Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 19:58:46.967 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32798 12 6556 1 2025-12-01 19:55:06.318 00:05:04.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 19:55:06.316 00:05:04.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 19:59:23.634 00:00:10.369 TCP 23.104.0.1:34374 -> 1.101.0.1:3000 11 1507 1 2025-12-01 19:59:47.184 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48312 10 6452 1 2025-12-01 20:00:24.054 00:00:10.369 TCP 23.104.0.1:57094 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:00:45.428 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 20:00:45.337 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:00:47.397 00:00:10.458 TCP 1.101.0.1:3000 -> 22.102.0.1:38150 10 6452 1 2025-12-01 20:01:24.467 00:00:10.365 TCP 23.104.0.1:53514 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:01:47.895 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49706 10 6452 1 2025-12-01 20:02:24.876 00:00:10.370 TCP 23.104.0.1:56854 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:02:48.114 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48718 10 6452 1 2025-12-01 20:03:25.288 00:00:10.363 TCP 23.104.0.1:48464 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:03:48.285 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45184 10 6452 1 2025-12-01 20:04:25.689 00:00:10.365 TCP 23.104.0.1:42858 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:04:48.510 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45194 10 6452 1 2025-12-01 20:01:06.319 00:05:04.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 20:01:06.322 00:05:04.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 20:05:26.106 00:00:10.518 TCP 23.104.0.1:34456 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:05:45.792 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 20:05:45.840 00:00:00.060 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:05:48.727 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42642 10 6452 1 2025-12-01 20:06:26.660 00:00:10.319 TCP 23.104.0.1:46640 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:06:48.946 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45910 10 6452 1 2025-12-01 20:07:27.023 00:00:10.365 TCP 23.104.0.1:41424 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:07:49.180 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54208 10 6452 1 2025-12-01 20:08:27.431 00:00:10.365 TCP 23.104.0.1:56486 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:08:49.394 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34880 10 6452 1 2025-12-01 20:09:27.836 00:00:10.355 TCP 23.104.0.1:38314 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:09:49.570 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54022 10 6452 1 2025-12-01 20:10:28.233 00:00:10.365 TCP 23.104.0.1:59318 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:10:45.638 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:10:45.525 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 20:10:49.796 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47866 10 6452 1 2025-12-01 20:07:06.318 00:05:04.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 20:07:06.323 00:05:04.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 20:11:28.636 00:00:10.324 TCP 23.104.0.1:33662 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:11:50.011 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50120 10 6452 1 2025-12-01 20:12:28.993 00:00:10.366 TCP 23.104.0.1:46248 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:12:50.225 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40314 10 6452 1 2025-12-01 20:13:29.395 00:00:10.368 TCP 23.104.0.1:52506 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:13:50.394 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44480 10 6452 1 2025-12-01 20:14:29.808 00:00:10.367 TCP 23.104.0.1:57310 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:14:50.609 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:56790 10 6452 1 2025-12-01 20:15:30.218 00:00:10.366 TCP 23.104.0.1:41622 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:15:45.787 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:15:45.807 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 20:15:50.813 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45794 10 6452 1 2025-12-01 20:16:30.624 00:00:10.377 TCP 23.104.0.1:60940 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:16:51.036 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44422 10 6452 1 2025-12-01 20:13:06.326 00:05:04.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 20:13:06.329 00:05:04.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 20:17:31.059 00:00:10.449 TCP 23.104.0.1:47866 -> 1.101.0.1:3000 15 1926 1 2025-12-01 20:17:51.248 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:34678 12 10369 1 2025-12-01 20:18:31.546 00:00:10.366 TCP 23.104.0.1:44562 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:18:51.489 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55218 10 6452 1 2025-12-01 20:19:31.950 00:00:10.365 TCP 23.104.0.1:55510 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:19:51.704 00:00:10.357 TCP 1.101.0.1:3000 -> 22.102.0.1:55574 10 6452 1 2025-12-01 20:20:45.764 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 20:20:45.896 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:20:32.356 00:00:10.363 TCP 23.104.0.1:43290 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:20:52.095 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57918 10 6452 1 2025-12-01 20:21:32.757 00:00:10.376 TCP 23.104.0.1:46932 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:21:52.268 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45022 10 6452 1 2025-12-01 20:22:33.168 00:00:10.441 TCP 23.104.0.1:53706 -> 1.101.0.1:3000 15 1926 1 2025-12-01 20:19:06.330 00:05:04.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 20:22:52.489 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:54664 12 10369 1 2025-12-01 20:19:06.329 00:05:04.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 20:23:33.646 00:00:10.362 TCP 23.104.0.1:56832 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:23:52.729 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42910 10 6452 1 2025-12-01 20:24:34.085 00:00:10.362 TCP 23.104.0.1:60130 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:24:52.945 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59204 10 6452 1 2025-12-01 20:25:45.994 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 20:25:34.488 00:00:10.321 TCP 23.104.0.1:39898 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:25:46.057 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:25:53.179 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:48000 10 6452 1 2025-12-01 20:26:34.850 00:00:10.384 TCP 23.104.0.1:36054 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:26:53.421 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47886 10 6452 1 2025-12-01 20:27:35.272 00:00:10.327 TCP 23.104.0.1:54422 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:27:53.590 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:57774 10 6452 1 2025-12-01 20:28:35.634 00:00:10.366 TCP 23.104.0.1:56298 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:28:53.794 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:39516 10 6452 1 2025-12-01 20:25:06.334 00:05:04.