Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 03:58:44.222 00:00:10.894 TCP 1.101.0.1:3000 -> 22.102.0.1:49940 10 6452 1 2025-12-05 03:55:07.812 00:05:04.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 03:55:07.811 00:05:04.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 03:59:29.875 00:00:10.364 TCP 23.104.0.1:51534 -> 1.101.0.1:3000 11 1507 1 2025-12-05 03:59:45.156 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:40376 10 6452 1 2025-12-05 04:00:30.278 00:00:10.363 TCP 23.104.0.1:40230 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:00:45.330 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46734 10 6452 1 2025-12-05 04:01:30.681 00:00:10.365 TCP 23.104.0.1:52174 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:01:45.541 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45792 10 6452 1 2025-12-05 04:02:21.561 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 04:02:21.819 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 04:02:31.104 00:00:10.365 TCP 23.104.0.1:41648 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:02:45.751 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42218 10 6452 1 2025-12-05 04:03:31.507 00:00:10.438 TCP 23.104.0.1:50712 -> 1.101.0.1:3000 15 1926 1 2025-12-05 04:03:45.963 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45962 12 10375 1 2025-12-05 04:04:31.986 00:00:10.328 TCP 23.104.0.1:59996 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:04:46.185 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46812 10 6452 1 2025-12-05 04:01:07.812 00:05:04.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 04:01:07.815 00:05:04.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 04:05:32.352 00:00:10.320 TCP 23.104.0.1:59576 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:05:46.397 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56722 10 6452 1 2025-12-05 04:06:32.710 00:00:10.364 TCP 23.104.0.1:35986 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:06:46.614 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43056 10 6452 1 2025-12-05 04:07:21.575 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 04:07:21.686 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 04:07:33.119 00:00:10.365 TCP 23.104.0.1:43024 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:07:46.831 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43918 10 6452 1 2025-12-05 04:08:33.522 00:00:10.369 TCP 23.104.0.1:42354 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:08:47.006 00:00:10.865 TCP 1.101.0.1:3000 -> 22.102.0.1:60444 10 6452 1 2025-12-05 04:09:33.938 00:00:10.374 TCP 23.104.0.1:42500 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:09:47.910 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:45838 11 6504 1 2025-12-05 04:10:34.351 00:00:10.321 TCP 23.104.0.1:41732 -> 1.101.0.1:3000 12 1559 1 2025-12-05 04:10:48.176 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:60102 10 6452 1 2025-12-05 04:07:07.819 00:05:04.930 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 04:07:07.816 00:05:04.936 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 04:11:34.708 00:00:10.376 TCP 23.104.0.1:43038 -> 1.101.0.1:3000 12 1559 1 2025-12-05 04:11:48.364 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53888 10 6452 1 2025-12-05 04:12:21.894 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 04:12:21.743 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 04:12:35.114 00:00:10.377 TCP 23.104.0.1:43644 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:12:48.577 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56116 10 6452 1 2025-12-05 04:13:35.528 00:00:10.365 TCP 23.104.0.1:53464 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:13:48.797 00:00:10.290 TCP 1.101.0.1:3000 -> 22.102.0.1:35498 10 6452 1 2025-12-05 04:14:35.930 00:00:10.346 TCP 23.104.0.1:49564 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:14:49.126 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57380 10 6452 1 2025-12-05 04:15:36.311 00:00:10.368 TCP 23.104.0.1:53650 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:15:49.338 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50628 10 6452 1 2025-12-05 04:16:36.721 00:00:10.378 TCP 23.104.0.1:60398 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:16:49.545 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33414 10 6452 1 2025-12-05 04:13:07.820 00:05:04.931 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 04:13:07.817 00:05:04.935 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 04:17:21.741 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 04:17:21.708 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 04:17:37.138 00:00:10.373 TCP 23.104.0.1:37118 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:17:49.758 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45840 10 6452 1 2025-12-05 04:18:37.548 00:00:10.364 TCP 23.104.0.1:41854 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:18:49.966 00:00:10.792 TCP 1.101.0.1:3000 -> 22.102.0.1:46266 10 6452 1 2025-12-05 04:19:37.952 00:00:10.369 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:19:50.800 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57874 10 6452 1 2025-12-05 04:20:38.354 00:00:10.367 TCP 23.104.0.1:53582 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:20:51.011 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34518 10 6452 1 2025-12-05 04:21:38.755 00:00:10.385 TCP 23.104.0.1:36856 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:21:51.225 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36720 10 6452 1 2025-12-05 04:22:22.242 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 04:22:22.096 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 04:22:39.175 00:00:10.367 TCP 23.104.0.1:35596 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:22:51.407 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53540 10 6452 1 2025-12-05 04:19:07.819 00:05:04.935 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 04:19:07.821 00:05:04.930 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 04:23:39.578 00:00:10.370 TCP 23.104.0.1:59346 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:23:51.625 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53106 10 6452 1 2025-12-05 04:24:39.987 00:00:10.363 TCP 23.104.0.1:41648 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:24:51.839 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41444 10 6452 1 2025-12-05 04:25:40.388 00:00:10.326 TCP 23.104.0.1:33468 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:25:52.084 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56358 10 6452 1 2025-12-05 04:26:40.752 00:00:10.336 TCP 23.104.0.1:52792 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:26:52.302 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47932 10 6452 1 2025-12-05 04:27:22.146 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 04:27:22.145 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 04:27:41.125 00:00:10.362 TCP 23.104.0.1:40984 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:27:52.528 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49506 10 6452 1 2025-12-05 04:28:41.523 00:00:10.364 TCP 23.104.0.1:56842 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:28:52.738 00:00:15.909 TCP 1.101.0.1:3000 -> 22.102.0.1:46700 10 6452 1 2025-12-05 04:25:07.823 