Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-08 18:59:05.902 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-08 18:59:06.117 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-08 18:59:00.332 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51636 10 6452 1 2025-12-08 18:54:14.548 00:05:54.951 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-08 18:59:27.510 00:00:10.367 TCP 23.104.0.1:37650 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:00:00.545 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53148 10 6452 1 2025-12-08 19:00:27.911 00:00:10.363 TCP 23.104.0.1:53938 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:01:00.760 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34864 10 6452 1 2025-12-08 19:01:28.311 00:00:10.363 TCP 23.104.0.1:42962 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:02:00.973 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:48500 10 6452 1 2025-12-08 19:02:28.713 00:00:10.342 TCP 23.104.0.1:36428 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:03:01.207 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58404 10 6452 1 2025-12-08 19:03:29.093 00:00:10.370 TCP 23.104.0.1:34982 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:04:06.273 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-08 19:04:06.447 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-08 19:04:01.423 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58454 10 6452 1 2025-12-08 18:59:14.552 00:05:54.947 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-08 19:04:29.518 00:00:10.365 TCP 23.104.0.1:59216 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:05:01.599 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53330 10 6452 1 2025-12-08 19:00:14.549 00:05:54.952 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-08 19:05:29.923 00:00:11.876 TCP 23.104.0.1:35520 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:06:01.810 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48930 10 6452 1 2025-12-08 19:06:31.848 00:00:10.381 TCP 23.104.0.1:34550 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:07:02.070 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43000 10 6452 1 2025-12-08 19:07:32.269 00:00:10.366 TCP 23.104.0.1:44674 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:08:02.284 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57148 10 6452 1 2025-12-08 19:08:32.676 00:00:10.319 TCP 23.104.0.1:45622 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:09:06.802 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-08 19:09:06.720 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-08 19:09:02.492 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34156 10 6452 1 2025-12-08 19:09:33.037 00:00:10.361 TCP 23.104.0.1:39532 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:05:14.555 00:05:54.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-08 19:10:02.699 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55550 10 6452 1 2025-12-08 19:10:33.436 00:00:10.336 TCP 23.104.0.1:59858 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:06:14.553 00:05:54.950 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-08 19:11:02.924 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:48884 10 6452 1 2025-12-08 19:11:33.811 00:00:10.361 TCP 23.104.0.1:54970 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:12:03.111 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59048 10 6452 1 2025-12-08 19:12:34.212 00:00:10.374 TCP 23.104.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:13:03.324 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41082 10 6452 1 2025-12-08 19:13:34.625 00:00:10.323 TCP 23.104.0.1:57020 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:14:06.640 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-08 19:14:06.323 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-08 19:14:03.536 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46278 10 6452 1 2025-12-08 19:14:34.993 00:00:10.361 TCP 23.104.0.1:37748 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:15:03.750 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37968 10 6452 1 2025-12-08 19:15:35.398 00:00:10.364 TCP 23.104.0.1:37292 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:11:14.558 00:05:54.945 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-08 19:16:03.959 00:00:15.422 TCP 1.101.0.1:3000 -> 22.102.0.1:59768 10 6452 1 2025-12-08 19:16:35.799 00:00:10.365 TCP 23.104.0.1:47024 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:12:14.556 00:05:54.949 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-08 19:17:09.420 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35348 10 6452 1 2025-12-08 19:17:36.210 00:00:10.363 TCP 23.104.0.1:59946 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:18:09.634 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56386 10 6452 1 2025-12-08 19:18:36.612 00:00:10.374 TCP 23.104.0.1:57806 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:19:06.863 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-08 19:19:06.505 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-08 19:19:09.804 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40224 10 6452 1 2025-12-08 19:19:37.024 00:00:10.361 TCP 23.104.0.1:58366 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:20:10.029 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35122 10 6452 1 2025-12-08 19:20:37.432 00:00:10.365 TCP 23.104.0.1:46586 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:21:10.237 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33344 10 6452 1 2025-12-08 19:21:37.835 00:00:10.355 TCP 23.104.0.1:36518 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:17:14.560 00:05:54.944 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-08 19:22:10.450 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57144 10 6452 1 2025-12-08 19:22:38.225 00:00:10.379 TCP 23.104.0.1:35744 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:18:14.558 00:05:54.947 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-08 19:23:10.656 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57250 10 6452 1 2025-12-08 19:23:38.629 00:00:10.362 TCP 23.104.0.1:57910 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:24:06.884 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-08 19:24:06.822 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-08 19:24:10.828 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34410 10 6452 1 2025-12-08 19:24:39.030 00:00:10.363 TCP 23.104.0.1:33030 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:25:11.051 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57340 10 6452 1 2025-12-08 19:25:39.428 00:00:10.365 TCP 23.104.0.1:46972 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:26:11.263 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43062 10 6452 1 2025-12-08 19:26:39.833 00:00:10.400 TCP 23.104.0.1:34036 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:27:11.476 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41750 10 6452 1 2025-12-08 19:27:40.274 00:00:11.471 TCP 23.104.0.1:56258 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:23:14.561 00:05:54.