Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 23:58:54.530 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37194 10 6452 1 2025-12-01 23:55:06.407 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 23:55:06.410 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 23:59:10.877 00:00:10.369 TCP 23.104.0.1:60386 -> 1.101.0.1:3000 11 1507 1 2025-12-01 23:59:54.740 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49752 10 6452 1 2025-12-02 00:00:11.281 00:00:10.750 TCP 23.104.0.1:37718 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:00:50.044 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 00:00:50.244 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:00:54.967 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53944 10 6452 1 2025-12-02 00:01:12.098 00:00:10.361 TCP 23.104.0.1:52826 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:01:55.203 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55426 10 6452 1 2025-12-02 00:02:12.497 00:00:10.359 TCP 23.104.0.1:49930 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:02:55.413 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36580 10 6452 1 2025-12-02 00:03:12.893 00:00:10.377 TCP 23.104.0.1:44270 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:03:55.627 00:00:10.335 TCP 1.101.0.1:3000 -> 22.102.0.1:36218 10 6452 1 2025-12-02 00:04:13.315 00:00:10.367 TCP 23.104.0.1:57888 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:04:56.025 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-12-02 00:01:06.409 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 00:01:06.411 00:05:04.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 00:05:13.718 00:00:10.374 TCP 23.104.0.1:36846 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:05:50.264 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 00:05:50.433 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:05:56.196 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47268 10 6452 1 2025-12-02 00:06:14.128 00:00:10.369 TCP 23.104.0.1:37496 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:06:56.413 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54152 10 6452 1 2025-12-02 00:07:14.541 00:00:10.362 TCP 23.104.0.1:60518 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:07:56.636 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47570 10 6452 1 2025-12-02 00:08:14.943 00:00:10.370 TCP 23.104.0.1:39604 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:08:56.847 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42510 10 6452 1 2025-12-02 00:09:15.354 00:00:10.323 TCP 23.104.0.1:57192 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:09:57.079 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47854 10 6452 1 2025-12-02 00:10:15.717 00:00:10.382 TCP 23.104.0.1:59898 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:10:50.549 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 00:10:50.777 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:07:06.413 00:05:04.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 00:07:06.411 00:05:04.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 00:10:57.286 00:00:10.465 TCP 1.101.0.1:3000 -> 22.102.0.1:50022 10 6452 1 2025-12-02 00:11:16.133 00:00:10.810 TCP 23.104.0.1:53018 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:11:57.787 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44470 10 6452 1 2025-12-02 00:12:16.985 00:00:10.330 TCP 23.104.0.1:52002 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:12:58.003 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:33026 10 6452 1 2025-12-02 00:13:17.360 00:00:10.367 TCP 23.104.0.1:35556 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:13:58.247 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48778 10 6452 1 2025-12-02 00:14:17.764 00:00:10.364 TCP 23.104.0.1:40710 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:14:58.469 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:43510 11 6504 1 2025-12-02 00:15:18.166 00:00:10.367 TCP 23.104.0.1:59448 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:15:50.484 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 00:15:50.539 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:15:58.731 00:00:10.709 TCP 1.101.0.1:3000 -> 22.102.0.1:55268 10 6452 1 2025-12-02 00:16:18.571 00:00:10.364 TCP 23.104.0.1:59200 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:16:59.477 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54200 10 6452 1 2025-12-02 00:13:06.410 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 00:13:06.413 00:05:04.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 00:17:18.971 00:00:10.375 TCP 23.104.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:17:59.695 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56398 10 6452 1 2025-12-02 00:18:19.383 00:00:10.374 TCP 23.104.0.1:50690 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:18:59.914 00:00:10.886 TCP 1.101.0.1:3000 -> 22.102.0.1:40274 10 6452 1 2025-12-02 00:19:19.796 00:00:10.365 TCP 23.104.0.1:57698 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:20:00.838 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35844 10 6452 1 2025-12-02 00:20:20.195 00:00:10.364 TCP 23.104.0.1:49740 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:20:50.548 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:20:50.693 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 00:21:01.074 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60336 10 6452 1 2025-12-02 00:21:20.601 00:00:10.326 TCP 23.104.0.1:33110 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:22:01.247 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37150 10 6452 1 2025-12-02 00:22:20.965 00:00:10.336 TCP 23.104.0.1:55860 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:19:06.414 00:05:04.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 00:19:06.413 00:05:04.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 00:23:01.470 00:00:10.692 TCP 1.101.0.1:3000 -> 22.102.0.1:45132 10 6452 1 2025-12-02 00:23:21.337 00:00:10.329 TCP 23.104.0.1:45654 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:24:02.199 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46432 10 6452 1 2025-12-02 00:24:21.718 00:00:10.377 TCP 23.104.0.1:35442 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:25:02.409 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34882 10 6452 1 2025-12-02 00:25:22.134 00:00:10.369 TCP 23.104.0.1:39928 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:25:50.708 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 00:25:50.558 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:26:02.631 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38526 10 6452 1 2025-12-02 00:26:22.536 00:00:10.370 TCP 23.104.0.1:49786 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:27:02.853 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56990 10 6452 1 2025-12-02 00:27:22.949 00:00:10.373 TCP 23.104.0.1:51996 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:28:03.092 00:00:10.863 TCP 1.101.0.1:3000 -> 22.102.0.1:52208 10 6452 1 2025-12-02 00:28:23.364 00:00:10.363 TCP 23.104.0.1:45288 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:25:06.414 00:05:04.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 00:25:06.413 00:05:04.