00:05:04.930 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 04:25:07.819 00:05:04.935 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 04:29:41.925 00:00:10.384 TCP 23.104.0.1:58336 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:29:58.699 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55598 10 6452 1 2025-12-05 04:30:42.349 00:00:10.324 TCP 23.104.0.1:34108 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:30:58.926 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:40812 10 6452 1 2025-12-05 04:31:42.718 00:00:10.376 TCP 23.104.0.1:54950 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:31:59.166 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60222 10 6452 1 2025-12-05 04:32:22.314 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 04:32:22.026 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 04:32:43.136 00:00:10.366 TCP 23.104.0.1:59754 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:32:59.391 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:50722 10 6452 1 2025-12-05 04:33:43.535 00:00:10.321 TCP 23.104.0.1:52840 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:33:59.573 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50246 10 6452 1 2025-12-05 04:34:43.898 00:00:10.378 TCP 23.104.0.1:36366 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:34:59.754 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43274 10 6452 1 2025-12-05 04:31:07.824 00:05:04.932 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 04:31:07.827 00:05:04.927 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 04:35:44.311 00:00:10.366 TCP 23.104.0.1:58412 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:35:59.973 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:58888 10 6452 1 2025-12-05 04:36:44.716 00:00:10.380 TCP 23.104.0.1:44768 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:37:00.216 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51558 10 6452 1 2025-12-05 04:37:22.326 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 04:37:22.148 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 04:37:45.138 00:00:10.365 TCP 23.104.0.1:32938 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:38:00.436 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:57210 12 10369 1 2025-12-05 04:38:45.545 00:00:10.402 TCP 23.104.0.1:57304 -> 1.101.0.1:3000 15 1926 1 2025-12-05 04:39:00.677 00:00:18.841 TCP 1.101.0.1:3000 -> 22.102.0.1:37690 10 6452 1 2025-12-05 04:39:45.991 00:00:10.375 TCP 23.104.0.1:53528 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:40:09.555 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36460 10 6452 1 2025-12-05 04:40:46.417 00:00:10.365 TCP 23.104.0.1:60666 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:37:07.828 00:05:04.928 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 04:37:07.825 00:05:04.934 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 04:41:09.767 00:00:10.936 TCP 1.101.0.1:3000 -> 22.102.0.1:57602 10 6452 1 2025-12-05 04:41:46.822 00:00:10.364 TCP 23.104.0.1:60938 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:42:22.502 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 04:42:10.747 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56158 10 6452 1 2025-12-05 04:42:22.354 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 04:42:47.224 00:00:10.371 TCP 23.104.0.1:58116 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:43:10.963 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47710 12 6556 1 2025-12-05 04:43:47.641 00:00:10.364 TCP 23.104.0.1:54272 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:44:11.193 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51464 10 6452 1 2025-12-05 04:44:48.054 00:00:10.366 TCP 23.104.0.1:35828 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:45:11.363 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38566 10 6452 1 2025-12-05 04:45:48.458 00:00:10.367 TCP 23.104.0.1:50000 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:46:11.591 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52522 11 6492 1 2025-12-05 04:46:48.860 00:00:10.368 TCP 23.104.0.1:43642 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:43:07.827 00:05:04.934 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 04:43:07.829 00:05:04.929 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 04:47:11.760 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36002 10 6452 1 2025-12-05 04:47:22.596 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 04:47:22.349 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 04:47:49.269 00:00:10.364 TCP 23.104.0.1:48678 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:48:11.977 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:49306 13 6608 1 2025-12-05 04:48:49.665 00:00:10.368 TCP 23.104.0.1:38284 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:49:12.260 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45658 10 6452 1 2025-12-05 04:49:50.096 00:00:10.361 TCP 23.104.0.1:53368 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:50:12.443 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48748 10 6452 1 2025-12-05 04:50:50.495 00:00:10.367 TCP 23.104.0.1:43894 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:51:12.656 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50408 10 6452 1 2025-12-05 04:51:50.898 00:00:10.534 TCP 23.104.0.1:57142 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:52:22.745 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 04:52:12.867 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:54804 10 6452 1 2025-12-05 04:52:22.595 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 04:52:51.467 00:00:10.325 TCP 23.104.0.1:53488 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:49:07.831 00:05:04.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 04:49:07.829 00:05:04.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 04:53:13.099 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39898 10 6452 1 2025-12-05 04:53:51.829 00:00:10.359 TCP 23.104.0.1:41094 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:54:13.276 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54150 10 6452 1 2025-12-05 04:54:52.225 00:00:10.366 TCP 23.104.0.1:56940 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:55:13.487 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42372 10 6452 1 2025-12-05 04:55:52.631 00:00:10.362 TCP 23.104.0.1:54198 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:56:13.699 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37598 10 6452 1 2025-12-05 04:56:53.031 00:00:10.326 TCP 23.104.0.1:54736 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:57:13.910 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52990 10 6452 1 2025-12-05 04:57:22.710 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 04:57:22.554 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 04:57:53.395 00:00:10.372 TCP 23.104.0.1:47172 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:58:14.120 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55296 10 6452 1 Summary: total flows: 163, total bytes: 505975, total packets: 1582, avg bps: 1066, avg pps: 0, avg bpp: 319 Time window: 2025-12-05 03:55:07 - 2025-12-05 04:58:24 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0055s User: 0.0009s Wall: 0.0022s flows/second: 73363.2 Runtime: 0.0022s