Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 04:55:06.522 00:05:04.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 04:59:04.116 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43502 10 6452 1 2025-12-02 04:55:06.520 00:05:04.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 04:59:15.675 00:00:10.364 TCP 23.104.0.1:45500 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:00:04.322 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37460 10 6452 1 2025-12-02 05:00:16.102 00:00:10.370 TCP 23.104.0.1:34308 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:00:56.346 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 05:00:56.026 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 05:01:04.545 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41310 10 6452 1 2025-12-02 05:01:16.507 00:00:10.331 TCP 23.104.0.1:37462 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:02:04.762 00:00:10.535 TCP 1.101.0.1:3000 -> 22.102.0.1:58776 10 6452 1 2025-12-02 05:02:16.873 00:00:10.367 TCP 23.104.0.1:58626 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:03:05.353 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49306 10 6452 1 2025-12-02 05:03:17.280 00:00:10.368 TCP 23.104.0.1:57568 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:04:05.569 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48378 10 6452 1 2025-12-02 05:04:17.680 00:00:10.374 TCP 23.104.0.1:44460 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:01:06.522 00:05:04.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 05:05:05.778 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34302 10 6452 1 2025-12-02 05:01:06.523 00:05:04.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 05:05:18.105 00:00:10.326 TCP 23.104.0.1:33250 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:05:56.206 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 05:05:56.173 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 05:06:05.996 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44018 10 6452 1 2025-12-02 05:06:18.471 00:00:10.363 TCP 23.104.0.1:39448 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:07:06.167 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34520 10 6452 1 2025-12-02 05:07:18.873 00:00:10.368 TCP 23.104.0.1:48808 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:08:06.378 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37246 12 10375 1 2025-12-02 05:08:19.273 00:00:10.444 TCP 23.104.0.1:55146 -> 1.101.0.1:3000 15 1926 1 2025-12-02 05:09:06.612 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59642 10 6452 1 2025-12-02 05:09:19.756 00:00:10.335 TCP 23.104.0.1:34644 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:10:06.786 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35678 10 6452 1 2025-12-02 05:10:20.132 00:00:10.362 TCP 23.104.0.1:40806 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:10:56.564 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 05:10:56.468 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 05:07:06.526 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 05:07:06.523 00:05:04.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 05:11:07.002 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43314 10 6452 1 2025-12-02 05:11:20.542 00:00:10.369 TCP 23.104.0.1:51442 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:12:07.220 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41550 10 6452 1 2025-12-02 05:12:20.948 00:00:10.370 TCP 23.104.0.1:56422 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:13:07.433 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:56300 11 6504 1 2025-12-02 05:14:07.717 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59604 10 6452 1 2025-12-02 05:13:21.356 00:01:10.783 TCP 23.104.0.1:47792 -> 1.101.0.1:3000 22 3014 1 2025-12-02 05:15:07.928 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:59754 10 6452 1 2025-12-02 05:15:22.178 00:00:10.338 TCP 23.104.0.1:53778 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:15:56.576 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 05:15:56.691 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 05:16:08.123 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53458 10 6452 1 2025-12-02 05:16:22.557 00:00:10.361 TCP 23.104.0.1:36050 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:13:06.527 00:05:04.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 05:13:06.526 00:05:04.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 05:17:08.335 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40286 10 6452 1 2025-12-02 05:17:22.958 00:00:10.390 TCP 23.104.0.1:42652 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:18:08.547 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57190 10 6452 1 2025-12-02 05:18:23.388 00:00:10.372 TCP 23.104.0.1:32850 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:19:08.770 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55954 10 6452 1 2025-12-02 05:19:23.801 00:00:10.373 TCP 23.104.0.1:43924 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:20:08.949 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40270 10 6452 1 2025-12-02 05:20:24.216 00:00:10.361 TCP 23.104.0.1:56758 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:20:56.770 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 05:20:56.751 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 05:21:09.176 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48152 10 6452 1 2025-12-02 05:21:24.619 00:00:10.371 TCP 23.104.0.1:60120 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:22:09.394 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55014 10 6452 1 2025-12-02 05:22:25.027 00:00:10.442 TCP 23.104.0.1:50976 -> 1.101.0.1:3000 15 1926 1 2025-12-02 05:19:06.528 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 05:19:06.526 00:05:04.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 05:23:09.623 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:45254 12 10375 1 2025-12-02 05:23:25.514 00:00:10.784 TCP 23.104.0.1:47884 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:24:09.871 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35140 10 6452 1 2025-12-02 05:24:26.336 00:00:10.324 TCP 23.104.0.1:48048 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:25:10.097 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:46384 10 6452 1 2025-12-02 05:25:26.694 00:00:10.359 TCP 23.104.0.1:43712 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:25:56.803 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 05:25:56.800 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 05:26:10.282 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34802 10 6452 1 2025-12-02 05:26:27.096 00:00:10.366 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:27:10.493 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56516 10 6452 1 2025-12-02 05:27:27.500 00:00:10.363 TCP 23.104.0.1:57956 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:28:10.704 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:42902 10 6452 1 2025-12-02 05:28:27.907 00:00:10.362 TCP 23.104.0.1:47222 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:25:06.529 00:05:04.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 05:25:06.527 00:05:04.