Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 14:55:07.588 00:05:04.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 14:55:07.585 00:05:04.917 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 14:59:18.388 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51178 10 6452 1 2025-12-04 14:59:22.913 00:00:10.363 TCP 23.104.0.1:49884 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:00:18.606 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36768 10 6452 1 2025-12-04 15:00:23.313 00:00:10.363 TCP 23.104.0.1:38986 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:01:18.816 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33992 10 6452 1 2025-12-04 15:01:23.710 00:00:10.372 TCP 23.104.0.1:56182 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:02:06.297 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 15:02:06.054 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 15:02:19.034 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60366 10 6452 1 2025-12-04 15:02:24.123 00:00:10.369 TCP 23.104.0.1:33556 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:03:19.252 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51044 10 6452 1 2025-12-04 15:03:24.527 00:00:10.363 TCP 23.104.0.1:48400 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:04:19.468 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54540 10 6452 1 2025-12-04 15:04:24.931 00:00:10.373 TCP 23.104.0.1:54492 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:01:07.586 00:05:04.916 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 15:01:07.589 00:05:04.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 15:05:19.688 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60480 10 6452 1 2025-12-04 15:05:25.347 00:00:10.366 TCP 23.104.0.1:46858 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:06:19.902 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39578 10 6452 1 2025-12-04 15:06:25.748 00:00:10.336 TCP 23.104.0.1:53656 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:07:05.926 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 15:07:06.039 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 15:07:20.112 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54134 10 6452 1 2025-12-04 15:07:26.135 00:00:10.365 TCP 23.104.0.1:32936 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:08:20.295 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33460 10 6452 1 2025-12-04 15:08:26.545 00:00:10.327 TCP 23.104.0.1:60380 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:09:20.509 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44270 10 6452 1 2025-12-04 15:09:26.913 00:00:10.362 TCP 23.104.0.1:59732 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:10:20.737 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58502 10 6452 1 2025-12-04 15:10:27.316 00:00:10.358 TCP 23.104.0.1:53610 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:07:07.591 00:05:04.910 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 15:07:07.590 00:05:04.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 15:11:20.949 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:40348 10 6452 1 2025-12-04 15:11:27.711 00:00:10.481 TCP 23.104.0.1:48694 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:12:06.061 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 15:12:06.158 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 15:12:21.188 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57802 10 6452 1 2025-12-04 15:12:28.231 00:00:10.364 TCP 23.104.0.1:50196 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:13:21.406 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37078 10 6452 1 2025-12-04 15:13:28.632 00:00:10.363 TCP 23.104.0.1:44204 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:14:21.578 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38794 10 6452 1 2025-12-04 15:14:29.031 00:00:10.331 TCP 23.104.0.1:50970 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:15:21.804 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57932 10 6452 1 2025-12-04 15:15:29.397 00:00:11.061 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:16:22.016 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39692 10 6452 1 2025-12-04 15:16:30.497 00:00:10.368 TCP 23.104.0.1:54048 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:17:06.464 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 15:17:06.337 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 15:13:07.593 00:05:04.910 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 15:13:07.590 00:05:04.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 15:17:22.227 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47812 10 6452 1 2025-12-04 15:17:30.904 00:00:10.365 TCP 23.104.0.1:36412 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:18:22.437 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52266 10 6452 1 2025-12-04 15:18:31.308 00:00:10.359 TCP 23.104.0.1:59852 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:19:22.610 00:00:11.239 TCP 1.101.0.1:3000 -> 22.102.0.1:44350 10 6452 1 2025-12-04 15:19:31.706 00:00:10.364 TCP 23.104.0.1:60700 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:20:23.889 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45494 10 6452 1 2025-12-04 15:20:32.111 00:00:10.366 TCP 23.104.0.1:35844 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:21:24.114 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56420 10 6452 1 2025-12-04 15:21:32.519 00:00:10.367 TCP 23.104.0.1:55598 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:22:06.308 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 15:22:06.344 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 15:22:24.335 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47828 10 6452 1 2025-12-04 15:22:32.927 00:00:10.347 TCP 23.104.0.1:45922 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:19:07.592 00:05:04.915 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 15:19:07.594 00:05:04.910 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 15:23:24.554 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51084 10 6452 1 2025-12-04 15:23:33.314 00:00:10.370 TCP 23.104.0.1:53460 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:24:24.774 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57808 10 6452 1 2025-12-04 15:24:33.721 00:00:10.369 TCP 23.104.0.1:57192 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:25:25.006 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40444 10 6452 1 2025-12-04 15:25:34.125 00:00:10.328 TCP 23.104.0.1:52284 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:26:25.226 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38174 10 6452 1 2025-12-04 15:26:34.489 00:00:10.324 TCP 23.104.0.1:40994 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:27:06.386 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 15:27:06.453 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 15:27:25.437 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39646 10 6452 1 2025-12-04 15:27:34.850 00:00:10.381 TCP 23.104.0.1:39146 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:28:25.674 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57934 10 6452 1 2025-12-04 15:28:35.270 00:00:10.366 TCP 23.104.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:25:07.595 00:05:04.