Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 12:55:06.184 00:05:04.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 12:55:06.187 00:05:04.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 12:59:05.251 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50542 10 6452 1 2025-12-01 12:59:13.063 00:00:10.365 TCP 23.104.0.1:50706 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:00:05.461 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42892 10 6452 1 2025-12-01 13:00:13.469 00:00:10.366 TCP 23.104.0.1:59968 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:00:36.697 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 13:00:37.059 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:01:05.673 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48600 10 6452 1 2025-12-01 13:01:13.874 00:00:10.385 TCP 23.104.0.1:51580 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:02:05.881 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35880 10 6452 1 2025-12-01 13:02:14.289 00:00:10.359 TCP 23.104.0.1:35522 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:03:06.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34204 10 6452 1 2025-12-01 13:03:14.685 00:00:10.368 TCP 23.104.0.1:54036 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:04:06.324 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-12-01 13:04:15.111 00:00:10.362 TCP 23.104.0.1:35098 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:01:06.185 00:05:04.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 13:01:06.187 00:05:04.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 13:05:06.566 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52948 10 6452 1 2025-12-01 13:05:15.513 00:00:10.325 TCP 23.104.0.1:45792 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:05:36.841 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:05:36.995 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 13:06:06.783 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51266 10 6452 1 2025-12-01 13:06:15.877 00:00:10.327 TCP 23.104.0.1:57162 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:07:06.961 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50332 10 6452 1 2025-12-01 13:07:16.247 00:00:10.363 TCP 23.104.0.1:47362 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:08:07.189 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49530 10 6452 1 2025-12-01 13:08:16.651 00:00:10.368 TCP 23.104.0.1:40162 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:09:07.407 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42522 10 6452 1 2025-12-01 13:09:17.064 00:00:10.323 TCP 23.104.0.1:37584 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:10:07.618 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38562 10 6452 1 2025-12-01 13:10:17.428 00:00:10.363 TCP 23.104.0.1:33528 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:10:37.251 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:10:37.108 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 13:07:06.187 00:05:04.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 13:07:06.189 00:05:04.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 13:11:07.836 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51862 10 6452 1 2025-12-01 13:11:17.827 00:00:10.396 TCP 23.104.0.1:39602 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:12:08.067 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39518 10 6452 1 2025-12-01 13:12:18.263 00:00:10.365 TCP 23.104.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:13:08.279 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49350 10 6452 1 2025-12-01 13:13:18.670 00:00:10.366 TCP 23.104.0.1:58590 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:14:08.498 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40780 10 6452 1 2025-12-01 13:14:19.109 00:00:10.368 TCP 23.104.0.1:39932 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:15:08.711 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46092 10 6452 1 2025-12-01 13:15:19.511 00:00:11.852 TCP 23.104.0.1:35428 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:15:37.260 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 13:15:37.327 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:16:08.925 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:33272 10 6452 1 2025-12-01 13:16:21.415 00:00:10.363 TCP 23.104.0.1:51198 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:13:06.192 00:05:04.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 13:13:06.194 00:05:04.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 13:17:09.115 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50820 10 6452 1 2025-12-01 13:17:21.817 00:00:10.324 TCP 23.104.0.1:42302 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:18:09.331 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36052 10 6452 1 2025-12-01 13:18:22.180 00:00:10.366 TCP 23.104.0.1:50824 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:19:09.549 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59152 10 6452 1 2025-12-01 13:19:22.586 00:00:10.365 TCP 23.104.0.1:38134 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:20:09.756 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35418 10 6452 1 2025-12-01 13:20:37.207 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 13:20:22.995 00:00:10.334 TCP 23.104.0.1:32836 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:20:37.506 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:21:09.966 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43386 10 6452 1 2025-12-01 13:21:23.366 00:00:10.365 TCP 23.104.0.1:36030 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:22:10.204 00:00:11.199 TCP 1.101.0.1:3000 -> 22.102.0.1:59144 10 6452 1 2025-12-01 13:22:23.769 00:00:10.374 TCP 23.104.0.1:43804 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:19:06.195 00:05:04.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 13:19:06.194 00:05:04.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 13:23:11.441 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:37938 10 6452 1 2025-12-01 13:23:24.178 00:00:10.362 TCP 23.104.0.1:59966 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:24:11.624 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53852 10 6452 1 2025-12-01 13:24:24.575 00:00:10.368 TCP 23.104.0.1:59736 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:25:11.837 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41864 10 6452 1 2025-12-01 13:25:24.977 00:00:10.374 TCP 23.104.0.1:42592 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:25:37.733 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 13:25:37.991 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:26:12.074 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44412 10 6452 1 2025-12-01 13:26:25.387 00:00:10.325 TCP 23.104.0.1:41718 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:27:12.288 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56046 10 6452 1 2025-12-01 13:27:25.750 00:00:10.438 TCP 23.104.0.1:46570 -> 1.101.0.1:3000 15 1926 1 2025-12-01 13:28:12.504 00:00:10.271 TCP 1.101.0.1:3000 -> 22.102.0.1:41740 12 10375 1 2025-12-01 13:28:26.223 00:00:10.364 TCP 23.104.0.1:56702 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:25:06.196 00:05:04.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 13:25:06.198 00:05:04.