Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 12:54:12.936 00:05:55.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 12:55:08.043 00:05:04.887 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 12:59:18.520 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54016 10 6452 1 2025-12-05 12:59:30.968 00:00:10.364 TCP 23.104.0.1:57040 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:00:18.731 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39650 10 6452 1 2025-12-05 13:00:31.372 00:00:10.418 TCP 23.104.0.1:60332 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:01:18.955 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54812 12 6556 1 2025-12-05 13:01:31.864 00:00:10.374 TCP 23.104.0.1:46640 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:02:19.185 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43198 10 6452 1 2025-12-05 13:02:32.435 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 13:02:32.577 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 13:02:32.275 00:00:10.366 TCP 23.104.0.1:34894 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:03:19.400 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42080 10 6452 1 2025-12-05 13:03:32.675 00:00:10.367 TCP 23.104.0.1:39906 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:04:19.617 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44120 10 6452 1 2025-12-05 13:04:33.102 00:00:10.325 TCP 23.104.0.1:41586 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:00:12.933 00:05:55.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 13:01:08.045 00:05:04.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 13:05:19.840 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:48348 10 6452 1 2025-12-05 13:05:33.467 00:00:10.368 TCP 23.104.0.1:46102 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:06:20.130 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36726 10 6452 1 2025-12-05 13:06:33.873 00:00:10.529 TCP 23.104.0.1:47968 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:07:20.355 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50006 10 6452 1 2025-12-05 13:07:32.711 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 13:07:32.537 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 13:07:34.441 00:00:10.359 TCP 23.104.0.1:55356 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:08:20.583 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42664 10 6452 1 2025-12-05 13:08:34.841 00:00:10.386 TCP 23.104.0.1:57900 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:09:20.801 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35770 10 6452 1 2025-12-05 13:09:35.268 00:00:10.323 TCP 23.104.0.1:47112 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:10:21.041 00:00:10.396 TCP 1.101.0.1:3000 -> 22.102.0.1:47850 10 6452 1 2025-12-05 13:10:35.631 00:00:10.335 TCP 23.104.0.1:38024 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:06:12.937 00:05:55.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 13:07:08.046 00:05:04.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 13:11:21.483 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33744 10 6452 1 2025-12-05 13:11:36.002 00:00:10.367 TCP 23.104.0.1:51634 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:12:32.451 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 13:12:21.701 00:00:10.530 TCP 1.101.0.1:3000 -> 22.102.0.1:40124 10 6452 1 2025-12-05 13:12:32.662 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 13:12:36.409 00:00:10.338 TCP 23.104.0.1:58946 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:13:22.271 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47688 10 6452 1 2025-12-05 13:13:36.796 00:00:10.370 TCP 23.104.0.1:46908 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:14:22.497 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50096 10 6452 1 2025-12-05 13:14:37.203 00:00:10.367 TCP 23.104.0.1:37806 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:15:22.709 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39056 10 6452 1 2025-12-05 13:15:37.606 00:00:10.321 TCP 23.104.0.1:35060 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:16:22.919 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:34066 10 6452 1 2025-12-05 13:16:37.968 00:00:10.365 TCP 23.104.0.1:59716 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:12:12.938 00:05:55.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 13:13:08.046 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 13:17:32.864 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 13:17:23.109 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36262 10 6452 1 2025-12-05 13:17:32.959 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 13:17:38.373 00:00:11.064 TCP 23.104.0.1:54828 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:18:23.340 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42338 10 6452 1 2025-12-05 13:18:39.479 00:00:10.326 TCP 23.104.0.1:40878 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:19:23.550 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33368 10 6452 1 2025-12-05 13:19:39.843 00:00:10.389 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:20:23.760 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40274 10 6452 1 2025-12-05 13:20:40.268 00:00:10.365 TCP 23.104.0.1:37946 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:21:23.935 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49822 10 6452 1 2025-12-05 13:21:40.669 00:00:10.370 TCP 23.104.0.1:50960 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:22:24.169 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52470 10 6452 1 2025-12-05 13:22:32.647 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 13:22:32.800 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 13:22:41.108 00:00:10.370 TCP 23.104.0.1:47858 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:18:12.945 00:05:55.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 13:19:08.046 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 13:23:24.385 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45220 10 6452 1 2025-12-05 13:23:41.519 00:00:10.332 TCP 23.104.0.1:58480 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:24:24.597 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:58404 10 6452 1 2025-12-05 13:24:41.890 00:00:10.387 TCP 23.104.0.1:34968 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:25:24.809 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41046 10 6452 1 2025-12-05 13:25:42.311 00:00:10.325 TCP 23.104.0.1:55608 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:26:25.026 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34558 10 6452 1 2025-12-05 13:26:42.678 00:00:10.328 TCP 23.104.0.1:44046 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:27:33.130 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 13:27:25.238 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58700 10 6452 1 2025-12-05 13:27:33.237 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 13:27:43.052 00:00:10.375 TCP 23.104.0.1:45308 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:28:25.455 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55580 10 6452 1 2025-12-05 13:28:43.464 00:00:10.366 TCP 23.104.0.1:59582 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:24:12.947 00:05:55.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 13:25:08.050 00:05:04.