Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 03:55:06.920 00:05:04.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 03:55:06.920 00:05:04.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 03:59:27.766 00:00:11.989 TCP 23.104.0.1:52024 -> 1.101.0.1:3000 11 1507 1 2025-12-03 03:59:28.846 00:00:10.872 TCP 1.101.0.1:3000 -> 22.102.0.1:60464 10 6452 1 2025-12-03 04:00:29.794 00:00:10.374 TCP 23.104.0.1:49254 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:00:29.752 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:35804 10 6452 1 2025-12-03 04:01:23.939 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 04:01:23.900 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 04:01:30.202 00:00:10.461 TCP 23.104.0.1:45772 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:01:29.957 00:00:10.602 TCP 1.101.0.1:3000 -> 22.102.0.1:46838 10 6452 1 2025-12-03 04:02:30.698 00:00:10.366 TCP 23.104.0.1:44758 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:02:30.598 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45934 10 6452 1 2025-12-03 04:03:31.110 00:00:10.363 TCP 23.104.0.1:58666 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:03:30.809 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55536 10 6452 1 2025-12-03 04:04:31.518 00:00:10.367 TCP 23.104.0.1:39906 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:04:31.025 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57698 10 6452 1 2025-12-03 04:01:06.924 00:05:04.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 04:01:06.920 00:05:04.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 04:05:31.241 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48134 10 6452 1 2025-12-03 04:05:31.929 00:00:10.383 TCP 23.104.0.1:44760 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:06:24.036 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 04:06:23.933 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 04:06:31.458 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:48620 10 6452 1 2025-12-03 04:06:32.350 00:00:10.378 TCP 23.104.0.1:52476 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:07:31.637 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50214 10 6452 1 2025-12-03 04:07:32.765 00:00:10.378 TCP 23.104.0.1:59276 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:08:31.849 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:50652 10 6452 1 2025-12-03 04:08:33.183 00:00:10.361 TCP 23.104.0.1:54882 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:09:32.035 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51884 10 6452 1 2025-12-03 04:09:33.578 00:00:10.328 TCP 23.104.0.1:36898 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:10:33.944 00:00:10.368 TCP 23.104.0.1:55758 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:10:32.247 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56822 10 6452 1 2025-12-03 04:07:06.924 00:05:04.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 04:07:06.927 00:05:04.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 04:11:23.921 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 04:11:24.146 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 04:11:34.349 00:00:10.363 TCP 23.104.0.1:37824 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:11:32.457 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59822 10 6452 1 2025-12-03 04:12:34.752 00:00:10.390 TCP 23.104.0.1:51716 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:12:32.680 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36568 10 6452 1 2025-12-03 04:13:32.903 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34160 10 6452 1 2025-12-03 04:13:35.181 00:00:10.363 TCP 23.104.0.1:43354 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:14:33.123 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39362 10 6452 1 2025-12-03 04:14:35.583 00:00:10.362 TCP 23.104.0.1:46060 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:15:33.344 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34562 10 6452 1 2025-12-03 04:15:35.990 00:00:10.336 TCP 23.104.0.1:35884 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:16:24.232 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 04:16:24.360 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 04:16:36.371 00:00:10.362 TCP 23.104.0.1:54830 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:16:33.565 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41816 10 6452 1 2025-12-03 04:13:06.934 00:05:04.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 04:13:06.932 00:05:04.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 04:17:33.785 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45086 10 6452 1 2025-12-03 04:17:36.772 00:00:10.372 TCP 23.104.0.1:39452 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:18:34.022 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46508 10 6452 1 2025-12-03 04:18:37.178 00:00:10.325 TCP 23.104.0.1:52280 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:19:34.243 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59856 10 6452 1 2025-12-03 04:19:37.541 00:00:10.364 TCP 23.104.0.1:39212 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:20:34.415 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46420 10 6452 1 2025-12-03 04:20:37.940 00:00:10.334 TCP 23.104.0.1:41146 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:21:24.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 04:21:24.186 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 04:21:34.630 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35772 10 6452 1 2025-12-03 04:21:38.312 00:00:10.327 TCP 23.104.0.1:47682 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:22:34.842 00:00:10.750 TCP 1.101.0.1:3000 -> 22.102.0.1:37910 12 10369 1 2025-12-03 04:22:38.670 00:00:10.442 TCP 23.104.0.1:40518 -> 1.101.0.1:3000 15 1926 1 2025-12-03 04:19:06.934 00:05:04.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 04:19:06.935 00:05:04.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 04:23:35.635 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55222 10 6452 1 2025-12-03 04:23:39.145 00:00:10.367 TCP 23.104.0.1:59350 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:24:35.849 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45544 10 6452 1 2025-12-03 04:24:39.561 00:00:10.388 TCP 23.104.0.1:45966 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:25:36.086 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57838 10 6452 1 2025-12-03 04:25:40.001 00:00:10.364 TCP 23.104.0.1:36956 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:26:24.474 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 04:26:24.462 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 04:26:36.303 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40542 10 6452 1 2025-12-03 04:26:40.405 00:00:10.647 TCP 23.104.0.1:43388 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:27:36.533 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57534 10 6452 1 2025-12-03 04:27:41.107 00:00:10.364 TCP 23.104.0.1:41760 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:28:36.753 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53658 10 6452 1 2025-12-03 04:28:41.514 00:00:10.367 TCP 23.104.0.1:53492 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:25:06.936 00:05:04.