Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-09 18:59:35.201 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-09 18:59:35.044 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-09 18:59:29.421 00:00:10.365 TCP 23.104.0.1:53944 -> 1.101.0.1:3000 11 1507 1 2025-12-09 18:59:34.551 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38782 10 6452 1 2025-12-09 19:00:29.821 00:00:10.366 TCP 23.104.0.1:56596 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:00:34.761 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51274 10 6452 1 2025-12-09 19:01:30.223 00:00:10.324 TCP 23.104.0.1:34388 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:01:34.933 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:40302 10 6452 1 2025-12-09 19:02:30.585 00:00:10.374 TCP 23.104.0.1:47426 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:02:35.180 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54858 10 6452 1 2025-12-09 18:59:09.970 00:05:05.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-09 19:03:30.995 00:00:10.365 TCP 23.104.0.1:48210 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:03:35.390 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42792 10 6452 1 2025-12-09 19:00:09.975 00:05:05.095 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-09 19:04:35.360 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-09 19:04:35.152 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-09 19:04:31.405 00:00:10.395 TCP 23.104.0.1:39296 -> 1.101.0.1:3000 15 1926 1 2025-12-09 19:04:35.607 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37520 12 10375 1 2025-12-09 19:05:35.842 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59652 10 6452 1 2025-12-09 19:05:31.842 00:00:10.388 TCP 23.104.0.1:57180 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:06:32.264 00:00:10.323 TCP 23.104.0.1:34656 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:06:36.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57932 10 6452 1 2025-12-09 19:07:32.630 00:00:10.365 TCP 23.104.0.1:41322 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:07:36.292 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53606 10 6452 1 2025-12-09 19:08:36.505 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53666 10 6452 1 2025-12-09 19:08:33.035 00:00:10.366 TCP 23.104.0.1:41258 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:05:09.976 00:05:05.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-09 19:09:35.347 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-09 19:09:35.452 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-09 19:09:33.441 00:00:11.300 TCP 23.104.0.1:47666 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:09:36.716 00:00:10.674 TCP 1.101.0.1:3000 -> 22.102.0.1:46198 10 6452 1 2025-12-09 19:06:09.980 00:05:05.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-09 19:10:34.783 00:00:10.326 TCP 23.104.0.1:46128 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:10:37.438 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59054 10 6452 1 2025-12-09 19:11:35.152 00:00:10.365 TCP 23.104.0.1:39796 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:11:37.649 00:00:10.984 TCP 1.101.0.1:3000 -> 22.102.0.1:49130 10 6452 1 2025-12-09 19:12:35.553 00:00:10.321 TCP 23.104.0.1:51174 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:12:38.674 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38086 10 6452 1 2025-12-09 19:13:35.912 00:00:10.364 TCP 23.104.0.1:56724 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:13:38.883 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:34038 10 6452 1 2025-12-09 19:14:35.485 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-09 19:14:35.383 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-09 19:14:36.321 00:00:10.364 TCP 23.104.0.1:45892 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:14:39.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39580 10 6452 1 2025-12-09 19:11:09.978 00:05:05.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-09 19:15:39.290 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55368 10 6452 1 2025-12-09 19:15:36.723 00:00:10.384 TCP 23.104.0.1:47328 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:12:09.980 00:05:05.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-09 19:16:37.138 00:00:10.323 TCP 23.104.0.1:40560 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:16:39.504 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:40674 10 6452 1 2025-12-09 19:17:39.746 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:32778 10 6452 1 2025-12-09 19:17:37.501 00:00:10.380 TCP 23.104.0.1:59782 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:18:39.926 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41844 10 6452 1 2025-12-09 19:18:37.921 00:00:10.375 TCP 23.104.0.1:59904 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:19:35.275 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-09 19:19:35.461 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-09 19:19:38.342 00:00:10.333 TCP 23.104.0.1:56050 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:19:40.149 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51932 10 6452 1 2025-12-09 19:20:38.735 00:00:10.367 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:20:40.370 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38450 10 6452 1 2025-12-09 19:17:09.978 00:05:05.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-09 19:21:40.575 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51858 10 6452 1 2025-12-09 19:21:39.141 00:00:10.327 TCP 23.104.0.1:43194 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:18:09.984 00:05:05.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-09 19:22:40.795 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58568 10 6452 1 2025-12-09 19:22:39.509 00:00:10.369 TCP 23.104.0.1:36112 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:23:40.971 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39256 12 6556 1 2025-12-09 19:23:39.926 00:00:10.343 TCP 23.104.0.1:55146 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:24:35.629 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-09 19:24:35.692 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-09 19:24:40.309 00:00:10.372 TCP 23.104.0.1:42746 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:24:41.196 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38828 10 6452 1 2025-12-09 19:25:40.717 00:00:10.324 TCP 23.104.0.1:35346 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:25:41.412 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59220 10 6452 1 2025-12-09 19:26:41.104 00:00:10.368 TCP 23.104.0.1:36312 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:26:41.634 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54720 10 6452 1 2025-12-09 19:23:09.980 00:05:05.