Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 09:59:03.339 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51858 10 6452 1 2025-12-03 09:55:07.068 00:05:04.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 09:55:07.071 00:05:04.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 09:59:09.426 00:00:10.326 TCP 23.104.0.1:59082 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:00:03.559 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43140 10 6452 1 2025-12-03 10:00:09.794 00:00:10.364 TCP 23.104.0.1:37460 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:01:03.784 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53262 10 6452 1 2025-12-03 10:01:10.200 00:00:10.360 TCP 23.104.0.1:49660 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:01:30.838 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 10:01:31.108 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 10:02:04.001 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51154 10 6452 1 2025-12-03 10:02:10.600 00:00:10.362 TCP 23.104.0.1:49782 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:03:04.219 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33832 10 6452 1 2025-12-03 10:03:11.005 00:00:10.369 TCP 23.104.0.1:37006 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:04:04.430 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49604 10 6452 1 2025-12-03 10:04:11.411 00:00:10.367 TCP 23.104.0.1:38048 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:05:04.654 00:00:10.974 TCP 1.101.0.1:3000 -> 22.102.0.1:58422 10 6452 1 2025-12-03 10:01:07.070 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 10:01:07.073 00:05:04.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 10:05:11.821 00:00:10.363 TCP 23.104.0.1:53442 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:06:05.663 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56366 10 6452 1 2025-12-03 10:06:12.225 00:00:10.361 TCP 23.104.0.1:59862 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:06:31.259 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 10:06:31.276 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 10:07:05.875 00:00:10.429 TCP 1.101.0.1:3000 -> 22.102.0.1:42870 10 6452 1 2025-12-03 10:07:12.629 00:00:10.328 TCP 23.104.0.1:34134 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:08:06.339 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55964 10 6452 1 2025-12-03 10:08:12.997 00:00:10.361 TCP 23.104.0.1:57056 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:09:06.559 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60360 10 6452 1 2025-12-03 10:09:13.401 00:00:10.362 TCP 23.104.0.1:50896 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:10:06.731 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36502 10 6452 1 2025-12-03 10:10:13.807 00:00:10.360 TCP 23.104.0.1:43662 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:07:07.076 00:05:04.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 10:07:07.073 00:05:04.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 10:11:06.944 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35186 10 6452 1 2025-12-03 10:11:14.212 00:00:10.359 TCP 23.104.0.1:56346 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:11:31.203 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 10:11:31.286 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 10:12:07.152 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60700 10 6452 1 2025-12-03 10:12:14.608 00:00:10.371 TCP 23.104.0.1:58194 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:13:07.366 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:55346 10 6452 1 2025-12-03 10:13:15.016 00:00:10.367 TCP 23.104.0.1:55092 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:14:07.530 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42290 10 6452 1 2025-12-03 10:14:15.422 00:00:10.370 TCP 23.104.0.1:58846 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:15:07.749 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58920 10 6452 1 2025-12-03 10:15:15.831 00:00:10.379 TCP 23.104.0.1:44866 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:16:07.967 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42836 10 6452 1 2025-12-03 10:16:16.246 00:00:10.322 TCP 23.104.0.1:51728 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:16:31.568 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 10:16:31.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 10:13:07.075 00:05:04.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 10:13:07.072 00:05:04.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 10:17:08.204 00:00:12.539 TCP 1.101.0.1:3000 -> 22.102.0.1:58938 10 6452 1 2025-12-03 10:17:16.604 00:00:10.931 TCP 23.104.0.1:53930 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:18:10.804 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38500 10 6452 1 2025-12-03 10:18:17.569 00:00:10.366 TCP 23.104.0.1:36126 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:19:11.022 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50256 10 6452 1 2025-12-03 10:19:17.976 00:00:10.364 TCP 23.104.0.1:44534 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:20:11.238 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56148 10 6452 1 2025-12-03 10:20:18.384 00:00:10.363 TCP 23.104.0.1:42084 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:21:11.456 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44676 10 6452 1 2025-12-03 10:21:31.425 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 10:21:18.786 00:00:10.668 TCP 23.104.0.1:43070 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:21:31.381 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 10:22:11.669 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41332 10 6452 1 2025-12-03 10:22:19.506 00:00:10.365 TCP 23.104.0.1:55160 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:19:07.076 00:05:04.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 10:19:07.079 00:05:04.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 10:23:11.876 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48000 10 6452 1 2025-12-03 10:23:19.909 00:00:10.369 TCP 23.104.0.1:42006 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:24:12.108 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56430 10 6452 1 2025-12-03 10:24:20.320 00:00:10.363 TCP 23.104.0.1:45106 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:25:12.335 00:00:10.433 TCP 1.101.0.1:3000 -> 22.102.0.1:55650 10 6452 1 2025-12-03 10:25:20.718 00:00:10.352 TCP 23.104.0.1:50802 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:26:31.640 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 10:26:21.103 00:00:10.365 TCP 23.104.0.1:38386 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:26:12.806 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44038 10 6452 1 2025-12-03 10:26:31.616 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 10:27:13.025 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43562 10 6452 1 2025-12-03 10:27:21.508 00:00:10.363 TCP 23.104.0.1:48848 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:28:13.196 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50524 10 6452 1 2025-12-03 10:28:21.909 00:00:10.364 TCP 23.104.0.1:41472 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:25:07.077 00:05:04.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 10:25:07.079 00:05:04.