Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 06:55:06.565 00:05:04.770 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 06:55:06.562 00:05:04.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 06:59:10.354 00:00:10.327 TCP 23.104.0.1:33982 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:59:34.080 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42114 10 6452 1 2025-12-02 07:00:10.719 00:00:10.331 TCP 23.104.0.1:45840 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:00:34.306 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41474 10 6452 1 2025-12-02 07:00:58.746 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 07:00:58.613 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 07:01:11.099 00:00:10.322 TCP 23.104.0.1:33244 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:01:34.516 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54744 10 6452 1 2025-12-02 07:02:11.462 00:00:10.363 TCP 23.104.0.1:33740 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:02:34.729 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35812 10 6452 1 2025-12-02 07:03:11.860 00:00:10.331 TCP 23.104.0.1:58066 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:03:34.896 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49384 10 6452 1 2025-12-02 07:04:12.227 00:00:10.327 TCP 23.104.0.1:53708 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:04:35.115 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40966 10 6452 1 2025-12-02 07:01:06.568 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 07:01:06.566 00:05:04.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 07:05:12.594 00:00:10.365 TCP 23.104.0.1:34738 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:05:35.345 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:32872 10 6452 1 2025-12-02 07:05:58.760 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 07:05:58.685 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 07:06:13.001 00:00:10.368 TCP 23.104.0.1:34802 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:06:35.573 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45042 10 6452 1 2025-12-02 07:07:13.408 00:00:11.046 TCP 23.104.0.1:41958 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:07:35.794 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:46582 12 10375 1 2025-12-02 07:08:14.500 00:00:10.440 TCP 23.104.0.1:35366 -> 1.101.0.1:3000 15 1926 1 2025-12-02 07:08:36.062 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57984 10 6452 1 2025-12-02 07:09:14.980 00:00:10.371 TCP 23.104.0.1:42536 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:09:36.276 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51124 10 6452 1 2025-12-02 07:10:15.393 00:00:10.362 TCP 23.104.0.1:46324 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:10:36.501 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:40118 10 6452 1 2025-12-02 07:10:58.950 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 07:10:58.694 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 07:07:06.568 00:05:04.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 07:07:06.571 00:05:04.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 07:11:15.796 00:00:10.378 TCP 23.104.0.1:46334 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:11:36.740 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44040 10 6452 1 2025-12-02 07:12:16.210 00:00:10.329 TCP 23.104.0.1:43316 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:12:36.963 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52728 10 6452 1 2025-12-02 07:13:16.568 00:00:10.368 TCP 23.104.0.1:58474 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:13:37.197 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59048 10 6452 1 2025-12-02 07:14:16.975 00:00:10.366 TCP 23.104.0.1:36156 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:14:37.432 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55354 10 6452 1 2025-12-02 07:15:17.382 00:00:10.323 TCP 23.104.0.1:52788 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:15:37.655 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43588 10 6452 1 2025-12-02 07:15:59.021 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 07:15:58.662 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 07:16:17.744 00:00:10.363 TCP 23.104.0.1:45550 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:16:37.879 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57078 10 6452 1 2025-12-02 07:13:06.572 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 07:13:06.570 00:05:04.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 07:17:18.144 00:00:10.379 TCP 23.104.0.1:40700 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:17:38.110 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36710 10 6452 1 2025-12-02 07:18:18.563 00:00:10.368 TCP 23.104.0.1:54268 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:18:38.329 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:55176 10 6452 1 2025-12-02 07:19:18.968 00:00:10.368 TCP 23.104.0.1:52284 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:19:38.503 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:33818 10 6452 1 2025-12-02 07:20:19.376 00:00:10.368 TCP 23.104.0.1:37932 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:20:38.694 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39470 10 6452 1 2025-12-02 07:20:58.866 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 07:20:58.924 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 07:21:19.800 00:00:10.377 TCP 23.104.0.1:60302 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:21:38.905 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36602 10 6452 1 2025-12-02 07:22:20.247 00:00:11.289 TCP 23.104.0.1:56108 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:22:39.121 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32770 10 6452 1 2025-12-02 07:19:06.574 00:05:04.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 07:19:06.574 00:05:04.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 07:23:21.592 00:00:10.365 TCP 23.104.0.1:40670 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:23:39.342 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58764 10 6452 1 2025-12-02 07:24:21.994 00:00:10.366 TCP 23.104.0.1:47972 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:24:39.554 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45110 10 6452 1 2025-12-02 07:25:22.400 00:00:10.366 TCP 23.104.0.1:58870 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:25:39.728 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34946 10 6452 1 2025-12-02 07:25:59.447 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 07:25:59.574 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 07:26:22.817 00:00:10.328 TCP 23.104.0.1:50852 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:26:39.946 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:43292 10 6452 1 2025-12-02 07:27:23.185 00:00:10.437 TCP 23.104.0.1:37926 -> 1.101.0.1:3000 15 1926 1 2025-12-02 07:27:40.134 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:49888 12 10369 1 2025-12-02 07:28:23.666 00:00:11.192 TCP 23.104.0.1:55674 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:28:40.371 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:34858 10 6452 1 2025-12-02 07:25:06.577 00:05:04.