Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 00:58:44.966 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34572 12 6556 1 2025-12-03 00:55:06.867 00:05:04.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 00:59:05.756 00:00:10.335 TCP 23.104.0.1:47610 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:55:06.870 00:05:04.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 00:59:45.191 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37656 10 6452 1 2025-12-03 01:00:06.126 00:00:10.364 TCP 23.104.0.1:51702 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:00:45.402 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50414 10 6452 1 2025-12-03 01:01:06.531 00:00:10.363 TCP 23.104.0.1:47688 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:01:20.440 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 01:01:20.460 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 01:01:45.617 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56720 10 6452 1 2025-12-03 01:02:06.932 00:00:10.341 TCP 23.104.0.1:46124 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:02:45.831 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35106 10 6452 1 2025-12-03 01:03:07.308 00:00:10.363 TCP 23.104.0.1:47790 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:03:46.006 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53240 10 6452 1 2025-12-03 01:04:07.708 00:00:10.366 TCP 23.104.0.1:45328 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:04:46.225 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47086 10 6452 1 2025-12-03 01:01:06.871 00:05:04.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 01:01:06.867 00:05:04.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 01:05:08.110 00:00:10.367 TCP 23.104.0.1:32806 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:05:46.446 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38010 10 6452 1 2025-12-03 01:06:20.052 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 01:06:08.515 00:00:10.327 TCP 23.104.0.1:54486 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:06:20.377 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 01:06:46.666 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32846 10 6452 1 2025-12-03 01:07:08.880 00:00:10.368 TCP 23.104.0.1:43266 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:07:46.878 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35852 10 6452 1 2025-12-03 01:08:09.288 00:00:10.367 TCP 23.104.0.1:51412 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:08:47.103 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39860 10 6452 1 2025-12-03 01:09:09.689 00:00:10.329 TCP 23.104.0.1:37864 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:09:47.336 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56540 10 6452 1 2025-12-03 01:10:10.063 00:00:10.370 TCP 23.104.0.1:33002 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:10:47.563 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:42514 10 6452 1 2025-12-03 01:07:06.869 00:05:04.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 01:07:06.872 00:05:04.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 01:11:10.468 00:00:10.364 TCP 23.104.0.1:37800 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:11:20.219 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 01:11:20.517 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 01:11:47.795 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44394 10 6452 1 2025-12-03 01:12:10.875 00:00:10.365 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:12:48.030 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40818 10 6452 1 2025-12-03 01:13:11.276 00:00:10.360 TCP 23.104.0.1:49106 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:13:48.247 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56096 10 6452 1 2025-12-03 01:14:11.676 00:00:10.337 TCP 23.104.0.1:51692 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:14:48.460 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59176 10 6452 1 2025-12-03 01:15:12.047 00:00:10.382 TCP 23.104.0.1:51416 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:15:48.673 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41794 10 6452 1 2025-12-03 01:16:20.403 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 01:16:20.513 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 01:16:12.469 00:00:10.374 TCP 23.104.0.1:37900 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:16:48.885 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42774 12 6556 1 2025-12-03 01:13:06.868 00:05:04.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 01:13:06.873 00:05:04.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 01:17:12.878 00:00:10.366 TCP 23.104.0.1:35692 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:17:49.118 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56072 12 10375 1 2025-12-03 01:18:13.281 00:00:10.441 TCP 23.104.0.1:35014 -> 1.101.0.1:3000 15 1926 1 2025-12-03 01:18:49.357 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57502 10 6452 1 2025-12-03 01:19:13.761 00:00:10.378 TCP 23.104.0.1:33428 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:19:49.568 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38614 10 6452 1 2025-12-03 01:20:14.175 00:00:10.364 TCP 23.104.0.1:35512 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:20:49.782 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48702 10 6452 1 2025-12-03 01:21:20.441 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 01:21:20.825 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 01:21:14.574 00:00:10.958 TCP 23.104.0.1:56348 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:21:49.990 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38222 10 6452 1 2025-12-03 01:22:15.573 00:00:10.329 TCP 23.104.0.1:44868 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:22:50.221 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46972 10 6452 1 2025-12-03 01:19:06.873 00:05:04.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 01:19:06.875 00:05:04.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 01:23:15.934 00:00:10.382 TCP 23.104.0.1:40430 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:23:50.432 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47232 10 6452 1 2025-12-03 01:24:16.352 00:00:10.366 TCP 23.104.0.1:56496 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:24:50.651 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44732 10 6452 1 2025-12-03 01:25:16.762 00:00:10.373 TCP 23.104.0.1:56330 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:25:50.828 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57062 10 6452 1 2025-12-03 01:26:20.937 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 01:26:21.150 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 01:26:17.175 00:00:10.330 TCP 23.104.0.1:48102 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:26:51.066 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32892 10 6452 1 2025-12-03 01:27:17.539 00:00:10.374 TCP 23.104.0.1:56154 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:27:51.282 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:36272 10 6452 1 2025-12-03 01:28:17.952 00:00:10.328 TCP 23.104.0.1:38254 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:28:51.474 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58586 10 6452 1 2025-12-03 01:25:06.874 00:05:04.