Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 02:55:05.597 00:05:04.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 02:58:57.383 00:00:10.369 TCP 23.104.0.1:36274 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:55:05.595 00:05:04.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 02:59:56.092 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 02:59:41.841 00:00:10.573 TCP 1.101.0.1:3000 -> 22.102.0.1:33378 10 6452 1 2025-11-30 02:59:55.946 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 02:59:57.790 00:00:10.351 TCP 23.104.0.1:49598 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:00:42.455 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52482 10 6452 1 2025-11-30 03:00:58.192 00:00:10.366 TCP 23.104.0.1:41102 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:01:42.632 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55526 10 6452 1 2025-11-30 03:01:58.596 00:00:10.332 TCP 23.104.0.1:58610 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:02:42.845 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50200 10 6452 1 2025-11-30 03:02:58.969 00:00:10.379 TCP 23.104.0.1:43788 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:03:43.078 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50052 10 6452 1 2025-11-30 03:03:59.382 00:00:10.365 TCP 23.104.0.1:52670 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:04:43.299 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38710 10 6452 1 2025-11-30 03:04:56.339 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 03:04:56.007 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 03:01:05.596 00:05:04.742 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 03:04:59.785 00:00:10.366 TCP 23.104.0.1:42844 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:01:05.599 00:05:04.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 03:05:43.480 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48756 11 6775 1 2025-11-30 03:06:00.189 00:00:10.364 TCP 23.104.0.1:44234 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:06:43.692 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52090 10 6452 1 2025-11-30 03:07:00.593 00:00:10.326 TCP 23.104.0.1:33352 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:07:43.873 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54726 10 6452 1 2025-11-30 03:08:00.966 00:00:10.478 TCP 23.104.0.1:51114 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:08:44.099 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46662 10 6452 1 2025-11-30 03:09:01.478 00:00:10.325 TCP 23.104.0.1:41286 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:09:44.310 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35176 10 6452 1 2025-11-30 03:09:56.244 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 03:09:56.300 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 03:10:01.845 00:00:10.344 TCP 23.104.0.1:35454 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:10:44.487 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:43814 10 6452 1 2025-11-30 03:07:05.599 00:05:04.742 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 03:07:05.600 00:05:04.738 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 03:11:02.229 00:00:10.366 TCP 23.104.0.1:55196 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:11:44.726 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:37346 10 6452 1 2025-11-30 03:12:02.641 00:00:10.369 TCP 23.104.0.1:42420 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:12:44.910 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41822 10 6452 1 2025-11-30 03:13:03.058 00:00:10.364 TCP 23.104.0.1:56358 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:13:45.128 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59100 10 6452 1 2025-11-30 03:14:03.465 00:00:10.323 TCP 23.104.0.1:47860 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:14:56.704 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 03:14:45.302 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51006 10 6452 1 2025-11-30 03:14:56.647 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 03:15:03.831 00:00:10.390 TCP 23.104.0.1:49402 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:15:45.511 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50950 10 6452 1 2025-11-30 03:16:04.261 00:00:10.365 TCP 23.104.0.1:57606 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:16:45.733 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55038 10 6452 1 2025-11-30 03:13:05.600 00:05:04.743 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 03:13:05.602 00:05:04.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 03:17:04.664 00:00:10.397 TCP 23.104.0.1:55932 -> 1.101.0.1:3000 15 1926 1 2025-11-30 03:17:45.943 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:58776 12 10375 1 2025-11-30 03:18:05.106 00:00:10.369 TCP 23.104.0.1:45364 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:18:46.203 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43218 10 6452 1 2025-11-30 03:19:05.511 00:00:10.362 TCP 23.104.0.1:54498 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:19:46.411 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60450 10 6452 1 2025-11-30 03:19:56.461 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 03:19:56.094 00:00:00.056 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 03:20:05.912 00:00:10.363 TCP 23.104.0.1:44842 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:20:46.629 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42156 10 6452 1 2025-11-30 03:21:06.315 00:00:10.325 TCP 23.104.0.1:56098 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:21:46.851 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38100 10 6452 1 2025-11-30 03:22:06.682 00:00:10.370 TCP 23.104.0.1:44844 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:22:47.084 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44378 10 6452 1 2025-11-30 03:19:05.602 00:05:04.738 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 03:19:05.601 00:05:04.743 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 03:23:07.108 00:00:10.362 TCP 23.104.0.1:34600 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:23:47.298 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40882 10 6452 1 2025-11-30 03:24:07.528 00:00:10.369 TCP 23.104.0.1:40492 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:24:56.532 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 03:24:56.601 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 03:24:47.510 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60826 10 6452 1 2025-11-30 03:25:07.934 00:00:10.377 TCP 23.104.0.1:54874 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:25:47.681 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54828 10 6452 1 2025-11-30 03:26:08.356 00:00:10.369 TCP 23.104.0.1:49510 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:26:47.916 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53432 10 6452 1 2025-11-30 03:27:08.761 00:00:10.385 TCP 23.104.0.1:42884 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:27:48.122 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51650 10 6452 1 2025-11-30 03:28:09.184 00:00:10.366 TCP 23.104.0.1:44142 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:28:48.338 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49318 10 6452 1 2025-11-30 03:25:05.601 00:05:04.744 