Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 03:58:50.094 00:00:10.746 TCP 1.101.0.1:3000 -> 22.102.0.1:57630 10 6452 1 2025-12-02 03:58:49.479 00:00:10.373 TCP 23.104.0.1:37806 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:55:06.501 00:05:04.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 03:55:06.505 00:05:04.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 03:59:49.887 00:00:10.390 TCP 23.104.0.1:52810 -> 1.101.0.1:3000 11 1507 1 2025-12-02 03:59:50.880 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36028 10 6452 1 2025-12-02 04:00:54.843 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:00:50.307 00:00:10.365 TCP 23.104.0.1:58126 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:00:55.011 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 04:00:51.102 00:00:10.561 TCP 1.101.0.1:3000 -> 22.102.0.1:35380 10 6452 1 2025-12-02 04:01:50.713 00:00:10.382 TCP 23.104.0.1:41768 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:01:51.696 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34420 10 6452 1 2025-12-02 04:02:51.129 00:00:10.368 TCP 23.104.0.1:47954 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:02:51.907 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33316 10 6452 1 2025-12-02 04:03:51.532 00:00:10.417 TCP 23.104.0.1:41494 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:03:52.120 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60906 10 6452 1 2025-12-02 04:04:51.990 00:00:10.361 TCP 23.104.0.1:52676 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:01:06.505 00:05:04.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 04:04:52.329 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39098 10 6452 1 2025-12-02 04:01:06.502 00:05:04.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 04:05:54.943 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 04:05:54.803 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:05:52.391 00:00:10.365 TCP 23.104.0.1:43914 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:05:52.539 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33586 10 6452 1 2025-12-02 04:06:52.792 00:00:10.365 TCP 23.104.0.1:58456 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:06:52.746 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:33292 10 6452 1 2025-12-02 04:07:52.950 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:35010 14 10479 1 2025-12-02 04:07:53.201 00:00:10.450 TCP 23.104.0.1:36874 -> 1.101.0.1:3000 15 1926 1 2025-12-02 04:08:53.688 00:00:10.370 TCP 23.104.0.1:40166 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:08:53.202 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60238 10 6452 1 2025-12-02 04:09:53.418 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60588 10 6452 1 2025-12-02 04:09:54.104 00:00:10.363 TCP 23.104.0.1:55864 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:10:55.359 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:10:55.420 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 04:10:54.510 00:00:10.360 TCP 23.104.0.1:51748 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:10:53.637 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:58564 10 6452 1 2025-12-02 04:07:06.502 00:05:04.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 04:07:06.506 00:05:04.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 04:11:54.909 00:00:10.384 TCP 23.104.0.1:39858 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:11:53.893 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40626 10 6452 1 2025-12-02 04:12:54.116 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57734 10 6452 1 2025-12-02 04:12:55.347 00:00:10.363 TCP 23.104.0.1:47062 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:13:55.760 00:00:10.385 TCP 23.104.0.1:37926 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:13:54.333 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60274 10 6452 1 2025-12-02 04:14:54.510 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52700 10 6452 1 2025-12-02 04:14:56.184 00:00:10.365 TCP 23.104.0.1:48194 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:15:55.175 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 04:15:55.153 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:15:54.720 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55974 10 6452 1 2025-12-02 04:15:56.589 00:00:10.367 TCP 23.104.0.1:51974 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:16:54.934 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:57202 10 6452 1 2025-12-02 04:16:57.002 00:00:10.365 TCP 23.104.0.1:37558 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:13:06.507 00:05:04.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 04:13:06.505 00:05:04.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 04:17:55.180 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43754 10 6452 1 2025-12-02 04:17:57.408 00:00:10.363 TCP 23.104.0.1:51134 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:18:55.357 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45368 10 6452 1 2025-12-02 04:18:57.810 00:00:10.366 TCP 23.104.0.1:52828 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:19:55.576 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33888 10 6452 1 2025-12-02 04:19:58.216 00:00:10.389 TCP 23.104.0.1:35842 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:20:55.726 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:20:55.721 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 04:20:55.792 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42304 10 6452 1 2025-12-02 04:20:58.623 00:00:10.363 TCP 23.104.0.1:55898 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:21:56.001 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47438 10 6452 1 2025-12-02 04:21:59.022 00:00:10.373 TCP 23.104.0.1:55276 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:22:56.220 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45818 10 6452 1 2025-12-02 04:19:06.509 00:05:04.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 04:22:59.429 00:00:10.365 TCP 23.104.0.1:34416 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:19:06.511 00:05:04.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 04:23:56.434 00:00:10.461 TCP 1.101.0.1:3000 -> 22.102.0.1:33746 10 6452 1 2025-12-02 04:23:59.833 00:00:10.394 TCP 23.104.0.1:51030 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:25:00.266 00:00:10.364 TCP 23.104.0.1:47090 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:24:56.934 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:37084 10 6452 1 2025-12-02 04:25:55.687 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:25:55.501 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 04:26:00.671 00:00:10.363 TCP 23.104.0.1:56832 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:25:57.165 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36684 10 6452 1 2025-12-02 04:26:57.377 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59752 10 6452 1 2025-12-02 04:27:01.105 00:00:10.366 TCP 23.104.0.1:43734 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:28:01.505 00:00:10.367 TCP 23.104.0.1:46592 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:27:57.587 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38228 10 6452 1 2025-12-02 04:28:57.791 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51886 10 6452 1 2025-12-02 04:25:06.513 00:05:04.