Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 03:54:10.810 00:05:55.232 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 03:54:10.807 00:05:55.238 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 03:58:59.147 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58802 10 6452 1 2025-12-01 03:59:09.975 00:00:10.366 TCP 23.104.0.1:50720 -> 1.101.0.1:3000 11 1507 1 2025-12-01 03:59:59.368 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50060 10 6452 1 2025-12-01 04:00:10.378 00:00:10.367 TCP 23.104.0.1:56926 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:00:25.948 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 04:00:26.037 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 04:00:59.586 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36342 10 6452 1 2025-12-01 04:01:10.785 00:00:10.324 TCP 23.104.0.1:45782 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:01:59.794 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37094 10 6452 1 2025-12-01 04:02:11.152 00:00:10.362 TCP 23.104.0.1:49194 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:03:00.007 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46428 10 6452 1 2025-12-01 04:03:11.554 00:00:10.320 TCP 23.104.0.1:38474 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:04:00.220 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35260 10 6452 1 2025-12-01 04:04:11.910 00:00:10.372 TCP 23.104.0.1:47692 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:00:10.811 00:05:55.232 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 04:00:10.808 00:05:55.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 04:05:00.433 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50114 10 6452 1 2025-12-01 04:05:26.264 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 04:05:26.321 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 04:05:12.316 00:00:10.326 TCP 23.104.0.1:38674 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:06:00.648 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60944 10 6452 1 2025-12-01 04:06:12.683 00:00:10.372 TCP 23.104.0.1:33170 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:07:00.861 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43390 10 6452 1 2025-12-01 04:07:13.110 00:00:10.364 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:08:01.043 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:46176 10 6452 1 2025-12-01 04:08:13.511 00:00:10.370 TCP 23.104.0.1:54848 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:09:01.211 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60080 10 6452 1 2025-12-01 04:09:13.921 00:00:10.349 TCP 23.104.0.1:41466 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:10:01.425 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39522 10 6452 1 2025-12-01 04:10:14.309 00:00:10.323 TCP 23.104.0.1:43248 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:10:26.424 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 04:10:26.425 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 04:06:10.810 00:05:55.235 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 04:06:10.814 00:05:55.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 04:11:01.639 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48334 10 6452 1 2025-12-01 04:11:14.674 00:00:10.369 TCP 23.104.0.1:49614 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:12:01.850 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34638 10 6452 1 2025-12-01 04:12:15.102 00:00:10.366 TCP 23.104.0.1:41834 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:13:02.083 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56414 10 6452 1 2025-12-01 04:13:15.509 00:00:10.545 TCP 23.104.0.1:37876 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:14:02.258 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40938 10 6452 1 2025-12-01 04:14:16.107 00:00:10.363 TCP 23.104.0.1:34980 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:15:02.470 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53014 10 6452 1 2025-12-01 04:15:16.511 00:00:10.320 TCP 23.104.0.1:58580 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:15:26.617 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 04:15:26.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 04:16:02.684 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41472 10 6452 1 2025-12-01 04:16:16.872 00:00:10.364 TCP 23.104.0.1:57082 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:12:10.813 00:05:55.234 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 04:12:10.816 00:06:00.005 TCP 179.1.22.1:179 -> 179.1.22.22:39396 13 790 1 2025-12-01 04:17:02.898 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44366 10 6452 1 2025-12-01 04:17:17.278 00:00:10.521 TCP 23.104.0.1:38388 -> 1.101.0.1:3000 17 2241 1 2025-12-01 04:18:03.112 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:45088 14 14292 1 2025-12-01 04:18:17.833 00:00:15.811 TCP 23.104.0.1:53362 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:19:03.376 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53166 10 6452 1 2025-12-01 04:19:23.705 00:00:10.364 TCP 23.104.0.1:33738 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:20:03.583 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42564 10 6452 1 2025-12-01 04:20:26.501 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 04:20:26.547 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 04:20:24.108 00:00:10.366 TCP 23.104.0.1:55638 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:21:03.808 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33868 10 6452 1 2025-12-01 04:21:24.512 00:00:10.361 TCP 23.104.0.1:40974 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:22:03.983 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40044 10 6452 1 2025-12-01 04:22:24.911 00:00:10.363 TCP 23.104.0.1:47960 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:18:10.817 00:05:55.231 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 04:19:06.044 00:05:04.777 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 04:23:04.220 00:00:10.561 TCP 1.101.0.1:3000 -> 22.102.0.1:42684 10 6452 1 2025-12-01 04:23:25.316 00:00:10.367 TCP 23.104.0.1:39500 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:24:04.821 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59464 10 6452 1 2025-12-01 04:24:25.725 00:00:10.322 TCP 23.104.0.1:57532 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:25:05.062 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59128 10 6452 1 2025-12-01 04:25:26.547 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 04:25:26.701 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 04:25:26.101 00:00:10.360 TCP 23.104.0.1:55418 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:26:05.281 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6452 1 2025-12-01 04:26:26.502 00:00:10.373 TCP 23.104.0.1:58412 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:27:05.518 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36144 10 6452 1 2025-12-01 04:27:26.911 00:00:10.364 TCP 23.104.0.1:53204 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:28:05.737 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39480 10 6452 1 2025-12-01 04:28:27.313 00:00:10.369 TCP 23.104.0.1:49288 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:24:10.818 00:05:55.230 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 04:25:06.046 00:05:04.776 