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 01:25:06.876 00:05:04.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 01:29:18.315 00:00:10.324 TCP 23.104.0.1:55686 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:29:51.686 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35642 10 6452 1 2025-12-03 01:30:18.671 00:00:10.416 TCP 23.104.0.1:59622 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:30:51.903 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52076 10 6452 1 2025-12-03 01:31:20.891 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 01:31:20.958 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 01:31:19.126 00:00:10.327 TCP 23.104.0.1:58696 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:31:52.116 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41816 10 6452 1 2025-12-03 01:32:19.492 00:00:10.362 TCP 23.104.0.1:57608 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:32:52.332 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44788 10 6452 1 2025-12-03 01:33:19.895 00:00:10.386 TCP 23.104.0.1:49276 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:33:52.549 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41748 10 6452 1 2025-12-03 01:34:20.313 00:00:15.841 TCP 23.104.0.1:43624 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:34:52.721 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47294 10 6452 1 2025-12-03 01:31:06.878 00:05:04.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 01:31:06.875 00:05:04.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 01:35:26.190 00:00:10.367 TCP 23.104.0.1:36008 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:35:52.930 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:34350 10 6452 1 2025-12-03 01:36:20.887 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 01:36:20.874 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 01:36:26.591 00:00:11.310 TCP 23.104.0.1:54950 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:36:53.130 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:46476 10 6452 1 2025-12-03 01:37:27.937 00:00:10.380 TCP 23.104.0.1:49196 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:37:53.343 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37964 10 6452 1 2025-12-03 01:38:28.355 00:00:10.367 TCP 23.104.0.1:39592 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:38:53.565 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41698 10 6452 1 2025-12-03 01:39:28.757 00:00:10.382 TCP 23.104.0.1:60430 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:39:53.787 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53166 10 6452 1 2025-12-03 01:40:29.177 00:00:10.366 TCP 23.104.0.1:47070 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:40:54.017 00:00:10.680 TCP 1.101.0.1:3000 -> 22.102.0.1:35334 10 6452 1 2025-12-03 01:37:06.875 00:05:04.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 01:37:06.879 00:05:04.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 01:41:21.085 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 01:41:20.952 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 01:41:29.581 00:00:10.362 TCP 23.104.0.1:51738 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:41:54.736 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46676 10 6452 1 2025-12-03 01:42:29.986 00:00:10.431 TCP 23.104.0.1:53442 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:42:54.948 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:38460 10 6452 1 2025-12-03 01:43:30.453 00:00:10.362 TCP 23.104.0.1:35450 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:43:55.147 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37030 10 6452 1 2025-12-03 01:44:30.854 00:00:10.371 TCP 23.104.0.1:56110 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:44:55.360 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44174 10 6452 1 2025-12-03 01:45:31.265 00:00:10.366 TCP 23.104.0.1:40706 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:45:55.571 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60398 10 6452 1 2025-12-03 01:46:21.736 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 01:46:21.822 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 01:46:31.665 00:00:10.365 TCP 23.104.0.1:36712 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:46:55.784 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53092 10 6452 1 2025-12-03 01:43:06.879 00:05:04.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 01:43:06.875 00:05:04.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 01:47:32.096 00:00:10.364 TCP 23.104.0.1:41340 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:47:56.005 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45966 10 6452 1 2025-12-03 01:48:32.503 00:00:10.371 TCP 23.104.0.1:48906 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:48:56.222 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46864 10 6452 1 2025-12-03 01:49:32.916 00:00:11.922 TCP 23.104.0.1:46790 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:49:56.430 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34436 10 6452 1 2025-12-03 01:50:34.888 00:00:10.332 TCP 23.104.0.1:55588 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:50:56.648 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45954 10 6452 1 2025-12-03 01:51:21.453 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 01:51:21.319 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 01:51:35.266 00:00:10.369 TCP 23.104.0.1:33286 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:51:56.860 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39692 10 6452 1 2025-12-03 01:52:35.671 00:00:10.440 TCP 23.104.0.1:54766 -> 1.101.0.1:3000 15 1926 1 2025-12-03 01:52:57.085 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:54292 12 10369 1 2025-12-03 01:49:06.880 00:05:04.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 01:49:06.882 00:05:04.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 01:53:36.150 00:00:10.369 TCP 23.104.0.1:46754 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:53:57.291 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51030 10 6452 1 2025-12-03 01:54:36.557 00:00:10.327 TCP 23.104.0.1:34420 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:54:57.459 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39808 10 6452 1 2025-12-03 01:55:36.924 00:00:10.385 TCP 23.104.0.1:59238 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:55:57.673 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45532 10 6452 1 2025-12-03 01:56:21.409 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 01:56:21.362 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 01:56:37.347 00:00:10.369 TCP 23.104.0.1:55922 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:56:57.883 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37852 10 6452 1 2025-12-03 01:57:37.758 00:00:10.329 TCP 23.104.0.1:45112 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:57:58.086 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:49434 10 6452 1 2025-12-03 01:58:38.125 00:00:10.365 TCP 23.104.0.1:45688 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507234, total packets: 1588, avg bps: 1061, avg pps: 0, avg bpp: 319 Time window: 2025-12-03 00:55:06 - 2025-12-03 01:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0028s Wall: 0.0030s flows/second: 55365.9 Runtime: 0.0030s