Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 15:58:43.543 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42672 10 6452 1 2025-12-02 15:55:06.726 00:05:04.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 15:55:06.721 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 15:59:17.063 00:00:10.368 TCP 23.104.0.1:33064 -> 1.101.0.1:3000 11 1507 1 2025-12-02 15:59:43.755 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46724 10 6452 1 2025-12-02 16:00:17.470 00:00:10.327 TCP 23.104.0.1:59022 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:00:43.924 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:52888 10 6452 1 2025-12-02 16:01:09.523 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 16:01:09.427 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 16:01:17.834 00:00:10.343 TCP 23.104.0.1:39510 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:01:44.122 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57546 10 6452 1 2025-12-02 16:02:18.219 00:00:10.360 TCP 23.104.0.1:44698 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:02:44.295 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:52842 12 10375 1 2025-12-02 16:03:18.618 00:00:10.393 TCP 23.104.0.1:51274 -> 1.101.0.1:3000 15 1926 1 2025-12-02 16:03:44.536 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55022 10 6452 1 2025-12-02 16:04:19.061 00:00:10.326 TCP 23.104.0.1:53928 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:04:44.758 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40982 10 6452 1 2025-12-02 16:01:06.724 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 16:01:06.726 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 16:05:19.426 00:00:10.378 TCP 23.104.0.1:41760 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:05:44.966 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39432 10 6452 1 2025-12-02 16:06:09.713 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 16:06:09.632 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 16:06:19.840 00:00:10.380 TCP 23.104.0.1:40346 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:06:45.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56488 10 6452 1 2025-12-02 16:07:20.258 00:00:10.322 TCP 23.104.0.1:38350 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:07:45.404 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57940 10 6452 1 2025-12-02 16:08:20.617 00:00:10.363 TCP 23.104.0.1:55466 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:08:45.616 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55974 10 6452 1 2025-12-02 16:09:21.021 00:00:10.441 TCP 23.104.0.1:47778 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:09:45.830 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51582 10 6452 1 2025-12-02 16:10:21.503 00:00:10.365 TCP 23.104.0.1:53278 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:10:46.004 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60284 10 6452 1 2025-12-02 16:11:09.630 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 16:07:06.728 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 16:11:09.389 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 16:07:06.726 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 16:11:21.914 00:00:10.366 TCP 23.104.0.1:42910 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:11:46.217 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59196 10 6452 1 2025-12-02 16:12:22.315 00:00:10.364 TCP 23.104.0.1:53532 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:12:46.427 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40750 12 10369 1 2025-12-02 16:13:22.721 00:00:10.788 TCP 23.104.0.1:52658 -> 1.101.0.1:3000 15 1926 1 2025-12-02 16:13:46.670 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52590 10 6452 1 2025-12-02 16:14:23.550 00:00:10.367 TCP 23.104.0.1:53162 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:14:46.893 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:53912 10 6452 1 2025-12-02 16:15:23.950 00:00:10.370 TCP 23.104.0.1:60656 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:15:47.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41576 10 6452 1 2025-12-02 16:16:09.495 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 16:16:09.934 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 16:16:24.356 00:00:10.364 TCP 23.104.0.1:58692 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:16:47.300 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:54048 10 6452 1 2025-12-02 16:13:06.727 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 16:13:06.730 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 16:17:24.760 00:00:10.373 TCP 23.104.0.1:60206 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:17:47.551 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54348 10 6452 1 2025-12-02 16:18:25.172 00:00:10.375 TCP 23.104.0.1:42676 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:18:47.730 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:50536 10 6452 1 2025-12-02 16:19:25.585 00:00:10.365 TCP 23.104.0.1:52618 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:19:47.920 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:35634 10 6452 1 2025-12-02 16:20:25.991 00:00:10.363 TCP 23.104.0.1:58110 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:20:48.170 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57644 10 6452 1 2025-12-02 16:21:09.935 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 16:21:09.608 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 16:21:26.395 00:00:10.362 TCP 23.104.0.1:48924 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:21:48.384 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49688 10 6452 1 2025-12-02 16:22:26.797 00:00:10.376 TCP 23.104.0.1:44006 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:22:48.597 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37054 10 6452 1 2025-12-02 16:19:06.731 00:05:04.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 16:19:06.728 00:05:04.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 16:23:27.214 00:00:10.364 TCP 23.104.0.1:58594 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:23:48.821 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48494 10 6452 1 2025-12-02 16:24:27.610 00:00:10.366 TCP 23.104.0.1:43812 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:24:49.066 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34192 10 6452 1 2025-12-02 16:25:28.014 00:00:10.327 TCP 23.104.0.1:36192 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:25:49.277 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58426 10 6452 1 2025-12-02 16:26:09.947 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 16:26:09.913 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 16:26:28.379 00:00:10.363 TCP 23.104.0.1:48440 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:26:49.489 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47130 10 6452 1 2025-12-02 16:27:28.777 00:00:10.371 TCP 23.104.0.1:44902 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:27:49.701 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50912 11 6492 1 2025-12-02 16:28:29.187 00:00:10.356 TCP 23.104.0.1:43166 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:28:49.912 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51184 10 6452 1 2025-12-02 