Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 17:55:06.762 00:05:04.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 17:55:06.759 00:05:04.762 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 17:59:09.661 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34644 10 6452 1 2025-12-02 17:59:08.543 00:00:10.323 TCP 23.104.0.1:45322 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:00:08.903 00:00:10.366 TCP 23.104.0.1:52486 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:00:09.880 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54616 10 6452 1 2025-12-02 18:01:11.916 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 18:01:12.071 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:01:09.323 00:00:10.628 TCP 23.104.0.1:35210 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:01:10.104 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58920 10 6452 1 2025-12-02 18:02:09.990 00:00:10.850 TCP 23.104.0.1:42604 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:02:10.328 00:00:10.474 TCP 1.101.0.1:3000 -> 22.102.0.1:49428 10 6452 1 2025-12-02 18:03:10.849 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50548 10 6452 1 2025-12-02 18:03:10.878 00:00:10.328 TCP 23.104.0.1:56740 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:04:11.089 00:00:10.534 TCP 1.101.0.1:3000 -> 22.102.0.1:48970 10 6452 1 2025-12-02 18:04:11.247 00:00:10.533 TCP 23.104.0.1:40402 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:01:06.759 00:05:04.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 18:01:06.762 00:05:04.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 18:05:11.659 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:34692 10 6452 1 2025-12-02 18:05:11.823 00:00:10.375 TCP 23.104.0.1:51612 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:06:12.189 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:06:12.127 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 18:06:11.828 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51626 10 6452 1 2025-12-02 18:06:12.228 00:00:10.324 TCP 23.104.0.1:40152 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:07:12.082 00:00:10.711 TCP 1.101.0.1:3000 -> 22.102.0.1:46018 10 6452 1 2025-12-02 18:07:12.593 00:00:10.363 TCP 23.104.0.1:43248 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:08:12.832 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46530 10 6452 1 2025-12-02 18:08:13.001 00:00:10.977 TCP 23.104.0.1:55180 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:09:14.015 00:00:10.361 TCP 23.104.0.1:35152 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:09:13.070 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58842 10 6452 1 2025-12-02 18:10:14.420 00:00:10.366 TCP 23.104.0.1:42106 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:10:13.248 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60394 10 6452 1 2025-12-02 18:11:11.939 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 18:07:06.761 00:05:04.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 18:11:12.033 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:07:06.764 00:05:04.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 18:11:14.826 00:00:10.353 TCP 23.104.0.1:43996 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:11:13.480 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40602 10 6452 1 2025-12-02 18:12:13.693 00:00:10.334 TCP 1.101.0.1:3000 -> 22.102.0.1:48636 10 6452 1 2025-12-02 18:12:15.215 00:00:10.415 TCP 23.104.0.1:35450 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:13:15.665 00:00:10.365 TCP 23.104.0.1:58022 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:13:14.083 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41380 10 6452 1 2025-12-02 18:14:14.301 00:00:10.279 TCP 1.101.0.1:3000 -> 22.102.0.1:39210 10 6452 1 2025-12-02 18:14:16.096 00:00:10.703 TCP 23.104.0.1:55196 -> 1.101.0.1:3000 12 1559 1 2025-12-02 18:15:14.617 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49934 10 6452 1 2025-12-02 18:15:16.841 00:00:10.391 TCP 23.104.0.1:49870 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:16:11.934 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 18:16:12.168 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:16:14.827 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59156 10 6452 1 2025-12-02 18:16:17.271 00:00:10.361 TCP 23.104.0.1:55330 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:13:06.764 00:05:04.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 18:13:06.762 00:05:04.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 18:17:15.068 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50556 10 6452 1 2025-12-02 18:17:17.670 00:00:10.363 TCP 23.104.0.1:46004 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:18:15.282 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57342 10 6452 1 2025-12-02 18:18:18.098 00:00:10.374 TCP 23.104.0.1:33990 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:19:15.496 00:00:10.493 TCP 1.101.0.1:3000 -> 22.102.0.1:56184 10 6452 1 2025-12-02 18:19:18.513 00:00:10.592 TCP 23.104.0.1:54342 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:20:16.027 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58728 10 6452 1 2025-12-02 18:20:19.138 00:00:10.326 TCP 23.104.0.1:48712 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:21:12.534 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 18:21:12.631 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:21:16.238 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55486 10 6452 1 2025-12-02 18:21:19.505 00:00:10.361 TCP 23.104.0.1:45662 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:22:16.446 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55436 10 6452 1 2025-12-02 18:22:19.901 00:00:10.366 TCP 23.104.0.1:47680 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:19:06.762 00:05:04.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 18:19:06.765 00:05:04.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 18:23:16.660 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:43782 12 10375 1 2025-12-02 18:23:20.308 00:00:10.397 TCP 23.104.0.1:40072 -> 1.101.0.1:3000 15 1926 1 2025-12-02 18:24:16.861 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:43764 10 6452 1 2025-12-02 18:24:20.741 00:00:10.328 TCP 23.104.0.1:55112 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:25:17.101 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59176 10 6452 1 2025-12-02 18:25:21.109 00:00:10.365 TCP 23.104.0.1:45190 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:26:12.334 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 18:26:12.301 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:26:21.515 00:00:10.369 TCP 23.104.0.1:45736 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:26:17.325 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45030 10 6452 1 2025-12-02 18:27:17.554 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53386 10 6452 1 2025-12-02 18:27:21.921 00:00:10.396 TCP 23.104.0.1:46438 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:28:17.773 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47690 10 6452 1 2025-12-02 18:28:22.353 00:00:10.365 TCP 23.104.0.1:40438 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:25:06.768 00:05:04.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 18:25:06.765 00:05:04.