Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 18:55:07.212 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 18:55:07.208 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 18:59:21.330 00:00:10.365 TCP 23.104.0.1:57284 -> 1.101.0.1:3000 11 1507 1 2025-12-03 18:59:33.727 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:37306 10 6452 1 2025-12-03 19:00:21.730 00:00:10.368 TCP 23.104.0.1:35318 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:00:33.909 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46352 10 6452 1 2025-12-03 19:01:22.141 00:00:10.321 TCP 23.104.0.1:43030 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:01:41.743 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 19:01:41.833 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 19:01:34.126 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50192 10 6452 1 2025-12-03 19:02:22.498 00:00:10.366 TCP 23.104.0.1:39580 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:02:34.343 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48384 10 6452 1 2025-12-03 19:03:22.903 00:00:11.018 TCP 23.104.0.1:59976 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:03:34.565 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56308 10 6452 1 2025-12-03 19:04:23.957 00:00:10.365 TCP 23.104.0.1:37960 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:04:34.778 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36920 10 6452 1 2025-12-03 19:01:07.213 00:05:04.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 19:01:07.212 00:05:04.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 19:05:24.364 00:00:10.363 TCP 23.104.0.1:48234 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:05:35.005 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51720 10 6452 1 2025-12-03 19:06:24.763 00:00:10.369 TCP 23.104.0.1:48112 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:06:42.026 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 19:06:35.222 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42430 10 6452 1 2025-12-03 19:06:41.987 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 19:07:25.176 00:00:10.363 TCP 23.104.0.1:39286 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:07:35.436 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45964 10 6452 1 2025-12-03 19:08:25.577 00:00:10.366 TCP 23.104.0.1:43006 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:08:35.651 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58168 10 6452 1 2025-12-03 19:09:25.981 00:00:10.375 TCP 23.104.0.1:37422 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:09:35.875 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34596 10 6452 1 2025-12-03 19:10:26.400 00:00:11.135 TCP 23.104.0.1:33508 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:10:36.096 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35440 10 6452 1 2025-12-03 19:07:07.214 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 19:07:07.215 00:05:04.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 19:11:27.579 00:00:10.368 TCP 23.104.0.1:59088 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:11:42.269 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 19:11:36.323 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33228 10 6452 1 2025-12-03 19:11:42.202 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 19:12:27.990 00:00:10.366 TCP 23.104.0.1:40046 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:12:36.544 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40990 10 6452 1 2025-12-03 19:13:28.394 00:00:10.369 TCP 23.104.0.1:49320 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:13:36.761 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47746 10 6452 1 2025-12-03 19:14:28.799 00:00:10.352 TCP 23.104.0.1:37044 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:14:36.981 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:48168 10 6452 1 2025-12-03 19:15:29.177 00:00:10.364 TCP 23.104.0.1:36722 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:15:37.177 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46066 10 6452 1 2025-12-03 19:16:29.576 00:00:10.371 TCP 23.104.0.1:44360 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:16:42.025 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 19:16:42.165 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 19:16:37.351 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34992 10 6452 1 2025-12-03 19:13:07.216 00:05:04.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 19:13:07.213 00:05:04.909 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 19:17:29.987 00:00:10.370 TCP 23.104.0.1:46936 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:17:37.562 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42016 10 6452 1 2025-12-03 19:18:30.395 00:00:10.370 TCP 23.104.0.1:36074 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:18:37.779 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36346 10 6452 1 2025-12-03 19:19:30.798 00:00:10.367 TCP 23.104.0.1:58068 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:19:37.956 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47818 10 6452 1 2025-12-03 19:20:31.207 00:00:10.366 TCP 23.104.0.1:48846 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:20:38.181 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47210 10 6452 1 2025-12-03 19:21:31.611 00:00:10.363 TCP 23.104.0.1:57752 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:21:42.407 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 19:21:42.166 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 19:21:38.392 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47656 10 6452 1 2025-12-03 19:22:32.018 00:00:10.368 TCP 23.104.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:22:38.611 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40288 10 6452 1 2025-12-03 19:19:07.217 00:05:04.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 19:19:07.214 00:05:04.910 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 19:23:32.437 00:00:10.369 TCP 23.104.0.1:49966 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:23:38.826 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45612 10 6452 1 2025-12-03 19:24:32.846 00:00:10.385 TCP 23.104.0.1:47656 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:24:39.000 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37614 10 6452 1 2025-12-03 19:25:33.266 00:00:10.368 TCP 23.104.0.1:60816 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:25:39.219 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33838 10 6452 1 2025-12-03 19:26:42.247 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 19:26:42.396 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 19:26:33.666 00:00:10.368 TCP 23.104.0.1:40324 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:26:39.391 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39338 10 6452 1 2025-12-03 19:27:34.102 00:00:10.365 TCP 23.104.0.1:52274 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:27:39.609 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49004 10 6452 1 2025-12-03 19:28:34.511 00:00:10.363 TCP 23.104.0.1:41442 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:28:39.829 00:00:14.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53502 10 6452 1 2025-12-03 19:25:07.218 00:05:04.