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-09 19:27:41.551 00:00:10.361 TCP 23.104.0.1:49278 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:27:41.848 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38034 10 6452 1 2025-12-09 19:24:09.984 00:05:05.094 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-09 19:28:42.083 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43180 10 6452 1 2025-12-09 19:28:41.953 00:00:10.369 TCP 23.104.0.1:49382 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:29:35.835 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-09 19:29:35.728 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-09 19:29:42.293 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49804 10 6452 1 2025-12-09 19:29:42.359 00:00:10.358 TCP 23.104.0.1:59998 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:30:42.757 00:00:10.385 TCP 23.104.0.1:35180 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:30:42.466 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47932 10 6452 1 2025-12-09 19:31:43.180 00:00:10.373 TCP 23.104.0.1:55494 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:31:42.679 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58720 10 6452 1 2025-12-09 19:32:42.893 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39086 10 6452 1 2025-12-09 19:32:43.597 00:00:10.360 TCP 23.104.0.1:46204 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:29:09.982 00:05:05.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-09 19:33:43.121 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49172 10 6452 1 2025-12-09 19:33:43.997 00:00:10.371 TCP 23.104.0.1:35710 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:30:09.987 00:05:05.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-09 19:34:35.860 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-09 19:34:35.954 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-09 19:34:44.405 00:00:10.365 TCP 23.104.0.1:49248 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:34:43.348 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44998 10 6452 1 2025-12-09 19:35:43.564 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36806 10 6452 1 2025-12-09 19:35:44.812 00:00:10.365 TCP 23.104.0.1:41492 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:36:43.773 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53022 10 6452 1 2025-12-09 19:36:45.212 00:00:10.326 TCP 23.104.0.1:59726 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:37:43.987 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35142 10 6452 1 2025-12-09 19:37:45.577 00:00:10.335 TCP 23.104.0.1:41348 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:38:45.935 00:00:10.382 TCP 23.104.0.1:41178 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:38:44.212 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40186 10 6452 1 2025-12-09 19:35:09.986 00:05:05.096 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-09 19:39:36.112 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-09 19:39:36.061 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-09 19:39:46.352 00:00:10.365 TCP 23.104.0.1:47132 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:39:44.381 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37788 10 6452 1 2025-12-09 19:36:09.988 00:05:05.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-09 19:40:44.604 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52090 10 6452 1 2025-12-09 19:40:46.758 00:00:10.338 TCP 23.104.0.1:47338 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:41:44.819 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43408 10 6452 1 2025-12-09 19:41:47.135 00:00:10.367 TCP 23.104.0.1:35164 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:42:45.071 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40576 10 6452 1 2025-12-09 19:42:47.539 00:00:10.372 TCP 23.104.0.1:34098 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:43:45.298 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49508 10 6452 1 2025-12-09 19:43:47.950 00:00:10.372 TCP 23.104.0.1:57840 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:44:36.117 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-09 19:44:35.733 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-09 19:44:45.517 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36596 10 6452 1 2025-12-09 19:44:48.364 00:00:10.363 TCP 23.104.0.1:40162 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:41:09.988 00:05:05.096 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-09 19:45:45.733 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36262 10 6452 1 2025-12-09 19:45:48.766 00:00:10.376 TCP 23.104.0.1:46812 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:42:09.991 00:05:05.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-09 19:46:45.964 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:47166 10 6452 1 2025-12-09 19:46:49.197 00:00:10.363 TCP 23.104.0.1:42268 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:47:46.156 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35096 10 6452 1 2025-12-09 19:47:49.598 00:00:10.362 TCP 23.104.0.1:34684 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:48:46.363 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48520 10 6452 1 2025-12-09 19:48:50.003 00:00:10.330 TCP 23.104.0.1:45724 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:49:36.279 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-09 19:49:36.258 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-09 19:49:46.583 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37386 10 6452 1 2025-12-09 19:49:50.375 00:00:10.363 TCP 23.104.0.1:53772 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:50:46.803 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:40712 10 6452 1 2025-12-09 19:50:50.777 00:00:10.335 TCP 23.104.0.1:60028 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:47:09.988 00:05:05.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-09 19:51:51.141 00:00:10.389 TCP 23.104.0.1:41268 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:51:47.041 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:32848 10 6452 1 2025-12-09 19:48:09.991 00:05:05.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-09 19:52:47.262 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47718 10 6452 1 2025-12-09 19:52:51.585 00:00:10.362 TCP 23.104.0.1:43560 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:53:47.471 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45234 10 6452 1 2025-12-09 19:53:51.987 00:00:10.327 TCP 23.104.0.1:53116 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:54:36.241 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-09 19:54:36.328 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-09 19:54:47.693 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44592 10 6452 1 2025-12-09 19:54:52.359 00:00:10.326 TCP 23.104.0.1:34610 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:55:47.910 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42520 10 6452 1 2025-12-09 19:55:52.720 00:00:10.372 TCP 23.104.0.1:42554 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:56:48.123 00:00:10.534 TCP 1.101.0.1:3000 -> 22.102.0.1:44866 10 6452 1 2025-12-09 19:56:53.134 00:00:10.362 TCP 23.104.0.1:59800 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:53:09.990 00:05:05.096 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-09 19:57:48.697 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54622 10 6452 1 2025-12-09 19:57:53.533 00:00:10.360 TCP 23.104.0.1:58904 -> 1.101.0.1:3000 11 1507 1 2025-12-09 19:54:09.992 00:05:05.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 Summary: total flows: 162, total bytes: 494835, total packets: 1559, avg bps: 1098, avg pps: 0, avg bpp: 317 Time window: 2025-12-09 18:59:09 - 2025-12-09 19:59:15 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0046s User: 0.0018s Wall: 0.0020s flows/second: 81983.3 Runtime: 0.0020s