Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 07:55:07.444 00:05:04.919 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 07:55:07.448 00:05:04.914 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 07:59:28.207 00:00:10.366 TCP 23.104.0.1:46066 -> 1.101.0.1:3000 11 1507 1 2025-12-04 07:59:27.378 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36780 10 6452 1 2025-12-04 08:00:27.583 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57636 10 6452 1 2025-12-04 08:00:28.610 00:00:10.373 TCP 23.104.0.1:59934 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:01:27.797 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34200 10 6452 1 2025-12-04 08:01:29.024 00:00:10.369 TCP 23.104.0.1:57380 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:01:57.557 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 08:01:57.464 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 08:02:29.430 00:00:10.325 TCP 23.104.0.1:44836 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:02:28.028 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34958 10 6452 1 2025-12-04 08:03:29.790 00:00:10.435 TCP 23.104.0.1:41064 -> 1.101.0.1:3000 15 1926 1 2025-12-04 08:03:28.246 00:00:10.256 TCP 1.101.0.1:3000 -> 22.102.0.1:60554 14 10479 1 2025-12-04 08:04:30.261 00:00:10.321 TCP 23.104.0.1:46604 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:04:28.543 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48066 10 6452 1 2025-12-04 08:01:07.454 00:05:04.910 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 08:01:07.450 00:05:04.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 08:05:30.623 00:00:10.357 TCP 23.104.0.1:52594 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:05:28.758 00:00:10.570 TCP 1.101.0.1:3000 -> 22.102.0.1:35244 10 6452 1 2025-12-04 08:06:29.365 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49600 10 6452 1 2025-12-04 08:06:31.021 00:00:10.362 TCP 23.104.0.1:44588 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:06:57.648 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 08:06:57.639 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 08:07:31.422 00:00:10.368 TCP 23.104.0.1:52598 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:07:29.579 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50752 10 6452 1 2025-12-04 08:08:29.792 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57052 10 6452 1 2025-12-04 08:08:31.836 00:00:10.385 TCP 23.104.0.1:34970 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:09:30.001 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36694 10 6452 1 2025-12-04 08:09:32.281 00:00:10.367 TCP 23.104.0.1:60168 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:10:30.223 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56704 10 6452 1 2025-12-04 08:10:32.688 00:00:10.370 TCP 23.104.0.1:41202 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:07:07.455 00:05:04.912 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 08:07:07.457 00:05:04.907 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 08:11:30.434 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60974 10 6452 1 2025-12-04 08:11:33.105 00:00:10.377 TCP 23.104.0.1:51510 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:11:57.661 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 08:11:57.802 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 08:12:30.645 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44716 10 6452 1 2025-12-04 08:12:33.516 00:00:10.366 TCP 23.104.0.1:56150 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:13:30.858 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48742 10 6452 1 2025-12-04 08:13:33.920 00:00:10.340 TCP 23.104.0.1:59088 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:14:31.044 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57150 10 6452 1 2025-12-04 08:14:34.295 00:00:10.362 TCP 23.104.0.1:36794 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:15:31.222 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34834 10 6452 1 2025-12-04 08:15:34.694 00:00:10.366 TCP 23.104.0.1:57738 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:16:31.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32808 10 6452 1 2025-12-04 08:16:35.100 00:00:10.370 TCP 23.104.0.1:48058 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:16:57.840 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 08:16:57.801 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 08:13:07.459 00:05:04.909 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 08:13:07.457 00:05:04.914 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 08:17:31.650 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53392 10 6452 1 2025-12-04 08:17:35.508 00:00:10.369 TCP 23.104.0.1:45418 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:18:31.861 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42412 10 6452 1 2025-12-04 08:18:35.915 00:00:10.390 TCP 23.104.0.1:52118 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:19:36.343 00:00:10.367 TCP 23.104.0.1:39870 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:19:32.036 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54240 10 6452 1 2025-12-04 08:20:32.249 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45592 10 6452 1 2025-12-04 08:20:36.747 00:00:10.387 TCP 23.104.0.1:32788 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:21:32.470 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56510 10 6452 1 2025-12-04 08:21:37.196 00:00:10.330 TCP 23.104.0.1:58470 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:21:57.635 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 08:21:57.989 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 08:22:32.678 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40758 10 6452 1 2025-12-04 08:22:37.566 00:00:10.360 TCP 23.104.0.1:52446 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:19:07.463 00:05:04.907 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 08:19:07.460 00:05:04.912 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 08:23:32.889 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:51502 12 10375 1 2025-12-04 08:23:37.972 00:00:10.461 TCP 23.104.0.1:57278 -> 1.101.0.1:3000 15 1926 1 2025-12-04 08:24:33.131 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56192 10 6452 1 2025-12-04 08:24:38.474 00:00:10.419 TCP 23.104.0.1:45872 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:25:33.340 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39024 10 6452 1 2025-12-04 08:25:38.932 00:00:10.388 TCP 23.104.0.1:53862 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:26:33.514 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58206 10 6452 1 2025-12-04 08:26:39.364 00:00:10.362 TCP 23.104.0.1:42718 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:26:58.355 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 08:26:58.053 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 08:27:33.732 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54926 10 6452 1 2025-12-04 08:27:39.769 00:00:10.375 TCP 23.104.0.1:59442 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:28:33.940 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:52736 10 6452 1 2025-12-04 08:28:40.183 00:00:10.322 TCP 23.104.0.1:49980 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:25:07.464 00:05:04.905 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 