Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 06:58:42.565 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44058 10 6452 1 2025-12-05 06:58:47.914 00:00:10.368 TCP 23.104.0.1:37042 -> 1.101.0.1:3000 11 1507 1 2025-12-05 06:55:07.864 00:05:04.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 06:55:07.866 00:05:04.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 06:59:42.730 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35264 10 6452 1 2025-12-05 06:59:48.324 00:00:10.324 TCP 23.104.0.1:53024 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:00:42.945 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:38842 10 6452 1 2025-12-05 07:00:48.684 00:00:10.361 TCP 23.104.0.1:53976 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:01:43.175 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51034 10 6452 1 2025-12-05 07:01:49.100 00:00:10.373 TCP 23.104.0.1:54698 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:02:25.291 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 07:02:25.405 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 07:02:43.390 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33792 10 6452 1 2025-12-05 07:02:49.526 00:00:10.359 TCP 23.104.0.1:35050 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:03:43.604 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:39482 12 10375 1 2025-12-05 07:03:49.929 00:00:10.466 TCP 23.104.0.1:43354 -> 1.101.0.1:3000 15 1926 1 2025-12-05 07:04:43.850 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50386 10 6452 1 2025-12-05 07:04:50.436 00:00:10.364 TCP 23.104.0.1:35428 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:01:07.865 00:05:04.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 07:01:07.869 00:05:04.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 07:05:44.087 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38456 10 6452 1 2025-12-05 07:05:50.837 00:00:10.383 TCP 23.104.0.1:48148 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:06:44.303 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45024 10 6452 1 2025-12-05 07:06:51.258 00:00:10.362 TCP 23.104.0.1:41918 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:07:25.109 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 07:07:25.132 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 07:07:44.518 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50976 10 6452 1 2025-12-05 07:07:51.662 00:00:10.366 TCP 23.104.0.1:48870 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:08:44.698 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33888 10 6452 1 2025-12-05 07:08:52.089 00:00:10.320 TCP 23.104.0.1:37832 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:09:44.915 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:46034 10 6452 1 2025-12-05 07:09:52.447 00:00:10.366 TCP 23.104.0.1:55028 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:10:45.156 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54826 10 6452 1 2025-12-05 07:10:52.852 00:00:10.333 TCP 23.104.0.1:58414 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:07:07.871 00:05:04.936 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 07:07:07.870 00:05:04.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 07:11:45.380 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42766 10 6452 1 2025-12-05 07:11:53.229 00:00:10.332 TCP 23.104.0.1:49538 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:12:25.384 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 07:12:25.570 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 07:12:45.591 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57760 10 6452 1 2025-12-05 07:12:53.604 00:00:10.363 TCP 23.104.0.1:38636 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:13:45.816 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:41474 12 10375 1 2025-12-05 07:13:54.011 00:00:10.404 TCP 23.104.0.1:46864 -> 1.101.0.1:3000 15 1926 1 2025-12-05 07:14:46.018 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39972 10 6452 1 2025-12-05 07:14:54.452 00:00:10.326 TCP 23.104.0.1:41928 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:15:46.210 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46884 10 6452 1 2025-12-05 07:15:54.826 00:00:10.385 TCP 23.104.0.1:57148 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:16:46.382 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50958 10 6452 1 2025-12-05 07:16:55.253 00:00:10.368 TCP 23.104.0.1:43646 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:13:07.871 00:05:04.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 07:13:07.874 00:05:04.938 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 07:17:25.509 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 07:17:25.495 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 07:17:46.594 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36088 10 6452 1 2025-12-05 07:17:55.668 00:00:10.381 TCP 23.104.0.1:37414 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:18:46.802 00:00:12.942 TCP 1.101.0.1:3000 -> 22.102.0.1:40660 10 6452 1 2025-12-05 07:18:56.104 00:00:10.361 TCP 23.104.0.1:57650 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:19:49.794 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33808 10 6452 1 2025-12-05 07:19:56.505 00:00:10.361 TCP 23.104.0.1:33900 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:20:50.017 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55540 10 6452 1 2025-12-05 07:20:56.906 00:00:10.362 TCP 23.104.0.1:54234 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:21:50.235 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58720 10 6452 1 2025-12-05 07:21:57.312 00:00:10.331 TCP 23.104.0.1:49892 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:22:25.511 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 07:22:25.809 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 07:22:50.453 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42162 10 6452 1 2025-12-05 07:22:57.676 00:00:10.329 TCP 23.104.0.1:34752 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:19:07.877 00:05:04.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 07:19:07.875 00:05:04.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 07:23:50.668 00:00:10.762 TCP 1.101.0.1:3000 -> 22.102.0.1:38660 10 6452 1 2025-12-05 07:23:58.060 00:00:10.327 TCP 23.104.0.1:60366 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:24:51.469 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46564 10 6452 1 2025-12-05 07:24:58.423 00:00:10.364 TCP 23.104.0.1:37228 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:25:51.692 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42236 10 6452 1 2025-12-05 07:25:58.828 00:00:10.404 TCP 23.104.0.1:43364 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:26:51.912 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51232 10 6452 1 2025-12-05 07:26:59.276 00:00:10.365 TCP 23.104.0.1:54636 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:27:25.797 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 07:27:25.755 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 07:27:52.126 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43308 10 6452 1 2025-12-05 07:27:59.677 00:00:10.365 TCP 23.104.0.1:37564 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:28:52.300 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53270 10 6452 1 2025-12-05 07:29:00.102 00:00:10.361 TCP 23.104.0.1:48502 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:25:07.879 00:05:04.