Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 08:54:51.343 00:05:03.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 08:59:22.607 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48318 10 6452 1 2025-11-02 08:59:32.914 00:00:10.375 TCP 23.104.0.1:43746 -> 1.101.0.1:3000 11 1507 1 2025-11-02 08:55:51.346 00:05:03.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 09:00:22.836 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60798 10 6452 1 2025-11-02 09:00:33.325 00:00:10.367 TCP 23.104.0.1:54022 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:01:23.073 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53352 10 6452 1 2025-11-02 09:01:32.811 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 09:01:32.955 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 09:01:33.728 00:00:10.371 TCP 23.104.0.1:48406 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:02:23.281 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36320 10 6452 1 2025-11-02 09:02:34.137 00:00:10.369 TCP 23.104.0.1:60998 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:03:23.493 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60532 10 6452 1 2025-11-02 09:03:34.542 00:00:10.368 TCP 23.104.0.1:58386 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:04:23.708 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:53540 10 6452 1 2025-11-02 09:04:34.945 00:00:10.372 TCP 23.104.0.1:36450 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:00:51.346 00:05:03.186 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 09:05:23.915 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34430 10 6452 1 2025-11-02 09:05:35.353 00:00:10.369 TCP 23.104.0.1:34840 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:01:51.349 00:05:03.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 09:06:33.204 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 09:06:33.109 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 09:06:24.126 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53626 10 6452 1 2025-11-02 09:06:35.759 00:00:10.379 TCP 23.104.0.1:36582 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:07:24.348 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39180 10 6452 1 2025-11-02 09:07:36.178 00:00:10.361 TCP 23.104.0.1:39012 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:08:24.561 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:44104 10 6452 1 2025-11-02 09:08:36.577 00:00:10.366 TCP 23.104.0.1:60200 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:09:24.824 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35126 10 6452 1 2025-11-02 09:09:36.977 00:00:10.371 TCP 23.104.0.1:39532 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:10:25.052 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60062 10 6452 1 2025-11-02 09:10:37.392 00:00:10.371 TCP 23.104.0.1:49606 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:06:51.350 00:05:03.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 09:11:25.263 00:00:10.550 TCP 1.101.0.1:3000 -> 22.102.0.1:56146 10 6452 1 2025-11-02 09:11:33.228 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 09:11:33.092 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 09:11:37.801 00:00:10.786 TCP 23.104.0.1:56920 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:07:51.352 00:05:03.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 09:12:25.852 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48258 10 6452 1 2025-11-02 09:12:38.633 00:00:10.369 TCP 23.104.0.1:42712 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:13:26.080 00:00:10.253 TCP 1.101.0.1:3000 -> 22.102.0.1:53960 10 6452 1 2025-11-02 09:13:39.058 00:00:10.365 TCP 23.104.0.1:47944 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:14:26.376 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48422 10 6452 1 2025-11-02 09:14:39.456 00:00:10.358 TCP 23.104.0.1:55920 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:15:26.601 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43534 10 6452 1 2025-11-02 09:15:39.850 00:00:10.379 TCP 23.104.0.1:33922 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:16:33.272 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 09:16:32.952 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 09:16:26.817 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43154 10 6452 1 2025-11-02 09:16:40.271 00:00:10.360 TCP 23.104.0.1:39352 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:12:51.350 00:05:03.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 09:17:27.065 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51376 10 6452 1 2025-11-02 09:17:40.672 00:00:10.377 TCP 23.104.0.1:33236 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:13:51.355 00:05:03.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 09:18:27.241 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45398 10 6452 1 2025-11-02 09:18:41.109 00:00:10.336 TCP 23.104.0.1:38170 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:19:27.446 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43944 10 6452 1 2025-11-02 09:19:41.490 00:00:10.369 TCP 23.104.0.1:36990 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:20:27.656 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53182 10 6452 1 2025-11-02 09:20:41.901 00:00:10.370 TCP 23.104.0.1:39800 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:21:33.479 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 09:21:33.400 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 09:21:27.869 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:60926 10 6452 1 2025-11-02 09:21:42.316 00:00:10.368 TCP 23.104.0.1:50424 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:22:28.098 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37200 10 6452 1 2025-11-02 09:22:42.733 00:00:10.365 TCP 23.104.0.1:60802 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:18:51.353 00:05:03.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 09:23:28.312 00:00:10.404 TCP 1.101.0.1:3000 -> 22.102.0.1:55034 10 6452 1 2025-11-02 09:23:43.144 00:00:10.368 TCP 23.104.0.1:34528 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:19:51.356 00:05:03.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 09:24:28.753 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57244 10 6452 1 2025-11-02 09:24:43.553 00:00:10.368 TCP 23.104.0.1:41996 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:25:28.986 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:51978 10 6452 1 2025-11-02 09:25:43.960 00:00:10.330 TCP 23.104.0.1:40968 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:26:33.592 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 09:26:33.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 09:26:29.212 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50408 10 6452 1 2025-11-02 09:26:44.327 00:00:10.373 TCP 23.104.0.1:48074 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:27:29.435 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36368 10 6452 1 2025-11-02 09:27:44.739 00:00:10.369 TCP 23.104.0.1:59558 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:28:29.649 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57372 10 6452 1 2025-11-02 09:28:45.144 00:00:10.365 TCP 23.104.0.1:58614 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:24:51.355 00:05:03.