Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-02 16:54:51.560 00:05:03.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 16:59:29.598 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59852 10 6452 1 2025-11-02 16:59:34.420 00:00:10.446 TCP 23.104.0.1:52198 -> 1.101.0.1:3000 11 1507 1 2025-11-02 16:55:51.563 00:05:03.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 17:00:29.811 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33200 12 10369 1 2025-11-02 17:00:34.902 00:00:10.435 TCP 23.104.0.1:55346 -> 1.101.0.1:3000 15 1926 1 2025-11-02 17:01:30.068 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46326 10 6452 1 2025-11-02 17:01:42.542 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 17:01:42.526 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 17:01:35.375 00:00:10.368 TCP 23.104.0.1:48028 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:02:30.290 00:00:10.340 TCP 1.101.0.1:3000 -> 22.102.0.1:51680 10 6452 1 2025-11-02 17:02:35.781 00:00:10.325 TCP 23.104.0.1:49226 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:03:30.680 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58294 10 6452 1 2025-11-02 17:03:36.143 00:00:10.365 TCP 23.104.0.1:48808 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:04:30.893 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35652 10 6452 1 2025-11-02 17:04:36.544 00:00:10.436 TCP 23.104.0.1:38546 -> 1.101.0.1:3000 15 1926 1 2025-11-02 17:00:51.562 00:05:03.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 17:05:31.111 00:00:10.492 TCP 1.101.0.1:3000 -> 22.102.0.1:51530 12 10375 1 2025-11-02 17:05:37.017 00:00:10.366 TCP 23.104.0.1:47416 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:01:51.565 00:05:03.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 17:06:31.643 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43214 10 6452 1 2025-11-02 17:06:42.741 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 17:06:42.579 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 17:06:37.418 00:00:10.371 TCP 23.104.0.1:59898 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:07:31.853 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55456 10 6452 1 2025-11-02 17:07:37.827 00:00:10.323 TCP 23.104.0.1:51042 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:08:32.081 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35756 10 6452 1 2025-11-02 17:08:38.189 00:00:10.369 TCP 23.104.0.1:33762 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:09:32.289 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50082 10 6452 1 2025-11-02 17:09:38.624 00:00:10.326 TCP 23.104.0.1:52710 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:10:32.501 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58420 10 6452 1 2025-11-02 17:10:38.984 00:00:10.375 TCP 23.104.0.1:53840 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:06:51.563 00:05:03.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 17:11:32.716 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42808 10 6452 1 2025-11-02 17:11:43.061 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 17:11:43.021 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 17:11:39.395 00:00:10.369 TCP 23.104.0.1:44348 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:07:51.567 00:05:03.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 17:12:32.925 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57990 10 6452 1 2025-11-02 17:12:39.801 00:00:10.370 TCP 23.104.0.1:57496 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:13:33.135 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36970 10 6452 1 2025-11-02 17:13:40.208 00:00:10.365 TCP 23.104.0.1:55944 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:14:33.348 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41486 10 6452 1 2025-11-02 17:14:40.607 00:00:10.398 TCP 23.104.0.1:39484 -> 1.101.0.1:3000 15 1926 1 2025-11-02 17:15:33.557 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:34508 12 10375 1 2025-11-02 17:15:41.048 00:00:10.361 TCP 23.104.0.1:38436 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:16:43.041 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 17:16:33.806 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34068 10 6452 1 2025-11-02 17:16:42.887 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 17:16:41.446 00:00:10.363 TCP 23.104.0.1:41246 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:12:51.563 00:05:03.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 17:17:34.040 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41048 10 6452 1 2025-11-02 17:13:51.566 00:05:03.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 17:17:41.844 00:00:10.335 TCP 23.104.0.1:43588 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:18:34.264 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53008 10 6452 1 2025-11-02 17:18:42.222 00:00:10.361 TCP 23.104.0.1:55834 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:19:34.486 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58914 10 6452 1 2025-11-02 17:19:42.627 00:00:10.366 TCP 23.104.0.1:46772 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:20:34.662 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43576 10 6452 1 2025-11-02 17:20:43.029 00:00:10.369 TCP 23.104.0.1:38232 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:21:34.885 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:33474 10 6452 1 2025-11-02 17:21:43.003 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 17:21:42.940 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 17:21:43.431 00:00:10.366 TCP 23.104.0.1:49600 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:22:35.081 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35636 10 6452 1 2025-11-02 17:18:51.564 00:05:03.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 17:22:43.834 00:00:10.387 TCP 23.104.0.1:59972 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:23:35.287 00:00:10.758 TCP 1.101.0.1:3000 -> 22.102.0.1:43976 10 6452 1 2025-11-02 17:19:51.566 00:05:03.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 17:23:44.264 00:00:10.366 TCP 23.104.0.1:52086 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:24:36.087 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42370 10 6452 1 2025-11-02 17:24:44.669 00:00:10.370 TCP 23.104.0.1:42120 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:25:36.301 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48556 10 6452 1 2025-11-02 17:25:45.105 00:00:10.324 TCP 23.104.0.1:44992 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:26:43.012 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 17:26:36.516 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49560 10 6452 1 2025-11-02 17:26:43.151 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 17:26:45.468 00:00:10.363 TCP 23.104.0.1:50988 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:27:36.692 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38224 10 6452 1 2025-11-02 17:27:45.872 00:00:10.361 TCP 23.104.0.1:58360 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:28:36.880 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55494 10 6452 1 2025-11-02 17:28:46.274 00:00:10.368 TCP 23.104.0.1:32992 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:24:51.566 00:05:03.