Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 12:58:56.681 00:00:10.510 TCP 1.101.0.1:3000 -> 22.102.0.1:39254 10 6452 1 2025-12-03 12:55:07.109 00:05:04.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 12:55:07.107 00:05:04.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 12:59:31.959 00:00:10.369 TCP 23.104.0.1:49890 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:59:57.229 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56468 10 6452 1 2025-12-03 13:00:32.369 00:00:10.366 TCP 23.104.0.1:34090 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:00:57.445 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54750 10 6452 1 2025-12-03 13:01:34.786 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 13:01:34.657 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 13:01:32.775 00:00:10.371 TCP 23.104.0.1:53640 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:01:57.621 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32960 10 6452 1 2025-12-03 13:02:33.185 00:00:10.321 TCP 23.104.0.1:35952 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:02:57.839 00:00:10.262 TCP 1.101.0.1:3000 -> 22.102.0.1:58208 10 6452 1 2025-12-03 13:03:33.542 00:00:10.362 TCP 23.104.0.1:48332 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:03:58.140 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37734 10 6452 1 2025-12-03 13:04:33.943 00:00:10.374 TCP 23.104.0.1:39716 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:01:07.111 00:05:04.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 13:04:58.352 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59440 10 6452 1 2025-12-03 13:01:07.109 00:05:04.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 13:05:34.353 00:00:10.365 TCP 23.104.0.1:44846 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:05:58.563 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48794 10 6452 1 2025-12-03 13:06:34.946 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 13:06:34.744 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 13:06:34.753 00:00:10.536 TCP 23.104.0.1:34260 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:06:58.777 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34018 10 6452 1 2025-12-03 13:07:35.325 00:00:10.444 TCP 23.104.0.1:41004 -> 1.101.0.1:3000 15 1926 1 2025-12-03 13:07:59.004 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:58310 12 10375 1 2025-12-03 13:08:35.804 00:00:10.365 TCP 23.104.0.1:48598 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:08:59.204 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42866 10 6452 1 2025-12-03 13:09:36.211 00:00:10.324 TCP 23.104.0.1:56640 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:09:59.414 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58674 10 6452 1 2025-12-03 13:10:36.579 00:00:10.369 TCP 23.104.0.1:41706 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:10:59.641 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55492 10 6452 1 2025-12-03 13:07:07.109 00:05:04.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 13:07:07.112 00:05:04.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 13:11:34.652 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 13:11:34.712 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 13:11:36.985 00:00:10.375 TCP 23.104.0.1:60246 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:11:59.857 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51238 10 6452 1 2025-12-03 13:12:37.393 00:00:10.367 TCP 23.104.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:13:00.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55140 10 6452 1 2025-12-03 13:13:37.796 00:00:10.366 TCP 23.104.0.1:48092 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:14:00.303 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:56350 11 6504 1 2025-12-03 13:14:38.199 00:00:10.945 TCP 23.104.0.1:44412 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:15:00.583 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44436 10 6452 1 2025-12-03 13:15:39.187 00:00:10.367 TCP 23.104.0.1:52608 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:16:00.800 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34612 10 6452 1 2025-12-03 13:16:35.078 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 13:16:34.795 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 13:16:39.589 00:00:10.367 TCP 23.104.0.1:56028 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:17:01.073 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52054 10 6452 1 2025-12-03 13:13:07.111 00:05:04.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 13:13:07.109 00:05:04.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 13:17:39.994 00:00:10.326 TCP 23.104.0.1:48850 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:18:01.290 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53838 10 6452 1 2025-12-03 13:18:40.358 00:00:10.362 TCP 23.104.0.1:37858 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:19:01.504 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39580 10 6452 1 2025-12-03 13:19:40.757 00:00:10.335 TCP 23.104.0.1:35230 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:20:01.673 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55336 10 6452 1 2025-12-03 13:20:41.129 00:00:10.367 TCP 23.104.0.1:55702 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:21:01.902 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42902 10 6452 1 2025-12-03 13:21:34.953 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 13:21:35.038 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 13:21:41.530 00:00:10.372 TCP 23.104.0.1:55140 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:22:02.115 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34770 10 6452 1 2025-12-03 13:22:41.942 00:00:10.374 TCP 23.104.0.1:50864 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:19:07.112 00:05:04.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 13:23:02.333 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40306 10 6452 1 2025-12-03 13:19:07.109 00:05:04.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 13:23:42.357 00:00:10.363 TCP 23.104.0.1:58608 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:24:02.516 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41672 10 6452 1 2025-12-03 13:24:42.760 00:00:10.375 TCP 23.104.0.1:51464 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:25:02.731 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53298 10 6452 1 2025-12-03 13:25:43.173 00:00:10.377 TCP 23.104.0.1:58646 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:26:02.946 00:00:13.785 TCP 1.101.0.1:3000 -> 22.102.0.1:47740 10 6452 1 2025-12-03 13:26:35.110 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 13:26:35.034 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 13:26:43.590 00:00:10.339 TCP 23.104.0.1:48520 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:27:06.774 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59534 10 6452 1 2025-12-03 13:27:43.966 00:00:10.373 TCP 23.104.0.1:51558 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:28:06.986 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55076 10 6452 1 2025-12-03 13:28:44.381 00:00:10.367 TCP 23.104.0.1:44050 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:25:07.114 00:05:04.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 13:25:07.112 00:05:04.