Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 12:55:05.761 00:05:04.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 12:55:05.758 00:05:04.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 12:59:11.403 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48422 10 6452 1 2025-11-30 12:59:40.356 00:00:10.363 TCP 23.104.0.1:42834 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:00:08.180 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:00:07.993 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 13:00:11.620 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:50558 10 6452 1 2025-11-30 13:00:40.760 00:00:10.381 TCP 23.104.0.1:42724 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:01:11.830 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58002 10 6452 1 2025-11-30 13:01:41.185 00:00:10.373 TCP 23.104.0.1:50040 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:02:12.003 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56152 10 6452 1 2025-11-30 13:02:41.603 00:00:15.264 TCP 23.104.0.1:57170 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:03:12.216 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38408 10 6452 1 2025-11-30 13:03:46.907 00:00:10.329 TCP 23.104.0.1:41282 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:04:12.430 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57310 10 6452 1 2025-11-30 13:04:47.271 00:00:10.368 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:05:08.029 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 13:01:05.760 00:05:04.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 13:05:08.110 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:01:05.763 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 13:05:12.646 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46312 10 6452 1 2025-11-30 13:05:47.678 00:00:10.322 TCP 23.104.0.1:51334 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:06:12.857 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53434 10 6452 1 2025-11-30 13:06:48.058 00:00:10.363 TCP 23.104.0.1:41532 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:07:13.045 00:00:10.441 TCP 1.101.0.1:3000 -> 22.102.0.1:44364 10 6452 1 2025-11-30 13:07:48.458 00:00:10.371 TCP 23.104.0.1:58688 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:08:13.523 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46024 10 6452 1 2025-11-30 13:08:48.871 00:00:10.370 TCP 23.104.0.1:56996 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:09:13.734 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56280 10 6452 1 2025-11-30 13:09:49.277 00:00:10.322 TCP 23.104.0.1:39254 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:10:08.364 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 13:10:08.354 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:10:13.951 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:54566 10 6452 1 2025-11-30 13:10:49.642 00:00:10.365 TCP 23.104.0.1:45822 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:07:05.764 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 13:07:05.761 00:05:04.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 13:11:14.196 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38168 10 6452 1 2025-11-30 13:11:50.060 00:00:10.362 TCP 23.104.0.1:39596 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:12:14.417 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54318 10 6452 1 2025-11-30 13:12:50.462 00:00:10.321 TCP 23.104.0.1:46898 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:13:14.635 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49062 10 6452 1 2025-11-30 13:13:50.820 00:00:10.362 TCP 23.104.0.1:41564 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:14:14.855 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50512 11 6492 1 2025-11-30 13:14:51.218 00:00:10.325 TCP 23.104.0.1:40258 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:15:08.518 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:15:08.538 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 13:15:15.095 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34358 10 6452 1 2025-11-30 13:15:51.583 00:00:10.325 TCP 23.104.0.1:45320 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:16:15.311 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50722 10 6452 1 2025-11-30 13:16:51.948 00:00:10.329 TCP 23.104.0.1:58434 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:13:05.763 00:05:04.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 13:13:05.766 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 13:17:15.531 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:56962 10 6452 1 2025-11-30 13:17:52.319 00:00:10.368 TCP 23.104.0.1:58888 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:18:15.779 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:58430 10 6452 1 2025-11-30 13:18:52.724 00:00:15.587 TCP 23.104.0.1:50694 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:19:16.082 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60694 10 6452 1 2025-11-30 13:20:08.356 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:19:58.349 00:00:10.323 TCP 23.104.0.1:37520 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:20:08.534 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 13:20:16.297 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41122 10 6452 1 2025-11-30 13:20:58.713 00:00:10.379 TCP 23.104.0.1:55398 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:21:16.503 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59160 10 6452 1 2025-11-30 13:21:59.129 00:00:10.364 TCP 23.104.0.1:43460 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:22:16.680 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39456 10 6452 1 2025-11-30 13:22:59.529 00:00:11.458 TCP 23.104.0.1:45532 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:19:05.767 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 13:19:05.766 00:05:04.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 13:23:16.886 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:37216 10 6452 1 2025-11-30 13:24:01.029 00:00:10.323 TCP 23.104.0.1:39298 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:24:17.128 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:54544 10 6452 1 2025-11-30 13:25:08.611 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:25:01.390 00:00:10.363 TCP 23.104.0.1:40126 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:25:08.468 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 13:25:17.293 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:47474 10 6452 1 2025-11-30 13:26:01.791 00:00:10.364 TCP 23.104.0.1:43218 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:26:17.474 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56762 10 6452 1 2025-11-30 13:27:02.199 00:00:10.371 TCP 23.104.0.1:45344 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:27:17.692 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45730 10 6452 1 2025-11-30 13:28:02.608 00:00:10.362 TCP 23.104.0.1:39628 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:28:17.911 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55696 10 6452 1 2025-11-30 13:25:05.768 00:05:04.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 13:25:05.766 00:05:04.