Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 05:55:05.636 00:05:04.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 05:55:05.634 00:05:04.768 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 05:59:19.555 00:00:10.362 TCP 23.104.0.1:38064 -> 1.101.0.1:3000 11 1507 1 2025-11-30 05:59:32.415 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53290 10 6452 1 2025-11-30 05:59:59.773 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 05:59:59.721 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 06:00:19.957 00:00:10.364 TCP 23.104.0.1:57242 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:00:32.628 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41050 10 6452 1 2025-11-30 06:01:20.358 00:00:10.363 TCP 23.104.0.1:57540 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:01:32.804 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60038 10 6452 1 2025-11-30 06:02:20.762 00:00:10.409 TCP 23.104.0.1:48484 -> 1.101.0.1:3000 15 1926 1 2025-11-30 06:02:32.984 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:50642 12 10369 1 2025-11-30 06:03:21.208 00:00:10.987 TCP 23.104.0.1:44638 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:03:33.222 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52972 10 6452 1 2025-11-30 06:04:22.230 00:00:12.305 TCP 23.104.0.1:46916 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:04:33.436 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43282 10 6452 1 2025-11-30 06:04:59.813 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 06:04:59.546 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 06:01:05.638 00:05:04.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 06:01:05.637 00:05:04.769 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 06:05:24.573 00:00:10.328 TCP 23.104.0.1:55780 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:05:33.651 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42250 10 6452 1 2025-11-30 06:06:24.942 00:00:10.381 TCP 23.104.0.1:56506 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:06:33.881 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51058 10 6452 1 2025-11-30 06:07:25.358 00:00:10.363 TCP 23.104.0.1:58084 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:07:34.107 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37730 10 6452 1 2025-11-30 06:08:25.762 00:00:10.379 TCP 23.104.0.1:38850 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:08:34.326 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33536 10 6452 1 2025-11-30 06:09:26.174 00:00:10.362 TCP 23.104.0.1:35852 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:09:34.537 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41026 10 6452 1 2025-11-30 06:09:59.682 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 06:09:59.850 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 06:10:26.575 00:00:10.790 TCP 23.104.0.1:39456 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:10:34.755 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50064 10 6452 1 2025-11-30 06:07:05.641 00:05:04.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 06:07:05.639 00:05:04.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 06:11:27.403 00:00:10.365 TCP 23.104.0.1:43406 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:11:34.966 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:55492 10 6452 1 2025-11-30 06:12:27.805 00:00:10.363 TCP 23.104.0.1:55632 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:12:35.202 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58060 10 6452 1 2025-11-30 06:13:28.209 00:00:10.324 TCP 23.104.0.1:41900 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:13:35.414 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33264 10 6452 1 2025-11-30 06:14:28.573 00:00:10.362 TCP 23.104.0.1:59164 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:14:35.581 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41220 10 6452 1 2025-11-30 06:14:59.904 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 06:14:59.806 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 06:15:28.974 00:00:10.730 TCP 23.104.0.1:59638 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:15:35.791 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36058 10 6452 1 2025-11-30 06:16:29.743 00:00:10.397 TCP 23.104.0.1:35396 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:16:36.002 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:39728 10 6452 1 2025-11-30 06:13:05.640 00:05:04.768 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 06:13:05.644 00:05:04.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 06:17:30.179 00:00:10.373 TCP 23.104.0.1:39456 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:17:36.182 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40092 12 6556 1 2025-11-30 06:18:30.591 00:00:10.364 TCP 23.104.0.1:38314 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:18:36.397 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51688 10 6452 1 2025-11-30 06:19:30.994 00:00:10.397 TCP 23.104.0.1:56262 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:19:36.616 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57752 10 6452 1 2025-11-30 06:20:00.371 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 06:20:00.270 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 06:20:31.399 00:00:10.373 TCP 23.104.0.1:34656 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:20:36.837 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40378 10 6452 1 2025-11-30 06:21:31.814 00:00:10.402 TCP 23.104.0.1:56320 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:21:37.079 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35904 10 6452 1 2025-11-30 06:22:32.257 00:00:10.386 TCP 23.104.0.1:41314 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:22:37.292 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49874 10 6452 1 2025-11-30 06:19:05.642 00:05:04.774 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 06:19:05.645 00:05:04.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 06:23:32.682 00:00:10.370 TCP 23.104.0.1:38056 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:23:37.465 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50190 10 6452 1 2025-11-30 06:24:33.106 00:00:10.318 TCP 23.104.0.1:41182 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:24:37.688 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49208 10 6452 1 2025-11-30 06:25:00.323 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 06:25:00.192 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 06:25:33.459 00:00:10.362 TCP 23.104.0.1:33870 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:25:37.923 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60494 10 6452 1 2025-11-30 06:26:33.862 00:00:10.368 TCP 23.104.0.1:48364 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:26:38.145 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54664 10 6452 1 2025-11-30 06:27:34.268 00:00:10.370 TCP 23.104.0.1:34084 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:27:38.367 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34042 10 6452 1 2025-11-30 06:28:34.671 00:00:10.362 TCP 23.104.0.1:37934 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:28:38.542 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47608 12 6556 1 2025-11-30 06:25:05.648 00:05:04.769 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 06:25:05.653 00:05:04.