Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 00:54:51.111 00:05:03.256 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 00:59:04.900 00:00:13.393 TCP 1.101.0.1:3000 -> 22.102.0.1:41700 10 6452 1 2025-11-02 00:59:39.542 00:00:10.320 TCP 23.104.0.1:35422 -> 1.101.0.1:3000 11 1507 1 2025-11-02 00:55:51.114 00:05:03.251 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 01:00:08.336 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48520 10 6452 1 2025-11-02 01:00:39.899 00:00:10.373 TCP 23.104.0.1:45944 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:01:23.689 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 01:01:08.549 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51716 10 6452 1 2025-11-02 01:01:23.753 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 01:01:40.315 00:00:10.366 TCP 23.104.0.1:35918 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:02:08.758 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60256 10 6452 1 2025-11-02 01:02:40.715 00:00:10.376 TCP 23.104.0.1:44996 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:03:08.987 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48838 10 6452 1 2025-11-02 01:03:41.132 00:00:10.324 TCP 23.104.0.1:35686 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:04:09.219 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58674 10 6452 1 2025-11-02 01:00:51.115 00:05:03.255 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 01:04:41.495 00:00:20.823 TCP 23.104.0.1:54618 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:05:09.441 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46814 10 6452 1 2025-11-02 01:01:51.116 00:05:03.250 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 01:05:52.353 00:00:10.359 TCP 23.104.0.1:42178 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:06:09.658 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56340 10 6452 1 2025-11-02 01:06:23.413 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 01:06:23.406 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 01:06:52.754 00:00:10.380 TCP 23.104.0.1:34038 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:07:09.877 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53990 10 6452 1 2025-11-02 01:07:53.172 00:00:10.360 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:08:10.097 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52526 10 6452 1 2025-11-02 01:08:53.573 00:00:10.367 TCP 23.104.0.1:36916 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:09:10.318 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39472 10 6452 1 2025-11-02 01:09:53.978 00:00:10.362 TCP 23.104.0.1:37324 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:10:10.541 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56716 11 6492 1 2025-11-02 01:06:51.114 00:05:03.257 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 01:10:54.380 00:00:10.363 TCP 23.104.0.1:52786 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:11:10.750 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39224 10 6452 1 2025-11-02 01:11:23.534 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 01:11:23.524 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 01:07:51.117 00:05:03.252 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 01:11:54.781 00:00:10.363 TCP 23.104.0.1:34448 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:12:10.974 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35222 10 6452 1 2025-11-02 01:12:55.183 00:00:10.373 TCP 23.104.0.1:32780 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:13:11.216 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34324 10 6452 1 2025-11-02 01:13:55.588 00:00:10.368 TCP 23.104.0.1:50124 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:14:11.437 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35498 10 6452 1 2025-11-02 01:14:55.987 00:00:10.567 TCP 23.104.0.1:46056 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:15:11.610 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53108 10 6452 1 2025-11-02 01:15:56.591 00:00:10.368 TCP 23.104.0.1:53900 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:16:11.833 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47246 10 6452 1 2025-11-02 01:16:23.907 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 01:16:23.778 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 01:12:51.115 00:05:03.257 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 01:16:56.998 00:00:10.366 TCP 23.104.0.1:60318 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:17:12.066 00:00:10.506 TCP 1.101.0.1:3000 -> 22.102.0.1:55598 10 6452 1 2025-11-02 01:13:51.119 00:05:03.252 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 01:17:57.399 00:00:10.371 TCP 23.104.0.1:49630 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:18:12.609 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33226 10 6452 1 2025-11-02 01:18:57.808 00:00:10.366 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:19:12.824 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48690 10 6452 1 2025-11-02 01:19:58.216 00:00:10.366 TCP 23.104.0.1:54792 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:20:13.039 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:59508 10 6452 1 2025-11-02 01:20:58.623 00:00:10.333 TCP 23.104.0.1:56262 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:21:13.199 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60046 10 6452 1 2025-11-02 01:21:22.975 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 01:21:22.985 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 01:21:58.996 00:00:10.365 TCP 23.104.0.1:44450 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:22:13.408 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44844 10 6452 1 2025-11-02 01:18:51.117 00:05:03.257 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 01:22:59.396 00:00:10.365 TCP 23.104.0.1:60932 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:23:13.618 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40212 10 6452 1 2025-11-02 01:19:51.119 00:05:03.252 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 01:23:59.796 00:00:10.364 TCP 23.104.0.1:58766 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:24:13.828 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60438 10 6452 1 2025-11-02 01:25:00.200 00:00:10.440 TCP 23.104.0.1:51172 -> 1.101.0.1:3000 15 1926 1 2025-11-02 01:25:14.070 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:57946 12 10375 1 2025-11-02 01:26:00.678 00:00:10.365 TCP 23.104.0.1:39142 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:26:23.716 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 01:26:14.317 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53052 10 6452 1 2025-11-02 01:26:23.734 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 01:27:01.104 00:00:10.329 TCP 23.104.0.1:33154 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:27:14.537 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53888 10 6452 1 2025-11-02 01:28:01.473 00:00:10.369 TCP 23.104.0.1:38376 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:28:14.753 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:35484 10 6452 1 2025-11-02 01:24:51.119 00:05:03.257 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 01:29:01.871 00:00:10.372 TCP 23.104.0.1:57796 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:29:14.990 