Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-29 18:59:12.581 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-29 18:59:12.801 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-29 18:59:15.068 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:57962 12 10369 1 2025-12-29 18:59:15.042 00:00:10.436 TCP 23.104.0.1:50458 -> 1.101.0.1:3000 15 1926 1 2025-12-29 19:00:15.311 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55308 10 6452 1 2025-12-29 19:00:15.520 00:00:10.361 TCP 23.104.0.1:37828 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:01:15.533 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38122 10 6452 1 2025-12-29 19:01:15.925 00:00:10.388 TCP 23.104.0.1:47248 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:02:16.356 00:00:10.544 TCP 23.104.0.1:42142 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:02:15.759 00:00:11.017 TCP 1.101.0.1:3000 -> 22.102.0.1:44290 10 6452 1 2025-12-29 18:59:19.719 00:05:04.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-29 19:03:16.811 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41918 10 6452 1 2025-12-29 18:59:19.717 00:05:05.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-29 19:03:16.941 00:00:10.369 TCP 23.104.0.1:40558 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:04:12.892 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-29 19:04:12.854 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-29 19:04:17.030 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37734 10 6452 1 2025-12-29 19:04:17.353 00:00:10.367 TCP 23.104.0.1:38952 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:05:17.755 00:00:10.380 TCP 23.104.0.1:51448 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:05:17.247 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48192 10 6452 1 2025-12-29 19:06:17.467 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:34644 10 6452 1 2025-12-29 19:06:18.177 00:00:10.363 TCP 23.104.0.1:50386 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:07:17.652 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56734 10 6452 1 2025-12-29 19:07:18.579 00:00:10.366 TCP 23.104.0.1:50876 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:08:17.864 00:00:15.105 TCP 1.101.0.1:3000 -> 22.102.0.1:55276 10 6452 1 2025-12-29 19:08:18.985 00:00:14.108 TCP 23.104.0.1:35164 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:09:12.883 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-29 19:09:13.159 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-29 19:05:19.721 00:05:04.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-29 19:05:19.719 00:05:04.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-29 19:09:23.007 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52798 10 6452 1 2025-12-29 19:09:23.132 00:00:10.364 TCP 23.104.0.1:44280 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:10:23.536 00:00:10.363 TCP 23.104.0.1:36960 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:10:23.181 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50446 10 6452 1 2025-12-29 19:11:23.938 00:00:10.388 TCP 23.104.0.1:42314 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:11:23.397 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60974 10 6452 1 2025-12-29 19:12:23.567 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54632 10 6452 1 2025-12-29 19:12:24.351 00:00:10.365 TCP 23.104.0.1:37658 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:13:23.778 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39014 12 10369 1 2025-12-29 19:13:24.757 00:00:10.460 TCP 23.104.0.1:47066 -> 1.101.0.1:3000 15 1926 1 2025-12-29 19:14:13.145 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-29 19:14:13.720 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-29 19:14:24.026 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57794 10 6452 1 2025-12-29 19:14:25.253 00:00:10.376 TCP 23.104.0.1:60688 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:11:19.720 00:05:04.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-29 19:11:19.723 00:05:04.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-29 19:15:25.662 00:00:10.365 TCP 23.104.0.1:59806 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:15:24.241 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 10 6452 1 2025-12-29 19:16:24.451 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37006 10 6452 1 2025-12-29 19:16:26.094 00:00:10.365 TCP 23.104.0.1:41198 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:17:24.668 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52200 10 6452 1 2025-12-29 19:17:26.497 00:00:10.323 TCP 23.104.0.1:47040 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:18:24.887 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50094 10 6452 1 2025-12-29 19:18:26.858 00:00:10.375 TCP 23.104.0.1:60238 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:19:13.136 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-29 19:19:13.190 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-29 19:19:25.109 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57052 10 6452 1 2025-12-29 19:19:27.267 00:00:10.363 TCP 23.104.0.1:34744 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:20:25.324 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49908 10 6452 1 2025-12-29 19:20:27.669 00:00:10.369 TCP 23.104.0.1:41356 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:17:19.726 00:05:04.989 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-29 19:17:19.723 00:05:04.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-29 19:21:25.500 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49376 10 6452 1 2025-12-29 19:21:28.104 00:00:10.362 TCP 23.104.0.1:39310 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:22:25.723 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54470 10 6452 1 2025-12-29 19:22:28.506 00:00:10.330 TCP 23.104.0.1:51742 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:23:25.949 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:44286 10 6452 1 2025-12-29 19:23:28.875 00:00:10.366 TCP 23.104.0.1:47582 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:24:13.354 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-29 19:24:13.172 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-29 19:24:26.190 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47062 10 6452 1 2025-12-29 19:24:29.282 00:00:10.367 TCP 23.104.0.1:60728 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:25:26.404 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53948 10 6452 1 2025-12-29 19:25:29.687 00:00:10.367 TCP 23.104.0.1:56986 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:26:26.624 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39650 10 6452 1 2025-12-29 19:26:30.106 00:00:10.370 TCP 23.104.0.1:51984 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:23:19.725 00:05:04.994 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-29 19:23:19.729 00:05:04.989 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-29 19:27:30.517 00:00:10.368 TCP 23.104.0.1:52742 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:27:26.845 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:58318 10 6452 1 2025-12-29 19:28:27.090 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33704 10 6452 1 2025-12-29 19:28:30.923 00:00:10.387 TCP 23.104.0.1:58550 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:29:13.176 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-29 19:29:13.449 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-29 19:29:31.348 00:00:10.370 TCP 23.104.0.1:59778 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:29:27.320 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36532 10 6452 1 2025-12-29 19:30:27.543 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:37854 10 6452 1 2025-12-29 19:30:31.762 00:00:10.339 TCP 23.104.0.1:52320 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:31:27.725 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55066 10 6452 1 2025-12-29 19:31:32.134 00:00:10.373 TCP 23.104.0.1:36050 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:32:27.939 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:41360 10 6452 1 2025-12-29 19:32:32.556 00:00:10.361 TCP 23.104.0.1:42186 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:29:19.729 00:05:04.