Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 09:55:06.607 00:05:04.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 09:55:06.604 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 09:59:17.538 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53802 10 6452 1 2025-12-02 09:59:31.707 00:00:10.363 TCP 23.104.0.1:44178 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:00:17.757 00:00:10.604 TCP 1.101.0.1:3000 -> 22.102.0.1:42196 10 6452 1 2025-12-02 10:00:32.109 00:00:10.378 TCP 23.104.0.1:50350 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:01:02.186 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 10:01:02.029 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 10:01:18.402 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60034 10 6452 1 2025-12-02 10:01:32.523 00:00:10.371 TCP 23.104.0.1:54658 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:02:18.572 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59188 10 6452 1 2025-12-02 10:02:32.931 00:00:10.385 TCP 23.104.0.1:36398 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:03:18.741 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41578 10 6452 1 2025-12-02 10:03:33.351 00:00:10.361 TCP 23.104.0.1:38854 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:04:18.916 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56774 10 6452 1 2025-12-02 10:04:33.751 00:00:10.322 TCP 23.104.0.1:49306 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:01:06.604 00:05:04.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 10:01:06.607 00:05:04.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 10:05:19.128 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50572 10 6452 1 2025-12-02 10:05:34.110 00:00:10.324 TCP 23.104.0.1:51474 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:06:02.348 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 10:06:02.312 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 10:06:19.300 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42090 10 6452 1 2025-12-02 10:06:34.471 00:00:10.362 TCP 23.104.0.1:56512 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:07:19.516 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50952 10 6452 1 2025-12-02 10:07:34.875 00:00:10.364 TCP 23.104.0.1:35156 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:08:19.726 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47660 10 6452 1 2025-12-02 10:08:35.281 00:00:10.360 TCP 23.104.0.1:49648 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:09:19.920 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47804 10 6452 1 2025-12-02 10:09:35.682 00:00:10.327 TCP 23.104.0.1:36470 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:10:20.100 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54474 10 6452 1 2025-12-02 10:10:36.049 00:00:10.320 TCP 23.104.0.1:59962 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:11:02.566 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 10:11:02.263 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 10:07:06.607 00:05:04.756 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 10:07:06.605 00:05:04.761 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 10:11:20.276 00:00:10.833 TCP 1.101.0.1:3000 -> 22.102.0.1:55334 10 6452 1 2025-12-02 10:11:36.412 00:00:15.692 TCP 23.104.0.1:59856 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:12:21.146 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37930 10 6452 1 2025-12-02 10:12:42.142 00:00:10.362 TCP 23.104.0.1:41832 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:13:21.362 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48218 10 6452 1 2025-12-02 10:13:42.544 00:00:10.360 TCP 23.104.0.1:55234 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:14:21.571 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36528 10 6452 1 2025-12-02 10:14:42.943 00:00:10.379 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:15:21.793 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56614 10 6452 1 2025-12-02 10:15:43.357 00:00:13.469 TCP 23.104.0.1:33524 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:16:02.518 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 10:16:02.817 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 10:16:22.013 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44632 10 6452 1 2025-12-02 10:16:46.863 00:00:10.396 TCP 23.104.0.1:39628 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:13:06.606 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 10:13:06.610 00:05:04.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 10:17:22.232 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44970 10 6452 1 2025-12-02 10:17:47.301 00:00:10.325 TCP 23.104.0.1:51252 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:18:22.457 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37652 10 6452 1 2025-12-02 10:18:47.668 00:00:10.321 TCP 23.104.0.1:37950 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:19:22.636 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59684 10 6452 1 2025-12-02 10:19:48.032 00:00:10.362 TCP 23.104.0.1:57648 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:20:22.848 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:45306 10 6452 1 2025-12-02 10:20:48.444 00:00:10.362 TCP 23.104.0.1:48724 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:21:02.452 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 10:21:02.485 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 10:21:23.042 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53048 10 6452 1 2025-12-02 10:21:48.843 00:00:10.393 TCP 23.104.0.1:50184 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:22:23.253 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44226 10 6452 1 2025-12-02 10:22:49.274 00:00:10.439 TCP 23.104.0.1:56032 -> 1.101.0.1:3000 15 1926 1 2025-12-02 10:19:06.612 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 10:19:06.614 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 10:23:23.469 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:36432 12 10369 1 2025-12-02 10:23:49.752 00:00:10.315 TCP 23.104.0.1:42056 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:24:23.667 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49324 10 6452 1 2025-12-02 10:24:50.108 00:00:10.363 TCP 23.104.0.1:47876 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:25:23.885 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47116 10 6452 1 2025-12-02 10:25:50.518 00:00:10.326 TCP 23.104.0.1:41232 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:26:02.562 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 10:26:02.617 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 10:26:24.111 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60096 10 6452 1 2025-12-02 10:26:50.886 00:00:10.344 TCP 23.104.0.1:44178 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:27:24.281 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49154 10 6452 1 2025-12-02 10:27:51.272 00:00:10.362 TCP 23.104.0.1:39714 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:28:24.499 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48052 10 6452 1 2025-12-02 10:28:51.673 00:00:10.368 TCP 23.104.0.1:58450 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:25:06.617 00:05:04.