Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 10:54:50.732 00:05:03.372 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 10:59:03.008 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58006 10 6452 1 2025-11-01 10:59:26.554 00:00:10.367 TCP 23.104.0.1:52718 -> 1.101.0.1:3000 11 1507 1 2025-11-01 10:54:54.100 00:05:56.636 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 11:00:03.216 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60354 10 6452 1 2025-11-01 11:00:26.959 00:00:10.363 TCP 23.104.0.1:49860 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:01:06.336 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:01:06.603 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 11:01:03.422 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34198 10 6452 1 2025-11-01 11:01:27.362 00:00:10.364 TCP 23.104.0.1:49128 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:02:03.638 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56124 10 6452 1 2025-11-01 11:02:27.761 00:00:10.332 TCP 23.104.0.1:34520 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:03:03.809 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34098 10 6452 1 2025-11-01 11:03:28.137 00:00:10.324 TCP 23.104.0.1:41156 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:04:04.028 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42952 10 6452 1 2025-11-01 11:04:28.503 00:00:10.368 TCP 23.104.0.1:40242 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:00:50.734 00:05:03.371 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 11:05:04.243 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39458 10 6452 1 2025-11-01 11:05:28.912 00:00:10.368 TCP 23.104.0.1:33288 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:00:54.102 00:05:56.637 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 11:06:06.697 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:06:06.478 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 11:06:04.412 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45372 10 6452 1 2025-11-01 11:06:29.316 00:00:10.363 TCP 23.104.0.1:36430 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:07:04.584 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47398 10 6452 1 2025-11-01 11:07:29.718 00:00:10.376 TCP 23.104.0.1:46552 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:08:04.796 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54296 10 6452 1 2025-11-01 11:08:30.134 00:00:10.365 TCP 23.104.0.1:54108 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:09:04.970 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33160 10 6452 1 2025-11-01 11:09:30.535 00:00:10.367 TCP 23.104.0.1:42864 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:10:05.199 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42462 10 6452 1 2025-11-01 11:10:30.939 00:00:10.377 TCP 23.104.0.1:46092 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:06:50.736 00:05:03.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 11:11:06.605 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:11:06.417 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 11:11:05.406 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50530 10 6452 1 2025-11-01 11:11:31.354 00:00:10.368 TCP 23.104.0.1:39886 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:06:54.102 00:05:56.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 11:12:05.623 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40514 10 6452 1 2025-11-01 11:12:31.758 00:00:10.377 TCP 23.104.0.1:57044 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:13:05.792 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33152 10 6452 1 2025-11-01 11:13:32.173 00:00:10.366 TCP 23.104.0.1:49596 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:14:06.006 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:43074 12 10369 1 2025-11-01 11:14:32.575 00:00:10.440 TCP 23.104.0.1:54522 -> 1.101.0.1:3000 15 1926 1 2025-11-01 11:15:06.207 00:00:10.916 TCP 1.101.0.1:3000 -> 22.102.0.1:46488 10 6452 1 2025-11-01 11:15:33.071 00:00:10.367 TCP 23.104.0.1:40958 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:16:07.997 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:16:07.749 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 11:16:07.160 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38388 10 6452 1 2025-11-01 11:16:33.478 00:00:10.321 TCP 23.104.0.1:48880 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:12:50.739 00:05:03.368 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 11:17:07.376 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38738 10 6452 1 2025-11-01 11:17:33.839 00:00:10.390 TCP 23.104.0.1:33402 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:12:54.104 00:05:56.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 11:18:07.592 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58926 10 6452 1 2025-11-01 11:18:34.273 00:00:10.325 TCP 23.104.0.1:48602 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:19:07.818 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51178 10 6452 1 2025-11-01 11:19:34.636 00:00:10.366 TCP 23.104.0.1:59860 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:20:08.065 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59290 10 6452 1 2025-11-01 11:20:35.061 00:00:10.485 TCP 23.104.0.1:40544 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:21:06.972 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 11:21:06.906 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:21:08.279 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56406 10 6452 1 2025-11-01 11:21:35.593 00:00:10.363 TCP 23.104.0.1:34702 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:22:08.498 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41998 10 6452 1 2025-11-01 11:22:35.998 00:00:10.327 TCP 23.104.0.1:54672 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:18:50.738 00:05:03.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 11:23:08.717 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58248 10 6452 1 2025-11-01 11:18:54.104 00:05:56.643 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 11:23:36.367 00:00:24.142 TCP 23.104.0.1:49870 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:24:08.948 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:50040 10 6452 1 2025-11-01 11:24:50.572 00:00:10.364 TCP 23.104.0.1:53178 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:25:09.180 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57104 10 6452 1 2025-11-01 11:25:50.982 00:00:10.370 TCP 23.104.0.1:53968 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:26:06.928 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 11:26:06.648 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:26:09.400 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34506 10 6452 1 2025-11-01 11:26:51.388 00:00:10.360 TCP 23.104.0.1:32934 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:27:09.622 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41636 10 6452 1 2025-11-01 11:27:51.787 00:00:10.319 TCP 23.104.0.1:54990 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:28:09.833 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55498 10 6452 1 2025-11-01 11:24:50.745 00:05:03.365 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 11:28:52.145 00:00:10.322 TCP 23.104.0.1:44078 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:29:10.074 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50698 10 6452 1 2025-11-01 11:24:54.107 00:05:56.