Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-06 18:55:08.641 00:05:04.907 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-06 18:59:20.960 00:00:10.331 TCP 23.104.0.1:34782 -> 1.101.0.1:3000 11 1507 1 2025-12-06 18:59:29.678 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49962 10 6452 1 2025-12-06 19:00:21.330 00:00:10.362 TCP 23.104.0.1:38816 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:00:29.893 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37112 10 6452 1 2025-12-06 19:01:21.735 00:00:10.364 TCP 23.104.0.1:55238 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:01:30.110 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35078 10 6452 1 2025-12-06 19:02:22.138 00:00:10.367 TCP 23.104.0.1:53032 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:02:30.328 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38740 10 6452 1 2025-12-06 19:03:08.505 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-06 19:03:08.579 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-06 19:03:22.548 00:00:10.367 TCP 23.104.0.1:58836 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:03:30.512 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44640 10 6452 1 2025-12-06 19:00:08.640 00:05:04.913 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-06 19:04:22.949 00:00:10.381 TCP 23.104.0.1:37068 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:04:30.728 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40316 10 6452 1 2025-12-06 19:01:08.643 00:05:04.908 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-06 19:05:23.361 00:00:10.324 TCP 23.104.0.1:57520 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:05:30.956 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54434 10 6452 1 2025-12-06 19:06:23.727 00:00:10.383 TCP 23.104.0.1:45998 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:06:31.201 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42758 10 6452 1 2025-12-06 19:07:24.147 00:00:10.363 TCP 23.104.0.1:34180 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:07:31.419 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39266 10 6452 1 2025-12-06 19:08:08.990 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-06 19:08:08.898 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-06 19:08:24.546 00:00:10.920 TCP 23.104.0.1:54000 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:08:31.639 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46386 10 6452 1 2025-12-06 19:09:25.506 00:00:10.368 TCP 23.104.0.1:51116 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:09:31.858 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45794 10 6452 1 2025-12-06 19:06:08.642 00:05:04.913 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-06 19:10:25.908 00:00:10.325 TCP 23.104.0.1:41074 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:10:32.082 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52288 10 6452 1 2025-12-06 19:07:08.644 00:05:04.910 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-06 19:11:26.268 00:00:10.326 TCP 23.104.0.1:33396 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:11:32.252 00:00:10.546 TCP 1.101.0.1:3000 -> 22.102.0.1:60884 10 6452 1 2025-12-06 19:12:26.631 00:00:10.368 TCP 23.104.0.1:59436 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:12:32.834 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56484 10 6452 1 2025-12-06 19:13:08.766 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-06 19:13:08.919 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-06 19:13:27.034 00:00:10.410 TCP 23.104.0.1:53518 -> 1.101.0.1:3000 15 1926 1 2025-12-06 19:13:33.085 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36614 12 10375 1 2025-12-06 19:14:27.489 00:00:10.373 TCP 23.104.0.1:37368 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:14:33.324 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60306 10 6452 1 2025-12-06 19:15:27.903 00:00:10.328 TCP 23.104.0.1:52772 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:15:33.552 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48550 10 6452 1 2025-12-06 19:12:08.644 00:05:04.913 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-06 19:16:28.277 00:00:10.364 TCP 23.104.0.1:36400 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:16:33.771 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50200 10 6452 1 2025-12-06 19:13:08.646 00:05:04.909 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-06 19:17:28.684 00:00:10.324 TCP 23.104.0.1:36640 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:17:33.994 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:53140 10 6452 1 2025-12-06 19:18:08.838 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-06 19:18:08.897 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-06 19:18:29.058 00:00:10.325 TCP 23.104.0.1:59002 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:18:34.220 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55688 10 6452 1 2025-12-06 19:19:29.422 00:00:10.366 TCP 23.104.0.1:40920 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:19:34.442 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47574 10 6452 1 2025-12-06 19:20:29.825 00:00:10.376 TCP 23.104.0.1:39432 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:20:34.672 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45386 10 6452 1 2025-12-06 19:21:30.238 00:00:10.361 TCP 23.104.0.1:58264 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:21:34.889 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35882 10 6452 1 2025-12-06 19:18:08.646 00:05:04.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-06 19:22:30.639 00:00:10.362 TCP 23.104.0.1:48772 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:22:35.106 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37560 10 6452 1 2025-12-06 19:23:09.483 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-06 19:23:09.122 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-06 19:19:08.646 00:05:04.912 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-06 19:23:31.051 00:00:10.367 TCP 23.104.0.1:57604 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:23:35.319 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40888 10 6452 1 2025-12-06 19:24:31.457 00:00:10.365 TCP 23.104.0.1:56840 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:24:35.536 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59084 10 6452 1 2025-12-06 19:25:35.750 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50468 10 6452 1 2025-12-06 19:25:31.860 00:00:10.376 TCP 23.104.0.1:48690 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:26:35.922 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48464 10 6452 1 2025-12-06 19:26:32.275 00:00:10.392 TCP 23.104.0.1:40992 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:27:36.135 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57450 10 6452 1 2025-12-06 19:27:32.701 00:00:10.389 TCP 23.104.0.1:55238 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:28:09.184 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-06 19:28:09.192 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-06 19:24:08.645 00:05:04.