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 13:29:12.817 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:51814 10 6452 1 2025-12-01 13:29:26.629 00:00:10.368 TCP 23.104.0.1:34098 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:30:13.026 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34452 10 6452 1 2025-12-01 13:30:37.583 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 13:30:37.515 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:30:27.053 00:00:10.322 TCP 23.104.0.1:52894 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:31:13.238 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:33416 10 6452 1 2025-12-01 13:31:27.417 00:00:10.368 TCP 23.104.0.1:42272 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:32:13.409 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36862 10 6452 1 2025-12-01 13:32:27.825 00:00:13.640 TCP 23.104.0.1:39712 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:33:13.620 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44644 10 6452 1 2025-12-01 13:33:31.535 00:00:10.361 TCP 23.104.0.1:58494 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:34:13.829 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54268 10 6452 1 2025-12-01 13:34:31.939 00:00:10.368 TCP 23.104.0.1:40166 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:31:06.197 00:05:04.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 13:31:06.200 00:05:04.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 13:35:14.075 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57272 10 6452 1 2025-12-01 13:35:37.555 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:35:37.708 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 13:35:32.346 00:00:10.321 TCP 23.104.0.1:45060 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:36:14.290 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:38368 10 6452 1 2025-12-01 13:36:32.706 00:00:10.388 TCP 23.104.0.1:57696 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:37:14.560 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36938 10 6452 1 2025-12-01 13:37:33.131 00:00:10.371 TCP 23.104.0.1:53548 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:38:14.729 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46906 10 6452 1 2025-12-01 13:38:33.544 00:00:10.363 TCP 23.104.0.1:33318 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:39:14.946 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53624 10 6452 1 2025-12-01 13:39:33.949 00:00:10.581 TCP 23.104.0.1:33020 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:40:15.177 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46530 10 6452 1 2025-12-01 13:40:37.636 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 13:40:37.675 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:40:34.569 00:00:10.366 TCP 23.104.0.1:39214 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:37:06.198 00:05:04.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 13:37:06.200 00:05:04.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 13:41:15.390 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52530 10 6452 1 2025-12-01 13:41:34.970 00:00:10.337 TCP 23.104.0.1:33398 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:42:15.606 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:35594 10 6452 1 2025-12-01 13:42:35.345 00:00:10.367 TCP 23.104.0.1:39150 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:43:15.811 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57288 10 6452 1 2025-12-01 13:43:35.749 00:00:10.363 TCP 23.104.0.1:43596 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:44:16.062 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34102 10 6452 1 2025-12-01 13:44:36.145 00:00:10.322 TCP 23.104.0.1:40716 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:45:16.271 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41222 10 6452 1 2025-12-01 13:45:37.908 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 13:45:37.570 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:45:36.502 00:00:10.370 TCP 23.104.0.1:45638 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:46:16.496 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45460 10 6452 1 2025-12-01 13:46:36.908 00:00:10.373 TCP 23.104.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:43:06.201 00:05:04.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 13:43:06.200 00:05:04.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 13:47:16.719 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:53650 12 10375 1 2025-12-01 13:47:37.318 00:00:10.398 TCP 23.104.0.1:48134 -> 1.101.0.1:3000 15 1926 1 2025-12-01 13:48:16.970 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42398 10 6452 1 2025-12-01 13:48:37.756 00:00:10.385 TCP 23.104.0.1:50678 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:49:17.204 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56988 10 6452 1 2025-12-01 13:49:38.181 00:00:10.338 TCP 23.104.0.1:41546 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:50:17.423 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59730 10 6452 1 2025-12-01 13:50:38.166 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 13:50:37.894 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:50:38.562 00:00:10.369 TCP 23.104.0.1:38270 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:51:17.646 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47524 10 6452 1 2025-12-01 13:51:38.972 00:00:10.344 TCP 23.104.0.1:56786 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:52:17.891 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34624 10 6452 1 2025-12-01 13:52:39.356 00:00:10.321 TCP 23.104.0.1:57110 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:49:06.199 00:05:04.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 13:49:06.200 00:05:04.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 13:53:18.109 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52548 10 6452 1 2025-12-01 13:53:39.713 00:00:10.329 TCP 23.104.0.1:35442 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:54:18.286 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48760 10 6452 1 2025-12-01 13:54:40.105 00:00:10.360 TCP 23.104.0.1:49336 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:55:18.500 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36434 10 6452 1 2025-12-01 13:55:38.081 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 13:55:38.110 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 13:55:40.502 00:00:10.362 TCP 23.104.0.1:56208 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:56:18.718 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48666 10 6452 1 2025-12-01 13:56:40.903 00:00:10.383 TCP 23.104.0.1:39842 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:57:18.922 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55158 10 6452 1 2025-12-01 13:57:41.320 00:00:10.368 TCP 23.104.0.1:57134 -> 1.101.0.1:3000 11 1507 1 2025-12-01 13:58:19.099 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54746 10 6452 1 Summary: total flows: 163, total bytes: 505525, total packets: 1573, avg bps: 1063, avg pps: 0, avg bpp: 321 Time window: 2025-12-01 12:55:06 - 2025-12-01 13:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0020s Wall: 0.0020s flows/second: 80488.8 Runtime: 0.0020s