Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 10:55:06.631 00:05:04.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 10:55:06.628 00:05:04.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 10:59:03.923 00:00:10.389 TCP 23.104.0.1:33770 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:59:34.851 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54992 10 6452 1 2025-12-02 11:00:04.350 00:00:10.366 TCP 23.104.0.1:55736 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:00:35.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55596 10 6452 1 2025-12-02 11:01:03.798 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 11:01:04.073 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 11:01:04.754 00:00:10.450 TCP 23.104.0.1:36234 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:01:35.299 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33724 10 6452 1 2025-12-02 11:02:05.242 00:00:10.374 TCP 23.104.0.1:49972 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:02:35.517 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39724 10 6452 1 2025-12-02 11:03:05.658 00:00:10.376 TCP 23.104.0.1:47498 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:03:35.765 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40210 10 6452 1 2025-12-02 11:04:06.099 00:00:10.362 TCP 23.104.0.1:43260 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:04:35.945 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:59696 10 6452 1 2025-12-02 11:01:06.628 00:05:04.758 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 11:01:06.632 00:05:04.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 11:05:06.504 00:00:10.331 TCP 23.104.0.1:43886 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:05:36.151 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54764 10 6452 1 2025-12-02 11:06:03.513 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 11:06:03.446 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 11:06:06.872 00:00:10.362 TCP 23.104.0.1:54606 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:06:36.365 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56842 10 6452 1 2025-12-02 11:07:07.272 00:00:10.369 TCP 23.104.0.1:50138 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:07:36.583 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36478 10 6452 1 2025-12-02 11:08:07.681 00:00:10.323 TCP 23.104.0.1:60616 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:08:36.792 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37006 10 6452 1 2025-12-02 11:09:08.067 00:00:10.369 TCP 23.104.0.1:56776 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:09:36.974 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51148 10 6452 1 2025-12-02 11:10:08.483 00:00:10.371 TCP 23.104.0.1:33810 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:10:37.197 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49032 10 6452 1 2025-12-02 11:11:03.577 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 11:11:03.654 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 11:07:06.631 00:05:04.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 11:07:06.633 00:05:04.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 11:11:08.901 00:00:10.364 TCP 23.104.0.1:36668 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:11:37.418 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35832 10 6452 1 2025-12-02 11:12:09.303 00:00:10.361 TCP 23.104.0.1:53118 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:12:37.634 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53288 10 6452 1 2025-12-02 11:13:09.701 00:00:10.372 TCP 23.104.0.1:51406 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:13:37.845 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50424 10 6452 1 2025-12-02 11:14:10.109 00:00:10.367 TCP 23.104.0.1:33538 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:14:38.079 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51004 10 6452 1 2025-12-02 11:15:10.515 00:00:10.368 TCP 23.104.0.1:52316 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:15:38.299 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56874 10 6452 1 2025-12-02 11:16:03.894 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 11:16:03.716 00:00:00.014 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 11:16:10.920 00:00:10.386 TCP 23.104.0.1:43696 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:16:38.515 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36416 10 6452 1 2025-12-02 11:13:06.632 00:05:04.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 11:13:06.634 00:05:04.753 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 11:17:11.345 00:00:10.700 TCP 23.104.0.1:44478 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:17:38.724 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37514 10 6452 1 2025-12-02 11:18:12.101 00:00:10.376 TCP 23.104.0.1:46960 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:18:38.945 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33876 10 6452 1 2025-12-02 11:19:12.513 00:00:10.362 TCP 23.104.0.1:50996 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:19:39.174 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37780 10 6452 1 2025-12-02 11:20:12.916 00:00:10.386 TCP 23.104.0.1:58656 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:20:39.345 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51428 10 6452 1 2025-12-02 11:21:04.544 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 11:21:04.533 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 11:21:13.337 00:00:10.368 TCP 23.104.0.1:56556 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:21:39.560 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60138 10 6452 1 2025-12-02 11:22:13.742 00:00:10.364 TCP 23.104.0.1:49962 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:22:39.776 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56820 10 6452 1 2025-12-02 11:19:06.636 00:05:04.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 11:19:06.634 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 11:23:14.145 00:00:10.327 TCP 23.104.0.1:55900 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:23:39.995 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60678 10 6452 1 2025-12-02 11:24:14.507 00:00:10.359 TCP 23.104.0.1:52256 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:24:40.218 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59980 10 6452 1 2025-12-02 11:25:14.899 00:00:10.366 TCP 23.104.0.1:60362 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:25:40.424 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43826 10 6452 1 2025-12-02 11:26:04.004 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 11:26:03.828 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 11:26:15.306 00:00:10.365 TCP 23.104.0.1:47272 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:26:40.639 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39294 10 6452 1 2025-12-02 11:27:15.715 00:00:10.325 TCP 23.104.0.1:56374 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:27:40.856 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48330 10 6452 1 2025-12-02 11:28:16.108 00:00:10.371 TCP 23.104.0.1:34844 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:28:41.100 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57976 10 6452 1 2025-12-02 11:25:06.634 00:05:04.