Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 07:54:11.836 00:06:00.002 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-12-03 07:55:06.996 00:05:04.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 07:59:16.835 00:00:10.706 TCP 23.104.0.1:56182 -> 1.101.0.1:3000 11 1507 1 2025-12-03 07:59:31.398 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50650 10 6452 1 2025-12-03 08:00:17.573 00:00:10.369 TCP 23.104.0.1:49910 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:00:31.572 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:50102 10 6452 1 2025-12-03 08:01:17.980 00:00:10.364 TCP 23.104.0.1:34864 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:01:28.645 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 08:01:28.748 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 08:01:31.762 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:36296 10 6452 1 2025-12-03 08:02:18.379 00:00:10.364 TCP 23.104.0.1:42832 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:02:31.933 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:44814 10 6452 1 2025-12-03 08:03:18.782 00:00:10.369 TCP 23.104.0.1:41132 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:03:32.129 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32948 10 6452 1 2025-12-03 08:04:19.187 00:00:10.363 TCP 23.104.0.1:39604 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:04:32.346 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35648 10 6452 1 2025-12-03 08:01:06.999 00:05:04.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 08:01:07.002 00:05:04.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 08:05:19.584 00:00:10.367 TCP 23.104.0.1:42062 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:05:32.560 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33706 10 6452 1 2025-12-03 08:06:19.994 00:00:10.366 TCP 23.104.0.1:43462 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:06:28.840 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 08:06:28.774 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 08:06:32.790 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38330 10 6452 1 2025-12-03 08:07:20.399 00:00:10.321 TCP 23.104.0.1:40158 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:07:33.036 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56424 12 10375 1 2025-12-03 08:08:20.760 00:00:10.447 TCP 23.104.0.1:50302 -> 1.101.0.1:3000 15 1926 1 2025-12-03 08:08:33.283 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52048 10 6452 1 2025-12-03 08:09:21.245 00:00:10.694 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:09:33.498 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:43106 10 6452 1 2025-12-03 08:10:21.977 00:00:10.372 TCP 23.104.0.1:45658 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:10:33.761 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50308 10 6452 1 2025-12-03 08:07:07.005 00:05:04.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 08:07:07.002 00:05:04.840 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 08:11:29.249 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 08:11:29.025 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 08:11:22.389 00:00:10.366 TCP 23.104.0.1:52502 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:11:33.968 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:56798 10 6452 1 2025-12-03 08:12:22.792 00:00:10.367 TCP 23.104.0.1:39762 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:12:34.217 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35278 10 6452 1 2025-12-03 08:13:23.199 00:00:10.325 TCP 23.104.0.1:41386 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:13:34.386 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50936 10 6452 1 2025-12-03 08:14:23.561 00:00:10.366 TCP 23.104.0.1:44254 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:14:34.592 00:00:10.716 TCP 1.101.0.1:3000 -> 22.102.0.1:49540 10 6452 1 2025-12-03 08:15:23.963 00:00:10.391 TCP 23.104.0.1:40386 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:15:35.349 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52704 10 6452 1 2025-12-03 08:16:28.955 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 08:16:28.880 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 08:16:24.393 00:00:10.377 TCP 23.104.0.1:52428 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:16:35.573 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59666 10 6452 1 2025-12-03 08:13:07.025 00:05:04.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 08:13:07.029 00:05:04.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 08:17:24.811 00:00:10.335 TCP 23.104.0.1:55606 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:17:35.791 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32962 10 6452 1 2025-12-03 08:18:25.183 00:00:10.365 TCP 23.104.0.1:58604 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:18:35.996 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36248 10 6452 1 2025-12-03 08:19:25.581 00:00:10.860 TCP 23.104.0.1:45018 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:19:36.226 00:00:10.758 TCP 1.101.0.1:3000 -> 22.102.0.1:52042 10 6452 1 2025-12-03 08:20:26.488 00:00:10.364 TCP 23.104.0.1:45342 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:20:37.034 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42442 10 6452 1 2025-12-03 08:21:29.033 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 08:21:29.264 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 08:21:26.893 00:00:10.370 TCP 23.104.0.1:54936 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:21:37.209 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41708 10 6452 1 2025-12-03 08:22:27.302 00:00:10.354 TCP 23.104.0.1:58678 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:22:37.424 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:53452 12 10375 1 2025-12-03 08:19:07.035 00:05:04.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 08:19:07.037 00:05:04.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 08:23:27.698 00:00:10.459 TCP 23.104.0.1:43292 -> 1.101.0.1:3000 15 1926 1 2025-12-03 08:23:37.622 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57820 10 6452 1 2025-12-03 08:24:28.199 00:00:10.940 TCP 23.104.0.1:44408 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:24:37.835 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42022 10 6452 1 2025-12-03 08:25:29.180 00:00:10.366 TCP 23.104.0.1:53800 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:25:38.076 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55386 10 6452 1 2025-12-03 08:26:29.301 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 08:26:29.305 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 08:26:29.582 00:00:10.368 TCP 23.104.0.1:59046 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:26:38.257 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57036 10 6452 1 2025-12-03 08:27:29.986 00:00:10.369 TCP 23.104.0.1:55256 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:27:38.490 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:38192 12 10369 1 2025-12-03 08:28:30.396 00:00:10.453 TCP 23.104.0.1:60760 -> 1.101.0.1:3000 15 1926 1 2025-12-03 08:28:38.730 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44800 10 6452 1 2025-12-03 08:25:07.040 00:05:04.