Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 09:55:07.962 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 09:55:07.960 00:05:04.905 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 09:59:08.109 00:00:10.804 TCP 23.104.0.1:59450 -> 1.101.0.1:3000 11 1507 1 2025-12-05 09:59:27.875 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37670 10 6452 1 2025-12-05 10:00:08.950 00:00:10.366 TCP 23.104.0.1:35302 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:00:28.119 00:00:10.429 TCP 1.101.0.1:3000 -> 22.102.0.1:36788 10 6452 1 2025-12-05 10:01:09.358 00:00:10.361 TCP 23.104.0.1:49636 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:01:28.596 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46986 10 6452 1 2025-12-05 10:02:09.760 00:00:10.383 TCP 23.104.0.1:52174 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:02:28.664 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 10:02:28.926 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 10:02:28.809 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44146 10 6452 1 2025-12-05 10:03:10.184 00:00:10.373 TCP 23.104.0.1:48298 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:03:29.036 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37318 10 6452 1 2025-12-05 10:04:10.591 00:00:10.371 TCP 23.104.0.1:57682 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:04:29.254 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56186 10 6452 1 2025-12-05 10:01:07.962 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 10:01:07.960 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 10:05:11.001 00:00:10.358 TCP 23.104.0.1:54598 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:05:29.471 00:00:10.327 TCP 1.101.0.1:3000 -> 22.102.0.1:35032 10 6452 1 2025-12-05 10:06:11.408 00:00:10.367 TCP 23.104.0.1:60250 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:06:29.832 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48706 10 6452 1 2025-12-05 10:07:11.809 00:00:10.370 TCP 23.104.0.1:54596 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:07:29.045 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 10:07:29.096 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 10:07:30.077 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33242 10 6452 1 2025-12-05 10:08:12.217 00:00:10.325 TCP 23.104.0.1:40062 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:08:30.287 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59628 10 6452 1 2025-12-05 10:09:12.576 00:00:10.365 TCP 23.104.0.1:39644 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:09:30.499 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33638 10 6452 1 2025-12-05 10:10:12.979 00:00:10.385 TCP 23.104.0.1:39372 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:10:30.717 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49812 10 6452 1 2025-12-05 10:07:07.960 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 10:07:07.964 00:05:04.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 10:11:13.415 00:00:10.367 TCP 23.104.0.1:57756 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:11:30.927 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:41208 10 6452 1 2025-12-05 10:12:13.834 00:00:10.348 TCP 23.104.0.1:51746 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:12:29.165 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 10:12:29.228 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 10:12:31.121 00:00:10.669 TCP 1.101.0.1:3000 -> 22.102.0.1:41240 10 6452 1 2025-12-05 10:13:14.226 00:00:10.368 TCP 23.104.0.1:55012 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:13:31.830 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:32806 10 6452 1 2025-12-05 10:14:14.634 00:00:10.369 TCP 23.104.0.1:57676 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:14:32.072 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59848 10 6452 1 2025-12-05 10:15:15.036 00:00:10.368 TCP 23.104.0.1:36628 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:15:32.285 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58656 10 6452 1 2025-12-05 10:16:15.440 00:00:10.362 TCP 23.104.0.1:39744 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:16:32.494 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35478 10 6452 1 2025-12-05 10:13:07.965 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 10:13:07.961 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 10:17:15.841 00:00:10.350 TCP 23.104.0.1:44718 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:17:29.207 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 10:17:29.054 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 10:17:32.701 00:00:10.928 TCP 1.101.0.1:3000 -> 22.102.0.1:59452 10 6452 1 2025-12-05 10:18:16.233 00:00:10.362 TCP 23.104.0.1:47012 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:18:33.669 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47806 10 6452 1 2025-12-05 10:19:16.633 00:00:10.363 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:19:33.893 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41896 10 6452 1 2025-12-05 10:20:17.037 00:00:10.325 TCP 23.104.0.1:37430 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:20:34.114 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37742 10 6452 1 2025-12-05 10:21:17.399 00:00:10.367 TCP 23.104.0.1:44914 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:21:34.336 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54812 10 6452 1 2025-12-05 10:22:29.454 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 10:22:29.429 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 10:22:17.803 00:00:10.374 TCP 23.104.0.1:37094 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:22:34.560 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34858 10 6452 1 2025-12-05 10:19:07.967 00:05:04.899 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 10:19:07.964 00:05:04.905 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 10:23:18.213 00:00:10.322 TCP 23.104.0.1:52836 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:23:34.732 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54776 10 6452 1 2025-12-05 10:24:18.576 00:00:10.361 TCP 23.104.0.1:44724 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:24:34.902 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55226 10 6452 1 2025-12-05 10:25:18.976 00:00:10.323 TCP 23.104.0.1:44950 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:25:35.132 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47094 12 6556 1 2025-12-05 10:26:19.337 00:00:10.365 TCP 23.104.0.1:53614 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:26:35.349 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37166 10 6452 1 2025-12-05 10:27:29.465 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 10:27:29.400 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 10:27:19.740 00:00:10.501 TCP 23.104.0.1:52712 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:27:35.577 00:00:10.783 TCP 1.101.0.1:3000 -> 22.102.0.1:52036 11 6504 1 2025-12-05 10:28:20.287 00:00:10.366 TCP 23.104.0.1:58134 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:28:36.422 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46904 10 6452 1 2025-12-05 10:25:07.968 00:05:04.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 10:25:07.971 00:05:04.