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 11:25:06.637 00:05:04.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 11:29:16.513 00:00:10.368 TCP 23.104.0.1:51148 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:29:41.312 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45442 10 6452 1 2025-12-02 11:30:16.918 00:00:10.329 TCP 23.104.0.1:37796 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:30:41.525 00:00:10.308 TCP 1.101.0.1:3000 -> 22.102.0.1:54044 10 6452 1 2025-12-02 11:31:03.916 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 11:31:03.979 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 11:31:17.293 00:00:10.379 TCP 23.104.0.1:50602 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:31:41.876 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46180 10 6452 1 2025-12-02 11:32:17.722 00:00:10.374 TCP 23.104.0.1:42472 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:32:42.097 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56562 10 6452 1 2025-12-02 11:33:18.135 00:00:10.326 TCP 23.104.0.1:37714 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:33:42.311 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37702 10 6452 1 2025-12-02 11:34:18.501 00:00:10.382 TCP 23.104.0.1:38746 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:34:42.487 00:00:11.036 TCP 1.101.0.1:3000 -> 22.102.0.1:52206 10 6452 1 2025-12-02 11:31:06.639 00:05:04.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 11:31:06.638 00:05:04.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 11:35:18.919 00:00:10.360 TCP 23.104.0.1:49840 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:35:43.559 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53652 10 6452 1 2025-12-02 11:36:03.958 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 11:36:04.088 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 11:36:19.318 00:00:10.365 TCP 23.104.0.1:55676 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:36:43.775 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56346 10 6452 1 2025-12-02 11:37:19.722 00:00:10.369 TCP 23.104.0.1:46086 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:37:43.946 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:33422 10 6452 1 2025-12-02 11:38:20.135 00:00:10.361 TCP 23.104.0.1:58420 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:38:44.149 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34038 10 6452 1 2025-12-02 11:39:20.535 00:00:10.362 TCP 23.104.0.1:50120 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:39:44.361 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49468 10 6452 1 2025-12-02 11:40:20.937 00:00:10.384 TCP 23.104.0.1:36006 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:40:44.573 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38476 10 6452 1 2025-12-02 11:41:04.024 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 11:41:04.162 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 11:37:06.640 00:05:04.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 11:37:06.641 00:05:04.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 11:41:21.360 00:00:10.370 TCP 23.104.0.1:32936 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:41:44.789 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40718 10 6452 1 2025-12-02 11:42:21.763 00:00:11.079 TCP 23.104.0.1:50086 -> 1.101.0.1:3000 12 1559 1 2025-12-02 11:42:44.999 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38220 10 6452 1 2025-12-02 11:43:22.879 00:00:10.389 TCP 23.104.0.1:44530 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:43:45.218 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54810 10 6452 1 2025-12-02 11:44:23.303 00:00:10.372 TCP 23.104.0.1:34616 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:44:45.430 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44938 10 6452 1 2025-12-02 11:45:23.711 00:00:10.372 TCP 23.104.0.1:35132 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:45:45.653 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56902 10 6452 1 2025-12-02 11:46:04.185 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 11:46:04.585 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 11:46:24.119 00:00:10.368 TCP 23.104.0.1:39562 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:46:45.865 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33828 10 6452 1 2025-12-02 11:43:06.642 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 11:43:06.639 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 11:47:24.521 00:00:10.327 TCP 23.104.0.1:37226 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:47:46.090 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49578 10 6452 1 2025-12-02 11:48:24.888 00:00:10.371 TCP 23.104.0.1:37290 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:48:46.304 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55798 10 6452 1 2025-12-02 11:49:25.292 00:00:10.328 TCP 23.104.0.1:50852 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:49:46.522 00:00:10.750 TCP 1.101.0.1:3000 -> 22.102.0.1:49296 10 6452 1 2025-12-02 11:50:25.652 00:00:10.365 TCP 23.104.0.1:40094 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:50:47.309 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38712 10 6452 1 2025-12-02 11:51:04.308 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 11:51:04.400 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 11:51:26.061 00:00:10.368 TCP 23.104.0.1:50462 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:51:47.521 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39462 10 6452 1 2025-12-02 11:52:26.463 00:00:10.369 TCP 23.104.0.1:48370 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:52:47.688 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48058 10 6452 1 2025-12-02 11:49:06.641 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 11:49:06.645 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 11:53:26.868 00:00:10.323 TCP 23.104.0.1:54466 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:53:47.900 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41646 10 6452 1 2025-12-02 11:54:27.230 00:00:10.416 TCP 23.104.0.1:37294 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:54:48.119 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43056 10 6452 1 2025-12-02 11:55:27.683 00:00:10.370 TCP 23.104.0.1:51020 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:56:04.452 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 11:55:48.332 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41092 10 6452 1 2025-12-02 11:56:04.511 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 11:56:28.102 00:00:10.367 TCP 23.104.0.1:34270 -> 1.101.0.1:3000 11 1507 1 2025-12-02 11:56:48.570 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60140 10 6452 1 2025-12-02 11:57:28.509 00:00:10.432 TCP 23.104.0.1:40362 -> 1.101.0.1:3000 15 1926 1 2025-12-02 11:57:48.788 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:51462 12 10375 1 2025-12-02 11:58:28.986 00:00:10.368 TCP 23.104.0.1:55402 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496290, total packets: 1569, avg bps: 1041, avg pps: 0, avg bpp: 316 Time window: 2025-12-02 10:55:06 - 2025-12-02 11:58:39 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0028s Wall: 0.0025s flows/second: 66453.3 Runtime: 0.0025s