Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 16:55:05.825 00:05:04.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 16:55:05.823 00:05:04.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 16:59:03.118 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46706 10 6452 1 2025-11-30 16:59:32.530 00:00:10.327 TCP 23.104.0.1:39854 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:00:13.036 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 17:00:03.289 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41604 10 6452 1 2025-11-30 17:00:13.190 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 17:00:32.895 00:00:10.370 TCP 23.104.0.1:37754 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:01:03.501 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50740 10 6452 1 2025-11-30 17:01:33.308 00:00:10.362 TCP 23.104.0.1:59910 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:02:03.729 00:00:10.945 TCP 1.101.0.1:3000 -> 22.102.0.1:34564 10 6452 1 2025-11-30 17:02:33.710 00:00:10.378 TCP 23.104.0.1:50218 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:03:04.715 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40068 10 6452 1 2025-11-30 17:03:34.127 00:00:10.365 TCP 23.104.0.1:43984 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:04:04.930 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:41386 10 6452 1 2025-11-30 17:04:34.532 00:00:10.362 TCP 23.104.0.1:57538 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:01:05.824 00:05:04.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 17:01:05.826 00:05:04.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 17:05:05.177 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43058 10 6452 1 2025-11-30 17:05:13.136 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 17:05:13.082 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 17:05:34.933 00:00:10.399 TCP 23.104.0.1:48384 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:06:05.407 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:36296 10 6452 1 2025-11-30 17:06:35.360 00:00:10.371 TCP 23.104.0.1:40010 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:07:05.645 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49862 10 6452 1 2025-11-30 17:07:35.767 00:00:10.378 TCP 23.104.0.1:45110 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:08:05.857 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:52330 10 6452 1 2025-11-30 17:08:36.180 00:00:10.327 TCP 23.104.0.1:32784 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:09:06.096 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42834 10 6452 1 2025-11-30 17:09:36.543 00:00:10.366 TCP 23.104.0.1:46026 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:10:06.306 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53934 10 6452 1 2025-11-30 17:10:13.056 00:00:00.051 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 17:10:13.017 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 17:10:36.949 00:00:10.369 TCP 23.104.0.1:43882 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:07:05.826 00:05:04.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 17:07:05.828 00:05:04.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 17:11:06.529 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55752 10 6452 1 2025-11-30 17:11:37.361 00:00:10.368 TCP 23.104.0.1:46450 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:12:06.744 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:41122 12 10375 1 2025-11-30 17:12:37.767 00:00:10.445 TCP 23.104.0.1:45138 -> 1.101.0.1:3000 15 1926 1 2025-11-30 17:13:06.983 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46492 10 6452 1 2025-11-30 17:13:38.257 00:00:10.323 TCP 23.104.0.1:44188 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:14:07.211 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41902 10 6452 1 2025-11-30 17:14:38.620 00:00:10.366 TCP 23.104.0.1:55024 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:15:13.378 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 17:15:13.433 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 17:15:07.426 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45978 10 6452 1 2025-11-30 17:15:39.030 00:00:10.365 TCP 23.104.0.1:49408 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:16:07.638 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45684 10 6452 1 2025-11-30 17:16:39.435 00:00:10.372 TCP 23.104.0.1:56634 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:13:05.829 00:05:04.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 17:13:05.831 00:05:04.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 17:17:07.818 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55420 10 6452 1 2025-11-30 17:17:39.844 00:00:10.389 TCP 23.104.0.1:37698 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:18:08.035 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51754 10 6452 1 2025-11-30 17:18:40.270 00:00:10.321 TCP 23.104.0.1:39016 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:19:08.209 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39584 10 6452 1 2025-11-30 17:19:40.630 00:00:10.364 TCP 23.104.0.1:50112 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:20:13.076 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 17:20:13.138 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 17:20:08.422 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44286 10 6452 1 2025-11-30 17:20:41.035 00:00:10.321 TCP 23.104.0.1:45112 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:21:08.591 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35824 10 6452 1 2025-11-30 17:21:41.398 00:00:10.361 TCP 23.104.0.1:60464 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:22:08.802 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56946 10 6452 1 2025-11-30 17:22:41.802 00:00:10.367 TCP 23.104.0.1:39870 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:19:05.834 00:05:04.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 17:19:05.832 00:05:04.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 17:23:09.024 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53308 10 6452 1 2025-11-30 17:23:42.210 00:00:10.369 TCP 23.104.0.1:35572 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:24:09.237 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45964 10 6452 1 2025-11-30 17:24:42.617 00:00:10.363 TCP 23.104.0.1:43192 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:25:13.