Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 11:55:07.093 00:05:04.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 11:55:07.095 00:05:04.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 11:59:05.417 00:00:10.731 TCP 23.104.0.1:37928 -> 1.101.0.1:3000 11 1507 1 2025-12-03 11:59:39.098 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44820 10 6452 1 2025-12-03 12:00:06.187 00:00:10.362 TCP 23.104.0.1:42002 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:00:39.334 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:44848 10 6452 1 2025-12-03 12:01:06.588 00:00:10.365 TCP 23.104.0.1:54008 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:01:33.533 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:01:33.382 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 12:01:39.517 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49446 10 6452 1 2025-12-03 12:02:06.991 00:00:10.370 TCP 23.104.0.1:48400 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:02:39.742 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:60214 10 6452 1 2025-12-03 12:03:07.396 00:00:10.372 TCP 23.104.0.1:60656 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:03:39.921 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60164 10 6452 1 2025-12-03 12:04:07.807 00:00:10.371 TCP 23.104.0.1:41452 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:04:40.130 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56100 10 6452 1 2025-12-03 12:01:07.097 00:05:04.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 12:01:07.097 00:05:04.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 12:05:08.216 00:00:10.370 TCP 23.104.0.1:50116 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:05:40.342 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48870 10 6452 1 2025-12-03 12:06:08.626 00:00:10.367 TCP 23.104.0.1:44830 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:06:33.464 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 12:06:33.753 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:06:40.573 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48446 10 6452 1 2025-12-03 12:07:09.033 00:00:10.372 TCP 23.104.0.1:51854 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:07:40.752 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:55174 10 6452 1 2025-12-03 12:08:09.448 00:00:10.366 TCP 23.104.0.1:49240 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:08:40.946 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59602 10 6452 1 2025-12-03 12:09:09.849 00:00:10.340 TCP 23.104.0.1:37532 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:09:41.171 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52642 10 6452 1 2025-12-03 12:10:10.230 00:00:10.372 TCP 23.104.0.1:53910 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:10:41.380 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49706 10 6452 1 2025-12-03 12:07:07.097 00:05:04.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 12:07:07.099 00:05:04.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 12:11:10.652 00:00:10.560 TCP 23.104.0.1:48202 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:11:33.798 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:11:33.775 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 12:11:41.604 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:41340 11 6504 1 2025-12-03 12:12:11.247 00:00:10.362 TCP 23.104.0.1:32824 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:12:41.874 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57806 10 6452 1 2025-12-03 12:13:11.645 00:00:11.032 TCP 23.104.0.1:51798 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:13:42.113 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35832 10 6452 1 2025-12-03 12:14:12.716 00:00:10.373 TCP 23.104.0.1:55806 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:14:42.327 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39250 10 6452 1 2025-12-03 12:15:13.133 00:00:11.545 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:15:42.537 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50646 10 6452 1 2025-12-03 12:16:14.719 00:00:10.324 TCP 23.104.0.1:45678 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:16:33.871 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:16:33.800 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 12:16:42.749 00:00:11.700 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 10 6452 1 2025-12-03 12:13:07.099 00:05:04.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 12:13:07.101 00:05:04.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 12:17:15.106 00:00:10.369 TCP 23.104.0.1:49322 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:17:44.493 00:00:10.844 TCP 1.101.0.1:3000 -> 22.102.0.1:54364 10 6452 1 2025-12-03 12:18:15.517 00:00:10.366 TCP 23.104.0.1:51168 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:18:45.378 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42912 10 6452 1 2025-12-03 12:19:15.918 00:00:10.382 TCP 23.104.0.1:51226 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:19:45.588 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54228 10 6452 1 2025-12-03 12:20:16.338 00:00:10.382 TCP 23.104.0.1:56060 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:20:45.814 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54610 10 6452 1 2025-12-03 12:21:16.747 00:00:10.324 TCP 23.104.0.1:44016 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:21:34.195 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:21:33.910 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 12:21:46.061 00:00:10.266 TCP 1.101.0.1:3000 -> 22.102.0.1:38536 10 6452 1 2025-12-03 12:22:17.110 00:00:10.351 TCP 23.104.0.1:60904 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:22:46.365 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35502 10 6452 1 2025-12-03 12:19:07.103 00:05:04.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 12:19:07.101 00:05:04.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 12:23:17.502 00:00:10.368 TCP 23.104.0.1:43410 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:23:46.577 00:00:10.608 TCP 1.101.0.1:3000 -> 22.102.0.1:46540 10 6452 1 2025-12-03 12:24:17.914 00:00:10.339 TCP 23.104.0.1:54566 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:24:47.229 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54130 10 6452 1 2025-12-03 12:25:18.302 00:00:10.364 TCP 23.104.0.1:42202 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:25:47.455 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43524 10 6452 1 2025-12-03 12:26:18.710 00:00:10.380 TCP 23.104.0.1:36810 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:26:33.942 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:26:33.863 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 12:26:47.686 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37590 10 6452 1 2025-12-03 12:27:19.128 00:00:10.331 TCP 23.104.0.1:42136 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:27:47.910 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55552 10 6452 1 2025-12-03 12:28:19.514 00:00:10.365 TCP 23.104.0.1:37218 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:28:48.118 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56866 10 6452 1 2025-12-03 12:25:07.105 00:05:04.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 12:25:07.103 00:05:04.