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 04:29:01.908 00:00:10.363 TCP 23.104.0.1:59394 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:25:06.511 00:05:04.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 04:29:58.004 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47212 10 6452 1 2025-12-02 04:30:02.317 00:00:10.364 TCP 23.104.0.1:32806 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:30:55.365 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:30:55.688 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 04:30:58.224 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:55742 11 6504 1 2025-12-02 04:31:02.720 00:00:10.822 TCP 23.104.0.1:38640 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:31:58.487 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52692 10 6452 1 2025-12-02 04:32:03.582 00:00:10.368 TCP 23.104.0.1:53720 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:32:58.700 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56758 10 6452 1 2025-12-02 04:33:03.988 00:00:10.326 TCP 23.104.0.1:50254 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:33:58.917 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46556 10 6452 1 2025-12-02 04:34:04.354 00:00:10.367 TCP 23.104.0.1:51564 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:34:59.128 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44106 10 6452 1 2025-12-02 04:31:06.511 00:05:04.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 04:31:06.514 00:05:04.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 04:35:04.760 00:00:10.332 TCP 23.104.0.1:54430 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:35:55.831 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:35:55.752 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 04:35:59.334 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34040 10 6452 1 2025-12-02 04:36:05.136 00:00:10.372 TCP 23.104.0.1:43328 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:36:59.555 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35952 10 6452 1 2025-12-02 04:37:05.547 00:00:10.906 TCP 23.104.0.1:52992 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:37:59.769 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41506 10 6452 1 2025-12-02 04:38:06.490 00:00:10.363 TCP 23.104.0.1:33226 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:38:59.989 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49554 10 6452 1 2025-12-02 04:39:06.902 00:00:10.527 TCP 23.104.0.1:46118 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:40:00.217 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50578 10 6452 1 2025-12-02 04:40:07.469 00:00:10.325 TCP 23.104.0.1:58828 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:40:55.849 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 04:40:55.685 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:41:00.381 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44766 10 6452 1 2025-12-02 04:37:06.512 00:05:04.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 04:37:06.514 00:05:04.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 04:41:07.833 00:00:10.752 TCP 23.104.0.1:58532 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:42:00.595 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56982 10 6452 1 2025-12-02 04:42:08.653 00:00:10.363 TCP 23.104.0.1:58760 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:43:00.811 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43408 10 6452 1 2025-12-02 04:43:09.089 00:00:10.463 TCP 23.104.0.1:35102 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:44:00.983 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46196 10 6452 1 2025-12-02 04:44:09.591 00:00:10.366 TCP 23.104.0.1:34150 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:45:01.205 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54010 10 6452 1 2025-12-02 04:45:09.998 00:00:10.381 TCP 23.104.0.1:40294 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:45:55.954 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 04:45:55.948 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:46:01.421 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60712 10 6452 1 2025-12-02 04:46:10.417 00:00:10.363 TCP 23.104.0.1:49920 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:43:06.519 00:05:04.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 04:47:01.636 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60788 10 6452 1 2025-12-02 04:43:06.522 00:05:04.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 04:47:10.817 00:00:10.383 TCP 23.104.0.1:33618 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:48:01.845 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51194 10 6452 1 2025-12-02 04:48:11.240 00:00:10.324 TCP 23.104.0.1:36530 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:49:02.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46194 10 6452 1 2025-12-02 04:49:11.602 00:00:10.362 TCP 23.104.0.1:53790 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:50:02.305 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44944 10 6452 1 2025-12-02 04:50:12.007 00:00:10.357 TCP 23.104.0.1:55820 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:50:55.990 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:50:56.115 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 04:51:02.515 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39312 10 6452 1 2025-12-02 04:51:12.401 00:00:10.363 TCP 23.104.0.1:57060 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:52:02.686 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:48792 10 6452 1 2025-12-02 04:52:12.810 00:00:10.370 TCP 23.104.0.1:56028 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:49:06.518 00:05:04.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 04:53:02.853 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44954 10 6452 1 2025-12-02 04:49:06.520 00:05:04.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 04:53:13.217 00:00:10.365 TCP 23.104.0.1:57478 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:54:03.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48438 10 6452 1 2025-12-02 04:54:13.617 00:00:10.377 TCP 23.104.0.1:35898 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:55:03.301 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51682 10 6452 1 2025-12-02 04:55:14.036 00:00:10.365 TCP 23.104.0.1:39752 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:55:56.195 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 04:55:55.980 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 04:56:03.514 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33240 10 6452 1 2025-12-02 04:56:14.438 00:00:10.364 TCP 23.104.0.1:48044 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:57:03.728 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39752 10 6452 1 2025-12-02 04:57:14.843 00:00:10.394 TCP 23.104.0.1:55726 -> 1.101.0.1:3000 11 1507 1 2025-12-02 04:58:03.901 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53546 10 6452 1 2025-12-02 04:58:15.274 00:00:10.368 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502846, total packets: 1581, avg bps: 1058, avg pps: 0, avg bpp: 318 Time window: 2025-12-02 03:55:06 - 2025-12-02 04:58:25 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0020s Wall: 0.0019s flows/second: 87603.9 Runtime: 0.0019s