Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 12:58:50.077 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40856 10 6452 1 2025-12-04 12:55:07.554 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 12:55:07.551 00:05:04.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 12:59:32.210 00:00:10.365 TCP 23.104.0.1:45118 -> 1.101.0.1:3000 11 1507 1 2025-12-04 12:59:50.302 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52130 10 6452 1 2025-12-04 13:00:32.617 00:00:10.366 TCP 23.104.0.1:51204 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:00:50.511 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57004 10 6452 1 2025-12-04 13:01:33.021 00:00:10.365 TCP 23.104.0.1:42328 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:01:50.725 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49806 10 6452 1 2025-12-04 13:02:03.718 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 13:02:03.453 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 13:02:33.423 00:00:10.363 TCP 23.104.0.1:51838 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:02:50.940 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34348 10 6452 1 2025-12-04 13:03:33.827 00:00:10.391 TCP 23.104.0.1:39190 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:03:51.170 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49742 10 6452 1 2025-12-04 13:04:34.259 00:00:11.999 TCP 23.104.0.1:41500 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:04:51.373 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46208 10 6452 1 2025-12-04 13:01:07.553 00:05:04.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 13:01:07.556 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 13:05:36.300 00:00:10.323 TCP 23.104.0.1:34640 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:05:51.586 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57806 10 6452 1 2025-12-04 13:06:36.665 00:00:10.326 TCP 23.104.0.1:51592 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:06:51.766 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37568 10 6452 1 2025-12-04 13:07:03.633 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 13:07:03.551 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 13:07:37.029 00:00:10.364 TCP 23.104.0.1:51564 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:07:51.973 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40928 10 6452 1 2025-12-04 13:08:37.429 00:00:10.366 TCP 23.104.0.1:53908 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:08:52.155 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59198 10 6452 1 2025-12-04 13:09:37.833 00:00:10.387 TCP 23.104.0.1:49502 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:09:52.371 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43462 10 6452 1 2025-12-04 13:10:38.258 00:00:10.327 TCP 23.104.0.1:54332 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:10:52.546 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59300 10 6452 1 2025-12-04 13:07:07.556 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 13:07:07.554 00:05:04.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 13:11:38.628 00:00:10.364 TCP 23.104.0.1:34940 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:12:03.651 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 13:12:03.676 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 13:11:52.771 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49678 10 6452 1 2025-12-04 13:12:39.028 00:00:10.375 TCP 23.104.0.1:42770 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:12:52.987 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47644 10 6452 1 2025-12-04 13:13:39.440 00:00:10.370 TCP 23.104.0.1:45798 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:13:53.223 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47164 10 6452 1 2025-12-04 13:14:39.845 00:00:10.385 TCP 23.104.0.1:57524 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:14:53.430 00:00:12.462 TCP 1.101.0.1:3000 -> 22.102.0.1:52970 12 6556 1 2025-12-04 13:15:40.268 00:00:10.366 TCP 23.104.0.1:45736 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:15:55.937 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34772 10 6452 1 2025-12-04 13:16:40.669 00:00:10.331 TCP 23.104.0.1:52878 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:17:03.938 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 13:17:03.853 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 13:16:56.172 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33728 10 6452 1 2025-12-04 13:13:07.556 00:05:04.917 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 13:13:07.560 00:05:04.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 13:17:41.060 00:00:10.323 TCP 23.104.0.1:59334 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:17:56.394 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36520 10 6452 1 2025-12-04 13:18:41.422 00:00:10.372 TCP 23.104.0.1:36940 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:18:56.606 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60716 10 6452 1 2025-12-04 13:19:41.826 00:00:10.323 TCP 23.104.0.1:46892 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:19:56.826 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44776 10 6452 1 2025-12-04 13:20:42.191 00:00:10.364 TCP 23.104.0.1:40476 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:20:57.039 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49562 10 6452 1 2025-12-04 13:21:42.596 00:00:10.328 TCP 23.104.0.1:49414 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:22:03.893 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 13:22:03.919 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 13:21:57.262 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56956 10 6452 1 2025-12-04 13:22:42.958 00:00:10.363 TCP 23.104.0.1:48678 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:22:57.483 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36964 10 6452 1 2025-12-04 13:19:07.560 00:05:04.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 13:19:07.558 00:05:04.917 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 13:23:43.362 00:00:10.365 TCP 23.104.0.1:44244 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:23:57.663 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43820 10 6452 1 2025-12-04 13:24:43.768 00:00:10.369 TCP 23.104.0.1:50892 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:24:57.880 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49026 10 6452 1 2025-12-04 13:25:44.170 00:00:10.369 TCP 23.104.0.1:33590 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:25:58.098 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57710 10 6452 1 2025-12-04 13:26:44.579 00:00:10.367 TCP 23.104.0.1:45750 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:27:04.423 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 13:27:04.364 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 13:26:58.313 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34598 10 6452 1 2025-12-04 13:27:44.980 00:00:10.370 TCP 23.104.0.1:47472 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:27:58.504 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53836 10 6452 1 2025-12-04 13:28:45.387 00:00:10.325 TCP 23.104.0.1:40118 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:28:58.714 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:48380 