Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 06:55:07.425 00:05:04.911 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 06:55:07.428 00:05:04.905 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 06:59:02.937 00:00:10.391 TCP 23.104.0.1:47514 -> 1.101.0.1:3000 11 1507 1 2025-12-04 06:59:14.911 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47872 10 6452 1 2025-12-04 07:00:03.363 00:00:10.365 TCP 23.104.0.1:35636 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:00:15.133 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40378 10 6452 1 2025-12-04 07:01:03.771 00:00:10.329 TCP 23.104.0.1:56896 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:01:15.348 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:33646 10 6452 1 2025-12-04 07:01:56.425 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 07:01:56.277 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 07:02:04.137 00:00:10.366 TCP 23.104.0.1:54774 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:02:15.555 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38098 10 6452 1 2025-12-04 07:03:04.544 00:00:10.330 TCP 23.104.0.1:35574 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:03:15.728 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:56936 10 6452 1 2025-12-04 07:04:04.908 00:00:10.368 TCP 23.104.0.1:45928 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:04:15.916 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35936 10 6452 1 2025-12-04 07:01:07.428 00:05:04.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 07:05:05.310 00:00:10.325 TCP 23.104.0.1:42932 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:01:07.430 00:05:04.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 07:05:16.131 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55180 10 6452 1 2025-12-04 07:06:05.676 00:00:10.368 TCP 23.104.0.1:55464 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:06:16.346 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46898 10 6452 1 2025-12-04 07:06:56.407 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 07:06:56.435 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 07:07:06.099 00:00:10.363 TCP 23.104.0.1:40884 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:07:16.558 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52474 10 6452 1 2025-12-04 07:08:06.502 00:00:10.370 TCP 23.104.0.1:40352 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:08:16.769 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41856 10 6452 1 2025-12-04 07:09:06.913 00:00:10.322 TCP 23.104.0.1:47916 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:09:16.982 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:34680 10 6452 1 2025-12-04 07:10:07.280 00:00:10.363 TCP 23.104.0.1:40230 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:10:17.180 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55744 10 6452 1 2025-12-04 07:07:07.429 00:05:04.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 07:07:07.432 00:05:04.910 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 07:11:07.679 00:00:10.366 TCP 23.104.0.1:41152 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:11:17.349 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38264 10 6452 1 2025-12-04 07:11:56.486 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 07:11:56.536 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 07:12:08.106 00:00:10.365 TCP 23.104.0.1:57616 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:12:17.567 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34246 10 6452 1 2025-12-04 07:13:08.513 00:00:10.329 TCP 23.104.0.1:46748 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:13:17.736 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:50094 10 6452 1 2025-12-04 07:14:08.872 00:00:10.368 TCP 23.104.0.1:45492 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:14:17.905 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43586 10 6452 1 2025-12-04 07:15:09.276 00:00:10.324 TCP 23.104.0.1:44946 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:15:18.116 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35946 10 6452 1 2025-12-04 07:16:09.640 00:00:10.370 TCP 23.104.0.1:33356 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:16:18.324 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59748 10 6452 1 2025-12-04 07:16:56.728 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 07:16:56.739 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 07:13:07.433 00:05:04.912 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 07:13:07.431 00:05:04.916 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 07:17:10.097 00:00:10.367 TCP 23.104.0.1:56680 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:17:18.537 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:37372 10 6452 1 2025-12-04 07:18:10.508 00:00:10.379 TCP 23.104.0.1:43166 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:18:18.715 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48442 10 6452 1 2025-12-04 07:19:10.941 00:00:10.378 TCP 23.104.0.1:42992 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:19:18.921 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:33176 10 6452 1 2025-12-04 07:20:11.365 00:00:10.365 TCP 23.104.0.1:33524 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:20:19.107 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43346 10 6452 1 2025-12-04 07:21:11.772 00:00:10.327 TCP 23.104.0.1:57064 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:21:19.321 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60502 10 6452 1 2025-12-04 07:21:56.781 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 07:21:56.775 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 07:22:12.138 00:00:10.373 TCP 23.104.0.1:42450 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:22:19.540 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46386 10 6452 1 2025-12-04 07:19:07.435 00:05:04.918 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 07:19:07.432 00:05:04.924 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 07:23:12.544 00:00:10.321 TCP 23.104.0.1:58232 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:23:19.709 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43044 10 6452 1 2025-12-04 07:24:12.908 00:00:10.378 TCP 23.104.0.1:47236 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:24:19.930 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52176 10 6452 1 2025-12-04 07:25:13.340 00:00:10.363 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:25:20.174 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33444 10 6452 1 2025-12-04 07:26:13.740 00:00:10.368 TCP 23.104.0.1:56776 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:26:20.401 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38390 10 6452 1 2025-12-04 07:26:56.929 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 07:26:56.701 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 07:27:14.149 00:00:10.323 TCP 23.104.0.1:33798 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:27:20.622 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43108 10 6452 1 2025-12-04 07:28:14.512 00:00:10.976 TCP 23.104.0.1:54636 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:28:20.836 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:46850 10 6452 1 2025-12-04 07:25:07.433 00:05:04.923 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 07:25:07.436 