Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 02:59:05.177 00:00:10.369 TCP 23.104.0.1:56684 -> 1.101.0.1:3000 11 1507 1 2025-12-05 02:55:07.792 00:05:04.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 02:55:07.789 00:05:04.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 02:59:29.878 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46122 10 6452 1 2025-12-05 03:00:05.581 00:00:10.378 TCP 23.104.0.1:50834 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:00:30.100 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37770 10 6452 1 2025-12-05 03:01:05.995 00:00:10.362 TCP 23.104.0.1:47924 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:01:30.306 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38076 10 6452 1 2025-12-05 03:02:06.397 00:00:10.326 TCP 23.104.0.1:52990 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:02:20.384 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 03:02:20.481 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 03:02:30.518 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35994 10 6452 1 2025-12-05 03:03:06.759 00:00:10.379 TCP 23.104.0.1:40742 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:03:30.738 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58984 10 6452 1 2025-12-05 03:04:07.177 00:00:10.560 TCP 23.104.0.1:58600 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:04:30.952 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42416 10 6452 1 2025-12-05 03:01:07.799 00:05:04.928 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 03:01:07.796 00:05:04.933 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 03:05:07.772 00:00:10.377 TCP 23.104.0.1:41800 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:05:31.183 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59088 10 6452 1 2025-12-05 03:06:08.182 00:00:10.363 TCP 23.104.0.1:50084 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:06:31.402 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54814 10 6452 1 2025-12-05 03:07:20.549 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 03:07:08.583 00:00:10.324 TCP 23.104.0.1:37820 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:07:20.565 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 03:07:31.622 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58996 10 6452 1 2025-12-05 03:08:08.942 00:00:10.376 TCP 23.104.0.1:36908 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:08:31.836 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33024 10 6452 1 2025-12-05 03:09:09.357 00:00:10.365 TCP 23.104.0.1:60348 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:09:32.083 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33874 10 6452 1 2025-12-05 03:10:09.760 00:00:10.384 TCP 23.104.0.1:47622 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:10:32.299 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32772 10 6452 1 2025-12-05 03:07:07.797 00:05:04.933 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 03:07:07.799 00:05:04.929 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 03:11:10.177 00:00:10.366 TCP 23.104.0.1:35062 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:11:32.515 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38244 10 6452 1 2025-12-05 03:12:20.397 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 03:12:10.581 00:00:10.370 TCP 23.104.0.1:34592 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:12:20.615 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 03:12:32.727 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44786 10 6452 1 2025-12-05 03:13:10.982 00:00:10.371 TCP 23.104.0.1:57484 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:13:32.901 00:00:11.036 TCP 1.101.0.1:3000 -> 22.102.0.1:47356 10 6452 1 2025-12-05 03:14:11.389 00:00:10.372 TCP 23.104.0.1:36686 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:14:33.979 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43264 10 6452 1 2025-12-05 03:15:11.795 00:00:10.334 TCP 23.104.0.1:54520 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:15:34.208 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50170 10 6452 1 2025-12-05 03:16:12.166 00:00:10.361 TCP 23.104.0.1:55912 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:16:34.423 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49668 10 6452 1 2025-12-05 03:13:07.799 00:05:04.933 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 03:13:07.802 00:05:04.927 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 03:17:20.764 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 03:17:20.687 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 03:17:12.561 00:00:10.362 TCP 23.104.0.1:33954 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:17:34.640 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53604 10 6452 1 2025-12-05 03:18:12.958 00:00:10.326 TCP 23.104.0.1:46382 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:18:34.819 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50162 10 6452 1 2025-12-05 03:19:13.322 00:00:11.004 TCP 23.104.0.1:60914 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:19:35.039 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35700 10 6452 1 2025-12-05 03:20:14.363 00:00:10.324 TCP 23.104.0.1:40796 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:20:35.253 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47410 10 6452 1 2025-12-05 03:21:14.724 00:00:10.370 TCP 23.104.0.1:40328 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:21:35.467 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39822 10 6452 1 2025-12-05 03:22:20.835 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 03:22:20.770 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 03:22:15.134 00:00:10.377 TCP 23.104.0.1:40852 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:22:35.672 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39956 10 6452 1 2025-12-05 03:19:07.804 00:05:04.928 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 03:19:07.802 00:05:04.932 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 03:23:15.551 00:00:10.340 TCP 23.104.0.1:59306 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:23:35.888 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41056 10 6452 1 2025-12-05 03:24:15.935 00:00:10.374 TCP 23.104.0.1:57254 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:24:36.108 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44848 10 6452 1 2025-12-05 03:25:16.348 00:00:10.369 TCP 23.104.0.1:48604 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:25:36.319 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37978 10 6452 1 2025-12-05 03:26:16.754 00:00:10.385 TCP 23.104.0.1:38512 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:26:36.527 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42592 10 6452 1 2025-12-05 03:27:20.917 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 03:27:20.985 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 03:27:17.177 00:00:10.360 TCP 23.104.0.1:44438 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:27:36.747 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36920 10 6452 1 2025-12-05 03:28:17.580 00:00:10.368 TCP 23.104.0.1:42278 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:28:36.959 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40022 12 6556 1 2025-12-05 03:25:07.805 00:05:04.927 