Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 01:55:06.466 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 01:59:01.136 00:00:10.371 TCP 23.104.0.1:34058 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:55:06.463 00:05:04.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 01:59:23.288 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60266 10 6452 1 2025-12-02 02:00:01.545 00:00:10.366 TCP 23.104.0.1:53456 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:00:23.503 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51444 10 6452 1 2025-12-02 02:00:52.772 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 02:00:52.806 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 02:01:01.944 00:00:10.375 TCP 23.104.0.1:46608 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:01:23.676 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52962 10 6452 1 2025-12-02 02:02:02.357 00:00:10.366 TCP 23.104.0.1:50954 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:02:23.887 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:41864 11 6504 1 2025-12-02 02:03:02.764 00:00:10.375 TCP 23.104.0.1:60116 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:03:24.181 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54322 10 6452 1 2025-12-02 02:04:03.177 00:00:10.366 TCP 23.104.0.1:56770 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:04:24.392 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43870 10 6452 1 2025-12-02 02:01:06.465 00:05:04.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 02:01:06.467 00:05:04.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 02:05:03.578 00:00:10.326 TCP 23.104.0.1:50932 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:05:24.608 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58720 10 6452 1 2025-12-02 02:05:52.625 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 02:05:52.633 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 02:06:03.936 00:00:10.388 TCP 23.104.0.1:49212 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:06:24.828 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39416 10 6452 1 2025-12-02 02:07:04.363 00:00:10.365 TCP 23.104.0.1:43398 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:07:25.055 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60170 10 6452 1 2025-12-02 02:08:04.766 00:00:10.371 TCP 23.104.0.1:58346 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:08:25.272 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59240 10 6452 1 2025-12-02 02:09:05.174 00:00:10.335 TCP 23.104.0.1:58550 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:09:25.488 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38626 10 6452 1 2025-12-02 02:10:05.543 00:00:10.328 TCP 23.104.0.1:55636 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:10:25.701 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49872 10 6452 1 2025-12-02 02:10:52.658 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 02:10:52.865 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 02:07:06.467 00:05:04.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 02:07:06.466 00:05:04.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 02:11:05.909 00:00:10.363 TCP 23.104.0.1:57780 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:11:25.877 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60764 10 6452 1 2025-12-02 02:12:06.309 00:00:10.368 TCP 23.104.0.1:37620 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:12:26.074 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:46246 14 14298 1 2025-12-02 02:13:06.710 00:00:10.474 TCP 23.104.0.1:40842 -> 1.101.0.1:3000 17 2241 1 2025-12-02 02:13:26.345 00:00:10.711 TCP 1.101.0.1:3000 -> 22.102.0.1:41906 10 6452 1 2025-12-02 02:14:07.223 00:00:10.367 TCP 23.104.0.1:57234 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:14:27.094 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49320 10 6452 1 2025-12-02 02:15:07.629 00:00:10.366 TCP 23.104.0.1:60088 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:15:27.305 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35214 10 6452 1 2025-12-02 02:15:53.191 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 02:15:53.022 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 02:16:08.035 00:00:10.367 TCP 23.104.0.1:50806 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:16:27.519 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35036 10 6452 1 2025-12-02 02:13:06.466 00:05:04.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 02:13:06.469 00:05:04.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 02:17:08.445 00:00:10.362 TCP 23.104.0.1:59884 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:17:27.732 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57474 10 6452 1 2025-12-02 02:18:08.841 00:00:10.707 TCP 23.104.0.1:59532 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:18:27.946 00:00:11.096 TCP 1.101.0.1:3000 -> 22.102.0.1:39292 10 6452 1 2025-12-02 02:19:09.589 00:00:10.326 TCP 23.104.0.1:56280 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:19:29.089 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55304 10 6452 1 2025-12-02 02:20:09.954 00:00:10.364 TCP 23.104.0.1:54756 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:20:29.305 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54700 10 6452 1 2025-12-02 02:20:52.824 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 02:20:53.062 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 02:21:10.356 00:00:10.364 TCP 23.104.0.1:46538 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:21:29.517 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58642 10 6452 1 2025-12-02 02:22:10.759 00:00:10.379 TCP 23.104.0.1:59664 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:22:29.741 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39518 10 6452 1 2025-12-02 02:19:06.467 00:05:04.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 02:19:06.469 00:05:04.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 02:23:11.182 00:00:10.365 TCP 23.104.0.1:60974 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:23:29.967 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33654 10 6452 1 2025-12-02 02:24:11.581 00:00:10.367 TCP 23.104.0.1:59264 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:24:30.195 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52364 10 6452 1 2025-12-02 02:25:11.992 00:00:10.363 TCP 23.104.0.1:34054 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:25:30.412 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42654 10 6452 1 2025-12-02 02:25:53.202 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 02:25:52.999 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 02:26:12.392 00:00:10.365 TCP 23.104.0.1:53400 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:26:30.625 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:56624 10 6452 1 2025-12-02 02:27:12.791 00:00:10.382 TCP 23.104.0.1:43398 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:27:30.792 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51848 10 6452 1 2025-12-02 02:28:13.207 00:00:10.321 TCP 23.104.0.1:39582 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:28:31.006 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45396 10 6452 1 2025-12-02 02:25:06.472 00:05:04.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 02:25:06.469 00:05:04.