Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 05:59:01.084 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45282 10 6452 1 2025-12-04 05:55:07.408 00:05:04.909 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 05:55:07.406 00:05:04.914 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 05:59:37.388 00:00:10.372 TCP 23.104.0.1:57284 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:00:01.298 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50198 10 6452 1 2025-12-04 06:00:37.793 00:00:10.372 TCP 23.104.0.1:55164 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:01:01.513 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49312 10 6452 1 2025-12-04 06:01:38.199 00:00:10.326 TCP 23.104.0.1:45274 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:01:55.173 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 06:01:54.934 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 06:02:01.735 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41804 10 6452 1 2025-12-04 06:02:38.561 00:00:10.358 TCP 23.104.0.1:56430 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:03:01.955 00:00:10.309 TCP 1.101.0.1:3000 -> 22.102.0.1:51014 10 6452 1 2025-12-04 06:03:38.964 00:00:10.387 TCP 23.104.0.1:55972 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:04:02.302 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56578 10 6452 1 2025-12-04 06:04:39.387 00:00:10.363 TCP 23.104.0.1:47716 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:01:07.408 00:05:04.910 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 06:05:02.516 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60488 10 6452 1 2025-12-04 06:01:07.406 00:05:04.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 06:05:39.793 00:00:10.370 TCP 23.104.0.1:43344 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:06:02.687 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47322 10 6452 1 2025-12-04 06:06:40.205 00:00:10.363 TCP 23.104.0.1:60550 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:06:55.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 06:06:55.461 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 06:07:02.898 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46230 10 6452 1 2025-12-04 06:07:40.605 00:00:10.325 TCP 23.104.0.1:38362 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:08:03.085 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:49208 12 10371 1 2025-12-04 06:08:40.969 00:00:10.448 TCP 23.104.0.1:36130 -> 1.101.0.1:3000 15 1926 1 2025-12-04 06:09:03.281 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58072 10 6452 1 2025-12-04 06:09:41.457 00:00:10.364 TCP 23.104.0.1:46720 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:10:03.492 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35222 10 6452 1 2025-12-04 06:10:41.858 00:00:10.368 TCP 23.104.0.1:58230 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:07:07.410 00:05:04.910 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 06:11:03.740 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44402 10 6452 1 2025-12-04 06:07:07.407 00:05:04.916 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 06:11:55.018 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 06:11:42.268 00:00:10.363 TCP 23.104.0.1:34388 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:11:55.332 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 06:12:03.910 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:42306 10 6452 1 2025-12-04 06:12:42.673 00:00:10.361 TCP 23.104.0.1:53110 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:13:04.097 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46160 10 6452 1 2025-12-04 06:13:43.102 00:00:10.363 TCP 23.104.0.1:56660 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:14:04.311 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46044 10 6452 1 2025-12-04 06:14:43.524 00:00:10.367 TCP 23.104.0.1:53184 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:15:04.519 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59292 10 6452 1 2025-12-04 06:15:43.938 00:00:10.377 TCP 23.104.0.1:45966 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:16:04.729 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43676 10 6452 1 2025-12-04 06:16:55.506 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 06:16:55.333 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 06:16:44.368 00:00:10.325 TCP 23.104.0.1:39176 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:13:07.413 00:05:04.909 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 06:13:07.412 00:05:04.913 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 06:17:04.941 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42174 10 6452 1 2025-12-04 06:17:44.735 00:00:10.372 TCP 23.104.0.1:36488 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:18:05.181 00:00:10.624 TCP 1.101.0.1:3000 -> 22.102.0.1:56430 10 6452 1 2025-12-04 06:18:45.149 00:00:10.332 TCP 23.104.0.1:48170 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:19:05.849 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40388 10 6452 1 2025-12-04 06:19:45.544 00:00:10.360 TCP 23.104.0.1:35422 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:20:06.027 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55116 10 6452 1 2025-12-04 06:20:45.943 00:00:10.375 TCP 23.104.0.1:39368 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:21:06.239 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35268 10 6452 1 2025-12-04 06:21:46.356 00:00:10.370 TCP 23.104.0.1:38324 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:21:55.360 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 06:21:55.470 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 06:22:06.454 00:00:10.909 TCP 1.101.0.1:3000 -> 22.102.0.1:38790 10 6452 1 2025-12-04 06:22:46.765 00:00:10.344 TCP 23.104.0.1:39476 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:19:07.415 00:05:04.910 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 06:19:07.413 00:05:04.914 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 06:23:07.399 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49278 10 6452 1 2025-12-04 06:23:47.146 00:00:10.367 TCP 23.104.0.1:56606 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:24:07.566 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49146 10 6452 1 2025-12-04 06:24:47.553 00:00:10.367 TCP 23.104.0.1:43438 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:25:07.777 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56660 10 6452 1 2025-12-04 06:25:47.961 00:00:10.366 TCP 23.104.0.1:51864 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:26:07.990 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60442 10 6452 1 2025-12-04 06:26:55.576 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 06:26:55.499 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 06:26:48.363 00:00:10.363 TCP 23.104.0.1:38422 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:27:08.218 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50538 10 6452 1 2025-12-04 06:27:48.768 00:00:10.375 TCP 23.104.0.1:37408 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:28:08.433 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36356 10 6452 1 2025-12-04 06:28:49.186 00:00:10.365 TCP 23.104.0.1:51864 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:25:07.417 00:05:04.909 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 