Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 16:55:07.175 00:05:04.881 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 16:59:05.137 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36752 10 6452 1 2025-12-03 16:55:07.174 00:05:04.886 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 16:59:11.350 00:00:10.367 TCP 23.104.0.1:51286 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:00:05.382 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34698 10 6452 1 2025-12-03 17:00:11.756 00:00:10.339 TCP 23.104.0.1:41260 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:01:05.602 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38520 10 6452 1 2025-12-03 17:01:12.130 00:00:10.362 TCP 23.104.0.1:49866 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:01:39.841 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 17:01:39.704 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 17:02:05.831 00:00:10.751 TCP 1.101.0.1:3000 -> 22.102.0.1:48220 10 6452 1 2025-12-03 17:02:12.529 00:00:10.366 TCP 23.104.0.1:50118 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:03:06.623 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:37688 12 10375 1 2025-12-03 17:03:12.929 00:00:10.456 TCP 23.104.0.1:60172 -> 1.101.0.1:3000 15 1926 1 2025-12-03 17:04:06.873 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47364 12 6556 1 2025-12-03 17:04:13.422 00:00:10.378 TCP 23.104.0.1:57798 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:01:07.176 00:05:04.882 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 17:01:07.175 00:05:04.886 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 17:05:07.100 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54536 10 6452 1 2025-12-03 17:05:13.837 00:00:10.395 TCP 23.104.0.1:52802 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:06:07.314 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54460 10 6452 1 2025-12-03 17:06:14.273 00:00:10.372 TCP 23.104.0.1:39980 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:06:39.731 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 17:06:39.667 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 17:07:07.525 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41394 10 6452 1 2025-12-03 17:07:14.685 00:00:10.369 TCP 23.104.0.1:44282 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:08:07.760 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44080 10 6452 1 2025-12-03 17:08:15.106 00:00:10.374 TCP 23.104.0.1:34338 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:09:07.968 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49036 10 6452 1 2025-12-03 17:09:15.524 00:00:10.327 TCP 23.104.0.1:47738 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:10:08.185 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35602 10 6452 1 2025-12-03 17:10:15.886 00:00:10.377 TCP 23.104.0.1:42524 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:07:07.181 00:05:04.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 17:07:07.178 00:05:04.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 17:11:08.403 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58292 10 6452 1 2025-12-03 17:11:16.304 00:00:10.370 TCP 23.104.0.1:33818 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:11:39.493 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 17:11:39.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 17:12:08.624 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37430 10 6452 1 2025-12-03 17:12:16.719 00:00:10.375 TCP 23.104.0.1:54384 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:13:08.832 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51366 10 6452 1 2025-12-03 17:13:17.130 00:00:10.364 TCP 23.104.0.1:49178 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:14:09.064 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34476 10 6452 1 2025-12-03 17:14:17.534 00:00:10.378 TCP 23.104.0.1:40806 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:15:09.279 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56426 10 6452 1 2025-12-03 17:15:17.958 00:00:10.368 TCP 23.104.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:16:09.492 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51222 10 6452 1 2025-12-03 17:16:18.365 00:00:10.370 TCP 23.104.0.1:34396 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:16:39.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 17:16:39.770 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 17:13:07.182 00:05:04.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 17:13:07.184 00:05:04.878 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 17:17:09.706 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39018 10 6452 1 2025-12-03 17:17:18.768 00:00:10.363 TCP 23.104.0.1:54356 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:18:09.915 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39044 10 6452 1 2025-12-03 17:18:19.170 00:00:10.365 TCP 23.104.0.1:50420 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:19:10.132 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39854 10 6452 1 2025-12-03 17:19:19.576 00:00:10.363 TCP 23.104.0.1:34440 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:20:10.346 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35796 10 6452 1 2025-12-03 17:20:19.980 00:00:10.371 TCP 23.104.0.1:33042 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:21:10.524 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40306 10 6452 1 2025-12-03 17:21:20.392 00:00:10.363 TCP 23.104.0.1:33616 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:21:39.871 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 17:21:39.744 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 17:22:10.742 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36850 10 6452 1 2025-12-03 17:22:20.805 00:00:10.362 TCP 23.104.0.1:49620 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:19:07.184 00:05:04.885 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 17:19:07.186 00:05:04.880 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 17:23:10.948 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45000 10 6452 1 2025-12-03 17:23:21.210 00:00:10.364 TCP 23.104.0.1:39284 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:24:11.187 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:49762 10 6452 1 2025-12-03 17:24:21.617 00:00:10.361 TCP 23.104.0.1:52564 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:25:11.379 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41558 10 6452 1 2025-12-03 17:25:22.021 00:00:10.325 TCP 23.104.0.1:53454 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:26:11.592 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37504 10 6452 1 2025-12-03 17:26:22.383 00:00:10.360 TCP 23.104.0.1:48748 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:26:39.914 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 17:26:40.148 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 17:27:11.801 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36148 10 6452 1 2025-12-03 17:27:22.783 00:00:10.362 TCP 23.104.0.1:34832 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:28:12.022 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52722 10 6452 1 2025-12-03 17:28:23.185 00:00:10.366 TCP 23.104.0.1:41768 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:25:07.186 00:05:04.879 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 17:25:07.183 00:05:04.884 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 17:29:12.232 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42616 10 6452 1 2025-12-03 17:29:23.598 00:00:10.367 TCP 23.104.0.1:34048 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:30:12.434 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32774 10 6452 1 2025-12-03 17:30:24.008 00:00:10.374 TCP 23.104.