Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 01:58:58.322 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59996 10 6452 1 2025-12-03 01:55:06.886 00:05:04.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 01:55:06.884 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 01:59:38.530 00:00:10.339 TCP 23.104.0.1:59700 -> 1.101.0.1:3000 11 1507 1 2025-12-03 01:59:58.547 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41460 10 6452 1 2025-12-03 02:00:38.912 00:00:10.369 TCP 23.104.0.1:33152 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:00:58.769 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57100 10 6452 1 2025-12-03 02:01:21.438 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 02:01:21.562 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 02:01:39.316 00:00:10.365 TCP 23.104.0.1:52814 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:01:59.026 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55022 10 6452 1 2025-12-03 02:02:39.716 00:00:10.326 TCP 23.104.0.1:43930 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:02:59.239 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38342 10 6452 1 2025-12-03 02:03:40.103 00:00:10.361 TCP 23.104.0.1:37702 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:03:59.447 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55726 10 6452 1 2025-12-03 02:04:40.503 00:00:10.372 TCP 23.104.0.1:57692 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:04:59.660 00:00:10.246 TCP 1.101.0.1:3000 -> 22.102.0.1:57954 11 6504 1 2025-12-03 02:01:06.886 00:05:04.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 02:01:06.890 00:05:04.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 02:05:40.913 00:00:10.367 TCP 23.104.0.1:34794 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:05:59.947 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55934 10 6452 1 2025-12-03 02:06:21.552 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 02:06:21.560 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 02:06:41.318 00:00:10.369 TCP 23.104.0.1:34958 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:07:00.185 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6452 1 2025-12-03 02:07:41.723 00:00:10.379 TCP 23.104.0.1:59308 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:08:00.356 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43532 10 6452 1 2025-12-03 02:08:42.145 00:00:10.375 TCP 23.104.0.1:49072 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:09:00.568 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58652 10 6452 1 2025-12-03 02:09:42.555 00:00:10.369 TCP 23.104.0.1:59978 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:10:00.789 00:00:12.486 TCP 1.101.0.1:3000 -> 22.102.0.1:42722 10 6452 1 2025-12-03 02:10:42.956 00:00:10.363 TCP 23.104.0.1:37564 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:07:06.890 00:05:04.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 02:11:03.310 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51684 10 6452 1 2025-12-03 02:07:06.888 00:05:04.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 02:11:21.739 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 02:11:21.405 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 02:11:43.357 00:00:10.384 TCP 23.104.0.1:34532 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:12:03.537 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34620 10 6452 1 2025-12-03 02:12:43.777 00:00:10.381 TCP 23.104.0.1:60576 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:13:03.752 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56468 12 6556 1 2025-12-03 02:13:44.198 00:00:10.366 TCP 23.104.0.1:44742 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:14:03.971 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:46090 10 6452 1 2025-12-03 02:14:44.598 00:00:10.366 TCP 23.104.0.1:51036 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:15:04.213 00:00:10.331 TCP 1.101.0.1:3000 -> 22.102.0.1:48160 10 6452 1 2025-12-03 02:15:44.999 00:00:10.334 TCP 23.104.0.1:50332 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:16:04.581 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41524 10 6452 1 2025-12-03 02:16:21.888 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 02:16:21.710 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 02:16:45.367 00:00:10.366 TCP 23.104.0.1:42726 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:13:06.890 00:05:04.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 02:17:04.791 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58336 10 6452 1 2025-12-03 02:13:06.888 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 02:17:45.774 00:00:10.328 TCP 23.104.0.1:33864 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:18:05.008 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37382 10 6452 1 2025-12-03 02:18:46.137 00:00:10.366 TCP 23.104.0.1:59288 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:19:05.187 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58468 10 6452 1 2025-12-03 02:19:46.544 00:00:10.744 TCP 23.104.0.1:42320 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:20:05.415 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:33614 10 6452 1 2025-12-03 02:20:47.325 00:00:10.364 TCP 23.104.0.1:46376 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:21:05.596 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45572 10 6452 1 2025-12-03 02:21:21.910 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 02:21:21.569 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 02:21:47.727 00:00:10.367 TCP 23.104.0.1:56700 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:22:05.771 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33628 10 6452 1 2025-12-03 02:22:48.135 00:00:10.371 TCP 23.104.0.1:59510 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:19:06.889 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 02:23:05.984 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:53814 10 6452 1 2025-12-03 02:19:06.892 00:05:04.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 02:23:48.544 00:00:10.625 TCP 23.104.0.1:49860 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:24:06.223 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47010 10 6452 1 2025-12-03 02:24:49.205 00:00:10.365 TCP 23.104.0.1:55226 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:25:06.444 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49198 10 6452 1 2025-12-03 02:25:49.608 00:00:10.366 TCP 23.104.0.1:58938 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:26:06.660 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:46548 10 6452 1 2025-12-03 02:26:21.967 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 02:26:21.843 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 02:26:50.013 00:00:10.324 TCP 23.104.0.1:51436 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:27:06.827 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37548 10 6452 1 2025-12-03 02:27:50.377 00:00:10.366 TCP 23.104.0.1:39758 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:28:07.067 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6452 1 2025-12-03 02:28:50.780 00:00:10.366 TCP 23.104.0.1:52984 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:25:06.895 00:05:04.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 02:25:06.893 00:05:04.