Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 10:55:06.153 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 10:55:06.152 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 10:59:19.220 00:00:10.367 TCP 23.104.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-12-01 10:59:38.331 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36862 10 6452 1 2025-12-01 11:00:19.624 00:00:10.372 TCP 23.104.0.1:43722 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:00:34.879 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 11:00:34.908 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 11:00:38.557 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41132 10 6452 1 2025-12-01 11:01:20.036 00:00:12.447 TCP 23.104.0.1:60462 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:01:38.772 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54662 10 6452 1 2025-12-01 11:02:22.531 00:00:10.326 TCP 23.104.0.1:46202 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:02:38.943 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33682 10 6452 1 2025-12-01 11:03:22.893 00:00:11.211 TCP 23.104.0.1:56220 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:03:39.177 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43416 10 6452 1 2025-12-01 11:04:24.142 00:00:10.367 TCP 23.104.0.1:45540 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:04:39.387 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53312 10 6452 1 2025-12-01 11:01:06.157 00:05:04.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 11:01:06.156 00:05:04.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 11:05:34.888 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 11:05:24.549 00:00:10.323 TCP 23.104.0.1:59900 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:05:34.696 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 11:05:39.613 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35124 10 6452 1 2025-12-01 11:06:24.913 00:00:11.084 TCP 23.104.0.1:56722 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:06:39.830 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:58944 10 6452 1 2025-12-01 11:07:26.055 00:00:10.360 TCP 23.104.0.1:57416 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:07:40.037 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40030 10 6452 1 2025-12-01 11:08:26.452 00:00:10.372 TCP 23.104.0.1:41082 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:08:40.259 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60386 10 6452 1 2025-12-01 11:09:26.860 00:00:10.376 TCP 23.104.0.1:52740 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:09:40.475 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37182 11 6492 1 2025-12-01 11:10:34.730 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 11:10:34.898 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 11:10:27.277 00:00:10.327 TCP 23.104.0.1:49228 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:10:40.691 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:55670 10 6452 1 2025-12-01 11:07:06.159 00:05:04.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 11:07:06.159 00:05:04.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 11:11:27.651 00:00:10.361 TCP 23.104.0.1:58986 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:11:40.936 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:40972 10 6452 1 2025-12-01 11:12:28.063 00:00:10.362 TCP 23.104.0.1:51552 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:12:41.180 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50834 10 6452 1 2025-12-01 11:13:28.462 00:00:10.742 TCP 23.104.0.1:34984 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:13:41.400 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58208 10 6452 1 2025-12-01 11:14:29.246 00:00:10.362 TCP 23.104.0.1:42116 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:14:41.622 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43586 10 6452 1 2025-12-01 11:15:34.923 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 11:15:34.777 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 11:15:29.647 00:00:10.406 TCP 23.104.0.1:46232 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:15:41.845 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59992 10 6452 1 2025-12-01 11:16:30.102 00:00:10.367 TCP 23.104.0.1:45290 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:16:42.083 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-12-01 11:13:06.160 00:05:04.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 11:13:06.157 00:05:04.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 11:17:30.520 00:00:10.332 TCP 23.104.0.1:48854 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:17:42.301 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33414 10 6452 1 2025-12-01 11:18:30.895 00:00:10.385 TCP 23.104.0.1:55306 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:18:42.518 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55620 10 6452 1 2025-12-01 11:19:31.315 00:00:10.368 TCP 23.104.0.1:49142 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:19:42.688 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44682 10 6452 1 2025-12-01 11:20:35.002 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 11:20:35.003 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 11:20:31.722 00:00:10.375 TCP 23.104.0.1:49354 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:20:42.908 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60486 10 6452 1 2025-12-01 11:21:32.134 00:00:10.365 TCP 23.104.0.1:58892 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:21:43.126 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36790 10 6452 1 2025-12-01 11:22:32.539 00:00:10.439 TCP 23.104.0.1:54366 -> 1.101.0.1:3000 15 1926 1 2025-12-01 11:22:43.293 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:59688 12 10375 1 2025-12-01 11:19:06.162 00:05:04.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 11:19:06.165 00:05:04.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 11:23:33.017 00:00:10.388 TCP 23.104.0.1:44612 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:23:43.538 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56724 10 6452 1 2025-12-01 11:24:33.462 00:00:10.320 TCP 23.104.0.1:51578 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:24:43.761 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42038 10 6452 1 2025-12-01 11:25:35.064 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 11:25:35.262 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 11:25:33.819 00:00:10.362 TCP 23.104.0.1:34132 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:25:43.983 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33474 10 6452 1 2025-12-01 11:26:34.217 00:00:10.333 TCP 23.104.0.1:51950 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:26:44.206 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47292 10 6452 1 2025-12-01 11:27:34.589 00:00:10.375 TCP 23.104.0.1:54708 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:27:44.427 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49572 10 6452 1 2025-12-01 11:28:35.018 00:00:10.361 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:28:44.664 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56392 10 6452 1 2025-12-01 11:25:06.163 00:05:04.