Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 04:58:46.520 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48008 10 6452 1 2025-12-04 04:55:07.390 00:05:04.905 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 04:55:07.393 00:05:04.899 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 04:59:04.377 00:00:10.375 TCP 23.104.0.1:32934 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:59:46.758 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34046 10 6452 1 2025-12-04 05:00:04.780 00:00:10.365 TCP 23.104.0.1:42068 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:00:46.977 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33100 10 6452 1 2025-12-04 05:01:05.177 00:00:10.326 TCP 23.104.0.1:40586 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:01:54.014 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 05:01:54.355 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 05:01:47.211 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50412 10 6452 1 2025-12-04 05:02:05.539 00:00:10.366 TCP 23.104.0.1:34274 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:02:47.425 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57422 10 6452 1 2025-12-04 05:03:05.942 00:00:11.613 TCP 23.104.0.1:44588 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:03:47.655 00:00:11.280 TCP 1.101.0.1:3000 -> 22.102.0.1:50966 10 6452 1 2025-12-04 05:04:07.588 00:00:10.362 TCP 23.104.0.1:34836 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:04:48.975 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55212 10 6452 1 2025-12-04 05:01:07.395 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 05:01:07.393 00:05:04.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 05:05:07.989 00:00:10.324 TCP 23.104.0.1:35000 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:05:49.210 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49172 10 6452 1 2025-12-04 05:06:08.355 00:00:16.352 TCP 23.104.0.1:59508 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:06:54.209 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 05:06:53.704 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 05:06:49.429 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38232 10 6452 1 2025-12-04 05:07:14.748 00:00:10.388 TCP 23.104.0.1:57580 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:07:49.598 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46502 10 6452 1 2025-12-04 05:08:15.176 00:00:10.373 TCP 23.104.0.1:50402 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:08:49.772 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48310 10 6452 1 2025-12-04 05:09:15.589 00:00:10.322 TCP 23.104.0.1:43840 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:09:49.993 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59822 10 6452 1 2025-12-04 05:10:15.955 00:00:11.108 TCP 23.104.0.1:43718 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:10:50.208 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35424 10 6452 1 2025-12-04 05:07:07.397 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 05:07:07.394 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 05:11:17.102 00:00:10.323 TCP 23.104.0.1:37556 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:11:54.080 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 05:11:54.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 05:11:50.422 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36192 10 6452 1 2025-12-04 05:12:17.460 00:00:10.364 TCP 23.104.0.1:59386 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:12:50.623 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58500 10 6452 1 2025-12-04 05:13:17.863 00:00:10.373 TCP 23.104.0.1:38368 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:13:50.837 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34160 10 6452 1 2025-12-04 05:14:18.273 00:00:10.364 TCP 23.104.0.1:34390 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:14:51.073 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46056 10 6452 1 2025-12-04 05:15:18.683 00:00:10.792 TCP 23.104.0.1:42816 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:15:51.291 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57130 10 6452 1 2025-12-04 05:16:19.516 00:00:10.365 TCP 23.104.0.1:33018 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:16:54.247 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 05:16:54.383 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 05:16:51.512 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48862 10 6452 1 2025-12-04 05:13:07.395 00:05:04.905 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 05:13:07.398 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 05:17:19.917 00:00:10.341 TCP 23.104.0.1:36048 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:17:51.731 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40020 10 6452 1 2025-12-04 05:18:20.299 00:00:10.365 TCP 23.104.0.1:52960 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:18:51.900 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57368 10 6452 1 2025-12-04 05:19:20.700 00:00:10.366 TCP 23.104.0.1:57160 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:19:52.115 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42440 10 6452 1 2025-12-04 05:20:21.106 00:00:10.364 TCP 23.104.0.1:58146 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:20:52.332 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34984 10 6452 1 2025-12-04 05:21:21.508 00:00:10.328 TCP 23.104.0.1:35826 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:21:54.343 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 05:21:54.410 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 05:21:52.553 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39730 10 6452 1 2025-12-04 05:22:21.876 00:00:10.369 TCP 23.104.0.1:39390 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:22:52.772 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56650 10 6452 1 2025-12-04 05:19:07.399 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 05:19:07.397 00:05:04.905 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 05:23:22.285 00:00:10.367 TCP 23.104.0.1:52990 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:23:53.007 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38260 10 6452 1 2025-12-04 05:24:22.685 00:00:10.365 TCP 23.104.0.1:36592 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:24:53.191 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37648 10 6452 1 2025-12-04 05:25:23.105 00:00:10.363 TCP 23.104.0.1:45056 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:25:53.369 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54720 10 6452 1 2025-12-04 05:26:23.509 00:00:10.365 TCP 23.104.0.1:56522 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:26:54.491 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 05:26:54.520 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 05:26:53.598 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48120 10 6452 1 2025-12-04 05:27:23.912 00:00:10.328 TCP 23.104.0.1:47816 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:27:53.814 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:39622 12 10369 1 2025-12-04 05:28:24.275 00:00:10.445 TCP 23.104.0.1:46928 -> 1.101.0.1:3000 15 1926 1 2025-12-04 05:28:54.085 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58394 10 6452 1 2025-12-04 