Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 00:55:06.425 00:05:04.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 00:55:06.427 00:05:04.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 00:59:10.642 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35982 10 6452 1 2025-12-02 00:59:35.803 00:00:10.341 TCP 23.104.0.1:39264 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:00:10.860 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43452 10 6452 1 2025-12-02 01:00:36.183 00:00:10.360 TCP 23.104.0.1:42848 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:00:51.243 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:00:51.138 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 01:01:11.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49190 10 6452 1 2025-12-02 01:01:36.582 00:00:10.368 TCP 23.104.0.1:45270 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:02:11.296 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40368 10 6452 1 2025-12-02 01:02:36.990 00:00:10.373 TCP 23.104.0.1:53080 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:03:11.513 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50150 10 6452 1 2025-12-02 01:03:37.407 00:00:10.369 TCP 23.104.0.1:42172 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:04:11.722 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36548 10 6452 1 2025-12-02 01:04:37.827 00:00:10.351 TCP 23.104.0.1:59970 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:01:06.429 00:05:04.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 01:01:06.427 00:05:04.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 01:05:11.930 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50164 10 6452 1 2025-12-02 01:05:51.828 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 01:05:51.830 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:05:38.219 00:00:10.362 TCP 23.104.0.1:54974 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:06:12.156 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59080 10 6452 1 2025-12-02 01:06:38.620 00:00:10.322 TCP 23.104.0.1:33874 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:07:12.371 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43950 10 6452 1 2025-12-02 01:07:38.984 00:00:10.361 TCP 23.104.0.1:49742 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:08:12.541 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41202 10 6452 1 2025-12-02 01:08:39.384 00:00:10.325 TCP 23.104.0.1:52888 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:09:12.760 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53170 10 6452 1 2025-12-02 01:09:39.751 00:00:10.389 TCP 23.104.0.1:34322 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:10:12.975 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:41472 10 6452 1 2025-12-02 01:10:51.498 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 01:10:51.427 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:10:40.180 00:00:10.366 TCP 23.104.0.1:37190 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:07:06.431 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 01:07:06.427 00:05:04.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 01:11:13.220 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44290 10 6452 1 2025-12-02 01:11:40.584 00:00:10.377 TCP 23.104.0.1:57424 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:12:13.437 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44492 10 6452 1 2025-12-02 01:12:41.002 00:00:10.375 TCP 23.104.0.1:38718 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:13:13.652 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37746 10 6452 1 2025-12-02 01:13:41.403 00:00:10.322 TCP 23.104.0.1:49000 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:14:13.868 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33334 10 6452 1 2025-12-02 01:14:41.765 00:00:10.372 TCP 23.104.0.1:41294 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:15:14.099 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60606 10 6452 1 2025-12-02 01:15:51.596 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 01:15:51.636 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:15:42.173 00:00:10.365 TCP 23.104.0.1:46460 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:16:14.307 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40918 10 6452 1 2025-12-02 01:16:42.576 00:00:10.367 TCP 23.104.0.1:32916 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:13:06.433 00:05:04.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 01:13:06.430 00:05:04.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 01:17:14.479 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49156 10 6452 1 2025-12-02 01:17:42.986 00:00:10.383 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:18:14.646 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56146 10 6452 1 2025-12-02 01:18:43.409 00:00:10.368 TCP 23.104.0.1:51612 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:19:14.866 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58180 10 6452 1 2025-12-02 01:19:43.828 00:00:10.860 TCP 23.104.0.1:39502 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:20:15.084 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:60250 10 6452 1 2025-12-02 01:20:51.756 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:20:51.595 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 01:20:44.728 00:00:10.369 TCP 23.104.0.1:54944 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:21:15.261 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36646 10 6452 1 2025-12-02 01:21:45.136 00:00:10.375 TCP 23.104.0.1:59160 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:22:15.469 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51350 10 6452 1 2025-12-02 01:22:45.552 00:00:10.447 TCP 23.104.0.1:46528 -> 1.101.0.1:3000 15 1926 1 2025-12-02 01:19:06.431 00:05:04.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 01:19:06.434 00:05:04.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 01:23:15.689 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:52398 12 10369 1 2025-12-02 01:23:46.063 00:00:10.377 TCP 23.104.0.1:33470 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:24:15.935 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34496 10 6452 1 2025-12-02 01:24:46.482 00:00:10.320 TCP 23.104.0.1:48806 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:25:16.162 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41672 10 6452 1 2025-12-02 01:25:51.924 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:25:51.835 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 01:25:46.842 00:00:10.381 TCP 23.104.0.1:38620 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:26:16.340 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47030 10 6452 1 2025-12-02 01:26:47.264 00:00:10.379 TCP 23.104.0.1:34586 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:27:16.552 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49514 10 6452 1 2025-12-02 01:27:47.667 00:00:10.325 TCP 23.104.0.1:58306 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:28:16.768 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37662 10 6452 1 2025-12-02 01:28:48.028 00:00:10.372 TCP 23.104.0.1:53068 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:25:06.433 00:05:04.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 01:25:06.435 00:05:04.