Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 05:55:06.540 00:05:04.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 05:55:06.537 00:05:04.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 05:59:20.258 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47840 10 6452 1 2025-12-02 05:59:41.184 00:00:11.781 TCP 23.104.0.1:53098 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:00:20.429 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55166 10 6452 1 2025-12-02 06:00:43.004 00:00:10.336 TCP 23.104.0.1:53140 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:00:57.625 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 06:00:57.663 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 06:01:20.647 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53394 10 6452 1 2025-12-02 06:01:43.380 00:00:10.370 TCP 23.104.0.1:45488 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:02:20.860 00:00:10.293 TCP 1.101.0.1:3000 -> 22.102.0.1:56698 10 6452 1 2025-12-02 06:02:43.790 00:00:10.320 TCP 23.104.0.1:60164 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:03:21.191 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:51730 10 6452 1 2025-12-02 06:03:44.147 00:00:10.360 TCP 23.104.0.1:60070 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:04:21.368 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55910 10 6452 1 2025-12-02 06:04:44.544 00:00:10.327 TCP 23.104.0.1:37384 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:01:06.542 00:05:04.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 06:01:06.539 00:05:04.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 06:05:21.577 00:00:10.967 TCP 1.101.0.1:3000 -> 22.102.0.1:38950 11 6504 1 2025-12-02 06:05:44.907 00:00:10.366 TCP 23.104.0.1:54042 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:05:57.711 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 06:05:57.773 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 06:06:22.580 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46098 10 6452 1 2025-12-02 06:06:45.311 00:00:10.367 TCP 23.104.0.1:35218 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:07:22.797 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56658 10 6452 1 2025-12-02 06:07:45.714 00:00:10.383 TCP 23.104.0.1:56736 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:08:23.016 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46206 10 6452 1 2025-12-02 06:08:46.136 00:00:10.368 TCP 23.104.0.1:41784 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:09:23.230 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40244 10 6452 1 2025-12-02 06:09:46.541 00:00:10.363 TCP 23.104.0.1:36270 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:10:23.442 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60814 10 6452 1 2025-12-02 06:10:57.735 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 06:10:57.531 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 06:10:46.943 00:00:10.331 TCP 23.104.0.1:60790 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:07:06.539 00:05:04.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 06:07:06.542 00:05:04.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 06:11:23.662 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37068 10 6452 1 2025-12-02 06:11:47.310 00:00:10.327 TCP 23.104.0.1:34710 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:12:23.878 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57890 10 6452 1 2025-12-02 06:12:47.676 00:00:10.373 TCP 23.104.0.1:55946 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:13:24.100 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50072 10 6452 1 2025-12-02 06:13:48.095 00:00:10.365 TCP 23.104.0.1:36542 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:14:24.318 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53230 10 6452 1 2025-12-02 06:14:48.515 00:00:10.366 TCP 23.104.0.1:51516 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:15:24.541 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:42174 10 6452 1 2025-12-02 06:15:57.635 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 06:15:48.925 00:00:10.399 TCP 23.104.0.1:55588 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:15:57.554 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 06:16:24.713 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34690 10 6452 1 2025-12-02 06:16:49.361 00:00:10.394 TCP 23.104.0.1:35922 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:13:06.540 00:05:04.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 06:13:06.544 00:05:04.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 06:17:24.934 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:32826 10 6452 1 2025-12-02 06:17:49.796 00:00:10.368 TCP 23.104.0.1:39224 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:18:25.178 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41876 10 6452 1 2025-12-02 06:18:50.204 00:00:10.324 TCP 23.104.0.1:41372 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:19:25.399 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53392 10 6452 1 2025-12-02 06:19:50.566 00:00:10.364 TCP 23.104.0.1:53416 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:20:25.613 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33728 10 6452 1 2025-12-02 06:20:57.638 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 06:20:50.967 00:00:10.378 TCP 23.104.0.1:50960 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:20:58.045 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 06:21:25.838 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:46280 10 6452 1 2025-12-02 06:21:51.383 00:00:10.367 TCP 23.104.0.1:39350 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:22:26.083 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57128 10 6452 1 2025-12-02 06:22:51.787 00:00:10.369 TCP 23.104.0.1:33026 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:19:06.541 00:05:04.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 06:19:06.543 00:05:04.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 06:23:26.314 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39730 10 6452 1 2025-12-02 06:23:52.192 00:00:10.366 TCP 23.104.0.1:48168 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:24:26.531 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45064 10 6452 1 2025-12-02 06:24:52.596 00:00:10.363 TCP 23.104.0.1:37872 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:25:26.746 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47586 10 6452 1 2025-12-02 06:25:57.679 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 06:25:57.803 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 06:25:52.996 00:00:10.348 TCP 23.104.0.1:40476 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:26:26.952 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37372 10 6452 1 2025-12-02 06:26:53.358 00:00:10.327 TCP 23.104.0.1:45164 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:27:27.176 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33898 10 6452 1 2025-12-02 06:27:53.721 00:00:10.334 TCP 23.104.0.1:50996 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:28:27.386 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36396 10 6452 1 2025-12-02 06:28:54.106 00:00:10.365 TCP 23.104.0.1:37014 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:25:06.550 00:05:04.776 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 06:25:06.553 00:05:04.