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 07:25:07.881 00:05:04.934 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 07:29:52.519 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42580 10 6452 1 2025-12-05 07:30:00.503 00:00:10.366 TCP 23.104.0.1:40666 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:30:52.738 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42190 10 6452 1 2025-12-05 07:31:00.912 00:00:10.365 TCP 23.104.0.1:46430 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:31:52.952 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58218 10 6452 1 2025-12-05 07:32:01.320 00:00:10.366 TCP 23.104.0.1:46036 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:32:25.852 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 07:32:25.724 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 07:32:53.192 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37488 10 6452 1 2025-12-05 07:33:01.724 00:00:10.375 TCP 23.104.0.1:47820 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:33:53.405 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57730 10 6452 1 2025-12-05 07:34:02.135 00:00:10.366 TCP 23.104.0.1:54840 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:34:53.623 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45246 10 6452 1 2025-12-05 07:31:07.880 00:05:04.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 07:31:07.883 00:05:04.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 07:35:02.541 00:00:10.369 TCP 23.104.0.1:43410 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:35:53.839 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35752 10 6452 1 2025-12-05 07:36:02.950 00:00:10.385 TCP 23.104.0.1:43508 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:36:54.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51646 10 6452 1 2025-12-05 07:37:03.369 00:00:10.360 TCP 23.104.0.1:50164 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:37:25.922 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 07:37:25.737 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 07:37:54.292 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47054 10 6452 1 2025-12-05 07:38:03.771 00:00:10.374 TCP 23.104.0.1:49872 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:38:54.523 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46394 10 6452 1 2025-12-05 07:39:04.184 00:00:10.328 TCP 23.104.0.1:57608 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:39:54.741 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46012 10 6452 1 2025-12-05 07:40:04.549 00:00:10.365 TCP 23.104.0.1:48868 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:40:54.950 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43990 10 6452 1 2025-12-05 07:37:07.882 00:05:04.936 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 07:37:07.887 00:05:04.931 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 07:41:04.950 00:00:10.325 TCP 23.104.0.1:36876 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:41:55.179 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49406 10 6452 1 2025-12-05 07:42:05.314 00:00:10.321 TCP 23.104.0.1:40930 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:42:25.983 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 07:42:25.989 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 07:42:55.398 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51898 10 6452 1 2025-12-05 07:43:05.674 00:00:10.369 TCP 23.104.0.1:50256 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:43:55.624 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51910 10 6452 1 2025-12-05 07:44:06.094 00:00:10.368 TCP 23.104.0.1:52192 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:44:55.846 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50010 10 6452 1 2025-12-05 07:45:06.502 00:00:10.369 TCP 23.104.0.1:43514 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:45:56.084 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44234 10 6452 1 2025-12-05 07:46:06.911 00:00:10.362 TCP 23.104.0.1:44894 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:46:56.259 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34292 10 6452 1 2025-12-05 07:43:07.886 00:05:04.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 07:43:07.884 00:05:04.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 07:47:07.323 00:00:10.360 TCP 23.104.0.1:60934 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:47:25.926 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 07:47:26.199 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 07:47:56.444 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34324 10 6452 1 2025-12-05 07:48:07.723 00:00:14.641 TCP 23.104.0.1:59022 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:48:56.658 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37166 10 6452 1 2025-12-05 07:49:12.404 00:00:10.326 TCP 23.104.0.1:52976 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:49:56.827 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35920 10 6452 1 2025-12-05 07:50:12.776 00:00:11.491 TCP 23.104.0.1:60672 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:50:57.068 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56278 10 6452 1 2025-12-05 07:51:14.306 00:00:10.320 TCP 23.104.0.1:34712 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:51:57.288 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51446 10 6452 1 2025-12-05 07:52:14.667 00:00:10.363 TCP 23.104.0.1:58922 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:52:26.349 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 07:52:26.295 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 07:49:07.895 00:05:04.926 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 07:52:57.509 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57336 10 6452 1 2025-12-05 07:49:07.894 00:05:04.931 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 07:53:15.108 00:00:10.363 TCP 23.104.0.1:49600 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:53:57.724 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41670 10 6452 1 2025-12-05 07:54:15.511 00:00:10.365 TCP 23.104.0.1:32874 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:54:57.936 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:51368 10 6452 1 2025-12-05 07:55:15.920 00:00:10.381 TCP 23.104.0.1:49094 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:55:58.125 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49350 10 6452 1 2025-12-05 07:56:16.339 00:00:10.366 TCP 23.104.0.1:38608 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:56:58.331 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43716 10 6452 1 2025-12-05 07:57:26.300 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 07:57:26.371 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 07:57:16.750 00:00:10.365 TCP 23.104.0.1:38624 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:57:58.515 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60268 10 6452 1 2025-12-05 07:58:17.150 00:00:10.324 TCP 23.104.0.1:36714 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507032, total packets: 1584, avg bps: 1067, avg pps: 0, avg bpp: 320 Time window: 2025-12-05 06:55:07 - 2025-12-05 07:58:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0011s Wall: 0.0022s flows/second: 73021.9 Runtime: 0.0023s