Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 11:58:49.035 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34842 10 6452 1 2025-12-02 11:55:06.644 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 11:55:06.646 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 11:59:29.395 00:00:10.323 TCP 23.104.0.1:57344 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:59:49.246 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59780 10 6452 1 2025-12-02 12:00:29.756 00:00:10.344 TCP 23.104.0.1:44686 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:00:49.465 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59910 10 6452 1 2025-12-02 12:01:04.726 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 12:01:04.653 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 12:01:30.133 00:00:10.362 TCP 23.104.0.1:55078 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:01:49.687 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35686 10 6452 1 2025-12-02 12:02:30.532 00:00:10.362 TCP 23.104.0.1:51892 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:02:49.897 00:00:10.657 TCP 1.101.0.1:3000 -> 22.102.0.1:40590 10 6452 1 2025-12-02 12:03:30.932 00:00:10.385 TCP 23.104.0.1:57870 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:03:50.592 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33928 10 6452 1 2025-12-02 12:04:31.358 00:00:10.323 TCP 23.104.0.1:44066 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:04:50.802 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44930 10 6452 1 2025-12-02 12:01:06.648 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 12:01:06.646 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 12:05:31.726 00:00:10.373 TCP 23.104.0.1:40550 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:05:51.015 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:42248 10 6452 1 2025-12-02 12:06:05.193 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 12:06:04.979 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 12:06:32.140 00:00:10.365 TCP 23.104.0.1:51016 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:06:51.194 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56296 10 6452 1 2025-12-02 12:07:32.544 00:00:10.332 TCP 23.104.0.1:42618 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:07:51.405 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57618 10 6452 1 2025-12-02 12:08:32.911 00:00:10.324 TCP 23.104.0.1:33486 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:08:51.618 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:39094 10 6452 1 2025-12-02 12:09:33.273 00:00:10.358 TCP 23.104.0.1:45512 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:09:51.787 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43906 10 6452 1 2025-12-02 12:10:33.667 00:00:10.324 TCP 23.104.0.1:54256 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:11:04.745 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 12:10:51.964 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:41740 10 6452 1 2025-12-02 12:11:04.887 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 12:07:06.648 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 12:07:06.650 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 12:11:34.029 00:00:10.363 TCP 23.104.0.1:60574 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:11:52.228 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55786 10 6452 1 2025-12-02 12:12:34.431 00:00:10.372 TCP 23.104.0.1:60288 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:12:52.438 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37986 10 6452 1 2025-12-02 12:13:34.847 00:00:10.383 TCP 23.104.0.1:36558 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:13:52.662 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51710 10 6452 1 2025-12-02 12:14:35.270 00:00:10.363 TCP 23.104.0.1:40196 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:14:52.836 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38150 10 6452 1 2025-12-02 12:15:35.672 00:00:10.373 TCP 23.104.0.1:33838 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:15:53.070 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43428 10 6452 1 2025-12-02 12:16:04.645 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 12:16:04.794 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 12:16:36.098 00:00:10.367 TCP 23.104.0.1:36818 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:16:53.239 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34808 10 6452 1 2025-12-02 12:13:06.652 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 12:13:06.651 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 12:17:36.501 00:00:10.371 TCP 23.104.0.1:34962 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:17:53.457 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:58166 10 6452 1 2025-12-02 12:18:36.908 00:00:10.360 TCP 23.104.0.1:54122 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:18:53.636 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43824 10 6452 1 2025-12-02 12:19:37.306 00:00:10.368 TCP 23.104.0.1:33720 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:19:53.852 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54964 10 6452 1 2025-12-02 12:20:37.711 00:00:10.380 TCP 23.104.0.1:47022 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:21:05.144 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 12:20:54.083 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:48650 10 6452 1 2025-12-02 12:21:05.234 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 12:21:38.127 00:00:10.366 TCP 23.104.0.1:48800 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:21:54.260 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36728 10 6452 1 2025-12-02 12:22:38.531 00:00:10.365 TCP 23.104.0.1:38598 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:22:54.477 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43984 10 6452 1 2025-12-02 12:19:06.650 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 12:19:06.653 00:05:04.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 12:23:38.931 00:00:10.377 TCP 23.104.0.1:33894 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:23:54.689 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50674 10 6452 1 2025-12-02 12:24:39.343 00:00:10.326 TCP 23.104.0.1:41434 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:24:54.918 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33294 10 6452 1 2025-12-02 12:25:39.706 00:00:10.385 TCP 23.104.0.1:53630 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:26:05.068 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 12:26:05.100 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 12:25:55.128 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44342 10 6452 1 2025-12-02 12:26:40.128 00:00:10.365 TCP 23.104.0.1:36104 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:26:55.342 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46702 10 6452 1 2025-12-02 12:27:40.533 00:00:10.370 TCP 23.104.0.1:40636 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:27:55.555 00:00:10.602 TCP 1.101.0.1:3000 -> 22.102.0.1:58524 10 6452 1 2025-12-02 12:28:40.946 00:00:10.367 TCP 23.104.0.1:42150 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:28:56.201 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:44490 10 6452 1 2025-12-02 12:25:06.653 00:05:04.