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 10:29:20.695 00:00:10.322 TCP 23.104.0.1:40964 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:29:36.645 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48494 10 6452 1 2025-12-05 10:30:21.061 00:00:10.324 TCP 23.104.0.1:44440 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:30:36.877 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:53572 10 6452 1 2025-12-05 10:31:21.426 00:00:10.363 TCP 23.104.0.1:60748 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:31:37.120 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34138 10 6452 1 2025-12-05 10:32:29.395 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 10:32:29.490 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 10:32:21.831 00:00:10.345 TCP 23.104.0.1:50984 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:32:37.335 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40630 12 6556 1 2025-12-05 10:33:22.219 00:00:10.440 TCP 23.104.0.1:60042 -> 1.101.0.1:3000 15 1926 1 2025-12-05 10:33:37.563 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39536 12 10369 1 2025-12-05 10:34:22.700 00:00:10.322 TCP 23.104.0.1:49888 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:34:37.802 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57398 10 6452 1 2025-12-05 10:31:07.970 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 10:31:07.972 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 10:35:23.087 00:00:10.363 TCP 23.104.0.1:49450 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:35:38.026 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53552 10 6452 1 2025-12-05 10:36:23.487 00:00:10.368 TCP 23.104.0.1:46568 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:36:38.237 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49784 10 6452 1 2025-12-05 10:37:29.501 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 10:37:29.516 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 10:37:23.892 00:00:10.370 TCP 23.104.0.1:43202 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:37:38.414 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45416 10 6452 1 2025-12-05 10:38:24.300 00:00:10.363 TCP 23.104.0.1:35546 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:38:38.588 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52340 10 6452 1 2025-12-05 10:39:24.705 00:00:10.364 TCP 23.104.0.1:54416 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:39:38.800 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50472 10 6452 1 2025-12-05 10:40:25.111 00:00:10.371 TCP 23.104.0.1:52914 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:40:39.011 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47116 10 6452 1 2025-12-05 10:37:07.972 00:05:04.899 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 10:37:07.970 00:05:04.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 10:41:25.523 00:00:10.325 TCP 23.104.0.1:38576 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:41:39.224 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59686 10 6452 1 2025-12-05 10:42:29.528 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 10:42:29.695 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 10:42:25.887 00:00:10.377 TCP 23.104.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:42:39.446 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38576 10 6452 1 2025-12-05 10:43:26.321 00:00:10.328 TCP 23.104.0.1:35638 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:43:39.624 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33542 10 6452 1 2025-12-05 10:44:26.692 00:00:10.366 TCP 23.104.0.1:40534 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:44:39.837 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58754 10 6452 1 2025-12-05 10:45:27.103 00:00:10.366 TCP 23.104.0.1:41872 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:45:40.006 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52438 10 6452 1 2025-12-05 10:46:27.513 00:00:10.371 TCP 23.104.0.1:51504 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:46:40.237 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36818 10 6452 1 2025-12-05 10:43:07.974 00:05:04.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 10:43:07.971 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 10:47:29.581 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 10:47:29.842 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 10:47:27.922 00:00:10.646 TCP 23.104.0.1:51934 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:47:40.463 00:00:11.244 TCP 1.101.0.1:3000 -> 22.102.0.1:54060 10 6452 1 2025-12-05 10:48:28.605 00:00:10.366 TCP 23.104.0.1:58704 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:48:41.753 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40882 10 6452 1 2025-12-05 10:49:29.013 00:00:10.367 TCP 23.104.0.1:36310 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:49:41.929 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38838 10 6452 1 2025-12-05 10:50:29.417 00:00:10.367 TCP 23.104.0.1:57784 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:50:42.143 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34712 10 6452 1 2025-12-05 10:51:29.822 00:00:10.326 TCP 23.104.0.1:56360 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:51:42.353 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43276 10 6452 1 2025-12-05 10:52:29.852 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 10:52:29.871 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 10:52:30.185 00:00:10.362 TCP 23.104.0.1:44740 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:52:42.566 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60006 10 6452 1 2025-12-05 10:49:07.973 00:05:04.913 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 10:49:07.975 00:05:04.907 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 10:53:30.588 00:00:10.370 TCP 23.104.0.1:47336 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:53:42.788 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:56060 10 6452 1 2025-12-05 10:54:30.992 00:00:10.520 TCP 23.104.0.1:33372 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:54:43.070 00:00:10.509 TCP 1.101.0.1:3000 -> 22.102.0.1:57708 10 6452 1 2025-12-05 10:55:31.549 00:00:10.417 TCP 23.104.0.1:59784 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:55:43.620 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59632 10 6452 1 2025-12-05 10:56:32.005 00:00:10.363 TCP 23.104.0.1:48738 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:56:43.840 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47650 10 6452 1 2025-12-05 10:57:29.858 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 10:57:29.699 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 10:57:32.409 00:00:10.362 TCP 23.104.0.1:43416 -> 1.101.0.1:3000 11 1507 1 2025-12-05 10:57:44.075 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53392 10 6452 1 2025-12-05 10:58:32.815 00:00:10.358 TCP 23.104.0.1:52976 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496492, total packets: 1573, avg bps: 1041, avg pps: 0, avg bpp: 315 Time window: 2025-12-05 09:55:07 - 2025-12-05 10:58:43 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0019s Wall: 0.0022s flows/second: 75460.4 Runtime: 0.0022s