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 13:29:07.211 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57800 10 6452 1 2025-12-03 13:29:44.787 00:00:10.322 TCP 23.104.0.1:36006 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:30:07.380 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45354 10 6452 1 2025-12-03 13:30:45.149 00:00:10.323 TCP 23.104.0.1:37904 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:31:07.595 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51550 10 6452 1 2025-12-03 13:31:35.428 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 13:31:35.096 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 13:31:45.514 00:00:10.363 TCP 23.104.0.1:60762 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:32:07.814 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38204 10 6452 1 2025-12-03 13:32:45.915 00:00:10.321 TCP 23.104.0.1:33658 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:33:08.061 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60924 10 6452 1 2025-12-03 13:33:46.277 00:00:10.365 TCP 23.104.0.1:60260 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:34:08.278 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42100 10 6452 1 2025-12-03 13:34:46.685 00:00:10.325 TCP 23.104.0.1:57958 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:31:07.114 00:05:04.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 13:31:07.113 00:05:04.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 13:35:08.489 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53304 10 6452 1 2025-12-03 13:35:47.057 00:00:10.324 TCP 23.104.0.1:36498 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:36:08.702 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41314 10 6452 1 2025-12-03 13:36:35.631 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 13:36:35.231 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 13:36:47.421 00:00:10.374 TCP 23.104.0.1:40118 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:37:08.918 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59082 10 6452 1 2025-12-03 13:37:47.825 00:00:10.417 TCP 23.104.0.1:48820 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:38:09.128 00:00:10.886 TCP 1.101.0.1:3000 -> 22.102.0.1:56382 10 6452 1 2025-12-03 13:38:48.284 00:00:10.369 TCP 23.104.0.1:55412 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:39:10.078 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32998 10 6452 1 2025-12-03 13:39:48.689 00:00:10.373 TCP 23.104.0.1:34834 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:40:10.288 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55698 10 6452 1 2025-12-03 13:40:49.106 00:00:10.371 TCP 23.104.0.1:49046 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:37:07.116 00:05:04.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 13:37:07.113 00:05:04.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 13:41:10.505 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45626 10 6452 1 2025-12-03 13:41:35.569 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 13:41:35.864 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 13:41:49.515 00:00:10.831 TCP 23.104.0.1:46512 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:42:10.720 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44024 10 6452 1 2025-12-03 13:42:50.384 00:00:10.362 TCP 23.104.0.1:33334 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:43:10.928 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:45340 10 6452 1 2025-12-03 13:43:50.782 00:00:10.369 TCP 23.104.0.1:43562 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:44:11.127 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42308 10 6452 1 2025-12-03 13:44:51.187 00:00:10.362 TCP 23.104.0.1:47342 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:45:11.298 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43796 10 6452 1 2025-12-03 13:45:51.586 00:00:10.323 TCP 23.104.0.1:46116 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:46:11.518 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44920 10 6452 1 2025-12-03 13:46:35.791 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 13:46:35.671 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 13:46:51.959 00:00:10.323 TCP 23.104.0.1:54206 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:43:07.118 00:05:04.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 13:43:07.115 00:05:04.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 13:47:11.732 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58438 10 6452 1 2025-12-03 13:47:52.325 00:00:10.324 TCP 23.104.0.1:33634 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:48:11.944 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:57326 10 6452 1 2025-12-03 13:48:52.695 00:00:10.368 TCP 23.104.0.1:58548 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:49:12.125 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33788 10 6452 1 2025-12-03 13:49:53.104 00:00:10.366 TCP 23.104.0.1:39866 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:50:12.339 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:57236 10 6452 1 2025-12-03 13:50:53.510 00:00:10.326 TCP 23.104.0.1:35766 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:51:12.567 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46758 10 6452 1 2025-12-03 13:51:35.760 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 13:51:35.570 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 13:51:53.879 00:00:10.365 TCP 23.104.0.1:60114 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:52:12.780 00:00:16.894 TCP 1.101.0.1:3000 -> 22.102.0.1:35788 10 6452 1 2025-12-03 13:52:54.279 00:00:10.362 TCP 23.104.0.1:33716 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:49:07.118 00:05:04.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 13:49:07.120 00:05:04.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 13:53:19.724 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:56720 10 6452 1 2025-12-03 13:53:54.679 00:00:10.334 TCP 23.104.0.1:56422 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:54:19.950 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58940 10 6452 1 2025-12-03 13:54:55.058 00:00:10.364 TCP 23.104.0.1:45636 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:55:20.183 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53280 10 6452 1 2025-12-03 13:55:55.464 00:00:10.365 TCP 23.104.0.1:41788 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:56:20.397 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60504 10 6452 1 2025-12-03 13:56:35.956 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 13:56:35.683 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 13:56:55.883 00:00:10.350 TCP 23.104.0.1:53344 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:57:20.616 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33462 10 6452 1 2025-12-03 13:57:56.270 00:00:10.370 TCP 23.104.0.1:41998 -> 1.101.0.1:3000 11 1507 1 2025-12-03 13:58:20.832 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33236 10 6452 1 Summary: total flows: 163, total bytes: 501235, total packets: 1568, avg bps: 1054, avg pps: 0, avg bpp: 319 Time window: 2025-12-03 12:55:07 - 2025-12-03 13:58:31 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0018s Wall: 0.0023s flows/second: 69712.6 Runtime: 0.0024s