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 03:25:07.802 00:05:04.932 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 03:29:17.983 00:00:10.326 TCP 23.104.0.1:53682 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:29:37.198 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36364 10 6452 1 2025-12-05 03:30:18.352 00:00:10.323 TCP 23.104.0.1:51490 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:30:37.408 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47534 10 6452 1 2025-12-05 03:31:18.717 00:00:10.371 TCP 23.104.0.1:52640 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:31:37.629 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54576 10 6452 1 2025-12-05 03:32:20.925 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 03:32:20.962 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 03:32:19.127 00:00:10.365 TCP 23.104.0.1:53566 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:32:37.799 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54124 10 6452 1 2025-12-05 03:33:19.530 00:00:10.363 TCP 23.104.0.1:34094 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:33:38.017 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53766 10 6452 1 2025-12-05 03:34:19.937 00:00:10.380 TCP 23.104.0.1:33154 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:34:38.190 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51270 10 6452 1 2025-12-05 03:31:07.803 00:05:04.932 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 03:31:07.807 00:05:04.927 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 03:35:20.359 00:00:10.388 TCP 23.104.0.1:55036 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:35:38.405 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49656 10 6452 1 2025-12-05 03:36:20.790 00:00:10.361 TCP 23.104.0.1:38924 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:36:38.620 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35350 10 6452 1 2025-12-05 03:37:21.464 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 03:37:21.196 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 03:37:21.190 00:00:10.359 TCP 23.104.0.1:56592 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:37:38.832 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33666 10 6452 1 2025-12-05 03:38:21.591 00:00:10.368 TCP 23.104.0.1:51692 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:38:39.078 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42180 10 6452 1 2025-12-05 03:39:22.014 00:00:10.321 TCP 23.104.0.1:47028 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:39:39.292 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48448 10 6452 1 2025-12-05 03:40:22.373 00:00:10.365 TCP 23.104.0.1:48480 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:40:39.506 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37162 10 6452 1 2025-12-05 03:37:07.804 00:05:04.935 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 03:37:07.807 00:05:04.930 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 03:41:22.778 00:00:10.365 TCP 23.104.0.1:44270 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:41:39.720 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46412 10 6452 1 2025-12-05 03:42:21.051 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 03:42:20.975 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 03:42:23.182 00:00:10.328 TCP 23.104.0.1:48390 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:42:39.890 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38796 10 6452 1 2025-12-05 03:43:23.550 00:00:10.319 TCP 23.104.0.1:59308 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:43:40.111 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33676 10 6452 1 2025-12-05 03:44:23.911 00:00:10.363 TCP 23.104.0.1:44710 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:44:40.341 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40346 10 6452 1 2025-12-05 03:45:24.310 00:00:10.415 TCP 23.104.0.1:41808 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:45:40.517 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-12-05 03:46:24.766 00:00:10.330 TCP 23.104.0.1:41358 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:46:40.733 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:51974 10 6452 1 2025-12-05 03:43:07.808 00:05:04.929 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 03:43:07.806 00:05:04.935 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 03:47:21.214 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 03:47:21.538 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 03:47:25.136 00:00:10.324 TCP 23.104.0.1:34454 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:47:40.971 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43048 10 6452 1 2025-12-05 03:48:25.493 00:00:10.365 TCP 23.104.0.1:60760 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:48:41.216 00:00:10.577 TCP 1.101.0.1:3000 -> 22.102.0.1:58090 10 6452 1 2025-12-05 03:49:25.898 00:00:10.372 TCP 23.104.0.1:58152 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:49:41.836 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40156 10 6452 1 2025-12-05 03:50:26.312 00:00:10.324 TCP 23.104.0.1:59898 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:50:42.080 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56562 10 6452 1 2025-12-05 03:51:26.674 00:00:10.332 TCP 23.104.0.1:59924 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:51:42.290 00:00:10.267 TCP 1.101.0.1:3000 -> 22.102.0.1:60440 10 6452 1 2025-12-05 03:52:21.495 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 03:52:21.579 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 03:52:27.066 00:00:10.373 TCP 23.104.0.1:48270 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:52:42.597 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55130 10 6452 1 2025-12-05 03:49:07.813 00:05:04.929 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 03:49:07.810 00:05:04.934 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 03:53:27.480 00:00:10.440 TCP 23.104.0.1:37322 -> 1.101.0.1:3000 15 1926 1 2025-12-05 03:53:42.819 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41574 12 10375 1 2025-12-05 03:54:27.955 00:00:10.328 TCP 23.104.0.1:47094 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:54:43.040 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41366 10 6452 1 2025-12-05 03:55:28.319 00:00:10.366 TCP 23.104.0.1:42704 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:55:43.251 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53504 10 6452 1 2025-12-05 03:56:28.723 00:00:10.346 TCP 23.104.0.1:46156 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:56:43.464 00:00:10.482 TCP 1.101.0.1:3000 -> 22.102.0.1:38494 10 6452 1 2025-12-05 03:57:21.632 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 03:57:21.582 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 03:57:29.107 00:00:10.362 TCP 23.104.0.1:56124 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:57:43.989 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:35204 10 6452 1 2025-12-05 03:58:29.509 00:00:10.325 TCP 23.104.0.1:40268 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496342, total packets: 1570, avg bps: 1041, avg pps: 0, avg bpp: 316 Time window: 2025-12-05 02:55:07 - 2025-12-05 03:58:39 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0035s User: 0.0018s Wall: 0.0021s flows/second: 77982.4 Runtime: 0.0021s