Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 23:55:07.311 00:05:04.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 23:55:07.308 00:05:04.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 23:59:02.808 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40824 10 6452 1 2025-12-03 23:59:34.798 00:00:10.369 TCP 23.104.0.1:44688 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:00:03.038 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42640 10 6452 1 2025-12-04 00:00:35.206 00:00:10.364 TCP 23.104.0.1:35982 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:01:03.252 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39676 10 6452 1 2025-12-04 00:01:35.605 00:00:10.329 TCP 23.104.0.1:57536 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:01:48.673 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:01:48.597 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 00:02:03.459 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42452 10 6452 1 2025-12-04 00:02:35.977 00:00:10.367 TCP 23.104.0.1:51544 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:03:03.676 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50828 10 6452 1 2025-12-04 00:03:36.382 00:00:10.329 TCP 23.104.0.1:59434 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:04:03.847 00:00:10.726 TCP 1.101.0.1:3000 -> 22.102.0.1:45098 10 6452 1 2025-12-04 00:04:36.743 00:00:10.365 TCP 23.104.0.1:41552 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:05:04.611 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:46236 10 6452 1 2025-12-04 00:01:07.308 00:05:04.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 00:01:07.312 00:05:04.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 00:05:37.150 00:00:10.371 TCP 23.104.0.1:37464 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:06:04.826 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46804 10 6452 1 2025-12-04 00:06:48.229 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 00:06:48.087 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:06:37.556 00:00:10.329 TCP 23.104.0.1:46370 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:07:05.068 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34774 10 6452 1 2025-12-04 00:07:37.929 00:00:10.375 TCP 23.104.0.1:60380 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:08:05.287 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49156 10 6452 1 2025-12-04 00:08:38.346 00:00:10.366 TCP 23.104.0.1:52440 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:09:05.504 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60114 10 6452 1 2025-12-04 00:09:38.748 00:00:10.363 TCP 23.104.0.1:34276 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:10:05.736 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60832 10 6452 1 2025-12-04 00:10:39.150 00:00:10.356 TCP 23.104.0.1:52888 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:07:07.312 00:05:04.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 00:07:07.309 00:05:04.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 00:11:05.949 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57708 12 6556 1 2025-12-04 00:11:48.332 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 00:11:48.166 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:11:39.546 00:00:10.943 TCP 23.104.0.1:44664 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:12:06.185 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60576 10 6452 1 2025-12-04 00:12:40.523 00:00:10.400 TCP 23.104.0.1:38966 -> 1.101.0.1:3000 15 1926 1 2025-12-04 00:13:06.408 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53490 12 10375 1 2025-12-04 00:13:40.961 00:00:10.375 TCP 23.104.0.1:47340 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:14:06.625 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42178 10 6452 1 2025-12-04 00:14:41.367 00:00:10.329 TCP 23.104.0.1:51570 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:15:06.802 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43204 10 6452 1 2025-12-04 00:15:41.738 00:00:10.327 TCP 23.104.0.1:34782 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:16:07.033 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48462 10 6452 1 2025-12-04 00:16:48.443 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:16:48.216 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 00:16:42.111 00:00:10.366 TCP 23.104.0.1:44420 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:13:07.310 00:05:04.909 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 00:13:07.313 00:05:04.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 00:17:07.246 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38936 10 6452 1 2025-12-04 00:17:42.514 00:00:10.326 TCP 23.104.0.1:46186 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:18:07.463 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34046 10 6452 1 2025-12-04 00:18:42.885 00:00:10.385 TCP 23.104.0.1:50986 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:19:07.691 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55296 10 6452 1 2025-12-04 00:19:43.314 00:00:10.325 TCP 23.104.0.1:36092 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:20:07.913 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42574 10 6452 1 2025-12-04 00:20:43.685 00:00:10.365 TCP 23.104.0.1:50202 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:21:08.123 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36656 10 6452 1 2025-12-04 00:21:48.655 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:21:48.516 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 00:21:44.102 00:00:10.326 TCP 23.104.0.1:57526 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:22:08.336 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:33312 10 6452 1 2025-12-04 00:22:44.468 00:00:10.368 TCP 23.104.0.1:54334 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:19:07.313 00:05:04.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 00:19:07.312 00:05:04.908 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 00:23:08.515 00:00:13.626 TCP 1.101.0.1:3000 -> 22.102.0.1:41520 10 6452 1 2025-12-04 00:23:44.886 00:00:10.385 TCP 23.104.0.1:34852 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:24:12.179 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44512 10 6452 1 2025-12-04 00:24:45.323 00:00:10.363 TCP 23.104.0.1:58836 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:25:12.397 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55720 10 6452 1 2025-12-04 00:25:45.724 00:00:10.371 TCP 23.104.0.1:50126 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:26:12.611 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60716 10 6452 1 2025-12-04 00:26:48.399 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 00:26:48.472 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:26:46.137 00:00:10.365 TCP 23.104.0.1:55594 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:27:12.817 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43440 10 6452 1 2025-12-04 00:27:46.538 00:00:10.361 TCP 23.104.0.1:35226 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:28:12.995 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60394 10 6452 1 2025-12-04 00:28:46.939 00:00:10.374 TCP 23.104.0.1:57680 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:25:07.316 00:05:04.