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 12:25:06.651 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 12:29:41.351 00:00:10.362 TCP 23.104.0.1:39210 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:29:56.406 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40148 10 6452 1 2025-12-02 12:30:41.753 00:00:10.333 TCP 23.104.0.1:37742 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:30:56.623 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49938 10 6452 1 2025-12-02 12:31:05.451 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 12:31:05.263 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 12:31:42.127 00:00:10.362 TCP 23.104.0.1:54630 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:31:56.836 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56846 10 6452 1 2025-12-02 12:32:42.529 00:00:10.751 TCP 23.104.0.1:43596 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:32:57.073 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38412 10 6452 1 2025-12-02 12:33:43.321 00:00:10.364 TCP 23.104.0.1:38756 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:33:57.285 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52902 10 6452 1 2025-12-02 12:34:43.719 00:00:10.374 TCP 23.104.0.1:43014 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:34:57.495 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38536 10 6452 1 2025-12-02 12:31:06.652 00:05:04.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 12:31:06.656 00:05:04.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 12:35:44.142 00:00:10.378 TCP 23.104.0.1:59616 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:36:05.279 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 12:36:05.417 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 12:35:57.667 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39924 10 6452 1 2025-12-02 12:36:44.558 00:00:10.328 TCP 23.104.0.1:53774 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:36:57.878 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50928 10 6452 1 2025-12-02 12:37:44.925 00:00:10.580 TCP 23.104.0.1:60278 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:37:58.103 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43006 10 6452 1 2025-12-02 12:38:45.541 00:00:10.364 TCP 23.104.0.1:41134 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:38:58.315 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47810 10 6452 1 2025-12-02 12:39:45.944 00:00:10.379 TCP 23.104.0.1:33678 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:39:58.526 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37454 10 6452 1 2025-12-02 12:40:46.361 00:00:10.362 TCP 23.104.0.1:41622 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:41:05.178 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 12:41:05.376 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 12:40:58.741 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41560 10 6452 1 2025-12-02 12:37:06.653 00:05:04.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 12:37:06.656 00:05:04.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 12:41:46.780 00:00:10.325 TCP 23.104.0.1:36872 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:41:58.955 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39078 12 6556 1 2025-12-02 12:42:47.144 00:00:10.363 TCP 23.104.0.1:59666 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:42:59.191 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56904 10 6452 1 2025-12-02 12:43:47.549 00:00:10.362 TCP 23.104.0.1:45942 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:43:59.411 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49090 10 6452 1 2025-12-02 12:44:47.952 00:00:10.373 TCP 23.104.0.1:58114 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:44:59.632 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58494 10 6452 1 2025-12-02 12:45:48.359 00:00:10.369 TCP 23.104.0.1:32826 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:46:05.326 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 12:46:05.384 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 12:45:59.852 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37702 10 6452 1 2025-12-02 12:46:48.778 00:00:10.370 TCP 23.104.0.1:43934 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:47:00.074 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54360 10 6452 1 2025-12-02 12:43:06.657 00:05:04.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 12:43:06.655 00:05:04.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 12:47:49.184 00:00:10.924 TCP 23.104.0.1:39432 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:48:00.283 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43556 10 6452 1 2025-12-02 12:48:50.143 00:00:10.358 TCP 23.104.0.1:51016 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:49:00.503 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51516 10 6452 1 2025-12-02 12:49:50.543 00:00:10.366 TCP 23.104.0.1:57722 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:50:00.712 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41086 10 6452 1 2025-12-02 12:51:05.548 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 12:50:50.951 00:00:10.336 TCP 23.104.0.1:35466 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:51:05.717 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 12:51:00.931 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:58820 10 6452 1 2025-12-02 12:51:51.322 00:00:10.366 TCP 23.104.0.1:46278 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:52:01.116 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53384 10 6452 1 2025-12-02 12:52:51.725 00:00:10.382 TCP 23.104.0.1:53342 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:49:06.655 00:05:04.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 12:53:01.332 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33470 10 6452 1 2025-12-02 12:49:06.658 00:05:04.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 12:53:52.140 00:00:10.370 TCP 23.104.0.1:43738 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:54:01.550 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48746 10 6452 1 2025-12-02 12:54:52.549 00:00:10.363 TCP 23.104.0.1:34308 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:55:01.765 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34434 10 6452 1 2025-12-02 12:56:05.460 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 12:55:52.953 00:00:10.367 TCP 23.104.0.1:42734 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:56:05.695 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 12:56:01.979 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:44260 10 6452 1 2025-12-02 12:56:53.365 00:00:10.590 TCP 23.104.0.1:57474 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:57:02.169 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39998 10 6452 1 2025-12-02 12:57:53.990 00:00:10.368 TCP 23.104.0.1:42062 -> 1.101.0.1:3000 11 1507 1 2025-12-02 12:58:02.380 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50798 10 6452 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1050, avg pps: 0, avg bpp: 317 Time window: 2025-12-02 11:55:06 - 2025-12-02 12:58:12 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0032s Wall: 0.0027s flows/second: 61464.7 Runtime: 0.0027s