Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 10:55:05.730 00:05:04.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 10:55:05.728 00:05:04.769 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 10:59:41.252 00:00:10.360 TCP 23.104.0.1:51552 -> 1.101.0.1:3000 11 1507 1 2025-11-30 10:59:41.805 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58268 10 6452 1 2025-11-30 11:00:05.814 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 11:00:05.888 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 11:00:41.680 00:00:10.377 TCP 23.104.0.1:39466 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:00:42.027 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35878 10 6452 1 2025-11-30 11:01:42.258 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40942 10 6452 1 2025-11-30 11:01:42.112 00:00:10.363 TCP 23.104.0.1:60982 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:02:42.480 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34398 10 6452 1 2025-11-30 11:02:42.513 00:00:10.364 TCP 23.104.0.1:60744 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:03:42.654 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55078 10 6452 1 2025-11-30 11:03:42.919 00:00:10.546 TCP 23.104.0.1:43696 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:04:42.830 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56984 10 6452 1 2025-11-30 11:04:43.507 00:00:10.367 TCP 23.104.0.1:45972 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:05:05.833 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 11:05:05.756 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 11:01:05.731 00:05:04.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 11:01:05.730 00:05:04.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 11:05:43.908 00:00:10.327 TCP 23.104.0.1:36892 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:05:43.068 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56892 10 6452 1 2025-11-30 11:06:43.280 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55950 10 6452 1 2025-11-30 11:06:44.273 00:00:10.363 TCP 23.104.0.1:59646 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:07:43.496 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40110 10 6452 1 2025-11-30 11:07:44.673 00:00:10.321 TCP 23.104.0.1:57894 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:08:43.712 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:43278 10 6452 1 2025-11-30 11:08:45.032 00:00:10.373 TCP 23.104.0.1:35642 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:09:43.903 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:34446 10 6452 1 2025-11-30 11:09:45.444 00:00:10.364 TCP 23.104.0.1:55880 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:10:05.698 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 11:10:05.929 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 11:10:44.100 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39456 10 6452 1 2025-11-30 11:10:45.849 00:00:10.393 TCP 23.104.0.1:38220 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:07:05.733 00:05:04.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 11:07:05.731 00:05:04.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 11:11:44.313 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52318 10 6452 1 2025-11-30 11:11:46.284 00:00:10.363 TCP 23.104.0.1:50118 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:12:44.528 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:49748 12 10375 1 2025-11-30 11:12:46.682 00:00:10.670 TCP 23.104.0.1:54188 -> 1.101.0.1:3000 15 1926 1 2025-11-30 11:13:44.772 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34356 10 6452 1 2025-11-30 11:13:47.391 00:00:10.324 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:14:44.989 00:00:11.502 TCP 1.101.0.1:3000 -> 22.102.0.1:58034 10 6452 1 2025-11-30 11:14:47.750 00:00:10.383 TCP 23.104.0.1:38084 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:15:05.887 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 11:15:06.377 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 11:15:46.524 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42188 10 6452 1 2025-11-30 11:15:48.173 00:00:10.364 TCP 23.104.0.1:48396 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:16:46.742 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46958 10 6452 1 2025-11-30 11:16:48.576 00:00:10.364 TCP 23.104.0.1:45550 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:13:05.733 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 11:13:05.731 00:05:04.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 11:17:48.982 00:00:10.365 TCP 23.104.0.1:57954 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:17:46.961 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:45990 10 6452 1 2025-11-30 11:18:47.145 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33992 10 6452 1 2025-11-30 11:18:49.390 00:00:10.361 TCP 23.104.0.1:36250 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:19:49.787 00:00:10.372 TCP 23.104.0.1:37834 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:19:47.323 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47482 10 6452 1 2025-11-30 11:20:05.924 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 11:20:06.005 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 11:20:50.201 00:00:10.323 TCP 23.104.0.1:58154 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:20:47.541 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47446 10 6452 1 2025-11-30 11:21:47.756 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43032 10 6452 1 2025-11-30 11:21:50.562 00:00:10.322 TCP 23.104.0.1:41634 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:22:50.926 00:00:10.404 TCP 23.104.0.1:52204 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:22:47.932 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54390 10 6452 1 2025-11-30 11:19:05.734 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 11:19:05.732 00:05:04.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 11:23:48.170 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59378 10 6452 1 2025-11-30 11:23:51.367 00:00:10.369 TCP 23.104.0.1:42412 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:24:48.385 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55750 10 6452 1 2025-11-30 11:25:06.057 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 11:25:06.015 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 11:24:51.773 00:00:10.365 TCP 23.104.0.1:45014 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:25:48.608 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54560 10 6452 1 2025-11-30 11:25:52.178 00:00:10.373 TCP 23.104.0.1:52950 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:26:48.831 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39324 10 6452 1 2025-11-30 11:26:52.591 00:00:10.376 TCP 23.104.0.1:59710 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:27:49.080 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46472 10 6452 1 2025-11-30 11:27:53.006 00:00:10.370 TCP 23.104.0.1:44660 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:28:49.294 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36296 10 6452 1 2025-11-30 11:28:53.418 00:00:10.368 TCP 23.104.0.1:56846 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:25:05.733 00:05:04.774 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 11:25:05.735 00:05:04.