08:25:07.463 00:05:04.910 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 08:29:34.176 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51742 10 6452 1 2025-12-04 08:29:40.546 00:00:10.371 TCP 23.104.0.1:55308 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:30:34.402 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35608 10 6452 1 2025-12-04 08:30:40.957 00:00:10.324 TCP 23.104.0.1:49918 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:31:34.616 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41432 10 6452 1 2025-12-04 08:31:41.321 00:00:10.369 TCP 23.104.0.1:45488 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:31:58.162 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 08:31:58.280 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 08:32:34.837 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56262 10 6452 1 2025-12-04 08:32:41.724 00:00:10.374 TCP 23.104.0.1:46436 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:33:35.080 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37982 10 6452 1 2025-12-04 08:33:42.138 00:00:10.361 TCP 23.104.0.1:37498 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:34:35.293 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33778 10 6452 1 2025-12-04 08:34:42.535 00:00:10.362 TCP 23.104.0.1:43348 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:31:07.467 00:05:04.905 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 08:31:07.465 00:05:04.910 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 08:35:35.475 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42212 10 6452 1 2025-12-04 08:35:42.937 00:00:10.373 TCP 23.104.0.1:48740 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:36:35.687 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40398 10 6452 1 2025-12-04 08:36:43.354 00:00:10.331 TCP 23.104.0.1:58588 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:36:58.289 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 08:36:58.022 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 08:37:35.899 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34712 10 6452 1 2025-12-04 08:37:43.721 00:00:10.375 TCP 23.104.0.1:37678 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:38:36.121 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37322 10 6452 1 2025-12-04 08:38:44.135 00:00:10.371 TCP 23.104.0.1:37940 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:39:36.350 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49496 10 6452 1 2025-12-04 08:39:44.538 00:00:10.332 TCP 23.104.0.1:54840 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:40:36.560 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38824 10 6452 1 2025-12-04 08:40:44.910 00:00:10.380 TCP 23.104.0.1:58370 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:37:07.465 00:05:04.910 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 08:37:07.468 00:05:04.905 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 08:41:36.734 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36160 10 6452 1 2025-12-04 08:41:58.350 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 08:41:45.332 00:00:10.363 TCP 23.104.0.1:48880 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:41:58.274 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 08:42:36.946 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:38294 10 6452 1 2025-12-04 08:42:45.731 00:00:10.374 TCP 23.104.0.1:52954 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:43:37.139 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44548 10 6452 1 2025-12-04 08:43:46.149 00:00:10.364 TCP 23.104.0.1:57386 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:44:37.347 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44566 10 6452 1 2025-12-04 08:44:46.548 00:00:10.367 TCP 23.104.0.1:50930 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:45:37.522 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43404 10 6452 1 2025-12-04 08:45:46.950 00:00:10.368 TCP 23.104.0.1:34310 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:46:37.737 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37984 10 6452 1 2025-12-04 08:46:47.355 00:00:10.364 TCP 23.104.0.1:45962 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:46:58.561 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 08:46:58.426 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 08:43:07.468 00:05:04.909 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 08:43:07.470 00:05:04.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 08:47:37.951 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34388 12 6556 1 2025-12-04 08:47:47.762 00:00:10.373 TCP 23.104.0.1:54734 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:48:38.184 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43726 10 6452 1 2025-12-04 08:48:48.177 00:00:10.366 TCP 23.104.0.1:50486 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:49:38.395 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53838 10 6452 1 2025-12-04 08:49:48.578 00:00:10.324 TCP 23.104.0.1:50756 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:50:38.605 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56044 10 6452 1 2025-12-04 08:50:48.938 00:00:10.335 TCP 23.104.0.1:32928 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:51:38.808 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43148 10 6452 1 2025-12-04 08:51:58.444 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 08:51:49.311 00:00:10.359 TCP 23.104.0.1:36076 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:51:58.673 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 08:52:39.022 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47732 10 6452 1 2025-12-04 08:52:49.705 00:00:10.368 TCP 23.104.0.1:35610 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:49:07.474 00:05:04.902 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 08:49:07.471 00:05:04.907 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 08:53:39.233 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37578 10 6452 1 2025-12-04 08:53:50.116 00:00:10.369 TCP 23.104.0.1:47346 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:54:39.445 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43516 10 6452 1 2025-12-04 08:54:50.519 00:00:10.326 TCP 23.104.0.1:58326 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:55:39.656 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42972 10 6452 1 2025-12-04 08:55:50.884 00:00:10.348 TCP 23.104.0.1:58738 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:56:39.872 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:50672 10 6452 1 2025-12-04 08:56:58.788 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 08:56:51.278 00:00:10.364 TCP 23.104.0.1:48578 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:56:58.573 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 08:57:40.072 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58070 10 6452 1 2025-12-04 08:57:51.683 00:00:10.368 TCP 23.104.0.1:53540 -> 1.101.0.1:3000 11 1507 1 2025-12-04 08:58:40.291 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45692 10 6452 1 Summary: total flows: 163, total bytes: 505733, total packets: 1577, avg bps: 1058, avg pps: 0, avg bpp: 320 Time window: 2025-12-04 07:55:07 - 2025-12-04 08:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0022s User: 0.0032s Wall: 0.0022s flows/second: 74530.9 Runtime: 0.0022s