Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 04:58:44.569 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40940 10 6452 1 2025-12-03 04:58:54.584 00:00:10.368 TCP 23.104.0.1:44020 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:55:06.942 00:05:04.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 04:55:06.939 00:05:04.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 04:59:44.784 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51466 10 6452 1 2025-12-03 04:59:54.998 00:00:10.360 TCP 23.104.0.1:55014 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:00:44.955 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33152 10 6452 1 2025-12-03 05:00:55.394 00:00:11.150 TCP 23.104.0.1:41500 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:01:24.964 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 05:01:25.162 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:01:45.192 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51858 10 6452 1 2025-12-03 05:01:56.580 00:00:10.370 TCP 23.104.0.1:54892 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:02:45.405 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:52700 12 10369 1 2025-12-03 05:02:56.991 00:00:10.439 TCP 23.104.0.1:46834 -> 1.101.0.1:3000 15 1926 1 2025-12-03 05:03:45.658 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49562 10 6452 1 2025-12-03 05:03:57.468 00:00:10.367 TCP 23.104.0.1:59166 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:04:45.871 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50806 10 6452 1 2025-12-03 05:01:06.938 00:05:04.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 05:04:57.875 00:00:10.365 TCP 23.104.0.1:41212 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:01:06.942 00:05:04.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 05:05:46.102 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43358 10 6452 1 2025-12-03 05:05:58.276 00:00:10.362 TCP 23.104.0.1:35778 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:06:25.238 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:06:25.406 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 05:06:46.316 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56664 10 6452 1 2025-12-03 05:06:58.679 00:00:10.385 TCP 23.104.0.1:51246 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:07:46.528 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47732 10 6452 1 2025-12-03 05:07:59.102 00:00:10.365 TCP 23.104.0.1:54844 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:08:46.754 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:35348 10 6452 1 2025-12-03 05:08:59.504 00:00:10.371 TCP 23.104.0.1:45878 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:09:46.941 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:33484 10 6452 1 2025-12-03 05:09:59.915 00:00:10.365 TCP 23.104.0.1:45600 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:10:47.181 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49562 10 6452 1 2025-12-03 05:11:00.318 00:00:10.361 TCP 23.104.0.1:33166 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:07:06.941 00:05:04.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 05:07:06.944 00:05:04.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 05:11:25.393 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 05:11:25.460 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:11:47.353 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:45556 10 6452 1 2025-12-03 05:12:00.722 00:00:10.371 TCP 23.104.0.1:42256 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:12:47.539 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46604 10 6452 1 2025-12-03 05:13:01.127 00:00:10.361 TCP 23.104.0.1:34594 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:13:47.745 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54202 10 6452 1 2025-12-03 05:14:01.530 00:00:10.368 TCP 23.104.0.1:38772 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:14:47.958 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:35404 10 6452 1 2025-12-03 05:15:01.935 00:00:10.384 TCP 23.104.0.1:41160 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:15:48.158 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44846 10 6452 1 2025-12-03 05:16:02.355 00:00:10.367 TCP 23.104.0.1:52038 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:16:25.558 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 05:16:25.549 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:16:48.374 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50944 10 6452 1 2025-12-03 05:13:06.944 00:05:04.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 05:17:02.764 00:00:10.379 TCP 23.104.0.1:52172 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:13:06.945 00:05:04.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 05:17:48.589 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55884 10 6452 1 2025-12-03 05:18:03.183 00:00:10.375 TCP 23.104.0.1:36278 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:18:48.806 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50570 10 6452 1 2025-12-03 05:19:03.600 00:00:10.369 TCP 23.104.0.1:46258 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:19:49.024 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:32772 10 6452 1 2025-12-03 05:20:04.011 00:00:10.331 TCP 23.104.0.1:36204 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:20:49.247 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59366 10 6452 1 2025-12-03 05:21:04.379 00:00:10.325 TCP 23.104.0.1:33900 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:21:25.461 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:21:25.616 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 05:21:49.462 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35424 10 6452 1 2025-12-03 05:22:04.748 00:00:10.380 TCP 23.104.0.1:58104 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:22:49.673 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56606 10 6452 1 2025-12-03 05:23:05.163 00:00:10.369 TCP 23.104.0.1:35742 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:19:06.947 00:05:04.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 05:19:06.945 00:05:04.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 05:23:49.841 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54180 10 6452 1 2025-12-03 05:24:05.573 00:00:10.367 TCP 23.104.0.1:52700 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:24:50.082 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60416 10 6452 1 2025-12-03 05:25:05.976 00:00:10.327 TCP 23.104.0.1:52694 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:25:50.295 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53466 10 6452 1 2025-12-03 05:26:06.340 00:00:10.369 TCP 23.104.0.1:41330 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:26:25.547 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 05:26:25.493 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:26:50.464 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54678 10 6452 1 2025-12-03 05:27:06.759 00:00:10.917 TCP 23.104.0.1:33748 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:27:50.680 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43434 10 6452 1 2025-12-03 05:28:07.717 00:00:10.371 TCP 23.104.0.1:36332 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:28:50.895 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51048 10 6452 1 2025-12-03 05:25:06.947 00:05:04.