Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 22:55:06.837 00:05:04.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 22:55:06.840 00:05:04.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 22:59:17.177 00:00:10.366 TCP 23.104.0.1:36228 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:59:17.787 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58552 10 6452 1 2025-12-02 23:00:18.001 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37990 10 6452 1 2025-12-02 23:00:17.587 00:00:10.366 TCP 23.104.0.1:50198 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:01:17.888 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 23:01:17.767 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 23:01:18.212 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52962 10 6452 1 2025-12-02 23:01:17.989 00:00:10.362 TCP 23.104.0.1:52200 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:02:18.431 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34604 10 6452 1 2025-12-02 23:02:18.393 00:00:10.325 TCP 23.104.0.1:48698 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:03:18.599 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44874 10 6452 1 2025-12-02 23:03:18.759 00:00:10.380 TCP 23.104.0.1:54106 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:04:18.814 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54020 10 6452 1 2025-12-02 23:04:19.177 00:00:10.360 TCP 23.104.0.1:49932 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:01:06.841 00:05:04.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 23:01:06.838 00:05:04.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 23:05:19.047 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57542 10 6452 1 2025-12-02 23:05:19.579 00:00:10.327 TCP 23.104.0.1:34388 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:06:18.101 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 23:06:17.854 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 23:06:19.263 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33842 10 6452 1 2025-12-02 23:06:19.946 00:00:10.377 TCP 23.104.0.1:34838 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:07:19.521 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37118 10 6452 1 2025-12-02 23:07:20.365 00:00:10.365 TCP 23.104.0.1:38848 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:08:19.728 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60604 10 6452 1 2025-12-02 23:08:20.766 00:00:10.373 TCP 23.104.0.1:48024 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:09:19.932 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:44010 10 6452 1 2025-12-02 23:09:21.177 00:00:10.326 TCP 23.104.0.1:38412 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:10:21.543 00:00:10.360 TCP 23.104.0.1:59368 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:10:20.128 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56898 10 6452 1 2025-12-02 23:07:06.841 00:05:04.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 23:11:18.138 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 23:07:06.843 00:05:04.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 23:11:18.279 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 23:11:20.343 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53620 10 6452 1 2025-12-02 23:11:21.943 00:00:10.345 TCP 23.104.0.1:46372 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:12:20.555 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47190 10 6452 1 2025-12-02 23:12:22.323 00:00:10.362 TCP 23.104.0.1:55144 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:13:20.777 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:49892 12 10375 1 2025-12-02 23:13:22.727 00:00:10.408 TCP 23.104.0.1:48434 -> 1.101.0.1:3000 15 1926 1 2025-12-02 23:14:21.024 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38348 10 6452 1 2025-12-02 23:14:23.177 00:00:10.322 TCP 23.104.0.1:48986 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:15:21.232 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41436 10 6452 1 2025-12-02 23:15:23.537 00:00:10.368 TCP 23.104.0.1:48108 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:16:17.947 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 23:16:18.354 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 23:16:21.440 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36248 10 6452 1 2025-12-02 23:16:23.944 00:00:10.382 TCP 23.104.0.1:44100 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:13:06.843 00:05:04.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 23:13:06.841 00:05:04.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 23:17:21.649 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56116 10 6452 1 2025-12-02 23:17:24.359 00:00:10.363 TCP 23.104.0.1:55062 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:18:24.762 00:00:10.365 TCP 23.104.0.1:58370 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:18:21.860 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52682 10 6452 1 2025-12-02 23:19:25.166 00:00:10.325 TCP 23.104.0.1:37566 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:19:22.084 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42608 10 6452 1 2025-12-02 23:20:22.293 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41840 10 6452 1 2025-12-02 23:20:25.527 00:00:10.324 TCP 23.104.0.1:38912 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:21:18.412 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 23:21:18.363 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 23:21:25.885 00:00:10.375 TCP 23.104.0.1:45524 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:21:22.504 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46870 10 6452 1 2025-12-02 23:22:22.718 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52898 10 6452 1 2025-12-02 23:22:26.297 00:00:10.368 TCP 23.104.0.1:59862 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:19:06.843 00:05:04.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 23:19:06.846 00:05:04.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 23:23:22.929 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:51480 10 6452 1 2025-12-02 23:23:26.705 00:00:10.378 TCP 23.104.0.1:42588 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:24:23.174 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52058 10 6452 1 2025-12-02 23:24:27.110 00:00:10.327 TCP 23.104.0.1:60822 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:25:23.341 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48912 10 6452 1 2025-12-02 23:25:27.484 00:00:10.327 TCP 23.104.0.1:44926 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:26:18.437 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 23:26:18.492 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 23:26:23.559 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46456 10 6452 1 2025-12-02 23:26:27.847 00:00:10.389 TCP 23.104.0.1:39362 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:27:23.767 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60744 10 6452 1 2025-12-02 23:27:28.279 00:00:10.365 TCP 23.104.0.1:55742 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:28:23.976 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48748 10 6452 1 2025-12-02 23:28:28.677 00:00:10.371 TCP 23.104.0.1:44716 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:25:06.847 00:05:04.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 23:25:06.844 00:05:04.