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:31:12.647 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36998 10 6452 1 2025-12-03 17:31:24.421 00:00:10.368 TCP 23.104.0.1:35712 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:31:40.022 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 17:31:40.050 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 17:32:12.830 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56928 10 6452 1 2025-12-03 17:32:24.827 00:00:10.372 TCP 23.104.0.1:45862 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:33:13.009 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46206 10 6452 1 2025-12-03 17:33:25.238 00:00:10.368 TCP 23.104.0.1:35288 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:34:13.223 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40010 10 6452 1 2025-12-03 17:34:25.646 00:00:10.365 TCP 23.104.0.1:60296 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:31:07.191 00:05:04.882 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 17:31:07.188 00:05:04.887 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 17:35:13.393 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40822 10 6452 1 2025-12-03 17:35:26.052 00:00:10.371 TCP 23.104.0.1:53642 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:36:13.603 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55964 10 6452 1 2025-12-03 17:36:26.459 00:00:10.372 TCP 23.104.0.1:57450 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:36:40.282 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 17:36:39.918 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 17:37:13.813 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48792 10 6452 1 2025-12-03 17:37:26.870 00:00:10.373 TCP 23.104.0.1:57552 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:38:13.995 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:45068 12 10375 1 2025-12-03 17:38:27.281 00:00:11.073 TCP 23.104.0.1:48412 -> 1.101.0.1:3000 15 1926 1 2025-12-03 17:39:14.251 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59266 10 6452 1 2025-12-03 17:39:28.398 00:00:10.364 TCP 23.104.0.1:56148 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:40:14.460 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55348 10 6452 1 2025-12-03 17:40:28.797 00:00:10.368 TCP 23.104.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:37:07.190 00:05:04.883 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 17:37:07.188 00:05:04.888 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 17:41:14.674 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46662 10 6452 1 2025-12-03 17:41:40.750 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 17:41:40.888 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 17:41:29.204 00:00:10.361 TCP 23.104.0.1:42424 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:42:14.887 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38586 10 6452 1 2025-12-03 17:42:29.604 00:00:10.366 TCP 23.104.0.1:44906 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:43:15.107 00:00:10.888 TCP 1.101.0.1:3000 -> 22.102.0.1:36298 10 6452 1 2025-12-03 17:43:30.006 00:00:10.365 TCP 23.104.0.1:45200 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:44:16.046 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35560 10 6452 1 2025-12-03 17:44:30.415 00:00:10.367 TCP 23.104.0.1:53132 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:45:16.257 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52778 10 6452 1 2025-12-03 17:45:30.824 00:00:10.968 TCP 23.104.0.1:35004 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:46:16.432 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43246 10 6452 1 2025-12-03 17:46:40.364 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 17:46:40.140 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 17:46:31.824 00:00:10.375 TCP 23.104.0.1:52970 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:43:07.202 00:05:04.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 17:43:07.204 00:05:04.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 17:47:16.648 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:52042 10 6452 1 2025-12-03 17:47:32.235 00:00:10.362 TCP 23.104.0.1:60236 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:48:16.837 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58436 10 6452 1 2025-12-03 17:48:32.638 00:00:10.368 TCP 23.104.0.1:56716 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:49:17.077 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54978 10 6452 1 2025-12-03 17:49:33.049 00:00:15.929 TCP 23.104.0.1:35012 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:50:17.294 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39844 10 6452 1 2025-12-03 17:50:39.018 00:00:10.323 TCP 23.104.0.1:52644 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:51:17.519 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37090 10 6452 1 2025-12-03 17:51:40.617 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 17:51:40.466 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 17:51:39.383 00:00:10.367 TCP 23.104.0.1:38462 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:52:17.740 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49534 10 6452 1 2025-12-03 17:52:39.789 00:00:10.439 TCP 23.104.0.1:33968 -> 1.101.0.1:3000 15 1926 1 2025-12-03 17:49:07.191 00:05:04.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 17:49:07.193 00:05:04.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 17:53:17.955 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:44784 14 10479 1 2025-12-03 17:53:40.261 00:00:10.365 TCP 23.104.0.1:38316 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:54:18.216 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59112 10 6452 1 2025-12-03 17:54:40.665 00:00:10.325 TCP 23.104.0.1:52442 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:55:18.385 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50650 10 6452 1 2025-12-03 17:55:41.033 00:00:10.367 TCP 23.104.0.1:53952 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:56:18.600 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:47814 10 6452 1 2025-12-03 17:56:40.774 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 17:56:40.576 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 17:56:41.439 00:00:10.362 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:57:18.773 00:00:10.823 TCP 1.101.0.1:3000 -> 22.102.0.1:53248 10 6452 1 2025-12-03 17:57:41.844 00:00:10.388 TCP 23.104.0.1:34008 -> 1.101.0.1:3000 11 1507 1 2025-12-03 17:58:19.638 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52578 10 6452 1 Summary: total flows: 163, total bytes: 510075, total packets: 1583, avg bps: 1073, avg pps: 0, avg bpp: 322 Time window: 2025-12-03 16:55:07 - 2025-12-03 17:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0032s Wall: 0.0021s flows/second: 77911.3 Runtime: 0.0021s