Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 11:59:00.564 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50288 10 6452 1 2025-12-05 11:59:05.398 00:00:10.359 TCP 23.104.0.1:41016 -> 1.101.0.1:3000 11 1507 1 2025-12-05 11:55:08.000 00:05:04.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 11:55:07.997 00:05:04.908 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 12:00:00.781 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59332 10 6452 1 2025-12-05 12:00:05.799 00:00:10.366 TCP 23.104.0.1:39744 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:01:00.997 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58634 10 6452 1 2025-12-05 12:01:06.209 00:00:10.366 TCP 23.104.0.1:48696 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:02:01.221 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41066 10 6452 1 2025-12-05 12:02:06.614 00:00:10.383 TCP 23.104.0.1:39028 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:02:31.074 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 12:02:31.299 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 12:03:01.432 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:49200 12 10369 1 2025-12-05 12:03:07.042 00:00:10.440 TCP 23.104.0.1:52092 -> 1.101.0.1:3000 15 1926 1 2025-12-05 12:04:01.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41228 10 6452 1 2025-12-05 12:04:07.527 00:00:10.367 TCP 23.104.0.1:44258 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:01:08.000 00:05:04.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 12:05:01.891 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47990 10 6452 1 2025-12-05 12:01:07.998 00:05:04.910 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 12:05:07.935 00:00:10.783 TCP 23.104.0.1:33186 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:06:02.127 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:49164 10 6452 1 2025-12-05 12:06:08.757 00:00:10.370 TCP 23.104.0.1:60100 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:07:02.388 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33602 10 6452 1 2025-12-05 12:07:09.168 00:00:10.366 TCP 23.104.0.1:58238 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:07:31.462 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 12:07:31.557 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 12:08:02.606 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51906 10 6452 1 2025-12-05 12:08:09.573 00:00:10.363 TCP 23.104.0.1:51282 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:09:02.828 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57892 10 6452 1 2025-12-05 12:09:09.976 00:00:10.364 TCP 23.104.0.1:47908 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:10:03.070 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43086 10 6452 1 2025-12-05 12:10:10.375 00:00:10.366 TCP 23.104.0.1:38738 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:07:07.998 00:05:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 686 1 2025-12-05 12:11:03.277 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53614 10 6452 1 2025-12-05 12:07:08.001 00:05:04.906 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 12:11:10.779 00:00:10.371 TCP 23.104.0.1:50986 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:12:03.493 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58290 10 6452 1 2025-12-05 12:12:11.205 00:00:10.365 TCP 23.104.0.1:35496 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:12:31.484 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 12:12:31.316 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 12:13:03.701 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51714 12 6556 1 2025-12-05 12:13:11.607 00:00:10.368 TCP 23.104.0.1:54602 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:14:03.922 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53658 10 6452 1 2025-12-05 12:14:12.012 00:00:10.328 TCP 23.104.0.1:50728 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:15:04.135 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44672 10 6452 1 2025-12-05 12:15:12.377 00:00:10.365 TCP 23.104.0.1:51014 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:16:04.310 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60374 10 6452 1 2025-12-05 12:16:12.782 00:00:10.326 TCP 23.104.0.1:52900 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:12:12.909 00:05:55.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 12:13:08.004 00:05:04.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 12:17:04.514 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54870 10 6452 1 2025-12-05 12:17:13.145 00:00:10.367 TCP 23.104.0.1:43448 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:17:32.307 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 12:17:32.301 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 12:18:04.689 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33644 10 6452 1 2025-12-05 12:18:13.554 00:00:10.364 TCP 23.104.0.1:35692 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:19:04.904 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60256 10 6452 1 2025-12-05 12:19:13.957 00:00:10.362 TCP 23.104.0.1:45820 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:20:05.122 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55026 10 6452 1 2025-12-05 12:20:14.363 00:00:10.364 TCP 23.104.0.1:53702 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:21:05.369 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45586 10 6452 1 2025-12-05 12:21:14.773 00:00:10.369 TCP 23.104.0.1:53286 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:22:05.548 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55006 10 6452 1 2025-12-05 12:22:15.179 00:00:10.361 TCP 23.104.0.1:53826 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:22:31.727 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 12:22:31.626 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 12:18:12.910 00:05:55.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 12:19:08.035 00:05:04.882 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 12:23:05.773 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57316 10 6452 1 2025-12-05 12:23:15.580 00:00:10.363 TCP 23.104.0.1:59194 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:24:05.947 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:43074 10 6452 1 2025-12-05 12:24:15.981 00:00:10.386 TCP 23.104.0.1:35906 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:25:06.173 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59952 10 6452 1 2025-12-05 12:25:16.403 00:00:10.329 TCP 23.104.0.1:44938 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:26:06.386 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53646 10 6452 1 2025-12-05 12:26:16.770 00:00:10.371 TCP 23.104.0.1:51496 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:27:06.612 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48806 10 6452 1 2025-12-05 12:27:17.176 00:00:10.367 TCP 23.104.0.1:40372 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:27:31.865 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 12:27:32.295 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 12:28:06.784 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:54130 12 10375 1 2025-12-05 12:28:17.581 00:00:10.445 TCP 23.104.0.1:34164 -> 1.101.0.1:3000 15 1926 1 2025-12-05 12:24:12.918 00:05:55.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 12:25:08.036 00:05:04.