00:05:04.918 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 07:29:15.526 00:00:10.365 TCP 23.104.0.1:58088 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:29:21.032 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47544 10 6452 1 2025-12-04 07:30:15.924 00:00:10.381 TCP 23.104.0.1:57164 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:30:21.247 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50066 10 6452 1 2025-12-04 07:31:16.344 00:00:10.326 TCP 23.104.0.1:34356 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:31:21.459 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54734 10 6452 1 2025-12-04 07:31:56.850 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 07:31:56.769 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 07:32:16.713 00:00:10.381 TCP 23.104.0.1:47544 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:32:21.677 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45006 10 6452 1 2025-12-04 07:33:17.129 00:00:10.368 TCP 23.104.0.1:35898 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:33:21.884 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57002 10 6452 1 2025-12-04 07:34:17.533 00:00:10.367 TCP 23.104.0.1:58152 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:34:22.079 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41348 10 6452 1 2025-12-04 07:31:07.436 00:05:04.919 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 07:31:07.436 00:05:04.923 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 07:35:17.937 00:00:10.331 TCP 23.104.0.1:57520 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:35:22.293 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39858 10 6452 1 2025-12-04 07:36:18.304 00:00:10.367 TCP 23.104.0.1:39118 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:36:22.511 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40612 10 6452 1 2025-12-04 07:36:56.815 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 07:36:56.855 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 07:37:18.708 00:00:10.366 TCP 23.104.0.1:40652 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:37:22.679 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38120 10 6452 1 2025-12-04 07:38:19.111 00:00:10.366 TCP 23.104.0.1:55610 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:38:22.850 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35386 10 6452 1 2025-12-04 07:39:19.518 00:00:10.368 TCP 23.104.0.1:35340 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:39:23.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46556 10 6452 1 2025-12-04 07:40:19.924 00:00:10.389 TCP 23.104.0.1:54882 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:40:23.296 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60866 10 6452 1 2025-12-04 07:37:07.440 00:05:04.920 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 07:37:07.443 00:05:04.915 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 07:41:20.351 00:00:10.371 TCP 23.104.0.1:53708 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:41:23.509 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47364 10 6452 1 2025-12-04 07:41:56.947 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 07:41:57.241 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 07:42:20.761 00:00:10.375 TCP 23.104.0.1:42456 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:42:23.726 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33204 10 6452 1 2025-12-04 07:43:21.172 00:00:10.933 TCP 23.104.0.1:50462 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:43:23.943 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47160 10 6452 1 2025-12-04 07:44:24.177 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39654 10 6452 1 2025-12-04 07:44:22.152 00:00:10.367 TCP 23.104.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:45:22.557 00:00:10.323 TCP 23.104.0.1:36934 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:45:24.355 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50318 10 6452 1 2025-12-04 07:46:24.575 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38860 10 6452 1 2025-12-04 07:46:22.917 00:00:10.372 TCP 23.104.0.1:51514 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:46:57.297 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 07:46:57.180 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 07:43:07.444 00:05:04.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 07:43:07.442 00:05:04.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 07:47:24.788 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47588 10 6452 1 2025-12-04 07:47:23.333 00:00:10.376 TCP 23.104.0.1:41638 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:48:23.747 00:00:10.364 TCP 23.104.0.1:49492 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:48:25.004 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57412 10 6452 1 2025-12-04 07:49:24.149 00:00:10.362 TCP 23.104.0.1:58690 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:49:25.225 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33100 10 6452 1 2025-12-04 07:50:25.447 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35138 10 6452 1 2025-12-04 07:50:24.544 00:00:10.365 TCP 23.104.0.1:41084 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:51:24.945 00:00:10.370 TCP 23.104.0.1:51726 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:51:25.617 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37878 10 6452 1 2025-12-04 07:51:57.552 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 07:51:57.402 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 07:52:25.352 00:00:10.365 TCP 23.104.0.1:49446 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:52:25.841 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33204 10 6452 1 2025-12-04 07:49:07.444 00:05:04.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 07:49:07.446 00:05:04.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 07:53:25.759 00:00:10.378 TCP 23.104.0.1:44672 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:53:26.073 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52188 10 6452 1 2025-12-04 07:54:26.174 00:00:10.382 TCP 23.104.0.1:37230 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:54:26.286 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57404 10 6452 1 2025-12-04 07:55:26.508 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57924 10 6452 1 2025-12-04 07:55:26.596 00:00:10.367 TCP 23.104.0.1:49562 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:56:26.716 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60718 10 6452 1 2025-12-04 07:56:26.997 00:00:10.369 TCP 23.104.0.1:51640 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:56:57.575 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 07:56:57.343 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 07:57:27.405 00:00:10.366 TCP 23.104.0.1:50650 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:57:26.923 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:47764 10 6452 1 2025-12-04 07:58:27.803 00:00:10.371 TCP 23.104.0.1:56330 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:58:27.168 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54852 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1046, avg pps: 0, avg bpp: 317 Time window: 2025-12-04 06:55:07 - 2025-12-04 07:58:38 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0072s User: 0.0000s Wall: 0.0029s flows/second: 57303.1 Runtime: 0.0029s