Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 23:58:43.529 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40010 10 6452 1 2025-12-04 23:55:07.740 00:05:04.931 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 23:55:07.742 00:05:04.926 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 23:59:32.355 00:00:10.362 TCP 23.104.0.1:54864 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:59:43.740 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40808 10 6452 1 2025-12-05 00:00:32.757 00:00:10.376 TCP 23.104.0.1:39030 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:00:43.951 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57568 10 6452 1 2025-12-05 00:01:33.171 00:00:10.371 TCP 23.104.0.1:55564 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:01:44.186 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38962 10 6452 1 2025-12-05 00:02:16.713 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 00:02:16.918 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 00:02:33.580 00:00:10.325 TCP 23.104.0.1:57480 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:02:44.382 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32962 10 6452 1 2025-12-05 00:03:33.947 00:00:10.368 TCP 23.104.0.1:47198 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:03:44.598 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45452 10 6452 1 2025-12-05 00:04:34.351 00:00:10.367 TCP 23.104.0.1:56056 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:04:44.814 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44020 10 6452 1 2025-12-05 00:01:07.744 00:05:04.928 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 00:01:07.741 00:05:04.933 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 00:05:34.755 00:00:10.534 TCP 23.104.0.1:59254 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:05:45.042 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57020 10 6452 1 2025-12-05 00:06:35.331 00:00:10.366 TCP 23.104.0.1:42204 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:06:45.211 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47720 10 6452 1 2025-12-05 00:07:16.678 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 00:07:16.992 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 00:07:35.730 00:00:10.370 TCP 23.104.0.1:51184 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:07:45.422 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37690 10 6452 1 2025-12-05 00:08:36.135 00:00:10.362 TCP 23.104.0.1:40806 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:08:45.635 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52488 10 6452 1 2025-12-05 00:09:36.534 00:00:10.326 TCP 23.104.0.1:38004 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:09:45.846 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47262 10 6452 1 2025-12-05 00:10:36.899 00:00:10.373 TCP 23.104.0.1:49048 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:10:46.042 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60286 10 6452 1 2025-12-05 00:07:07.741 00:05:04.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 00:07:07.744 00:05:04.932 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 00:11:37.310 00:00:10.361 TCP 23.104.0.1:54704 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:11:46.248 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39922 10 6452 1 2025-12-05 00:12:16.918 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 00:12:16.993 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 00:12:37.710 00:00:10.357 TCP 23.104.0.1:57600 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:12:46.421 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33646 10 6452 1 2025-12-05 00:13:38.108 00:00:10.366 TCP 23.104.0.1:37286 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:13:46.637 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55868 10 6452 1 2025-12-05 00:14:38.517 00:00:10.363 TCP 23.104.0.1:52708 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:14:46.810 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60064 10 6452 1 2025-12-05 00:15:38.920 00:00:10.389 TCP 23.104.0.1:49754 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:15:47.041 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46568 10 6452 1 2025-12-05 00:16:39.350 00:00:10.322 TCP 23.104.0.1:58460 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:16:47.218 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60738 10 6452 1 2025-12-05 00:17:16.965 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 00:13:07.746 00:05:04.931 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 00:13:07.744 00:05:04.936 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 00:17:17.182 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 00:17:39.709 00:00:10.370 TCP 23.104.0.1:41412 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:17:47.388 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47040 10 6452 1 2025-12-05 00:18:40.116 00:00:10.368 TCP 23.104.0.1:44486 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:18:47.601 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38950 10 6452 1 2025-12-05 00:19:40.524 00:00:10.371 TCP 23.104.0.1:53588 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:19:47.773 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46408 10 6452 1 2025-12-05 00:20:40.938 00:00:10.383 TCP 23.104.0.1:51750 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:20:47.991 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45968 10 6452 1 2025-12-05 00:21:41.370 00:00:10.372 TCP 23.104.0.1:44536 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:21:48.215 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56528 10 6452 1 2025-12-05 00:22:17.274 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 00:22:17.313 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 00:22:41.781 00:00:10.377 TCP 23.104.0.1:42260 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:22:48.423 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50994 10 6452 1 2025-12-05 00:19:07.746 00:05:04.936 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 00:19:07.747 00:05:04.930 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 00:23:42.200 00:00:10.365 TCP 23.104.0.1:48574 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:23:48.638 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50656 10 6452 1 2025-12-05 00:24:42.601 00:00:10.364 TCP 23.104.0.1:39286 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:24:48.856 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58720 10 6452 1 2025-12-05 00:25:43.004 00:00:10.339 TCP 23.104.0.1:35178 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:25:49.085 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60110 10 6452 1 2025-12-05 00:26:43.383 00:00:10.367 TCP 23.104.0.1:56346 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:26:49.301 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60106 10 6452 1 2025-12-05 00:27:17.285 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 00:27:17.233 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 00:27:43.788 00:00:10.368 TCP 23.104.0.1:59876 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:27:49.523 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33296 10 6452 1 2025-12-05 00:28:44.199 00:00:10.361 TCP 23.104.0.1:37776 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:28:49.742 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41718 10 6452 1 2025-12-05 00:25:07.749 00:05:04.932 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 00:25:07.746 00:05:04.936 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 00:29:44.601 00:00:10.362 TCP 23.104.0.1:59962 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:29:49.955 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54530 12 6556 1 2025-12-05 00:30:45.002 00:00:10.358 TCP 23.104.