Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 04:58:53.807 00:00:10.370 TCP 23.104.0.1:55648 -> 1.101.0.1:3000 11 1507 1 2025-12-05 04:55:07.831 00:05:04.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 04:55:07.829 00:05:04.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 04:59:14.345 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57852 10 6452 1 2025-12-05 04:59:54.216 00:00:10.366 TCP 23.104.0.1:46380 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:00:14.559 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:33096 10 6452 1 2025-12-05 05:00:54.618 00:00:10.365 TCP 23.104.0.1:56278 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:01:14.746 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39890 10 6452 1 2025-12-05 05:01:55.017 00:00:10.367 TCP 23.104.0.1:57880 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:02:22.691 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 05:02:14.987 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:32788 10 6452 1 2025-12-05 05:02:22.992 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 05:02:55.421 00:00:10.373 TCP 23.104.0.1:51786 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:03:15.224 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38794 10 6452 1 2025-12-05 05:03:55.835 00:00:10.343 TCP 23.104.0.1:46654 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:04:15.440 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52096 10 6452 1 2025-12-05 05:04:56.218 00:00:10.363 TCP 23.104.0.1:43584 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:01:07.829 00:05:04.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 05:01:07.833 00:05:04.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 05:05:15.653 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38300 10 6452 1 2025-12-05 05:05:56.621 00:00:10.335 TCP 23.104.0.1:58786 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:06:15.868 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37382 10 6452 1 2025-12-05 05:06:56.996 00:00:10.372 TCP 23.104.0.1:49788 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:07:16.065 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51304 10 6452 1 2025-12-05 05:07:22.831 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 05:07:22.846 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 05:07:57.404 00:00:10.369 TCP 23.104.0.1:45778 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:08:16.289 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48650 10 6452 1 2025-12-05 05:08:57.810 00:00:10.373 TCP 23.104.0.1:46684 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:09:16.515 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51842 10 6452 1 2025-12-05 05:09:58.221 00:00:10.365 TCP 23.104.0.1:57366 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:10:16.739 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50096 10 6452 1 2025-12-05 05:10:58.622 00:00:10.370 TCP 23.104.0.1:43298 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:07:07.832 00:05:04.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 05:07:07.830 00:05:04.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 05:11:16.958 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49988 10 6452 1 2025-12-05 05:11:59.036 00:00:10.367 TCP 23.104.0.1:49944 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:12:22.972 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 05:12:22.978 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 05:12:17.192 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35120 10 6452 1 2025-12-05 05:12:59.439 00:00:10.366 TCP 23.104.0.1:34122 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:13:17.412 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35316 10 6452 1 2025-12-05 05:13:59.846 00:00:10.385 TCP 23.104.0.1:57104 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:14:17.624 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49490 10 6452 1 2025-12-05 05:15:00.269 00:00:10.367 TCP 23.104.0.1:58750 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:15:17.835 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59106 10 6452 1 2025-12-05 05:16:00.674 00:00:10.375 TCP 23.104.0.1:56372 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:16:18.010 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32782 10 6452 1 2025-12-05 05:17:01.114 00:00:10.367 TCP 23.104.0.1:48836 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:13:07.831 00:05:04.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 05:13:07.833 00:05:04.940 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 05:17:23.137 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 05:17:23.108 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 05:17:18.232 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50730 10 6452 1 2025-12-05 05:18:01.517 00:00:10.366 TCP 23.104.0.1:54752 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:18:18.403 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38044 10 6452 1 2025-12-05 05:19:01.921 00:00:10.380 TCP 23.104.0.1:55976 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:19:18.621 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36918 10 6452 1 2025-12-05 05:20:02.344 00:00:10.333 TCP 23.104.0.1:46676 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:20:18.840 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36862 10 6452 1 2025-12-05 05:21:02.719 00:00:10.369 TCP 23.104.0.1:40964 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:21:19.074 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40810 10 6452 1 2025-12-05 05:22:03.127 00:00:10.367 TCP 23.104.0.1:45792 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:22:23.153 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 05:22:22.982 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 05:22:19.284 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51890 10 6452 1 2025-12-05 05:19:07.832 00:05:04.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 05:23:03.528 00:00:10.357 TCP 23.104.0.1:47224 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:19:07.835 00:05:04.941 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 05:23:19.508 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47156 10 6452 1 2025-12-05 05:24:03.927 00:00:10.350 TCP 23.104.0.1:40298 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:24:19.684 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53138 10 6452 1 2025-12-05 05:25:04.314 00:00:10.363 TCP 23.104.0.1:55962 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:25:19.908 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47518 10 6452 1 2025-12-05 05:26:04.718 00:00:10.343 TCP 23.104.0.1:60328 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:26:20.116 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35690 10 6452 1 2025-12-05 05:27:05.105 00:00:10.370 TCP 23.104.0.1:53018 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:27:23.337 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 05:27:23.268 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 05:27:20.328 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48966 10 6452 1 2025-12-05 05:28:05.508 00:00:10.428 TCP 23.104.0.1:36942 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:28:20.537 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53474 10 6452 1 2025-12-05 05:25:07.835 00:05:04.948 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 05:29:05.977 