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 19:25:07.216 00:05:04.910 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 19:29:34.914 00:00:10.334 TCP 23.104.0.1:50102 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:29:44.013 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52134 10 6452 1 2025-12-03 19:30:35.304 00:00:10.371 TCP 23.104.0.1:44400 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:30:44.229 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33300 10 6452 1 2025-12-03 19:31:42.260 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 19:31:35.715 00:00:10.395 TCP 23.104.0.1:57812 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:31:42.595 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 19:31:44.446 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51828 10 6452 1 2025-12-03 19:32:36.152 00:00:10.656 TCP 23.104.0.1:43274 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:32:44.660 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56470 10 6452 1 2025-12-03 19:33:36.847 00:00:10.391 TCP 23.104.0.1:60938 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:33:44.882 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44120 10 6452 1 2025-12-03 19:34:37.278 00:00:10.364 TCP 23.104.0.1:52818 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:34:45.106 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41638 10 6452 1 2025-12-03 19:31:07.226 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 19:31:07.224 00:05:04.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 19:35:37.682 00:00:10.369 TCP 23.104.0.1:46118 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:35:45.323 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47102 10 6452 1 2025-12-03 19:36:42.556 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 19:36:42.780 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 19:36:38.101 00:00:10.365 TCP 23.104.0.1:45274 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:36:45.553 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36662 10 6452 1 2025-12-03 19:37:38.514 00:00:10.393 TCP 23.104.0.1:39038 -> 1.101.0.1:3000 15 1926 1 2025-12-03 19:37:45.774 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:58652 12 10375 1 2025-12-03 19:38:38.951 00:00:10.371 TCP 23.104.0.1:52556 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:38:46.037 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39368 10 6452 1 2025-12-03 19:39:39.359 00:00:10.323 TCP 23.104.0.1:53800 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:39:46.248 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49052 10 6452 1 2025-12-03 19:40:39.721 00:00:10.367 TCP 23.104.0.1:42872 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:40:46.461 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52416 10 6452 1 2025-12-03 19:37:07.225 00:05:04.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 19:37:07.224 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 19:41:42.734 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 19:41:42.727 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 19:41:40.126 00:00:10.321 TCP 23.104.0.1:54162 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:41:46.679 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37782 10 6452 1 2025-12-03 19:42:40.484 00:00:10.363 TCP 23.104.0.1:55426 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:42:46.887 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57776 10 6452 1 2025-12-03 19:43:40.889 00:00:10.395 TCP 23.104.0.1:49076 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:43:47.104 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37060 10 6452 1 2025-12-03 19:44:41.333 00:00:10.326 TCP 23.104.0.1:57024 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:44:47.279 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49616 10 6452 1 2025-12-03 19:45:41.700 00:00:10.364 TCP 23.104.0.1:57294 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:45:47.493 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55160 10 6452 1 2025-12-03 19:46:42.756 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 19:46:42.750 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 19:46:42.105 00:00:10.365 TCP 23.104.0.1:53274 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:46:47.701 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52664 10 6452 1 2025-12-03 19:43:07.226 00:05:04.905 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 19:43:07.229 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 19:47:42.510 00:00:11.078 TCP 23.104.0.1:55852 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:47:47.916 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39678 10 6452 1 2025-12-03 19:48:43.625 00:00:10.359 TCP 23.104.0.1:57074 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:48:48.124 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:45152 11 6492 1 2025-12-03 19:49:44.028 00:00:10.357 TCP 23.104.0.1:44118 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:49:48.391 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57092 10 6452 1 2025-12-03 19:50:44.433 00:00:10.365 TCP 23.104.0.1:44350 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:50:48.561 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:50396 10 6452 1 2025-12-03 19:51:42.929 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 19:51:42.828 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 19:51:44.838 00:00:10.824 TCP 23.104.0.1:46268 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:51:48.740 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43928 10 6452 1 2025-12-03 19:52:45.705 00:00:10.368 TCP 23.104.0.1:46314 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:52:48.948 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37744 10 6452 1 2025-12-03 19:49:07.230 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 19:49:07.227 00:05:04.905 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 19:53:46.111 00:00:10.365 TCP 23.104.0.1:42008 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:53:49.172 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35814 10 6452 1 2025-12-03 19:54:46.509 00:00:10.363 TCP 23.104.0.1:36556 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:54:49.381 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45670 10 6452 1 2025-12-03 19:55:49.595 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39234 10 6452 1 2025-12-03 19:55:46.918 00:00:10.379 TCP 23.104.0.1:45704 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:56:42.935 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 19:56:43.289 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 19:56:47.338 00:00:10.326 TCP 23.104.0.1:40852 -> 1.101.0.1:3000 11 1507 1 2025-12-03 19:56:49.806 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56230 10 6452 1 2025-12-03 19:57:49.983 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:59824 10 6452 1 2025-12-03 19:57:47.704 00:00:10.405 TCP 23.104.0.1:37446 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494771, total packets: 1558, avg bps: 1049, avg pps: 0, avg bpp: 317 Time window: 2025-12-03 18:55:07 - 2025-12-03 19:58:00 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0041s User: 0.0010s Wall: 0.0021s flows/second: 77734.5 Runtime: 0.0021s