Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 16:58:50.964 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36578 12 10369 1 2025-12-04 16:55:07.616 00:05:04.923 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 16:55:07.613 00:05:04.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 16:59:25.343 00:00:10.321 TCP 23.104.0.1:33682 -> 1.101.0.1:3000 11 1507 1 2025-12-04 16:59:51.180 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51778 10 6452 1 2025-12-04 17:00:25.704 00:00:10.380 TCP 23.104.0.1:44402 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:00:51.390 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42822 10 6452 1 2025-12-04 17:01:26.129 00:00:10.380 TCP 23.104.0.1:39826 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:01:51.601 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:33754 10 6452 1 2025-12-04 17:02:08.434 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 17:02:08.466 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 17:02:26.544 00:00:10.361 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:02:51.789 00:00:10.556 TCP 1.101.0.1:3000 -> 22.102.0.1:60188 10 6452 1 2025-12-04 17:03:26.945 00:00:10.373 TCP 23.104.0.1:54042 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:03:52.387 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46220 10 6452 1 2025-12-04 17:04:27.358 00:00:10.363 TCP 23.104.0.1:55952 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:04:52.603 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35950 10 6452 1 2025-12-04 17:01:07.619 00:05:04.925 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 17:01:07.622 00:05:04.920 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 17:05:27.761 00:00:10.380 TCP 23.104.0.1:58608 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:05:52.826 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44360 10 6452 1 2025-12-04 17:06:28.182 00:00:10.364 TCP 23.104.0.1:53776 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:07:08.512 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 17:06:53.070 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49894 10 6452 1 2025-12-04 17:07:08.347 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 17:07:28.585 00:00:10.370 TCP 23.104.0.1:35820 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:07:53.284 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36172 10 6452 1 2025-12-04 17:08:28.990 00:00:10.372 TCP 23.104.0.1:34118 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:08:53.497 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45002 10 6452 1 2025-12-04 17:09:29.390 00:00:10.366 TCP 23.104.0.1:47978 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:09:53.704 00:00:10.307 TCP 1.101.0.1:3000 -> 22.102.0.1:36922 10 6452 1 2025-12-04 17:10:29.792 00:00:10.378 TCP 23.104.0.1:38328 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:10:54.075 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43078 10 6452 1 2025-12-04 17:07:07.620 00:05:04.923 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 17:07:07.617 00:05:04.928 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 17:11:30.207 00:00:10.855 TCP 23.104.0.1:54128 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:11:54.248 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56068 10 6452 1 2025-12-04 17:12:08.543 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 17:12:08.566 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 17:12:31.108 00:00:10.368 TCP 23.104.0.1:36700 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:12:54.486 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39826 10 6452 1 2025-12-04 17:13:31.519 00:00:10.364 TCP 23.104.0.1:41072 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:13:54.704 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36494 10 6452 1 2025-12-04 17:14:31.921 00:00:10.383 TCP 23.104.0.1:38840 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:14:54.929 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39382 10 6452 1 2025-12-04 17:15:32.364 00:00:10.364 TCP 23.104.0.1:42022 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:15:55.167 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36064 10 6452 1 2025-12-04 17:16:32.768 00:00:10.372 TCP 23.104.0.1:40370 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:16:55.375 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38222 10 6452 1 2025-12-04 17:17:08.635 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 17:17:08.623 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 17:13:07.619 00:05:04.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 17:13:07.621 00:05:04.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 17:17:33.184 00:00:10.328 TCP 23.104.0.1:48610 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:17:55.591 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50510 10 6452 1 2025-12-04 17:18:33.547 00:00:10.370 TCP 23.104.0.1:48516 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:18:55.807 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51928 10 6452 1 2025-12-04 17:19:33.957 00:00:10.376 TCP 23.104.0.1:52046 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:19:55.986 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36290 10 6452 1 2025-12-04 17:20:34.373 00:00:10.363 TCP 23.104.0.1:47788 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:20:56.204 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44520 10 6452 1 2025-12-04 17:21:34.768 00:00:10.372 TCP 23.104.0.1:60746 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:21:56.417 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44530 10 6452 1 2025-12-04 17:22:08.816 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 17:22:08.466 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 17:22:35.183 00:00:10.359 TCP 23.104.0.1:59772 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:22:56.645 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39922 10 6452 1 2025-12-04 17:19:07.621 00:05:04.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 17:19:07.620 00:05:04.928 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 17:23:35.582 00:00:10.484 TCP 23.104.0.1:52228 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:23:56.820 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51710 10 6452 1 2025-12-04 17:24:36.112 00:00:10.358 TCP 23.104.0.1:49508 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:24:57.043 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35654 10 6452 1 2025-12-04 17:25:36.513 00:00:10.371 TCP 23.104.0.1:36252 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:25:57.258 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37282 10 6452 1 2025-12-04 17:26:36.921 00:00:10.387 TCP 23.104.0.1:33074 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:27:08.816 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 17:27:08.742 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 17:26:57.476 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59698 10 6452 1 2025-12-04 17:27:37.341 00:00:10.369 TCP 23.104.0.1:37224 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:27:57.682 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57778 10 6452 1 2025-12-04 17:28:37.748 00:00:10.997 TCP 23.104.0.1:42256 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:28:57.897 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50170 10 6452 1 2025-12-04 17:25:07.625 00:05:04.