Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 17:54:50.924 00:05:03.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 17:59:00.909 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52414 10 6452 1 2025-11-01 17:59:01.946 00:00:10.333 TCP 23.104.0.1:57204 -> 1.101.0.1:3000 11 1507 1 2025-11-01 17:54:54.239 00:05:56.687 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 18:00:01.129 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48504 10 6452 1 2025-11-01 18:00:02.311 00:00:10.651 TCP 23.104.0.1:53472 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:01:01.357 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36212 10 6452 1 2025-11-01 18:01:14.734 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 18:01:03.004 00:00:10.359 TCP 23.104.0.1:55998 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:01:14.791 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 18:02:01.568 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43798 10 6452 1 2025-11-01 18:02:03.403 00:00:10.373 TCP 23.104.0.1:41088 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:03:01.779 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45534 10 6452 1 2025-11-01 18:03:03.813 00:00:10.364 TCP 23.104.0.1:53336 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:04:04.213 00:00:10.361 TCP 23.104.0.1:45522 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:04:01.997 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56404 10 6452 1 2025-11-01 18:00:50.924 00:05:03.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 18:05:04.612 00:00:10.330 TCP 23.104.0.1:50910 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:05:02.218 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54504 10 6452 1 2025-11-01 18:00:54.241 00:05:56.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 18:06:14.976 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 18:06:04.982 00:00:10.335 TCP 23.104.0.1:51112 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:06:02.387 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47820 10 6452 1 2025-11-01 18:06:15.013 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 18:07:05.355 00:00:10.364 TCP 23.104.0.1:48266 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:07:02.619 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:46206 10 6452 1 2025-11-01 18:08:02.865 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:44534 10 6452 1 2025-11-01 18:08:05.761 00:00:10.433 TCP 23.104.0.1:52332 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:09:06.242 00:00:10.348 TCP 23.104.0.1:56182 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:09:03.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40566 10 6452 1 2025-11-01 18:10:06.656 00:00:10.329 TCP 23.104.0.1:45496 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:10:03.297 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57444 12 6556 1 2025-11-01 18:06:50.926 00:05:03.323 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 18:11:03.516 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56838 10 6452 1 2025-11-01 18:11:14.769 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 18:11:15.030 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 18:11:07.024 00:00:10.367 TCP 23.104.0.1:53974 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:06:54.241 00:05:56.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 18:12:03.748 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:34164 12 6556 1 2025-11-01 18:12:07.432 00:00:10.367 TCP 23.104.0.1:58774 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:13:03.962 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59426 10 6452 1 2025-11-01 18:13:07.838 00:00:10.348 TCP 23.104.0.1:39972 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:14:04.186 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:44562 10 6452 1 2025-11-01 18:14:08.223 00:00:10.362 TCP 23.104.0.1:45326 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:15:04.373 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49644 10 6452 1 2025-11-01 18:15:08.618 00:00:10.364 TCP 23.104.0.1:39480 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:16:15.196 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 18:16:04.578 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41644 10 6452 1 2025-11-01 18:16:15.221 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 18:16:09.024 00:00:10.367 TCP 23.104.0.1:59132 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:12:50.929 00:05:03.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 18:17:04.802 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47930 10 6452 1 2025-11-01 18:17:09.429 00:00:10.325 TCP 23.104.0.1:43466 -> 1.101.0.1:3000 12 1559 1 2025-11-01 18:12:54.246 00:05:56.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 18:18:05.010 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45788 10 6452 1 2025-11-01 18:18:09.793 00:00:10.374 TCP 23.104.0.1:45530 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:19:05.230 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41014 10 6452 1 2025-11-01 18:19:10.206 00:00:10.367 TCP 23.104.0.1:48526 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:20:05.440 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33632 10 6452 1 2025-11-01 18:20:10.609 00:00:10.376 TCP 23.104.0.1:36126 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:21:15.296 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 18:21:05.613 00:00:11.256 TCP 1.101.0.1:3000 -> 22.102.0.1:60828 10 6452 1 2025-11-01 18:21:15.443 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 18:21:11.032 00:00:10.345 TCP 23.104.0.1:50358 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:22:11.421 00:00:10.366 TCP 23.104.0.1:42760 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:22:06.917 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57570 10 6452 1 2025-11-01 18:18:50.938 00:05:03.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 18:23:07.134 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36212 10 6452 1 2025-11-01 18:23:11.824 00:00:10.353 TCP 23.104.0.1:55502 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:18:54.248 00:05:56.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 18:24:07.307 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43382 10 6452 1 2025-11-01 18:24:12.219 00:00:10.323 TCP 23.104.0.1:36686 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:25:07.522 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58270 10 6452 1 2025-11-01 18:25:12.577 00:00:10.362 TCP 23.104.0.1:41550 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:26:15.099 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 18:26:15.402 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 18:26:07.734 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:47998 10 6452 1 2025-11-01 18:26:12.981 00:00:10.368 TCP 23.104.0.1:54390 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:27:07.906 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:52316 10 6452 1 2025-11-01 18:27:13.389 00:00:10.365 TCP 23.104.0.1:47520 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:28:08.084 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35782 10 6452 1 2025-11-01 18:28:13.794 00:00:10.362 TCP 23.104.0.1:35842 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:24:50.938 00:05:03.317 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 18:29:08.324 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40476 10 6452 1 2025-11-01 18:29:14.190 00:00:10.359 TCP 23.104.0.1:41978 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:24:54.250 00:05:56.