Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 01:55:07.340 00:05:04.902 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 01:55:07.338 00:05:04.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 01:59:23.536 00:00:10.372 TCP 23.104.0.1:56662 -> 1.101.0.1:3000 11 1507 1 2025-12-04 01:59:33.505 00:00:10.805 TCP 1.101.0.1:3000 -> 22.102.0.1:54228 10 6452 1 2025-12-04 02:00:23.943 00:00:10.382 TCP 23.104.0.1:58140 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:00:34.349 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43586 10 6452 1 2025-12-04 02:01:24.371 00:00:10.407 TCP 23.104.0.1:58680 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:01:34.570 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37944 10 6452 1 2025-12-04 02:01:50.304 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 02:01:50.307 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 02:02:24.864 00:00:10.369 TCP 23.104.0.1:37604 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:02:34.778 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46642 10 6452 1 2025-12-04 02:03:25.272 00:00:10.367 TCP 23.104.0.1:45016 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:03:34.986 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40252 10 6452 1 2025-12-04 02:04:25.686 00:00:10.369 TCP 23.104.0.1:42370 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:04:35.211 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50582 10 6452 1 2025-12-04 02:01:07.340 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 02:01:07.342 00:05:04.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 02:05:26.102 00:00:14.104 TCP 23.104.0.1:49512 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:05:35.442 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34732 10 6452 1 2025-12-04 02:06:30.256 00:00:10.367 TCP 23.104.0.1:51748 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:06:35.657 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55142 10 6452 1 2025-12-04 02:06:50.281 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 02:06:50.529 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 02:07:35.871 00:00:10.775 TCP 1.101.0.1:3000 -> 22.102.0.1:52418 10 6452 1 2025-12-04 02:07:30.665 00:00:15.944 TCP 23.104.0.1:51044 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:08:36.697 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:39392 12 10375 1 2025-12-04 02:08:36.668 00:00:10.436 TCP 23.104.0.1:53820 -> 1.101.0.1:3000 16 1978 1 2025-12-04 02:09:37.137 00:00:10.367 TCP 23.104.0.1:50162 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:09:36.950 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:53732 10 6452 1 2025-12-04 02:10:37.542 00:00:10.325 TCP 23.104.0.1:53124 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:10:37.146 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50630 10 6452 1 2025-12-04 02:07:07.344 00:05:04.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 02:07:07.341 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 02:11:50.624 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 02:11:37.360 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33694 10 6452 1 2025-12-04 02:11:50.298 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 02:11:37.904 00:00:10.362 TCP 23.104.0.1:37646 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:12:38.308 00:00:10.359 TCP 23.104.0.1:49130 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:12:37.574 00:00:10.369 TCP 1.101.0.1:3000 -> 22.102.0.1:57154 10 6452 1 2025-12-04 02:13:37.984 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53678 10 6452 1 2025-12-04 02:13:38.710 00:00:10.373 TCP 23.104.0.1:35814 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:14:38.208 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55042 10 6452 1 2025-12-04 02:14:39.123 00:00:10.366 TCP 23.104.0.1:48750 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:15:39.524 00:00:10.370 TCP 23.104.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:15:38.424 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36938 10 6452 1 2025-12-04 02:16:38.649 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45392 10 6452 1 2025-12-04 02:16:50.804 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 02:16:50.962 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 02:16:39.931 00:00:10.382 TCP 23.104.0.1:35664 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:13:07.343 00:05:04.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 02:13:07.344 00:05:04.902 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 02:17:38.831 00:00:14.311 TCP 1.101.0.1:3000 -> 22.102.0.1:35362 10 6452 1 2025-12-04 02:17:40.346 00:00:12.893 TCP 23.104.0.1:52444 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:18:43.277 00:00:10.395 TCP 23.104.0.1:52690 -> 1.101.0.1:3000 15 1926 1 2025-12-04 02:18:43.183 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:45018 12 10375 1 2025-12-04 02:19:43.435 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43592 10 6452 1 2025-12-04 02:19:43.711 00:00:10.376 TCP 23.104.0.1:47620 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:20:43.650 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39786 10 6452 1 2025-12-04 02:20:44.128 00:00:10.321 TCP 23.104.0.1:39168 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:21:50.713 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 02:21:50.667 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 02:21:43.824 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39898 10 6452 1 2025-12-04 02:21:44.490 00:00:10.372 TCP 23.104.0.1:52868 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:22:44.073 00:00:13.748 TCP 1.101.0.1:3000 -> 22.102.0.1:36010 10 6452 1 2025-12-04 02:22:44.899 00:00:13.047 TCP 23.104.0.1:42680 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:19:07.342 00:05:04.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 02:19:07.345 00:05:04.902 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 02:23:47.852 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48572 10 6452 1 2025-12-04 02:23:47.983 00:00:10.372 TCP 23.104.0.1:47064 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:24:48.395 00:00:10.335 TCP 23.104.0.1:42484 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:24:48.036 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48304 10 6452 1 2025-12-04 02:25:48.766 00:00:10.374 TCP 23.104.0.1:38566 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:25:48.204 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60688 10 6452 1 2025-12-04 02:26:50.961 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 02:26:50.720 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 02:26:49.181 00:00:10.325 TCP 23.104.0.1:43162 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:26:48.411 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45986 10 6452 1 2025-12-04 02:27:49.547 00:00:18.840 TCP 23.104.0.1:60330 -> 1.101.0.1:3000 15 1926 1 2025-12-04 02:27:48.622 00:00:19.559 TCP 1.101.0.1:3000 -> 22.102.0.1:34590 12 10369 1 2025-12-04 02:28:58.221 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40032 10 6452 1 2025-12-04 02:28:58.434 00:00:10.363 TCP 23.104.0.1:60684 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:25:07.347 00:05:04.902 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 02:25:07.344 00:05:04.