05:25:07.398 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 05:25:07.400 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 05:29:24.771 00:00:10.325 TCP 23.104.0.1:41116 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:29:54.289 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46178 10 6452 1 2025-12-04 05:30:25.131 00:00:10.371 TCP 23.104.0.1:32890 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:30:54.461 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50824 10 6452 1 2025-12-04 05:31:25.539 00:00:10.323 TCP 23.104.0.1:46684 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:31:54.439 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 05:31:54.237 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 05:31:54.672 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48062 10 6452 1 2025-12-04 05:32:25.904 00:00:10.374 TCP 23.104.0.1:57792 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:32:54.842 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34054 10 6452 1 2025-12-04 05:33:26.314 00:00:10.369 TCP 23.104.0.1:39602 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:33:55.077 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57540 10 6452 1 2025-12-04 05:34:26.717 00:00:10.372 TCP 23.104.0.1:58624 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:34:55.281 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38824 10 6452 1 2025-12-04 05:31:07.401 00:05:04.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 05:31:07.399 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 05:35:27.128 00:00:10.363 TCP 23.104.0.1:60394 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:35:55.493 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:41094 10 6452 1 2025-12-04 05:36:27.531 00:00:10.361 TCP 23.104.0.1:42878 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:36:54.622 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 05:36:54.376 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 05:36:55.661 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53156 10 6452 1 2025-12-04 05:37:27.927 00:00:10.350 TCP 23.104.0.1:41096 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:37:55.883 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49222 11 6504 1 2025-12-04 05:38:28.313 00:00:10.368 TCP 23.104.0.1:34138 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:38:56.106 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50740 10 6452 1 2025-12-04 05:39:28.721 00:00:10.377 TCP 23.104.0.1:47724 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:39:56.319 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53434 10 6452 1 2025-12-04 05:40:29.137 00:00:10.836 TCP 23.104.0.1:32772 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:40:56.500 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40498 10 6452 1 2025-12-04 05:37:07.401 00:05:04.908 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 05:37:07.403 00:05:04.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 05:41:30.015 00:00:10.320 TCP 23.104.0.1:60014 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:41:54.757 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 05:41:54.751 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 05:41:56.714 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44550 10 6452 1 2025-12-04 05:42:30.372 00:00:10.365 TCP 23.104.0.1:46302 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:42:56.925 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37708 10 6452 1 2025-12-04 05:43:30.776 00:00:10.366 TCP 23.104.0.1:53996 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:43:57.136 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59948 10 6452 1 2025-12-04 05:44:31.179 00:00:10.367 TCP 23.104.0.1:45750 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:44:57.347 00:00:10.988 TCP 1.101.0.1:3000 -> 22.102.0.1:60052 10 6452 1 2025-12-04 05:45:31.592 00:00:10.473 TCP 23.104.0.1:33386 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:45:58.376 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51294 10 6452 1 2025-12-04 05:46:32.106 00:00:10.364 TCP 23.104.0.1:56084 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:46:55.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 05:46:55.074 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 05:46:58.548 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49780 10 6452 1 2025-12-04 05:43:07.402 00:05:04.909 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 05:43:07.405 00:05:04.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 05:47:32.507 00:00:10.367 TCP 23.104.0.1:39700 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:47:58.755 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43900 10 6452 1 2025-12-04 05:48:32.911 00:00:10.367 TCP 23.104.0.1:56482 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:48:58.975 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:53530 10 6452 1 2025-12-04 05:49:33.316 00:00:10.322 TCP 23.104.0.1:51426 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:49:59.205 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59068 10 6452 1 2025-12-04 05:50:33.679 00:00:10.370 TCP 23.104.0.1:53580 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:50:59.420 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34438 10 6452 1 2025-12-04 05:51:34.102 00:00:10.362 TCP 23.104.0.1:40994 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:51:55.013 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 05:51:54.922 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 05:51:59.641 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60852 10 6452 1 2025-12-04 05:52:34.517 00:00:10.382 TCP 23.104.0.1:43586 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:52:59.851 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37762 10 6452 1 2025-12-04 05:49:07.405 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 05:49:07.408 00:05:04.902 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 05:53:34.941 00:00:10.372 TCP 23.104.0.1:46752 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:54:00.041 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57190 10 6452 1 2025-12-04 05:54:35.353 00:00:10.363 TCP 23.104.0.1:39780 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:55:00.253 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35220 10 6452 1 2025-12-04 05:55:35.759 00:00:10.374 TCP 23.104.0.1:50972 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:56:00.472 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38562 10 6452 1 2025-12-04 05:56:36.172 00:00:10.365 TCP 23.104.0.1:48468 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:56:55.101 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 05:56:54.865 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 05:57:00.684 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58758 10 6452 1 2025-12-04 05:57:36.577 00:00:10.363 TCP 23.104.0.1:35556 -> 1.101.0.1:3000 11 1507 1 2025-12-04 05:58:00.893 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53348 10 6452 1 2025-12-04 05:58:36.986 00:00:10.362 TCP 23.104.0.1:47146 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502736, total packets: 1579, avg bps: 1052, avg pps: 0, avg bpp: 318 Time window: 2025-12-04 04:55:07 - 2025-12-04 05:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0011s Wall: 0.0021s flows/second: 77874.5 Runtime: 0.0021s