10 6452 1 2025-12-04 13:25:07.558 00:05:04.918 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 13:25:07.561 00:05:04.912 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 13:29:45.751 00:00:10.335 TCP 23.104.0.1:41498 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:29:58.997 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:41292 10 6452 1 2025-12-04 13:30:46.125 00:00:10.322 TCP 23.104.0.1:60840 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:30:59.183 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33136 10 6452 1 2025-12-04 13:31:46.489 00:00:10.367 TCP 23.104.0.1:50010 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:32:04.436 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 13:32:04.489 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 13:31:59.400 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54134 10 6452 1 2025-12-04 13:32:46.892 00:00:10.365 TCP 23.104.0.1:33326 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:32:59.627 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57410 10 6452 1 2025-12-04 13:33:47.297 00:00:10.364 TCP 23.104.0.1:60862 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:33:59.843 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35918 10 6452 1 2025-12-04 13:34:47.703 00:00:10.365 TCP 23.104.0.1:42624 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:35:00.082 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50394 10 6452 1 2025-12-04 13:31:07.559 00:05:04.918 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 13:31:07.562 00:05:04.913 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 13:35:48.109 00:00:10.366 TCP 23.104.0.1:49596 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:36:00.295 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51334 10 6452 1 2025-12-04 13:36:48.514 00:00:10.365 TCP 23.104.0.1:32814 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:37:04.450 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 13:37:04.455 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 13:37:00.508 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42548 10 6452 1 2025-12-04 13:37:48.914 00:00:10.367 TCP 23.104.0.1:52712 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:38:00.682 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45196 10 6452 1 2025-12-04 13:38:49.318 00:00:10.375 TCP 23.104.0.1:55554 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:39:00.896 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36684 10 6452 1 2025-12-04 13:39:49.732 00:00:10.371 TCP 23.104.0.1:33078 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:40:01.116 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53626 10 6452 1 2025-12-04 13:40:50.137 00:00:10.332 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:37:07.564 00:05:04.913 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 13:41:01.330 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53870 10 6452 1 2025-12-04 13:37:07.561 00:05:04.918 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 13:41:50.506 00:00:10.368 TCP 23.104.0.1:46616 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:42:04.401 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 13:42:04.417 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 13:42:01.546 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48222 10 6452 1 2025-12-04 13:42:50.911 00:00:10.362 TCP 23.104.0.1:49878 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:43:01.723 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33964 10 6452 1 2025-12-04 13:43:51.311 00:00:10.375 TCP 23.104.0.1:37524 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:44:01.949 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:46530 10 6452 1 2025-12-04 13:44:51.728 00:00:10.329 TCP 23.104.0.1:58574 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:45:02.189 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36560 10 6452 1 2025-12-04 13:45:52.105 00:00:10.387 TCP 23.104.0.1:43536 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:46:02.417 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60542 10 6452 1 2025-12-04 13:47:04.613 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 13:46:52.533 00:00:10.324 TCP 23.104.0.1:47470 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:47:04.548 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 13:47:02.632 00:00:10.294 TCP 1.101.0.1:3000 -> 22.102.0.1:52778 10 6452 1 2025-12-04 13:43:07.561 00:05:04.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 13:43:07.565 00:05:04.913 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 13:47:52.897 00:00:10.400 TCP 23.104.0.1:55146 -> 1.101.0.1:3000 15 1926 1 2025-12-04 13:48:02.965 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:43978 12 10375 1 2025-12-04 13:48:53.337 00:00:10.363 TCP 23.104.0.1:40914 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:49:03.219 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48746 10 6452 1 2025-12-04 13:49:53.750 00:00:10.373 TCP 23.104.0.1:38098 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:50:03.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50836 10 6452 1 2025-12-04 13:50:54.163 00:00:10.984 TCP 23.104.0.1:53850 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:51:03.652 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48222 10 6452 1 2025-12-04 13:52:04.544 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 13:51:55.178 00:00:10.372 TCP 23.104.0.1:46200 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:52:04.480 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 13:52:03.871 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45264 10 6452 1 2025-12-04 13:52:55.582 00:00:10.369 TCP 23.104.0.1:57540 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:49:07.565 00:05:04.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 13:49:07.563 00:05:04.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 13:53:04.072 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46764 10 6452 1 2025-12-04 13:53:55.990 00:00:10.366 TCP 23.104.0.1:42768 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:54:04.291 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55134 10 6452 1 2025-12-04 13:54:56.397 00:00:10.366 TCP 23.104.0.1:48606 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:55:04.508 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45890 10 6452 1 2025-12-04 13:55:56.804 00:00:10.368 TCP 23.104.0.1:59098 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:56:04.730 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:48278 10 6452 1 2025-12-04 13:57:04.767 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 13:57:04.829 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 13:56:57.209 00:00:10.366 TCP 23.104.0.1:49730 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:57:04.907 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55034 10 6452 1 2025-12-04 13:57:57.611 00:00:10.364 TCP 23.104.0.1:49738 -> 1.101.0.1:3000 11 1507 1 2025-12-04 13:58:05.122 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51802 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1058, avg pps: 0, avg bpp: 319 Time window: 2025-12-04 12:55:07 - 2025-12-04 13:58:15 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0019s Wall: 0.0027s flows/second: 60846.5 Runtime: 0.0027s