Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 22:55:07.727 00:05:04.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 22:59:05.583 00:00:10.367 TCP 23.104.0.1:47204 -> 1.101.0.1:3000 11 1507 1 2025-12-04 22:55:07.725 00:05:04.930 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 22:59:28.687 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36244 10 6452 1 2025-12-04 23:00:05.987 00:00:10.372 TCP 23.104.0.1:55262 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:00:28.896 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47846 10 6452 1 2025-12-04 23:01:06.396 00:00:10.363 TCP 23.104.0.1:34442 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:01:29.091 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49964 10 6452 1 2025-12-04 23:02:15.658 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 23:02:15.343 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 23:02:06.801 00:00:10.912 TCP 23.104.0.1:58758 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:02:29.266 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46398 10 6452 1 2025-12-04 23:03:07.759 00:00:10.380 TCP 23.104.0.1:54892 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:03:29.477 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36990 10 6452 1 2025-12-04 23:04:08.177 00:00:10.360 TCP 23.104.0.1:55244 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:04:29.686 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45190 10 6452 1 2025-12-04 23:01:07.726 00:05:04.931 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 23:01:07.728 00:05:04.926 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 23:05:08.577 00:00:10.361 TCP 23.104.0.1:44366 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:05:29.904 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50666 10 6452 1 2025-12-04 23:06:08.973 00:00:10.332 TCP 23.104.0.1:32906 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:06:30.123 00:00:10.357 TCP 1.101.0.1:3000 -> 22.102.0.1:58850 10 6452 1 2025-12-04 23:07:15.625 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 23:07:15.500 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 23:07:09.342 00:00:10.325 TCP 23.104.0.1:37808 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:07:30.533 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40262 10 6452 1 2025-12-04 23:08:09.707 00:00:10.359 TCP 23.104.0.1:47874 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:08:30.770 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42360 10 6452 1 2025-12-04 23:09:10.110 00:00:10.358 TCP 23.104.0.1:32830 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:09:30.957 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:37624 10 6452 1 2025-12-04 23:10:10.511 00:00:10.367 TCP 23.104.0.1:42310 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:10:31.199 00:00:10.958 TCP 1.101.0.1:3000 -> 22.102.0.1:60696 10 6452 1 2025-12-04 23:07:07.727 00:05:04.932 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 23:07:07.729 00:05:04.927 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 23:11:10.915 00:00:10.360 TCP 23.104.0.1:45248 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:11:32.200 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34362 10 6452 1 2025-12-04 23:12:15.704 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 23:12:15.795 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 23:12:11.311 00:00:10.364 TCP 23.104.0.1:38494 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:12:32.425 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59088 10 6452 1 2025-12-04 23:13:11.712 00:00:10.375 TCP 23.104.0.1:56860 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:13:32.652 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36626 10 6452 1 2025-12-04 23:14:12.132 00:00:10.673 TCP 23.104.0.1:55880 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:14:32.871 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56210 10 6452 1 2025-12-04 23:15:12.844 00:00:10.389 TCP 23.104.0.1:46330 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:15:33.074 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32802 10 6452 1 2025-12-04 23:16:13.279 00:00:10.336 TCP 23.104.0.1:42382 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:16:33.284 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56314 10 6452 1 2025-12-04 23:17:16.041 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 23:13:07.732 00:05:04.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 23:17:16.303 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 23:13:07.731 00:05:04.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 23:17:13.685 00:00:10.370 TCP 23.104.0.1:56120 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:17:33.496 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35218 10 6452 1 2025-12-04 23:18:14.108 00:00:10.374 TCP 23.104.0.1:50616 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:18:33.721 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34584 10 6452 1 2025-12-04 23:19:14.519 00:00:10.378 TCP 23.104.0.1:58138 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:19:33.942 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51230 10 6452 1 2025-12-04 23:20:14.939 00:00:10.408 TCP 23.104.0.1:33306 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:20:34.179 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34100 10 6452 1 2025-12-04 23:21:15.377 00:00:10.366 TCP 23.104.0.1:34620 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:21:34.398 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59842 10 6452 1 2025-12-04 23:22:16.184 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 23:22:16.120 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 23:22:15.784 00:00:10.365 TCP 23.104.0.1:57164 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:22:34.608 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57250 10 6452 1 2025-12-04 23:19:07.734 00:05:04.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 23:19:07.732 00:05:04.930 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 23:23:16.184 00:00:10.362 TCP 23.104.0.1:40452 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:23:34.786 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43622 10 6452 1 2025-12-04 23:24:16.589 00:00:10.750 TCP 23.104.0.1:49474 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:24:34.998 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52966 10 6452 1 2025-12-04 23:25:17.380 00:00:10.361 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:25:35.174 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48334 10 6452 1 2025-12-04 23:26:17.780 00:00:10.326 TCP 23.104.0.1:44698 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:26:35.389 00:00:10.830 TCP 1.101.0.1:3000 -> 22.102.0.1:57722 10 6452 1 2025-12-04 23:27:16.008 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 23:27:16.000 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 23:27:18.142 00:00:10.321 TCP 23.104.0.1:51750 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:27:36.260 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51768 10 6452 1 2025-12-04 23:28:18.502 00:00:10.364 TCP 23.104.0.1:35632 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:28:36.480 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58058 10 6452 1 2025-12-04 23:25:07.733 00:05:04.930 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 23:25:07.734 00:05:04.