00:00:10.374 TCP 23.104.0.1:54936 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:25:07.837 00:05:04.942 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 05:29:20.705 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40626 10 6452 1 2025-12-05 05:30:06.389 00:00:10.369 TCP 23.104.0.1:53422 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:30:20.917 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55648 10 6452 1 2025-12-05 05:31:06.796 00:00:14.078 TCP 23.104.0.1:48670 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:31:21.156 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33270 10 6452 1 2025-12-05 05:32:10.945 00:00:10.330 TCP 23.104.0.1:46084 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:32:23.429 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 05:32:23.416 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 05:32:21.370 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38114 10 6452 1 2025-12-05 05:33:11.315 00:00:10.363 TCP 23.104.0.1:42714 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:33:21.579 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:48544 10 6452 1 2025-12-05 05:34:11.719 00:00:10.326 TCP 23.104.0.1:40028 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:34:21.762 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57904 10 6452 1 2025-12-05 05:31:07.836 00:05:04.950 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 05:31:07.838 00:05:04.945 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 05:35:12.109 00:00:10.363 TCP 23.104.0.1:57108 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:35:21.981 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55480 10 6452 1 2025-12-05 05:36:12.513 00:00:10.473 TCP 23.104.0.1:46056 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:36:22.215 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55220 10 6452 1 2025-12-05 05:37:23.571 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 05:37:13.026 00:00:10.325 TCP 23.104.0.1:54978 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:37:23.655 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 05:37:22.430 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47060 10 6452 1 2025-12-05 05:38:13.386 00:00:10.440 TCP 23.104.0.1:34076 -> 1.101.0.1:3000 15 1926 1 2025-12-05 05:38:22.651 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38282 12 10375 1 2025-12-05 05:39:13.868 00:00:10.326 TCP 23.104.0.1:48554 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:39:22.885 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41282 10 6452 1 2025-12-05 05:40:14.237 00:00:10.361 TCP 23.104.0.1:52564 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:40:23.091 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36810 10 6452 1 2025-12-05 05:37:07.839 00:05:04.946 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 05:37:07.838 00:05:04.951 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 05:41:14.637 00:00:10.945 TCP 23.104.0.1:52860 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:41:23.309 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54976 10 6452 1 2025-12-05 05:42:23.464 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 05:42:15.620 00:00:10.369 TCP 23.104.0.1:60160 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:42:23.595 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 05:42:23.515 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36276 10 6452 1 2025-12-05 05:43:16.022 00:00:10.369 TCP 23.104.0.1:37740 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:43:23.685 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41646 10 6452 1 2025-12-05 05:44:16.429 00:00:10.378 TCP 23.104.0.1:48562 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:44:23.897 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50342 10 6452 1 2025-12-05 05:45:16.836 00:00:10.393 TCP 23.104.0.1:54216 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:45:24.111 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:53870 10 6452 1 2025-12-05 05:46:17.264 00:00:10.370 TCP 23.104.0.1:49584 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:46:24.318 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39630 10 6452 1 2025-12-05 05:43:07.842 00:05:04.946 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 05:43:07.838 00:05:04.951 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 05:47:23.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 05:47:23.850 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 05:47:17.675 00:00:10.326 TCP 23.104.0.1:49134 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:47:24.537 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60360 10 6452 1 2025-12-05 05:48:18.064 00:00:10.364 TCP 23.104.0.1:49404 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:48:24.749 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60058 10 6452 1 2025-12-05 05:49:18.471 00:00:10.326 TCP 23.104.0.1:36600 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:49:24.964 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33628 10 6452 1 2025-12-05 05:50:18.837 00:00:10.345 TCP 23.104.0.1:56256 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:50:25.198 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55612 10 6452 1 2025-12-05 05:51:19.225 00:00:10.597 TCP 23.104.0.1:48430 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:51:25.407 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53944 10 6452 1 2025-12-05 05:52:23.886 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 05:52:23.609 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 05:52:19.864 00:00:10.745 TCP 23.104.0.1:39260 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:52:25.580 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59914 10 6452 1 2025-12-05 05:49:07.842 00:05:04.947 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 05:49:07.840 00:05:04.952 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 05:53:20.651 00:00:10.327 TCP 23.104.0.1:51362 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:53:25.793 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38506 10 6452 1 2025-12-05 05:54:21.016 00:00:10.366 TCP 23.104.0.1:45034 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:54:26.010 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57864 10 6452 1 2025-12-05 05:55:21.426 00:00:10.364 TCP 23.104.0.1:43360 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:55:26.231 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 10 6452 1 2025-12-05 05:56:21.832 00:00:10.387 TCP 23.104.0.1:51424 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:56:26.402 00:00:10.718 TCP 1.101.0.1:3000 -> 22.102.0.1:52240 10 6452 1 2025-12-05 05:57:23.878 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 05:57:24.022 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 05:57:22.260 00:00:10.367 TCP 23.104.0.1:42816 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:57:27.162 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59316 10 6452 1 2025-12-05 05:58:22.673 00:00:10.363 TCP 23.104.0.1:58898 -> 1.101.0.1:3000 11 1507 1 2025-12-05 05:58:27.367 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51254 10 6452 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1055, avg pps: 0, avg bpp: 318 Time window: 2025-12-05 04:55:07 - 2025-12-05 05:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0050s User: 0.0012s Wall: 0.0042s flows/second: 39509.8 Runtime: 0.0042s