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 13:29:03.012 00:00:10.376 TCP 23.104.0.1:35704 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:29:18.122 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46160 10 6452 1 2025-11-30 13:30:08.514 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 13:30:08.516 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:30:03.419 00:00:10.325 TCP 23.104.0.1:51700 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:30:18.336 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56746 10 6452 1 2025-11-30 13:31:03.785 00:00:10.362 TCP 23.104.0.1:38450 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:31:18.550 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59914 10 6452 1 2025-11-30 13:32:04.184 00:00:10.324 TCP 23.104.0.1:55166 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:32:18.790 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42780 10 6452 1 2025-11-30 13:33:04.549 00:00:10.364 TCP 23.104.0.1:37026 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:33:19.026 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36218 10 6452 1 2025-11-30 13:34:04.949 00:00:10.368 TCP 23.104.0.1:52626 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:34:19.198 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49300 10 6452 1 2025-11-30 13:35:08.887 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:31:05.773 00:05:04.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 13:35:08.824 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 13:31:05.769 00:05:04.779 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 13:35:05.353 00:00:10.361 TCP 23.104.0.1:37400 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:35:19.410 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35942 10 6452 1 2025-11-30 13:36:05.752 00:00:10.379 TCP 23.104.0.1:46990 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:36:19.646 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42728 10 6452 1 2025-11-30 13:37:06.171 00:00:10.336 TCP 23.104.0.1:59510 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:37:19.826 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34018 10 6452 1 2025-11-30 13:38:06.547 00:00:10.361 TCP 23.104.0.1:55906 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:38:20.068 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56678 10 6452 1 2025-11-30 13:39:06.943 00:00:10.369 TCP 23.104.0.1:42182 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:39:20.240 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45124 10 6452 1 2025-11-30 13:40:08.861 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 13:40:08.968 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:40:07.352 00:00:10.366 TCP 23.104.0.1:34512 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:40:20.451 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54228 10 6452 1 2025-11-30 13:37:05.771 00:05:04.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 13:37:05.774 00:05:04.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 13:41:07.763 00:00:10.380 TCP 23.104.0.1:38792 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:41:20.662 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38522 10 6452 1 2025-11-30 13:42:08.177 00:00:10.364 TCP 23.104.0.1:43356 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:42:20.881 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:34752 10 6452 1 2025-11-30 13:43:08.580 00:00:10.364 TCP 23.104.0.1:45572 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:43:21.109 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33504 10 6452 1 2025-11-30 13:44:08.983 00:00:10.364 TCP 23.104.0.1:57032 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:44:21.325 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33806 10 6452 1 2025-11-30 13:45:08.676 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:45:08.936 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 13:45:09.384 00:00:10.364 TCP 23.104.0.1:33244 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:45:21.537 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46030 10 6452 1 2025-11-30 13:46:09.786 00:00:10.366 TCP 23.104.0.1:42934 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:46:21.768 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38950 10 6452 1 2025-11-30 13:43:05.776 00:05:04.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 13:43:05.774 00:05:04.777 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 13:47:10.195 00:00:10.362 TCP 23.104.0.1:41460 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:47:21.981 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33144 10 6452 1 2025-11-30 13:48:10.595 00:00:10.328 TCP 23.104.0.1:47158 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:48:22.204 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41630 10 6452 1 2025-11-30 13:49:10.956 00:00:10.373 TCP 23.104.0.1:43006 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:49:22.420 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41874 10 6452 1 2025-11-30 13:50:09.279 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 13:50:09.269 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:50:11.370 00:00:10.365 TCP 23.104.0.1:55172 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:50:22.599 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58220 10 6452 1 2025-11-30 13:51:11.772 00:00:10.493 TCP 23.104.0.1:50036 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:51:22.812 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46486 10 6452 1 2025-11-30 13:52:12.304 00:00:10.366 TCP 23.104.0.1:40544 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:52:22.987 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:54860 10 6452 1 2025-11-30 13:49:05.777 00:05:04.776 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 13:49:05.778 00:05:04.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 13:53:12.707 00:00:10.362 TCP 23.104.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:53:23.173 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33490 10 6452 1 2025-11-30 13:54:13.114 00:00:10.372 TCP 23.104.0.1:34640 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:54:23.345 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51588 10 6452 1 2025-11-30 13:55:09.072 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 13:55:09.262 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 13:55:13.524 00:00:10.363 TCP 23.104.0.1:49798 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:55:23.556 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59660 10 6452 1 2025-11-30 13:56:13.923 00:00:10.386 TCP 23.104.0.1:60358 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:56:23.732 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35936 10 6452 1 2025-11-30 13:57:14.351 00:00:10.437 TCP 23.104.0.1:52940 -> 1.101.0.1:3000 15 1926 1 2025-11-30 13:57:23.951 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:53392 12 10375 1 2025-11-30 13:58:14.829 00:00:10.389 TCP 23.104.0.1:41838 -> 1.101.0.1:3000 11 1507 1 2025-11-30 13:58:24.206 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49000 10 6452 1 Summary: total flows: 163, total bytes: 501223, total packets: 1568, avg bps: 1052, avg pps: 0, avg bpp: 319 Time window: 2025-11-30 12:55:05 - 2025-11-30 13:58:34 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0013s Wall: 0.0042s flows/second: 39118.4 Runtime: 0.0042s