Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 02:59:05.370 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56052 10 6452 1 2025-12-04 02:55:07.352 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 02:55:07.353 00:05:04.902 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 02:59:11.096 00:00:10.321 TCP 23.104.0.1:55976 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:00:05.590 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35336 10 6452 1 2025-12-04 03:00:11.459 00:00:10.367 TCP 23.104.0.1:39784 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:01:05.800 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54820 10 6452 1 2025-12-04 03:01:11.863 00:00:10.367 TCP 23.104.0.1:44854 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:01:51.817 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 03:01:52.002 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 03:02:06.012 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46546 10 6452 1 2025-12-04 03:02:12.268 00:00:10.369 TCP 23.104.0.1:52032 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:03:06.224 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:33144 10 6452 1 2025-12-04 03:03:12.673 00:00:10.319 TCP 23.104.0.1:48142 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:04:06.456 00:00:11.331 TCP 1.101.0.1:3000 -> 22.102.0.1:59654 10 6452 1 2025-12-04 03:04:13.032 00:00:10.369 TCP 23.104.0.1:59832 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:01:07.355 00:05:04.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 03:01:07.358 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 03:05:07.825 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46974 10 6452 1 2025-12-04 03:05:13.436 00:00:10.359 TCP 23.104.0.1:56428 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:06:08.070 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52612 10 6452 1 2025-12-04 03:06:13.834 00:00:10.345 TCP 23.104.0.1:42468 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:06:51.683 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 03:06:51.430 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 03:07:08.280 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42770 10 6452 1 2025-12-04 03:07:14.214 00:00:10.364 TCP 23.104.0.1:38102 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:08:08.500 00:00:10.980 TCP 1.101.0.1:3000 -> 22.102.0.1:51744 10 6452 1 2025-12-04 03:08:14.619 00:00:10.325 TCP 23.104.0.1:33436 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:09:09.525 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44646 10 6452 1 2025-12-04 03:09:14.987 00:00:10.374 TCP 23.104.0.1:34330 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:10:09.740 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47676 10 6452 1 2025-12-04 03:10:15.403 00:00:10.363 TCP 23.104.0.1:40364 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:07:07.360 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 03:07:07.359 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 03:11:09.959 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55980 10 6452 1 2025-12-04 03:11:15.810 00:00:10.337 TCP 23.104.0.1:45118 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:11:51.662 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 03:11:51.642 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 03:12:10.188 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60868 10 6452 1 2025-12-04 03:12:16.186 00:00:10.365 TCP 23.104.0.1:48962 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:13:10.409 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43478 10 6452 1 2025-12-04 03:13:16.587 00:00:10.365 TCP 23.104.0.1:55312 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:14:10.632 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46312 10 6452 1 2025-12-04 03:14:16.986 00:00:10.325 TCP 23.104.0.1:38198 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:15:10.842 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51062 10 6452 1 2025-12-04 03:15:17.354 00:00:10.368 TCP 23.104.0.1:54806 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:16:11.077 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48922 10 6452 1 2025-12-04 03:16:17.761 00:00:10.332 TCP 23.104.0.1:38542 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:16:51.957 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 03:16:51.778 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 03:13:07.359 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 03:13:07.362 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 03:17:11.250 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55762 10 6452 1 2025-12-04 03:17:18.131 00:00:10.365 TCP 23.104.0.1:47438 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:18:11.480 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43766 10 6452 1 2025-12-04 03:18:18.536 00:00:10.370 TCP 23.104.0.1:48496 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:19:11.709 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39698 10 6452 1 2025-12-04 03:19:18.941 00:00:10.368 TCP 23.104.0.1:58182 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:20:11.923 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:41228 10 6452 1 2025-12-04 03:20:19.351 00:00:10.376 TCP 23.104.0.1:34880 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:21:12.172 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35110 10 6452 1 2025-12-04 03:21:19.763 00:00:10.346 TCP 23.104.0.1:56434 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:21:51.752 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 03:21:51.922 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 03:22:12.382 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32796 10 6452 1 2025-12-04 03:22:20.145 00:00:10.329 TCP 23.104.0.1:51570 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:19:07.364 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 03:19:07.360 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 03:23:12.602 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47968 10 6452 1 2025-12-04 03:23:20.501 00:00:10.583 TCP 23.104.0.1:50352 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:24:12.782 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45924 10 6452 1 2025-12-04 03:24:21.131 00:00:10.367 TCP 23.104.0.1:49658 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:25:13.039 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:56700 10 6452 1 2025-12-04 03:25:21.534 00:00:10.364 TCP 23.104.0.1:37884 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:26:13.205 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57078 10 6452 1 2025-12-04 03:26:21.938 00:00:10.373 TCP 23.104.0.1:51386 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:26:51.923 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 03:26:52.041 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 03:27:13.420 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50512 10 6452 1 2025-12-04 03:27:22.362 00:00:10.366 TCP 23.104.0.1:47482 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:28:13.597 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50956 10 6452 1 2025-12-04 03:28:22.765 00:00:10.325 TCP 23.104.0.1:53310 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:25:07.366 00:05:04.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 03:25:07.362 00:05:04.