Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 11:55:05.742 00:05:04.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 11:58:57.254 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44902 10 6452 1 2025-11-30 11:55:05.745 00:05:04.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 11:59:07.555 00:00:10.366 TCP 23.104.0.1:34764 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:00:06.905 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 12:00:06.957 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 11:59:57.481 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51568 10 6452 1 2025-11-30 12:00:07.960 00:00:10.324 TCP 23.104.0.1:43192 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:00:57.649 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56680 10 6452 1 2025-11-30 12:01:08.321 00:00:10.368 TCP 23.104.0.1:43152 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:01:57.823 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46498 10 6452 1 2025-11-30 12:02:08.734 00:00:10.370 TCP 23.104.0.1:42132 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:02:58.056 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41820 10 6452 1 2025-11-30 12:03:09.144 00:00:10.364 TCP 23.104.0.1:60908 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:03:58.284 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40622 10 6452 1 2025-11-30 12:04:09.549 00:00:10.375 TCP 23.104.0.1:53226 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:05:06.902 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 12:04:58.471 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37886 10 6452 1 2025-11-30 12:05:07.022 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 12:01:05.742 00:05:04.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 12:01:05.745 00:05:04.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 12:05:09.967 00:00:10.373 TCP 23.104.0.1:49574 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:05:58.648 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53920 10 6452 1 2025-11-30 12:06:10.377 00:00:10.363 TCP 23.104.0.1:38830 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:06:58.856 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40532 10 6452 1 2025-11-30 12:07:10.778 00:00:10.326 TCP 23.104.0.1:56474 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:07:59.055 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54672 10 6452 1 2025-11-30 12:08:11.144 00:00:10.360 TCP 23.104.0.1:51890 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:08:59.266 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46276 10 6452 1 2025-11-30 12:09:11.543 00:00:10.373 TCP 23.104.0.1:49968 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:10:06.884 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 12:10:07.431 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 12:09:59.486 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34572 10 6452 1 2025-11-30 12:10:11.953 00:00:10.378 TCP 23.104.0.1:54758 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:10:59.660 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52604 10 6452 1 2025-11-30 12:07:05.745 00:05:04.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 12:07:05.746 00:05:04.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 12:11:12.367 00:00:10.366 TCP 23.104.0.1:41890 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:11:59.870 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36122 10 6452 1 2025-11-30 12:12:12.773 00:00:10.369 TCP 23.104.0.1:54522 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:13:00.092 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:39308 10 6452 1 2025-11-30 12:13:13.181 00:00:10.323 TCP 23.104.0.1:48140 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:14:00.296 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49422 10 6452 1 2025-11-30 12:14:13.546 00:00:10.363 TCP 23.104.0.1:45042 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:15:00.512 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40240 10 6452 1 2025-11-30 12:15:07.188 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 12:15:07.104 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 12:15:13.951 00:00:10.369 TCP 23.104.0.1:37766 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:16:00.728 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45112 10 6452 1 2025-11-30 12:16:14.366 00:00:10.328 TCP 23.104.0.1:37650 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:13:05.749 00:05:04.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 12:13:05.746 00:05:04.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 12:17:00.935 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:36624 10 6452 1 2025-11-30 12:17:14.741 00:00:10.362 TCP 23.104.0.1:38562 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:18:01.171 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60808 10 6452 1 2025-11-30 12:18:15.145 00:00:10.364 TCP 23.104.0.1:46518 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:19:01.386 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59482 10 6452 1 2025-11-30 12:19:15.554 00:00:10.365 TCP 23.104.0.1:33242 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:20:07.306 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 12:20:01.608 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38900 10 6452 1 2025-11-30 12:20:07.364 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 12:20:15.957 00:00:10.368 TCP 23.104.0.1:58992 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:21:01.830 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57502 10 6452 1 2025-11-30 12:21:16.365 00:00:10.369 TCP 23.104.0.1:47520 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:22:02.082 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57750 10 6452 1 2025-11-30 12:22:16.801 00:00:10.368 TCP 23.104.0.1:53496 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:19:05.746 00:05:04.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 12:19:05.748 00:05:04.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 12:23:02.256 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37668 10 6452 1 2025-11-30 12:23:17.210 00:00:10.362 TCP 23.104.0.1:46954 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:24:02.475 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6452 1 2025-11-30 12:24:17.614 00:00:10.326 TCP 23.104.0.1:40170 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:25:07.209 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 12:25:07.437 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 12:25:02.686 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49438 10 6452 1 2025-11-30 12:25:17.973 00:00:10.323 TCP 23.104.0.1:53822 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:26:02.897 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:48414 10 6452 1 2025-11-30 12:26:18.336 00:00:10.329 TCP 23.104.0.1:35052 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:27:03.102 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33316 10 6452 1 2025-11-30 12:27:18.705 00:00:10.328 TCP 23.104.0.1:52702 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:28:03.312 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47194 10 6452 1 2025-11-30 12:28:19.096 00:00:10.324 TCP 23.104.0.1:55260 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:25:05.747 00:05:04.