Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 14:55:07.134 00:05:04.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 14:55:07.137 00:05:04.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 14:59:21.272 00:00:10.331 TCP 23.104.0.1:36468 -> 1.101.0.1:3000 11 1507 1 2025-12-03 14:59:37.634 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39622 10 6452 1 2025-12-03 15:00:21.643 00:00:10.363 TCP 23.104.0.1:41548 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:00:37.812 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36580 10 6452 1 2025-12-03 15:01:22.047 00:00:10.366 TCP 23.104.0.1:51778 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:01:37.348 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 15:01:37.368 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 15:01:38.041 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50436 10 6452 1 2025-12-03 15:02:22.451 00:00:10.363 TCP 23.104.0.1:56194 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:02:38.282 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38616 10 6452 1 2025-12-03 15:03:22.852 00:00:10.333 TCP 23.104.0.1:44974 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:03:38.507 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54264 10 6452 1 2025-12-03 15:04:23.230 00:00:10.368 TCP 23.104.0.1:55154 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:04:38.685 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43652 10 6452 1 2025-12-03 15:01:07.140 00:05:04.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 15:01:07.139 00:05:04.845 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 15:05:23.635 00:00:10.745 TCP 23.104.0.1:43850 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:05:38.907 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38170 10 6452 1 2025-12-03 15:06:24.408 00:00:10.363 TCP 23.104.0.1:40382 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:06:37.130 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 15:06:37.091 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 15:06:39.114 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60856 10 6452 1 2025-12-03 15:07:24.807 00:00:10.367 TCP 23.104.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:07:39.340 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52452 10 6452 1 2025-12-03 15:08:25.215 00:00:10.366 TCP 23.104.0.1:40976 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:08:39.548 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57180 10 6452 1 2025-12-03 15:09:25.622 00:00:10.360 TCP 23.104.0.1:42980 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:09:39.761 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46900 10 6452 1 2025-12-03 15:10:26.022 00:00:10.321 TCP 23.104.0.1:45798 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:10:39.970 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:41546 10 6452 1 2025-12-03 15:07:07.136 00:05:04.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 15:07:07.140 00:05:04.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 15:11:26.380 00:00:10.371 TCP 23.104.0.1:38672 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:11:37.464 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 15:11:36.978 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 15:11:40.214 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46482 10 6452 1 2025-12-03 15:12:26.792 00:00:10.603 TCP 23.104.0.1:46744 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:12:40.424 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47954 10 6452 1 2025-12-03 15:13:27.436 00:00:10.328 TCP 23.104.0.1:46716 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:13:40.636 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35914 10 6452 1 2025-12-03 15:14:27.802 00:00:10.365 TCP 23.104.0.1:60334 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:14:40.807 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37892 10 6452 1 2025-12-03 15:15:28.205 00:00:10.379 TCP 23.104.0.1:51462 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:15:40.976 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:59806 10 6452 1 2025-12-03 15:16:37.486 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 15:16:28.607 00:00:10.337 TCP 23.104.0.1:34448 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:16:37.255 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 15:16:41.165 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59442 10 6452 1 2025-12-03 15:13:07.140 00:05:04.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 15:13:07.138 00:05:04.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 15:17:28.998 00:00:10.324 TCP 23.104.0.1:43630 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:17:41.336 00:00:10.245 TCP 1.101.0.1:3000 -> 22.102.0.1:49462 10 6452 1 2025-12-03 15:18:29.359 00:00:10.341 TCP 23.104.0.1:36448 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:18:41.624 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51682 10 6452 1 2025-12-03 15:19:29.744 00:00:10.392 TCP 23.104.0.1:48032 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:19:41.845 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33420 10 6452 1 2025-12-03 15:20:30.172 00:00:10.335 TCP 23.104.0.1:56604 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:20:42.084 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35628 10 6452 1 2025-12-03 15:21:37.778 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 15:21:30.554 00:00:10.322 TCP 23.104.0.1:60316 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:21:37.559 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 15:21:42.259 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52706 10 6452 1 2025-12-03 15:22:30.914 00:00:10.366 TCP 23.104.0.1:35004 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:22:42.493 00:00:10.583 TCP 1.101.0.1:3000 -> 22.102.0.1:55548 10 6452 1 2025-12-03 15:19:07.142 00:05:04.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 15:19:07.138 00:05:04.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 15:23:31.317 00:00:10.364 TCP 23.104.0.1:42058 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:23:43.111 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:54270 10 6452 1 2025-12-03 15:24:31.719 00:00:10.379 TCP 23.104.0.1:36898 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:24:43.296 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51726 10 6452 1 2025-12-03 15:25:32.134 00:00:10.371 TCP 23.104.0.1:38874 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:25:43.518 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:39774 10 6452 1 2025-12-03 15:26:37.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 15:26:37.794 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 15:26:32.543 00:00:10.321 TCP 23.104.0.1:57420 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:26:43.784 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50934 12 6556 1 2025-12-03 15:27:32.907 00:00:10.367 TCP 23.104.0.1:57994 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:27:44.004 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:50874 13 6608 1 2025-12-03 15:28:33.308 00:00:10.367 TCP 23.104.0.1:48394 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:28:44.279 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54006 10 6452 1 2025-12-03 15:25:07.143 00:05:04.