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 15:25:07.593 00:05:04.916 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 15:29:25.890 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45096 10 6452 1 2025-12-04 15:29:35.674 00:00:10.368 TCP 23.104.0.1:59640 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:30:26.111 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:32934 10 6452 1 2025-12-04 15:30:36.108 00:00:10.371 TCP 23.104.0.1:54646 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:31:26.338 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36190 10 6452 1 2025-12-04 15:31:36.528 00:00:10.368 TCP 23.104.0.1:59650 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:32:06.552 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 15:32:06.543 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 15:32:26.557 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43282 10 6452 1 2025-12-04 15:32:36.929 00:00:10.394 TCP 23.104.0.1:52916 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:33:26.793 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52964 10 6452 1 2025-12-04 15:33:37.361 00:00:10.365 TCP 23.104.0.1:38754 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:34:27.016 00:00:10.771 TCP 1.101.0.1:3000 -> 22.102.0.1:46964 10 6452 1 2025-12-04 15:34:37.760 00:00:10.382 TCP 23.104.0.1:44008 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:31:07.596 00:05:04.909 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 15:31:07.596 00:05:04.913 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 15:35:27.818 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39598 10 6452 1 2025-12-04 15:35:38.198 00:00:10.361 TCP 23.104.0.1:49196 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:36:28.044 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43978 10 6452 1 2025-12-04 15:36:38.596 00:00:10.329 TCP 23.104.0.1:42358 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:37:06.855 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 15:37:06.801 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 15:37:28.252 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35012 10 6452 1 2025-12-04 15:37:38.963 00:00:10.365 TCP 23.104.0.1:35418 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:38:28.462 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34296 10 6452 1 2025-12-04 15:38:39.368 00:00:10.364 TCP 23.104.0.1:53590 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:39:28.682 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39372 10 6452 1 2025-12-04 15:39:39.770 00:00:10.639 TCP 23.104.0.1:51462 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:40:28.897 00:00:10.287 TCP 1.101.0.1:3000 -> 22.102.0.1:57558 10 6452 1 2025-12-04 15:40:40.444 00:00:10.367 TCP 23.104.0.1:55286 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:37:07.599 00:05:04.908 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 15:37:07.595 00:05:04.914 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 15:41:29.229 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60326 10 6452 1 2025-12-04 15:41:40.846 00:00:10.386 TCP 23.104.0.1:46270 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:42:06.791 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 15:42:06.859 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 15:42:29.446 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51468 10 6452 1 2025-12-04 15:42:41.268 00:00:10.492 TCP 23.104.0.1:46404 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:43:29.655 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:39652 12 10375 1 2025-12-04 15:43:41.801 00:00:10.411 TCP 23.104.0.1:46218 -> 1.101.0.1:3000 15 1926 1 2025-12-04 15:44:29.896 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52018 10 6452 1 2025-12-04 15:44:42.250 00:00:10.370 TCP 23.104.0.1:39630 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:45:30.114 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:37202 10 6452 1 2025-12-04 15:45:42.658 00:00:10.367 TCP 23.104.0.1:54822 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:46:30.366 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50398 10 6452 1 2025-12-04 15:46:43.071 00:00:10.371 TCP 23.104.0.1:40422 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:47:06.782 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 15:43:07.602 00:05:04.911 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 15:47:06.984 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 15:43:07.598 00:05:04.917 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 15:47:30.545 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57914 10 6452 1 2025-12-04 15:47:43.478 00:00:10.364 TCP 23.104.0.1:42696 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:48:30.766 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38526 10 6452 1 2025-12-04 15:48:43.875 00:00:10.376 TCP 23.104.0.1:41018 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:49:30.942 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:60774 10 6452 1 2025-12-04 15:49:44.285 00:00:10.366 TCP 23.104.0.1:48722 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:50:31.148 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35460 10 6452 1 2025-12-04 15:50:44.686 00:00:10.366 TCP 23.104.0.1:39202 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:51:31.327 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53202 10 6452 1 2025-12-04 15:51:45.102 00:00:10.374 TCP 23.104.0.1:34872 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:52:06.952 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 15:52:07.030 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 15:52:31.545 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40352 10 6452 1 2025-12-04 15:52:45.521 00:00:10.327 TCP 23.104.0.1:60962 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:49:07.600 00:05:04.917 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 15:49:07.602 00:05:04.912 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 15:53:31.760 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44134 10 6452 1 2025-12-04 15:53:45.889 00:00:10.372 TCP 23.104.0.1:51434 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:54:31.973 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35792 10 6452 1 2025-12-04 15:54:46.299 00:00:10.415 TCP 23.104.0.1:60084 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:55:32.217 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45636 10 6452 1 2025-12-04 15:55:46.749 00:00:10.364 TCP 23.104.0.1:54854 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:56:32.436 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38660 10 6452 1 2025-12-04 15:56:47.151 00:00:10.365 TCP 23.104.0.1:42038 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:57:06.880 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 15:57:07.016 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 15:57:32.658 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52506 10 6452 1 2025-12-04 15:57:47.559 00:00:10.332 TCP 23.104.0.1:53238 -> 1.101.0.1:3000 11 1507 1 2025-12-04 15:58:32.883 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54848 10 6452 1 Summary: total flows: 163, total bytes: 501183, total packets: 1567, avg bps: 1050, avg pps: 0, avg bpp: 319 Time window: 2025-12-04 14:55:07 - 2025-12-04 15:58:43 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0022s Wall: 0.0021s flows/second: 78026.9 Runtime: 0.0021s