Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 04:55:06.059 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 04:55:06.055 00:05:04.774 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 04:59:13.157 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57444 10 6452 1 2025-12-01 04:59:41.047 00:00:10.367 TCP 23.104.0.1:49422 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:00:13.363 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60436 10 6452 1 2025-12-01 05:00:27.054 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:00:27.216 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 05:00:41.451 00:00:10.362 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:01:13.575 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39516 10 6452 1 2025-12-01 05:01:41.847 00:00:10.380 TCP 23.104.0.1:49724 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:02:13.790 00:00:10.297 TCP 1.101.0.1:3000 -> 22.102.0.1:43292 10 6452 1 2025-12-01 05:02:42.265 00:00:10.363 TCP 23.104.0.1:60858 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:03:14.126 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49612 10 6452 1 2025-12-01 05:03:42.663 00:00:10.370 TCP 23.104.0.1:35294 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:04:14.347 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36228 10 6452 1 2025-12-01 05:04:43.095 00:00:10.364 TCP 23.104.0.1:52418 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:01:06.060 00:05:04.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 05:01:06.057 00:05:04.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 05:05:14.556 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:48820 10 6452 1 2025-12-01 05:05:27.481 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 05:05:27.491 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:05:43.501 00:00:10.714 TCP 23.104.0.1:54062 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:06:14.801 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59426 10 6452 1 2025-12-01 05:06:44.253 00:00:10.370 TCP 23.104.0.1:55576 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:07:15.025 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57604 10 6452 1 2025-12-01 05:07:44.662 00:00:10.366 TCP 23.104.0.1:60562 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:08:15.243 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37928 10 6452 1 2025-12-01 05:08:45.096 00:00:10.368 TCP 23.104.0.1:60458 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:09:15.419 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:38296 10 6452 1 2025-12-01 05:09:45.503 00:00:10.362 TCP 23.104.0.1:35362 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:10:15.585 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44118 10 6452 1 2025-12-01 05:10:27.445 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 05:10:27.577 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:10:45.903 00:00:10.528 TCP 23.104.0.1:46028 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:07:06.059 00:05:04.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 05:07:06.061 00:05:04.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 05:11:15.803 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49736 10 6452 1 2025-12-01 05:11:46.477 00:00:10.362 TCP 23.104.0.1:45150 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:12:16.014 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55888 10 6452 1 2025-12-01 05:12:46.878 00:00:10.395 TCP 23.104.0.1:38368 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:13:16.232 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45462 10 6452 1 2025-12-01 05:13:47.311 00:00:10.679 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:14:16.447 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43176 10 6452 1 2025-12-01 05:14:48.028 00:00:10.402 TCP 23.104.0.1:60028 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:15:16.660 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53678 10 6452 1 2025-12-01 05:15:27.845 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 05:15:27.717 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:15:48.474 00:00:10.328 TCP 23.104.0.1:39542 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:16:16.830 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48880 10 6452 1 2025-12-01 05:16:48.840 00:00:10.389 TCP 23.104.0.1:32952 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:13:06.066 00:05:04.770 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 05:13:06.065 00:05:04.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 05:17:17.054 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53112 10 6452 1 2025-12-01 05:17:49.269 00:00:10.325 TCP 23.104.0.1:35222 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:18:17.274 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51036 10 6452 1 2025-12-01 05:18:49.631 00:00:10.364 TCP 23.104.0.1:45328 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:19:17.448 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52106 10 6452 1 2025-12-01 05:19:50.033 00:00:10.370 TCP 23.104.0.1:42090 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:20:27.893 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:20:27.930 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 05:20:17.657 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50994 10 6452 1 2025-12-01 05:20:50.437 00:00:10.368 TCP 23.104.0.1:35946 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:21:17.874 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59518 10 6452 1 2025-12-01 05:21:50.841 00:00:10.396 TCP 23.104.0.1:55652 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:22:18.092 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42742 10 6452 1 2025-12-01 05:22:51.280 00:00:10.388 TCP 23.104.0.1:47946 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:19:06.065 00:05:04.777 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 05:19:06.067 00:05:04.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 05:23:18.314 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60248 10 6452 1 2025-12-01 05:23:51.698 00:00:10.366 TCP 23.104.0.1:58050 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:24:18.529 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60432 10 6452 1 2025-12-01 05:24:52.106 00:00:10.376 TCP 23.104.0.1:47274 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:25:27.936 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:25:27.869 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 05:25:18.742 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45896 10 6452 1 2025-12-01 05:25:52.511 00:00:10.363 TCP 23.104.0.1:49498 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:26:18.920 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33002 10 6452 1 2025-12-01 05:26:52.913 00:00:10.370 TCP 23.104.0.1:36060 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:27:19.131 00:00:10.852 TCP 1.101.0.1:3000 -> 22.102.0.1:46000 10 6452 1 2025-12-01 05:27:53.318 00:00:10.364 TCP 23.104.0.1:45590 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:28:20.043 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57466 10 6452 1 2025-12-01 05:28:53.719 00:00:10.380 TCP 23.104.0.1:57496 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:25:06.073 00:05:04.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 05:25:06.070 00:05:04.