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 04:29:05.951 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:55336 10 6452 1 2025-12-01 04:29:27.715 00:00:10.374 TCP 23.104.0.1:38464 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:30:06.185 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51144 10 6452 1 2025-12-01 04:30:26.789 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 04:30:26.990 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 04:30:28.129 00:00:10.331 TCP 23.104.0.1:50152 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:31:06.399 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59828 10 6452 1 2025-12-01 04:31:28.503 00:00:10.367 TCP 23.104.0.1:56980 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:32:06.571 00:00:10.287 TCP 1.101.0.1:3000 -> 22.102.0.1:52844 10 6452 1 2025-12-01 04:32:28.908 00:00:10.369 TCP 23.104.0.1:52492 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:33:06.903 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45086 10 6452 1 2025-12-01 04:33:29.317 00:00:10.334 TCP 23.104.0.1:60114 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:34:07.115 00:00:10.544 TCP 1.101.0.1:3000 -> 22.102.0.1:59342 10 6452 1 2025-12-01 04:34:29.690 00:00:10.367 TCP 23.104.0.1:42354 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:30:10.820 00:05:55.231 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 04:31:06.046 00:05:04.777 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 04:35:07.694 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43122 10 6452 1 2025-12-01 04:35:26.612 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 04:35:26.933 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 04:35:30.107 00:00:10.336 TCP 23.104.0.1:37530 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:36:07.864 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:38660 10 6452 1 2025-12-01 04:36:30.482 00:00:10.541 TCP 23.104.0.1:58276 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:37:08.102 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57752 10 6452 1 2025-12-01 04:37:31.089 00:00:10.362 TCP 23.104.0.1:47610 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:38:08.323 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37934 10 6452 1 2025-12-01 04:38:31.487 00:00:10.365 TCP 23.104.0.1:37444 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:39:08.542 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59156 10 6452 1 2025-12-01 04:39:31.889 00:00:10.376 TCP 23.104.0.1:45534 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:40:08.759 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:38828 10 6452 1 2025-12-01 04:40:26.846 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 04:40:26.910 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 04:40:32.296 00:00:10.320 TCP 23.104.0.1:37778 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:37:06.048 00:05:04.777 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 04:36:10.822 00:06:00.001 TCP 179.1.22.22:39396 -> 179.1.22.1:179 13 809 1 2025-12-01 04:41:09.001 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50570 10 6452 1 2025-12-01 04:41:32.657 00:00:10.331 TCP 23.104.0.1:59622 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:42:09.223 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41942 10 6452 1 2025-12-01 04:42:33.026 00:00:10.360 TCP 23.104.0.1:35518 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:43:09.437 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37044 10 6452 1 2025-12-01 04:43:33.427 00:00:10.360 TCP 23.104.0.1:54282 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:44:09.659 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42850 10 6452 1 2025-12-01 04:44:33.828 00:00:10.395 TCP 23.104.0.1:34046 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:45:09.878 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47038 10 6452 1 2025-12-01 04:45:27.169 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 04:45:27.095 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 04:45:34.265 00:00:10.365 TCP 23.104.0.1:49116 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:46:10.107 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46962 10 6452 1 2025-12-01 04:46:34.669 00:00:10.327 TCP 23.104.0.1:54272 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:43:06.051 00:05:04.774 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 04:43:06.054 00:05:04.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 04:47:10.323 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38502 10 6452 1 2025-12-01 04:47:35.052 00:00:10.362 TCP 23.104.0.1:41516 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:48:10.538 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:43716 10 6452 1 2025-12-01 04:48:35.453 00:00:10.364 TCP 23.104.0.1:51498 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:49:10.722 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52670 10 6452 1 2025-12-01 04:49:35.852 00:00:10.333 TCP 23.104.0.1:42808 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:50:10.937 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:38526 10 6452 1 2025-12-01 04:50:27.067 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 04:50:27.189 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 04:50:36.222 00:00:10.360 TCP 23.104.0.1:40306 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:51:11.201 00:00:10.343 TCP 1.101.0.1:3000 -> 22.102.0.1:60596 10 6452 1 2025-12-01 04:51:36.629 00:00:10.365 TCP 23.104.0.1:38884 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:52:11.584 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51342 10 6452 1 2025-12-01 04:52:37.037 00:00:10.369 TCP 23.104.0.1:54220 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:49:06.055 00:05:04.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 04:49:06.058 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 04:53:11.810 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:44614 10 6452 1 2025-12-01 04:53:37.443 00:00:10.372 TCP 23.104.0.1:42950 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:54:12.071 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44326 10 6452 1 2025-12-01 04:54:37.856 00:00:11.558 TCP 23.104.0.1:41982 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:55:12.293 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40910 10 6452 1 2025-12-01 04:55:27.204 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 04:55:27.274 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 04:55:39.457 00:00:10.364 TCP 23.104.0.1:53640 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:56:12.521 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57426 10 6452 1 2025-12-01 04:56:39.856 00:00:10.376 TCP 23.104.0.1:55624 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:57:12.738 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34956 10 6452 1 2025-12-01 04:57:40.273 00:00:10.369 TCP 23.104.0.1:48902 -> 1.101.0.1:3000 11 1507 1 2025-12-01 04:58:12.949 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:40510 10 6452 1 2025-12-01 04:58:40.677 00:00:10.328 TCP 23.104.0.1:57746 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507045, total packets: 1584, avg bps: 1045, avg pps: 0, avg bpp: 320 Time window: 2025-12-01 03:54:10 - 2025-12-01 04:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0009s Wall: 0.0015s flows/second: 111179.2 Runtime: 0.0015s