Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 22:54:51.082 00:05:03.252 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 22:59:34.307 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:54306 12 10375 1 2025-11-01 22:59:34.660 00:00:10.801 TCP 23.104.0.1:47928 -> 1.101.0.1:3000 15 1926 1 2025-11-01 22:55:51.085 00:05:03.246 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 23:00:35.497 00:00:10.369 TCP 23.104.0.1:36424 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:00:34.553 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53580 10 6452 1 2025-11-01 23:01:20.759 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 23:01:20.927 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 23:01:34.776 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52748 10 6452 1 2025-11-01 23:01:35.906 00:00:10.321 TCP 23.104.0.1:57696 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:02:35.006 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:41216 10 6452 1 2025-11-01 23:02:36.267 00:00:10.361 TCP 23.104.0.1:47802 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:03:35.250 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40112 10 6452 1 2025-11-01 23:03:36.673 00:00:10.374 TCP 23.104.0.1:56324 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:04:35.461 00:00:11.069 TCP 1.101.0.1:3000 -> 22.102.0.1:57844 10 6452 1 2025-11-01 23:04:37.112 00:00:10.324 TCP 23.104.0.1:54330 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:00:51.083 00:05:03.252 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 23:05:36.574 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45680 10 6452 1 2025-11-01 23:05:37.486 00:00:10.327 TCP 23.104.0.1:50266 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:01:51.086 00:05:03.247 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 23:06:20.924 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 23:06:21.067 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 23:06:36.782 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48550 10 6452 1 2025-11-01 23:06:37.853 00:00:10.379 TCP 23.104.0.1:34228 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:07:38.266 00:00:10.363 TCP 23.104.0.1:59932 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:07:37.006 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42372 10 6452 1 2025-11-01 23:08:37.226 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40872 10 6452 1 2025-11-01 23:08:38.669 00:00:10.325 TCP 23.104.0.1:59868 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:09:37.447 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44304 10 6452 1 2025-11-01 23:09:39.035 00:00:10.365 TCP 23.104.0.1:36956 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:10:37.662 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55914 10 6452 1 2025-11-01 23:10:39.445 00:00:10.327 TCP 23.104.0.1:60856 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:06:51.084 00:05:03.252 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 23:11:21.207 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 23:11:21.533 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 23:11:37.886 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54206 10 6452 1 2025-11-01 23:11:39.803 00:00:10.332 TCP 23.104.0.1:52106 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:07:51.087 00:05:03.247 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 23:12:40.174 00:00:10.363 TCP 23.104.0.1:59648 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:12:38.113 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32816 10 6452 1 2025-11-01 23:13:40.571 00:00:10.374 TCP 23.104.0.1:56122 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:13:38.337 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59308 10 6452 1 2025-11-01 23:14:38.555 00:00:10.647 TCP 1.101.0.1:3000 -> 22.102.0.1:38952 12 10375 1 2025-11-01 23:14:40.980 00:00:11.417 TCP 23.104.0.1:33886 -> 1.101.0.1:3000 15 1926 1 2025-11-01 23:15:39.245 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:46242 10 6452 1 2025-11-01 23:15:42.434 00:00:10.330 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:16:21.330 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 23:16:21.258 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 23:16:39.462 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39314 10 6452 1 2025-11-01 23:16:42.799 00:00:10.364 TCP 23.104.0.1:37054 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:12:51.085 00:05:03.252 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 23:17:39.679 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60778 10 6452 1 2025-11-01 23:17:43.202 00:00:10.321 TCP 23.104.0.1:34218 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:13:51.090 00:05:03.246 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 23:18:39.890 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54996 10 6452 1 2025-11-01 23:18:43.560 00:00:10.372 TCP 23.104.0.1:33724 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:19:40.115 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34520 10 6452 1 2025-11-01 23:19:43.970 00:00:10.372 TCP 23.104.0.1:40540 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:20:40.326 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58932 10 6452 1 2025-11-01 23:20:44.395 00:00:10.361 TCP 23.104.0.1:44112 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:21:21.360 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 23:21:21.156 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 23:21:40.540 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47204 10 6452 1 2025-11-01 23:21:44.797 00:00:10.366 TCP 23.104.0.1:57232 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:22:40.759 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58232 10 6452 1 2025-11-01 23:22:45.201 00:00:10.325 TCP 23.104.0.1:46708 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:18:51.088 00:05:03.253 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 23:23:40.977 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:53796 10 6452 1 2025-11-01 23:19:51.090 00:05:03.248 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 23:23:45.567 00:00:10.363 TCP 23.104.0.1:44084 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:24:41.212 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57504 10 6452 1 2025-11-01 23:24:45.973 00:00:10.371 TCP 23.104.0.1:43088 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:25:41.382 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38912 10 6452 1 2025-11-01 23:25:46.383 00:00:10.364 TCP 23.104.0.1:60930 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:26:21.560 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 23:26:21.274 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 23:26:41.590 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41292 10 6452 1 2025-11-01 23:26:46.792 00:00:10.336 TCP 23.104.0.1:53752 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:27:41.803 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42010 10 6452 1 2025-11-01 23:27:47.166 00:00:10.369 TCP 23.104.0.1:41364 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:28:42.013 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58270 10 6452 1 2025-11-01 23:24:51.088 00:05:03.257 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 23:28:47.576 