06:25:07.415 00:05:04.914 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 06:29:08.649 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59164 10 6452 1 2025-12-04 06:29:49.588 00:00:10.365 TCP 23.104.0.1:47748 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:30:08.858 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41114 10 6452 1 2025-12-04 06:30:49.995 00:00:10.412 TCP 23.104.0.1:38842 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:31:09.095 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58276 10 6452 1 2025-12-04 06:31:55.813 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 06:31:55.594 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 06:31:50.440 00:00:10.368 TCP 23.104.0.1:59250 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:32:09.312 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47134 10 6452 1 2025-12-04 06:32:50.849 00:00:10.385 TCP 23.104.0.1:60928 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:33:09.528 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60558 10 6452 1 2025-12-04 06:33:51.273 00:00:10.367 TCP 23.104.0.1:42784 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:34:09.748 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57124 10 6452 1 2025-12-04 06:34:51.677 00:00:10.903 TCP 23.104.0.1:50548 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:31:07.413 00:05:04.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 06:31:07.417 00:05:04.910 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 06:35:09.987 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:37950 10 6452 1 2025-12-04 06:35:52.621 00:00:10.827 TCP 23.104.0.1:42294 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:36:10.183 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48014 10 6452 1 2025-12-04 06:36:55.720 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 06:36:55.889 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 06:36:53.490 00:00:10.361 TCP 23.104.0.1:38318 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:37:10.400 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:54726 10 6452 1 2025-12-04 06:37:53.891 00:00:10.603 TCP 23.104.0.1:56912 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:38:10.579 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54798 10 6452 1 2025-12-04 06:38:54.539 00:00:10.362 TCP 23.104.0.1:49798 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:39:10.786 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36556 10 6452 1 2025-12-04 06:39:54.944 00:00:10.376 TCP 23.104.0.1:47558 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:40:10.959 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58334 10 6452 1 2025-12-04 06:40:55.369 00:00:10.363 TCP 23.104.0.1:52464 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:37:07.418 00:05:04.909 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 06:37:07.416 00:05:04.914 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 06:41:11.189 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42424 10 6452 1 2025-12-04 06:41:55.897 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 06:41:55.898 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 06:41:55.767 00:00:10.612 TCP 23.104.0.1:43356 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:42:11.402 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59458 10 6452 1 2025-12-04 06:42:56.412 00:00:10.361 TCP 23.104.0.1:36094 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:43:11.613 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43470 10 6452 1 2025-12-04 06:43:56.804 00:00:10.363 TCP 23.104.0.1:34284 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:44:11.802 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54658 10 6452 1 2025-12-04 06:44:57.207 00:00:10.348 TCP 23.104.0.1:37678 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:45:12.010 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52176 10 6452 1 2025-12-04 06:45:57.606 00:00:10.347 TCP 23.104.0.1:41726 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:46:12.221 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34132 10 6452 1 2025-12-04 06:46:55.930 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 06:46:56.132 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 06:46:57.986 00:00:10.370 TCP 23.104.0.1:40830 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:43:07.422 00:05:04.907 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 06:43:07.418 00:05:04.912 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 06:47:12.435 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49210 10 6452 1 2025-12-04 06:47:58.394 00:00:10.372 TCP 23.104.0.1:49112 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:48:12.647 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51402 10 6452 1 2025-12-04 06:48:58.804 00:00:10.369 TCP 23.104.0.1:44896 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:49:12.863 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37254 10 6452 1 2025-12-04 06:49:59.211 00:00:10.374 TCP 23.104.0.1:37594 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:50:13.090 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57970 10 6452 1 2025-12-04 06:50:59.624 00:00:10.369 TCP 23.104.0.1:34896 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:51:13.263 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49658 10 6452 1 2025-12-04 06:51:55.939 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 06:51:56.207 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 06:52:00.030 00:00:10.522 TCP 23.104.0.1:57778 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:52:13.472 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58116 10 6452 1 2025-12-04 06:53:00.589 00:00:10.366 TCP 23.104.0.1:49252 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:49:07.422 00:05:04.906 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 06:49:07.421 00:05:04.911 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 06:53:13.685 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46166 10 6452 1 2025-12-04 06:54:00.991 00:00:10.370 TCP 23.104.0.1:58608 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:54:13.859 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:40994 10 6452 1 2025-12-04 06:55:01.398 00:00:10.326 TCP 23.104.0.1:43726 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:55:14.099 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51884 10 6452 1 2025-12-04 06:56:01.770 00:00:10.329 TCP 23.104.0.1:45704 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:56:14.310 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36828 10 6452 1 2025-12-04 06:56:55.958 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 06:56:56.144 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 06:57:02.138 00:00:10.363 TCP 23.104.0.1:54898 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:57:14.522 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55324 10 6452 1 2025-12-04 06:58:02.536 00:00:10.367 TCP 23.104.0.1:43390 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:58:14.696 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57058 10 6452 1 Summary: total flows: 163, total bytes: 501179, total packets: 1567, avg bps: 1055, avg pps: 0, avg bpp: 319 Time window: 2025-12-04 05:55:07 - 2025-12-04 06:58:24 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0056s User: 0.0011s Wall: 0.0030s flows/second: 54045.2 Runtime: 0.0030s