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 02:29:58.839 00:00:10.383 TCP 23.104.0.1:54318 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:29:58.447 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33118 10 6452 1 2025-12-04 02:30:59.262 00:00:10.363 TCP 23.104.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:30:58.672 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36752 10 6452 1 2025-12-04 02:31:51.029 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 02:31:50.896 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 02:31:59.666 00:00:10.419 TCP 23.104.0.1:35664 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:31:58.882 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55544 10 6452 1 2025-12-04 02:33:00.128 00:00:10.363 TCP 23.104.0.1:53668 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:32:59.106 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57952 10 6452 1 2025-12-04 02:33:59.334 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45998 10 6452 1 2025-12-04 02:34:00.529 00:00:10.360 TCP 23.104.0.1:33858 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:34:59.553 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41992 10 6452 1 2025-12-04 02:35:00.926 00:00:10.385 TCP 23.104.0.1:39024 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:31:07.348 00:05:04.902 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 02:31:07.345 00:05:04.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 02:36:01.352 00:00:10.371 TCP 23.104.0.1:42058 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:35:59.727 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58734 10 6452 1 2025-12-04 02:36:51.030 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 02:36:50.981 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 02:36:59.943 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:48548 10 6452 1 2025-12-04 02:37:01.761 00:00:10.378 TCP 23.104.0.1:35008 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:38:00.144 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47120 10 6452 1 2025-12-04 02:38:02.177 00:00:10.367 TCP 23.104.0.1:36994 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:39:00.362 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53206 10 6452 1 2025-12-04 02:39:02.578 00:00:10.364 TCP 23.104.0.1:55318 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:40:00.548 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:42878 10 6452 1 2025-12-04 02:40:02.978 00:00:10.328 TCP 23.104.0.1:53660 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:41:03.343 00:00:10.365 TCP 23.104.0.1:53692 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:37:07.349 00:05:04.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 02:41:00.743 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:58222 10 6452 1 2025-12-04 02:37:07.347 00:05:04.908 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 02:41:51.145 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 02:41:51.053 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 02:42:00.914 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36308 10 6452 1 2025-12-04 02:42:03.746 00:00:10.363 TCP 23.104.0.1:52020 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:43:01.129 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:44502 12 10375 1 2025-12-04 02:43:04.149 00:00:10.436 TCP 23.104.0.1:50104 -> 1.101.0.1:3000 15 1926 1 2025-12-04 02:44:01.369 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57564 10 6452 1 2025-12-04 02:44:04.628 00:00:10.326 TCP 23.104.0.1:56238 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:45:01.580 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38286 10 6452 1 2025-12-04 02:45:04.993 00:00:10.372 TCP 23.104.0.1:35724 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:46:01.751 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55680 10 6452 1 2025-12-04 02:46:05.401 00:00:10.369 TCP 23.104.0.1:53330 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:46:51.192 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 02:46:51.305 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 02:47:05.810 00:00:10.365 TCP 23.104.0.1:52344 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:43:07.350 00:05:04.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 02:47:01.928 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44646 10 6452 1 2025-12-04 02:43:07.347 00:05:04.909 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 02:48:06.211 00:00:10.359 TCP 23.104.0.1:36228 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:48:02.160 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51262 10 6452 1 2025-12-04 02:49:06.611 00:00:10.371 TCP 23.104.0.1:42204 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:49:02.396 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60150 10 6452 1 2025-12-04 02:50:02.567 00:00:11.068 TCP 1.101.0.1:3000 -> 22.102.0.1:59264 10 6452 1 2025-12-04 02:50:07.018 00:00:10.322 TCP 23.104.0.1:41304 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:51:03.675 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49690 10 6452 1 2025-12-04 02:51:07.382 00:00:10.360 TCP 23.104.0.1:37054 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:51:51.360 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 02:51:51.062 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 02:52:03.885 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55240 10 6452 1 2025-12-04 02:52:07.784 00:00:10.369 TCP 23.104.0.1:54696 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:49:07.354 00:05:04.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 02:53:04.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35750 10 6452 1 2025-12-04 02:49:07.350 00:05:04.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 02:53:08.194 00:00:10.362 TCP 23.104.0.1:46566 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:54:04.310 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48792 10 6452 1 2025-12-04 02:54:08.601 00:00:10.808 TCP 23.104.0.1:51806 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:55:04.518 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51102 10 6452 1 2025-12-04 02:55:09.449 00:00:10.362 TCP 23.104.0.1:48072 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:56:04.752 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50218 10 6452 1 2025-12-04 02:56:09.853 00:00:10.339 TCP 23.104.0.1:36172 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:56:51.344 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 02:56:51.386 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 02:57:04.926 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45532 10 6452 1 2025-12-04 02:57:10.225 00:00:10.326 TCP 23.104.0.1:33442 -> 1.101.0.1:3000 11 1507 1 2025-12-04 02:58:05.137 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47060 12 10375 1 2025-12-04 02:58:10.586 00:00:10.440 TCP 23.104.0.1:43178 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 162, total bytes: 512145, total packets: 1582, avg bps: 1079, avg pps: 0, avg bpp: 323 Time window: 2025-12-04 01:55:07 - 2025-12-04 02:58:21 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0039s User: 0.0010s Wall: 0.0014s flows/second: 112720.2 Runtime: 0.0015s