Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 08:55:06.591 00:05:04.751 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 08:59:03.947 00:00:10.369 TCP 23.104.0.1:39574 -> 1.101.0.1:3000 11 1507 1 2025-12-02 08:55:06.595 00:05:04.745 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 08:59:03.401 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56236 10 6452 1 2025-12-02 09:00:04.349 00:00:10.368 TCP 23.104.0.1:42200 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:00:03.615 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60184 10 6452 1 2025-12-02 09:01:01.679 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:01:01.450 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 09:01:04.758 00:00:10.371 TCP 23.104.0.1:58596 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:01:03.827 00:00:10.734 TCP 1.101.0.1:3000 -> 22.102.0.1:49928 10 6452 1 2025-12-02 09:02:04.606 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60628 10 6452 1 2025-12-02 09:02:05.169 00:00:10.365 TCP 23.104.0.1:56936 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:03:04.787 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:57180 10 6452 1 2025-12-02 09:03:05.576 00:00:10.376 TCP 23.104.0.1:54428 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:04:05.996 00:00:10.377 TCP 23.104.0.1:38738 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:04:05.067 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54640 10 6452 1 2025-12-02 09:01:06.594 00:05:04.746 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 09:05:06.463 00:00:10.362 TCP 23.104.0.1:48590 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:05:05.282 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41932 10 6452 1 2025-12-02 09:01:06.592 00:05:04.751 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 09:06:01.052 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 09:06:01.011 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:06:05.456 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50362 10 6452 1 2025-12-02 09:06:06.877 00:00:10.385 TCP 23.104.0.1:44118 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:07:05.671 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57350 10 6452 1 2025-12-02 09:07:07.302 00:00:10.366 TCP 23.104.0.1:49214 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:08:05.896 00:00:10.682 TCP 1.101.0.1:3000 -> 22.102.0.1:54626 10 6452 1 2025-12-02 09:08:07.707 00:00:10.328 TCP 23.104.0.1:52002 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:09:06.614 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38192 10 6452 1 2025-12-02 09:09:08.101 00:00:10.368 TCP 23.104.0.1:35490 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:10:06.830 00:00:10.369 TCP 1.101.0.1:3000 -> 22.102.0.1:46596 10 6452 1 2025-12-02 09:10:08.507 00:00:11.189 TCP 23.104.0.1:40180 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:11:01.126 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 09:11:01.050 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:07:06.595 00:05:04.747 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 09:07:06.593 00:05:04.752 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 09:11:09.734 00:00:10.368 TCP 23.104.0.1:60962 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:11:07.237 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57414 10 6452 1 2025-12-02 09:12:07.449 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35614 10 6452 1 2025-12-02 09:12:10.142 00:00:10.402 TCP 23.104.0.1:50904 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:13:07.663 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34234 10 6452 1 2025-12-02 09:13:10.578 00:00:10.366 TCP 23.104.0.1:34466 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:14:10.982 00:00:10.373 TCP 23.104.0.1:54792 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:14:07.880 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42078 10 6452 1 2025-12-02 09:15:08.104 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55386 10 6452 1 2025-12-02 09:15:11.393 00:00:10.364 TCP 23.104.0.1:42576 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:16:01.491 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:16:01.409 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 09:16:08.276 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38468 10 6452 1 2025-12-02 09:16:11.803 00:00:10.367 TCP 23.104.0.1:60868 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:13:06.598 00:05:04.746 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 09:13:06.595 00:05:04.751 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 09:17:08.456 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36604 10 6452 1 2025-12-02 09:17:12.207 00:00:12.347 TCP 23.104.0.1:34880 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:18:08.665 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38980 10 6452 1 2025-12-02 09:18:14.591 00:00:10.359 TCP 23.104.0.1:38002 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:19:08.878 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36206 10 6452 1 2025-12-02 09:19:14.996 00:00:10.325 TCP 23.104.0.1:46980 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:20:09.074 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43032 10 6452 1 2025-12-02 09:20:15.362 00:00:10.362 TCP 23.104.0.1:49458 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:21:01.362 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 09:21:01.440 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:21:09.289 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33318 10 6452 1 2025-12-02 09:21:15.766 00:00:10.369 TCP 23.104.0.1:47406 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:22:09.501 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50826 10 6452 1 2025-12-02 09:22:16.174 00:00:11.115 TCP 23.104.0.1:53062 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:19:06.595 00:05:04.753 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 09:19:06.598 00:05:04.748 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 09:23:09.712 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49878 10 6452 1 2025-12-02 09:23:17.325 00:00:10.323 TCP 23.104.0.1:57226 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:24:09.942 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:41292 10 6452 1 2025-12-02 09:24:17.685 00:00:10.322 TCP 23.104.0.1:58746 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:25:10.143 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41868 10 6452 1 2025-12-02 09:25:18.055 00:00:10.364 TCP 23.104.0.1:59946 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:26:01.720 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 09:26:01.497 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:26:10.321 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:42594 10 6452 1 2025-12-02 09:26:18.479 00:00:10.364 TCP 23.104.0.1:60804 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:27:10.506 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53062 10 6452 1 2025-12-02 09:27:18.880 00:00:10.369 TCP 23.104.0.1:33630 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:28:10.720 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47848 10 6452 1 2025-12-02 09:28:19.289 00:00:10.363 TCP 23.104.0.1:56714 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:25:06.597 00:05:04.755 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 