Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 14:58:56.420 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:53540 12 10375 1 2025-12-05 14:54:12.976 00:05:55.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 14:55:08.079 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 14:59:21.883 00:00:10.382 TCP 23.104.0.1:38342 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:59:56.669 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53828 10 6452 1 2025-12-05 15:00:22.306 00:00:10.364 TCP 23.104.0.1:36356 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:00:56.877 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49202 10 6452 1 2025-12-05 15:01:22.707 00:00:10.385 TCP 23.104.0.1:48200 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:01:57.101 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56022 10 6452 1 2025-12-05 15:02:35.069 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 15:02:23.132 00:00:10.367 TCP 23.104.0.1:50024 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:02:35.056 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 15:02:57.320 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51506 10 6452 1 2025-12-05 15:03:23.536 00:00:10.325 TCP 23.104.0.1:47990 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:03:57.497 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40704 10 6452 1 2025-12-05 15:04:23.899 00:00:10.371 TCP 23.104.0.1:45202 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:04:57.708 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44498 10 6452 1 2025-12-05 15:00:12.978 00:05:55.127 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 15:01:08.108 00:05:04.869 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 15:05:24.310 00:00:10.324 TCP 23.104.0.1:53182 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:05:57.921 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:36958 10 6452 1 2025-12-05 15:06:24.672 00:00:10.374 TCP 23.104.0.1:47530 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:06:58.125 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42954 10 6452 1 2025-12-05 15:07:35.130 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 15:07:25.110 00:00:10.367 TCP 23.104.0.1:35622 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:07:35.272 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 15:07:58.332 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41874 10 6452 1 2025-12-05 15:08:25.516 00:00:10.368 TCP 23.104.0.1:56842 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:08:58.544 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38136 10 6452 1 2025-12-05 15:09:25.923 00:00:10.383 TCP 23.104.0.1:53228 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:09:58.753 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37078 10 6452 1 2025-12-05 15:10:26.344 00:00:10.364 TCP 23.104.0.1:39496 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:10:58.973 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34784 10 6452 1 2025-12-05 15:06:12.980 00:05:55.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 15:07:08.108 00:05:04.874 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 15:11:26.747 00:00:10.366 TCP 23.104.0.1:40416 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:11:59.206 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45766 10 6452 1 2025-12-05 15:12:35.212 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 15:12:35.052 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 15:12:27.150 00:00:10.361 TCP 23.104.0.1:33930 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:12:59.417 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55412 10 6452 1 2025-12-05 15:13:27.549 00:00:10.433 TCP 23.104.0.1:39042 -> 1.101.0.1:3000 15 1926 1 2025-12-05 15:13:59.633 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:46132 12 10375 1 2025-12-05 15:14:28.025 00:00:10.370 TCP 23.104.0.1:37464 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:14:59.874 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47684 10 6452 1 2025-12-05 15:15:28.438 00:00:10.375 TCP 23.104.0.1:42504 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:16:00.076 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39480 10 6452 1 2025-12-05 15:16:28.859 00:00:10.377 TCP 23.104.0.1:53184 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:12:12.985 00:05:55.126 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 15:17:00.287 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43902 10 6452 1 2025-12-05 15:13:08.113 00:05:04.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 15:17:35.137 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 15:17:35.325 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 15:17:29.275 00:00:10.367 TCP 23.104.0.1:56124 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:18:00.529 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47644 10 6452 1 2025-12-05 15:18:29.687 00:00:10.367 TCP 23.104.0.1:49224 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:19:00.761 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49972 10 6452 1 2025-12-05 15:19:30.107 00:00:10.367 TCP 23.104.0.1:53440 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:20:00.970 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35604 10 6452 1 2025-12-05 15:20:30.506 00:00:10.766 TCP 23.104.0.1:58146 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:21:01.197 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40362 10 6452 1 2025-12-05 15:21:31.309 00:00:10.370 TCP 23.104.0.1:47092 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:22:01.421 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58922 10 6452 1 2025-12-05 15:22:35.231 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 15:22:35.238 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 15:22:31.708 00:00:10.365 TCP 23.104.0.1:56860 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:23:01.631 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45828 10 6452 1 2025-12-05 15:18:12.984 00:05:55.130 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 15:19:08.113 00:05:04.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 15:23:32.111 00:00:10.325 TCP 23.104.0.1:51396 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:24:01.844 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59436 10 6452 1 2025-12-05 15:24:32.472 00:00:10.365 TCP 23.104.0.1:38454 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:25:02.080 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60420 10 6452 1 2025-12-05 15:25:32.877 00:00:10.372 TCP 23.104.0.1:45856 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:26:02.296 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58988 10 6452 1 2025-12-05 15:26:33.286 00:00:10.364 TCP 23.104.0.1:34812 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:27:02.513 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49718 10 6452 1 2025-12-05 15:27:35.336 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 15:27:35.504 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 15:27:33.690 00:00:10.335 TCP 23.104.0.1:33310 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:28:02.735 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58202 10 6452 1 2025-12-05 15:28:34.088 00:00:10.360 TCP 23.104.0.1:58056 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:25:08.118 00:05:04.