TCP 23.104.0.1:35038 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:02:10.961 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:46696 12 6556 1 2025-12-05 16:02:36.221 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 16:02:36.057 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 16:02:47.821 00:00:10.399 TCP 23.104.0.1:41926 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:03:11.191 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:60840 10 6452 1 2025-12-05 16:03:48.255 00:00:10.329 TCP 23.104.0.1:60510 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:04:11.380 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60346 10 6452 1 2025-12-05 16:04:48.623 00:00:10.326 TCP 23.104.0.1:54820 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:00:12.993 00:05:55.132 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 16:01:08.126 00:05:04.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 16:05:11.557 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33496 10 6452 1 2025-12-05 16:05:48.986 00:00:10.374 TCP 23.104.0.1:37306 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:06:11.736 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51866 10 6452 1 2025-12-05 16:06:49.399 00:00:10.365 TCP 23.104.0.1:59172 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:07:11.945 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57938 10 6452 1 2025-12-05 16:07:35.990 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 16:07:36.165 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 16:07:49.800 00:00:10.353 TCP 23.104.0.1:36054 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:08:12.177 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52174 12 10375 1 2025-12-05 16:08:50.181 00:00:10.447 TCP 23.104.0.1:41422 -> 1.101.0.1:3000 15 1926 1 2025-12-05 16:09:12.419 00:00:10.915 TCP 1.101.0.1:3000 -> 22.102.0.1:51716 10 6452 1 2025-12-05 16:09:50.665 00:00:10.365 TCP 23.104.0.1:48560 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:10:13.374 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38722 10 6452 1 2025-12-05 16:10:51.093 00:00:10.330 TCP 23.104.0.1:56054 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:06:12.996 00:05:55.133 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 16:07:08.127 00:05:04.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 16:11:13.587 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55640 10 6452 1 2025-12-05 16:11:51.461 00:00:12.703 TCP 23.104.0.1:38274 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:12:13.795 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44106 10 6452 1 2025-12-05 16:12:36.391 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 16:12:36.261 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 16:12:54.218 00:00:10.368 TCP 23.104.0.1:45812 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:13:14.012 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39358 10 6452 1 2025-12-05 16:13:54.627 00:00:10.323 TCP 23.104.0.1:52944 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:14:14.230 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60840 10 6452 1 2025-12-05 16:14:54.987 00:00:10.376 TCP 23.104.0.1:40366 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:15:14.451 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51594 10 6452 1 2025-12-05 16:15:55.402 00:00:10.366 TCP 23.104.0.1:34738 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:12:12.998 00:05:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 667 1 2025-12-05 16:16:14.667 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44386 10 6452 1 2025-12-05 16:16:55.806 00:00:10.361 TCP 23.104.0.1:39366 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:13:08.130 00:05:04.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 16:17:14.882 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52862 10 6452 1 2025-12-05 16:17:36.725 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 16:17:36.637 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 16:17:56.208 00:00:10.369 TCP 23.104.0.1:33626 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:18:15.084 00:00:10.441 TCP 1.101.0.1:3000 -> 22.102.0.1:57144 10 6452 1 2025-12-05 16:18:56.619 00:00:10.325 TCP 23.104.0.1:37548 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:19:15.562 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36752 10 6452 1 2025-12-05 16:19:56.985 00:00:10.370 TCP 23.104.0.1:51522 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:20:15.774 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58568 10 6452 1 2025-12-05 16:20:57.390 00:00:10.369 TCP 23.104.0.1:33482 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:21:15.998 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48202 10 6452 1 2025-12-05 16:21:57.801 00:00:10.373 TCP 23.104.0.1:59070 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:18:08.130 00:05:04.871 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 16:22:16.178 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:45362 11 6504 1 2025-12-05 16:22:36.451 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 16:22:36.605 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 16:22:58.214 00:00:10.365 TCP 23.104.0.1:55964 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:19:08.133 00:05:04.865 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 16:23:16.446 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40714 10 6452 1 2025-12-05 16:23:58.617 00:00:10.320 TCP 23.104.0.1:50944 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:24:16.661 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43310 10 6452 1 2025-12-05 16:24:58.973 00:00:10.369 TCP 23.104.0.1:56712 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:25:16.875 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56462 10 6452 1 2025-12-05 16:25:59.387 00:00:10.370 TCP 23.104.0.1:34048 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:26:17.100 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52794 10 6452 1 2025-12-05 16:26:59.794 00:00:10.369 TCP 23.104.0.1:58690 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:27:17.319 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38410 10 6452 1 2025-12-05 16:27:36.571 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 16:27:36.642 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 16:28:00.196 00:00:10.337 TCP 23.104.0.1:46944 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:24:08.131 00:05:04.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 16:28:17.528 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:55726 10 6452 1 2025-12-05 16:29:00.566 00:00:10.374 TCP 23.104.0.1:37094 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:25:08.134 00:05:04.