Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 06:55:06.095 00:05:04.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 06:55:06.098 00:05:04.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 06:59:32.270 00:00:10.367 TCP 23.104.0.1:43924 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:59:41.117 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37430 10 6452 1 2025-12-01 07:00:29.800 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 07:00:29.652 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 07:00:32.675 00:00:10.367 TCP 23.104.0.1:37234 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:00:41.289 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53790 10 6452 1 2025-12-01 07:01:33.103 00:00:10.364 TCP 23.104.0.1:42836 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:01:41.502 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45096 10 6452 1 2025-12-01 07:02:33.508 00:00:10.325 TCP 23.104.0.1:59286 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:02:41.670 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55960 10 6452 1 2025-12-01 07:03:33.870 00:00:10.367 TCP 23.104.0.1:52950 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:03:41.841 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40590 10 6452 1 2025-12-01 07:04:34.276 00:00:10.327 TCP 23.104.0.1:38148 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:04:42.083 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57790 10 6452 1 2025-12-01 07:01:06.100 00:05:04.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 07:01:06.097 00:05:04.769 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 07:05:30.036 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 07:05:29.979 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 07:05:34.642 00:00:10.367 TCP 23.104.0.1:60706 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:05:42.311 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33186 10 6452 1 2025-12-01 07:06:35.049 00:00:10.363 TCP 23.104.0.1:40880 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:06:42.524 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37636 10 6452 1 2025-12-01 07:07:35.452 00:00:10.363 TCP 23.104.0.1:38568 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:07:42.744 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48562 10 6452 1 2025-12-01 07:08:35.855 00:00:10.372 TCP 23.104.0.1:56820 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:08:42.915 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36706 10 6452 1 2025-12-01 07:09:36.267 00:00:10.366 TCP 23.104.0.1:40358 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:09:43.138 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36108 10 6452 1 2025-12-01 07:10:29.962 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 07:10:29.803 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 07:10:36.675 00:00:10.366 TCP 23.104.0.1:43152 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:10:43.347 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33988 10 6452 1 2025-12-01 07:07:06.100 00:05:04.768 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 07:07:06.103 00:05:04.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 07:11:37.102 00:00:10.369 TCP 23.104.0.1:39776 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:11:43.554 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34564 10 6452 1 2025-12-01 07:12:37.508 00:00:10.373 TCP 23.104.0.1:33282 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:12:43.772 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59082 10 6452 1 2025-12-01 07:13:37.916 00:00:10.383 TCP 23.104.0.1:52070 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:13:43.945 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:53296 10 6452 1 2025-12-01 07:14:38.335 00:00:10.547 TCP 23.104.0.1:33602 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:14:44.186 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:41464 10 6452 1 2025-12-01 07:15:30.082 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 07:15:30.122 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 07:15:38.925 00:00:10.342 TCP 23.104.0.1:56666 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:15:44.436 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:59682 10 6452 1 2025-12-01 07:16:39.304 00:00:10.363 TCP 23.104.0.1:46416 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:16:44.616 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48898 10 6452 1 2025-12-01 07:13:06.101 00:05:04.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 07:13:06.104 00:05:04.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 07:17:39.709 00:00:10.362 TCP 23.104.0.1:55702 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:17:44.831 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34508 10 6452 1 2025-12-01 07:18:40.111 00:00:10.366 TCP 23.104.0.1:44952 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:18:45.071 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43282 10 6452 1 2025-12-01 07:19:40.516 00:00:10.362 TCP 23.104.0.1:55194 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:19:45.285 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39784 10 6452 1 2025-12-01 07:20:30.402 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 07:20:30.361 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 07:20:40.916 00:00:10.388 TCP 23.104.0.1:58462 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:20:45.501 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59172 10 6452 1 2025-12-01 07:21:41.345 00:00:10.379 TCP 23.104.0.1:56468 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:21:45.677 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47148 10 6452 1 2025-12-01 07:22:45.886 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46146 10 6452 1 2025-12-01 07:22:41.771 00:00:10.371 TCP 23.104.0.1:42598 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:19:06.105 00:05:04.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 07:19:06.103 00:05:04.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 07:23:46.108 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59768 10 6452 1 2025-12-01 07:23:42.181 00:00:10.361 TCP 23.104.0.1:43600 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:24:42.582 00:00:10.363 TCP 23.104.0.1:40780 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:24:46.319 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52018 10 6452 1 2025-12-01 07:25:30.913 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 07:25:30.769 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 07:25:42.984 00:00:10.367 TCP 23.104.0.1:52240 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:25:46.528 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33930 10 6452 1 2025-12-01 07:26:43.389 00:00:10.361 TCP 23.104.0.1:60520 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:26:46.751 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57304 10 6452 1 2025-12-01 07:27:43.786 00:00:10.386 TCP 23.104.0.1:52732 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:27:46.966 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55370 10 6452 1 2025-12-01 07:28:44.211 00:00:10.323 TCP 23.104.0.1:49746 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:28:47.189 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33318 10 6452 1 2025-12-01 07:25:06.105 00:05:04.