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 20:25:06.332 00:05:04.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 20:29:36.040 00:00:10.365 TCP 23.104.0.1:48740 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:29:53.979 00:00:11.596 TCP 1.101.0.1:3000 -> 22.102.0.1:44688 10 6452 1 2025-12-01 20:30:45.927 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:30:36.447 00:00:10.324 TCP 23.104.0.1:36962 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:30:45.732 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 20:30:55.626 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57484 10 6452 1 2025-12-01 20:31:36.810 00:00:10.330 TCP 23.104.0.1:35928 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:31:55.842 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43376 10 6452 1 2025-12-01 20:32:37.178 00:00:10.403 TCP 23.104.0.1:52006 -> 1.101.0.1:3000 15 1926 1 2025-12-01 20:32:56.079 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:34388 12 10369 1 2025-12-01 20:33:37.622 00:00:10.370 TCP 23.104.0.1:36472 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:33:56.326 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:35644 10 6452 1 2025-12-01 20:34:38.025 00:00:10.411 TCP 23.104.0.1:50964 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:31:06.336 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 20:34:56.510 00:00:10.693 TCP 1.101.0.1:3000 -> 22.102.0.1:44602 10 6452 1 2025-12-01 20:31:06.334 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 20:35:45.964 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 20:35:46.046 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:35:38.473 00:00:10.366 TCP 23.104.0.1:54920 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:35:57.243 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58764 10 6452 1 2025-12-01 20:36:38.879 00:00:10.392 TCP 23.104.0.1:40540 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:36:57.466 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55072 10 6452 1 2025-12-01 20:37:39.310 00:00:10.361 TCP 23.104.0.1:59540 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:37:57.685 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45110 10 6452 1 2025-12-01 20:38:39.709 00:00:10.339 TCP 23.104.0.1:56050 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:38:57.901 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45914 10 6452 1 2025-12-01 20:39:40.120 00:00:10.371 TCP 23.104.0.1:37064 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:39:58.150 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:32872 10 6452 1 2025-12-01 20:40:46.265 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 20:40:46.372 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:40:40.530 00:00:10.325 TCP 23.104.0.1:55420 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:37:06.338 00:05:04.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 20:37:06.337 00:05:04.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 20:40:58.359 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47614 10 6452 1 2025-12-01 20:41:40.891 00:00:10.378 TCP 23.104.0.1:60028 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:41:58.574 00:00:10.250 TCP 1.101.0.1:3000 -> 22.102.0.1:34574 10 6452 1 2025-12-01 20:42:41.304 00:00:10.365 TCP 23.104.0.1:45216 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:42:58.863 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39604 10 6452 1 2025-12-01 20:43:41.711 00:00:10.376 TCP 23.104.0.1:58652 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:43:59.092 00:00:10.791 TCP 1.101.0.1:3000 -> 22.102.0.1:59146 10 6452 1 2025-12-01 20:44:42.129 00:00:10.321 TCP 23.104.0.1:49756 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:44:59.922 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:33168 10 6452 1 2025-12-01 20:45:46.543 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:45:46.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 20:45:42.486 00:00:10.375 TCP 23.104.0.1:53474 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:46:00.174 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54002 10 6452 1 2025-12-01 20:46:42.899 00:00:10.331 TCP 23.104.0.1:53986 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:47:00.392 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60830 10 6452 1 2025-12-01 20:43:06.343 00:05:04.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 20:43:06.345 00:05:04.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 20:47:43.271 00:00:10.371 TCP 23.104.0.1:35946 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:48:00.603 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35482 10 6452 1 2025-12-01 20:48:43.682 00:00:10.364 TCP 23.104.0.1:39414 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:49:00.817 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48700 10 6452 1 2025-12-01 20:49:44.102 00:00:10.360 TCP 23.104.0.1:56064 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:50:01.045 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43922 10 6452 1 2025-12-01 20:50:46.266 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 20:50:46.231 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:50:44.502 00:00:10.369 TCP 23.104.0.1:58068 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:51:01.302 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48600 10 6452 1 2025-12-01 20:51:44.908 00:00:10.363 TCP 23.104.0.1:42296 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:52:01.512 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37386 10 6452 1 2025-12-01 20:52:45.309 00:00:10.364 TCP 23.104.0.1:41286 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:53:01.735 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58892 10 6452 1 2025-12-01 20:49:06.343 00:05:04.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 20:49:06.346 00:05:04.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 20:53:45.712 00:00:10.365 TCP 23.104.0.1:46962 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:54:01.952 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33112 10 6452 1 2025-12-01 20:54:46.113 00:00:10.325 TCP 23.104.0.1:59358 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:55:02.177 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57718 10 6452 1 2025-12-01 20:55:46.529 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 20:55:46.481 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 20:55:46.475 00:00:10.368 TCP 23.104.0.1:47488 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:56:02.390 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45036 10 6452 1 2025-12-01 20:56:46.879 00:00:10.334 TCP 23.104.0.1:45616 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:57:02.565 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54514 10 6452 1 2025-12-01 20:57:47.257 00:00:10.327 TCP 23.104.0.1:56952 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:58:02.787 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58686 10 6452 1 Summary: total flows: 163, total bytes: 509953, total packets: 1581, avg bps: 1077, avg pps: 0, avg bpp: 322 Time window: 2025-12-01 19:55:06 - 2025-12-01 20:58:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0021s Wall: 0.0022s flows/second: 75493.8 Runtime: 0.0022s