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 01:29:16.943 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:54882 10 6452 1 2025-12-02 01:29:48.439 00:00:10.328 TCP 23.104.0.1:47156 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:30:17.127 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40404 10 6452 1 2025-12-02 01:30:52.038 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 01:30:52.033 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:30:48.808 00:00:10.369 TCP 23.104.0.1:58750 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:31:17.338 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43714 10 6452 1 2025-12-02 01:31:49.214 00:00:10.366 TCP 23.104.0.1:49576 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:32:17.551 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58400 10 6452 1 2025-12-02 01:32:49.620 00:00:10.325 TCP 23.104.0.1:33212 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:33:17.764 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57684 10 6452 1 2025-12-02 01:33:49.984 00:00:10.370 TCP 23.104.0.1:35158 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:34:17.979 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:49872 10 6452 1 2025-12-02 01:34:50.390 00:00:10.367 TCP 23.104.0.1:36790 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:31:06.436 00:05:04.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 01:31:06.437 00:05:04.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 01:35:18.219 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60942 10 6452 1 2025-12-02 01:35:52.055 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:35:52.063 00:00:00.039 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 01:35:50.795 00:00:10.370 TCP 23.104.0.1:50338 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:36:18.435 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58982 10 6452 1 2025-12-02 01:36:51.201 00:00:10.363 TCP 23.104.0.1:53746 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:37:18.653 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53088 10 6452 1 2025-12-02 01:37:51.604 00:00:10.367 TCP 23.104.0.1:55328 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:38:18.861 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34252 10 6452 1 2025-12-02 01:38:52.011 00:00:10.362 TCP 23.104.0.1:52416 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:39:19.086 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47242 10 6452 1 2025-12-02 01:39:52.414 00:00:10.359 TCP 23.104.0.1:54644 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:40:19.306 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35172 10 6452 1 2025-12-02 01:40:52.919 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:40:52.912 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 01:40:52.808 00:00:10.332 TCP 23.104.0.1:51634 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:37:06.436 00:05:04.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 01:37:06.437 00:05:04.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 01:41:19.532 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50896 10 6452 1 2025-12-02 01:41:53.186 00:00:10.358 TCP 23.104.0.1:47388 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:42:19.750 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50334 10 6452 1 2025-12-02 01:42:53.591 00:00:10.705 TCP 23.104.0.1:40640 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:43:19.959 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33058 12 6556 1 2025-12-02 01:43:54.338 00:00:10.362 TCP 23.104.0.1:35666 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:44:20.193 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48190 10 6452 1 2025-12-02 01:44:54.738 00:00:10.367 TCP 23.104.0.1:47668 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:45:20.412 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55586 10 6452 1 2025-12-02 01:45:52.359 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:45:52.248 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 01:45:55.143 00:00:11.119 TCP 23.104.0.1:39330 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:46:20.587 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60858 10 6452 1 2025-12-02 01:46:56.302 00:00:10.365 TCP 23.104.0.1:58172 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:43:06.442 00:05:04.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 01:43:06.440 00:05:04.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 01:47:20.798 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57038 10 6452 1 2025-12-02 01:47:56.703 00:00:10.364 TCP 23.104.0.1:48064 -> 1.101.0.1:3000 12 1559 1 2025-12-02 01:48:21.011 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37696 10 6452 1 2025-12-02 01:48:57.110 00:00:10.371 TCP 23.104.0.1:49368 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:49:21.187 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41586 10 6452 1 2025-12-02 01:49:57.524 00:00:10.363 TCP 23.104.0.1:43586 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:50:21.368 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40484 10 6452 1 2025-12-02 01:50:52.354 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 01:50:52.137 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:50:57.925 00:00:10.385 TCP 23.104.0.1:46334 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:51:21.585 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33116 10 6452 1 2025-12-02 01:51:58.349 00:00:10.364 TCP 23.104.0.1:42180 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:52:21.807 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36884 10 6452 1 2025-12-02 01:52:58.755 00:00:10.329 TCP 23.104.0.1:37076 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:49:06.441 00:05:04.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 01:49:06.443 00:05:04.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 01:53:22.025 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52948 10 6452 1 2025-12-02 01:53:59.127 00:00:10.380 TCP 23.104.0.1:34544 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:54:22.241 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60968 10 6452 1 2025-12-02 01:54:59.549 00:00:10.371 TCP 23.104.0.1:58160 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:55:22.451 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:39326 10 6452 1 2025-12-02 01:55:52.471 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 01:55:52.566 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 01:55:59.955 00:00:10.374 TCP 23.104.0.1:40292 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:56:22.623 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51178 10 6452 1 2025-12-02 01:57:00.367 00:00:10.319 TCP 23.104.0.1:50914 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:57:22.837 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37450 10 6452 1 2025-12-02 01:58:00.727 00:00:10.369 TCP 23.104.0.1:49534 -> 1.101.0.1:3000 11 1507 1 2025-12-02 01:58:23.077 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47216 10 6452 1 Summary: total flows: 163, total bytes: 501333, total packets: 1570, avg bps: 1053, avg pps: 0, avg bpp: 319 Time window: 2025-12-02 00:55:06 - 2025-12-02 01:58:33 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0035s User: 0.0026s Wall: 0.0022s flows/second: 72568.9 Runtime: 0.0023s