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 07:25:06.103 00:05:04.768 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 07:29:44.580 00:00:10.365 TCP 23.104.0.1:44654 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:29:47.367 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55884 10 6452 1 2025-12-01 07:30:30.438 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 07:30:30.400 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 07:30:44.984 00:00:10.387 TCP 23.104.0.1:51968 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:30:47.541 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55484 10 6452 1 2025-12-01 07:31:45.407 00:00:10.368 TCP 23.104.0.1:39916 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:31:47.754 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44470 10 6452 1 2025-12-01 07:32:45.812 00:00:10.377 TCP 23.104.0.1:36956 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:32:47.928 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58730 10 6452 1 2025-12-01 07:33:46.228 00:00:10.364 TCP 23.104.0.1:55436 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:33:48.168 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43624 10 6452 1 2025-12-01 07:34:46.629 00:00:10.322 TCP 23.104.0.1:52594 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:34:48.396 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58660 10 6452 1 2025-12-01 07:31:06.104 00:05:04.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 07:31:06.105 00:05:04.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 07:35:30.596 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 07:35:30.371 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 07:35:46.993 00:00:10.364 TCP 23.104.0.1:54814 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:35:48.615 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51132 10 6452 1 2025-12-01 07:36:47.395 00:00:10.320 TCP 23.104.0.1:43102 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:36:48.827 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60394 10 6452 1 2025-12-01 07:37:47.757 00:00:10.387 TCP 23.104.0.1:46714 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:37:49.039 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58688 10 6452 1 2025-12-01 07:38:49.252 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49156 10 6452 1 2025-12-01 07:38:48.180 00:00:10.369 TCP 23.104.0.1:36806 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:39:49.465 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36202 10 6452 1 2025-12-01 07:39:48.589 00:00:10.363 TCP 23.104.0.1:46980 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:40:30.514 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 07:40:30.551 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 07:40:48.990 00:00:10.368 TCP 23.104.0.1:55698 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:40:49.677 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49194 10 6452 1 2025-12-01 07:37:06.106 00:05:04.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 07:37:06.109 00:05:04.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 07:41:49.398 00:00:10.365 TCP 23.104.0.1:43576 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:41:49.848 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:59910 10 6452 1 2025-12-01 07:42:50.101 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:38208 10 6452 1 2025-12-01 07:42:49.801 00:00:10.339 TCP 23.104.0.1:58902 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:43:50.283 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44964 10 6452 1 2025-12-01 07:43:50.184 00:00:10.376 TCP 23.104.0.1:37494 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:44:50.597 00:00:10.367 TCP 23.104.0.1:55958 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:44:50.510 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34770 10 6452 1 2025-12-01 07:45:30.472 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 07:45:30.722 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 07:45:50.725 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55428 10 6452 1 2025-12-01 07:45:51.001 00:00:10.361 TCP 23.104.0.1:36494 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:46:51.400 00:00:10.366 TCP 23.104.0.1:56826 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:46:50.939 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42772 10 6452 1 2025-12-01 07:43:06.110 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 07:43:06.108 00:05:04.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 07:47:51.119 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59924 10 6452 1 2025-12-01 07:47:51.806 00:00:10.367 TCP 23.104.0.1:43900 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:48:51.331 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40622 10 6452 1 2025-12-01 07:48:52.211 00:00:10.361 TCP 23.104.0.1:55768 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:49:51.545 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41878 10 6452 1 2025-12-01 07:49:52.612 00:00:10.374 TCP 23.104.0.1:39912 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:50:30.813 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 07:50:30.760 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 07:50:51.757 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44576 10 6452 1 2025-12-01 07:50:53.018 00:00:10.364 TCP 23.104.0.1:36654 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:51:53.417 00:00:10.368 TCP 23.104.0.1:35648 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:51:51.931 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:55278 10 6452 1 2025-12-01 07:52:52.119 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55592 10 6452 1 2025-12-01 07:49:06.110 00:05:04.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 07:52:53.823 00:00:10.368 TCP 23.104.0.1:51342 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:49:06.112 00:05:04.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 07:53:52.330 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43228 10 6452 1 2025-12-01 07:53:54.226 00:00:10.365 TCP 23.104.0.1:48874 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:54:52.550 00:00:10.242 TCP 1.101.0.1:3000 -> 22.102.0.1:42592 11 6504 1 2025-12-01 07:54:54.634 00:00:10.359 TCP 23.104.0.1:40998 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:55:30.799 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 07:55:30.712 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 07:55:55.032 00:00:10.324 TCP 23.104.0.1:38046 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:55:52.829 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40198 10 6452 1 2025-12-01 07:56:53.062 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45934 10 6452 1 2025-12-01 07:56:55.393 00:00:10.365 TCP 23.104.0.1:50346 -> 1.101.0.1:3000 11 1507 1 2025-12-01 07:57:53.285 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37492 10 6452 1 2025-12-01 07:57:55.799 00:00:10.364 TCP 23.104.0.1:39564 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490441, total packets: 1552, avg bps: 1037, avg pps: 0, avg bpp: 316 Time window: 2025-12-01 06:55:06 - 2025-12-01 07:58:06 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0028s User: 0.0028s Wall: 0.0022s flows/second: 72162.0 Runtime: 0.0023s