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 10:25:06.615 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 10:29:24.723 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37602 10 6452 1 2025-12-02 10:29:52.097 00:00:10.376 TCP 23.104.0.1:40036 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:30:24.930 00:00:11.037 TCP 1.101.0.1:3000 -> 22.102.0.1:38606 10 6452 1 2025-12-02 10:31:02.701 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 10:31:02.819 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 10:30:52.530 00:00:10.367 TCP 23.104.0.1:51120 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:31:26.010 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44720 10 6452 1 2025-12-02 10:31:52.937 00:00:10.371 TCP 23.104.0.1:40758 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:32:26.186 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:34220 10 6452 1 2025-12-02 10:32:53.350 00:00:10.366 TCP 23.104.0.1:40840 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:33:26.377 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59362 10 6452 1 2025-12-02 10:33:53.767 00:00:10.381 TCP 23.104.0.1:49056 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:34:26.605 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47832 10 6452 1 2025-12-02 10:34:54.203 00:00:10.364 TCP 23.104.0.1:38814 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:31:06.617 00:05:04.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 10:31:06.621 00:05:04.755 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 10:35:26.827 00:00:10.460 TCP 1.101.0.1:3000 -> 22.102.0.1:42386 10 6452 1 2025-12-02 10:36:02.973 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 10:36:02.977 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 10:35:54.607 00:00:10.365 TCP 23.104.0.1:34214 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:36:27.341 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54706 10 6452 1 2025-12-02 10:36:55.010 00:00:10.325 TCP 23.104.0.1:41350 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:37:27.556 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44940 10 6452 1 2025-12-02 10:37:55.372 00:00:10.367 TCP 23.104.0.1:48358 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:38:27.767 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48466 10 6452 1 2025-12-02 10:38:55.779 00:00:10.369 TCP 23.104.0.1:49824 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:39:27.985 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49036 10 6452 1 2025-12-02 10:39:56.188 00:00:10.364 TCP 23.104.0.1:59442 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:40:28.214 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48406 10 6452 1 2025-12-02 10:41:03.183 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 10:40:56.593 00:00:10.361 TCP 23.104.0.1:40804 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:41:03.049 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 10:37:06.621 00:05:04.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 10:37:06.619 00:05:04.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 10:41:28.434 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35136 10 6452 1 2025-12-02 10:41:56.993 00:00:10.356 TCP 23.104.0.1:43150 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:42:28.657 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:51480 12 10369 1 2025-12-02 10:42:57.388 00:00:10.436 TCP 23.104.0.1:34702 -> 1.101.0.1:3000 15 1926 1 2025-12-02 10:43:28.904 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51070 10 6452 1 2025-12-02 10:43:57.859 00:00:10.333 TCP 23.104.0.1:33614 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:44:29.127 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34058 10 6452 1 2025-12-02 10:44:58.229 00:00:10.322 TCP 23.104.0.1:58722 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:45:29.336 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56400 10 6452 1 2025-12-02 10:46:03.222 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 10:46:02.986 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 10:45:58.592 00:00:10.363 TCP 23.104.0.1:46580 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:46:29.551 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52772 10 6452 1 2025-12-02 10:43:06.624 00:05:04.757 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 10:46:59.001 00:00:10.368 TCP 23.104.0.1:37296 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:43:06.627 00:05:04.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 10:47:29.724 00:00:10.499 TCP 1.101.0.1:3000 -> 22.102.0.1:35938 10 6452 1 2025-12-02 10:47:59.412 00:00:10.359 TCP 23.104.0.1:46010 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:48:30.262 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60122 10 6452 1 2025-12-02 10:48:59.810 00:00:10.365 TCP 23.104.0.1:60370 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:49:30.485 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37226 10 6452 1 2025-12-02 10:50:00.219 00:00:10.326 TCP 23.104.0.1:42418 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:50:30.709 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45790 10 6452 1 2025-12-02 10:51:03.321 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 10:51:03.354 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 10:51:00.580 00:00:10.418 TCP 23.104.0.1:43584 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:51:30.926 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:57808 10 6452 1 2025-12-02 10:52:01.042 00:00:10.365 TCP 23.104.0.1:52234 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:52:31.165 00:00:12.477 TCP 1.101.0.1:3000 -> 22.102.0.1:35786 10 6452 1 2025-12-02 10:53:01.446 00:00:10.363 TCP 23.104.0.1:60370 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:49:06.628 00:05:04.752 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 10:49:06.627 00:05:04.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 10:53:33.679 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48438 10 6452 1 2025-12-02 10:54:01.847 00:00:10.388 TCP 23.104.0.1:43958 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:54:33.900 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:45850 10 6452 1 2025-12-02 10:55:02.273 00:00:10.366 TCP 23.104.0.1:54196 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:55:34.083 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46702 10 6452 1 2025-12-02 10:56:03.318 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 10:56:03.182 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 10:56:02.680 00:00:10.376 TCP 23.104.0.1:45050 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:56:34.251 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47008 10 6452 1 2025-12-02 10:57:03.105 00:00:10.367 TCP 23.104.0.1:48730 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:57:34.422 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53238 10 6452 1 2025-12-02 10:58:03.514 00:00:10.369 TCP 23.104.0.1:51044 -> 1.101.0.1:3000 11 1507 1 2025-12-02 10:58:34.636 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40104 10 6452 1 Summary: total flows: 163, total bytes: 505513, total packets: 1573, avg bps: 1059, avg pps: 0, avg bpp: 321 Time window: 2025-12-02 09:55:06 - 2025-12-02 10:58:44 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0024s Wall: 0.0023s flows/second: 70048.3 Runtime: 0.0023s