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-29 19:29:19.727 00:05:04.994 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-29 19:33:28.172 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48544 10 6452 1 2025-12-29 19:33:32.958 00:00:10.367 TCP 23.104.0.1:36736 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:34:13.537 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-29 19:34:13.619 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-29 19:34:28.389 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59792 10 6452 1 2025-12-29 19:34:33.365 00:00:10.368 TCP 23.104.0.1:56762 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:35:28.619 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39140 10 6452 1 2025-12-29 19:35:33.773 00:00:10.373 TCP 23.104.0.1:37872 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:36:28.851 00:00:18.749 TCP 1.101.0.1:3000 -> 22.102.0.1:42252 10 6452 1 2025-12-29 19:36:34.184 00:00:13.474 TCP 23.104.0.1:34288 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:37:37.642 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46864 10 6452 1 2025-12-29 19:37:37.697 00:00:10.363 TCP 23.104.0.1:43454 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:38:37.864 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45274 10 6452 1 2025-12-29 19:38:38.106 00:00:10.367 TCP 23.104.0.1:40160 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:39:13.881 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-29 19:39:13.915 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-29 19:35:19.732 00:05:04.987 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-29 19:35:19.731 00:05:04.993 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-29 19:39:38.514 00:00:10.360 TCP 23.104.0.1:55782 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:39:38.103 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:32990 10 6452 1 2025-12-29 19:40:38.279 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49612 10 6452 1 2025-12-29 19:40:38.911 00:00:10.365 TCP 23.104.0.1:49916 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:41:39.316 00:00:10.320 TCP 23.104.0.1:45630 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:41:38.497 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42678 10 6452 1 2025-12-29 19:42:39.684 00:00:10.375 TCP 23.104.0.1:54940 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:42:38.715 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60964 10 6452 1 2025-12-29 19:43:38.896 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:36262 10 6452 1 2025-12-29 19:43:40.106 00:00:10.361 TCP 23.104.0.1:36712 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:44:13.653 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-29 19:44:13.740 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-29 19:44:40.509 00:00:10.323 TCP 23.104.0.1:49740 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:44:39.099 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:55856 10 6452 1 2025-12-29 19:41:19.734 00:05:04.987 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-29 19:41:19.732 00:05:04.993 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-29 19:45:39.286 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52336 10 6452 1 2025-12-29 19:45:40.868 00:00:10.367 TCP 23.104.0.1:42518 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:46:39.502 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:43536 10 6452 1 2025-12-29 19:46:41.273 00:00:10.361 TCP 23.104.0.1:51084 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:47:39.669 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34636 10 6452 1 2025-12-29 19:47:41.676 00:00:10.377 TCP 23.104.0.1:57884 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:48:39.885 00:00:10.255 TCP 1.101.0.1:3000 -> 22.102.0.1:46102 10 6452 1 2025-12-29 19:48:42.103 00:00:10.524 TCP 23.104.0.1:38134 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:49:13.605 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-29 19:49:13.755 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-29 19:49:40.179 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37620 10 6452 1 2025-12-29 19:49:42.663 00:00:10.320 TCP 23.104.0.1:42120 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:50:40.394 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36160 10 6452 1 2025-12-29 19:50:43.023 00:00:10.366 TCP 23.104.0.1:42190 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:47:19.732 00:05:04.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-29 19:47:19.734 00:05:04.987 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-29 19:51:40.624 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44560 10 6452 1 2025-12-29 19:51:43.429 00:00:10.364 TCP 23.104.0.1:41500 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:52:40.838 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33326 10 6452 1 2025-12-29 19:52:43.832 00:00:10.387 TCP 23.104.0.1:52978 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:53:41.072 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51364 10 6452 1 2025-12-29 19:53:44.258 00:00:10.364 TCP 23.104.0.1:51192 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:54:13.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-29 19:54:13.732 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-29 19:54:41.280 00:00:10.641 TCP 1.101.0.1:3000 -> 22.102.0.1:58074 10 6452 1 2025-12-29 19:54:44.658 00:00:10.327 TCP 23.104.0.1:36224 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:55:41.960 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:56020 10 6452 1 2025-12-29 19:55:45.028 00:00:10.367 TCP 23.104.0.1:32906 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:56:45.430 00:00:10.365 TCP 23.104.0.1:58554 -> 1.101.0.1:3000 11 1507 1 2025-12-29 19:56:42.151 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49016 10 6452 1 2025-12-29 19:53:19.733 00:05:04.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-29 19:53:19.736 00:05:04.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-29 19:57:42.363 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34724 10 6452 1 2025-12-29 19:57:45.832 00:00:10.346 TCP 23.104.0.1:51538 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499061, total packets: 1563, avg bps: 1123, avg pps: 0, avg bpp: 319 Time window: 2025-12-29 18:59:12 - 2025-12-29 19:58:24 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0048s User: 0.0019s Wall: 0.0021s flows/second: 78407.3 Runtime: 0.0021s