Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 17:55:08.162 00:05:04.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 17:59:41.717 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60314 10 6452 1 2025-12-05 17:59:38.694 00:00:10.368 TCP 23.104.0.1:46352 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:00:39.104 00:00:10.370 TCP 23.104.0.1:60834 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:00:41.932 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:53974 10 6452 1 2025-12-05 18:01:39.515 00:00:10.366 TCP 23.104.0.1:45806 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:01:42.170 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:51922 10 6452 1 2025-12-05 18:02:38.545 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 18:02:38.695 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 18:02:39.931 00:00:10.384 TCP 23.104.0.1:36394 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:02:42.347 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46684 10 6452 1 2025-12-05 18:03:40.355 00:00:10.360 TCP 23.104.0.1:47160 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:03:42.581 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50362 10 6452 1 2025-12-05 18:00:08.160 00:05:04.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 18:04:40.752 00:00:10.362 TCP 23.104.0.1:33894 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:04:42.754 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41478 10 6452 1 2025-12-05 18:01:08.163 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 18:05:41.150 00:00:10.369 TCP 23.104.0.1:33706 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:05:42.927 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:54530 10 6452 1 2025-12-05 18:06:41.555 00:00:10.364 TCP 23.104.0.1:37552 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:06:43.121 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60202 10 6452 1 2025-12-05 18:07:38.860 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 18:07:38.966 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 18:07:41.955 00:00:10.384 TCP 23.104.0.1:40170 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:07:43.298 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60668 10 6452 1 2025-12-05 18:08:42.379 00:00:10.367 TCP 23.104.0.1:54662 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:08:43.476 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33514 10 6452 1 2025-12-05 18:09:43.652 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:39212 10 6452 1 2025-12-05 18:09:42.791 00:00:10.333 TCP 23.104.0.1:39990 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:06:08.163 00:05:04.905 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 18:10:43.150 00:00:10.324 TCP 23.104.0.1:37938 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:10:43.854 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38280 10 6452 1 2025-12-05 18:07:08.164 00:05:04.901 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 18:11:44.084 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40268 10 6452 1 2025-12-05 18:11:43.514 00:00:10.364 TCP 23.104.0.1:49266 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:12:38.698 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 18:12:38.766 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 18:12:44.292 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56260 10 6452 1 2025-12-05 18:12:43.918 00:00:10.387 TCP 23.104.0.1:44628 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:13:44.346 00:00:10.365 TCP 23.104.0.1:49412 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:13:44.520 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59968 10 6452 1 2025-12-05 18:14:44.734 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47880 10 6452 1 2025-12-05 18:14:44.751 00:00:10.366 TCP 23.104.0.1:52346 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:15:45.156 00:00:10.364 TCP 23.104.0.1:41842 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:15:44.944 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:49232 10 6452 1 2025-12-05 18:12:08.164 00:05:04.906 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 18:16:45.559 00:00:10.360 TCP 23.104.0.1:51596 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:16:45.176 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41790 10 6452 1 2025-12-05 18:13:08.166 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 18:17:38.882 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 18:17:38.610 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 18:17:45.389 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50440 10 6452 1 2025-12-05 18:17:45.958 00:00:10.368 TCP 23.104.0.1:41266 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:18:46.358 00:00:10.361 TCP 23.104.0.1:46234 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:18:45.618 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60590 10 6452 1 2025-12-05 18:19:45.828 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54990 12 6556 1 2025-12-05 18:19:46.760 00:00:10.371 TCP 23.104.0.1:40796 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:20:46.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48250 10 6452 1 2025-12-05 18:20:47.168 00:00:10.327 TCP 23.104.0.1:41520 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:21:46.296 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40270 10 6452 1 2025-12-05 18:21:47.533 00:00:10.359 TCP 23.104.0.1:58710 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:18:08.165 00:05:04.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 18:22:38.702 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 18:22:38.846 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 18:22:46.508 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56382 10 6452 1 2025-12-05 18:22:47.927 00:00:10.388 TCP 23.104.0.1:41542 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:19:08.174 00:05:04.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 18:23:46.743 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51516 10 6452 1 2025-12-05 18:23:48.355 00:00:10.362 TCP 23.104.0.1:35296 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:24:46.913 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57936 10 6452 1 2025-12-05 18:24:48.758 00:00:10.375 TCP 23.104.0.1:54574 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:25:47.124 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56620 10 6452 1 2025-12-05 18:25:49.171 00:00:10.378 TCP 23.104.0.1:49184 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:26:47.339 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57426 10 6452 1 2025-12-05 18:26:49.591 00:00:10.361 TCP 23.104.0.1:43614 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:27:38.933 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 18:27:38.801 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 18:27:47.560 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37772 10 6452 1 2025-12-05 18:27:49.991 00:00:10.382 TCP 23.104.0.1:48312 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:24:08.174 00:05:04.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 18:28:50.413 00:00:10.369 TCP 23.104.0.1:35714 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:28:47.786 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49778 10 6452 1 2025-12-05 18:25:08.177 00:05:04.