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 17:25:07.621 00:05:04.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 17:29:38.786 00:00:10.370 TCP 23.104.0.1:37176 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:29:58.085 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56516 10 6452 1 2025-12-04 17:30:39.191 00:00:10.365 TCP 23.104.0.1:36184 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:30:58.318 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51432 10 6452 1 2025-12-04 17:31:39.591 00:00:10.376 TCP 23.104.0.1:42346 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:32:09.008 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 17:32:08.826 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 17:31:58.539 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36684 10 6452 1 2025-12-04 17:32:40.008 00:00:10.326 TCP 23.104.0.1:55548 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:32:58.708 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42454 10 6452 1 2025-12-04 17:33:40.366 00:00:11.741 TCP 23.104.0.1:36250 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:33:58.916 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59938 10 6452 1 2025-12-04 17:34:42.144 00:00:10.365 TCP 23.104.0.1:39972 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:31:07.625 00:05:04.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 17:34:59.136 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44086 10 6452 1 2025-12-04 17:31:07.622 00:05:04.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 17:35:42.546 00:00:10.371 TCP 23.104.0.1:57546 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:35:59.309 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48434 10 6452 1 2025-12-04 17:36:42.957 00:00:10.325 TCP 23.104.0.1:53824 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:36:59.548 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:35938 10 6452 1 2025-12-04 17:37:09.223 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 17:37:08.779 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 17:37:43.335 00:00:10.368 TCP 23.104.0.1:38578 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:37:59.735 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43000 10 6452 1 2025-12-04 17:38:43.741 00:00:10.322 TCP 23.104.0.1:35922 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:38:59.948 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:46970 10 6452 1 2025-12-04 17:39:44.103 00:00:10.362 TCP 23.104.0.1:50550 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:40:00.181 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41482 10 6452 1 2025-12-04 17:40:44.504 00:00:10.379 TCP 23.104.0.1:38914 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:41:00.357 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57066 10 6452 1 2025-12-04 17:37:07.625 00:05:04.927 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 17:37:07.623 00:05:04.932 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 17:41:44.909 00:00:10.368 TCP 23.104.0.1:51048 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:42:09.365 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 17:42:00.569 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57918 10 6452 1 2025-12-04 17:42:09.338 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 17:42:45.321 00:00:10.332 TCP 23.104.0.1:53166 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:43:00.792 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:43494 10 6452 1 2025-12-04 17:43:45.692 00:00:10.365 TCP 23.104.0.1:49390 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:44:00.977 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:35184 10 6452 1 2025-12-04 17:44:46.109 00:00:10.368 TCP 23.104.0.1:37684 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:45:01.210 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:47796 10 6452 1 2025-12-04 17:45:46.520 00:00:10.365 TCP 23.104.0.1:48812 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:46:01.413 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57244 10 6452 1 2025-12-04 17:46:46.925 00:00:10.376 TCP 23.104.0.1:60946 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:47:09.229 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 17:47:09.091 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 17:47:01.630 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58708 10 6452 1 2025-12-04 17:43:07.625 00:05:04.931 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 17:43:07.627 00:05:04.926 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 17:47:47.342 00:00:10.330 TCP 23.104.0.1:48872 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:48:01.844 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:46864 12 10369 1 2025-12-04 17:48:47.717 00:00:11.425 TCP 23.104.0.1:34772 -> 1.101.0.1:3000 15 1926 1 2025-12-04 17:49:02.102 00:00:16.089 TCP 1.101.0.1:3000 -> 22.102.0.1:35918 10 6452 1 2025-12-04 17:49:49.185 00:00:10.363 TCP 23.104.0.1:44836 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:50:08.231 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37578 10 6452 1 2025-12-04 17:50:49.587 00:00:10.322 TCP 23.104.0.1:37992 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:51:08.402 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50200 10 6452 1 2025-12-04 17:51:49.948 00:00:10.371 TCP 23.104.0.1:54334 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:52:09.434 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 17:52:09.425 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 17:52:08.569 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35334 10 6452 1 2025-12-04 17:52:50.364 00:00:10.378 TCP 23.104.0.1:35052 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:49:07.626 00:05:04.931 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 17:49:07.629 00:05:04.926 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 17:53:08.798 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52130 10 6452 1 2025-12-04 17:53:50.780 00:00:10.367 TCP 23.104.0.1:34962 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:54:09.030 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40028 10 6452 1 2025-12-04 17:54:51.197 00:00:10.366 TCP 23.104.0.1:38710 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:55:09.250 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42134 10 6452 1 2025-12-04 17:55:51.599 00:00:10.319 TCP 23.104.0.1:58574 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:56:09.466 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48268 10 6452 1 2025-12-04 17:56:51.956 00:00:10.365 TCP 23.104.0.1:37952 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:57:09.476 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 17:57:09.402 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 17:57:09.686 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59826 10 6452 1 2025-12-04 17:57:52.362 00:00:10.365 TCP 23.104.0.1:40506 -> 1.101.0.1:3000 11 1507 1 2025-12-04 17:58:09.912 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58468 10 6452 1 Summary: total flows: 163, total bytes: 505094, total packets: 1569, avg bps: 1065, avg pps: 0, avg bpp: 321 Time window: 2025-12-04 16:55:07 - 2025-12-04 17:58:20 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0040s User: 0.0020s Wall: 0.0026s flows/second: 63668.4 Runtime: 0.0026s