09:25:06.599 00:05:04.750 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 09:29:10.931 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:53738 10 6452 1 2025-12-02 09:29:19.696 00:00:10.364 TCP 23.104.0.1:45060 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:30:11.116 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35732 10 6452 1 2025-12-02 09:30:20.105 00:00:10.365 TCP 23.104.0.1:46880 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:31:01.644 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:31:01.753 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 09:31:11.329 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41662 10 6452 1 2025-12-02 09:31:20.507 00:00:10.335 TCP 23.104.0.1:43378 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:32:11.544 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45378 10 6452 1 2025-12-02 09:32:20.887 00:00:10.389 TCP 23.104.0.1:53770 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:33:11.760 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49536 10 6452 1 2025-12-02 09:33:21.332 00:00:10.327 TCP 23.104.0.1:58548 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:34:11.931 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:60658 10 6452 1 2025-12-02 09:34:21.694 00:00:10.365 TCP 23.104.0.1:36000 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:31:06.599 00:05:04.755 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 09:31:06.601 00:05:04.750 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 09:35:12.162 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43104 10 6452 1 2025-12-02 09:35:22.111 00:00:10.325 TCP 23.104.0.1:45866 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:36:01.784 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 09:36:01.668 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:36:12.337 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51740 10 6452 1 2025-12-02 09:36:22.476 00:00:10.363 TCP 23.104.0.1:39302 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:37:12.548 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39212 10 6452 1 2025-12-02 09:37:22.878 00:00:10.369 TCP 23.104.0.1:60022 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:38:12.755 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48056 10 6452 1 2025-12-02 09:38:23.276 00:00:10.364 TCP 23.104.0.1:51642 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:39:12.973 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46294 10 6452 1 2025-12-02 09:39:23.682 00:00:10.374 TCP 23.104.0.1:40030 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:40:13.204 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56418 10 6452 1 2025-12-02 09:40:24.118 00:00:10.364 TCP 23.104.0.1:37934 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:41:01.642 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:41:01.765 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 09:37:06.599 00:05:04.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 09:37:06.603 00:05:04.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 09:41:13.425 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43358 10 6452 1 2025-12-02 09:41:24.527 00:00:10.366 TCP 23.104.0.1:41544 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:42:13.647 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33840 10 6452 1 2025-12-02 09:42:24.936 00:00:10.346 TCP 23.104.0.1:34910 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:43:13.870 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37972 10 6452 1 2025-12-02 09:43:25.320 00:00:10.323 TCP 23.104.0.1:60586 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:44:14.106 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:57440 10 6452 1 2025-12-02 09:44:25.685 00:00:10.368 TCP 23.104.0.1:49520 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:45:14.346 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44678 10 6452 1 2025-12-02 09:45:26.106 00:00:10.366 TCP 23.104.0.1:50676 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:46:01.936 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:46:01.598 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 09:46:14.572 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55222 10 6452 1 2025-12-02 09:46:26.509 00:00:10.363 TCP 23.104.0.1:43756 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:43:06.604 00:05:04.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 09:43:06.602 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 09:47:14.800 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51828 10 6452 1 2025-12-02 09:47:26.909 00:00:10.366 TCP 23.104.0.1:50142 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:48:15.014 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55376 10 6452 1 2025-12-02 09:48:27.310 00:00:10.364 TCP 23.104.0.1:37338 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:49:15.234 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57108 10 6452 1 2025-12-02 09:49:27.719 00:00:10.381 TCP 23.104.0.1:57958 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:50:15.458 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50854 10 6452 1 2025-12-02 09:50:28.128 00:00:10.366 TCP 23.104.0.1:44190 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:51:01.965 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 09:51:02.084 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:51:15.638 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57484 10 6452 1 2025-12-02 09:51:28.533 00:00:10.365 TCP 23.104.0.1:53132 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:52:15.851 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48012 10 6452 1 2025-12-02 09:52:28.936 00:00:10.384 TCP 23.104.0.1:37566 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:49:06.604 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 09:49:06.606 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 09:53:16.034 00:00:10.475 TCP 1.101.0.1:3000 -> 22.102.0.1:42056 10 6452 1 2025-12-02 09:53:29.356 00:00:10.323 TCP 23.104.0.1:34168 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:54:16.551 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36788 10 6452 1 2025-12-02 09:54:29.714 00:00:10.335 TCP 23.104.0.1:52432 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:55:16.725 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:32964 10 6452 1 2025-12-02 09:55:30.112 00:00:10.350 TCP 23.104.0.1:44468 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:56:02.455 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 09:56:02.231 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 09:56:16.910 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37168 10 6452 1 2025-12-02 09:56:30.500 00:00:10.380 TCP 23.104.0.1:51824 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:57:17.118 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59952 10 6452 1 2025-12-02 09:57:30.928 00:00:10.339 TCP 23.104.0.1:34988 -> 1.101.0.1:3000 11 1507 1 2025-12-02 09:58:17.328 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58816 10 6452 1 2025-12-02 09:58:31.301 00:00:10.371 TCP 23.104.0.1:53282 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1045, avg pps: 0, avg bpp: 317 Time window: 2025-12-02 08:55:06 - 2025-12-02 09:58:41 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0018s Wall: 0.0023s flows/second: 71832.3 Runtime: 0.0023s