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 07:25:06.575 00:05:04.769 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 07:29:24.902 00:00:10.369 TCP 23.104.0.1:38224 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:29:40.577 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55082 10 6452 1 2025-12-02 07:30:25.310 00:00:10.365 TCP 23.104.0.1:39420 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:30:40.787 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60658 10 6452 1 2025-12-02 07:30:58.845 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 07:30:59.236 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 07:31:25.719 00:00:10.375 TCP 23.104.0.1:40894 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:31:41.003 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:42514 10 6452 1 2025-12-02 07:32:26.130 00:00:10.328 TCP 23.104.0.1:57738 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:32:41.264 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38366 10 6452 1 2025-12-02 07:33:26.493 00:00:10.367 TCP 23.104.0.1:40074 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:33:41.486 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33634 10 6452 1 2025-12-02 07:34:26.896 00:00:10.371 TCP 23.104.0.1:48022 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:34:41.661 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38328 10 6452 1 2025-12-02 07:31:06.579 00:05:04.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 07:31:06.576 00:05:04.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 07:35:27.308 00:00:10.369 TCP 23.104.0.1:56514 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:35:41.877 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34188 10 6452 1 2025-12-02 07:35:59.368 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 07:35:59.284 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 07:36:27.718 00:00:10.405 TCP 23.104.0.1:33274 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:36:42.110 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6452 1 2025-12-02 07:37:28.134 00:00:10.362 TCP 23.104.0.1:38760 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:37:42.334 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45900 10 6452 1 2025-12-02 07:38:28.535 00:00:10.364 TCP 23.104.0.1:53152 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:38:42.552 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46350 10 6452 1 2025-12-02 07:39:28.934 00:00:10.393 TCP 23.104.0.1:52702 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:39:42.778 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:37004 10 6452 1 2025-12-02 07:40:29.356 00:00:10.357 TCP 23.104.0.1:49364 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:40:42.963 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56936 12 6556 1 2025-12-02 07:40:59.439 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 07:40:59.384 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 07:37:06.573 00:05:04.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 07:37:06.572 00:05:04.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 07:41:29.750 00:00:10.391 TCP 23.104.0.1:52202 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:41:43.190 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40096 10 6452 1 2025-12-02 07:42:30.185 00:00:10.373 TCP 23.104.0.1:43708 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:42:43.411 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34510 10 6452 1 2025-12-02 07:43:30.592 00:00:10.366 TCP 23.104.0.1:46680 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:43:43.585 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34482 10 6452 1 2025-12-02 07:44:30.999 00:00:10.361 TCP 23.104.0.1:57682 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:44:43.808 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42088 10 6452 1 2025-12-02 07:45:31.400 00:00:10.327 TCP 23.104.0.1:51972 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:45:44.032 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52160 10 6452 1 2025-12-02 07:45:59.780 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 07:45:59.727 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 07:46:31.770 00:00:10.370 TCP 23.104.0.1:35728 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:46:44.250 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49128 10 6452 1 2025-12-02 07:43:06.574 00:05:04.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 07:43:06.572 00:05:04.777 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 07:47:32.181 00:00:10.360 TCP 23.104.0.1:37410 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:47:44.419 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46168 10 6452 1 2025-12-02 07:48:32.579 00:00:10.362 TCP 23.104.0.1:54848 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:48:44.628 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60210 10 6452 1 2025-12-02 07:49:32.977 00:00:10.362 TCP 23.104.0.1:36594 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:49:44.843 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37034 10 6452 1 2025-12-02 07:50:33.380 00:00:10.367 TCP 23.104.0.1:40584 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:50:45.090 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59828 10 6452 1 2025-12-02 07:50:59.569 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 07:50:59.341 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 07:51:33.785 00:00:10.324 TCP 23.104.0.1:45834 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:51:45.302 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42468 10 6452 1 2025-12-02 07:52:34.149 00:00:10.362 TCP 23.104.0.1:44122 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:52:45.528 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58710 10 6452 1 2025-12-02 07:49:06.574 00:05:04.777 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 07:49:06.577 00:05:04.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 07:53:34.564 00:00:10.359 TCP 23.104.0.1:32934 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:53:45.743 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38120 10 6452 1 2025-12-02 07:54:34.964 00:00:10.366 TCP 23.104.0.1:38240 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:54:45.953 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:59744 10 6452 1 2025-12-02 07:55:35.364 00:00:10.363 TCP 23.104.0.1:50202 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:55:46.199 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:37636 10 6452 1 2025-12-02 07:55:59.659 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 07:55:59.895 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 07:56:35.764 00:00:10.374 TCP 23.104.0.1:48170 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:56:46.466 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59412 10 6452 1 2025-12-02 07:57:36.179 00:00:10.365 TCP 23.104.0.1:48072 -> 1.101.0.1:3000 11 1507 1 2025-12-02 07:57:46.690 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38488 10 6452 1 2025-12-02 07:58:36.583 00:00:10.364 TCP 23.104.0.1:51114 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500678, total packets: 1576, avg bps: 1048, avg pps: 0, avg bpp: 317 Time window: 2025-12-02 06:55:06 - 2025-12-02 07:58:46 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0029s Wall: 0.0021s flows/second: 79358.3 Runtime: 0.0021s