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-06 19:28:36.346 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39234 10 6452 1 2025-12-06 19:28:33.138 00:00:10.601 TCP 23.104.0.1:56486 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:25:08.649 00:05:04.913 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-06 19:29:36.555 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60530 10 6452 1 2025-12-06 19:29:33.777 00:00:10.417 TCP 23.104.0.1:57790 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:30:36.789 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2025-12-06 19:30:34.232 00:00:10.371 TCP 23.104.0.1:44440 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:31:34.645 00:00:10.368 TCP 23.104.0.1:33490 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:31:36.958 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45086 12 6556 1 2025-12-06 19:32:35.068 00:00:10.370 TCP 23.104.0.1:42610 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:32:37.184 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51400 10 6452 1 2025-12-06 19:33:09.173 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-06 19:33:09.250 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-06 19:33:35.500 00:00:10.323 TCP 23.104.0.1:59226 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:33:37.400 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39880 10 6452 1 2025-12-06 19:30:08.647 00:05:04.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-06 19:34:35.862 00:00:10.382 TCP 23.104.0.1:38674 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:34:37.622 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48764 10 6452 1 2025-12-06 19:31:08.649 00:05:04.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-06 19:35:36.293 00:00:10.370 TCP 23.104.0.1:33962 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:35:37.841 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40446 10 6452 1 2025-12-06 19:36:38.078 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58494 10 6452 1 2025-12-06 19:36:36.704 00:00:10.369 TCP 23.104.0.1:58160 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:37:37.114 00:00:10.371 TCP 23.104.0.1:57642 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:37:38.300 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56014 10 6452 1 2025-12-06 19:38:09.169 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-06 19:38:09.083 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-06 19:38:37.522 00:00:10.371 TCP 23.104.0.1:47040 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:38:38.520 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60742 10 6452 1 2025-12-06 19:39:37.926 00:00:10.395 TCP 23.104.0.1:46908 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:39:38.736 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:52364 11 6504 1 2025-12-06 19:36:08.649 00:05:04.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-06 19:40:39.033 00:00:10.595 TCP 1.101.0.1:3000 -> 22.102.0.1:46522 10 6452 1 2025-12-06 19:40:38.353 00:00:11.354 TCP 23.104.0.1:46010 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:37:08.651 00:05:04.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-06 19:41:39.746 00:00:10.365 TCP 23.104.0.1:37886 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:41:39.670 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53672 10 6452 1 2025-12-06 19:42:39.893 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:60314 10 6452 1 2025-12-06 19:42:40.148 00:00:10.366 TCP 23.104.0.1:51438 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:43:09.449 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-06 19:43:09.450 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-06 19:43:40.099 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56598 10 6452 1 2025-12-06 19:43:40.553 00:00:10.362 TCP 23.104.0.1:48230 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:44:40.311 00:00:11.626 TCP 1.101.0.1:3000 -> 22.102.0.1:41312 10 6452 1 2025-12-06 19:44:40.954 00:00:11.071 TCP 23.104.0.1:54510 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:45:41.989 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:42514 10 6452 1 2025-12-06 19:45:42.113 00:00:10.364 TCP 23.104.0.1:34104 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:42:08.650 00:05:04.918 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-06 19:46:42.515 00:00:10.370 TCP 23.104.0.1:37358 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:46:42.230 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60560 10 6452 1 2025-12-06 19:43:08.653 00:05:04.912 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-06 19:47:42.925 00:00:10.387 TCP 23.104.0.1:36704 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:47:42.409 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:41110 10 6452 1 2025-12-06 19:48:10.589 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-06 19:48:10.825 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-06 19:48:43.354 00:00:10.362 TCP 23.104.0.1:50982 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:48:42.575 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:58652 10 6452 1 2025-12-06 19:49:42.755 00:00:10.767 TCP 1.101.0.1:3000 -> 22.102.0.1:53834 10 6452 1 2025-12-06 19:49:43.753 00:00:10.392 TCP 23.104.0.1:57516 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:50:44.183 00:00:10.325 TCP 23.104.0.1:47622 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:50:43.564 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45522 10 6452 1 2025-12-06 19:51:43.798 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42078 10 6452 1 2025-12-06 19:51:44.543 00:00:10.359 TCP 23.104.0.1:33368 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:48:08.651 00:05:04.918 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-06 19:52:44.940 00:00:10.385 TCP 23.104.0.1:36688 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:52:44.009 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56862 10 6452 1 2025-12-06 19:53:09.650 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-06 19:53:09.650 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-06 19:49:08.655 00:05:04.913 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-06 19:53:45.366 00:00:10.323 TCP 23.104.0.1:39274 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:53:44.231 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57546 10 6452 1 2025-12-06 19:54:45.727 00:00:10.374 TCP 23.104.0.1:47706 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:54:44.444 00:00:10.727 TCP 1.101.0.1:3000 -> 22.102.0.1:53200 10 6452 1 2025-12-06 19:55:45.210 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35944 10 6452 1 2025-12-06 19:55:46.151 00:00:10.365 TCP 23.104.0.1:41748 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:56:45.424 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:46902 10 6452 1 2025-12-06 19:56:46.564 00:00:10.364 TCP 23.104.0.1:40430 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:57:45.676 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53604 10 6452 1 2025-12-06 19:57:46.964 00:00:10.379 TCP 23.104.0.1:46816 -> 1.101.0.1:3000 11 1507 1 2025-12-06 19:58:09.643 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-06 19:58:09.684 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-06 19:54:08.658 00:05:04.914 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 162, total bytes: 494887, total packets: 1560, avg bps: 1029, avg pps: 0, avg bpp: 317 Time window: 2025-12-06 18:55:08 - 2025-12-06 19:59:13 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0019s User: 0.0028s Wall: 0.0020s flows/second: 82350.9 Runtime: 0.0020s