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 12:29:07.034 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:51470 10 6452 1 2025-12-05 12:29:18.081 00:00:10.374 TCP 23.104.0.1:55152 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:30:07.202 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44132 10 6452 1 2025-12-05 12:30:18.494 00:00:10.367 TCP 23.104.0.1:41098 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:31:07.382 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43616 10 6452 1 2025-12-05 12:31:18.899 00:00:10.370 TCP 23.104.0.1:59654 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:32:07.554 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58508 10 6452 1 2025-12-05 12:32:19.311 00:00:10.365 TCP 23.104.0.1:49630 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:32:31.931 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 12:32:31.868 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 12:33:07.762 00:00:10.401 TCP 1.101.0.1:3000 -> 22.102.0.1:55396 10 6452 1 2025-12-05 12:33:19.715 00:00:10.337 TCP 23.104.0.1:52946 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:34:08.204 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48822 10 6452 1 2025-12-05 12:34:20.111 00:00:10.359 TCP 23.104.0.1:60064 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:30:12.928 00:05:55.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 12:31:08.037 00:05:04.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 12:35:08.410 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60206 10 6452 1 2025-12-05 12:35:20.509 00:00:10.362 TCP 23.104.0.1:54870 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:36:08.629 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39142 10 6452 1 2025-12-05 12:36:20.908 00:00:10.392 TCP 23.104.0.1:42078 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:37:08.842 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50940 10 6452 1 2025-12-05 12:37:21.326 00:00:10.320 TCP 23.104.0.1:51238 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:37:32.048 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 12:37:32.044 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 12:38:09.080 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:40948 12 10375 1 2025-12-05 12:38:21.688 00:00:10.448 TCP 23.104.0.1:60446 -> 1.101.0.1:3000 15 1926 1 2025-12-05 12:39:09.321 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54764 10 6452 1 2025-12-05 12:39:22.164 00:00:10.361 TCP 23.104.0.1:35588 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:40:09.544 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60504 10 6452 1 2025-12-05 12:40:22.563 00:00:10.329 TCP 23.104.0.1:54210 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:36:12.928 00:05:55.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 12:37:08.040 00:05:04.887 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 12:41:09.763 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50698 10 6452 1 2025-12-05 12:41:22.931 00:00:10.385 TCP 23.104.0.1:47026 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:42:09.985 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:50346 10 6452 1 2025-12-05 12:42:31.906 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 12:42:23.351 00:00:10.374 TCP 23.104.0.1:43654 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:42:32.115 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 12:43:10.219 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41634 10 6452 1 2025-12-05 12:43:23.761 00:00:10.332 TCP 23.104.0.1:59412 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:44:10.440 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35052 10 6452 1 2025-12-05 12:44:24.133 00:00:10.611 TCP 23.104.0.1:54316 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:45:10.621 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55370 10 6452 1 2025-12-05 12:45:24.784 00:00:10.363 TCP 23.104.0.1:40660 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:46:10.833 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50592 10 6452 1 2025-12-05 12:46:25.183 00:00:10.365 TCP 23.104.0.1:40026 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:42:12.930 00:05:55.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 12:43:08.045 00:05:04.884 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 12:47:11.082 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36738 10 6452 1 2025-12-05 12:47:25.584 00:00:10.365 TCP 23.104.0.1:50620 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:47:32.160 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 12:47:32.327 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 12:48:11.300 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45506 10 6452 1 2025-12-05 12:48:26.000 00:00:10.861 TCP 23.104.0.1:52846 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:49:11.514 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53602 10 6452 1 2025-12-05 12:49:26.900 00:00:10.378 TCP 23.104.0.1:50742 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:50:11.748 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36886 10 6452 1 2025-12-05 12:50:27.308 00:00:10.364 TCP 23.104.0.1:41222 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:51:11.958 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49366 10 6452 1 2025-12-05 12:51:27.707 00:00:10.376 TCP 23.104.0.1:58384 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:52:12.183 00:00:10.549 TCP 1.101.0.1:3000 -> 22.102.0.1:40274 10 6452 1 2025-12-05 12:52:32.197 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 12:52:32.277 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 12:52:28.114 00:00:10.321 TCP 23.104.0.1:59104 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:48:12.933 00:05:55.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 12:49:08.044 00:05:04.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 12:53:12.769 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54162 10 6452 1 2025-12-05 12:53:28.471 00:00:10.415 TCP 23.104.0.1:44586 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:54:12.988 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:46866 10 6452 1 2025-12-05 12:54:28.926 00:00:10.440 TCP 23.104.0.1:60478 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:55:13.182 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35346 10 6452 1 2025-12-05 12:55:29.405 00:00:10.367 TCP 23.104.0.1:46950 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:56:13.397 00:00:14.625 TCP 1.101.0.1:3000 -> 22.102.0.1:38138 10 6452 1 2025-12-05 12:56:29.809 00:00:10.365 TCP 23.104.0.1:54236 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:57:32.415 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 12:57:18.080 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33848 10 6452 1 2025-12-05 12:57:32.337 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 12:57:30.212 00:00:10.362 TCP 23.104.0.1:60488 -> 1.101.0.1:3000 11 1507 1 2025-12-05 12:58:18.297 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44524 10 6452 1 2025-12-05 12:58:30.612 00:00:10.321 TCP 23.104.0.1:55448 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511420, total packets: 1591, avg bps: 1073, avg pps: 0, avg bpp: 321 Time window: 2025-12-05 11:55:07 - 2025-12-05 12:58:40 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0016s Wall: 0.0026s flows/second: 62813.1 Runtime: 0.0026s