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 00:29:03.996 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45856 10 6452 1 2025-12-02 00:29:23.761 00:00:10.372 TCP 23.104.0.1:52912 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:30:04.220 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36802 10 6452 1 2025-12-02 00:30:24.171 00:00:10.328 TCP 23.104.0.1:50962 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:30:50.816 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 00:30:50.812 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:31:04.430 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47388 10 6452 1 2025-12-02 00:31:24.536 00:00:10.368 TCP 23.104.0.1:52386 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:32:04.638 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39222 10 6452 1 2025-12-02 00:32:24.938 00:00:10.374 TCP 23.104.0.1:50632 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:33:04.847 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54730 10 6452 1 2025-12-02 00:33:25.350 00:00:10.365 TCP 23.104.0.1:43450 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:34:05.081 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52358 10 6452 1 2025-12-02 00:34:25.757 00:00:10.379 TCP 23.104.0.1:52940 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:31:06.419 00:05:04.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 00:35:05.301 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57872 10 6452 1 2025-12-02 00:31:06.418 00:05:04.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 00:35:26.177 00:00:10.327 TCP 23.104.0.1:42454 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:35:50.906 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 00:35:50.726 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:36:05.520 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52776 10 6452 1 2025-12-02 00:36:26.539 00:00:10.370 TCP 23.104.0.1:35528 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:37:05.735 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41936 10 6452 1 2025-12-02 00:37:26.952 00:00:10.325 TCP 23.104.0.1:56000 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:38:05.945 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:53464 10 6452 1 2025-12-02 00:38:27.319 00:00:10.370 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:39:06.177 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43476 10 6452 1 2025-12-02 00:39:27.748 00:00:10.325 TCP 23.104.0.1:37268 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:40:06.392 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47866 10 6452 1 2025-12-02 00:40:28.109 00:00:10.363 TCP 23.104.0.1:44138 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:40:50.997 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:40:51.011 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 00:37:06.422 00:05:04.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 00:37:06.420 00:05:04.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 00:41:06.602 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42916 10 6452 1 2025-12-02 00:41:28.507 00:00:10.372 TCP 23.104.0.1:40620 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:42:06.810 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38220 10 6452 1 2025-12-02 00:42:28.912 00:00:10.365 TCP 23.104.0.1:57936 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:43:07.032 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49092 10 6452 1 2025-12-02 00:43:29.319 00:00:10.365 TCP 23.104.0.1:40156 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:44:07.248 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38060 10 6452 1 2025-12-02 00:44:29.724 00:00:10.321 TCP 23.104.0.1:50624 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:45:07.462 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48622 10 6452 1 2025-12-02 00:45:30.101 00:00:10.364 TCP 23.104.0.1:58060 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:45:50.848 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 00:45:51.015 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:46:07.674 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33170 10 6452 1 2025-12-02 00:46:30.504 00:00:10.362 TCP 23.104.0.1:50370 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:43:06.422 00:05:04.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 00:43:06.424 00:05:04.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 00:47:07.892 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:54588 10 6452 1 2025-12-02 00:47:30.906 00:00:10.375 TCP 23.104.0.1:59732 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:48:08.083 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:32888 10 6452 1 2025-12-02 00:48:31.323 00:00:10.368 TCP 23.104.0.1:36138 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:49:08.252 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46442 10 6452 1 2025-12-02 00:49:31.733 00:00:10.364 TCP 23.104.0.1:47036 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:50:08.464 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37838 10 6452 1 2025-12-02 00:50:32.136 00:00:10.327 TCP 23.104.0.1:49336 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:50:51.255 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 00:50:51.219 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:51:08.676 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:42582 10 6452 1 2025-12-02 00:51:32.499 00:00:10.373 TCP 23.104.0.1:39978 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:52:08.855 00:00:10.451 TCP 1.101.0.1:3000 -> 22.102.0.1:38066 10 6452 1 2025-12-02 00:52:32.919 00:00:10.380 TCP 23.104.0.1:53722 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:49:06.424 00:05:04.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 00:49:06.426 00:05:04.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 00:53:09.337 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44356 10 6452 1 2025-12-02 00:53:33.344 00:00:10.372 TCP 23.104.0.1:51808 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:54:09.561 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39662 10 6452 1 2025-12-02 00:54:33.765 00:00:10.374 TCP 23.104.0.1:36140 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:55:09.787 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47598 10 6452 1 2025-12-02 00:55:34.178 00:00:10.371 TCP 23.104.0.1:59242 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:55:51.471 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 00:55:51.438 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 00:56:09.999 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40486 10 6452 1 2025-12-02 00:56:34.584 00:00:10.362 TCP 23.104.0.1:36212 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:57:10.213 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51858 10 6452 1 2025-12-02 00:57:34.990 00:00:10.366 TCP 23.104.0.1:34532 -> 1.101.0.1:3000 11 1507 1 2025-12-02 00:58:10.433 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33726 10 6452 1 2025-12-02 00:58:35.396 00:00:10.367 TCP 23.104.0.1:56076 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498400, total packets: 1573, avg bps: 1043, avg pps: 0, avg bpp: 316 Time window: 2025-12-01 23:55:06 - 2025-12-02 00:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0019s User: 0.0028s Wall: 0.0025s flows/second: 65912.8 Runtime: 0.0025s