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 18:29:17.996 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59606 10 6452 1 2025-12-02 18:29:22.758 00:00:10.386 TCP 23.104.0.1:46836 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:30:18.225 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44836 12 6556 1 2025-12-02 18:30:23.186 00:00:10.334 TCP 23.104.0.1:33724 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:31:12.433 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 18:31:12.458 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:31:18.450 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51294 10 6452 1 2025-12-02 18:31:23.562 00:00:10.365 TCP 23.104.0.1:48908 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:32:18.665 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39324 10 6452 1 2025-12-02 18:32:23.962 00:00:10.372 TCP 23.104.0.1:55712 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:33:18.885 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41510 10 6452 1 2025-12-02 18:33:24.374 00:00:10.371 TCP 23.104.0.1:51244 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:34:19.105 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38234 10 6452 1 2025-12-02 18:34:24.779 00:00:10.378 TCP 23.104.0.1:49844 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:31:06.767 00:05:04.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 18:31:06.768 00:05:04.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 18:35:19.325 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39250 10 6452 1 2025-12-02 18:35:25.197 00:00:10.382 TCP 23.104.0.1:38842 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:36:12.662 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:36:12.505 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 18:36:19.497 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34380 10 6452 1 2025-12-02 18:36:25.619 00:00:10.327 TCP 23.104.0.1:41996 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:37:19.726 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49304 10 6452 1 2025-12-02 18:37:25.991 00:00:10.360 TCP 23.104.0.1:42672 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:38:19.948 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33778 10 6452 1 2025-12-02 18:38:26.421 00:00:10.365 TCP 23.104.0.1:54634 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:39:20.174 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39134 10 6452 1 2025-12-02 18:39:26.830 00:00:10.373 TCP 23.104.0.1:37314 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:40:20.393 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52780 10 6452 1 2025-12-02 18:40:27.256 00:00:10.362 TCP 23.104.0.1:33092 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:37:06.770 00:05:04.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 18:41:12.688 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:41:12.687 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 18:37:06.767 00:05:04.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 18:41:20.612 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44222 10 6452 1 2025-12-02 18:41:27.663 00:00:10.382 TCP 23.104.0.1:33400 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:42:20.830 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38284 10 6452 1 2025-12-02 18:42:28.099 00:00:10.362 TCP 23.104.0.1:36084 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:43:21.072 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52702 10 6452 1 2025-12-02 18:43:28.500 00:00:10.378 TCP 23.104.0.1:52066 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:44:21.286 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38932 10 6452 1 2025-12-02 18:44:28.918 00:00:10.369 TCP 23.104.0.1:51056 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:45:21.497 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40772 10 6452 1 2025-12-02 18:45:29.325 00:00:10.363 TCP 23.104.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:46:12.886 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:46:12.863 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 18:46:21.707 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41748 10 6452 1 2025-12-02 18:46:29.728 00:00:10.366 TCP 23.104.0.1:54552 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:43:06.767 00:05:04.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 18:43:06.770 00:05:04.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 18:47:21.917 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59898 10 6452 1 2025-12-02 18:47:30.138 00:00:10.368 TCP 23.104.0.1:59316 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:48:22.131 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48760 10 6452 1 2025-12-02 18:48:30.545 00:00:10.322 TCP 23.104.0.1:56880 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:49:22.342 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46018 10 6452 1 2025-12-02 18:49:30.908 00:00:10.323 TCP 23.104.0.1:37696 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:50:22.511 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33194 10 6452 1 2025-12-02 18:50:31.272 00:00:10.367 TCP 23.104.0.1:41022 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:51:12.749 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 18:51:12.755 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:51:22.722 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53044 10 6452 1 2025-12-02 18:51:31.673 00:00:10.329 TCP 23.104.0.1:57560 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:52:22.893 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52758 10 6452 1 2025-12-02 18:52:32.045 00:00:10.329 TCP 23.104.0.1:60700 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:49:06.772 00:05:04.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 18:49:06.775 00:05:04.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 18:53:23.113 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44908 10 6452 1 2025-12-02 18:53:32.411 00:00:10.365 TCP 23.104.0.1:55680 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:54:23.322 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48160 10 6452 1 2025-12-02 18:54:32.810 00:00:10.380 TCP 23.104.0.1:39714 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:55:23.533 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54912 10 6452 1 2025-12-02 18:55:33.230 00:00:10.369 TCP 23.104.0.1:55884 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:56:13.027 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 18:56:12.880 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 18:56:23.751 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38190 10 6452 1 2025-12-02 18:56:33.635 00:00:10.369 TCP 23.104.0.1:50526 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:57:23.962 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:36186 10 6452 1 2025-12-02 18:57:34.053 00:00:10.376 TCP 23.104.0.1:59902 -> 1.101.0.1:3000 11 1507 1 2025-12-02 18:58:24.143 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37268 10 6452 1 2025-12-02 18:58:34.475 00:00:10.325 TCP 23.104.0.1:37270 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502846, total packets: 1581, avg bps: 1053, avg pps: 0, avg bpp: 318 Time window: 2025-12-02 17:55:06 - 2025-12-02 18:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0053s User: 0.0000s Wall: 0.0027s flows/second: 61631.2 Runtime: 0.0027s