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 05:25:06.945 00:05:04.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 05:29:08.125 00:00:10.366 TCP 23.104.0.1:33810 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:29:51.110 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33724 10 6452 1 2025-12-03 05:30:08.531 00:00:10.326 TCP 23.104.0.1:42500 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:30:51.325 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49874 10 6452 1 2025-12-03 05:31:25.461 00:00:00.013 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 05:31:08.897 00:00:10.371 TCP 23.104.0.1:42036 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:31:25.793 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:31:51.548 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59338 10 6452 1 2025-12-03 05:32:09.307 00:00:10.365 TCP 23.104.0.1:54082 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:32:51.771 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58812 10 6452 1 2025-12-03 05:33:09.705 00:00:10.366 TCP 23.104.0.1:54144 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:33:51.951 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:43478 10 6452 1 2025-12-03 05:34:10.106 00:00:10.364 TCP 23.104.0.1:37508 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:34:52.140 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58640 10 6452 1 2025-12-03 05:31:06.946 00:05:04.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 05:31:06.948 00:05:04.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 05:35:10.504 00:00:10.366 TCP 23.104.0.1:46314 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:35:52.350 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41636 10 6452 1 2025-12-03 05:36:10.907 00:00:10.365 TCP 23.104.0.1:44352 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:36:25.520 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 05:36:25.685 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:36:52.568 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49760 10 6452 1 2025-12-03 05:37:11.307 00:00:10.323 TCP 23.104.0.1:44960 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:37:52.788 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45840 10 6452 1 2025-12-03 05:38:11.666 00:00:10.360 TCP 23.104.0.1:46672 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:38:52.958 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54294 10 6452 1 2025-12-03 05:39:12.086 00:00:10.362 TCP 23.104.0.1:58720 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:39:53.189 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55122 10 6452 1 2025-12-03 05:40:12.497 00:00:10.363 TCP 23.104.0.1:33958 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:40:53.398 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33844 10 6452 1 2025-12-03 05:37:06.949 00:05:04.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 05:37:06.946 00:05:04.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 05:41:25.833 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:41:12.911 00:00:10.362 TCP 23.104.0.1:49120 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:41:25.953 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 05:41:53.612 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46978 10 6452 1 2025-12-03 05:42:13.316 00:00:10.365 TCP 23.104.0.1:53644 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:42:53.830 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40110 10 6452 1 2025-12-03 05:43:13.713 00:00:10.373 TCP 23.104.0.1:56486 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:43:54.083 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56920 10 6452 1 2025-12-03 05:44:14.130 00:00:10.322 TCP 23.104.0.1:39314 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:44:54.260 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47186 10 6452 1 2025-12-03 05:45:14.497 00:00:10.367 TCP 23.104.0.1:41444 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:45:54.483 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46738 10 6452 1 2025-12-03 05:46:25.874 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:46:14.902 00:00:10.372 TCP 23.104.0.1:54014 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:46:25.833 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 05:46:54.692 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38250 10 6452 1 2025-12-03 05:43:06.948 00:05:04.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 05:43:06.951 00:05:04.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 05:47:15.308 00:00:10.326 TCP 23.104.0.1:33970 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:47:54.912 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:47012 10 6452 1 2025-12-03 05:48:15.675 00:00:10.374 TCP 23.104.0.1:59342 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:48:55.099 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43182 10 6452 1 2025-12-03 05:49:16.110 00:00:10.363 TCP 23.104.0.1:51386 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:49:55.272 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40374 10 6452 1 2025-12-03 05:50:16.512 00:00:10.391 TCP 23.104.0.1:59214 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:50:55.483 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60294 10 6452 1 2025-12-03 05:51:26.012 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 05:51:26.068 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:51:16.946 00:00:10.366 TCP 23.104.0.1:40880 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:51:55.696 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59772 10 6452 1 2025-12-03 05:52:17.353 00:00:10.330 TCP 23.104.0.1:57378 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:52:55.911 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56804 10 6452 1 2025-12-03 05:49:06.949 00:05:04.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 05:49:06.950 00:05:04.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 05:53:17.721 00:00:10.374 TCP 23.104.0.1:42362 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:53:56.120 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49018 10 6452 1 2025-12-03 05:54:18.131 00:00:10.367 TCP 23.104.0.1:39246 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:54:56.334 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39200 10 6452 1 2025-12-03 05:55:18.535 00:00:10.323 TCP 23.104.0.1:35160 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:55:56.546 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:48782 10 6452 1 2025-12-03 05:56:26.201 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 05:56:26.083 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 05:56:18.910 00:00:10.397 TCP 23.104.0.1:42136 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:56:56.718 00:00:10.821 TCP 1.101.0.1:3000 -> 22.102.0.1:35702 10 6452 1 2025-12-03 05:57:19.350 00:00:10.739 TCP 23.104.0.1:38666 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:57:57.580 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50548 10 6452 1 2025-12-03 05:58:20.127 00:00:10.384 TCP 23.104.0.1:42476 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502684, total packets: 1578, avg bps: 1057, avg pps: 0, avg bpp: 318 Time window: 2025-12-03 04:55:06 - 2025-12-03 05:58:30 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0029s Wall: 0.0021s flows/second: 79641.8 Runtime: 0.0021s