Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 07:58:46.899 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41204 10 6452 1 2025-12-02 07:55:06.577 00:05:04.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 07:55:06.575 00:05:04.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 07:59:36.989 00:00:10.363 TCP 23.104.0.1:51474 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:59:47.130 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52106 10 6452 1 2025-12-02 08:00:37.394 00:00:10.319 TCP 23.104.0.1:33854 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:00:59.822 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 08:00:47.342 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50370 10 6452 1 2025-12-02 08:00:59.798 00:00:00.017 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 08:01:37.756 00:00:10.397 TCP 23.104.0.1:51570 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:01:47.567 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49060 10 6452 1 2025-12-02 08:02:38.192 00:00:10.402 TCP 23.104.0.1:52236 -> 1.101.0.1:3000 15 1926 1 2025-12-02 08:02:47.769 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:43306 12 10375 1 2025-12-02 08:03:38.635 00:00:10.365 TCP 23.104.0.1:37086 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:03:48.031 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50146 10 6452 1 2025-12-02 08:04:39.053 00:00:10.328 TCP 23.104.0.1:34906 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:04:48.244 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42312 10 6452 1 2025-12-02 08:01:06.579 00:05:04.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 08:01:06.582 00:05:04.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 08:05:39.416 00:00:10.321 TCP 23.104.0.1:34224 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:05:48.454 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55668 10 6452 1 2025-12-02 08:06:00.003 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 08:05:59.862 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 08:06:39.773 00:00:10.329 TCP 23.104.0.1:53836 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:06:48.669 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59986 10 6452 1 2025-12-02 08:07:40.139 00:00:10.364 TCP 23.104.0.1:39530 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:07:48.884 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33456 10 6452 1 2025-12-02 08:08:40.540 00:00:10.373 TCP 23.104.0.1:46494 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:08:49.115 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44628 10 6452 1 2025-12-02 08:09:40.955 00:00:10.330 TCP 23.104.0.1:59910 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:09:49.326 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49244 10 6452 1 2025-12-02 08:10:41.317 00:00:10.363 TCP 23.104.0.1:36008 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:10:59.850 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 08:11:00.106 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 08:10:49.501 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47816 10 6452 1 2025-12-02 08:07:06.585 00:05:04.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 08:07:06.582 00:05:04.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 08:11:41.720 00:00:10.371 TCP 23.104.0.1:44858 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:11:49.711 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45086 10 6452 1 2025-12-02 08:12:42.129 00:00:10.365 TCP 23.104.0.1:45932 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:12:49.922 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60612 10 6452 1 2025-12-02 08:13:42.536 00:00:10.372 TCP 23.104.0.1:33726 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:13:50.132 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33452 10 6452 1 2025-12-02 08:14:42.943 00:00:10.375 TCP 23.104.0.1:60368 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:14:50.342 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41952 10 6452 1 2025-12-02 08:15:43.358 00:00:10.324 TCP 23.104.0.1:56222 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:15:59.972 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 08:16:00.001 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 08:15:50.551 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52844 10 6452 1 2025-12-02 08:16:43.722 00:00:10.366 TCP 23.104.0.1:45868 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:16:50.762 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48738 10 6452 1 2025-12-02 08:13:06.582 00:05:04.777 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 08:13:06.585 00:05:04.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 08:17:44.137 00:00:10.361 TCP 23.104.0.1:54840 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:17:50.982 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:51862 10 6452 1 2025-12-02 08:18:44.542 00:00:10.553 TCP 23.104.0.1:47324 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:18:51.234 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41534 10 6452 1 2025-12-02 08:19:45.140 00:00:10.362 TCP 23.104.0.1:41814 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:19:51.456 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:44034 10 6452 1 2025-12-02 08:20:45.543 00:00:10.693 TCP 23.104.0.1:37202 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:21:00.150 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 08:21:00.142 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 08:20:51.696 00:00:10.445 TCP 1.101.0.1:3000 -> 22.102.0.1:51184 10 6452 1 2025-12-02 08:21:46.279 00:00:10.365 TCP 23.104.0.1:57094 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:21:52.182 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33826 10 6452 1 2025-12-02 08:22:46.682 00:00:10.368 TCP 23.104.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:22:52.392 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39252 10 6452 1 2025-12-02 08:19:06.586 00:05:04.744 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 08:19:06.584 00:05:04.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 08:23:47.111 00:00:10.366 TCP 23.104.0.1:49580 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:23:52.574 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55448 10 6452 1 2025-12-02 08:24:47.514 00:00:10.363 TCP 23.104.0.1:55438 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:24:52.792 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:35388 10 6452 1 2025-12-02 08:26:00.512 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 08:26:00.088 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 08:25:47.917 00:00:10.333 TCP 23.104.0.1:47370 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:25:52.975 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35692 10 6452 1 2025-12-02 08:26:48.303 00:00:10.360 TCP 23.104.0.1:45384 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:26:53.212 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33598 10 6452 1 2025-12-02 08:27:48.706 00:00:10.436 TCP 23.104.0.1:38176 -> 1.101.0.1:3000 15 1926 1 2025-12-02 08:27:53.382 00:00:11.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42710 12 10369 1 2025-12-02 08:28:49.185 00:00:10.363 TCP 23.104.0.1:52202 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:28:54.601 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39276 10 6452 1 2025-12-02 08:25:06.588 00:05:04.743 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 08:25:06.585 00:05:04.