00:00:10.331 TCP 23.104.0.1:50208 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:29:42.243 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:55286 14 14292 1 2025-11-01 23:25:51.090 00:05:03.252 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 23:29:47.942 00:00:10.524 TCP 23.104.0.1:59872 -> 1.101.0.1:3000 17 2241 1 2025-11-01 23:30:42.508 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55412 10 6452 1 2025-11-01 23:30:48.502 00:00:10.367 TCP 23.104.0.1:35334 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:31:21.618 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 23:31:21.585 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 23:31:42.723 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53154 10 6452 1 2025-11-01 23:31:48.908 00:00:10.365 TCP 23.104.0.1:56720 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:32:42.939 00:00:10.531 TCP 1.101.0.1:3000 -> 22.102.0.1:39710 10 6452 1 2025-11-01 23:32:49.317 00:00:10.371 TCP 23.104.0.1:39362 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:33:43.506 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52178 10 6452 1 2025-11-01 23:33:49.724 00:00:10.373 TCP 23.104.0.1:55782 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:34:43.728 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43020 10 6452 1 2025-11-01 23:30:51.094 00:05:03.251 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 23:34:50.134 00:00:10.366 TCP 23.104.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:31:51.098 00:05:03.246 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 23:35:43.941 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:57700 10 6452 1 2025-11-01 23:35:50.537 00:00:10.619 TCP 23.104.0.1:36420 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:36:21.661 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 23:36:21.578 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 23:36:44.191 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56370 10 6452 1 2025-11-01 23:36:51.195 00:00:10.360 TCP 23.104.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:37:44.404 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33972 10 6452 1 2025-11-01 23:37:51.596 00:00:10.367 TCP 23.104.0.1:53334 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:38:44.628 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34494 10 6452 1 2025-11-01 23:38:52.003 00:00:10.360 TCP 23.104.0.1:38860 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:39:44.850 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:35810 10 6452 1 2025-11-01 23:39:52.400 00:00:10.385 TCP 23.104.0.1:50362 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:36:51.095 00:05:03.250 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 23:40:45.083 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46594 10 6452 1 2025-11-01 23:40:52.825 00:00:10.329 TCP 23.104.0.1:46240 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:41:21.823 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 23:41:21.756 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 23:41:45.299 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51022 10 6452 1 2025-11-01 23:37:51.098 00:05:03.245 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 23:41:53.196 00:00:10.364 TCP 23.104.0.1:39746 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:42:45.521 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46946 10 6452 1 2025-11-01 23:42:53.596 00:00:10.362 TCP 23.104.0.1:53514 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:43:45.742 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58658 10 6452 1 2025-11-01 23:43:53.998 00:00:10.366 TCP 23.104.0.1:55474 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:44:45.960 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:47940 10 6452 1 2025-11-01 23:44:54.407 00:00:10.325 TCP 23.104.0.1:53432 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:45:46.218 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:60140 12 6556 1 2025-11-01 23:45:54.771 00:00:10.366 TCP 23.104.0.1:51120 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:46:21.966 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 23:46:21.987 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 23:46:46.463 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39498 10 6452 1 2025-11-01 23:42:51.096 00:05:03.251 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 23:46:55.176 00:00:10.368 TCP 23.104.0.1:35430 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:43:51.099 00:05:03.245 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 23:47:46.672 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50872 10 6452 1 2025-11-01 23:47:55.580 00:00:10.368 TCP 23.104.0.1:46466 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:48:46.901 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52752 10 6452 1 2025-11-01 23:48:55.993 00:00:10.328 TCP 23.104.0.1:42120 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:49:47.121 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33200 10 6452 1 2025-11-01 23:49:56.359 00:00:10.367 TCP 23.104.0.1:60506 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:50:47.343 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54518 10 6452 1 2025-11-01 23:50:56.763 00:00:10.372 TCP 23.104.0.1:35552 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:51:22.177 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 23:51:22.342 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 23:51:47.557 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33378 10 6452 1 2025-11-01 23:51:57.168 00:00:10.363 TCP 23.104.0.1:44412 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:48:51.098 00:05:03.250 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 23:52:47.769 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57790 10 6452 1 2025-11-01 23:52:57.568 00:00:10.324 TCP 23.104.0.1:46956 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:49:51.100 00:05:03.248 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 23:53:47.993 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:38406 10 6452 1 2025-11-01 23:53:57.926 00:00:10.392 TCP 23.104.0.1:39876 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:54:48.178 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47854 10 6452 1 2025-11-01 23:54:58.355 00:00:10.371 TCP 23.104.0.1:33078 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:55:48.388 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50762 10 6452 1 2025-11-01 23:55:58.765 00:00:10.377 TCP 23.104.0.1:46068 -> 1.101.0.1:3000 11 1507 1 2025-11-01 23:56:22.148 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 23:56:22.275 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 23:56:48.560 00:00:10.435 TCP 1.101.0.1:3000 -> 22.102.0.1:57270 10 6452 1 2025-11-01 23:56:59.181 00:00:10.541 TCP 23.104.0.1:43450 -> 1.101.0.1:3000 13 1611 1 2025-11-01 23:57:49.042 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43432 10 6452 1 2025-11-01 23:57:59.767 00:00:10.367 TCP 23.104.0.1:40668 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 507855, total packets: 1577, avg bps: 1069, avg pps: 0, avg bpp: 322 Time window: 2025-11-01 22:54:51 - 2025-11-01 23:58:10 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0118s User: 0.0020s Wall: 0.0037s flows/second: 43281.6 Runtime: 0.0038s