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-08 19:28:11.650 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49144 10 6452 1 2025-12-08 19:28:41.781 00:00:10.372 TCP 23.104.0.1:54164 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:29:06.846 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-08 19:24:14.558 00:05:54.948 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-08 19:29:07.279 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-08 19:29:11.872 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35524 10 6452 1 2025-12-08 19:29:42.193 00:00:10.322 TCP 23.104.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:30:12.094 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40444 10 6452 1 2025-12-08 19:30:42.555 00:00:10.359 TCP 23.104.0.1:42002 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:31:12.303 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51012 10 6452 1 2025-12-08 19:31:42.949 00:00:10.982 TCP 23.104.0.1:41086 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:32:12.520 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50114 10 6452 1 2025-12-08 19:32:43.968 00:00:10.369 TCP 23.104.0.1:35368 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:33:12.736 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57522 10 6452 1 2025-12-08 19:33:44.374 00:00:10.366 TCP 23.104.0.1:50290 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:34:07.320 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-08 19:34:07.214 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-08 19:29:14.561 00:05:54.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-08 19:34:12.951 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:33908 12 6556 1 2025-12-08 19:34:44.787 00:00:10.359 TCP 23.104.0.1:52348 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:30:14.563 00:05:54.949 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-08 19:35:13.193 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38028 10 6452 1 2025-12-08 19:35:45.186 00:00:10.368 TCP 23.104.0.1:47210 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:36:13.409 00:00:11.276 TCP 1.101.0.1:3000 -> 22.102.0.1:55818 10 6452 1 2025-12-08 19:36:45.593 00:00:10.325 TCP 23.104.0.1:60114 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:37:14.722 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43020 10 6452 1 2025-12-08 19:37:45.962 00:00:10.362 TCP 23.104.0.1:42938 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:38:14.931 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:51714 10 6452 1 2025-12-08 19:38:46.366 00:00:10.363 TCP 23.104.0.1:56636 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:39:07.174 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-08 19:39:07.035 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-08 19:39:15.120 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51636 10 6452 1 2025-12-08 19:39:46.768 00:00:10.373 TCP 23.104.0.1:45008 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:35:14.566 00:05:54.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-08 19:40:15.328 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49168 10 6452 1 2025-12-08 19:40:47.177 00:00:10.364 TCP 23.104.0.1:58528 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:36:14.564 00:05:54.948 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-08 19:41:15.554 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44480 10 6452 1 2025-12-08 19:41:47.580 00:00:10.383 TCP 23.104.0.1:50670 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:42:15.771 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57784 10 6452 1 2025-12-08 19:42:48.015 00:00:10.360 TCP 23.104.0.1:59042 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:43:15.976 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60680 10 6452 1 2025-12-08 19:43:48.416 00:00:10.365 TCP 23.104.0.1:33650 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:44:07.071 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-08 19:44:07.159 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-08 19:44:16.205 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34158 10 6452 1 2025-12-08 19:44:48.826 00:00:10.341 TCP 23.104.0.1:56356 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:45:16.416 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38766 10 6452 1 2025-12-08 19:45:49.201 00:00:10.327 TCP 23.104.0.1:57936 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:41:14.570 00:05:54.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-08 19:46:16.644 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51998 10 6452 1 2025-12-08 19:46:49.562 00:00:10.367 TCP 23.104.0.1:59266 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:42:14.567 00:05:54.947 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-08 19:47:16.860 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45178 10 6452 1 2025-12-08 19:47:49.965 00:00:10.374 TCP 23.104.0.1:57080 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:48:17.086 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46356 10 6452 1 2025-12-08 19:48:50.373 00:00:10.365 TCP 23.104.0.1:46742 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:49:07.423 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-08 19:49:07.227 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-08 19:49:17.254 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:37482 12 10375 1 2025-12-08 19:49:50.785 00:00:10.441 TCP 23.104.0.1:39386 -> 1.101.0.1:3000 15 1926 1 2025-12-08 19:50:17.496 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52194 10 6452 1 2025-12-08 19:50:51.269 00:00:10.384 TCP 23.104.0.1:47910 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:51:17.717 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48918 10 6452 1 2025-12-08 19:51:51.690 00:00:10.333 TCP 23.104.0.1:34428 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:47:14.571 00:05:54.940 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-08 19:52:17.935 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:60820 10 6452 1 2025-12-08 19:52:52.076 00:00:10.325 TCP 23.104.0.1:44694 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:48:14.568 00:05:54.946 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-08 19:53:18.177 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45112 10 6452 1 2025-12-08 19:53:52.440 00:00:11.089 TCP 23.104.0.1:42410 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:54:07.603 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-08 19:54:07.540 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-08 19:54:18.349 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55042 10 6452 1 2025-12-08 19:54:53.568 00:00:10.363 TCP 23.104.0.1:51128 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:55:18.568 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35016 10 6452 1 2025-12-08 19:55:53.969 00:00:10.373 TCP 23.104.0.1:42394 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:56:18.785 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47898 10 6452 1 2025-12-08 19:56:54.384 00:00:10.372 TCP 23.104.0.1:40524 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:57:19.007 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43878 10 6452 1 2025-12-08 19:57:54.794 00:00:10.335 TCP 23.104.0.1:36918 -> 1.101.0.1:3000 11 1507 1 2025-12-08 19:53:14.572 00:05:54.941 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-08 19:58:19.179 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40458 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1029, avg pps: 0, avg bpp: 319 Time window: 2025-12-08 18:54:14 - 2025-12-08 19:59:09 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0051s User: 0.0007s Wall: 0.0028s flows/second: 58403.5 Runtime: 0.0028s