Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 07:54:51.314 00:05:03.200 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 07:59:08.312 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36756 10 6452 1 2025-11-02 07:59:06.966 00:00:10.402 TCP 23.104.0.1:57154 -> 1.101.0.1:3000 11 1507 1 2025-11-02 07:55:51.315 00:05:03.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 08:00:07.405 00:00:10.366 TCP 23.104.0.1:50606 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:00:08.533 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58510 10 6452 1 2025-11-02 08:01:08.751 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45282 10 6452 1 2025-11-02 08:01:07.808 00:00:10.339 TCP 23.104.0.1:43264 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:01:31.916 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 08:01:31.880 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 08:02:08.181 00:00:10.369 TCP 23.104.0.1:42062 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:02:08.942 00:00:10.526 TCP 1.101.0.1:3000 -> 22.102.0.1:54658 10 6452 1 2025-11-02 08:03:09.505 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48408 10 6452 1 2025-11-02 08:03:08.587 00:00:10.365 TCP 23.104.0.1:37626 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:04:09.724 00:00:10.720 TCP 1.101.0.1:3000 -> 22.102.0.1:44888 10 6452 1 2025-11-02 08:04:08.991 00:00:10.364 TCP 23.104.0.1:49940 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:00:51.314 00:05:03.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 08:05:10.485 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50386 10 6452 1 2025-11-02 08:05:09.397 00:00:10.366 TCP 23.104.0.1:57250 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:01:51.317 00:05:03.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 08:06:10.696 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49670 10 6452 1 2025-11-02 08:06:09.800 00:00:10.366 TCP 23.104.0.1:59984 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:06:31.729 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 08:06:31.794 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 08:07:10.201 00:00:10.369 TCP 23.104.0.1:50748 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:07:10.909 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47702 10 6452 1 2025-11-02 08:08:11.122 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44030 10 6452 1 2025-11-02 08:08:10.609 00:00:10.364 TCP 23.104.0.1:57968 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:09:11.013 00:00:10.378 TCP 23.104.0.1:34350 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:09:11.340 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51926 10 6452 1 2025-11-02 08:10:11.552 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51494 10 6452 1 2025-11-02 08:10:11.429 00:00:10.369 TCP 23.104.0.1:50878 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:06:51.315 00:05:03.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 08:11:11.765 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42532 11 6504 1 2025-11-02 08:11:11.840 00:00:10.380 TCP 23.104.0.1:34934 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:11:32.089 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 08:11:32.142 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 08:07:51.317 00:05:03.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 08:12:11.990 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:59976 10 6452 1 2025-11-02 08:12:12.261 00:00:10.373 TCP 23.104.0.1:44940 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:13:12.674 00:00:10.381 TCP 23.104.0.1:58656 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:13:12.221 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58386 10 6452 1 2025-11-02 08:14:13.107 00:00:10.366 TCP 23.104.0.1:44430 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:14:12.439 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33466 10 6452 1 2025-11-02 08:15:13.508 00:00:10.367 TCP 23.104.0.1:51780 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:15:12.660 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47368 10 6452 1 2025-11-02 08:16:13.916 00:00:10.341 TCP 23.104.0.1:42850 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:16:12.871 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:48224 10 6452 1 2025-11-02 08:16:32.232 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 08:16:32.013 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 08:12:51.316 00:05:03.200 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 08:17:13.106 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59104 10 6452 1 2025-11-02 08:17:14.299 00:00:10.324 TCP 23.104.0.1:46878 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:13:51.321 00:05:03.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 08:18:14.671 00:00:10.364 TCP 23.104.0.1:43728 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:18:13.275 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60128 10 6452 1 2025-11-02 08:19:15.101 00:00:10.368 TCP 23.104.0.1:46060 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:19:13.494 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:53748 10 6452 1 2025-11-02 08:20:13.688 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49034 10 6452 1 2025-11-02 08:20:15.503 00:00:10.328 TCP 23.104.0.1:53658 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:21:15.866 00:00:10.331 TCP 23.104.0.1:47564 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:21:13.906 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46972 10 6452 1 2025-11-02 08:21:31.973 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 08:21:32.033 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 08:22:16.250 00:00:10.365 TCP 23.104.0.1:50330 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:22:14.118 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43620 10 6452 1 2025-11-02 08:18:51.318 00:05:03.200 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 08:23:14.294 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35890 10 6452 1 2025-11-02 08:23:16.652 00:00:10.368 TCP 23.104.0.1:43596 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:19:51.321 00:05:03.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 08:24:14.465 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57980 10 6452 1 2025-11-02 08:24:17.058 00:00:10.359 TCP 23.104.0.1:50656 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:25:14.637 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51008 10 6452 1 2025-11-02 08:25:17.458 00:00:10.358 TCP 23.104.0.1:46418 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:26:14.849 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47074 10 6452 1 2025-11-02 08:26:31.984 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 08:26:17.852 00:00:10.375 TCP 23.104.0.1:60238 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:26:32.391 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 08:27:15.079 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44532 10 6452 1 2025-11-02 08:27:18.268 00:00:10.324 TCP 23.104.0.1:48632 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:28:15.298 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53064 10 6452 1 2025-11-02 08:28:18.632 00:00:10.362 TCP 23.104.0.1:60196 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:24:51.320 00:05:03.200 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 08:29:15.507 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43450 10 6452 1 2025-11-02 08:29:19.035 00:00:10.374 TCP 23.104.0.1:59016 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:25:51.322 00:05:03.