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 23:29:24.213 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43598 10 6452 1 2025-12-02 23:29:29.103 00:00:10.360 TCP 23.104.0.1:36760 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:30:24.380 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35864 10 6452 1 2025-12-02 23:30:29.504 00:00:10.361 TCP 23.104.0.1:34268 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:31:18.986 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 23:31:19.165 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 23:31:24.593 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42712 10 6452 1 2025-12-02 23:31:29.903 00:00:10.367 TCP 23.104.0.1:47606 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:32:24.802 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41774 10 6452 1 2025-12-02 23:32:30.306 00:00:11.103 TCP 23.104.0.1:44532 -> 1.101.0.1:3000 15 1926 1 2025-12-02 23:33:25.024 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:60672 12 10375 1 2025-12-02 23:33:31.434 00:00:10.362 TCP 23.104.0.1:53686 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:34:25.223 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44890 10 6452 1 2025-12-02 23:34:31.832 00:00:10.384 TCP 23.104.0.1:34916 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:31:06.844 00:05:04.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 23:31:06.848 00:05:04.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 23:35:25.436 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40118 10 6452 1 2025-12-02 23:35:32.255 00:00:10.330 TCP 23.104.0.1:49744 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:36:18.806 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 23:36:18.564 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 23:36:25.649 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35984 10 6452 1 2025-12-02 23:36:32.619 00:00:10.374 TCP 23.104.0.1:50260 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:37:25.862 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42884 10 6452 1 2025-12-02 23:37:33.028 00:00:10.363 TCP 23.104.0.1:57132 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:38:26.094 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53226 10 6452 1 2025-12-02 23:38:33.429 00:00:10.366 TCP 23.104.0.1:44474 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:39:26.304 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57680 10 6452 1 2025-12-02 23:39:33.828 00:00:10.346 TCP 23.104.0.1:53452 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:40:26.480 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34422 10 6452 1 2025-12-02 23:40:34.216 00:00:10.370 TCP 23.104.0.1:43770 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:37:06.846 00:05:04.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 23:37:06.848 00:05:04.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 23:41:18.591 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 23:41:18.420 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 23:41:26.689 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56354 10 6452 1 2025-12-02 23:41:34.626 00:00:10.321 TCP 23.104.0.1:57634 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:42:26.859 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54628 10 6452 1 2025-12-02 23:42:34.992 00:00:10.323 TCP 23.104.0.1:54760 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:43:27.036 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53982 10 6452 1 2025-12-02 23:43:35.360 00:00:10.367 TCP 23.104.0.1:59970 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:44:27.251 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35542 10 6452 1 2025-12-02 23:44:35.767 00:00:10.326 TCP 23.104.0.1:38760 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:45:27.470 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48042 10 6452 1 2025-12-02 23:45:36.131 00:00:10.373 TCP 23.104.0.1:59248 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:46:18.801 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 23:46:18.786 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 23:46:27.684 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56540 10 6452 1 2025-12-02 23:46:36.546 00:00:10.362 TCP 23.104.0.1:47874 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:43:06.848 00:05:04.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 23:43:06.846 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 23:47:27.899 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59958 10 6452 1 2025-12-02 23:47:36.947 00:00:10.444 TCP 23.104.0.1:56648 -> 1.101.0.1:3000 15 1926 1 2025-12-02 23:48:28.115 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:36048 12 10375 1 2025-12-02 23:48:37.432 00:00:10.370 TCP 23.104.0.1:49610 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:49:28.363 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33342 10 6452 1 2025-12-02 23:49:37.840 00:00:10.394 TCP 23.104.0.1:56390 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:50:28.582 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44610 10 6452 1 2025-12-02 23:50:38.277 00:00:10.369 TCP 23.104.0.1:46648 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:51:18.844 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 23:51:18.989 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 23:51:28.752 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37402 10 6452 1 2025-12-02 23:51:38.686 00:00:10.376 TCP 23.104.0.1:41524 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:52:28.969 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:36722 10 6452 1 2025-12-02 23:52:39.115 00:00:10.367 TCP 23.104.0.1:40210 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:49:06.846 00:05:04.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 23:49:06.848 00:05:04.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 23:53:29.213 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57104 10 6452 1 2025-12-02 23:53:39.519 00:00:10.366 TCP 23.104.0.1:51038 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:54:29.433 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58614 10 6452 1 2025-12-02 23:54:39.936 00:00:10.370 TCP 23.104.0.1:37790 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:55:29.610 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42278 10 6452 1 2025-12-02 23:55:40.351 00:00:10.323 TCP 23.104.0.1:44418 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:56:18.855 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 23:56:18.983 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 23:56:29.825 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45260 10 6452 1 2025-12-02 23:56:40.709 00:00:10.366 TCP 23.104.0.1:33938 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:57:30.051 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35432 10 6452 1 2025-12-02 23:57:41.113 00:00:10.322 TCP 23.104.0.1:58230 -> 1.101.0.1:3000 11 1507 1 2025-12-02 23:58:30.266 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50620 12 6556 1 2025-12-02 23:58:41.479 00:00:10.361 TCP 23.104.0.1:43602 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511478, total packets: 1592, avg bps: 1069, avg pps: 0, avg bpp: 321 Time window: 2025-12-02 22:55:06 - 2025-12-02 23:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0062s User: 0.0000s Wall: 0.0019s flows/second: 85374.9 Runtime: 0.0019s