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 11:29:52.506 00:00:10.364 TCP 23.104.0.1:58080 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:30:10.289 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58646 10 6452 1 2025-11-01 11:30:52.908 00:00:10.364 TCP 23.104.0.1:43292 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:31:07.458 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 11:31:07.424 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:31:10.502 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57518 10 6452 1 2025-11-01 11:31:53.311 00:00:10.361 TCP 23.104.0.1:56164 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:32:10.718 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43078 10 6452 1 2025-11-01 11:32:53.711 00:00:10.371 TCP 23.104.0.1:60870 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:33:10.925 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37526 10 6452 1 2025-11-01 11:33:54.123 00:00:10.362 TCP 23.104.0.1:35772 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:34:11.152 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46840 10 6452 1 2025-11-01 11:30:50.745 00:05:03.365 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 11:34:54.527 00:00:10.366 TCP 23.104.0.1:45650 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:35:11.331 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52956 10 6452 1 2025-11-01 11:30:54.108 00:05:56.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 11:36:06.947 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 11:36:07.181 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:35:54.931 00:00:15.010 TCP 23.104.0.1:55992 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:36:11.551 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47626 10 6452 1 2025-11-01 11:36:59.983 00:00:10.369 TCP 23.104.0.1:52272 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:37:11.723 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60976 10 6452 1 2025-11-01 11:38:00.393 00:00:10.362 TCP 23.104.0.1:52278 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:38:11.900 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:37428 10 6452 1 2025-11-01 11:39:00.792 00:00:10.368 TCP 23.104.0.1:33026 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:39:12.085 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55370 10 6452 1 2025-11-01 11:40:01.195 00:00:10.321 TCP 23.104.0.1:40082 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:40:12.303 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45936 10 6452 1 2025-11-01 11:36:50.746 00:05:03.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 11:41:07.248 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 11:41:07.228 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:41:01.555 00:00:10.488 TCP 23.104.0.1:39768 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:41:12.536 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40920 10 6452 1 2025-11-01 11:36:54.109 00:05:56.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 11:42:02.100 00:00:10.323 TCP 23.104.0.1:45054 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:42:12.761 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43652 10 6452 1 2025-11-01 11:43:02.467 00:00:10.348 TCP 23.104.0.1:53798 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:43:12.975 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46282 10 6452 1 2025-11-01 11:44:02.832 00:00:10.382 TCP 23.104.0.1:57416 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:44:13.205 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56850 10 6452 1 2025-11-01 11:45:03.256 00:00:10.321 TCP 23.104.0.1:50638 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:45:13.426 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57946 10 6452 1 2025-11-01 11:46:07.479 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:46:07.478 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 11:46:03.617 00:00:10.359 TCP 23.104.0.1:49242 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:46:13.616 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48498 10 6452 1 2025-11-01 11:42:50.748 00:05:03.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 11:47:04.016 00:00:10.361 TCP 23.104.0.1:52304 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:47:13.827 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46724 10 6452 1 2025-11-01 11:42:54.113 00:05:56.639 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 11:48:04.414 00:00:10.366 TCP 23.104.0.1:33638 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:48:14.040 00:00:20.161 TCP 1.101.0.1:3000 -> 22.102.0.1:36932 10 6452 1 2025-11-01 11:49:04.820 00:00:10.319 TCP 23.104.0.1:48764 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:49:24.240 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55330 10 6452 1 2025-11-01 11:50:05.179 00:00:10.366 TCP 23.104.0.1:52294 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:50:24.470 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37220 10 6452 1 2025-11-01 11:51:07.480 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 11:51:07.553 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:51:05.585 00:00:10.362 TCP 23.104.0.1:46516 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:51:24.688 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36862 10 6452 1 2025-11-01 11:52:05.987 00:00:10.325 TCP 23.104.0.1:51174 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:52:24.907 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49468 10 6452 1 2025-11-01 11:48:50.748 00:05:03.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 11:53:06.352 00:00:10.364 TCP 23.104.0.1:59848 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:53:25.123 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52390 10 6452 1 2025-11-01 11:48:54.114 00:05:56.638 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 11:54:06.765 00:00:10.328 TCP 23.104.0.1:36324 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:54:25.341 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48558 10 6452 1 2025-11-01 11:55:07.139 00:00:10.377 TCP 23.104.0.1:37274 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:55:25.556 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:56602 10 6452 1 2025-11-01 11:56:07.749 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 11:56:07.731 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 11:56:07.560 00:00:10.866 TCP 23.104.0.1:43120 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:56:25.724 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50634 10 6452 1 2025-11-01 11:57:08.473 00:00:10.364 TCP 23.104.0.1:46348 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:57:25.942 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:38420 10 6452 1 2025-11-01 11:58:08.877 00:00:10.405 TCP 23.104.0.1:44220 -> 1.101.0.1:3000 11 1507 1 2025-11-01 11:58:26.176 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38766 10 6452 1 Summary: total flows: 163, total bytes: 501177, total packets: 1567, avg bps: 1048, avg pps: 0, avg bpp: 319 Time window: 2025-11-01 10:54:50 - 2025-11-01 11:58:36 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0037s User: 0.0019s Wall: 0.0035s flows/second: 47192.1 Runtime: 0.0035s