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 17:29:37.110 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54984 10 6452 1 2025-11-02 17:25:51.567 00:05:03.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 17:29:46.678 00:00:10.367 TCP 23.104.0.1:45136 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:30:37.323 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:38904 10 6452 1 2025-11-02 17:30:47.107 00:00:10.575 TCP 23.104.0.1:36086 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:31:43.327 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 17:31:43.474 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 17:31:37.495 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42894 10 6452 1 2025-11-02 17:31:47.718 00:00:10.380 TCP 23.104.0.1:43658 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:32:37.710 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55514 10 6452 1 2025-11-02 17:32:48.133 00:00:10.366 TCP 23.104.0.1:33292 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:33:37.886 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42452 10 6452 1 2025-11-02 17:33:48.537 00:00:10.322 TCP 23.104.0.1:46354 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:34:38.104 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43374 10 6452 1 2025-11-02 17:30:51.567 00:05:03.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 17:34:48.897 00:00:10.368 TCP 23.104.0.1:40954 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:35:38.364 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51022 10 6452 1 2025-11-02 17:31:51.568 00:05:03.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 17:35:49.302 00:00:10.364 TCP 23.104.0.1:58422 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:36:43.175 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 17:36:43.120 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 17:36:38.537 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35664 10 6452 1 2025-11-02 17:36:49.707 00:00:10.358 TCP 23.104.0.1:60196 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:37:38.754 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34870 10 6452 1 2025-11-02 17:37:50.106 00:00:10.365 TCP 23.104.0.1:35714 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:38:38.969 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48396 10 6452 1 2025-11-02 17:38:50.511 00:00:10.374 TCP 23.104.0.1:39636 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:39:39.198 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38858 10 6452 1 2025-11-02 17:39:50.928 00:00:10.355 TCP 23.104.0.1:39196 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:40:39.404 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40696 10 6452 1 2025-11-02 17:36:51.566 00:05:03.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 17:40:51.328 00:00:10.347 TCP 23.104.0.1:44522 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:41:43.480 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 17:41:43.284 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 17:41:39.618 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49604 10 6452 1 2025-11-02 17:37:51.569 00:05:03.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 17:41:51.719 00:00:10.317 TCP 23.104.0.1:60568 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:42:39.835 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36024 10 6452 1 2025-11-02 17:42:52.111 00:00:10.359 TCP 23.104.0.1:47242 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:43:40.069 00:00:10.313 TCP 1.101.0.1:3000 -> 22.102.0.1:43318 10 6452 1 2025-11-02 17:43:52.512 00:00:10.365 TCP 23.104.0.1:50056 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:44:40.417 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56872 10 6452 1 2025-11-02 17:44:52.924 00:00:10.390 TCP 23.104.0.1:33928 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:45:40.630 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60118 10 6452 1 2025-11-02 17:45:53.356 00:00:10.361 TCP 23.104.0.1:41274 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:46:43.482 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 17:46:43.388 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 17:46:40.838 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59784 10 6452 1 2025-11-02 17:42:51.570 00:05:03.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 17:46:53.760 00:00:10.376 TCP 23.104.0.1:43896 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:47:41.073 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37848 10 6452 1 2025-11-02 17:43:51.573 00:05:03.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 17:47:54.174 00:00:10.360 TCP 23.104.0.1:35398 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:48:41.282 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35554 10 6452 1 2025-11-02 17:48:54.576 00:00:10.330 TCP 23.104.0.1:44840 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:49:41.454 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35906 10 6452 1 2025-11-02 17:49:54.955 00:00:10.363 TCP 23.104.0.1:52132 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:50:41.626 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59952 10 6452 1 2025-11-02 17:50:55.357 00:00:10.332 TCP 23.104.0.1:56394 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:51:43.350 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 17:51:43.765 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 17:51:41.798 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42540 10 6452 1 2025-11-02 17:51:55.727 00:00:10.371 TCP 23.104.0.1:34116 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:52:42.012 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48418 10 6452 1 2025-11-02 17:48:51.573 00:05:03.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-02 17:52:56.127 00:00:10.364 TCP 23.104.0.1:39176 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:53:42.225 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33074 10 6452 1 2025-11-02 17:49:51.574 00:05:03.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-02 17:53:56.529 00:00:10.365 TCP 23.104.0.1:38802 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:54:42.447 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54566 10 6452 1 2025-11-02 17:54:56.930 00:00:10.371 TCP 23.104.0.1:39478 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:55:42.663 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57374 10 6452 1 2025-11-02 17:55:57.344 00:00:10.365 TCP 23.104.0.1:34922 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:56:43.645 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-02 17:56:43.580 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-02 17:56:42.873 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40162 10 6452 1 2025-11-02 17:56:57.746 00:00:10.369 TCP 23.104.0.1:55356 -> 1.101.0.1:3000 11 1507 1 2025-11-02 17:57:43.104 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40280 10 6452 1 2025-11-02 17:57:58.152 00:00:10.364 TCP 23.104.0.1:35874 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 503409, total packets: 1569, avg bps: 1060, avg pps: 0, avg bpp: 320 Time window: 2025-11-02 16:54:51 - 2025-11-02 17:58:08 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0062s User: 0.0000s Wall: 0.0031s flows/second: 52428.8 Runtime: 0.0031s