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 17:25:13.168 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 17:25:09.451 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36314 10 6452 1 2025-11-30 17:25:43.021 00:00:10.364 TCP 23.104.0.1:60510 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:26:09.666 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40184 10 6452 1 2025-11-30 17:26:43.424 00:00:10.364 TCP 23.104.0.1:42320 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:27:09.880 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:44520 10 6452 1 2025-11-30 17:27:43.827 00:00:10.350 TCP 23.104.0.1:49996 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:28:10.090 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34600 10 6452 1 2025-11-30 17:28:44.218 00:00:10.368 TCP 23.104.0.1:48334 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:25:05.838 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 17:25:05.835 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 17:29:10.310 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51024 10 6452 1 2025-11-30 17:29:44.624 00:00:10.367 TCP 23.104.0.1:48440 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:30:13.586 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 17:30:13.577 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 17:30:10.482 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:37668 10 6452 1 2025-11-30 17:30:45.029 00:00:10.371 TCP 23.104.0.1:39522 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:31:10.652 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34666 10 6452 1 2025-11-30 17:31:45.467 00:00:10.325 TCP 23.104.0.1:40026 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:32:10.867 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57040 10 6452 1 2025-11-30 17:32:45.831 00:00:10.365 TCP 23.104.0.1:43662 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:33:11.082 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35996 10 6452 1 2025-11-30 17:33:46.235 00:00:10.992 TCP 23.104.0.1:53426 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:34:11.310 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36718 10 6452 1 2025-11-30 17:34:47.267 00:00:10.364 TCP 23.104.0.1:59626 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:31:05.840 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 17:31:05.838 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 17:35:13.597 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 17:35:13.806 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 17:35:11.527 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57180 10 6452 1 2025-11-30 17:35:47.671 00:00:10.377 TCP 23.104.0.1:55846 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:36:11.760 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:40650 10 6452 1 2025-11-30 17:36:48.107 00:00:10.365 TCP 23.104.0.1:55514 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:37:12.008 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40706 10 6452 1 2025-11-30 17:37:48.511 00:00:10.325 TCP 23.104.0.1:46632 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:38:12.231 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37288 10 6452 1 2025-11-30 17:38:48.879 00:00:10.373 TCP 23.104.0.1:60522 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:39:12.443 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:50166 10 6452 1 2025-11-30 17:39:49.292 00:00:10.377 TCP 23.104.0.1:47520 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:40:13.588 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 17:40:13.710 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 17:40:12.626 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50548 10 6452 1 2025-11-30 17:40:49.717 00:00:10.380 TCP 23.104.0.1:52238 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:37:05.845 00:05:04.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 17:37:05.846 00:05:04.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 17:41:12.837 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43256 10 6452 1 2025-11-30 17:41:50.143 00:00:10.371 TCP 23.104.0.1:53500 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:42:13.073 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53480 12 10375 1 2025-11-30 17:42:50.558 00:00:10.442 TCP 23.104.0.1:39928 -> 1.101.0.1:3000 15 1926 1 2025-11-30 17:43:13.313 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54986 10 6452 1 2025-11-30 17:43:51.057 00:00:10.370 TCP 23.104.0.1:55288 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:44:13.489 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:41480 10 6452 1 2025-11-30 17:44:51.467 00:00:10.364 TCP 23.104.0.1:47972 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:45:13.608 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 17:45:14.024 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 17:45:13.653 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36772 10 6452 1 2025-11-30 17:45:51.869 00:00:10.366 TCP 23.104.0.1:41416 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:46:13.866 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43518 10 6452 1 2025-11-30 17:46:52.273 00:00:10.365 TCP 23.104.0.1:55456 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:43:05.847 00:05:04.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 17:43:05.844 00:05:04.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 17:47:14.087 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38266 10 6452 1 2025-11-30 17:47:52.680 00:00:10.325 TCP 23.104.0.1:58432 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:48:14.295 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53848 10 6452 1 2025-11-30 17:48:53.041 00:00:10.369 TCP 23.104.0.1:56526 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:49:14.503 00:00:10.534 TCP 1.101.0.1:3000 -> 22.102.0.1:56480 10 6452 1 2025-11-30 17:49:53.454 00:00:10.323 TCP 23.104.0.1:45066 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:50:13.860 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 17:50:13.763 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 17:50:15.077 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38376 10 6452 1 2025-11-30 17:50:53.814 00:00:10.369 TCP 23.104.0.1:53872 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:51:15.293 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46094 10 6452 1 2025-11-30 17:51:54.221 00:00:10.372 TCP 23.104.0.1:49624 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:52:15.509 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37674 10 6452 1 2025-11-30 17:52:54.627 00:00:10.363 TCP 23.104.0.1:58862 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:49:05.848 00:05:04.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 17:49:05.845 00:05:04.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 17:53:15.722 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37502 10 6452 1 2025-11-30 17:53:55.029 00:00:10.332 TCP 23.104.0.1:43318 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:54:15.938 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:48004 10 6452 1 2025-11-30 17:54:55.390 00:00:10.365 TCP 23.104.0.1:49892 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:55:14.156 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 17:55:14.035 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 17:55:16.181 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59080 10 6452 1 2025-11-30 17:55:55.788 00:00:10.365 TCP 23.104.0.1:33158 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:56:16.394 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36570 10 6452 1 2025-11-30 17:56:56.192 00:00:10.318 TCP 23.104.0.1:33076 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:57:16.607 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35038 10 6452 1 2025-11-30 17:57:56.551 00:00:10.363 TCP 23.104.0.1:56568 -> 1.101.0.1:3000 11 1507 1 2025-11-30 17:58:16.819 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36054 10 6452 1 Summary: total flows: 163, total bytes: 505525, total packets: 1573, avg bps: 1063, avg pps: 0, avg bpp: 321 Time window: 2025-11-30 16:55:05 - 2025-11-30 17:58:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0021s Wall: 0.0022s flows/second: 75360.6 Runtime: 0.0022s