Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 00:59:00.715 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50300 10 6452 1 2025-12-05 00:59:02.156 00:00:10.363 TCP 23.104.0.1:55582 -> 1.101.0.1:3000 11 1507 1 2025-12-05 00:55:07.758 00:05:04.932 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 00:55:07.754 00:05:04.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 01:00:00.898 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:44174 10 6452 1 2025-12-05 01:00:02.562 00:00:10.365 TCP 23.104.0.1:58686 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:01:01.103 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42304 10 6452 1 2025-12-05 01:01:02.975 00:00:10.377 TCP 23.104.0.1:42228 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:02:01.276 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37246 10 6452 1 2025-12-05 01:02:03.395 00:00:10.362 TCP 23.104.0.1:53282 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:02:18.025 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 01:02:18.038 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 01:03:01.446 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60366 12 10375 1 2025-12-05 01:03:03.801 00:00:10.407 TCP 23.104.0.1:36248 -> 1.101.0.1:3000 15 1926 1 2025-12-05 01:04:01.684 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46384 10 6452 1 2025-12-05 01:04:04.247 00:00:10.365 TCP 23.104.0.1:54532 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:01:07.756 00:05:04.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 01:05:01.901 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35356 10 6452 1 2025-12-05 01:01:07.758 00:05:04.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 01:05:04.652 00:00:10.360 TCP 23.104.0.1:51320 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:06:05.059 00:00:10.361 TCP 23.104.0.1:38504 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:06:02.117 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46644 10 6452 1 2025-12-05 01:07:05.459 00:00:10.363 TCP 23.104.0.1:45496 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:07:02.330 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37924 10 6452 1 2025-12-05 01:07:17.830 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 01:07:18.207 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 01:08:05.858 00:00:10.386 TCP 23.104.0.1:41088 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:08:02.543 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33570 10 6452 1 2025-12-05 01:09:06.282 00:00:10.364 TCP 23.104.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:09:02.756 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34912 10 6452 1 2025-12-05 01:10:02.969 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47524 12 6556 1 2025-12-05 01:10:06.686 00:00:10.364 TCP 23.104.0.1:46224 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:07:07.759 00:05:04.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 01:11:03.197 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39096 10 6452 1 2025-12-05 01:07:07.757 00:05:04.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 01:11:07.102 00:00:10.365 TCP 23.104.0.1:40636 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:12:03.415 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54606 10 6452 1 2025-12-05 01:12:18.488 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 01:12:07.505 00:00:10.369 TCP 23.104.0.1:39424 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:12:18.441 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 01:13:03.626 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42688 10 6452 1 2025-12-05 01:13:07.912 00:00:10.359 TCP 23.104.0.1:60764 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:14:03.839 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50284 10 6452 1 2025-12-05 01:14:08.321 00:00:10.365 TCP 23.104.0.1:45050 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:15:04.079 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53588 10 6452 1 2025-12-05 01:15:08.724 00:00:10.373 TCP 23.104.0.1:41050 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:16:04.299 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42000 10 6452 1 2025-12-05 01:16:09.139 00:00:10.328 TCP 23.104.0.1:36560 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:13:07.761 00:05:04.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 01:17:04.516 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35572 10 6452 1 2025-12-05 01:13:07.760 00:05:04.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 01:17:18.437 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 01:17:18.261 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 01:17:09.510 00:00:10.364 TCP 23.104.0.1:32836 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:18:04.730 00:00:10.786 TCP 1.101.0.1:3000 -> 22.102.0.1:51818 10 6452 1 2025-12-05 01:18:09.918 00:00:10.381 TCP 23.104.0.1:58262 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:19:05.553 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50436 10 6452 1 2025-12-05 01:19:10.335 00:00:10.367 TCP 23.104.0.1:36948 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:20:05.766 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55540 10 6452 1 2025-12-05 01:20:10.740 00:00:10.329 TCP 23.104.0.1:35748 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:21:05.978 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51180 10 6452 1 2025-12-05 01:21:11.115 00:00:10.361 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:22:18.543 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 01:22:11.516 00:00:10.361 TCP 23.104.0.1:37686 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:22:06.216 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49894 10 6452 1 2025-12-05 01:22:18.204 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 01:23:06.425 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44844 10 6452 1 2025-12-05 01:19:07.761 00:05:04.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 01:19:07.763 00:05:04.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 01:23:11.914 00:00:10.379 TCP 23.104.0.1:60370 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:24:06.641 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55142 10 6452 1 2025-12-05 01:24:12.334 00:00:10.364 TCP 23.104.0.1:47490 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:25:06.814 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55294 10 6452 1 2025-12-05 01:25:12.737 00:00:10.322 TCP 23.104.0.1:50744 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:26:07.067 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6452 1 2025-12-05 01:26:13.110 00:00:10.371 TCP 23.104.0.1:36350 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:27:07.287 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56158 10 6452 1 2025-12-05 01:27:18.521 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 01:27:18.590 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 01:27:13.519 00:00:10.365 TCP 23.104.0.1:39966 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:28:07.462 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56588 10 6452 1 2025-12-05 01:28:13.924 00:00:10.379 TCP 23.104.0.1:53300 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:25:07.763 00:05:04.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 01:25:07.765 00:05:04.