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 02:29:07.285 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56444 10 6452 1 2025-12-03 02:29:51.182 00:00:10.360 TCP 23.104.0.1:53396 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:30:07.490 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58574 10 6452 1 2025-12-03 02:30:51.578 00:00:10.359 TCP 23.104.0.1:57714 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:31:07.706 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45750 10 6452 1 2025-12-03 02:31:22.525 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 02:31:22.498 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 02:31:51.979 00:00:10.369 TCP 23.104.0.1:57630 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:32:07.919 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58746 10 6452 1 2025-12-03 02:32:52.390 00:00:10.327 TCP 23.104.0.1:49188 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:33:08.130 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34790 10 6452 1 2025-12-03 02:33:52.760 00:00:10.345 TCP 23.104.0.1:43850 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:34:08.354 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45918 10 6452 1 2025-12-03 02:34:53.131 00:00:10.374 TCP 23.104.0.1:45510 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:31:06.896 00:05:04.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 02:31:06.898 00:05:04.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 02:35:08.527 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54766 10 6452 1 2025-12-03 02:35:53.545 00:00:10.371 TCP 23.104.0.1:49102 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:36:21.853 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 02:36:08.746 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 10 6452 1 2025-12-03 02:36:22.164 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 02:36:53.951 00:00:10.358 TCP 23.104.0.1:43010 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:37:08.965 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:48274 10 6452 1 2025-12-03 02:37:54.340 00:00:10.364 TCP 23.104.0.1:48024 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:38:09.184 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36032 10 6452 1 2025-12-03 02:38:54.742 00:00:10.370 TCP 23.104.0.1:50058 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:39:09.406 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52972 10 6452 1 2025-12-03 02:39:55.149 00:00:10.369 TCP 23.104.0.1:51844 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:40:09.619 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42626 10 6452 1 2025-12-03 02:40:55.557 00:00:10.360 TCP 23.104.0.1:57780 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:37:06.900 00:05:04.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 02:37:06.898 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 02:41:09.791 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50434 10 6452 1 2025-12-03 02:41:22.126 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 02:41:22.285 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 02:41:55.951 00:00:10.371 TCP 23.104.0.1:39022 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:42:10.003 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57050 10 6452 1 2025-12-03 02:42:56.360 00:00:10.371 TCP 23.104.0.1:38084 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:43:10.215 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53522 10 6452 1 2025-12-03 02:43:56.766 00:00:10.758 TCP 23.104.0.1:47980 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:44:10.425 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38800 10 6452 1 2025-12-03 02:44:57.557 00:00:10.364 TCP 23.104.0.1:56036 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:45:10.640 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46980 10 6452 1 2025-12-03 02:45:57.957 00:00:10.368 TCP 23.104.0.1:48178 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:46:10.820 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:36376 10 6452 1 2025-12-03 02:46:21.974 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 02:46:22.196 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 02:46:58.362 00:00:10.377 TCP 23.104.0.1:39374 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:43:06.898 00:05:04.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 02:43:06.901 00:05:04.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 02:47:11.012 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60016 10 6452 1 2025-12-03 02:47:58.774 00:00:10.368 TCP 23.104.0.1:36680 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:48:11.236 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48348 10 6452 1 2025-12-03 02:48:59.184 00:00:10.364 TCP 23.104.0.1:53286 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:49:11.410 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40550 10 6452 1 2025-12-03 02:49:59.586 00:00:10.367 TCP 23.104.0.1:40436 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:50:11.637 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49344 10 6452 1 2025-12-03 02:50:59.987 00:00:10.365 TCP 23.104.0.1:46264 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:51:22.291 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 02:51:22.459 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 02:51:11.846 00:00:10.561 TCP 1.101.0.1:3000 -> 22.102.0.1:44352 10 6452 1 2025-12-03 02:52:00.403 00:00:10.364 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:52:12.448 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47582 10 6452 1 2025-12-03 02:53:00.808 00:00:10.362 TCP 23.104.0.1:54328 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:49:06.905 00:05:04.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 02:49:06.901 00:05:04.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 02:53:12.659 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52126 10 6452 1 2025-12-03 02:54:01.212 00:00:10.316 TCP 23.104.0.1:44950 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:54:12.880 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33834 10 6452 1 2025-12-03 02:55:01.565 00:00:10.363 TCP 23.104.0.1:58016 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:55:13.108 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39024 10 6452 1 2025-12-03 02:56:01.970 00:00:10.364 TCP 23.104.0.1:51238 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:56:22.659 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 02:56:13.333 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44832 10 6452 1 2025-12-03 02:56:22.663 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 02:57:02.377 00:00:10.364 TCP 23.104.0.1:42926 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:57:13.542 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45292 10 6452 1 2025-12-03 02:58:02.776 00:00:10.372 TCP 23.104.0.1:57684 -> 1.101.0.1:3000 11 1507 1 2025-12-03 02:58:13.753 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54808 10 6452 1 Summary: total flows: 163, total bytes: 496997, total packets: 1564, avg bps: 1047, avg pps: 0, avg bpp: 317 Time window: 2025-12-03 01:55:06 - 2025-12-03 02:58:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0020s Wall: 0.0033s flows/second: 49036.8 Runtime: 0.0033s