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 13:29:25.666 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52706 10 6452 1 2025-12-05 13:29:43.869 00:00:10.364 TCP 23.104.0.1:44868 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:30:25.880 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58068 10 6452 1 2025-12-05 13:30:44.271 00:00:10.365 TCP 23.104.0.1:54452 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:31:26.099 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36342 10 6452 1 2025-12-05 13:31:44.678 00:00:10.371 TCP 23.104.0.1:34362 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:32:26.315 00:00:10.542 TCP 1.101.0.1:3000 -> 22.102.0.1:42826 10 6452 1 2025-12-05 13:32:33.061 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 13:32:32.991 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 13:32:45.102 00:00:10.325 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:33:26.906 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:48088 12 10369 1 2025-12-05 13:33:45.464 00:00:10.441 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 15 1926 1 2025-12-05 13:34:27.149 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44966 10 6452 1 2025-12-05 13:34:45.945 00:00:10.382 TCP 23.104.0.1:56194 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:30:12.949 00:05:55.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 13:31:08.053 00:05:04.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 13:35:27.357 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54942 10 6452 1 2025-12-05 13:35:46.370 00:00:10.320 TCP 23.104.0.1:38416 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:36:27.528 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55028 10 6452 1 2025-12-05 13:36:46.731 00:00:10.369 TCP 23.104.0.1:46172 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:37:33.260 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 13:37:33.283 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 13:37:27.706 00:00:10.754 TCP 1.101.0.1:3000 -> 22.102.0.1:60712 10 6452 1 2025-12-05 13:37:47.138 00:00:10.327 TCP 23.104.0.1:45050 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:38:28.501 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46684 12 6556 1 2025-12-05 13:38:47.504 00:00:10.374 TCP 23.104.0.1:49034 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:39:28.713 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37452 10 6452 1 2025-12-05 13:39:47.929 00:00:10.380 TCP 23.104.0.1:44316 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:40:28.958 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:40306 10 6452 1 2025-12-05 13:40:48.344 00:00:10.360 TCP 23.104.0.1:36842 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:36:12.950 00:05:55.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 13:37:08.054 00:05:04.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 13:41:29.190 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55400 10 6452 1 2025-12-05 13:41:48.743 00:00:10.362 TCP 23.104.0.1:43332 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:42:33.776 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 13:42:33.496 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 13:42:29.409 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54822 10 6452 1 2025-12-05 13:42:49.143 00:00:10.653 TCP 23.104.0.1:56662 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:43:29.590 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47064 10 6452 1 2025-12-05 13:43:49.838 00:00:10.383 TCP 23.104.0.1:48032 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:44:29.764 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34046 10 6452 1 2025-12-05 13:44:50.262 00:00:10.363 TCP 23.104.0.1:49812 -> 1.101.0.1:3000 12 1559 1 2025-12-05 13:45:29.986 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44144 10 6452 1 2025-12-05 13:45:50.665 00:00:10.388 TCP 23.104.0.1:35480 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:46:30.200 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39398 10 6452 1 2025-12-05 13:46:51.105 00:00:10.364 TCP 23.104.0.1:43536 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:42:12.950 00:05:55.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 13:43:08.065 00:05:04.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 13:47:33.342 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 13:47:33.384 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 13:47:30.411 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36408 10 6452 1 2025-12-05 13:47:51.510 00:00:11.362 TCP 23.104.0.1:42334 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:48:30.621 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34172 10 6452 1 2025-12-05 13:48:52.907 00:00:10.367 TCP 23.104.0.1:42002 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:49:30.790 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60696 10 6452 1 2025-12-05 13:49:53.313 00:00:10.364 TCP 23.104.0.1:58118 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:50:30.962 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:33116 10 6452 1 2025-12-05 13:50:53.713 00:00:10.332 TCP 23.104.0.1:58414 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:51:31.204 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43836 10 6452 1 2025-12-05 13:51:54.109 00:00:10.365 TCP 23.104.0.1:53528 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:52:33.849 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 13:52:33.800 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 13:52:31.412 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51852 10 6452 1 2025-12-05 13:52:54.513 00:00:10.366 TCP 23.104.0.1:50394 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:48:12.956 00:05:55.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 13:49:08.066 00:05:04.887 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 13:53:31.637 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49586 10 6452 1 2025-12-05 13:53:54.916 00:00:10.373 TCP 23.104.0.1:60362 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:54:31.847 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37638 10 6452 1 2025-12-05 13:54:55.324 00:00:10.362 TCP 23.104.0.1:55528 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:55:32.078 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55826 10 6452 1 2025-12-05 13:55:55.729 00:00:10.371 TCP 23.104.0.1:33890 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:56:32.285 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35932 10 6452 1 2025-12-05 13:56:56.142 00:00:10.369 TCP 23.104.0.1:53408 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:57:33.507 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 13:57:33.357 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 13:57:32.500 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40822 10 6452 1 2025-12-05 13:57:56.548 00:00:10.360 TCP 23.104.0.1:49868 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:58:32.718 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48576 10 6452 1 Summary: total flows: 163, total bytes: 501437, total packets: 1572, avg bps: 1036, avg pps: 0, avg bpp: 318 Time window: 2025-12-05 12:54:12 - 2025-12-05 13:58:42 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0028s Wall: 0.0023s flows/second: 71776.5 Runtime: 0.0023s