Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 13:55:06.678 00:05:04.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 13:55:06.681 00:05:04.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 13:59:15.654 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:45192 10 6452 1 2025-12-02 13:59:21.306 00:00:10.325 TCP 23.104.0.1:46476 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:00:15.857 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49614 10 6452 1 2025-12-02 14:00:21.670 00:00:10.361 TCP 23.104.0.1:34064 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:01:06.713 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 14:01:07.154 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 14:01:16.085 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51532 10 6452 1 2025-12-02 14:01:22.094 00:00:10.363 TCP 23.104.0.1:39910 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:02:16.294 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59836 10 6452 1 2025-12-02 14:02:22.495 00:00:10.369 TCP 23.104.0.1:55082 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:03:16.469 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60854 10 6452 1 2025-12-02 14:03:22.902 00:00:10.376 TCP 23.104.0.1:60690 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:04:16.683 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59760 10 6452 1 2025-12-02 14:04:23.338 00:00:10.363 TCP 23.104.0.1:33568 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:01:06.685 00:05:04.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 14:01:06.682 00:05:04.769 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 14:05:16.897 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55136 10 6452 1 2025-12-02 14:05:23.744 00:00:10.325 TCP 23.104.0.1:43806 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:06:07.366 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 14:06:07.217 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 14:06:17.107 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55550 10 6452 1 2025-12-02 14:06:24.110 00:00:10.360 TCP 23.104.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:07:17.316 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:56028 10 6452 1 2025-12-02 14:07:24.507 00:00:10.330 TCP 23.104.0.1:52392 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:08:17.487 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43096 10 6452 1 2025-12-02 14:08:24.868 00:00:10.368 TCP 23.104.0.1:45544 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:09:17.662 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50930 10 6452 1 2025-12-02 14:09:25.270 00:00:10.362 TCP 23.104.0.1:49074 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:10:17.877 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33490 10 6452 1 2025-12-02 14:10:25.671 00:00:10.381 TCP 23.104.0.1:39312 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:11:07.155 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 14:07:06.686 00:05:04.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 14:11:07.110 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 14:07:06.683 00:05:04.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 14:11:18.102 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44994 10 6452 1 2025-12-02 14:11:26.097 00:00:10.323 TCP 23.104.0.1:54054 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:12:18.316 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33656 10 6452 1 2025-12-02 14:12:26.462 00:00:10.364 TCP 23.104.0.1:51944 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:13:18.526 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36144 10 6452 1 2025-12-02 14:13:26.862 00:00:11.102 TCP 23.104.0.1:55230 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:14:18.701 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39606 10 6452 1 2025-12-02 14:14:28.003 00:00:10.361 TCP 23.104.0.1:36128 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:15:18.921 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54528 10 6452 1 2025-12-02 14:15:28.407 00:00:10.362 TCP 23.104.0.1:57468 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:16:07.350 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 14:16:07.451 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 14:16:19.148 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52492 10 6452 1 2025-12-02 14:16:28.806 00:00:10.363 TCP 23.104.0.1:57082 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:13:06.685 00:05:04.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 14:13:06.687 00:05:04.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 14:17:19.360 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49656 10 6452 1 2025-12-02 14:17:29.205 00:00:10.362 TCP 23.104.0.1:60676 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:18:19.576 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38480 10 6452 1 2025-12-02 14:18:29.605 00:00:10.582 TCP 23.104.0.1:45520 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:19:19.747 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:43298 10 6452 1 2025-12-02 14:19:30.226 00:00:10.323 TCP 23.104.0.1:57868 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:20:19.987 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:47582 10 6452 1 2025-12-02 14:20:30.589 00:00:10.362 TCP 23.104.0.1:49674 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:21:07.377 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 14:21:07.575 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 14:21:20.176 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59364 10 6452 1 2025-12-02 14:21:30.989 00:00:10.367 TCP 23.104.0.1:47738 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:22:20.389 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38654 10 6452 1 2025-12-02 14:22:31.396 00:00:10.366 TCP 23.104.0.1:37676 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:19:06.688 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 14:19:06.684 00:05:04.774 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 14:23:20.600 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35896 10 6452 1 2025-12-02 14:23:31.805 00:00:10.369 TCP 23.104.0.1:35270 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:24:20.813 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40914 10 6452 1 2025-12-02 14:24:32.212 00:00:10.331 TCP 23.104.0.1:56964 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:25:20.986 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45842 10 6452 1 2025-12-02 14:25:32.581 00:00:10.373 TCP 23.104.0.1:60138 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:26:07.535 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 14:26:07.530 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 14:26:21.214 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33264 10 6452 1 2025-12-02 14:26:32.993 00:00:10.370 TCP 23.104.0.1:59650 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:27:21.389 00:00:10.773 TCP 1.101.0.1:3000 -> 22.102.0.1:53598 10 6452 1 2025-12-02 14:27:33.404 00:00:10.362 TCP 23.104.0.1:47604 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:28:22.202 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52406 10 6452 1 2025-12-02 14:28:33.804 00:00:10.373 TCP 23.104.0.1:42810 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:25:06.690 00:05:04.