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35954 10 6452 1 2025-11-02 01:25:51.120 00:05:03.253 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 01:30:15.222 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45570 12 10375 1 2025-11-02 01:30:02.276 00:00:20.655 TCP 23.104.0.1:45368 -> 1.101.0.1:3000 15 1926 1 2025-11-02 01:31:15.442 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48222 10 6452 1 2025-11-02 01:31:23.772 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 01:31:24.003 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 01:31:12.968 00:00:10.383 TCP 23.104.0.1:47270 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:32:13.391 00:00:10.362 TCP 23.104.0.1:58152 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:32:15.659 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44782 10 6452 1 2025-11-02 01:33:13.788 00:00:10.319 TCP 23.104.0.1:39882 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:33:15.875 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:38174 10 6452 1 2025-11-02 01:34:14.146 00:00:10.364 TCP 23.104.0.1:56926 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:34:16.101 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52976 10 6452 1 2025-11-02 01:30:51.119 00:05:03.257 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 01:35:16.313 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54608 10 6452 1 2025-11-02 01:35:14.553 00:00:10.363 TCP 23.104.0.1:41858 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:31:51.121 00:05:03.253 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 01:36:16.527 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41592 10 6452 1 2025-11-02 01:36:24.361 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 01:36:14.954 00:00:10.369 TCP 23.104.0.1:48692 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:36:24.230 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 01:37:15.361 00:00:10.363 TCP 23.104.0.1:36030 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:37:16.700 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48178 10 6452 1 2025-11-02 01:38:15.759 00:00:10.374 TCP 23.104.0.1:42522 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:38:16.910 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45560 10 6452 1 2025-11-02 01:39:16.172 00:00:10.370 TCP 23.104.0.1:41282 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:39:17.121 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56182 10 6452 1 2025-11-02 01:40:16.577 00:00:10.366 TCP 23.104.0.1:59536 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:40:17.332 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54004 10 6452 1 2025-11-02 01:36:51.126 00:05:03.252 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 01:41:24.265 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 01:41:16.980 00:00:10.328 TCP 23.104.0.1:47108 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:41:24.242 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 01:41:17.556 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34360 10 6452 1 2025-11-02 01:37:51.128 00:05:03.247 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 01:42:17.767 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56834 10 6452 1 2025-11-02 01:42:17.346 00:00:10.368 TCP 23.104.0.1:37270 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:43:17.748 00:00:10.366 TCP 23.104.0.1:42396 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:43:17.991 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:46458 10 6452 1 2025-11-02 01:44:18.151 00:00:10.324 TCP 23.104.0.1:47100 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:44:18.177 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38888 10 6452 1 2025-11-02 01:45:18.515 00:00:10.367 TCP 23.104.0.1:39668 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:45:18.352 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37180 10 6452 1 2025-11-02 01:46:24.376 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 01:46:24.372 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 01:46:18.564 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33788 10 6452 1 2025-11-02 01:46:18.919 00:00:10.391 TCP 23.104.0.1:35952 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:42:51.128 00:05:03.252 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 01:47:18.773 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:47576 10 6452 1 2025-11-02 01:47:19.352 00:00:10.346 TCP 23.104.0.1:58460 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:43:51.129 00:05:03.247 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 01:48:18.967 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40128 10 6452 1 2025-11-02 01:48:19.786 00:00:10.370 TCP 23.104.0.1:38434 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:49:19.196 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56722 10 6452 1 2025-11-02 01:49:20.198 00:00:10.368 TCP 23.104.0.1:57688 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:50:20.608 00:00:10.369 TCP 23.104.0.1:49566 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:50:19.420 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43458 10 6452 1 2025-11-02 01:51:24.820 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 01:51:21.026 00:00:10.366 TCP 23.104.0.1:54580 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:51:24.898 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 01:51:19.646 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40382 10 6452 1 2025-11-02 01:52:21.435 00:00:10.367 TCP 23.104.0.1:45918 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:52:19.861 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51512 10 6452 1 2025-11-02 01:48:51.127 00:05:03.253 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 01:53:20.082 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35394 10 6452 1 2025-11-02 01:53:21.839 00:00:10.346 TCP 23.104.0.1:35382 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:49:51.131 00:05:03.247 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 01:54:20.291 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58924 10 6452 1 2025-11-02 01:54:22.222 00:00:10.368 TCP 23.104.0.1:44216 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:55:20.470 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57520 10 6452 1 2025-11-02 01:55:22.628 00:00:10.368 TCP 23.104.0.1:43722 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:56:24.485 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 01:56:24.361 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 01:56:20.687 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35034 10 6452 1 2025-11-02 01:56:23.029 00:00:10.365 TCP 23.104.0.1:45406 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:57:20.857 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54622 10 6452 1 2025-11-02 01:57:23.431 00:00:10.330 TCP 23.104.0.1:38918 -> 1.101.0.1:3000 11 1507 1 2025-11-02 01:58:21.083 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51832 10 6452 1 2025-11-02 01:58:23.797 00:00:10.364 TCP 23.104.0.1:38642 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505565, total packets: 1574, avg bps: 1057, avg pps: 0, avg bpp: 321 Time window: 2025-11-02 00:54:51 - 2025-11-02 01:58:34 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0021s Wall: 0.0026s flows/second: 63028.6 Runtime: 0.0026s