Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 18:55:06.779 00:05:04.757 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 18:55:06.776 00:05:04.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 18:59:24.366 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38076 10 6452 1 2025-12-02 18:59:34.834 00:00:10.393 TCP 23.104.0.1:48656 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:00:24.593 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36394 10 6452 1 2025-12-02 19:00:35.263 00:00:10.365 TCP 23.104.0.1:34628 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:01:12.966 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 19:01:12.949 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 19:01:24.801 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46234 10 6452 1 2025-12-02 19:01:35.668 00:00:10.371 TCP 23.104.0.1:33286 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:02:25.021 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56328 10 6452 1 2025-12-02 19:02:36.099 00:00:10.360 TCP 23.104.0.1:57598 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:03:25.228 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53802 10 6452 1 2025-12-02 19:03:36.496 00:00:10.364 TCP 23.104.0.1:59992 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:04:25.447 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37056 10 6452 1 2025-12-02 19:04:36.898 00:00:10.370 TCP 23.104.0.1:50504 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:01:06.775 00:05:04.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 19:01:06.779 00:05:04.758 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 19:05:25.654 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45044 10 6452 1 2025-12-02 19:05:37.308 00:00:10.365 TCP 23.104.0.1:56420 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:06:12.883 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 19:06:13.131 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 19:06:25.865 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41502 10 6452 1 2025-12-02 19:06:37.709 00:00:10.366 TCP 23.104.0.1:59620 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:07:26.085 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59224 10 6452 1 2025-12-02 19:07:38.117 00:00:10.440 TCP 23.104.0.1:41054 -> 1.101.0.1:3000 15 1926 1 2025-12-02 19:08:26.256 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:58984 12 10369 1 2025-12-02 19:08:38.595 00:00:10.377 TCP 23.104.0.1:46182 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:09:26.500 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46160 10 6452 1 2025-12-02 19:09:39.001 00:00:10.363 TCP 23.104.0.1:57550 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:10:26.728 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51878 10 6452 1 2025-12-02 19:10:39.403 00:00:10.370 TCP 23.104.0.1:49394 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:11:13.221 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 19:07:06.777 00:05:04.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 19:07:06.779 00:05:04.774 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 19:11:13.345 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 19:11:26.945 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46094 10 6452 1 2025-12-02 19:11:39.816 00:00:10.362 TCP 23.104.0.1:43744 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:12:27.169 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55720 10 6452 1 2025-12-02 19:12:40.214 00:00:10.366 TCP 23.104.0.1:44614 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:13:27.379 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50666 10 6452 1 2025-12-02 19:13:40.618 00:00:10.363 TCP 23.104.0.1:34954 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:14:27.592 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51256 10 6452 1 2025-12-02 19:14:41.023 00:00:10.322 TCP 23.104.0.1:44192 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:15:27.808 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56986 10 6452 1 2025-12-02 19:15:41.383 00:00:10.322 TCP 23.104.0.1:36866 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:16:13.295 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 19:16:13.330 00:00:00.016 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 19:16:28.027 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60474 10 6452 1 2025-12-02 19:16:41.746 00:00:10.379 TCP 23.104.0.1:56620 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:13:06.778 00:05:04.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 19:13:06.780 00:05:04.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 19:17:28.241 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:51058 10 6452 1 2025-12-02 19:17:42.162 00:00:11.732 TCP 23.104.0.1:44340 -> 1.101.0.1:3000 15 1926 1 2025-12-02 19:18:28.410 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:49510 12 10375 1 2025-12-02 19:18:43.936 00:00:10.383 TCP 23.104.0.1:59158 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:19:28.649 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46434 10 6452 1 2025-12-02 19:19:44.360 00:00:10.361 TCP 23.104.0.1:42706 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:20:28.874 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:36218 10 6452 1 2025-12-02 19:20:44.759 00:00:10.377 TCP 23.104.0.1:44382 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:21:13.447 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 19:21:13.598 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 19:21:29.112 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59850 10 6452 1 2025-12-02 19:21:45.176 00:00:10.365 TCP 23.104.0.1:51284 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:22:29.320 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47588 10 6452 1 2025-12-02 19:22:45.581 00:00:10.367 TCP 23.104.0.1:36960 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:19:06.781 00:05:04.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 19:19:06.779 00:05:04.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 19:23:29.535 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35976 10 6452 1 2025-12-02 19:23:45.978 00:00:10.363 TCP 23.104.0.1:33662 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:24:29.747 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58362 10 6452 1 2025-12-02 19:24:46.381 00:00:10.361 TCP 23.104.0.1:41670 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:25:29.958 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38704 10 6452 1 2025-12-02 19:25:46.780 00:00:10.323 TCP 23.104.0.1:45504 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:26:13.650 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 19:26:13.444 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 19:26:30.176 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42580 10 6452 1 2025-12-02 19:26:47.142 00:00:10.370 TCP 23.104.0.1:50656 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:27:30.392 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43386 10 6452 1 2025-12-02 19:27:47.555 00:00:10.322 TCP 23.104.0.1:50450 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:28:30.610 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37918 10 6452 1 2025-12-02 19:28:47.926 00:00:10.370 TCP 23.104.0.1:36344 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:25:06.780 00:05:04.