Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 18:55:07.649 00:05:04.930 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 18:55:07.646 00:05:04.936 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 18:59:17.939 00:00:10.334 TCP 23.104.0.1:35318 -> 1.101.0.1:3000 11 1507 1 2025-12-04 18:59:30.596 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59948 10 6452 1 2025-12-04 19:00:18.318 00:00:10.366 TCP 23.104.0.1:54232 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:00:30.808 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33578 10 6452 1 2025-12-04 19:01:18.725 00:00:10.369 TCP 23.104.0.1:33588 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:01:31.032 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46344 10 6452 1 2025-12-04 19:02:10.639 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 19:02:10.562 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 19:02:19.131 00:00:10.373 TCP 23.104.0.1:51812 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:02:31.256 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55704 10 6452 1 2025-12-04 19:03:19.547 00:00:10.364 TCP 23.104.0.1:43252 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:03:31.466 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57584 10 6452 1 2025-12-04 19:04:19.948 00:00:10.372 TCP 23.104.0.1:60922 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:04:31.649 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44226 10 6452 1 2025-12-04 19:01:07.648 00:05:04.931 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 19:01:07.646 00:05:04.935 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 19:05:20.356 00:00:10.368 TCP 23.104.0.1:46806 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:05:31.872 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:42088 10 6452 1 2025-12-04 19:06:20.764 00:00:10.382 TCP 23.104.0.1:52948 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:06:32.119 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52592 10 6452 1 2025-12-04 19:07:10.818 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 19:07:10.654 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 19:07:21.182 00:00:10.368 TCP 23.104.0.1:53090 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:07:32.289 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48360 10 6452 1 2025-12-04 19:08:21.587 00:00:10.375 TCP 23.104.0.1:38478 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:08:32.512 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39298 10 6452 1 2025-12-04 19:09:22.005 00:00:10.332 TCP 23.104.0.1:35604 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:09:32.734 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58130 10 6452 1 2025-12-04 19:10:22.374 00:00:10.366 TCP 23.104.0.1:60690 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:10:32.908 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59586 10 6452 1 2025-12-04 19:07:07.648 00:05:04.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 19:07:07.651 00:05:04.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 19:11:22.775 00:00:10.372 TCP 23.104.0.1:34220 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:11:33.120 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57358 10 6452 1 2025-12-04 19:12:11.182 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 19:12:11.187 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 19:12:23.183 00:00:10.363 TCP 23.104.0.1:47188 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:12:33.332 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54346 10 6452 1 2025-12-04 19:13:23.583 00:00:10.363 TCP 23.104.0.1:51702 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:13:33.507 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42480 10 6452 1 2025-12-04 19:14:23.985 00:00:10.366 TCP 23.104.0.1:56980 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:14:33.692 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54614 10 6452 1 2025-12-04 19:15:24.390 00:00:10.364 TCP 23.104.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:15:33.904 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48802 10 6452 1 2025-12-04 19:16:24.788 00:00:10.363 TCP 23.104.0.1:59108 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:16:34.112 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51602 10 6452 1 2025-12-04 19:17:11.217 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 19:13:07.654 00:05:04.930 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 19:17:11.197 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 19:13:07.653 00:05:04.934 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 19:17:25.190 00:00:10.363 TCP 23.104.0.1:40466 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:17:34.326 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:55304 10 6452 1 2025-12-04 19:18:25.592 00:00:10.439 TCP 23.104.0.1:39502 -> 1.101.0.1:3000 15 1926 1 2025-12-04 19:18:34.508 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:32772 12 10375 1 2025-12-04 19:19:26.093 00:00:10.367 TCP 23.104.0.1:49270 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:19:34.755 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50028 10 6452 1 2025-12-04 19:20:26.505 00:00:10.367 TCP 23.104.0.1:38052 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:20:34.980 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49134 10 6452 1 2025-12-04 19:21:26.912 00:00:10.365 TCP 23.104.0.1:48732 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:21:35.215 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38062 10 6452 1 2025-12-04 19:22:11.364 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 19:22:11.200 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 19:22:27.312 00:00:10.365 TCP 23.104.0.1:42040 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:22:35.392 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40740 10 6452 1 2025-12-04 19:19:07.655 00:05:04.929 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 19:19:07.653 00:05:04.934 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 19:23:27.718 00:00:10.338 TCP 23.104.0.1:35154 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:23:35.607 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:35866 10 6452 1 2025-12-04 19:24:28.111 00:00:10.361 TCP 23.104.0.1:38010 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:24:35.786 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52888 10 6452 1 2025-12-04 19:25:28.512 00:00:10.367 TCP 23.104.0.1:52464 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:25:36.006 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41458 10 6452 1 2025-12-04 19:26:28.916 00:00:10.329 TCP 23.104.0.1:43038 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:26:36.185 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47518 10 6452 1 2025-12-04 19:27:11.059 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 19:27:11.230 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 19:27:29.285 00:00:10.369 TCP 23.104.0.1:58972 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:27:36.403 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37162 10 6452 1 2025-12-04 19:28:29.685 00:00:10.374 TCP 23.104.0.1:55790 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:28:36.616 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48094 10 6452 1 2025-12-04 19:25:07.657 