16:25:06.733 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 16:25:06.733 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 16:29:29.583 00:00:10.361 TCP 23.104.0.1:44430 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:29:50.123 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:39290 10 6452 1 2025-12-02 16:30:29.990 00:00:10.331 TCP 23.104.0.1:43228 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:30:50.333 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33884 10 6452 1 2025-12-02 16:31:09.888 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 16:31:10.170 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 16:31:30.365 00:00:10.362 TCP 23.104.0.1:48964 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:31:50.509 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50422 10 6452 1 2025-12-02 16:32:30.765 00:00:10.371 TCP 23.104.0.1:47190 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:32:50.721 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41790 10 6452 1 2025-12-02 16:33:31.170 00:00:10.866 TCP 23.104.0.1:37142 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:33:50.934 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45298 10 6452 1 2025-12-02 16:34:32.097 00:00:10.363 TCP 23.104.0.1:33616 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:34:51.164 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37216 10 6452 1 2025-12-02 16:31:06.737 00:05:04.755 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 16:31:06.741 00:05:04.750 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 16:35:32.502 00:00:10.365 TCP 23.104.0.1:47174 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:35:51.371 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36210 10 6452 1 2025-12-02 16:36:10.131 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 16:36:09.958 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 16:36:32.906 00:00:10.325 TCP 23.104.0.1:33958 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:36:51.598 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57754 10 6452 1 2025-12-02 16:37:33.270 00:00:10.365 TCP 23.104.0.1:42482 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:37:51.810 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60926 10 6452 1 2025-12-02 16:38:33.672 00:00:10.323 TCP 23.104.0.1:46926 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:38:51.986 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56638 10 6452 1 2025-12-02 16:39:34.036 00:00:10.362 TCP 23.104.0.1:46638 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:39:52.215 00:00:10.396 TCP 1.101.0.1:3000 -> 22.102.0.1:54990 10 6452 1 2025-12-02 16:40:34.440 00:00:10.365 TCP 23.104.0.1:55782 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:40:52.654 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49234 10 6452 1 2025-12-02 16:41:10.286 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 16:41:10.294 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 16:37:06.743 00:05:04.750 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 16:37:06.739 00:05:04.755 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 16:41:34.848 00:00:11.285 TCP 23.104.0.1:45996 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:41:52.824 00:00:10.321 TCP 1.101.0.1:3000 -> 22.102.0.1:55154 10 6452 1 2025-12-02 16:42:36.176 00:00:10.368 TCP 23.104.0.1:41212 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:42:53.184 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33664 10 6452 1 2025-12-02 16:43:36.578 00:00:10.360 TCP 23.104.0.1:55906 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:43:53.405 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54528 10 6452 1 2025-12-02 16:44:36.974 00:00:10.320 TCP 23.104.0.1:38532 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:44:53.617 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51468 10 6452 1 2025-12-02 16:45:37.335 00:00:10.365 TCP 23.104.0.1:57018 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:45:53.836 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57776 10 6452 1 2025-12-02 16:46:10.464 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 16:46:10.052 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 16:46:37.740 00:00:10.368 TCP 23.104.0.1:58314 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:46:54.077 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39978 10 6452 1 2025-12-02 16:43:06.740 00:05:04.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 16:43:06.742 00:05:04.751 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 16:47:38.144 00:00:10.370 TCP 23.104.0.1:34848 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:47:54.288 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32884 10 6452 1 2025-12-02 16:48:38.553 00:00:10.367 TCP 23.104.0.1:57086 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:48:54.499 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58968 10 6452 1 2025-12-02 16:49:38.959 00:00:10.366 TCP 23.104.0.1:40166 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:49:54.712 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34404 10 6452 1 2025-12-02 16:50:39.364 00:00:10.365 TCP 23.104.0.1:48394 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:50:54.924 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40600 10 6452 1 2025-12-02 16:51:10.395 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 16:51:10.468 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 16:51:39.764 00:00:10.342 TCP 23.104.0.1:52532 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:51:55.131 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45922 12 6556 1 2025-12-02 16:52:40.139 00:00:10.365 TCP 23.104.0.1:43144 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:52:55.345 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37798 10 6452 1 2025-12-02 16:49:06.743 00:05:04.751 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 16:49:06.740 00:05:04.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 16:53:40.544 00:00:10.370 TCP 23.104.0.1:45548 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:53:55.559 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59458 10 6452 1 2025-12-02 16:54:40.949 00:00:10.323 TCP 23.104.0.1:52016 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:54:55.774 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33844 10 6452 1 2025-12-02 16:55:41.318 00:00:10.362 TCP 23.104.0.1:51506 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:55:55.994 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51986 10 6452 1 2025-12-02 16:56:10.513 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 16:56:10.688 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 16:56:41.715 00:00:10.376 TCP 23.104.0.1:35922 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:56:56.224 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52168 10 6452 1 2025-12-02 16:57:42.148 00:00:10.375 TCP 23.104.0.1:56602 -> 1.101.0.1:3000 11 1507 1 2025-12-02 16:57:56.440 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44874 10 6452 1 Summary: total flows: 163, total bytes: 505663, total packets: 1576, avg bps: 1070, avg pps: 0, avg bpp: 320 Time window: 2025-12-02 15:55:06 - 2025-12-02 16:58:06 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0008s Wall: 0.0025s flows/second: 64122.3 Runtime: 0.0026s