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 14:25:06.692 00:05:04.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 14:29:22.423 00:00:10.445 TCP 1.101.0.1:3000 -> 22.102.0.1:55760 10 6452 1 2025-12-02 14:29:34.223 00:00:10.875 TCP 23.104.0.1:55604 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:30:22.907 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49584 10 6452 1 2025-12-02 14:30:35.138 00:00:10.376 TCP 23.104.0.1:45130 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:31:07.665 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 14:31:07.472 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 14:31:23.086 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44120 10 6452 1 2025-12-02 14:31:35.554 00:00:10.595 TCP 23.104.0.1:38918 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:32:23.299 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59032 10 6452 1 2025-12-02 14:32:36.189 00:00:10.369 TCP 23.104.0.1:51028 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:33:23.516 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60224 10 6452 1 2025-12-02 14:33:36.597 00:00:10.326 TCP 23.104.0.1:58168 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:34:23.728 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58354 10 6452 1 2025-12-02 14:34:36.962 00:00:10.366 TCP 23.104.0.1:54888 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:31:06.695 00:05:04.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 14:31:06.691 00:05:04.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 14:35:23.947 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59672 10 6452 1 2025-12-02 14:35:37.372 00:00:10.366 TCP 23.104.0.1:38606 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:36:07.695 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 14:36:07.771 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 14:36:24.177 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47218 10 6452 1 2025-12-02 14:36:37.777 00:00:10.368 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:37:24.385 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:38268 10 6452 1 2025-12-02 14:37:38.181 00:00:10.323 TCP 23.104.0.1:49852 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:38:24.562 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48148 10 6452 1 2025-12-02 14:38:38.545 00:00:10.324 TCP 23.104.0.1:38012 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:39:24.737 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57110 10 6452 1 2025-12-02 14:39:38.910 00:00:10.325 TCP 23.104.0.1:56204 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:40:24.910 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54206 10 6452 1 2025-12-02 14:40:39.276 00:00:10.361 TCP 23.104.0.1:56622 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:41:07.960 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 14:41:07.729 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 14:37:06.692 00:05:04.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 14:37:06.695 00:05:04.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 14:41:25.135 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39374 10 6452 1 2025-12-02 14:41:39.676 00:00:10.369 TCP 23.104.0.1:35382 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:42:25.353 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58386 10 6452 1 2025-12-02 14:42:40.101 00:00:10.366 TCP 23.104.0.1:43994 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:43:25.567 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59976 10 6452 1 2025-12-02 14:43:40.503 00:00:10.375 TCP 23.104.0.1:41626 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:44:25.807 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40846 10 6452 1 2025-12-02 14:44:40.904 00:00:10.369 TCP 23.104.0.1:55922 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:45:26.033 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34204 10 6452 1 2025-12-02 14:45:41.311 00:00:10.324 TCP 23.104.0.1:51076 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:46:07.784 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 14:46:07.623 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 14:46:26.244 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:55016 10 6452 1 2025-12-02 14:46:41.672 00:00:10.332 TCP 23.104.0.1:46010 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:43:06.696 00:05:04.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 14:43:06.695 00:05:04.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 14:47:26.439 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51282 10 6452 1 2025-12-02 14:47:42.045 00:00:10.323 TCP 23.104.0.1:35010 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:48:26.649 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57690 10 6452 1 2025-12-02 14:48:42.408 00:00:10.328 TCP 23.104.0.1:50652 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:49:26.822 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37552 10 6452 1 2025-12-02 14:49:42.774 00:00:10.330 TCP 23.104.0.1:33134 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:50:27.074 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:38364 10 6452 1 2025-12-02 14:50:43.141 00:00:10.373 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:51:07.907 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 14:51:07.833 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 14:51:27.263 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39888 10 6452 1 2025-12-02 14:51:43.553 00:00:10.361 TCP 23.104.0.1:49136 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:52:27.477 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46676 10 6452 1 2025-12-02 14:52:43.951 00:00:10.438 TCP 23.104.0.1:36940 -> 1.101.0.1:3000 15 1926 1 2025-12-02 14:49:06.700 00:05:04.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 14:49:06.701 00:05:04.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 14:53:27.689 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:55498 12 10369 1 2025-12-02 14:53:44.429 00:00:10.324 TCP 23.104.0.1:39690 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:54:27.935 00:00:10.365 TCP 1.101.0.1:3000 -> 22.102.0.1:41876 10 6452 1 2025-12-02 14:54:44.792 00:00:10.367 TCP 23.104.0.1:35010 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:55:28.339 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57686 10 6452 1 2025-12-02 14:55:45.196 00:00:10.365 TCP 23.104.0.1:49174 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:56:08.140 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 14:56:08.043 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 14:56:28.557 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58914 10 6452 1 2025-12-02 14:56:45.598 00:00:10.327 TCP 23.104.0.1:34226 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:57:28.775 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53664 10 6452 1 2025-12-02 14:57:45.960 00:00:10.322 TCP 23.104.0.1:56468 -> 1.101.0.1:3000 11 1507 1 2025-12-02 14:58:28.950 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:34790 12 6556 1 Summary: total flows: 163, total bytes: 501281, total packets: 1569, avg bps: 1051, avg pps: 0, avg bpp: 319 Time window: 2025-12-02 13:55:06 - 2025-12-02 14:58:39 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0060s User: 0.0000s Wall: 0.0016s flows/second: 101164.8 Runtime: 0.0016s