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 06:29:35.103 00:00:10.366 TCP 23.104.0.1:52462 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:29:38.762 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45076 10 6452 1 2025-11-30 06:30:00.327 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 06:30:00.092 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 06:30:35.505 00:00:10.363 TCP 23.104.0.1:42828 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:30:38.935 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:46446 10 6452 1 2025-11-30 06:31:35.904 00:00:10.370 TCP 23.104.0.1:48358 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:31:39.172 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53236 10 6452 1 2025-11-30 06:32:36.310 00:00:10.369 TCP 23.104.0.1:40870 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:32:39.348 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51064 10 6452 1 2025-11-30 06:33:39.562 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45734 10 6452 1 2025-11-30 06:33:36.713 00:00:10.386 TCP 23.104.0.1:55498 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:34:37.135 00:00:10.363 TCP 23.104.0.1:51230 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:34:39.775 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53266 10 6452 1 2025-11-30 06:35:00.508 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 06:35:00.321 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 06:31:05.645 00:05:04.774 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 06:31:05.647 00:05:04.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 06:35:37.536 00:00:10.365 TCP 23.104.0.1:50398 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:35:39.994 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:58504 10 6452 1 2025-11-30 06:36:37.944 00:00:10.329 TCP 23.104.0.1:48986 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:36:40.174 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42692 10 6452 1 2025-11-30 06:37:40.394 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56236 10 6452 1 2025-11-30 06:37:38.322 00:00:10.367 TCP 23.104.0.1:35958 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:38:38.723 00:00:10.380 TCP 23.104.0.1:42104 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:38:40.612 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60514 10 6452 1 2025-11-30 06:39:39.142 00:00:10.368 TCP 23.104.0.1:38672 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:39:40.797 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35862 10 6452 1 2025-11-30 06:40:00.517 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 06:40:00.603 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 06:40:39.548 00:00:10.368 TCP 23.104.0.1:52596 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:40:41.016 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35148 10 6452 1 2025-11-30 06:37:05.647 00:05:04.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 06:37:05.650 00:05:04.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 06:41:41.229 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:47950 10 6452 1 2025-11-30 06:41:39.944 00:00:10.367 TCP 23.104.0.1:43980 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:42:40.353 00:00:10.363 TCP 23.104.0.1:54530 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:42:41.417 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52096 10 6452 1 2025-11-30 06:43:41.585 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40802 10 6452 1 2025-11-30 06:43:40.760 00:00:10.377 TCP 23.104.0.1:37178 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:44:41.176 00:00:10.326 TCP 23.104.0.1:52718 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:44:41.797 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37766 10 6452 1 2025-11-30 06:45:00.470 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 06:45:00.520 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 06:45:41.539 00:00:10.366 TCP 23.104.0.1:59990 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:45:42.028 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35336 10 6452 1 2025-11-30 06:46:41.953 00:00:10.325 TCP 23.104.0.1:58428 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:46:42.198 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34330 10 6452 1 2025-11-30 06:43:05.647 00:05:04.776 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 06:43:05.650 00:05:04.770 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 06:47:42.311 00:00:10.374 TCP 23.104.0.1:46654 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:47:42.411 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50150 10 6452 1 2025-11-30 06:48:42.631 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-11-30 06:48:42.719 00:00:10.367 TCP 23.104.0.1:58822 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:49:42.856 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46396 10 6452 1 2025-11-30 06:49:43.125 00:00:10.321 TCP 23.104.0.1:44970 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:50:00.611 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 06:50:00.484 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 06:50:43.081 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57682 10 6452 1 2025-11-30 06:50:43.485 00:00:10.336 TCP 23.104.0.1:33074 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:51:43.292 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:45416 10 6452 1 2025-11-30 06:51:43.874 00:00:10.328 TCP 23.104.0.1:45150 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:52:43.472 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48288 10 6452 1 2025-11-30 06:52:44.242 00:00:10.365 TCP 23.104.0.1:53058 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:49:05.649 00:05:04.776 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 06:49:05.651 00:05:04.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 06:53:43.685 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52508 10 6452 1 2025-11-30 06:53:44.645 00:00:10.372 TCP 23.104.0.1:35798 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:54:43.853 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36230 10 6452 1 2025-11-30 06:54:45.062 00:00:10.386 TCP 23.104.0.1:59386 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:55:00.682 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 06:55:00.893 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 06:55:44.079 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51430 10 6452 1 2025-11-30 06:55:45.483 00:00:10.322 TCP 23.104.0.1:56706 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:56:44.290 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52700 10 6452 1 2025-11-30 06:56:45.842 00:00:10.387 TCP 23.104.0.1:58580 -> 1.101.0.1:3000 11 1507 1 2025-11-30 06:57:44.504 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52274 10 6452 1 2025-11-30 06:57:46.270 00:00:10.363 TCP 23.104.0.1:48796 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494933, total packets: 1561, avg bps: 1049, avg pps: 0, avg bpp: 317 Time window: 2025-11-30 05:55:05 - 2025-11-30 06:57:56 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0039s User: 0.0016s Wall: 0.0022s flows/second: 74211.1 Runtime: 0.0022s