Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 08:55:06.127 00:05:04.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 08:55:06.130 00:05:04.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 08:59:08.680 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45208 10 6452 1 2025-12-01 08:59:21.607 00:00:10.366 TCP 23.104.0.1:50940 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:00:08.888 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56044 10 6452 1 2025-12-01 09:00:32.025 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 09:00:32.029 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 09:00:22.009 00:00:10.367 TCP 23.104.0.1:52900 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:01:09.105 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56392 10 6452 1 2025-12-01 09:01:22.414 00:00:10.366 TCP 23.104.0.1:48212 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:02:09.285 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36864 10 6452 1 2025-12-01 09:02:22.817 00:00:10.331 TCP 23.104.0.1:38004 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:03:09.455 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56994 10 6452 1 2025-12-01 09:03:23.179 00:00:10.371 TCP 23.104.0.1:52416 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:04:09.628 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53368 10 6452 1 2025-12-01 09:04:23.581 00:00:10.367 TCP 23.104.0.1:37636 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:01:06.128 00:05:04.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 09:01:06.130 00:05:04.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 09:05:09.842 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44560 10 6452 1 2025-12-01 09:05:31.965 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 09:05:32.319 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 09:05:23.984 00:00:10.372 TCP 23.104.0.1:34800 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:06:10.091 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:45616 10 6452 1 2025-12-01 09:06:24.392 00:00:10.368 TCP 23.104.0.1:33086 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:07:10.300 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50664 10 6452 1 2025-12-01 09:07:24.802 00:00:10.413 TCP 23.104.0.1:55168 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:08:10.515 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39706 10 6452 1 2025-12-01 09:08:25.251 00:00:10.324 TCP 23.104.0.1:49184 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:09:10.691 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43070 10 6452 1 2025-12-01 09:09:25.617 00:00:10.322 TCP 23.104.0.1:57088 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:10:10.898 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57806 10 6452 1 2025-12-01 09:10:32.345 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 09:10:32.498 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 09:10:25.983 00:00:10.363 TCP 23.104.0.1:52894 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:07:06.131 00:05:04.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 09:07:06.128 00:05:04.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 09:11:11.126 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44180 10 6452 1 2025-12-01 09:11:26.391 00:00:10.367 TCP 23.104.0.1:60844 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:12:11.337 00:00:10.791 TCP 1.101.0.1:3000 -> 22.102.0.1:37502 10 6452 1 2025-12-01 09:12:26.796 00:00:10.361 TCP 23.104.0.1:52254 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:13:12.170 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52886 10 6452 1 2025-12-01 09:13:27.203 00:00:10.323 TCP 23.104.0.1:35866 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:14:12.413 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38224 10 6452 1 2025-12-01 09:14:27.567 00:00:10.366 TCP 23.104.0.1:41740 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:15:12.624 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33838 10 6452 1 2025-12-01 09:15:32.822 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 09:15:32.609 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 09:15:27.973 00:00:10.372 TCP 23.104.0.1:43222 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:16:12.839 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43288 10 6452 1 2025-12-01 09:16:28.386 00:00:10.329 TCP 23.104.0.1:49080 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:13:06.129 00:05:04.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 09:13:06.131 00:05:04.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 09:17:13.077 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46410 10 6452 1 2025-12-01 09:17:28.751 00:00:10.390 TCP 23.104.0.1:39862 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:18:13.244 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58914 10 6452 1 2025-12-01 09:18:29.181 00:00:10.326 TCP 23.104.0.1:34622 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:19:13.416 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47602 10 6452 1 2025-12-01 09:19:29.543 00:00:10.435 TCP 23.104.0.1:33176 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:20:13.632 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57144 10 6452 1 2025-12-01 09:20:32.529 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 09:20:32.594 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 09:20:30.013 00:00:10.363 TCP 23.104.0.1:35688 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:21:13.846 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56222 10 6452 1 2025-12-01 09:21:30.410 00:00:10.372 TCP 23.104.0.1:58664 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:22:14.082 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53894 10 6452 1 2025-12-01 09:22:30.819 00:00:10.368 TCP 23.104.0.1:42034 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:19:06.129 00:05:04.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 09:19:06.132 00:05:04.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 09:23:14.299 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58090 10 6452 1 2025-12-01 09:23:31.226 00:00:10.367 TCP 23.104.0.1:56252 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:24:14.473 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55022 10 6452 1 2025-12-01 09:24:31.634 00:00:10.364 TCP 23.104.0.1:57720 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:25:14.693 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59758 10 6452 1 2025-12-01 09:25:32.618 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 09:25:32.733 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 09:25:32.034 00:00:10.365 TCP 23.104.0.1:56274 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:26:14.908 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60468 10 6452 1 2025-12-01 09:26:32.439 00:00:10.322 TCP 23.104.0.1:52190 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:27:15.128 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51124 10 6452 1 2025-12-01 09:27:32.804 00:00:10.366 TCP 23.104.0.1:42332 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:28:15.343 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44180 10 6452 1 2025-12-01 09:28:33.213 00:00:10.363 TCP 23.104.0.1:38930 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:25:06.132 00:05:04.