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 19:25:06.781 00:05:04.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 19:29:30.826 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44792 10 6452 1 2025-12-02 19:29:48.335 00:00:10.328 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:30:31.055 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55816 10 6452 1 2025-12-02 19:30:48.703 00:00:10.387 TCP 23.104.0.1:36232 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:31:13.589 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 19:31:13.631 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 19:31:31.265 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55196 10 6452 1 2025-12-02 19:31:49.133 00:00:10.362 TCP 23.104.0.1:60754 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:32:31.482 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44096 10 6452 1 2025-12-02 19:32:49.532 00:00:10.364 TCP 23.104.0.1:57938 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:33:31.694 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47616 10 6452 1 2025-12-02 19:33:49.931 00:00:10.392 TCP 23.104.0.1:33570 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:34:31.901 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37084 10 6452 1 2025-12-02 19:34:50.359 00:00:10.367 TCP 23.104.0.1:35386 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:31:06.783 00:05:04.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 19:31:06.781 00:05:04.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 19:35:32.111 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47022 10 6452 1 2025-12-02 19:35:50.762 00:00:10.374 TCP 23.104.0.1:41318 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:36:13.664 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 19:36:13.865 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 19:36:32.324 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44764 10 6452 1 2025-12-02 19:36:51.177 00:00:10.370 TCP 23.104.0.1:57944 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:37:32.497 00:00:10.601 TCP 1.101.0.1:3000 -> 22.102.0.1:44748 10 6452 1 2025-12-02 19:37:51.586 00:00:10.319 TCP 23.104.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:38:33.141 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41214 10 6452 1 2025-12-02 19:38:51.946 00:00:10.329 TCP 23.104.0.1:39680 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:39:33.355 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35188 10 6452 1 2025-12-02 19:39:52.321 00:00:10.365 TCP 23.104.0.1:37548 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:40:33.582 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60624 10 6452 1 2025-12-02 19:40:52.724 00:00:10.373 TCP 23.104.0.1:48014 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:37:06.780 00:05:04.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 19:41:14.001 00:00:00.016 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 19:41:13.964 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 19:37:06.784 00:05:04.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 19:41:33.800 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:46032 10 6452 1 2025-12-02 19:41:53.135 00:00:10.362 TCP 23.104.0.1:60510 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:42:33.974 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59962 10 6452 1 2025-12-02 19:42:53.538 00:00:10.364 TCP 23.104.0.1:47390 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:43:34.204 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37066 10 6452 1 2025-12-02 19:43:53.944 00:00:10.378 TCP 23.104.0.1:43926 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:44:34.414 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43918 10 6452 1 2025-12-02 19:44:54.356 00:00:10.421 TCP 23.104.0.1:53416 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:45:34.623 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58628 10 6452 1 2025-12-02 19:45:54.813 00:00:10.360 TCP 23.104.0.1:38900 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:46:13.979 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 19:46:14.214 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 19:46:34.837 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38216 10 6452 1 2025-12-02 19:46:55.220 00:00:10.321 TCP 23.104.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:43:06.784 00:05:04.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 19:43:06.786 00:05:04.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 19:47:35.087 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:34156 10 6452 1 2025-12-02 19:47:55.579 00:00:10.362 TCP 23.104.0.1:53880 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:48:35.252 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33782 10 6452 1 2025-12-02 19:48:55.981 00:00:10.362 TCP 23.104.0.1:54456 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:49:35.473 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52776 10 6452 1 2025-12-02 19:49:56.379 00:00:10.365 TCP 23.104.0.1:39050 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:50:35.704 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37282 10 6452 1 2025-12-02 19:51:13.987 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 19:50:56.787 00:00:10.365 TCP 23.104.0.1:55418 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:51:13.988 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 19:51:35.918 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39734 10 6452 1 2025-12-02 19:51:57.189 00:00:10.371 TCP 23.104.0.1:47910 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:52:36.141 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35800 10 6452 1 2025-12-02 19:52:57.600 00:00:10.340 TCP 23.104.0.1:38910 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:49:06.789 00:05:04.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 19:49:06.785 00:05:04.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 19:53:36.354 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50878 10 6452 1 2025-12-02 19:53:57.978 00:00:10.367 TCP 23.104.0.1:52798 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:54:36.569 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52660 10 6452 1 2025-12-02 19:54:58.391 00:00:10.322 TCP 23.104.0.1:45856 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:55:36.779 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53896 10 6452 1 2025-12-02 19:55:58.754 00:00:10.381 TCP 23.104.0.1:47398 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:56:13.976 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 19:56:14.068 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 19:56:36.994 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53104 10 6452 1 2025-12-02 19:56:59.175 00:00:10.365 TCP 23.104.0.1:39442 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:57:37.172 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41818 10 6452 1 2025-12-02 19:57:59.574 00:00:10.379 TCP 23.104.0.1:33464 -> 1.101.0.1:3000 11 1507 1 2025-12-02 19:58:37.349 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54252 10 6452 1 Summary: total flows: 163, total bytes: 505519, total packets: 1573, avg bps: 1058, avg pps: 0, avg bpp: 321 Time window: 2025-12-02 18:55:06 - 2025-12-02 19:58:47 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0011s Wall: 0.0029s flows/second: 55819.0 Runtime: 0.0029s