Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 23:55:06.852 00:05:04.813 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 23:55:06.849 00:05:04.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 23:59:30.479 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:59364 10 6452 1 2025-12-02 23:59:41.882 00:00:10.335 TCP 23.104.0.1:43034 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:00:30.667 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43604 10 6452 1 2025-12-03 00:00:42.256 00:00:10.362 TCP 23.104.0.1:53292 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:01:19.110 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 00:01:19.063 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 00:01:30.880 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43510 10 6452 1 2025-12-03 00:01:42.663 00:00:10.365 TCP 23.104.0.1:57406 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:02:31.105 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59594 10 6452 1 2025-12-03 00:02:43.089 00:00:10.362 TCP 23.104.0.1:54100 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:03:31.315 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53532 10 6452 1 2025-12-03 00:03:43.488 00:00:10.371 TCP 23.104.0.1:54136 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:04:31.547 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44762 10 6452 1 2025-12-03 00:04:43.897 00:00:10.384 TCP 23.104.0.1:42000 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:01:06.850 00:05:04.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 00:01:06.854 00:05:04.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 00:05:31.757 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37878 10 6452 1 2025-12-03 00:05:44.319 00:00:10.360 TCP 23.104.0.1:49264 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:06:19.002 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 00:06:18.933 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 00:06:31.966 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:35790 10 6452 1 2025-12-03 00:06:44.718 00:00:10.368 TCP 23.104.0.1:46050 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:07:32.205 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59504 10 6452 1 2025-12-03 00:07:45.123 00:00:10.373 TCP 23.104.0.1:46484 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:08:32.426 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33002 10 6452 1 2025-12-03 00:08:45.530 00:00:10.364 TCP 23.104.0.1:50384 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:09:32.606 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59556 10 6452 1 2025-12-03 00:09:45.933 00:00:10.333 TCP 23.104.0.1:44456 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:10:32.837 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40332 10 6452 1 2025-12-03 00:10:46.302 00:00:10.363 TCP 23.104.0.1:56534 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:07:06.856 00:05:04.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 00:07:06.854 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 00:11:19.325 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 00:11:19.274 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 00:11:33.077 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38994 10 6452 1 2025-12-03 00:11:46.703 00:00:10.325 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:12:33.302 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44008 12 10375 1 2025-12-03 00:12:47.095 00:00:10.444 TCP 23.104.0.1:58376 -> 1.101.0.1:3000 15 1926 1 2025-12-03 00:13:33.530 00:00:11.257 TCP 1.101.0.1:3000 -> 22.102.0.1:37450 10 6452 1 2025-12-03 00:13:47.575 00:00:10.405 TCP 23.104.0.1:60818 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:14:34.824 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51090 10 6452 1 2025-12-03 00:14:48.017 00:00:10.321 TCP 23.104.0.1:42566 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:15:35.064 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34980 10 6452 1 2025-12-03 00:15:48.377 00:00:10.331 TCP 23.104.0.1:41434 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:16:19.345 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 00:16:19.271 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 00:16:35.284 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34800 10 6452 1 2025-12-03 00:16:48.753 00:00:10.345 TCP 23.104.0.1:40954 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:13:06.854 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 00:13:06.857 00:05:04.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 00:17:35.507 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39832 10 6452 1 2025-12-03 00:17:49.137 00:00:10.364 TCP 23.104.0.1:49656 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:18:35.731 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58476 10 6452 1 2025-12-03 00:18:49.545 00:00:10.368 TCP 23.104.0.1:44244 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:19:35.955 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:50180 10 6452 1 2025-12-03 00:19:49.953 00:00:10.378 TCP 23.104.0.1:54960 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:20:36.192 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38638 10 6452 1 2025-12-03 00:20:50.382 00:00:10.366 TCP 23.104.0.1:60058 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:21:19.497 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 00:21:19.608 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 00:21:36.411 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53888 10 6452 1 2025-12-03 00:21:50.793 00:00:10.343 TCP 23.104.0.1:42176 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:22:36.624 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40096 10 6452 1 2025-12-03 00:22:51.170 00:00:10.326 TCP 23.104.0.1:55718 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:19:06.859 00:05:04.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 00:19:06.857 00:05:04.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 00:23:36.845 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:37910 10 6452 1 2025-12-03 00:23:51.545 00:00:10.366 TCP 23.104.0.1:36754 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:24:37.042 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35962 10 6452 1 2025-12-03 00:24:51.947 00:00:10.367 TCP 23.104.0.1:45338 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:25:37.256 00:00:10.412 TCP 1.101.0.1:3000 -> 22.102.0.1:32826 10 6452 1 2025-12-03 00:25:52.352 00:00:10.362 TCP 23.104.0.1:37178 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:26:19.570 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 00:26:19.663 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 00:26:37.708 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50180 10 6452 1 2025-12-03 00:26:52.763 00:00:10.371 TCP 23.104.0.1:41970 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:27:37.922 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56592 10 6452 1 2025-12-03 00:27:53.178 00:00:10.368 TCP 23.104.0.1:34494 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:28:38.134 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57042 10 6452 1 2025-12-03 00:28:53.585 00:00:10.319 TCP 23.104.0.1:51818 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:25:06.858 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 00:25:06.862 00:05:04.