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 01:29:07.679 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60648 10 6452 1 2025-12-05 01:29:14.342 00:00:10.362 TCP 23.104.0.1:60084 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:30:07.906 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36178 10 6452 1 2025-12-05 01:30:14.749 00:00:10.387 TCP 23.104.0.1:41634 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:31:08.122 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52518 10 6452 1 2025-12-05 01:31:15.175 00:00:10.370 TCP 23.104.0.1:34378 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:32:18.584 00:00:00.012 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 01:32:08.338 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54598 10 6452 1 2025-12-05 01:32:18.634 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 01:32:15.579 00:00:10.338 TCP 23.104.0.1:56924 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:33:08.552 00:00:11.418 TCP 1.101.0.1:3000 -> 22.102.0.1:40740 10 6452 1 2025-12-05 01:33:15.954 00:00:10.368 TCP 23.104.0.1:53092 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:34:10.007 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:47974 10 6452 1 2025-12-05 01:34:16.361 00:00:10.375 TCP 23.104.0.1:57992 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:31:07.766 00:05:04.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 01:31:07.764 00:05:04.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 01:35:10.174 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54382 10 6452 1 2025-12-05 01:35:16.764 00:00:10.332 TCP 23.104.0.1:54174 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:36:10.403 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47358 10 6452 1 2025-12-05 01:36:17.134 00:00:10.366 TCP 23.104.0.1:41518 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:37:18.679 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 01:37:10.627 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60846 10 6452 1 2025-12-05 01:37:18.840 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 01:37:17.541 00:00:10.366 TCP 23.104.0.1:45096 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:38:10.851 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39972 10 6452 1 2025-12-05 01:38:17.946 00:00:11.534 TCP 23.104.0.1:40244 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:39:11.084 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59358 10 6452 1 2025-12-05 01:39:19.518 00:00:10.366 TCP 23.104.0.1:48076 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:40:11.272 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33970 10 6452 1 2025-12-05 01:40:19.923 00:00:10.391 TCP 23.104.0.1:36590 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:37:07.764 00:05:04.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 01:37:07.766 00:05:04.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 01:41:11.509 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40732 10 6452 1 2025-12-05 01:41:20.354 00:00:10.364 TCP 23.104.0.1:36060 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:42:18.776 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 01:42:11.721 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47140 10 6452 1 2025-12-05 01:42:18.782 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 01:42:20.757 00:00:10.815 TCP 23.104.0.1:39468 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:43:11.931 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:51144 10 6452 1 2025-12-05 01:43:21.613 00:00:10.364 TCP 23.104.0.1:44280 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:44:12.181 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56924 10 6452 1 2025-12-05 01:44:22.021 00:00:10.560 TCP 23.104.0.1:56378 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:45:12.394 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45020 10 6452 1 2025-12-05 01:45:22.623 00:00:10.365 TCP 23.104.0.1:58728 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:46:12.602 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33358 10 6452 1 2025-12-05 01:46:23.027 00:00:10.364 TCP 23.104.0.1:57402 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:43:07.768 00:05:04.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 01:43:07.765 00:05:04.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 01:47:19.002 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 01:47:18.955 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 01:47:12.819 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46380 10 6452 1 2025-12-05 01:47:23.431 00:00:10.366 TCP 23.104.0.1:53156 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:48:13.067 00:00:10.989 TCP 1.101.0.1:3000 -> 22.102.0.1:49814 10 6452 1 2025-12-05 01:48:23.832 00:00:10.978 TCP 23.104.0.1:47034 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:49:14.097 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32790 10 6452 1 2025-12-05 01:49:24.876 00:00:10.365 TCP 23.104.0.1:34302 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:50:14.311 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37826 10 6452 1 2025-12-05 01:50:25.280 00:00:10.369 TCP 23.104.0.1:48308 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:51:14.531 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48796 10 6452 1 2025-12-05 01:51:25.687 00:00:10.384 TCP 23.104.0.1:58578 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:52:19.140 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 01:52:19.052 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 01:52:14.751 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35672 10 6452 1 2025-12-05 01:52:26.114 00:00:10.324 TCP 23.104.0.1:47218 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:49:07.768 00:05:04.941 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 01:49:07.767 00:05:04.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 01:53:14.964 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47892 10 6452 1 2025-12-05 01:53:26.477 00:00:10.320 TCP 23.104.0.1:53964 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:54:15.180 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49112 10 6452 1 2025-12-05 01:54:26.829 00:00:10.388 TCP 23.104.0.1:48766 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:55:15.363 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34118 10 6452 1 2025-12-05 01:55:27.281 00:00:10.365 TCP 23.104.0.1:39170 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:56:15.583 00:00:10.771 TCP 1.101.0.1:3000 -> 22.102.0.1:36050 10 6452 1 2025-12-05 01:56:27.690 00:00:10.375 TCP 23.104.0.1:60240 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:57:19.346 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 01:57:19.661 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 01:57:16.396 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44032 10 6452 1 2025-12-05 01:57:28.101 00:00:10.363 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-12-05 01:58:16.610 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55422 10 6452 1 2025-12-05 01:58:28.511 00:00:10.323 TCP 23.104.0.1:41996 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502794, total packets: 1580, avg bps: 1055, avg pps: 0, avg bpp: 318 Time window: 2025-12-05 00:55:07 - 2025-12-05 01:58:38 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0050s User: 0.0010s Wall: 0.0014s flows/second: 117223.2 Runtime: 0.0014s