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 05:29:20.257 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53474 10 6452 1 2025-12-01 05:29:54.139 00:00:10.370 TCP 23.104.0.1:36948 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:30:28.069 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:30:27.775 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 05:30:20.468 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57706 10 6452 1 2025-12-01 05:30:54.550 00:00:10.366 TCP 23.104.0.1:46332 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:31:20.679 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:39106 10 6452 1 2025-12-01 05:31:54.958 00:00:10.368 TCP 23.104.0.1:39306 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:32:20.860 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42090 10 6452 1 2025-12-01 05:32:55.362 00:00:10.360 TCP 23.104.0.1:48506 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:33:21.092 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:41288 10 6452 1 2025-12-01 05:33:55.763 00:00:10.371 TCP 23.104.0.1:52484 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:34:21.300 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51420 10 6452 1 2025-12-01 05:34:56.172 00:00:10.361 TCP 23.104.0.1:44750 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:31:06.075 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 05:31:06.072 00:05:04.774 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 05:35:21.478 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59542 10 6452 1 2025-12-01 05:35:27.968 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 05:35:27.758 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:35:56.571 00:00:10.365 TCP 23.104.0.1:39810 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:36:21.705 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49520 10 6452 1 2025-12-01 05:36:56.974 00:00:10.364 TCP 23.104.0.1:58924 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:37:21.920 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60264 10 6452 1 2025-12-01 05:37:57.376 00:00:10.362 TCP 23.104.0.1:49570 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:38:22.129 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57162 10 6452 1 2025-12-01 05:38:57.778 00:00:10.367 TCP 23.104.0.1:48482 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:39:22.345 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34008 10 6452 1 2025-12-01 05:39:58.187 00:00:10.364 TCP 23.104.0.1:54482 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:40:27.850 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 05:40:27.938 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:40:22.559 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34058 10 6452 1 2025-12-01 05:37:06.074 00:05:04.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 05:37:06.078 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 05:40:58.592 00:00:10.363 TCP 23.104.0.1:47538 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:41:22.732 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50974 10 6452 1 2025-12-01 05:41:58.993 00:00:10.360 TCP 23.104.0.1:43736 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:42:22.948 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:49090 10 6452 1 2025-12-01 05:42:59.398 00:00:10.365 TCP 23.104.0.1:60504 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:43:23.142 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38506 10 6452 1 2025-12-01 05:43:59.801 00:00:10.372 TCP 23.104.0.1:33350 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:44:23.364 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43266 10 6452 1 2025-12-01 05:45:00.208 00:00:10.363 TCP 23.104.0.1:40162 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:45:28.307 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:45:28.153 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 05:45:23.579 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46908 10 6452 1 2025-12-01 05:46:00.602 00:00:10.328 TCP 23.104.0.1:56760 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:46:23.753 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60286 10 6452 1 2025-12-01 05:43:06.076 00:05:04.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 05:47:00.968 00:00:10.371 TCP 23.104.0.1:44736 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:43:06.079 00:05:04.770 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 05:47:23.980 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:44226 10 6452 1 2025-12-01 05:48:01.382 00:00:10.360 TCP 23.104.0.1:60286 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:48:24.173 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47240 10 6452 1 2025-12-01 05:49:01.785 00:00:10.329 TCP 23.104.0.1:49258 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:49:24.386 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53870 10 6452 1 2025-12-01 05:50:02.160 00:00:10.358 TCP 23.104.0.1:36676 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:50:28.357 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 05:50:28.585 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:50:24.606 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56628 10 6452 1 2025-12-01 05:51:02.556 00:00:10.375 TCP 23.104.0.1:41680 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:51:24.841 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33530 10 6452 1 2025-12-01 05:52:02.980 00:00:10.368 TCP 23.104.0.1:41166 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:52:25.017 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55940 10 6452 1 2025-12-01 05:49:06.077 00:05:04.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 05:49:06.079 00:05:04.770 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 05:53:03.384 00:00:10.363 TCP 23.104.0.1:34824 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:53:25.237 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43516 10 6452 1 2025-12-01 05:54:03.800 00:00:10.364 TCP 23.104.0.1:44602 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:54:25.452 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57298 12 6556 1 2025-12-01 05:55:04.212 00:00:10.363 TCP 23.104.0.1:38064 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:55:28.449 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 05:55:28.590 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 05:55:25.662 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51202 10 6452 1 2025-12-01 05:56:04.619 00:00:10.328 TCP 23.104.0.1:34206 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:56:25.888 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36520 10 6452 1 2025-12-01 05:57:04.988 00:00:10.377 TCP 23.104.0.1:55312 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:57:26.103 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47594 10 6452 1 2025-12-01 05:58:05.404 00:00:10.915 TCP 23.104.0.1:44154 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:58:26.326 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41948 10 6452 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1043, avg pps: 0, avg bpp: 317 Time window: 2025-12-01 04:55:06 - 2025-12-01 05:58:36 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0061s User: 0.0000s Wall: 0.0023s flows/second: 69478.8 Runtime: 0.0024s