00:05:04.932 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 19:25:07.659 00:05:04.928 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 19:29:30.112 00:00:10.381 TCP 23.104.0.1:52566 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:29:36.830 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41172 10 6452 1 2025-12-04 19:30:30.538 00:00:10.364 TCP 23.104.0.1:46974 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:30:37.073 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48888 10 6452 1 2025-12-04 19:31:30.935 00:00:10.336 TCP 23.104.0.1:47814 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:31:37.285 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56558 10 6452 1 2025-12-04 19:32:11.376 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 19:32:11.427 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 19:32:31.318 00:00:10.367 TCP 23.104.0.1:51960 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:32:37.502 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51896 10 6452 1 2025-12-04 19:33:31.728 00:00:10.327 TCP 23.104.0.1:36542 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:33:37.711 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44628 10 6452 1 2025-12-04 19:34:32.105 00:00:10.322 TCP 23.104.0.1:33574 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:34:37.883 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49040 10 6452 1 2025-12-04 19:31:07.657 00:05:04.933 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 19:31:07.661 00:05:04.928 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 19:35:32.466 00:00:10.323 TCP 23.104.0.1:58562 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:35:38.108 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60566 10 6452 1 2025-12-04 19:36:32.832 00:00:10.396 TCP 23.104.0.1:57710 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:36:38.316 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55372 10 6452 1 2025-12-04 19:37:11.577 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 19:37:11.496 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 19:37:33.265 00:00:10.361 TCP 23.104.0.1:39930 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:37:38.533 00:00:11.437 TCP 1.101.0.1:3000 -> 22.102.0.1:36626 10 6452 1 2025-12-04 19:38:33.663 00:00:10.367 TCP 23.104.0.1:34970 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:38:40.009 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50968 10 6452 1 2025-12-04 19:39:34.093 00:00:10.327 TCP 23.104.0.1:38038 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:39:40.177 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39374 10 6452 1 2025-12-04 19:40:34.456 00:00:10.363 TCP 23.104.0.1:37894 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:40:40.352 00:00:10.853 TCP 1.101.0.1:3000 -> 22.102.0.1:39946 10 6452 1 2025-12-04 19:37:07.662 00:05:04.929 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 19:37:07.660 00:05:04.934 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 19:41:34.865 00:00:10.366 TCP 23.104.0.1:34222 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:41:41.244 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44070 10 6452 1 2025-12-04 19:42:11.712 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 19:42:11.714 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 19:42:35.271 00:00:10.328 TCP 23.104.0.1:56394 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:42:41.450 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:43720 10 6452 1 2025-12-04 19:43:35.643 00:00:10.367 TCP 23.104.0.1:53874 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:43:41.630 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38078 10 6452 1 2025-12-04 19:44:36.054 00:00:10.370 TCP 23.104.0.1:45824 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:44:41.849 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38074 10 6452 1 2025-12-04 19:45:36.465 00:00:10.363 TCP 23.104.0.1:39978 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:45:42.033 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60998 10 6452 1 2025-12-04 19:46:36.865 00:00:10.369 TCP 23.104.0.1:43500 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:46:42.206 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59788 10 6452 1 2025-12-04 19:47:11.764 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 19:47:11.698 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 19:43:07.666 00:05:04.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 19:43:07.669 00:05:04.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 19:47:37.275 00:00:10.324 TCP 23.104.0.1:41208 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:47:42.379 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40730 10 6452 1 2025-12-04 19:48:37.634 00:00:10.368 TCP 23.104.0.1:58768 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:48:42.594 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51870 10 6452 1 2025-12-04 19:49:38.034 00:00:10.362 TCP 23.104.0.1:59060 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:49:42.809 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52268 10 6452 1 2025-12-04 19:50:38.437 00:00:10.360 TCP 23.104.0.1:46090 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:50:42.981 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:59138 10 6452 1 2025-12-04 19:51:38.836 00:00:10.343 TCP 23.104.0.1:39656 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:51:43.214 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56598 10 6452 1 2025-12-04 19:52:11.782 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 19:52:11.730 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 19:52:39.213 00:00:10.372 TCP 23.104.0.1:46228 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:52:43.386 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48462 10 6452 1 2025-12-04 19:49:07.668 00:05:04.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 19:49:07.665 00:05:04.930 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 19:53:39.622 00:00:10.368 TCP 23.104.0.1:59290 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:53:43.604 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59930 10 6452 1 2025-12-04 19:54:40.035 00:00:10.390 TCP 23.104.0.1:60952 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:54:43.816 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58500 10 6452 1 2025-12-04 19:55:40.458 00:00:10.328 TCP 23.104.0.1:44512 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:55:44.030 00:00:10.299 TCP 1.101.0.1:3000 -> 22.102.0.1:41040 10 6452 1 2025-12-04 19:56:40.827 00:00:10.369 TCP 23.104.0.1:54660 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:56:44.367 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47194 10 6452 1 2025-12-04 19:57:12.287 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 19:57:12.285 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 19:57:41.230 00:00:10.364 TCP 23.104.0.1:39046 -> 1.101.0.1:3000 11 1507 1 2025-12-04 19:57:44.537 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33368 10 6452 1 Summary: total flows: 162, total bytes: 494731, total packets: 1557, avg bps: 1050, avg pps: 0, avg bpp: 317 Time window: 2025-12-04 18:55:07 - 2025-12-04 19:57:54 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0032s User: 0.0024s Wall: 0.0022s flows/second: 72905.3 Runtime: 0.0022s