Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 03:55:07.377 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 03:55:07.374 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 03:59:20.240 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58436 10 6661 1 2025-12-04 03:59:35.282 00:00:10.369 TCP 23.104.0.1:50858 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:00:20.413 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51470 10 6661 1 2025-12-04 04:00:35.687 00:00:10.376 TCP 23.104.0.1:36368 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:01:20.587 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34794 10 6661 1 2025-12-04 04:01:36.104 00:00:10.325 TCP 23.104.0.1:39662 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:01:52.888 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 04:01:52.837 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 04:02:20.760 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39520 10 6661 1 2025-12-04 04:02:36.468 00:00:10.365 TCP 23.104.0.1:37820 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:03:20.972 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52780 10 6661 1 2025-12-04 04:03:36.871 00:00:10.787 TCP 23.104.0.1:38582 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:04:21.205 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48676 10 6661 1 2025-12-04 04:04:37.695 00:00:10.339 TCP 23.104.0.1:39164 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:01:07.380 00:05:04.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 04:01:07.379 00:05:04.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 04:05:21.420 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51802 10 6661 1 2025-12-04 04:05:38.095 00:00:10.360 TCP 23.104.0.1:57972 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:06:21.637 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54320 10 6661 1 2025-12-04 04:06:38.492 00:00:10.329 TCP 23.104.0.1:48954 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:06:52.911 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 04:06:52.894 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 04:07:21.847 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33970 10 6661 1 2025-12-04 04:07:38.858 00:00:10.380 TCP 23.104.0.1:59370 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:08:22.083 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:59790 10 6661 1 2025-12-04 04:08:39.274 00:00:10.364 TCP 23.104.0.1:49834 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:09:22.259 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36782 10 6661 1 2025-12-04 04:09:39.687 00:00:10.342 TCP 23.104.0.1:38390 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:10:22.475 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35232 10 6661 1 2025-12-04 04:10:40.099 00:00:10.417 TCP 23.104.0.1:40628 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:07:07.379 00:05:04.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 04:07:07.383 00:05:04.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 04:11:22.685 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43530 10 6661 1 2025-12-04 04:11:40.558 00:00:10.326 TCP 23.104.0.1:49292 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:11:52.823 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 04:11:52.864 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 04:12:22.896 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60422 10 6661 1 2025-12-04 04:12:40.919 00:00:10.390 TCP 23.104.0.1:59402 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:13:23.081 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53890 10 6661 1 2025-12-04 04:13:41.350 00:00:10.889 TCP 23.104.0.1:51152 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:14:23.303 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48254 10 6661 1 2025-12-04 04:14:42.274 00:00:10.365 TCP 23.104.0.1:46110 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:15:23.519 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33252 10 6661 1 2025-12-04 04:15:42.675 00:00:10.326 TCP 23.104.0.1:47054 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:16:23.733 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39698 10 6661 1 2025-12-04 04:16:53.051 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 04:16:53.091 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 04:16:43.046 00:00:10.367 TCP 23.104.0.1:41564 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:13:07.379 00:05:04.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 04:13:07.382 00:05:04.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 04:17:23.946 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45554 10 6661 1 2025-12-04 04:17:43.447 00:00:10.366 TCP 23.104.0.1:36760 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:18:24.177 00:00:10.555 TCP 1.101.0.1:3000 -> 22.102.0.1:54968 12 10369 1 2025-12-04 04:18:43.851 00:00:10.453 TCP 23.104.0.1:54116 -> 1.101.0.1:3000 15 1926 1 2025-12-04 04:19:24.770 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54186 10 6452 1 2025-12-04 04:19:44.346 00:00:10.372 TCP 23.104.0.1:42126 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:20:24.981 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:43474 10 6452 1 2025-12-04 04:20:44.759 00:00:10.376 TCP 23.104.0.1:52814 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:21:25.176 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35040 10 6452 1 2025-12-04 04:21:45.184 00:00:10.368 TCP 23.104.0.1:56822 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:21:53.348 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 04:21:53.390 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 04:22:25.402 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58062 10 6452 1 2025-12-04 04:22:45.590 00:00:10.332 TCP 23.104.0.1:33108 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:19:07.383 00:05:04.896 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 04:19:07.386 00:05:04.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 04:23:25.617 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50054 10 6452 1 2025-12-04 04:23:45.959 00:00:10.333 TCP 23.104.0.1:41964 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:24:25.829 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44654 10 6452 1 2025-12-04 04:24:46.326 00:00:10.369 TCP 23.104.0.1:43442 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:25:26.074 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39964 10 6452 1 2025-12-04 04:25:46.727 00:00:10.332 TCP 23.104.0.1:55068 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:26:26.285 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55036 10 6452 1 2025-12-04 04:26:53.097 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 04:26:53.530 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 04:26:47.106 00:00:10.330 TCP 23.104.0.1:36718 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:27:26.493 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58548 10 6452 1 2025-12-04 04:27:47.472 00:00:10.367 TCP 23.104.0.1:55480 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:28:26.706 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43786 10 6452 1 2025-12-04 04:28:47.884 00:00:10.342 TCP 23.104.0.1:44958 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:25:07.384 00:05:04.