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 00:29:38.353 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50846 10 6452 1 2025-12-03 00:29:53.940 00:00:10.368 TCP 23.104.0.1:57124 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:30:38.575 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40722 10 6452 1 2025-12-03 00:30:54.348 00:00:10.362 TCP 23.104.0.1:35118 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:31:19.695 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 00:31:19.691 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 00:31:38.799 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38008 10 6452 1 2025-12-03 00:31:54.743 00:00:10.325 TCP 23.104.0.1:40790 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:32:39.014 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54902 10 6452 1 2025-12-03 00:32:55.108 00:00:10.371 TCP 23.104.0.1:47414 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:33:39.245 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60008 10 6452 1 2025-12-03 00:33:55.513 00:00:10.370 TCP 23.104.0.1:36544 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:34:39.455 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36486 10 6452 1 2025-12-03 00:34:55.922 00:00:10.393 TCP 23.104.0.1:38512 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:31:06.859 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 00:31:06.862 00:05:04.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 00:35:39.673 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52690 10 6452 1 2025-12-03 00:35:56.350 00:00:10.330 TCP 23.104.0.1:59286 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:36:19.736 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 00:36:19.856 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 00:36:39.901 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44796 10 6452 1 2025-12-03 00:36:56.718 00:00:10.381 TCP 23.104.0.1:58212 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:37:40.119 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39250 10 6452 1 2025-12-03 00:37:57.137 00:00:10.366 TCP 23.104.0.1:36708 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:38:40.295 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42674 10 6452 1 2025-12-03 00:38:57.541 00:00:10.375 TCP 23.104.0.1:44150 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:39:40.507 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57326 10 6452 1 2025-12-03 00:39:57.951 00:00:10.365 TCP 23.104.0.1:52016 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:40:40.720 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43374 10 6452 1 2025-12-03 00:37:06.863 00:05:04.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 00:40:58.358 00:00:10.367 TCP 23.104.0.1:47020 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:37:06.860 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 00:41:19.959 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 00:41:19.874 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 00:41:40.942 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:51692 10 6452 1 2025-12-03 00:41:58.767 00:00:10.380 TCP 23.104.0.1:40008 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:42:41.193 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36582 10 6452 1 2025-12-03 00:42:59.182 00:00:10.380 TCP 23.104.0.1:53608 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:43:41.416 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58754 10 6452 1 2025-12-03 00:43:59.600 00:00:10.364 TCP 23.104.0.1:55932 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:44:41.637 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60060 10 6452 1 2025-12-03 00:45:00.006 00:00:10.364 TCP 23.104.0.1:45016 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:45:41.864 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36738 10 6452 1 2025-12-03 00:46:00.411 00:00:10.365 TCP 23.104.0.1:48850 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:46:19.756 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 00:46:20.056 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 00:46:42.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47822 10 6452 1 2025-12-03 00:47:00.816 00:00:10.366 TCP 23.104.0.1:39464 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:43:06.863 00:05:04.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 00:43:06.864 00:05:04.811 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 00:47:42.296 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56764 10 6452 1 2025-12-03 00:48:01.217 00:00:10.370 TCP 23.104.0.1:45130 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:48:42.503 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46730 10 6452 1 2025-12-03 00:49:01.623 00:00:10.376 TCP 23.104.0.1:56248 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:49:42.712 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44636 10 6452 1 2025-12-03 00:50:02.052 00:00:10.364 TCP 23.104.0.1:44252 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:50:42.883 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56044 10 6452 1 2025-12-03 00:51:02.457 00:00:10.361 TCP 23.104.0.1:43520 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:51:20.120 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 00:51:19.959 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 00:51:43.110 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52400 10 6452 1 2025-12-03 00:52:02.855 00:00:10.373 TCP 23.104.0.1:45964 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:52:43.294 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41120 10 6452 1 2025-12-03 00:49:06.866 00:05:04.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 00:53:03.273 00:00:10.374 TCP 23.104.0.1:57986 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:49:06.864 00:05:04.816 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 00:53:43.513 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42618 10 6452 1 2025-12-03 00:54:03.691 00:00:10.372 TCP 23.104.0.1:41728 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:54:43.686 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54036 10 6452 1 2025-12-03 00:55:04.113 00:00:10.372 TCP 23.104.0.1:48252 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:55:43.904 00:00:10.579 TCP 1.101.0.1:3000 -> 22.102.0.1:50012 10 6452 1 2025-12-03 00:56:04.525 00:00:10.362 TCP 23.104.0.1:50318 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:56:19.961 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 00:56:20.048 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 00:56:44.525 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52488 10 6452 1 2025-12-03 00:57:04.927 00:00:10.393 TCP 23.104.0.1:38258 -> 1.101.0.1:3000 11 1507 1 2025-12-03 00:57:44.744 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58768 10 6452 1 2025-12-03 00:58:05.357 00:00:10.363 TCP 23.104.0.1:50956 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494731, total packets: 1557, avg bps: 1044, avg pps: 0, avg bpp: 317 Time window: 2025-12-02 23:55:06 - 2025-12-03 00:58:15 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0054s User: 0.0011s Wall: 0.0026s flows/second: 62908.7 Runtime: 0.0026s