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 15:24:12.988 00:05:55.130 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 15:29:02.945 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:45886 10 6452 1 2025-12-05 15:29:34.489 00:00:10.357 TCP 23.104.0.1:36852 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:30:03.181 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33562 10 6452 1 2025-12-05 15:30:34.887 00:00:10.375 TCP 23.104.0.1:48834 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:31:03.390 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53066 10 6452 1 2025-12-05 15:31:35.304 00:00:10.377 TCP 23.104.0.1:43376 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:32:03.611 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55238 10 6452 1 2025-12-05 15:32:35.569 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 15:32:35.618 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 15:32:35.712 00:00:10.320 TCP 23.104.0.1:57336 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:33:03.823 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41462 10 6452 1 2025-12-05 15:33:36.103 00:00:10.324 TCP 23.104.0.1:56606 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:34:04.076 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47652 10 6452 1 2025-12-05 15:34:36.468 00:00:10.363 TCP 23.104.0.1:36394 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:30:12.988 00:05:55.130 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 15:31:08.119 00:05:04.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 15:35:04.263 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37012 10 6452 1 2025-12-05 15:35:36.874 00:00:10.365 TCP 23.104.0.1:58282 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:36:04.486 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:51702 10 6452 1 2025-12-05 15:36:37.288 00:00:10.366 TCP 23.104.0.1:39132 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:37:04.654 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44402 10 6452 1 2025-12-05 15:37:35.685 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 15:37:35.627 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 15:37:37.759 00:00:10.337 TCP 23.104.0.1:37972 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:38:04.864 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:56388 10 6452 1 2025-12-05 15:38:38.140 00:00:10.328 TCP 23.104.0.1:59218 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:39:05.105 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35082 10 6452 1 2025-12-05 15:39:38.508 00:00:10.366 TCP 23.104.0.1:37904 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:40:05.323 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45220 10 6452 1 2025-12-05 15:40:38.910 00:00:10.363 TCP 23.104.0.1:50144 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:37:08.119 00:05:04.868 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 15:36:12.990 00:05:55.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 15:41:05.536 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48698 10 6452 1 2025-12-05 15:41:39.319 00:00:10.364 TCP 23.104.0.1:46800 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:42:05.748 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57748 10 6452 1 2025-12-05 15:42:35.741 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 15:42:35.687 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 15:42:39.723 00:00:10.369 TCP 23.104.0.1:51522 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:43:05.959 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56104 10 6452 1 2025-12-05 15:43:40.133 00:00:10.367 TCP 23.104.0.1:38854 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:44:06.184 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44788 10 6452 1 2025-12-05 15:44:40.538 00:00:10.361 TCP 23.104.0.1:35430 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:45:06.403 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51132 10 6452 1 2025-12-05 15:45:40.936 00:00:10.375 TCP 23.104.0.1:38132 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:46:06.625 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36748 10 6452 1 2025-12-05 15:46:41.352 00:00:10.363 TCP 23.104.0.1:40996 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:42:12.990 00:05:55.130 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 15:47:06.838 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42612 10 6452 1 2025-12-05 15:43:08.121 00:05:04.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 15:47:35.728 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 15:47:35.762 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 15:47:41.752 00:00:10.348 TCP 23.104.0.1:36984 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:48:07.012 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39198 10 6452 1 2025-12-05 15:48:42.136 00:00:10.360 TCP 23.104.0.1:58306 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:49:07.227 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60984 10 6452 1 2025-12-05 15:49:42.533 00:00:10.364 TCP 23.104.0.1:39862 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:50:07.402 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56530 10 6452 1 2025-12-05 15:50:42.935 00:00:10.384 TCP 23.104.0.1:37564 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:51:07.613 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51632 10 6452 1 2025-12-05 15:51:43.357 00:00:10.369 TCP 23.104.0.1:49266 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:52:07.829 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41304 10 6452 1 2025-12-05 15:52:35.948 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 15:52:36.023 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 15:52:43.768 00:00:10.385 TCP 23.104.0.1:34768 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:48:12.993 00:05:55.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 15:49:08.123 00:05:04.867 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 15:53:08.075 00:00:10.542 TCP 1.101.0.1:3000 -> 22.102.0.1:39748 10 6452 1 2025-12-05 15:53:44.183 00:00:10.364 TCP 23.104.0.1:53866 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:54:08.655 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34502 10 6452 1 2025-12-05 15:54:44.587 00:00:10.372 TCP 23.104.0.1:51636 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:55:08.883 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:34564 10 6452 1 2025-12-05 15:55:44.989 00:00:10.371 TCP 23.104.0.1:41016 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:56:09.108 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42192 10 6452 1 2025-12-05 15:56:45.400 00:00:10.365 TCP 23.104.0.1:44056 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:57:09.328 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:58186 10 6452 1 2025-12-05 15:57:35.795 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 15:57:36.176 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 15:57:45.805 00:00:10.365 TCP 23.104.0.1:60346 -> 1.101.0.1:3000 11 1507 1 2025-12-05 15:58:09.509 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37886 10 6452 1 Summary: total flows: 163, total bytes: 505106, total packets: 1569, avg bps: 1050, avg pps: 0, avg bpp: 321 Time window: 2025-12-05 14:54:12 - 2025-12-05 15:58:19 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0022s Wall: 0.0037s flows/second: 44426.0 Runtime: 0.0037s