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 16:29:17.717 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47056 10 6452 1 2025-12-05 16:30:00.978 00:00:10.366 TCP 23.104.0.1:49736 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:30:17.932 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:48018 10 6452 1 2025-12-05 16:31:01.381 00:00:10.373 TCP 23.104.0.1:50746 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:31:18.174 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33630 10 6452 1 2025-12-05 16:32:01.794 00:00:10.362 TCP 23.104.0.1:40758 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:32:18.387 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48518 10 6452 1 2025-12-05 16:32:36.392 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 16:32:36.809 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 16:33:02.195 00:00:10.369 TCP 23.104.0.1:38428 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:33:18.603 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40890 10 6452 1 2025-12-05 16:34:02.601 00:00:10.369 TCP 23.104.0.1:52658 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:30:08.131 00:05:04.889 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 16:34:18.807 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41664 10 6452 1 2025-12-05 16:35:03.006 00:00:10.365 TCP 23.104.0.1:52270 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:31:08.135 00:05:04.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 16:35:19.030 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56070 10 6452 1 2025-12-05 16:36:03.409 00:00:10.337 TCP 23.104.0.1:54018 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:36:19.241 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36404 10 6452 1 2025-12-05 16:37:03.788 00:00:10.360 TCP 23.104.0.1:40002 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:37:19.451 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46636 10 6452 1 2025-12-05 16:37:36.755 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 16:37:37.051 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 16:38:04.187 00:00:10.370 TCP 23.104.0.1:46462 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:38:19.663 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41230 10 6452 1 2025-12-05 16:39:04.591 00:00:10.369 TCP 23.104.0.1:55870 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:39:19.875 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33854 10 6452 1 2025-12-05 16:36:08.133 00:05:04.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 16:40:04.999 00:00:10.371 TCP 23.104.0.1:50312 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:40:20.074 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39874 10 6452 1 2025-12-05 16:37:08.136 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 16:41:05.408 00:00:10.368 TCP 23.104.0.1:56326 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:41:20.287 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58216 10 6452 1 2025-12-05 16:42:05.817 00:00:10.365 TCP 23.104.0.1:54434 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:42:20.500 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36652 10 6452 1 2025-12-05 16:42:36.822 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 16:42:36.881 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 16:43:06.223 00:00:10.362 TCP 23.104.0.1:60848 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:43:20.715 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38244 10 6452 1 2025-12-05 16:44:06.634 00:00:10.363 TCP 23.104.0.1:53164 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:44:20.923 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51694 10 6452 1 2025-12-05 16:45:07.050 00:00:10.323 TCP 23.104.0.1:41280 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:45:21.134 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55368 10 6452 1 2025-12-05 16:42:08.132 00:05:04.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 16:46:07.413 00:00:10.367 TCP 23.104.0.1:38276 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:46:21.346 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48388 10 6452 1 2025-12-05 16:43:08.136 00:05:04.905 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 16:47:07.823 00:00:10.324 TCP 23.104.0.1:45988 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:47:21.530 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53566 10 6452 1 2025-12-05 16:47:37.101 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 16:47:37.031 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 16:48:08.192 00:00:10.327 TCP 23.104.0.1:33188 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:48:21.748 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40552 10 6452 1 2025-12-05 16:49:08.553 00:00:10.367 TCP 23.104.0.1:48796 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:49:21.964 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44020 10 6452 1 2025-12-05 16:50:08.960 00:00:10.369 TCP 23.104.0.1:41900 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:50:22.186 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43742 10 6452 1 2025-12-05 16:51:09.364 00:00:10.368 TCP 23.104.0.1:41304 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:51:22.403 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48206 10 6452 1 2025-12-05 16:48:08.135 00:05:04.909 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 16:52:09.779 00:00:10.366 TCP 23.104.0.1:60752 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:52:22.619 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58678 10 6452 1 2025-12-05 16:52:36.952 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 16:52:37.157 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 16:49:08.138 00:05:04.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 16:53:10.178 00:00:10.366 TCP 23.104.0.1:38430 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:53:22.839 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50086 10 6452 1 2025-12-05 16:54:10.582 00:00:10.366 TCP 23.104.0.1:35544 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:54:23.085 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37996 10 6452 1 2025-12-05 16:55:10.986 00:00:10.366 TCP 23.104.0.1:37844 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:55:23.297 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60414 10 6452 1 2025-12-05 16:56:11.390 00:00:10.576 TCP 23.104.0.1:41308 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:56:23.511 00:00:15.164 TCP 1.101.0.1:3000 -> 22.102.0.1:60456 10 6452 1 2025-12-05 16:57:12.008 00:00:10.324 TCP 23.104.0.1:44638 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:57:28.729 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38724 10 6452 1 2025-12-05 16:57:37.190 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 16:57:37.299 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 16:54:08.138 00:05:04.910 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 16:58:12.370 00:00:10.371 TCP 23.104.0.1:48932 -> 1.101.0.1:3000 11 1507 1 2025-12-05 16:58:28.949 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:51202 10 6452 1 Summary: total flows: 165, total bytes: 503513, total packets: 1592, avg bps: 1032, avg pps: 0, avg bpp: 316 Time window: 2025-12-05 15:54:12 - 2025-12-05 16:59:13 Total flows processed: 165, passed: 165, Blocks skipped: 0, Bytes read: 17224 Sys: 0.0053s User: 0.0000s Wall: 0.0023s flows/second: 72527.8 Runtime: 0.0023s