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 08:29:49.586 00:00:10.366 TCP 23.104.0.1:49952 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:29:54.818 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:44412 10 6452 1 2025-12-02 08:31:00.362 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 08:30:49.994 00:00:10.368 TCP 23.104.0.1:49506 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:31:00.287 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 08:30:54.988 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52084 10 6452 1 2025-12-02 08:31:50.401 00:00:10.364 TCP 23.104.0.1:54820 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:31:55.219 00:00:11.065 TCP 1.101.0.1:3000 -> 22.102.0.1:40742 10 6452 1 2025-12-02 08:32:50.804 00:00:10.363 TCP 23.104.0.1:41682 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:32:56.322 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34690 10 6452 1 2025-12-02 08:33:51.213 00:00:10.319 TCP 23.104.0.1:38778 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:33:56.536 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35080 10 6452 1 2025-12-02 08:34:51.567 00:00:10.322 TCP 23.104.0.1:38462 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:34:56.754 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:40908 10 6452 1 2025-12-02 08:31:06.590 00:05:04.747 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 08:31:06.587 00:05:04.752 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 08:36:00.525 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 08:36:00.577 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 08:35:51.932 00:00:11.848 TCP 23.104.0.1:39858 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:35:57.008 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45462 10 6452 1 2025-12-02 08:36:53.826 00:00:10.343 TCP 23.104.0.1:58232 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:36:57.222 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59164 10 6452 1 2025-12-02 08:37:54.212 00:00:10.325 TCP 23.104.0.1:38494 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:37:57.439 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37172 10 6452 1 2025-12-02 08:38:54.580 00:00:10.375 TCP 23.104.0.1:59736 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:38:57.663 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60642 10 6452 1 2025-12-02 08:39:54.987 00:00:10.634 TCP 23.104.0.1:37994 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:39:57.892 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38032 10 6452 1 2025-12-02 08:41:00.834 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 08:41:00.768 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 08:40:58.112 00:00:10.258 TCP 1.101.0.1:3000 -> 22.102.0.1:48832 10 6452 1 2025-12-02 08:37:06.588 00:05:04.751 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 08:40:55.675 00:00:10.322 TCP 23.104.0.1:36900 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:37:06.589 00:05:04.747 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 08:41:56.042 00:00:10.361 TCP 23.104.0.1:54254 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:41:58.429 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56856 10 6452 1 2025-12-02 08:42:56.441 00:00:10.366 TCP 23.104.0.1:55952 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:42:58.653 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55026 10 6452 1 2025-12-02 08:43:58.868 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40932 10 6452 1 2025-12-02 08:43:56.849 00:00:10.346 TCP 23.104.0.1:38130 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:44:57.231 00:00:10.367 TCP 23.104.0.1:36834 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:44:59.097 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35956 10 6452 1 2025-12-02 08:46:00.837 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 08:46:00.601 00:00:00.017 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 08:45:59.318 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34498 10 6452 1 2025-12-02 08:45:57.635 00:00:10.379 TCP 23.104.0.1:57396 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:46:59.534 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56656 10 6452 1 2025-12-02 08:43:06.589 00:05:04.751 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 08:46:58.062 00:00:10.330 TCP 23.104.0.1:58390 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:43:06.593 00:05:04.746 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 08:47:58.428 00:00:10.368 TCP 23.104.0.1:37028 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:47:59.746 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52744 10 6452 1 2025-12-02 08:48:58.838 00:00:10.393 TCP 23.104.0.1:41436 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:48:59.958 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:59028 11 6504 1 2025-12-02 08:49:59.268 00:00:10.326 TCP 23.104.0.1:44656 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:50:00.236 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57700 10 6452 1 2025-12-02 08:51:00.942 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 08:51:00.822 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 08:51:00.444 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34386 10 6452 1 2025-12-02 08:50:59.625 00:00:10.369 TCP 23.104.0.1:39466 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:52:00.027 00:00:10.367 TCP 23.104.0.1:45204 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:52:00.659 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36430 10 6452 1 2025-12-02 08:53:00.877 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48596 10 6452 1 2025-12-02 08:53:00.439 00:00:10.363 TCP 23.104.0.1:49448 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:49:06.595 00:05:04.746 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 08:49:06.592 00:05:04.751 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 08:54:01.079 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38706 10 6452 1 2025-12-02 08:54:00.831 00:00:10.360 TCP 23.104.0.1:59322 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:55:01.235 00:00:11.537 TCP 23.104.0.1:59616 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:55:01.297 00:00:11.388 TCP 1.101.0.1:3000 -> 22.102.0.1:37350 10 6452 1 2025-12-02 08:56:00.797 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 08:56:00.732 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 08:56:02.723 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37442 10 6452 1 2025-12-02 08:56:02.812 00:00:10.326 TCP 23.104.0.1:60460 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:57:02.942 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:39912 10 6452 1 2025-12-02 08:57:03.177 00:00:10.323 TCP 23.104.0.1:53432 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:58:03.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38082 10 6452 1 2025-12-02 08:58:03.539 00:00:10.365 TCP 23.104.0.1:47008 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505571, total packets: 1574, avg bps: 1067, avg pps: 0, avg bpp: 321 Time window: 2025-12-02 07:55:06 - 2025-12-02 08:58:13 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0040s User: 0.0020s Wall: 0.0027s flows/second: 60325.7 Runtime: 0.0027s