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 04:25:07.387 00:05:04.892 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 04:29:26.939 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:58124 10 6452 1 2025-12-04 04:29:48.266 00:00:10.363 TCP 23.104.0.1:42118 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:30:27.183 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:51640 12 6556 1 2025-12-04 04:30:48.670 00:00:10.369 TCP 23.104.0.1:33102 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:31:27.439 00:00:21.830 TCP 1.101.0.1:3000 -> 22.102.0.1:58042 10 6452 1 2025-12-04 04:31:53.486 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 04:31:53.337 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 04:31:49.099 00:00:10.362 TCP 23.104.0.1:42532 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:32:39.347 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50604 10 6452 1 2025-12-04 04:32:49.501 00:00:10.365 TCP 23.104.0.1:39168 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:33:39.562 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36244 12 6556 1 2025-12-04 04:33:49.902 00:00:10.365 TCP 23.104.0.1:40290 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:34:39.777 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35458 10 6452 1 2025-12-04 04:34:50.306 00:00:10.379 TCP 23.104.0.1:56594 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:31:07.388 00:05:04.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 04:31:07.386 00:05:04.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 04:35:40.004 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51888 10 6452 1 2025-12-04 04:35:50.717 00:00:10.373 TCP 23.104.0.1:38484 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:36:40.220 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44016 10 6452 1 2025-12-04 04:36:53.474 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 04:36:53.237 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 04:36:51.130 00:00:10.367 TCP 23.104.0.1:51436 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:37:40.443 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50164 10 6452 1 2025-12-04 04:37:51.535 00:00:10.378 TCP 23.104.0.1:44974 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:38:40.653 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:33632 10 6452 1 2025-12-04 04:38:51.954 00:00:10.376 TCP 23.104.0.1:38998 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:39:40.834 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54906 10 6452 1 2025-12-04 04:39:52.371 00:00:10.369 TCP 23.104.0.1:40228 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:40:41.089 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54804 10 6452 1 2025-12-04 04:40:52.781 00:00:10.377 TCP 23.104.0.1:44876 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:37:07.388 00:05:04.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 04:37:07.391 00:05:04.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 04:41:41.311 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39864 10 6452 1 2025-12-04 04:41:53.570 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 04:41:53.474 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 04:41:53.202 00:00:10.324 TCP 23.104.0.1:36046 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:42:41.483 00:00:10.510 TCP 1.101.0.1:3000 -> 22.102.0.1:41826 10 6452 1 2025-12-04 04:42:53.567 00:00:10.360 TCP 23.104.0.1:47768 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:43:42.035 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43614 10 6452 1 2025-12-04 04:43:53.961 00:00:10.378 TCP 23.104.0.1:60846 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:44:42.252 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:37208 10 6452 1 2025-12-04 04:44:54.380 00:00:10.372 TCP 23.104.0.1:40524 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:45:42.439 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53432 10 6452 1 2025-12-04 04:45:54.787 00:00:10.372 TCP 23.104.0.1:48342 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:46:53.780 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 04:46:42.613 00:00:11.226 TCP 1.101.0.1:3000 -> 22.102.0.1:52788 10 6452 1 2025-12-04 04:46:53.682 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 04:46:55.200 00:00:10.364 TCP 23.104.0.1:35472 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:43:07.392 00:05:04.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 04:43:07.390 00:05:04.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 04:47:43.883 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44154 10 6452 1 2025-12-04 04:47:55.602 00:00:10.363 TCP 23.104.0.1:50924 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:48:44.103 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46276 10 6452 1 2025-12-04 04:48:56.005 00:00:10.361 TCP 23.104.0.1:53864 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:49:44.314 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44368 10 6452 1 2025-12-04 04:49:56.418 00:00:10.369 TCP 23.104.0.1:56486 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:50:44.486 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37100 10 6452 1 2025-12-04 04:50:56.821 00:00:10.366 TCP 23.104.0.1:34828 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:51:44.711 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37304 10 6452 1 2025-12-04 04:51:53.660 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 04:51:53.597 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 04:51:57.225 00:00:10.362 TCP 23.104.0.1:38680 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:52:44.925 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:46550 10 6452 1 2025-12-04 04:49:07.389 00:05:04.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 04:52:57.628 00:00:10.382 TCP 23.104.0.1:50310 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:49:07.392 00:05:04.899 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 04:53:45.122 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38422 10 6452 1 2025-12-04 04:53:58.044 00:00:14.586 TCP 23.104.0.1:57958 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:54:45.341 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46950 10 6452 1 2025-12-04 04:55:02.664 00:00:10.367 TCP 23.104.0.1:33024 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:55:45.553 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38950 10 6452 1 2025-12-04 04:56:03.095 00:00:10.359 TCP 23.104.0.1:60754 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:56:45.771 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58148 10 6452 1 2025-12-04 04:56:53.896 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 04:56:53.971 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 04:57:03.494 00:00:10.368 TCP 23.104.0.1:56958 -> 1.101.0.1:3000 11 1507 1 2025-12-04 04:57:45.980 00:00:10.494 TCP 1.101.0.1:3000 -> 22.102.0.1:39496 10 6452 1 2025-12-04 04:58:03.900 00:00:10.443 TCP 23.104.0.1:42768 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 498904, total packets: 1561, avg bps: 1053, avg pps: 0, avg bpp: 319 Time window: 2025-12-04 03:55:07 - 2025-12-04 04:58:14 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0039s User: 0.0016s Wall: 0.0025s flows/second: 63705.0 Runtime: 0.0026s