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 04:25:06.933 00:05:04.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 04:29:36.961 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44582 10 6452 1 2025-12-03 04:29:41.918 00:00:10.342 TCP 23.104.0.1:34544 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:30:37.200 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55816 10 6452 1 2025-12-03 04:30:42.300 00:00:10.363 TCP 23.104.0.1:51122 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:31:24.487 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 04:31:24.490 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 04:31:37.376 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45238 10 6452 1 2025-12-03 04:31:42.701 00:00:10.368 TCP 23.104.0.1:45092 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:32:37.587 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:50356 10 6452 1 2025-12-03 04:32:43.110 00:00:10.364 TCP 23.104.0.1:36976 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:33:37.752 00:00:10.557 TCP 1.101.0.1:3000 -> 22.102.0.1:52638 10 6452 1 2025-12-03 04:33:43.512 00:00:10.321 TCP 23.104.0.1:47236 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:34:38.347 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44178 10 6452 1 2025-12-03 04:34:43.871 00:00:10.328 TCP 23.104.0.1:36888 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:31:06.937 00:05:04.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 04:31:06.934 00:05:04.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 04:35:38.562 00:00:10.432 TCP 1.101.0.1:3000 -> 22.102.0.1:40622 10 6452 1 2025-12-03 04:35:44.240 00:00:10.367 TCP 23.104.0.1:41176 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:36:24.734 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 04:36:24.858 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 04:36:39.042 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38528 10 6452 1 2025-12-03 04:36:44.650 00:00:10.323 TCP 23.104.0.1:49728 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:37:39.258 00:00:10.408 TCP 1.101.0.1:3000 -> 22.102.0.1:55320 10 6452 1 2025-12-03 04:37:45.018 00:00:10.365 TCP 23.104.0.1:43826 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:38:39.703 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39172 10 6452 1 2025-12-03 04:38:45.423 00:00:11.102 TCP 23.104.0.1:58644 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:39:39.924 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:46552 10 6452 1 2025-12-03 04:39:46.565 00:00:10.619 TCP 23.104.0.1:39092 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:40:40.134 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38342 10 6452 1 2025-12-03 04:40:47.222 00:00:10.370 TCP 23.104.0.1:44394 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:37:06.937 00:05:04.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 04:37:06.936 00:05:04.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 04:41:24.647 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 04:41:24.857 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 04:41:40.350 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47298 10 6452 1 2025-12-03 04:41:47.631 00:00:10.363 TCP 23.104.0.1:46502 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:42:40.562 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34258 10 6452 1 2025-12-03 04:42:48.032 00:00:10.365 TCP 23.104.0.1:36776 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:43:40.776 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60696 10 6452 1 2025-12-03 04:43:48.439 00:00:10.363 TCP 23.104.0.1:45868 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:44:40.989 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42498 10 6452 1 2025-12-03 04:44:48.839 00:00:10.389 TCP 23.104.0.1:40414 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:45:41.226 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45164 10 6452 1 2025-12-03 04:45:49.274 00:00:10.393 TCP 23.104.0.1:35122 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:46:24.765 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 04:46:24.841 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 04:46:41.454 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60308 10 6452 1 2025-12-03 04:46:49.728 00:00:10.370 TCP 23.104.0.1:40696 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:43:06.938 00:05:04.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 04:43:06.936 00:05:04.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 04:47:41.627 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51168 10 6452 1 2025-12-03 04:47:50.137 00:00:10.368 TCP 23.104.0.1:34288 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:48:41.843 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50058 10 6452 1 2025-12-03 04:48:50.552 00:00:10.369 TCP 23.104.0.1:41290 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:49:42.081 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54968 10 6452 1 2025-12-03 04:49:50.956 00:00:10.367 TCP 23.104.0.1:56400 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:50:42.305 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59940 10 6452 1 2025-12-03 04:50:51.363 00:00:10.362 TCP 23.104.0.1:47802 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:51:25.214 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 04:51:24.849 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 04:51:42.519 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40072 10 6452 1 2025-12-03 04:51:51.768 00:00:10.374 TCP 23.104.0.1:53706 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:52:42.738 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52932 10 6452 1 2025-12-03 04:52:52.185 00:00:10.370 TCP 23.104.0.1:44678 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:49:06.937 00:05:04.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 04:49:06.940 00:05:04.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 04:53:42.914 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48908 10 6452 1 2025-12-03 04:53:52.589 00:00:10.376 TCP 23.104.0.1:48426 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:54:43.132 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47474 10 6452 1 2025-12-03 04:54:52.995 00:00:10.370 TCP 23.104.0.1:59838 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:55:43.311 00:00:10.827 TCP 1.101.0.1:3000 -> 22.102.0.1:45028 10 6452 1 2025-12-03 04:55:53.406 00:00:10.364 TCP 23.104.0.1:44674 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:56:24.938 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 04:56:25.166 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 04:56:44.181 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47418 10 6452 1 2025-12-03 04:56:53.808 00:00:10.335 TCP 23.104.0.1:39870 -> 1.101.0.1:3000 11 1507 1 2025-12-03 04:57:44.357 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52088 10 6452 1 2025-12-03 04:57:54.180 00:00:10.368 TCP 23.104.0.1:52718 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494725, total packets: 1557, avg bps: 1047, avg pps: 0, avg bpp: 317 Time window: 2025-12-03 03:55:06 - 2025-12-03 04:58:04 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0042s User: 0.0010s Wall: 0.0023s flows/second: 70492.5 Runtime: 0.0023s