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 06:29:27.600 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45214 10 6452 1 2025-12-02 06:29:54.507 00:00:10.323 TCP 23.104.0.1:42696 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:30:27.819 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39024 10 6452 1 2025-12-02 06:30:58.184 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 06:30:58.043 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 06:30:54.872 00:00:10.324 TCP 23.104.0.1:57654 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:31:28.035 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50650 10 6452 1 2025-12-02 06:31:55.234 00:00:10.363 TCP 23.104.0.1:51460 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:32:28.249 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59416 10 6452 1 2025-12-02 06:32:55.636 00:00:10.367 TCP 23.104.0.1:37088 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:33:28.421 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33744 10 6452 1 2025-12-02 06:33:56.051 00:00:10.365 TCP 23.104.0.1:40910 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:34:28.636 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38720 10 6452 1 2025-12-02 06:34:56.449 00:00:10.365 TCP 23.104.0.1:33668 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:31:06.556 00:05:04.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 06:31:06.553 00:05:04.776 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 06:35:28.851 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47136 10 6452 1 2025-12-02 06:35:58.294 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 06:35:58.024 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 06:35:56.856 00:00:10.373 TCP 23.104.0.1:40272 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:36:29.035 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52432 10 6452 1 2025-12-02 06:36:57.273 00:00:10.360 TCP 23.104.0.1:46958 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:37:29.261 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35156 10 6452 1 2025-12-02 06:37:57.677 00:00:10.368 TCP 23.104.0.1:44942 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:38:29.480 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45896 10 6452 1 2025-12-02 06:38:58.106 00:00:10.386 TCP 23.104.0.1:56956 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:39:29.685 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57442 10 6452 1 2025-12-02 06:39:58.545 00:00:10.366 TCP 23.104.0.1:54994 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:40:29.908 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55292 10 6452 1 2025-12-02 06:40:58.347 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 06:40:58.297 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 06:40:58.955 00:00:10.363 TCP 23.104.0.1:57492 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:37:06.557 00:05:04.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 06:37:06.559 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 06:41:30.129 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58686 10 6452 1 2025-12-02 06:41:59.360 00:00:10.323 TCP 23.104.0.1:49120 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:42:30.357 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:34188 12 10375 1 2025-12-02 06:42:59.715 00:00:10.934 TCP 23.104.0.1:50536 -> 1.101.0.1:3000 15 1926 1 2025-12-02 06:43:30.610 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59990 10 6452 1 2025-12-02 06:44:00.688 00:00:10.371 TCP 23.104.0.1:35798 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:44:30.835 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53806 10 6452 1 2025-12-02 06:45:01.104 00:00:10.360 TCP 23.104.0.1:52574 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:45:31.071 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37768 10 6452 1 2025-12-02 06:45:58.285 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 06:45:58.521 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 06:46:01.503 00:00:10.366 TCP 23.104.0.1:34730 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:46:31.281 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34230 10 6452 1 2025-12-02 06:43:06.560 00:05:04.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 06:47:01.910 00:00:10.366 TCP 23.104.0.1:41968 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:43:06.558 00:05:04.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 06:47:31.457 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58014 10 6452 1 2025-12-02 06:48:02.315 00:00:10.369 TCP 23.104.0.1:48172 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:48:31.667 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45828 10 6452 1 2025-12-02 06:49:02.726 00:00:10.333 TCP 23.104.0.1:58754 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:49:31.879 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:52764 10 6452 1 2025-12-02 06:50:03.108 00:00:10.373 TCP 23.104.0.1:47832 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:50:32.128 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:38166 10 6452 1 2025-12-02 06:50:58.585 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 06:50:58.260 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 06:51:03.527 00:00:10.392 TCP 23.104.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:51:32.300 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48178 10 6452 1 2025-12-02 06:52:03.971 00:00:13.880 TCP 23.104.0.1:54850 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:52:32.531 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36818 10 6452 1 2025-12-02 06:49:06.564 00:05:04.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 06:49:06.561 00:05:04.775 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 06:53:07.927 00:00:10.389 TCP 23.104.0.1:44700 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:53:32.742 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59818 10 6452 1 2025-12-02 06:54:08.356 00:00:10.360 TCP 23.104.0.1:53964 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:54:32.954 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:35886 10 6452 1 2025-12-02 06:55:08.754 00:00:10.368 TCP 23.104.0.1:54612 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:55:33.150 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37554 10 6452 1 2025-12-02 06:55:58.611 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 06:55:58.460 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 06:56:09.162 00:00:10.363 TCP 23.104.0.1:34842 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:56:33.366 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59220 10 6452 1 2025-12-02 06:57:09.564 00:00:10.326 TCP 23.104.0.1:37964 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:57:33.580 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:33052 11 6504 1 2025-12-02 06:58:09.924 00:00:10.384 TCP 23.104.0.1:60362 -> 1.101.0.1:3000 11 1507 1 2025-12-02 06:58:33.847 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34712 10 6452 1 Summary: total flows: 163, total bytes: 501287, total packets: 1569, avg bps: 1050, avg pps: 0, avg bpp: 319 Time window: 2025-12-02 05:55:06 - 2025-12-02 06:58:44 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0065s User: 0.0000s Wall: 0.0020s flows/second: 82191.8 Runtime: 0.0020s