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:30:50.194 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60800 10 6452 1 2025-12-05 00:31:45.397 00:00:10.325 TCP 23.104.0.1:60102 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:31:50.413 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38118 10 6452 1 2025-12-05 00:32:17.639 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 00:32:17.540 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 00:32:45.761 00:00:10.366 TCP 23.104.0.1:47596 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:32:50.643 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60990 10 6452 1 2025-12-05 00:33:46.167 00:00:10.424 TCP 23.104.0.1:34170 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:33:50.820 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58794 10 6452 1 2025-12-05 00:34:46.634 00:00:10.367 TCP 23.104.0.1:40590 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:34:51.060 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48642 10 6452 1 2025-12-05 00:31:07.749 00:05:04.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 00:31:07.746 00:05:04.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 00:35:51.228 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36834 10 6452 1 2025-12-05 00:35:47.036 00:00:10.366 TCP 23.104.0.1:42784 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:36:47.441 00:00:10.364 TCP 23.104.0.1:44114 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:36:51.447 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47226 10 6452 1 2025-12-05 00:37:17.634 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 00:37:17.643 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 00:37:47.841 00:00:10.391 TCP 23.104.0.1:41990 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:37:51.659 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47934 10 6452 1 2025-12-05 00:38:48.268 00:00:10.374 TCP 23.104.0.1:34624 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:38:51.871 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43854 10 6452 1 2025-12-05 00:39:48.680 00:00:10.326 TCP 23.104.0.1:39696 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:39:52.094 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39662 10 6452 1 2025-12-05 00:40:49.053 00:00:10.366 TCP 23.104.0.1:37244 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:40:52.265 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34878 10 6452 1 2025-12-05 00:37:07.751 00:05:04.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 00:37:07.748 00:05:04.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 00:41:49.460 00:00:10.322 TCP 23.104.0.1:36868 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:41:52.481 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58912 10 6452 1 2025-12-05 00:42:17.782 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 00:42:17.639 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 00:42:49.822 00:00:10.368 TCP 23.104.0.1:60118 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:42:52.691 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44490 10 6452 1 2025-12-05 00:43:50.229 00:00:10.362 TCP 23.104.0.1:43802 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:43:52.899 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52452 10 6452 1 2025-12-05 00:44:50.629 00:00:10.384 TCP 23.104.0.1:46224 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:44:53.114 00:00:11.117 TCP 1.101.0.1:3000 -> 22.102.0.1:50210 10 6452 1 2025-12-05 00:45:51.063 00:00:10.376 TCP 23.104.0.1:33922 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:45:54.271 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49282 10 6452 1 2025-12-05 00:46:51.471 00:00:10.374 TCP 23.104.0.1:60040 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:46:54.488 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33864 10 6452 1 2025-12-05 00:43:07.752 00:05:04.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 00:43:07.750 00:05:04.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 00:47:17.586 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 00:47:17.747 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 00:47:51.883 00:00:10.382 TCP 23.104.0.1:55184 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:47:54.706 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49930 10 6452 1 2025-12-05 00:48:52.305 00:00:10.388 TCP 23.104.0.1:51782 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:48:54.923 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:46692 10 6452 1 2025-12-05 00:49:52.749 00:00:10.375 TCP 23.104.0.1:33158 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:49:55.163 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48962 10 6452 1 2025-12-05 00:50:53.161 00:00:16.097 TCP 23.104.0.1:47322 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:50:55.385 00:00:13.779 TCP 1.101.0.1:3000 -> 22.102.0.1:37708 10 6452 1 2025-12-05 00:51:59.313 00:00:10.368 TCP 23.104.0.1:34370 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:51:59.221 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49472 10 6452 1 2025-12-05 00:52:18.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 00:52:17.771 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 00:52:59.718 00:00:10.453 TCP 23.104.0.1:47270 -> 1.101.0.1:3000 15 1926 1 2025-12-05 00:52:59.437 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34022 12 10369 1 2025-12-05 00:49:07.751 00:05:04.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 00:49:07.755 00:05:04.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 00:54:00.208 00:00:10.364 TCP 23.104.0.1:41266 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:53:59.647 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60568 10 6452 1 2025-12-05 00:55:00.609 00:00:10.322 TCP 23.104.0.1:46026 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:54:59.862 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:49184 10 6452 1 2025-12-05 00:56:00.096 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41606 10 6452 1 2025-12-05 00:56:00.969 00:00:10.329 TCP 23.104.0.1:38058 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:57:01.340 00:00:10.368 TCP 23.104.0.1:45498 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:57:00.316 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33940 10 6452 1 2025-12-05 00:57:17.761 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 00:57:17.870 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 00:58:00.543 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51838 10 6452 1 2025-12-05 00:58:01.746 00:00:10.371 TCP 23.104.0.1:32802 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 501281, total packets: 1569, avg bps: 1059, avg pps: 0, avg bpp: 319 Time window: 2025-12-04 23:55:07 - 2025-12-05 00:58:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0085s User: 0.0032s Wall: 0.0029s flows/second: 56052.4 Runtime: 0.0029s