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 02:29:13.569 00:00:10.326 TCP 23.104.0.1:39750 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:29:31.223 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54962 10 6452 1 2025-12-02 02:30:13.936 00:00:10.327 TCP 23.104.0.1:56816 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:30:31.437 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55476 10 6452 1 2025-12-02 02:30:53.177 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 02:30:53.147 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 02:31:14.307 00:00:10.376 TCP 23.104.0.1:52140 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:31:31.649 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55936 10 6452 1 2025-12-02 02:32:14.730 00:00:10.370 TCP 23.104.0.1:35220 -> 1.101.0.1:3000 12 1559 1 2025-12-02 02:32:31.860 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34542 10 6452 1 2025-12-02 02:33:15.140 00:00:10.417 TCP 23.104.0.1:49006 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:33:32.082 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48130 10 6452 1 2025-12-02 02:34:15.596 00:00:10.365 TCP 23.104.0.1:43440 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:34:32.293 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57984 10 6452 1 2025-12-02 02:31:06.472 00:05:04.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 02:31:06.475 00:05:04.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 02:35:16.008 00:00:10.360 TCP 23.104.0.1:53498 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:35:32.511 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35584 10 6452 1 2025-12-02 02:35:53.316 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 02:35:53.471 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 02:36:16.408 00:00:10.366 TCP 23.104.0.1:33004 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:36:32.732 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44252 10 6452 1 2025-12-02 02:37:16.814 00:00:10.362 TCP 23.104.0.1:33166 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:37:32.911 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51486 10 6452 1 2025-12-02 02:38:17.222 00:00:10.364 TCP 23.104.0.1:36892 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:38:33.130 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38876 10 6452 1 2025-12-02 02:39:17.623 00:00:10.378 TCP 23.104.0.1:35182 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:39:33.345 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39042 10 6452 1 2025-12-02 02:40:18.035 00:00:10.363 TCP 23.104.0.1:38346 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:40:33.557 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43454 10 6452 1 2025-12-02 02:40:53.465 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 02:40:53.453 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 02:37:06.477 00:05:04.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 02:37:06.474 00:05:04.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 02:41:18.439 00:00:10.361 TCP 23.104.0.1:40544 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:41:33.783 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57168 10 6452 1 2025-12-02 02:42:18.838 00:00:10.395 TCP 23.104.0.1:37036 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:42:33.954 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:40640 10 6452 1 2025-12-02 02:43:19.271 00:00:10.370 TCP 23.104.0.1:58412 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:43:34.133 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45934 10 6452 1 2025-12-02 02:44:19.678 00:00:10.370 TCP 23.104.0.1:57366 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:44:34.342 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50192 10 6452 1 2025-12-02 02:45:20.102 00:00:10.359 TCP 23.104.0.1:34932 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:45:34.550 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43600 10 6452 1 2025-12-02 02:45:53.647 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 02:45:53.551 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 02:46:20.502 00:00:10.370 TCP 23.104.0.1:45296 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:46:34.771 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50356 10 6452 1 2025-12-02 02:43:06.479 00:05:04.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 02:43:06.477 00:05:04.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 02:47:20.915 00:00:10.365 TCP 23.104.0.1:37140 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:47:34.996 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47674 10 6452 1 2025-12-02 02:48:21.322 00:00:10.362 TCP 23.104.0.1:38110 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:48:35.211 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:50156 10 6452 1 2025-12-02 02:49:21.730 00:00:10.371 TCP 23.104.0.1:40178 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:49:35.418 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38510 10 6452 1 2025-12-02 02:50:22.140 00:00:10.365 TCP 23.104.0.1:46470 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:50:35.635 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50734 10 6452 1 2025-12-02 02:50:53.614 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 02:50:53.755 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 02:51:22.547 00:00:10.365 TCP 23.104.0.1:59232 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:51:35.848 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54102 10 6452 1 2025-12-02 02:52:22.956 00:00:10.324 TCP 23.104.0.1:33020 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:52:36.036 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:59722 10 6452 1 2025-12-02 02:49:06.483 00:05:04.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 02:49:06.479 00:05:04.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 02:53:23.318 00:00:10.364 TCP 23.104.0.1:35654 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:53:36.219 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57670 10 6452 1 2025-12-02 02:54:23.722 00:00:10.371 TCP 23.104.0.1:40338 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:54:36.387 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46524 10 6452 1 2025-12-02 02:55:24.134 00:00:10.332 TCP 23.104.0.1:41312 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:55:36.599 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50212 10 6452 1 2025-12-02 02:55:53.725 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 02:55:53.598 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 02:56:24.504 00:00:10.359 TCP 23.104.0.1:48534 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:56:36.808 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39144 10 6452 1 2025-12-02 02:57:24.906 00:00:10.363 TCP 23.104.0.1:36972 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:57:37.025 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33792 10 6452 1 2025-12-02 02:58:25.310 00:00:10.412 TCP 23.104.0.1:49796 -> 1.101.0.1:3000 11 1507 1 2025-12-02 02:58:37.237 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44008 10 6452 1 Summary: total flows: 164, total bytes: 507032, total packets: 1584, avg bps: 1061, avg pps: 0, avg bpp: 320 Time window: 2025-12-02 01:55:06 - 2025-12-02 02:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0026s User: 0.0026s Wall: 0.0021s flows/second: 76633.9 Runtime: 0.0022s