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 23:29:18.899 00:00:10.373 TCP 23.104.0.1:33268 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:29:36.663 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45462 10 6452 1 2025-12-04 23:30:19.307 00:00:10.365 TCP 23.104.0.1:36924 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:30:36.872 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46706 10 6452 1 2025-12-04 23:31:19.711 00:00:10.363 TCP 23.104.0.1:59178 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:31:37.098 00:00:10.527 TCP 1.101.0.1:3000 -> 22.102.0.1:34782 10 6452 1 2025-12-04 23:32:16.179 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 23:32:16.091 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 23:32:20.117 00:00:10.359 TCP 23.104.0.1:37886 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:32:37.666 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53040 10 6452 1 2025-12-04 23:33:20.515 00:00:10.367 TCP 23.104.0.1:51670 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:33:37.849 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:51806 10 6452 1 2025-12-04 23:34:20.922 00:00:10.367 TCP 23.104.0.1:56280 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:34:38.075 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46324 10 6452 1 2025-12-04 23:31:07.736 00:05:04.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 23:31:07.733 00:05:04.931 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 23:35:21.327 00:00:10.368 TCP 23.104.0.1:58712 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:35:38.294 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34112 12 6556 1 2025-12-04 23:36:21.732 00:00:10.920 TCP 23.104.0.1:47572 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:36:38.513 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47474 10 6452 1 2025-12-04 23:37:16.179 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 23:37:16.415 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 23:37:22.709 00:00:10.373 TCP 23.104.0.1:45142 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:37:38.725 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49468 10 6452 1 2025-12-04 23:38:23.117 00:00:10.370 TCP 23.104.0.1:55012 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:38:38.952 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53524 12 6556 1 2025-12-04 23:39:23.521 00:00:10.363 TCP 23.104.0.1:39728 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:39:39.179 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:47888 10 6452 1 2025-12-04 23:40:23.922 00:00:10.381 TCP 23.104.0.1:50140 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:40:39.389 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49282 10 6452 1 2025-12-04 23:37:07.740 00:05:04.922 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 23:37:07.737 00:05:04.928 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 23:41:24.345 00:00:10.358 TCP 23.104.0.1:51346 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:41:39.606 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41576 10 6452 1 2025-12-04 23:42:16.485 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 23:42:16.585 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 23:42:24.744 00:00:10.361 TCP 23.104.0.1:59560 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:42:39.779 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41250 10 6452 1 2025-12-04 23:43:25.144 00:00:10.328 TCP 23.104.0.1:48712 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:43:39.990 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47862 10 6452 1 2025-12-04 23:44:25.512 00:00:10.366 TCP 23.104.0.1:53128 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:44:40.214 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39194 10 6452 1 2025-12-04 23:45:25.913 00:00:10.366 TCP 23.104.0.1:50338 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:45:40.422 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50318 10 6452 1 2025-12-04 23:46:26.312 00:00:10.339 TCP 23.104.0.1:41506 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:46:40.638 00:00:10.612 TCP 1.101.0.1:3000 -> 22.102.0.1:38308 10 6452 1 2025-12-04 23:47:16.540 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 23:43:07.740 00:05:04.924 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 23:47:16.513 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 23:43:07.737 00:05:04.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 23:47:26.690 00:00:10.367 TCP 23.104.0.1:58068 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:47:41.287 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50830 10 6452 1 2025-12-04 23:48:27.101 00:00:10.355 TCP 23.104.0.1:46994 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:48:41.501 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37264 10 6452 1 2025-12-04 23:49:27.492 00:00:10.362 TCP 23.104.0.1:60774 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:49:41.717 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55648 10 6452 1 2025-12-04 23:50:27.896 00:00:10.369 TCP 23.104.0.1:38564 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:50:41.926 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42052 10 6452 1 2025-12-04 23:51:28.315 00:00:10.908 TCP 23.104.0.1:34622 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:51:42.140 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44966 10 6452 1 2025-12-04 23:52:16.573 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 23:52:16.292 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 23:52:29.276 00:00:10.328 TCP 23.104.0.1:55920 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:52:42.350 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56532 10 6452 1 2025-12-04 23:49:07.740 00:05:04.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 23:49:07.738 00:05:04.930 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 23:53:29.648 00:00:10.330 TCP 23.104.0.1:45896 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:53:42.563 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58936 10 6452 1 2025-12-04 23:54:30.014 00:00:10.363 TCP 23.104.0.1:46800 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:54:42.735 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39870 10 6452 1 2025-12-04 23:55:30.413 00:00:10.363 TCP 23.104.0.1:34304 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:55:42.903 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:35804 10 6452 1 2025-12-04 23:56:30.817 00:00:10.692 TCP 23.104.0.1:41532 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:56:43.087 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59498 10 6452 1 2025-12-04 23:57:16.762 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 23:57:16.828 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 23:57:31.548 00:00:10.363 TCP 23.104.0.1:55064 -> 1.101.0.1:3000 11 1507 1 2025-12-04 23:57:43.317 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57612 10 6452 1 2025-12-04 23:58:31.947 00:00:10.367 TCP 23.104.0.1:39806 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492104, total packets: 1566, avg bps: 1032, avg pps: 0, avg bpp: 314 Time window: 2025-12-04 22:55:07 - 2025-12-04 23:58:42 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0010s Wall: 0.0017s flows/second: 97029.7 Runtime: 0.0017s