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 00:25:07.314 00:05:04.908 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 00:29:13.212 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48642 10 6452 1 2025-12-04 00:29:47.358 00:00:10.361 TCP 23.104.0.1:47210 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:30:13.385 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42356 10 6452 1 2025-12-04 00:30:47.758 00:00:10.373 TCP 23.104.0.1:33690 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:31:13.559 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34442 10 6452 1 2025-12-04 00:31:48.488 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:31:48.595 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 00:31:48.172 00:00:10.323 TCP 23.104.0.1:52836 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:32:13.767 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34610 10 6452 1 2025-12-04 00:32:48.533 00:00:10.365 TCP 23.104.0.1:57760 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:33:13.985 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59848 10 6452 1 2025-12-04 00:33:48.935 00:00:10.339 TCP 23.104.0.1:39356 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:34:14.216 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59972 10 6452 1 2025-12-04 00:34:49.313 00:00:10.366 TCP 23.104.0.1:45330 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:31:07.316 00:05:04.908 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 00:31:07.319 00:05:04.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 00:35:14.427 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43556 10 6452 1 2025-12-04 00:35:49.715 00:00:10.376 TCP 23.104.0.1:36010 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:36:14.648 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48328 10 6452 1 2025-12-04 00:36:48.395 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 00:36:48.644 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:36:50.131 00:00:10.324 TCP 23.104.0.1:43414 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:37:14.863 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51154 10 6452 1 2025-12-04 00:37:50.494 00:00:10.364 TCP 23.104.0.1:54282 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:38:15.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52568 10 6452 1 2025-12-04 00:38:50.900 00:00:10.334 TCP 23.104.0.1:33488 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:39:15.298 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55920 10 6452 1 2025-12-04 00:39:51.276 00:00:10.365 TCP 23.104.0.1:56980 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:40:15.508 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:40520 10 6452 1 2025-12-04 00:40:51.683 00:00:10.372 TCP 23.104.0.1:50694 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:37:07.317 00:05:04.909 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 00:37:07.320 00:05:04.905 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 00:41:15.683 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37664 10 6452 1 2025-12-04 00:41:48.667 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:41:48.565 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 00:41:52.109 00:00:10.365 TCP 23.104.0.1:51916 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:42:15.899 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37876 10 6452 1 2025-12-04 00:42:52.511 00:00:10.408 TCP 23.104.0.1:49208 -> 1.101.0.1:3000 15 1926 1 2025-12-04 00:43:16.113 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:36840 12 10369 1 2025-12-04 00:43:52.959 00:00:10.370 TCP 23.104.0.1:37314 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:44:16.357 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37612 10 6452 1 2025-12-04 00:44:53.365 00:00:10.330 TCP 23.104.0.1:41478 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:45:16.570 00:00:10.314 TCP 1.101.0.1:3000 -> 22.102.0.1:52224 10 6452 1 2025-12-04 00:45:53.734 00:00:10.368 TCP 23.104.0.1:48424 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:46:16.917 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40028 10 6452 1 2025-12-04 00:46:48.798 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:46:48.887 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 00:46:54.144 00:00:10.366 TCP 23.104.0.1:55448 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:43:07.321 00:05:04.905 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 00:43:07.318 00:05:04.910 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 00:47:17.129 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46106 10 6452 1 2025-12-04 00:47:54.547 00:00:10.373 TCP 23.104.0.1:52708 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:48:17.337 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57836 10 6452 1 2025-12-04 00:48:54.960 00:00:10.363 TCP 23.104.0.1:39416 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:49:17.556 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40616 10 6452 1 2025-12-04 00:49:55.360 00:00:10.360 TCP 23.104.0.1:49456 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:50:17.765 00:00:10.643 TCP 1.101.0.1:3000 -> 22.102.0.1:55572 10 6452 1 2025-12-04 00:50:55.762 00:00:10.378 TCP 23.104.0.1:60956 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:51:18.447 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50898 10 6452 1 2025-12-04 00:51:48.982 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:51:48.791 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 00:51:56.181 00:00:10.364 TCP 23.104.0.1:35302 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:52:18.661 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38302 10 6452 1 2025-12-04 00:52:56.584 00:00:10.368 TCP 23.104.0.1:46238 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:49:07.322 00:05:04.905 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 00:49:07.319 00:05:04.910 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 00:53:18.870 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46330 10 6452 1 2025-12-04 00:53:56.993 00:00:10.366 TCP 23.104.0.1:43522 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:54:19.066 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46172 10 6452 1 2025-12-04 00:54:57.397 00:00:10.365 TCP 23.104.0.1:54016 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:55:19.279 00:00:10.296 TCP 1.101.0.1:3000 -> 22.102.0.1:60558 10 6452 1 2025-12-04 00:55:57.799 00:00:10.360 TCP 23.104.0.1:52368 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:56:19.609 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55688 10 6452 1 2025-12-04 00:56:48.950 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 00:56:48.996 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 00:56:58.205 00:00:10.363 TCP 23.104.0.1:40226 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:57:19.787 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40006 10 6452 1 2025-12-04 00:57:58.614 00:00:10.366 TCP 23.104.0.1:50046 -> 1.101.0.1:3000 11 1507 1 2025-12-04 00:58:20.003 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33530 10 6452 1 Summary: total flows: 163, total bytes: 505623, total packets: 1575, avg bps: 1063, avg pps: 0, avg bpp: 321 Time window: 2025-12-03 23:55:07 - 2025-12-04 00:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0030s Wall: 0.0022s flows/second: 74980.4 Runtime: 0.0022s