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 05:29:10.955 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39772 10 6452 1 2025-12-02 05:29:28.309 00:00:10.364 TCP 23.104.0.1:52216 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:30:11.184 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51442 10 6452 1 2025-12-02 05:30:28.712 00:00:10.324 TCP 23.104.0.1:57404 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:30:56.970 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 05:30:56.822 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 05:31:11.408 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46460 10 6452 1 2025-12-02 05:31:29.101 00:00:10.326 TCP 23.104.0.1:37032 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:32:11.622 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52092 10 6452 1 2025-12-02 05:32:29.466 00:00:10.365 TCP 23.104.0.1:52836 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:33:11.849 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39296 10 6452 1 2025-12-02 05:33:29.874 00:00:10.363 TCP 23.104.0.1:45622 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:34:12.082 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42194 10 6452 1 2025-12-02 05:34:30.279 00:00:10.366 TCP 23.104.0.1:37070 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:31:06.530 00:05:04.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 05:31:06.534 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 05:35:12.292 00:00:11.832 TCP 1.101.0.1:3000 -> 22.102.0.1:42218 10 6452 1 2025-12-02 05:35:30.682 00:00:11.268 TCP 23.104.0.1:39074 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:35:56.786 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 05:35:56.779 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 05:36:14.159 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60880 10 6452 1 2025-12-02 05:36:31.989 00:00:10.324 TCP 23.104.0.1:45220 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:37:14.375 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47964 10 6452 1 2025-12-02 05:37:32.349 00:00:10.358 TCP 23.104.0.1:40064 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:38:14.590 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48120 10 6452 1 2025-12-02 05:38:32.751 00:00:10.370 TCP 23.104.0.1:34584 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:39:14.801 00:00:11.371 TCP 1.101.0.1:3000 -> 22.102.0.1:35816 10 6452 1 2025-12-02 05:39:33.159 00:00:10.363 TCP 23.104.0.1:43214 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:40:16.212 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49524 10 6452 1 2025-12-02 05:40:33.567 00:00:10.365 TCP 23.104.0.1:33942 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:40:57.060 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 05:40:57.032 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 05:37:06.531 00:05:04.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 05:37:06.534 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 05:41:16.433 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45228 10 6452 1 2025-12-02 05:41:33.967 00:00:10.326 TCP 23.104.0.1:44844 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:42:16.656 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:51624 10 6452 1 2025-12-02 05:42:34.330 00:00:10.365 TCP 23.104.0.1:59060 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:43:16.886 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44816 10 6452 1 2025-12-02 05:43:34.733 00:00:10.366 TCP 23.104.0.1:37760 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:44:17.115 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39542 10 6452 1 2025-12-02 05:44:35.134 00:00:10.370 TCP 23.104.0.1:45564 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:45:17.288 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47836 10 6452 1 2025-12-02 05:45:35.542 00:00:10.328 TCP 23.104.0.1:53344 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:45:57.004 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 05:45:57.202 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 05:46:17.502 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42246 10 6452 1 2025-12-02 05:46:35.910 00:00:10.328 TCP 23.104.0.1:54804 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:43:06.533 00:05:04.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 05:43:06.534 00:05:04.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 05:47:17.676 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37248 10 6452 1 2025-12-02 05:47:36.277 00:00:10.363 TCP 23.104.0.1:38466 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:48:17.892 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50360 10 6452 1 2025-12-02 05:48:36.687 00:00:10.370 TCP 23.104.0.1:46668 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:49:18.108 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49982 10 6452 1 2025-12-02 05:49:37.110 00:00:10.338 TCP 23.104.0.1:50852 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:50:18.321 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38244 10 6452 1 2025-12-02 05:50:37.492 00:00:10.360 TCP 23.104.0.1:54088 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:50:57.136 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 05:50:57.218 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 05:51:18.541 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:39490 10 6452 1 2025-12-02 05:51:37.887 00:00:10.381 TCP 23.104.0.1:37642 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:52:18.716 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42156 10 6452 1 2025-12-02 05:52:38.304 00:00:10.437 TCP 23.104.0.1:34242 -> 1.101.0.1:3000 15 1926 1 2025-12-02 05:49:06.540 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 05:49:06.536 00:05:04.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 05:53:18.943 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:58350 12 10375 1 2025-12-02 05:53:38.782 00:00:10.370 TCP 23.104.0.1:37208 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:54:19.206 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51724 10 6452 1 2025-12-02 05:54:39.191 00:00:10.365 TCP 23.104.0.1:49238 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:55:19.426 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42848 10 6452 1 2025-12-02 05:55:39.591 00:00:10.369 TCP 23.104.0.1:60366 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:55:57.352 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 05:55:57.155 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 05:56:19.601 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43524 10 6452 1 2025-12-02 05:56:40.008 00:00:10.326 TCP 23.104.0.1:54828 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:57:19.819 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44450 10 6452 1 2025-12-02 05:57:40.373 00:00:10.359 TCP 23.104.0.1:47464 -> 1.101.0.1:3000 11 1507 1 2025-12-02 05:58:20.040 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43110 10 6452 1 2025-12-02 05:58:40.767 00:00:10.375 TCP 23.104.0.1:57890 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 511426, total packets: 1591, avg bps: 1069, avg pps: 0, avg bpp: 321 Time window: 2025-12-02 04:55:06 - 2025-12-02 05:58:51 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0048s User: 0.0019s Wall: 0.0021s flows/second: 76098.8 Runtime: 0.0022s