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 09:29:29.820 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44388 10 6452 1 2025-11-02 09:29:45.547 00:00:10.326 TCP 23.104.0.1:58968 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:25:51.356 00:05:03.182 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 09:30:29.996 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44202 10 6452 1 2025-11-02 09:30:45.916 00:00:10.329 TCP 23.104.0.1:53108 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:31:33.332 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 09:31:33.547 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 09:31:30.232 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37756 10 6452 1 2025-11-02 09:31:46.277 00:00:10.365 TCP 23.104.0.1:60540 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:32:30.452 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34644 10 6452 1 2025-11-02 09:32:46.682 00:00:10.363 TCP 23.104.0.1:48312 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:33:30.665 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33146 10 6452 1 2025-11-02 09:33:47.096 00:00:10.366 TCP 23.104.0.1:41440 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:34:30.880 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48904 10 6452 1 2025-11-02 09:30:51.358 00:05:03.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 09:34:47.499 00:00:10.318 TCP 23.104.0.1:44054 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:35:31.111 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54980 10 6452 1 2025-11-02 09:31:51.360 00:05:03.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 09:35:47.854 00:00:10.373 TCP 23.104.0.1:55484 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:36:33.467 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 09:36:33.976 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 09:36:31.326 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50388 10 6452 1 2025-11-02 09:36:48.267 00:00:10.364 TCP 23.104.0.1:50734 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:37:31.562 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52568 10 6452 1 2025-11-02 09:37:48.667 00:00:10.369 TCP 23.104.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:38:31.791 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52052 10 6452 1 2025-11-02 09:38:49.109 00:00:10.366 TCP 23.104.0.1:53796 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:39:32.027 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42430 10 6452 1 2025-11-02 09:39:49.516 00:00:10.368 TCP 23.104.0.1:54696 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:40:32.249 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46666 10 6452 1 2025-11-02 09:36:51.359 00:05:03.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 09:40:49.920 00:00:10.379 TCP 23.104.0.1:60864 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:41:33.777 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 09:41:33.855 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 09:41:32.471 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36730 10 6452 1 2025-11-02 09:37:51.364 00:05:03.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 09:41:50.337 00:00:10.322 TCP 23.104.0.1:33756 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:42:32.691 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40064 10 6452 1 2025-11-02 09:42:50.698 00:00:10.368 TCP 23.104.0.1:57896 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:43:32.913 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42570 10 6452 1 2025-11-02 09:43:51.117 00:00:10.370 TCP 23.104.0.1:60320 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:44:33.128 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57124 10 6452 1 2025-11-02 09:44:51.528 00:00:10.359 TCP 23.104.0.1:53224 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:45:33.383 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:38974 11 6492 1 2025-11-02 09:45:51.926 00:00:10.388 TCP 23.104.0.1:54672 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:46:33.841 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 09:46:33.998 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 09:46:33.594 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46492 10 6452 1 2025-11-02 09:42:51.362 00:05:03.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 09:46:52.355 00:00:10.364 TCP 23.104.0.1:54810 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:47:33.801 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50148 10 6452 1 2025-11-02 09:43:51.365 00:05:03.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 09:47:52.757 00:00:10.374 TCP 23.104.0.1:60658 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:48:33.973 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59164 10 6452 1 2025-11-02 09:48:53.171 00:00:10.375 TCP 23.104.0.1:55294 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:49:34.211 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34652 10 6452 1 2025-11-02 09:49:53.583 00:00:10.372 TCP 23.104.0.1:45320 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:50:34.426 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38746 10 6452 1 2025-11-02 09:50:54.000 00:00:10.364 TCP 23.104.0.1:44546 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:51:33.933 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 09:51:33.874 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 09:51:34.640 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32794 10 6452 1 2025-11-02 09:51:54.399 00:00:10.370 TCP 23.104.0.1:45860 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:52:34.852 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46830 10 6452 1 2025-11-02 09:48:51.366 00:05:03.197 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 09:52:54.828 00:00:10.360 TCP 23.104.0.1:51722 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:53:35.079 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36310 10 6452 1 2025-11-02 09:49:51.368 00:05:03.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 09:53:55.227 00:00:10.363 TCP 23.104.0.1:47464 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:54:35.297 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39466 10 6452 1 2025-11-02 09:54:55.626 00:00:10.363 TCP 23.104.0.1:33056 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:55:35.507 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48824 10 6452 1 2025-11-02 09:55:56.026 00:00:26.707 TCP 23.104.0.1:39432 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:56:34.027 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 09:56:34.160 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 09:56:35.724 00:00:10.262 TCP 1.101.0.1:3000 -> 22.102.0.1:43194 10 6452 1 2025-11-02 09:57:12.794 00:00:10.376 TCP 23.104.0.1:42198 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:57:36.028 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43416 10 6452 1 2025-11-02 09:58:13.204 00:00:10.365 TCP 23.104.0.1:45218 -> 1.101.0.1:3000 11 1507 1 2025-11-02 09:58:36.239 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35020 10 6452 1 Summary: total flows: 163, total bytes: 496881, total packets: 1562, avg bps: 1036, avg pps: 0, avg bpp: 318 Time window: 2025-11-02 08:54:51 - 2025-11-02 09:58:46 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0046s User: 0.0018s Wall: 0.0044s flows/second: 37222.8 Runtime: 0.0044s