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 11:25:06.165 00:05:04.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 11:29:35.415 00:00:10.371 TCP 23.104.0.1:32994 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:29:44.881 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:36296 10 6452 1 2025-12-01 11:30:35.032 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 11:30:34.982 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 11:30:35.829 00:00:10.390 TCP 23.104.0.1:43918 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:30:45.121 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59334 10 6452 1 2025-12-01 11:31:36.262 00:00:10.371 TCP 23.104.0.1:42106 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:31:45.337 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46646 10 6452 1 2025-12-01 11:32:36.665 00:00:10.442 TCP 23.104.0.1:53922 -> 1.101.0.1:3000 15 1926 1 2025-12-01 11:32:45.558 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:47830 12 10375 1 2025-12-01 11:33:37.146 00:00:10.325 TCP 23.104.0.1:52954 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:33:45.804 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58284 10 6452 1 2025-12-01 11:34:37.512 00:00:10.368 TCP 23.104.0.1:49428 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:34:45.978 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:33006 10 6452 1 2025-12-01 11:31:06.164 00:05:04.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 11:31:06.167 00:05:04.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 11:35:35.229 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 11:35:35.193 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 11:35:37.915 00:00:10.367 TCP 23.104.0.1:47684 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:35:46.224 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55026 10 6452 1 2025-12-01 11:36:38.317 00:00:10.361 TCP 23.104.0.1:60920 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:36:46.452 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46880 10 6452 1 2025-12-01 11:37:38.717 00:00:10.343 TCP 23.104.0.1:41112 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:37:46.679 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49700 10 6452 1 2025-12-01 11:38:39.107 00:00:10.364 TCP 23.104.0.1:41618 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:38:46.891 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:40366 10 6452 1 2025-12-01 11:39:39.511 00:00:10.368 TCP 23.104.0.1:59184 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:39:47.125 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39552 10 6452 1 2025-12-01 11:40:35.169 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 11:40:35.326 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 11:40:39.921 00:00:10.372 TCP 23.104.0.1:33644 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:40:47.345 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56160 10 6452 1 2025-12-01 11:37:06.168 00:05:04.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 11:37:06.165 00:05:04.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 11:41:40.329 00:00:10.367 TCP 23.104.0.1:57672 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:41:47.569 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42458 10 6452 1 2025-12-01 11:42:40.737 00:00:10.369 TCP 23.104.0.1:54642 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:42:47.780 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:43850 10 6452 1 2025-12-01 11:43:41.136 00:00:10.369 TCP 23.104.0.1:36478 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:43:48.005 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55570 10 6452 1 2025-12-01 11:44:41.539 00:00:10.416 TCP 23.104.0.1:50268 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:44:48.224 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59000 10 6452 1 2025-12-01 11:45:35.426 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 11:45:35.287 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 11:45:41.998 00:00:10.378 TCP 23.104.0.1:33236 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:45:48.447 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53360 10 6452 1 2025-12-01 11:46:42.413 00:00:10.819 TCP 23.104.0.1:51706 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:46:48.666 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45228 10 6452 1 2025-12-01 11:43:06.169 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 11:43:06.166 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 11:47:43.278 00:00:10.370 TCP 23.104.0.1:45752 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:47:48.884 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39130 10 6452 1 2025-12-01 11:48:43.691 00:00:10.373 TCP 23.104.0.1:49846 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:48:49.103 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60738 10 6452 1 2025-12-01 11:49:44.112 00:00:10.366 TCP 23.104.0.1:35816 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:49:49.311 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48186 10 6452 1 2025-12-01 11:50:35.662 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 11:50:35.594 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 11:50:44.522 00:00:10.374 TCP 23.104.0.1:42142 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:50:49.531 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53704 10 6452 1 2025-12-01 11:51:44.932 00:00:10.383 TCP 23.104.0.1:43694 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:51:49.747 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46902 10 6452 1 2025-12-01 11:52:45.351 00:00:10.365 TCP 23.104.0.1:54926 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:52:49.919 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47714 10 6452 1 2025-12-01 11:49:06.167 00:05:04.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 11:49:06.169 00:05:04.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 11:53:45.757 00:00:10.373 TCP 23.104.0.1:47446 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:53:50.135 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48256 10 6452 1 2025-12-01 11:54:46.166 00:00:10.363 TCP 23.104.0.1:47438 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:54:50.355 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57090 10 6452 1 2025-12-01 11:55:36.256 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 11:55:36.073 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 11:55:46.569 00:00:10.365 TCP 23.104.0.1:37922 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:55:50.571 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53668 10 6452 1 2025-12-01 11:56:50.757 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56974 10 6452 1 2025-12-01 11:56:46.972 00:00:10.374 TCP 23.104.0.1:44692 -> 1.101.0.1:3000 11 1507 1 2025-12-01 11:57:50.974 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:39872 12 10375 1 2025-12-01 11:57:47.390 00:00:10.942 TCP 23.104.0.1:36806 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 162, total bytes: 503455, total packets: 1570, avg bps: 1066, avg pps: 0, avg bpp: 320 Time window: 2025-12-01 10:55:06 - 2025-12-01 11:58:01 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0060s User: 0.0010s Wall: 0.0023s flows/second: 70653.8 Runtime: 0.0023s