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 09:25:06.134 00:05:04.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 09:29:15.518 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39440 10 6452 1 2025-12-01 09:29:33.616 00:00:10.365 TCP 23.104.0.1:41726 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:30:15.726 00:00:10.324 TCP 1.101.0.1:3000 -> 22.102.0.1:40936 10 6452 1 2025-12-01 09:30:32.488 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 09:30:32.474 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 09:30:34.021 00:00:11.079 TCP 23.104.0.1:43082 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:31:16.088 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46396 10 6452 1 2025-12-01 09:31:35.140 00:00:10.365 TCP 23.104.0.1:56214 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:32:16.312 00:00:10.981 TCP 1.101.0.1:3000 -> 22.102.0.1:46368 10 6452 1 2025-12-01 09:32:35.541 00:00:10.361 TCP 23.104.0.1:42908 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:33:17.335 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60976 10 6452 1 2025-12-01 09:33:35.942 00:00:10.366 TCP 23.104.0.1:46856 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:34:17.554 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:56240 10 6452 1 2025-12-01 09:34:36.345 00:00:10.366 TCP 23.104.0.1:53564 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:31:06.135 00:05:04.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 09:31:06.135 00:05:04.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 09:35:32.876 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 09:35:17.750 00:00:11.242 TCP 1.101.0.1:3000 -> 22.102.0.1:43252 10 6452 1 2025-12-01 09:35:32.657 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 09:35:36.747 00:00:16.078 TCP 23.104.0.1:33034 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:36:19.042 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32990 10 6452 1 2025-12-01 09:36:42.880 00:00:10.370 TCP 23.104.0.1:39314 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:37:19.266 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38606 10 6452 1 2025-12-01 09:37:43.290 00:00:10.367 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:38:19.435 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33392 10 6452 1 2025-12-01 09:38:43.695 00:00:10.583 TCP 23.104.0.1:46328 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:39:19.655 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45952 10 6452 1 2025-12-01 09:39:44.319 00:00:10.358 TCP 23.104.0.1:58014 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:40:33.081 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 09:40:19.888 00:00:10.610 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-12-01 09:40:32.904 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 09:40:44.716 00:00:10.384 TCP 23.104.0.1:54734 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:37:06.135 00:05:04.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 09:37:06.133 00:05:04.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 09:41:20.539 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52230 10 6452 1 2025-12-01 09:41:45.138 00:00:10.368 TCP 23.104.0.1:47882 -> 1.101.0.1:3000 12 1559 1 2025-12-01 09:42:20.762 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42476 10 6452 1 2025-12-01 09:42:45.544 00:00:10.367 TCP 23.104.0.1:45142 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:43:20.982 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:44970 10 6452 1 2025-12-01 09:43:45.950 00:00:10.367 TCP 23.104.0.1:51012 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:44:21.218 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58024 10 6452 1 2025-12-01 09:44:46.353 00:00:10.374 TCP 23.104.0.1:59848 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:45:21.428 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35084 10 6452 1 2025-12-01 09:45:32.908 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 09:45:33.263 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 09:45:46.761 00:00:10.381 TCP 23.104.0.1:50794 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:46:21.650 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52870 10 6452 1 2025-12-01 09:46:47.181 00:00:10.366 TCP 23.104.0.1:58078 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:43:06.135 00:05:04.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 09:43:06.134 00:05:04.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 09:47:21.859 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:35002 10 6452 1 2025-12-01 09:47:47.583 00:00:10.364 TCP 23.104.0.1:57422 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:48:22.067 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49486 10 6452 1 2025-12-01 09:48:47.987 00:00:10.344 TCP 23.104.0.1:53346 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:49:22.273 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55326 10 6452 1 2025-12-01 09:49:48.379 00:00:10.368 TCP 23.104.0.1:46404 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:50:33.292 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 09:50:22.479 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41040 10 6452 1 2025-12-01 09:50:33.339 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 09:50:48.783 00:00:10.365 TCP 23.104.0.1:50356 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:51:22.695 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36542 10 6452 1 2025-12-01 09:51:49.182 00:00:10.368 TCP 23.104.0.1:47682 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:52:22.911 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54586 10 6452 1 2025-12-01 09:52:49.583 00:00:10.328 TCP 23.104.0.1:48154 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:49:06.135 00:05:04.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 09:49:06.138 00:05:04.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 09:53:23.143 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45222 10 6452 1 2025-12-01 09:53:49.954 00:00:10.366 TCP 23.104.0.1:32822 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:54:23.360 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52982 10 6452 1 2025-12-01 09:54:50.356 00:00:10.367 TCP 23.104.0.1:46114 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:55:33.222 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 09:55:23.580 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57642 10 6452 1 2025-12-01 09:55:33.359 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 09:55:50.759 00:00:10.331 TCP 23.104.0.1:50580 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:56:23.801 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34254 10 6452 1 2025-12-01 09:56:51.124 00:00:10.366 TCP 23.104.0.1:36004 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:57:24.021 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59628 10 6452 1 2025-12-01 09:57:51.537 00:00:10.351 TCP 23.104.0.1:50382 -> 1.101.0.1:3000 11 1507 1 2025-12-01 09:58:24.234 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50250 10 6452 1 Summary: total flows: 163, total bytes: 496893, total packets: 1562, avg bps: 1043, avg pps: 0, avg bpp: 318 Time window: 2025-12-01 08:55:06 - 2025-12-01 09:58:34 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0056s User: 0.0000s Wall: 0.0025s flows/second: 63942.3 Runtime: 0.0026s