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 03:29:13.802 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37380 10 6452 1 2025-12-04 03:29:23.129 00:00:10.334 TCP 23.104.0.1:51548 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:30:14.028 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57312 10 6452 1 2025-12-04 03:30:23.498 00:00:10.327 TCP 23.104.0.1:37348 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:31:14.249 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48480 10 6452 1 2025-12-04 03:31:23.864 00:00:10.369 TCP 23.104.0.1:36046 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:31:52.019 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 03:31:52.083 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 03:32:14.474 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54142 10 6452 1 2025-12-04 03:32:24.272 00:00:10.365 TCP 23.104.0.1:36406 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:33:14.692 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53090 12 10584 1 2025-12-04 03:33:24.675 00:00:10.443 TCP 23.104.0.1:37344 -> 1.101.0.1:3000 15 1926 1 2025-12-04 03:34:14.935 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:55722 10 6661 1 2025-12-04 03:34:25.158 00:00:10.365 TCP 23.104.0.1:33904 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:31:07.369 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 03:31:07.367 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 03:35:15.176 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51588 10 6661 1 2025-12-04 03:35:25.563 00:00:10.365 TCP 23.104.0.1:53918 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:36:15.396 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56422 10 6661 1 2025-12-04 03:36:25.967 00:00:10.376 TCP 23.104.0.1:36990 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:36:52.031 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 03:36:52.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 03:37:15.627 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57486 10 6661 1 2025-12-04 03:37:26.381 00:00:10.363 TCP 23.104.0.1:60126 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:38:15.802 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38572 10 6661 1 2025-12-04 03:38:26.784 00:00:10.364 TCP 23.104.0.1:44414 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:39:16.028 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45878 10 6661 1 2025-12-04 03:39:27.189 00:00:10.364 TCP 23.104.0.1:55242 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:40:16.250 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:32820 10 6661 1 2025-12-04 03:40:27.594 00:00:10.373 TCP 23.104.0.1:36708 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:37:07.366 00:05:04.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 03:37:07.371 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 03:41:16.471 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43304 10 6661 1 2025-12-04 03:41:28.015 00:00:10.364 TCP 23.104.0.1:52888 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:41:52.541 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 03:41:52.435 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 03:42:16.644 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35504 10 6661 1 2025-12-04 03:42:28.419 00:00:10.363 TCP 23.104.0.1:38372 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:43:16.818 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49482 10 6661 1 2025-12-04 03:43:28.822 00:00:10.366 TCP 23.104.0.1:42944 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:44:17.068 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54814 10 6661 1 2025-12-04 03:44:29.228 00:00:10.369 TCP 23.104.0.1:45140 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:45:17.289 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40484 10 6661 1 2025-12-04 03:45:29.632 00:00:10.363 TCP 23.104.0.1:52188 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:46:17.507 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43696 10 6661 1 2025-12-04 03:46:30.034 00:00:10.373 TCP 23.104.0.1:33570 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:46:52.497 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 03:46:52.489 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 03:43:07.370 00:05:04.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 03:43:07.373 00:05:04.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 03:47:17.735 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52590 10 6661 1 2025-12-04 03:47:30.449 00:00:10.376 TCP 23.104.0.1:43126 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:48:17.958 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51352 10 6661 1 2025-12-04 03:48:30.862 00:00:10.370 TCP 23.104.0.1:48444 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:49:18.181 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60394 10 6661 1 2025-12-04 03:49:31.281 00:00:10.365 TCP 23.104.0.1:48702 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:50:18.400 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52906 10 6661 1 2025-12-04 03:50:31.677 00:00:10.375 TCP 23.104.0.1:55042 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:51:18.623 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52398 10 6661 1 2025-12-04 03:51:32.101 00:00:10.363 TCP 23.104.0.1:45410 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:51:52.560 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 03:51:52.431 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 03:52:18.845 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57506 10 6661 1 2025-12-04 03:52:32.504 00:00:10.327 TCP 23.104.0.1:47362 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:49:07.373 00:05:04.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 03:49:07.375 00:05:04.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 03:53:19.078 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46768 10 6661 1 2025-12-04 03:53:32.871 00:00:10.371 TCP 23.104.0.1:60660 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:54:19.294 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50588 10 6661 1 2025-12-04 03:54:33.277 00:00:10.370 TCP 23.104.0.1:39642 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:55:19.462 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40084 10 6661 1 2025-12-04 03:55:33.685 00:00:10.329 TCP 23.104.0.1:39616 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:56:19.678 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58204 10 6661 1 2025-12-04 03:56:34.066 00:00:10.366 TCP 23.104.0.1:47224 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:56:52.838 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 03:56:52.777 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 03:57:19.849 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49966 10 6661 1 2025-12-04 03:57:34.474 00:00:10.366 TCP 23.104.0.1:47654 -> 1.101.0.1:3000 11 1507 1 2025-12-04 03:58:20.038 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43754 10 6661 1 2025-12-04 03:58:34.876 00:00:10.368 TCP 23.104.0.1:46042 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 508124, total packets: 1578, avg bps: 1064, avg pps: 0, avg bpp: 322 Time window: 2025-12-04 02:55:07 - 2025-12-04 03:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0064s User: 0.0011s Wall: 0.0016s flows/second: 99460.1 Runtime: 0.0017s