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 10:29:13.417 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48146 10 6452 1 2025-12-03 10:29:22.313 00:00:10.366 TCP 23.104.0.1:58688 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:30:13.588 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:45772 10 6452 1 2025-12-03 10:30:22.722 00:00:10.328 TCP 23.104.0.1:43098 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:31:13.754 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34426 10 6452 1 2025-12-03 10:31:31.390 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 10:31:31.460 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 10:31:23.098 00:00:10.324 TCP 23.104.0.1:40826 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:32:13.968 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:39150 10 6452 1 2025-12-03 10:32:23.462 00:00:10.368 TCP 23.104.0.1:34742 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:33:14.206 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52692 10 6452 1 2025-12-03 10:33:23.867 00:00:10.330 TCP 23.104.0.1:50438 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:34:14.423 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41392 10 6452 1 2025-12-03 10:34:24.233 00:00:10.364 TCP 23.104.0.1:47528 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:31:07.077 00:05:04.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 10:31:07.080 00:05:04.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 10:35:14.643 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36720 10 6452 1 2025-12-03 10:35:24.641 00:00:10.360 TCP 23.104.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:36:14.856 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51346 10 6452 1 2025-12-03 10:36:31.656 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 10:36:31.861 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 10:36:25.045 00:00:10.368 TCP 23.104.0.1:53572 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:37:15.088 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:59900 10 6452 1 2025-12-03 10:37:25.448 00:00:10.361 TCP 23.104.0.1:46448 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:38:15.299 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41122 10 6452 1 2025-12-03 10:38:25.857 00:00:10.373 TCP 23.104.0.1:38326 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:39:15.515 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41244 10 6452 1 2025-12-03 10:39:26.275 00:00:10.363 TCP 23.104.0.1:33946 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:40:15.734 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51152 10 6452 1 2025-12-03 10:40:26.676 00:00:10.356 TCP 23.104.0.1:41238 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:37:07.082 00:05:04.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 10:37:07.081 00:05:04.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 10:41:15.948 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56802 10 6452 1 2025-12-03 10:41:31.731 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 10:41:31.825 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 10:41:27.104 00:00:10.322 TCP 23.104.0.1:53352 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:42:16.185 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34652 10 6452 1 2025-12-03 10:42:27.464 00:00:15.326 TCP 23.104.0.1:45402 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:43:16.404 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53634 10 6452 1 2025-12-03 10:43:32.833 00:00:10.374 TCP 23.104.0.1:58290 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:44:16.611 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41046 10 6452 1 2025-12-03 10:44:33.238 00:00:11.806 TCP 23.104.0.1:52254 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:45:16.831 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46090 10 6452 1 2025-12-03 10:45:35.109 00:00:10.364 TCP 23.104.0.1:38736 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:46:31.960 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 10:46:17.070 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40696 10 6452 1 2025-12-03 10:46:32.062 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 10:46:35.512 00:00:10.359 TCP 23.104.0.1:49712 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:43:07.083 00:05:04.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 10:43:07.080 00:05:04.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 10:47:17.288 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37894 10 6452 1 2025-12-03 10:47:35.910 00:00:10.368 TCP 23.104.0.1:41832 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:48:17.508 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42102 10 6452 1 2025-12-03 10:48:36.315 00:00:10.365 TCP 23.104.0.1:39082 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:49:17.724 00:00:10.883 TCP 1.101.0.1:3000 -> 22.102.0.1:47990 10 6452 1 2025-12-03 10:49:36.719 00:00:10.326 TCP 23.104.0.1:44100 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:50:18.648 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33242 10 6452 1 2025-12-03 10:50:37.097 00:00:10.366 TCP 23.104.0.1:33094 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:51:19.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58866 10 6452 1 2025-12-03 10:51:31.917 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 10:51:31.957 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 10:51:37.505 00:00:10.365 TCP 23.104.0.1:48630 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:52:19.298 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48336 10 6452 1 2025-12-03 10:52:37.908 00:00:10.325 TCP 23.104.0.1:43444 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:49:07.082 00:05:04.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 10:49:07.085 00:05:04.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 10:53:19.516 00:00:10.906 TCP 1.101.0.1:3000 -> 22.102.0.1:33522 10 6452 1 2025-12-03 10:53:38.272 00:00:10.383 TCP 23.104.0.1:34170 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:54:20.462 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38062 10 6452 1 2025-12-03 10:54:38.698 00:00:10.366 TCP 23.104.0.1:39430 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:55:20.635 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57014 10 6452 1 2025-12-03 10:55:39.109 00:00:10.367 TCP 23.104.0.1:52032 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:56:20.844 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:44392 10 6452 1 2025-12-03 10:56:32.103 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 10:56:32.360 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 10:56:39.515 00:00:10.363 TCP 23.104.0.1:55922 -> 1.101.0.1:3000 11 1507 1 2025-12-03 10:57:21.027 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47866 10 6452 1 2025-12-03 10:57:39.923 00:00:10.448 TCP 23.104.0.1:43694 -> 1.101.0.1:3000 15 1926 1 2025-12-03 10:58:21.201 00:00:11.623 TCP 1.101.0.1:3000 -> 22.102.0.1:44708 12 10369 1 2025-12-03 10:58:40.409 00:00:10.369 TCP 23.104.0.1:44788 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502684, total packets: 1578, avg bps: 1051, avg pps: 0, avg bpp: 318 Time window: 2025-12-03 09:55:07 - 2025-12-03 10:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0046s User: 0.0018s Wall: 0.0024s flows/second: 69488.4 Runtime: 0.0024s