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 08:25:07.039 00:05:04.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 08:29:30.891 00:00:10.372 TCP 23.104.0.1:59460 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:29:38.949 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:43204 10 6452 1 2025-12-03 08:30:31.308 00:00:10.370 TCP 23.104.0.1:52614 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:30:39.196 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43708 10 6452 1 2025-12-03 08:31:29.311 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 08:31:29.161 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 08:31:31.715 00:00:10.574 TCP 23.104.0.1:52650 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:31:39.412 00:00:10.723 TCP 1.101.0.1:3000 -> 22.102.0.1:46174 10 6452 1 2025-12-03 08:32:32.338 00:00:10.367 TCP 23.104.0.1:60072 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:32:40.173 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38126 10 6452 1 2025-12-03 08:33:32.749 00:00:10.930 TCP 23.104.0.1:59228 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:33:40.393 00:00:10.418 TCP 1.101.0.1:3000 -> 22.102.0.1:37372 10 6452 1 2025-12-03 08:34:33.719 00:00:10.380 TCP 23.104.0.1:44192 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:34:40.853 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47412 10 6452 1 2025-12-03 08:31:07.040 00:05:04.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 08:31:07.043 00:05:04.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 08:35:34.136 00:00:10.365 TCP 23.104.0.1:41834 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:35:41.085 00:00:10.357 TCP 1.101.0.1:3000 -> 22.102.0.1:55236 10 6452 1 2025-12-03 08:36:29.458 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 08:36:29.176 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 08:36:34.536 00:00:10.372 TCP 23.104.0.1:57470 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:36:41.479 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35396 10 6452 1 2025-12-03 08:37:34.950 00:00:10.404 TCP 23.104.0.1:57940 -> 1.101.0.1:3000 15 1926 1 2025-12-03 08:37:41.694 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:41170 12 10369 1 2025-12-03 08:38:35.391 00:00:10.364 TCP 23.104.0.1:53410 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:38:41.899 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:32834 10 6452 1 2025-12-03 08:39:35.791 00:00:10.332 TCP 23.104.0.1:37014 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:39:42.097 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36518 10 6452 1 2025-12-03 08:40:36.156 00:00:10.365 TCP 23.104.0.1:58564 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:40:42.310 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49912 10 6452 1 2025-12-03 08:37:07.045 00:05:04.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 08:37:07.043 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 08:41:29.580 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 08:41:29.460 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 08:41:36.566 00:00:10.364 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:41:42.527 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41238 10 6452 1 2025-12-03 08:42:36.966 00:00:10.371 TCP 23.104.0.1:39028 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:42:42.744 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57144 10 6452 1 2025-12-03 08:43:37.376 00:00:10.365 TCP 23.104.0.1:59694 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:43:42.955 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:34294 10 6452 1 2025-12-03 08:44:37.779 00:00:10.365 TCP 23.104.0.1:46410 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:44:43.185 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55772 10 6452 1 2025-12-03 08:45:38.184 00:00:10.366 TCP 23.104.0.1:49754 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:45:43.397 00:00:10.971 TCP 1.101.0.1:3000 -> 22.102.0.1:36386 10 6452 1 2025-12-03 08:46:29.883 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 08:46:29.728 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 08:46:38.591 00:00:10.364 TCP 23.104.0.1:39716 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:46:44.408 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41340 10 6452 1 2025-12-03 08:43:07.043 00:05:04.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 08:43:07.046 00:05:04.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 08:47:38.996 00:00:10.366 TCP 23.104.0.1:41658 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:47:44.617 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48764 10 6452 1 2025-12-03 08:48:39.404 00:00:10.335 TCP 23.104.0.1:38950 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:48:44.826 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60548 10 6452 1 2025-12-03 08:49:39.772 00:00:10.372 TCP 23.104.0.1:50474 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:49:45.072 00:00:10.739 TCP 1.101.0.1:3000 -> 22.102.0.1:32936 10 6452 1 2025-12-03 08:50:40.184 00:00:10.364 TCP 23.104.0.1:48514 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:50:45.852 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54378 10 6452 1 2025-12-03 08:51:29.351 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 08:51:29.776 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 08:51:40.587 00:00:10.366 TCP 23.104.0.1:35726 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:51:46.041 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40980 10 6452 1 2025-12-03 08:52:40.994 00:00:10.366 TCP 23.104.0.1:33120 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:52:46.251 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38302 10 6452 1 2025-12-03 08:49:07.050 00:05:04.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 08:49:07.047 00:05:04.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 08:53:41.400 00:00:10.370 TCP 23.104.0.1:33064 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:53:46.472 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:32894 10 6452 1 2025-12-03 08:54:46.655 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41594 10 6452 1 2025-12-03 08:54:41.806 00:00:10.338 TCP 23.104.0.1:54248 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:55:42.192 00:00:10.390 TCP 23.104.0.1:48820 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:55:46.873 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41740 10 6452 1 2025-12-03 08:56:29.740 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 08:56:29.853 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 08:56:42.626 00:00:10.366 TCP 23.104.0.1:48910 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:56:47.093 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43680 10 6452 1 2025-12-03 08:57:43.034 00:00:10.361 TCP 23.104.0.1:41378 -> 1.101.0.1:3000 11 1507 1 2025-12-03 08:57:47.269 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35360 10 6452 1 Summary: total flows: 162, total bytes: 507816, total packets: 1576, avg bps: 1061, avg pps: 0, avg bpp: 322 Time window: 2025-12-03 07:54:11 - 2025-12-03 08:57:57 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0042s User: 0.0021s Wall: 0.0027s flows/second: 59363.7 Runtime: 0.0027s