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 18:29:47.997 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33898 10 6452 1 2025-12-05 18:29:50.821 00:00:10.365 TCP 23.104.0.1:46626 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:30:51.220 00:00:10.372 TCP 23.104.0.1:43132 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:30:48.240 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42848 10 6452 1 2025-12-05 18:31:48.453 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60142 10 6452 1 2025-12-05 18:31:51.635 00:00:10.366 TCP 23.104.0.1:34744 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:32:39.175 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 18:32:39.214 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 18:32:48.626 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50552 10 6452 1 2025-12-05 18:32:52.046 00:00:10.369 TCP 23.104.0.1:53606 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:33:48.854 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:38934 10 6452 1 2025-12-05 18:33:52.456 00:00:10.361 TCP 23.104.0.1:44430 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:30:08.176 00:05:04.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 18:34:49.104 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50552 10 6452 1 2025-12-05 18:34:52.854 00:00:10.341 TCP 23.104.0.1:55446 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:31:08.178 00:05:04.899 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 18:35:49.321 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40790 10 6452 1 2025-12-05 18:35:53.228 00:00:10.369 TCP 23.104.0.1:45466 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:36:49.543 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55044 10 6452 1 2025-12-05 18:36:53.636 00:00:10.374 TCP 23.104.0.1:53004 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:37:39.466 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 18:37:39.570 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 18:37:49.766 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53346 10 6452 1 2025-12-05 18:37:54.050 00:00:10.326 TCP 23.104.0.1:38694 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:38:49.984 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32810 10 6452 1 2025-12-05 18:38:54.412 00:00:10.366 TCP 23.104.0.1:41512 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:39:50.202 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56250 10 6452 1 2025-12-05 18:39:54.817 00:00:10.327 TCP 23.104.0.1:33434 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:36:08.176 00:05:04.908 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 18:40:50.377 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33666 10 6452 1 2025-12-05 18:40:55.189 00:00:10.360 TCP 23.104.0.1:37368 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:37:08.178 00:05:04.900 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 18:41:50.592 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53398 10 6452 1 2025-12-05 18:41:55.586 00:00:10.368 TCP 23.104.0.1:43586 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:42:39.389 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 18:42:39.235 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 18:42:50.802 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57744 10 6452 1 2025-12-05 18:42:55.992 00:00:10.365 TCP 23.104.0.1:33694 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:43:51.027 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59390 10 6452 1 2025-12-05 18:43:56.395 00:00:10.377 TCP 23.104.0.1:46378 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:44:51.240 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55732 10 6452 1 2025-12-05 18:44:56.809 00:00:10.329 TCP 23.104.0.1:36576 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:45:51.456 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45442 10 6452 1 2025-12-05 18:45:57.174 00:00:10.366 TCP 23.104.0.1:45812 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:42:08.179 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 18:46:51.663 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58298 10 6452 1 2025-12-05 18:46:57.574 00:00:10.321 TCP 23.104.0.1:54068 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:43:08.182 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 18:47:39.371 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 18:47:39.502 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 18:47:51.833 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33664 10 6452 1 2025-12-05 18:47:57.933 00:00:10.377 TCP 23.104.0.1:43834 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:48:52.010 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:41506 12 10375 1 2025-12-05 18:48:58.346 00:00:10.401 TCP 23.104.0.1:51674 -> 1.101.0.1:3000 15 1926 1 2025-12-05 18:49:52.254 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35144 10 6452 1 2025-12-05 18:49:58.786 00:00:10.549 TCP 23.104.0.1:52088 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:50:52.468 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48546 10 6452 1 2025-12-05 18:50:59.372 00:00:10.361 TCP 23.104.0.1:49852 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:51:52.685 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:44228 10 6452 1 2025-12-05 18:51:59.769 00:00:10.327 TCP 23.104.0.1:51982 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:48:08.182 00:05:04.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 18:52:39.476 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 18:52:39.276 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 18:52:52.876 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53240 10 6452 1 2025-12-05 18:53:00.135 00:00:10.373 TCP 23.104.0.1:44934 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:49:08.186 00:05:04.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 18:53:53.105 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38654 10 6452 1 2025-12-05 18:54:00.550 00:00:10.367 TCP 23.104.0.1:42556 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:54:53.319 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44276 10 6452 1 2025-12-05 18:55:00.952 00:00:10.380 TCP 23.104.0.1:58080 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:55:53.531 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49944 10 6452 1 2025-12-05 18:56:01.387 00:00:10.367 TCP 23.104.0.1:35250 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:56:53.748 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50494 10 6452 1 2025-12-05 18:57:01.788 00:00:10.374 TCP 23.104.0.1:46644 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:57:39.648 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 18:57:39.525 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 18:57:53.963 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55518 10 6452 1 2025-12-05 18:54:08.183 00:05:04.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 18:58:02.201 00:00:10.369 TCP 23.104.0.1:53520 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494835, total packets: 1559, avg bps: 1029, avg pps: 0, avg bpp: 317 Time window: 2025-12-05 17:55:08 - 2025-12-05 18:59:13 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0049s User: 0.0008s Wall: 0.0022s flows/second: 73808.1 Runtime: 0.0022s