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 18:30:08.538 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33402 10 6452 1 2025-11-01 18:30:14.592 00:00:10.368 TCP 23.104.0.1:48414 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:31:15.285 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 18:31:15.778 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 18:31:08.749 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52470 10 6452 1 2025-11-01 18:31:14.997 00:00:10.950 TCP 23.104.0.1:39602 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:32:08.960 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60476 10 6452 1 2025-11-01 18:32:15.988 00:00:10.375 TCP 23.104.0.1:36368 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:33:09.182 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39334 10 6452 1 2025-11-01 18:33:16.400 00:00:10.361 TCP 23.104.0.1:44214 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:34:09.395 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58122 10 6452 1 2025-11-01 18:34:16.802 00:00:10.643 TCP 23.104.0.1:53456 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:30:50.938 00:05:03.316 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 18:35:09.603 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57834 10 6452 1 2025-11-01 18:35:17.482 00:00:10.361 TCP 23.104.0.1:59614 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:30:54.251 00:05:56.699 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 18:36:15.339 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 18:36:15.737 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 18:36:09.821 00:00:10.975 TCP 1.101.0.1:3000 -> 22.102.0.1:54668 10 6452 1 2025-11-01 18:36:17.883 00:00:10.335 TCP 23.104.0.1:40460 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:37:10.829 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38822 10 6452 1 2025-11-01 18:37:18.254 00:00:10.367 TCP 23.104.0.1:46838 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:38:11.034 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58778 10 6452 1 2025-11-01 18:38:18.662 00:00:10.362 TCP 23.104.0.1:50976 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:39:11.247 00:00:10.749 TCP 1.101.0.1:3000 -> 22.102.0.1:53198 10 6452 1 2025-11-01 18:39:19.083 00:00:10.367 TCP 23.104.0.1:48610 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:40:12.039 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45268 10 6452 1 2025-11-01 18:40:19.484 00:00:10.365 TCP 23.104.0.1:39698 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:36:50.949 00:05:03.308 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 18:41:15.967 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 18:41:16.346 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 18:41:12.208 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:43428 10 6452 1 2025-11-01 18:41:19.883 00:00:10.376 TCP 23.104.0.1:37652 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:36:54.253 00:05:56.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 18:42:12.441 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52592 10 6452 1 2025-11-01 18:42:20.298 00:00:10.364 TCP 23.104.0.1:51332 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:43:12.662 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55392 10 6452 1 2025-11-01 18:43:20.706 00:00:10.324 TCP 23.104.0.1:51472 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:44:12.881 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52524 10 6452 1 2025-11-01 18:44:21.103 00:00:10.363 TCP 23.104.0.1:59330 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:45:13.109 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58186 10 6452 1 2025-11-01 18:45:21.506 00:00:10.365 TCP 23.104.0.1:58722 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:46:15.962 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 18:46:15.967 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 18:46:13.326 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59194 10 6452 1 2025-11-01 18:46:21.912 00:00:10.325 TCP 23.104.0.1:49654 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:42:50.949 00:05:03.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 18:47:13.553 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43534 10 6452 1 2025-11-01 18:47:22.273 00:00:10.368 TCP 23.104.0.1:41406 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:42:54.254 00:05:56.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 18:48:13.770 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49512 10 6452 1 2025-11-01 18:48:22.683 00:00:10.327 TCP 23.104.0.1:60128 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:49:13.991 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41030 10 6452 1 2025-11-01 18:49:23.051 00:00:10.390 TCP 23.104.0.1:60400 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:50:14.220 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43040 10 6452 1 2025-11-01 18:50:23.480 00:00:10.364 TCP 23.104.0.1:37416 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:51:15.780 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 18:51:15.811 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 18:51:14.391 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38198 10 6452 1 2025-11-01 18:51:23.883 00:00:10.370 TCP 23.104.0.1:41674 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:52:14.606 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59504 10 6452 1 2025-11-01 18:52:24.291 00:00:10.331 TCP 23.104.0.1:52262 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:48:50.952 00:05:03.308 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 18:53:14.822 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39608 10 6452 1 2025-11-01 18:53:24.657 00:00:10.366 TCP 23.104.0.1:45120 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:48:54.256 00:05:56.698 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 18:54:15.061 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49930 10 6452 1 2025-11-01 18:54:25.085 00:00:10.362 TCP 23.104.0.1:46392 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:55:15.274 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40588 10 6452 1 2025-11-01 18:55:25.486 00:00:10.360 TCP 23.104.0.1:43256 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:56:16.038 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 18:56:15.887 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 18:56:15.487 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33504 10 6452 1 2025-11-01 18:56:25.886 00:00:10.391 TCP 23.104.0.1:34702 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:57:15.702 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35532 10 6452 1 2025-11-01 18:57:26.288 00:00:10.364 TCP 23.104.0.1:44246 -> 1.101.0.1:3000 11 1507 1 2025-11-01 18:58:15.923 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:58296 10 6452 1 2025-11-01 18:58:26.688 00:00:10.364 TCP 23.104.0.1:55956 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498608, total packets: 1577, avg bps: 1042, avg pps: 0, avg bpp: 316 Time window: 2025-11-01 17:54:50 - 2025-11-01 18:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0030s Wall: 0.0016s flows/second: 102239.3 Runtime: 0.0016s