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 12:29:19.923 00:00:10.347 TCP 23.104.0.1:53132 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:29:48.339 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35790 10 6452 1 2025-12-03 12:30:20.306 00:00:10.375 TCP 23.104.0.1:41736 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:30:48.511 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59990 10 6452 1 2025-12-03 12:31:20.719 00:00:10.376 TCP 23.104.0.1:52018 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:31:34.074 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:31:33.823 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 12:31:48.727 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36386 10 6452 1 2025-12-03 12:32:21.131 00:00:10.366 TCP 23.104.0.1:51170 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:32:48.935 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:34684 10 6452 1 2025-12-03 12:33:21.535 00:00:10.363 TCP 23.104.0.1:32916 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:33:49.179 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:42952 10 6452 1 2025-12-03 12:34:21.939 00:00:10.376 TCP 23.104.0.1:57266 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:34:49.376 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36856 10 6452 1 2025-12-03 12:31:07.105 00:05:04.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 12:31:07.103 00:05:04.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 12:35:22.349 00:00:10.369 TCP 23.104.0.1:60672 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:35:49.551 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45150 10 6452 1 2025-12-03 12:36:34.138 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:36:22.760 00:00:10.376 TCP 23.104.0.1:60440 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:36:34.026 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 12:36:49.765 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57848 10 6452 1 2025-12-03 12:37:23.176 00:00:10.368 TCP 23.104.0.1:39868 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:37:49.977 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:37794 10 6452 1 2025-12-03 12:38:23.580 00:00:10.371 TCP 23.104.0.1:47244 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:38:50.224 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:41738 10 6452 1 2025-12-03 12:39:23.989 00:00:10.368 TCP 23.104.0.1:50294 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:39:50.494 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57496 10 6452 1 2025-12-03 12:40:24.399 00:00:10.329 TCP 23.104.0.1:39220 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:40:50.723 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46804 10 6452 1 2025-12-03 12:37:07.106 00:05:04.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 12:37:07.103 00:05:04.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 12:41:34.266 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:41:24.761 00:00:10.324 TCP 23.104.0.1:58246 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:41:34.430 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 12:41:50.952 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39954 10 6452 1 2025-12-03 12:42:25.125 00:00:10.328 TCP 23.104.0.1:48824 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:42:51.181 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59696 10 6452 1 2025-12-03 12:43:25.489 00:00:10.363 TCP 23.104.0.1:59274 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:43:51.403 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60418 10 6452 1 2025-12-03 12:44:25.887 00:00:10.378 TCP 23.104.0.1:40028 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:44:51.641 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38460 10 6452 1 2025-12-03 12:45:26.305 00:00:10.370 TCP 23.104.0.1:59878 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:45:51.862 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:52638 10 6452 1 2025-12-03 12:46:34.346 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 12:46:34.421 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:46:26.714 00:00:10.376 TCP 23.104.0.1:43422 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:46:52.097 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45298 10 6452 1 2025-12-03 12:43:07.108 00:05:04.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 12:43:07.105 00:05:04.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 12:47:27.124 00:00:10.358 TCP 23.104.0.1:35728 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:47:52.319 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46856 10 6452 1 2025-12-03 12:48:27.524 00:00:10.364 TCP 23.104.0.1:60866 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:48:52.540 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46936 10 6452 1 2025-12-03 12:49:27.928 00:00:10.350 TCP 23.104.0.1:39594 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:49:52.764 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:38146 10 6452 1 2025-12-03 12:50:28.320 00:00:10.369 TCP 23.104.0.1:39032 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:50:52.946 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:35944 10 6452 1 2025-12-03 12:51:34.415 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:51:34.374 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 12:51:28.731 00:00:10.368 TCP 23.104.0.1:45692 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:51:53.140 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50702 10 6452 1 2025-12-03 12:52:29.144 00:00:10.372 TCP 23.104.0.1:40752 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:52:53.352 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49946 10 6452 1 2025-12-03 12:49:07.107 00:05:04.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 12:49:07.109 00:05:04.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 12:53:29.554 00:00:10.320 TCP 23.104.0.1:60714 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:53:53.566 00:00:12.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41796 10 6452 1 2025-12-03 12:54:29.912 00:00:10.371 TCP 23.104.0.1:54160 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:54:55.804 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51266 10 6452 1 2025-12-03 12:55:30.325 00:00:10.372 TCP 23.104.0.1:45924 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:55:56.037 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53770 10 6452 1 2025-12-03 12:56:34.413 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 12:56:34.464 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 12:56:30.734 00:00:10.376 TCP 23.104.0.1:59942 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:56:56.243 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36280 10 6452 1 2025-12-03 12:57:31.149 00:00:10.373 TCP 23.104.0.1:53878 -> 1.101.0.1:3000 11 1507 1 2025-12-03 12:57:56.461 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44378 10 6452 1 2025-12-03 12:58:31.559 00:00:10.373 TCP 23.104.0.1:59378 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 491948, total packets: 1563, avg bps: 1031, avg pps: 0, avg bpp: 314 Time window: 2025-12-03 11:55:07 - 2025-12-03 12:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0026s Wall: 0.0030s flows/second: 54333.0 Runtime: 0.0030s