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 15:25:07.145 00:05:04.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 15:29:33.711 00:00:10.327 TCP 23.104.0.1:37984 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:29:44.501 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35262 10 6452 1 2025-12-03 15:30:34.096 00:00:10.363 TCP 23.104.0.1:55592 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:30:44.722 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42418 10 6452 1 2025-12-03 15:31:37.735 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 15:31:37.693 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 15:31:34.496 00:00:10.322 TCP 23.104.0.1:35206 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:31:44.950 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:52938 10 6452 1 2025-12-03 15:32:34.855 00:00:10.376 TCP 23.104.0.1:43260 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:32:45.189 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52238 10 6452 1 2025-12-03 15:33:35.268 00:00:10.362 TCP 23.104.0.1:32776 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:33:45.402 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:44328 10 6452 1 2025-12-03 15:34:35.670 00:00:10.358 TCP 23.104.0.1:51364 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:34:45.647 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33584 10 6452 1 2025-12-03 15:31:07.147 00:05:04.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 15:31:07.143 00:05:04.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 15:35:36.091 00:00:10.366 TCP 23.104.0.1:53750 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:35:45.856 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33740 10 6452 1 2025-12-03 15:36:37.741 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 15:36:37.744 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 15:36:36.492 00:00:10.368 TCP 23.104.0.1:53444 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:36:46.088 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56362 10 6452 1 2025-12-03 15:37:36.896 00:00:10.375 TCP 23.104.0.1:57722 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:37:46.299 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56970 10 6452 1 2025-12-03 15:38:37.313 00:00:10.369 TCP 23.104.0.1:56750 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:38:46.514 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34826 10 6452 1 2025-12-03 15:39:37.717 00:00:10.333 TCP 23.104.0.1:57114 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:39:46.727 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36930 10 6452 1 2025-12-03 15:40:38.105 00:00:10.368 TCP 23.104.0.1:34518 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:40:46.947 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46408 10 6452 1 2025-12-03 15:37:07.147 00:05:04.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 15:37:07.146 00:05:04.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 15:41:37.754 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 15:41:37.842 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 15:41:38.510 00:00:10.369 TCP 23.104.0.1:36774 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:41:47.180 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50552 10 6452 1 2025-12-03 15:42:38.919 00:00:10.342 TCP 23.104.0.1:49276 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:42:47.395 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41132 10 6452 1 2025-12-03 15:43:39.301 00:00:10.323 TCP 23.104.0.1:39598 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:43:47.612 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56876 10 6452 1 2025-12-03 15:44:39.674 00:00:10.373 TCP 23.104.0.1:38284 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:44:47.782 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34530 10 6452 1 2025-12-03 15:45:40.106 00:00:10.344 TCP 23.104.0.1:45008 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:45:48.002 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45600 10 6452 1 2025-12-03 15:46:37.968 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 15:46:38.203 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 15:46:40.491 00:00:10.366 TCP 23.104.0.1:59412 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:46:48.217 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42172 10 6452 1 2025-12-03 15:43:07.150 00:05:04.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 15:43:07.151 00:05:04.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 15:47:40.889 00:00:10.461 TCP 23.104.0.1:42454 -> 1.101.0.1:3000 15 1926 1 2025-12-03 15:47:48.433 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:58906 12 10375 1 2025-12-03 15:48:41.403 00:00:10.376 TCP 23.104.0.1:53254 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:48:48.671 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55660 10 6452 1 2025-12-03 15:49:41.820 00:00:10.369 TCP 23.104.0.1:52792 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:49:48.888 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50928 10 6452 1 2025-12-03 15:50:42.228 00:00:10.429 TCP 23.104.0.1:45766 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:50:49.107 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52952 10 6452 1 2025-12-03 15:51:38.191 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 15:51:38.222 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 15:51:42.698 00:00:10.368 TCP 23.104.0.1:58094 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:51:49.283 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34156 10 6452 1 2025-12-03 15:52:43.105 00:00:10.376 TCP 23.104.0.1:37984 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:52:49.503 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51262 10 6452 1 2025-12-03 15:49:07.156 00:05:04.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 15:49:07.152 00:05:04.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 15:53:43.516 00:00:10.329 TCP 23.104.0.1:42778 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:53:49.720 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40318 10 6452 1 2025-12-03 15:54:43.880 00:00:10.389 TCP 23.104.0.1:34492 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:54:49.899 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46050 10 6452 1 2025-12-03 15:55:44.315 00:00:10.383 TCP 23.104.0.1:41508 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:55:50.119 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55160 10 6452 1 2025-12-03 15:56:38.248 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 15:56:38.224 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 15:56:44.728 00:00:10.374 TCP 23.104.0.1:53280 -> 1.101.0.1:3000 11 1507 1 2025-12-03 15:56:50.331 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45170 10 6452 1 2025-12-03 15:57:45.142 00:00:10.366 TCP 23.104.0.1:39570 -> 1.101.0.1:3000 12 1559 1 2025-12-03 15:57:50.509 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36286 10 6452 1 Summary: total flows: 162, total bytes: 495043, total packets: 1563, avg bps: 1049, avg pps: 0, avg bpp: 316 Time window: 2025-12-03 14:55:07 - 2025-12-03 15:58:00 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0062s User: 0.0000s Wall: 0.0022s flows/second: 74585.9 Runtime: 0.0022s