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 11:29:49.525 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55288 10 6452 1 2025-11-30 11:30:06.270 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 11:29:53.820 00:00:10.368 TCP 23.104.0.1:33102 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:30:06.372 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 11:30:49.734 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49940 10 6452 1 2025-11-30 11:30:54.225 00:00:10.372 TCP 23.104.0.1:36246 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:31:49.953 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41126 10 6452 1 2025-11-30 11:31:54.640 00:00:10.368 TCP 23.104.0.1:34606 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:32:50.184 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38522 10 6452 1 2025-11-30 11:32:55.055 00:00:10.364 TCP 23.104.0.1:50040 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:33:50.392 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51552 10 6452 1 2025-11-30 11:33:55.464 00:00:10.375 TCP 23.104.0.1:44228 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:34:50.601 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57128 10 6452 1 2025-11-30 11:34:55.867 00:00:10.371 TCP 23.104.0.1:59622 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:35:06.334 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 11:31:05.736 00:05:04.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 11:35:06.477 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 11:31:05.735 00:05:04.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 11:35:50.817 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34782 10 6452 1 2025-11-30 11:35:56.274 00:00:10.365 TCP 23.104.0.1:53532 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:36:51.088 00:00:10.463 TCP 1.101.0.1:3000 -> 22.102.0.1:48840 10 6452 1 2025-11-30 11:36:56.674 00:00:12.434 TCP 23.104.0.1:35456 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:37:51.589 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54332 10 6452 1 2025-11-30 11:37:59.147 00:00:10.361 TCP 23.104.0.1:49180 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:38:51.754 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60600 10 6452 1 2025-11-30 11:38:59.548 00:00:10.362 TCP 23.104.0.1:46704 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:40:06.581 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 11:39:51.974 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:55736 10 6452 1 2025-11-30 11:40:06.415 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 11:39:59.948 00:00:10.325 TCP 23.104.0.1:51398 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:40:52.230 00:00:10.999 TCP 1.101.0.1:3000 -> 22.102.0.1:50000 10 6452 1 2025-11-30 11:37:05.737 00:05:04.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 11:41:00.313 00:00:10.362 TCP 23.104.0.1:55094 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:37:05.739 00:05:04.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 11:41:53.267 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50112 10 6452 1 2025-11-30 11:42:00.719 00:00:10.383 TCP 23.104.0.1:58106 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:42:53.479 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52682 10 6452 1 2025-11-30 11:43:01.136 00:00:10.361 TCP 23.104.0.1:33748 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:43:53.689 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45634 10 6452 1 2025-11-30 11:44:01.537 00:00:10.324 TCP 23.104.0.1:43710 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:45:06.782 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 11:45:06.663 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 11:44:53.905 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33264 10 6452 1 2025-11-30 11:45:01.905 00:00:10.367 TCP 23.104.0.1:36672 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:45:54.117 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53974 10 6452 1 2025-11-30 11:46:02.309 00:00:10.370 TCP 23.104.0.1:34576 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:46:54.328 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42360 10 6452 1 2025-11-30 11:43:05.740 00:05:04.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 11:43:05.738 00:05:04.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 11:47:02.713 00:00:10.363 TCP 23.104.0.1:43958 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:47:54.545 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53766 10 6452 1 2025-11-30 11:48:03.128 00:00:10.329 TCP 23.104.0.1:42476 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:48:54.771 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44570 10 6452 1 2025-11-30 11:49:03.502 00:00:10.366 TCP 23.104.0.1:58374 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:50:06.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 11:49:55.000 00:00:10.598 TCP 1.101.0.1:3000 -> 22.102.0.1:41164 10 6452 1 2025-11-30 11:50:06.707 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 11:50:03.907 00:00:10.369 TCP 23.104.0.1:46146 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:50:55.636 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47192 10 6452 1 2025-11-30 11:51:04.312 00:00:10.367 TCP 23.104.0.1:42508 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:51:55.852 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40636 10 6452 1 2025-11-30 11:52:04.718 00:00:10.380 TCP 23.104.0.1:35338 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:52:56.086 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49210 10 6452 1 2025-11-30 11:49:05.740 00:05:04.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 11:49:05.738 00:05:04.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 11:53:05.133 00:00:10.346 TCP 23.104.0.1:59972 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:53:56.259 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50592 10 6452 1 2025-11-30 11:54:05.536 00:00:10.365 TCP 23.104.0.1:50388 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:54:56.474 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32856 10 6452 1 2025-11-30 11:55:06.914 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 11:55:07.006 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 11:55:05.940 00:00:10.397 TCP 23.104.0.1:47456 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:55:56.690 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57792 10 6452 1 2025-11-30 11:56:06.382 00:00:10.362 TCP 23.104.0.1:50730 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:56:56.864 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40590 10 6452 1 2025-11-30 11:57:06.786 00:00:10.322 TCP 23.104.0.1:58034 -> 1.101.0.1:3000 11 1507 1 2025-11-30 11:57:57.085 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:39928 10 6452 1 2025-11-30 11:58:07.149 00:00:10.366 TCP 23.104.0.1:38800 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494731, total packets: 1557, avg bps: 1043, avg pps: 0, avg bpp: 317 Time window: 2025-11-30 10:55:05 - 2025-11-30 11:58:17 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0033s User: 0.0024s Wall: 0.0022s flows/second: 74009.1 Runtime: 0.0022s