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 12:25:05.750 00:05:04.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 12:29:03.526 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45124 10 6452 1 2025-11-30 12:29:19.460 00:00:10.325 TCP 23.104.0.1:44274 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:30:07.488 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 12:30:07.260 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 12:30:03.742 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51406 10 6452 1 2025-11-30 12:30:19.824 00:00:10.371 TCP 23.104.0.1:41826 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:31:03.964 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35396 10 6452 1 2025-11-30 12:31:20.237 00:00:10.322 TCP 23.104.0.1:53674 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:32:04.183 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45818 10 6452 1 2025-11-30 12:32:20.596 00:00:10.327 TCP 23.104.0.1:57048 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:33:04.418 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50226 10 6452 1 2025-11-30 12:33:20.962 00:00:10.364 TCP 23.104.0.1:46814 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:34:04.631 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46470 10 6452 1 2025-11-30 12:34:21.365 00:00:10.369 TCP 23.104.0.1:42456 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:35:07.534 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 12:31:05.751 00:05:04.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 12:35:07.410 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 12:31:05.749 00:05:04.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 12:35:04.844 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:53936 10 6452 1 2025-11-30 12:35:21.771 00:00:10.372 TCP 23.104.0.1:51476 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:36:05.091 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34624 10 6452 1 2025-11-30 12:36:22.179 00:00:10.374 TCP 23.104.0.1:56298 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:37:05.306 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:59152 12 10375 1 2025-11-30 12:37:22.593 00:00:10.441 TCP 23.104.0.1:55370 -> 1.101.0.1:3000 15 1926 1 2025-11-30 12:38:05.542 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52146 10 6452 1 2025-11-30 12:38:23.102 00:00:10.321 TCP 23.104.0.1:44212 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:39:05.756 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43734 10 6452 1 2025-11-30 12:39:23.459 00:00:10.326 TCP 23.104.0.1:50492 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:40:07.628 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 12:40:07.797 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 12:40:05.970 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36242 10 6452 1 2025-11-30 12:40:23.823 00:00:10.356 TCP 23.104.0.1:40456 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:37:05.753 00:05:04.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 12:37:05.751 00:05:04.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 12:41:06.189 00:00:11.508 TCP 1.101.0.1:3000 -> 22.102.0.1:36786 10 6452 1 2025-11-30 12:41:24.226 00:00:10.361 TCP 23.104.0.1:43068 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:42:07.735 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54146 10 6452 1 2025-11-30 12:42:24.627 00:00:10.362 TCP 23.104.0.1:56322 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:43:07.950 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45036 10 6452 1 2025-11-30 12:43:25.030 00:00:10.363 TCP 23.104.0.1:36276 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:44:08.175 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46040 10 6452 1 2025-11-30 12:44:25.433 00:00:11.314 TCP 23.104.0.1:48904 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:45:07.941 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 12:45:07.738 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 12:45:08.384 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50134 10 6452 1 2025-11-30 12:45:26.785 00:00:10.360 TCP 23.104.0.1:47200 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:46:08.599 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60490 10 6452 1 2025-11-30 12:46:27.187 00:00:10.396 TCP 23.104.0.1:50526 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:43:05.751 00:05:04.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 12:43:05.753 00:05:04.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 12:47:08.812 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55330 10 6452 1 2025-11-30 12:47:27.624 00:00:10.362 TCP 23.104.0.1:47656 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:48:09.035 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44192 10 6452 1 2025-11-30 12:48:28.027 00:00:10.321 TCP 23.104.0.1:58850 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:49:09.254 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44000 10 6452 1 2025-11-30 12:49:28.387 00:00:10.368 TCP 23.104.0.1:59136 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:50:07.945 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 12:50:07.928 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 12:50:09.469 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52204 10 6452 1 2025-11-30 12:50:28.793 00:00:10.372 TCP 23.104.0.1:38378 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:51:09.682 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52480 10 6452 1 2025-11-30 12:51:29.201 00:00:10.361 TCP 23.104.0.1:59076 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:52:09.911 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:58356 10 6452 1 2025-11-30 12:52:29.598 00:00:10.332 TCP 23.104.0.1:53028 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:49:05.760 00:05:04.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 12:49:05.756 00:05:04.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 12:53:10.098 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53126 10 6452 1 2025-11-30 12:53:29.970 00:00:10.365 TCP 23.104.0.1:56780 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:54:10.310 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58398 10 6452 1 2025-11-30 12:54:30.373 00:00:10.365 TCP 23.104.0.1:54396 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:55:07.885 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 12:55:07.948 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 12:55:10.522 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57668 10 6452 1 2025-11-30 12:55:30.781 00:00:18.317 TCP 23.104.0.1:58108 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:56:10.736 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57336 10 6452 1 2025-11-30 12:56:39.140 00:00:10.361 TCP 23.104.0.1:43304 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:57:10.956 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53182 10 6452 1 2025-11-30 12:57:39.538 00:00:10.361 TCP 23.104.0.1:41456 -> 1.101.0.1:3000 11 1507 1 2025-11-30 12:58:11.190 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49966 10 6452 1 2025-11-30 12:58:39.942 00:00:10.372 TCP 23.104.0.1:38894 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1051, avg pps: 0, avg bpp: 318 Time window: 2025-11-30 11:55:05 - 2025-11-30 12:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0019s Wall: 0.0043s flows/second: 38138.5 Runtime: 0.0043s