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 03:25:05.605 00:05:04.739 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 03:29:09.590 00:00:10.370 TCP 23.104.0.1:32974 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:29:56.614 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 03:29:56.605 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 03:29:48.547 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55774 10 6452 1 2025-11-30 03:30:10.006 00:00:10.364 TCP 23.104.0.1:59408 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:30:48.727 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45074 10 6452 1 2025-11-30 03:31:10.414 00:00:10.365 TCP 23.104.0.1:37314 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:31:48.957 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54762 10 6452 1 2025-11-30 03:32:10.819 00:00:10.364 TCP 23.104.0.1:52286 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:32:49.185 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43758 10 6452 1 2025-11-30 03:33:11.230 00:00:10.361 TCP 23.104.0.1:47378 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:33:49.397 00:00:10.420 TCP 1.101.0.1:3000 -> 22.102.0.1:48786 10 6452 1 2025-11-30 03:34:11.628 00:00:10.321 TCP 23.104.0.1:37032 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:34:56.675 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 03:34:56.880 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 03:34:49.855 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58192 10 6452 1 2025-11-30 03:31:05.604 00:05:04.739 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 03:31:05.602 00:05:04.744 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 03:35:11.986 00:00:10.368 TCP 23.104.0.1:46306 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:35:50.079 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38422 10 6452 1 2025-11-30 03:36:12.393 00:00:10.326 TCP 23.104.0.1:46552 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:36:50.262 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59636 10 6452 1 2025-11-30 03:37:12.760 00:00:10.370 TCP 23.104.0.1:40506 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:37:50.483 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37336 12 6556 1 2025-11-30 03:38:13.164 00:00:10.368 TCP 23.104.0.1:34302 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:38:50.706 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59314 10 6452 1 2025-11-30 03:39:13.563 00:00:10.366 TCP 23.104.0.1:50692 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:39:56.740 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 03:39:56.721 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 03:39:50.922 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:53618 10 6452 1 2025-11-30 03:40:13.965 00:00:10.379 TCP 23.104.0.1:48522 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:40:51.110 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56712 10 6452 1 2025-11-30 03:37:05.606 00:05:04.740 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 03:37:05.605 00:05:04.744 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 03:41:14.383 00:00:10.363 TCP 23.104.0.1:50898 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:41:51.319 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42318 10 6452 1 2025-11-30 03:42:14.785 00:00:10.324 TCP 23.104.0.1:33964 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:42:51.543 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42454 10 6452 1 2025-11-30 03:43:15.146 00:00:10.366 TCP 23.104.0.1:39792 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:43:51.754 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40186 10 6452 1 2025-11-30 03:44:15.557 00:00:10.364 TCP 23.104.0.1:38766 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:44:56.839 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 03:44:56.910 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 03:44:51.979 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:55610 10 6452 1 2025-11-30 03:45:15.958 00:00:10.370 TCP 23.104.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:45:52.223 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52304 10 6452 1 2025-11-30 03:46:16.361 00:00:10.320 TCP 23.104.0.1:46856 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:46:52.447 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57746 10 6452 1 2025-11-30 03:43:05.609 00:05:04.743 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 03:43:05.605 00:05:04.748 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 03:47:16.718 00:00:10.331 TCP 23.104.0.1:60428 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:47:52.666 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:43736 10 6452 1 2025-11-30 03:48:17.099 00:00:14.573 TCP 23.104.0.1:59768 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:48:52.852 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55814 10 6452 1 2025-11-30 03:49:21.705 00:00:10.361 TCP 23.104.0.1:59024 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:49:57.201 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 03:49:56.982 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 03:49:53.081 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:56152 10 6452 1 2025-11-30 03:50:22.107 00:00:10.357 TCP 23.104.0.1:41222 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:50:53.269 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53772 10 6452 1 2025-11-30 03:51:22.505 00:00:10.365 TCP 23.104.0.1:58690 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:51:53.486 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36614 10 6452 1 2025-11-30 03:52:22.911 00:00:10.441 TCP 23.104.0.1:36686 -> 1.101.0.1:3000 15 1926 1 2025-11-30 03:52:53.699 00:00:11.440 TCP 1.101.0.1:3000 -> 22.102.0.1:48268 12 10375 1 2025-11-30 03:49:05.609 00:05:04.745 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 03:49:05.606 00:05:04.751 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 03:53:23.395 00:00:11.085 TCP 23.104.0.1:53554 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:53:55.177 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37432 10 6452 1 2025-11-30 03:54:24.516 00:00:10.366 TCP 23.104.0.1:35520 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:54:56.988 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 03:54:57.128 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 03:54:55.391 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56456 10 6452 1 2025-11-30 03:55:24.922 00:00:10.388 TCP 23.104.0.1:37798 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:55:55.603 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44900 10 6452 1 2025-11-30 03:56:25.347 00:00:10.326 TCP 23.104.0.1:55548 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:56:55.815 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39798 10 6452 1 2025-11-30 03:57:25.715 00:00:11.877 TCP 23.104.0.1:60792 -> 1.101.0.1:3000 11 1507 1 2025-11-30 03:57:56.065 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51738 10 6452 1 2025-11-30 03:58:27.630 00:00:10.390 TCP 23.104.0.1:40404 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 501007, total packets: 1577, avg bps: 1051, avg pps: 0, avg bpp: 317 Time window: 2025-11-30 02:55:05 - 2025-11-30 03:58:38 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0049s User: 0.0008s Wall: 0.0022s flows/second: 75252.8 Runtime: 0.0022s