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 08:30:15.746 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45628 10 6452 1 2025-11-02 08:30:19.439 00:00:10.368 TCP 23.104.0.1:50892 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:31:15.958 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:42098 10 6452 1 2025-11-02 08:31:19.861 00:00:10.329 TCP 23.104.0.1:59870 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:31:32.461 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 08:31:32.243 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 08:32:16.186 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43450 10 6452 1 2025-11-02 08:32:20.228 00:00:10.373 TCP 23.104.0.1:36688 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:33:16.400 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58290 10 6452 1 2025-11-02 08:33:20.641 00:00:10.367 TCP 23.104.0.1:50736 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:34:16.625 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:37276 10 6452 1 2025-11-02 08:34:21.056 00:00:10.736 TCP 23.104.0.1:42284 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:30:51.320 00:05:03.200 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 08:35:16.884 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35202 10 6452 1 2025-11-02 08:35:21.832 00:00:10.376 TCP 23.104.0.1:57476 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:31:51.323 00:05:03.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 08:36:17.108 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54220 10 6452 1 2025-11-02 08:36:32.603 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 08:36:32.533 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 08:36:22.245 00:00:10.361 TCP 23.104.0.1:45844 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:37:17.326 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:42698 10 6452 1 2025-11-02 08:37:22.647 00:00:10.365 TCP 23.104.0.1:44394 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:38:17.580 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48502 10 6452 1 2025-11-02 08:38:23.067 00:00:10.365 TCP 23.104.0.1:39248 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:39:17.791 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39410 10 6452 1 2025-11-02 08:39:23.472 00:00:10.364 TCP 23.104.0.1:51898 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:40:18.011 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53190 10 6452 1 2025-11-02 08:40:23.871 00:00:10.326 TCP 23.104.0.1:60080 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:36:51.335 00:05:03.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 08:41:18.238 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:35906 10 6452 1 2025-11-02 08:41:24.234 00:00:10.968 TCP 23.104.0.1:36316 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:41:32.677 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 08:41:32.601 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 08:37:51.337 00:05:03.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 08:42:18.428 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:35438 10 6452 1 2025-11-02 08:42:25.248 00:00:10.365 TCP 23.104.0.1:58968 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:43:18.610 00:00:10.782 TCP 1.101.0.1:3000 -> 22.102.0.1:36682 10 6452 1 2025-11-02 08:43:25.652 00:00:10.370 TCP 23.104.0.1:54472 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:44:19.435 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52408 10 6452 1 2025-11-02 08:44:26.091 00:00:10.380 TCP 23.104.0.1:56230 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:45:19.618 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58628 10 6452 1 2025-11-02 08:45:26.513 00:00:10.371 TCP 23.104.0.1:51062 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:46:19.793 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59976 10 6452 1 2025-11-02 08:46:32.684 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 08:46:32.480 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 08:46:26.920 00:00:10.370 TCP 23.104.0.1:49732 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:42:51.337 00:05:03.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 08:47:20.026 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48654 10 6452 1 2025-11-02 08:47:27.325 00:00:10.369 TCP 23.104.0.1:43672 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:43:51.343 00:05:03.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 08:48:20.241 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59870 10 6452 1 2025-11-02 08:48:27.744 00:00:10.376 TCP 23.104.0.1:57808 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:49:20.458 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52924 10 6452 1 2025-11-02 08:49:28.155 00:00:10.369 TCP 23.104.0.1:40246 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:50:20.625 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57204 10 6452 1 2025-11-02 08:50:28.566 00:00:10.323 TCP 23.104.0.1:42704 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:51:20.836 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51638 10 6452 1 2025-11-02 08:51:33.024 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 08:51:32.917 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 08:51:28.928 00:00:10.385 TCP 23.104.0.1:50012 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:52:21.072 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55330 10 6452 1 2025-11-02 08:52:29.355 00:00:10.366 TCP 23.104.0.1:53524 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:48:51.341 00:05:03.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 08:53:21.281 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43728 10 6452 1 2025-11-02 08:53:29.759 00:00:10.383 TCP 23.104.0.1:53390 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:49:51.343 00:05:03.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 08:54:21.491 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44532 10 6452 1 2025-11-02 08:54:30.177 00:00:10.365 TCP 23.104.0.1:60916 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:55:21.704 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48680 10 6452 1 2025-11-02 08:55:30.575 00:00:11.071 TCP 23.104.0.1:51726 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:56:21.915 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:48398 10 6452 1 2025-11-02 08:56:32.819 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 08:56:32.956 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 08:56:31.683 00:00:10.381 TCP 23.104.0.1:36032 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:57:22.098 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60206 10 6452 1 2025-11-02 08:57:32.105 00:00:10.364 TCP 23.104.0.1:54258 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:58:22.312 00:00:10.256 TCP 1.101.0.1:3000 -> 22.102.0.1:47952 10 6452 1 2025-11-02 08:58:32.505 00:00:10.368 TCP 23.104.0.1:34126 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498400, total packets: 1573, avg bps: 1040, avg pps: 0, avg bpp: 316 Time window: 2025-11-02 07:54:51 - 2025-11-02 08:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0024s Wall: 0.0030s flows/second: 54757.7 Runtime: 0.0030s