Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 03:54:51.769 00:05:03.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 03:58:53.078 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36792 10 6452 1 2025-11-03 03:59:39.315 00:00:10.371 TCP 23.104.0.1:37142 -> 1.101.0.1:3000 11 1507 1 2025-11-03 03:55:51.773 00:05:03.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 03:59:53.285 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33198 10 6452 1 2025-11-03 04:00:39.717 00:00:10.373 TCP 23.104.0.1:47766 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:00:53.499 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58378 10 6452 1 2025-11-03 04:01:40.126 00:00:10.323 TCP 23.104.0.1:39764 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:01:56.132 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 04:01:55.920 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 04:01:53.733 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57646 10 6452 1 2025-11-03 04:02:40.490 00:00:10.364 TCP 23.104.0.1:41092 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:02:53.946 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56426 10 6452 1 2025-11-03 04:03:40.889 00:00:10.330 TCP 23.104.0.1:43686 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:03:54.177 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48062 10 6452 1 2025-11-03 04:04:41.259 00:00:10.360 TCP 23.104.0.1:32862 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:00:51.772 00:05:03.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 04:04:54.393 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34384 10 6452 1 2025-11-03 04:05:41.657 00:00:10.380 TCP 23.104.0.1:54198 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:01:51.773 00:05:03.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 04:05:54.564 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53274 10 6452 1 2025-11-03 04:06:56.179 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 04:06:42.090 00:00:10.363 TCP 23.104.0.1:36110 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:06:55.812 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 04:06:54.789 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56384 10 6452 1 2025-11-03 04:07:42.493 00:00:10.363 TCP 23.104.0.1:49874 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:07:55.006 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:55708 10 6452 1 2025-11-03 04:08:42.900 00:00:10.371 TCP 23.104.0.1:41672 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:08:55.263 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35224 10 6452 1 2025-11-03 04:09:43.309 00:00:10.321 TCP 23.104.0.1:47668 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:09:55.479 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34776 10 6452 1 2025-11-03 04:10:43.687 00:00:10.380 TCP 23.104.0.1:53922 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:06:51.771 00:05:03.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 04:10:55.692 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60208 10 6452 1 2025-11-03 04:11:56.018 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 04:11:44.111 00:00:10.367 TCP 23.104.0.1:51034 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:07:51.775 00:05:03.138 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 04:11:55.982 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 04:11:55.908 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:46430 10 6452 1 2025-11-03 04:12:44.512 00:00:16.305 TCP 23.104.0.1:48654 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:12:56.114 00:00:10.482 TCP 1.101.0.1:3000 -> 22.102.0.1:36850 10 6452 1 2025-11-03 04:13:50.855 00:00:10.379 TCP 23.104.0.1:49124 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:13:56.640 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42502 10 6452 1 2025-11-03 04:14:51.276 00:00:10.322 TCP 23.104.0.1:58466 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:14:56.864 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:50754 10 6452 1 2025-11-03 04:15:51.640 00:00:10.322 TCP 23.104.0.1:53494 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:15:57.129 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33200 10 6452 1 2025-11-03 04:16:56.208 00:00:00.017 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 04:12:51.772 00:05:03.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 04:16:56.016 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 04:16:52.005 00:00:10.329 TCP 23.104.0.1:52514 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:16:57.341 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56228 10 6452 1 2025-11-03 04:13:51.777 00:05:03.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 04:17:52.374 00:00:10.362 TCP 23.104.0.1:54942 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:17:57.568 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44460 10 6452 1 2025-11-03 04:18:52.778 00:00:10.330 TCP 23.104.0.1:38596 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:18:57.783 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45544 10 6452 1 2025-11-03 04:19:53.143 00:00:10.370 TCP 23.104.0.1:52270 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:19:58.006 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37882 10 6452 1 2025-11-03 04:20:53.545 00:00:10.359 TCP 23.104.0.1:44232 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:20:58.227 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51892 10 6452 1 2025-11-03 04:21:56.374 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 04:21:56.261 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 04:21:53.941 00:00:10.723 TCP 23.104.0.1:48336 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:21:58.438 00:00:10.709 TCP 1.101.0.1:3000 -> 22.102.0.1:49878 10 6452 1 2025-11-03 04:18:51.776 00:05:03.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 04:22:54.710 00:00:10.376 TCP 23.104.0.1:54898 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:22:59.181 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33820 10 6452 1 2025-11-03 04:19:51.780 00:05:03.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 04:23:55.111 00:00:10.359 TCP 23.104.0.1:57132 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:23:59.402 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34738 10 6452 1 2025-11-03 04:24:55.512 00:00:10.324 TCP 23.104.0.1:53748 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:24:59.619 00:00:10.356 TCP 1.101.0.1:3000 -> 22.102.0.1:38548 10 6452 1 2025-11-03 04:25:55.875 00:00:10.321 TCP 23.104.0.1:48054 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:26:00.016 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35948 10 6452 1 2025-11-03 04:26:56.481 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 04:26:56.423 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 04:26:56.232 00:00:10.328 TCP 23.104.0.1:55740 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:27:00.232 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39166 10 6452 1 2025-11-03 04:27:56.595 00:00:10.370 TCP 23.104.0.1:47794 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:28:00.442 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58902 10 6452 1 2025-11-03 04:24:51.777 00:05:03.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 04:28:57.003 00:00:10.361 TCP 23.104.0.1:49938 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:29:00.618 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53478 10 6452 1 2025-11-03 04:25:51.781 00:05:03.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 04:29:57.399 00:00:10.374 TCP 23.104.0.1:43342 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:30:00.835 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39954 10 6452 1 2025-11-03 04:31:01.088 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:51492 10 6452 1 2025-11-03 04:30:57.808 00:00:10.365 TCP 23.104.0.1:52072 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:31:56.311 00:00:00.015 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 04:31:56.606 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 04:32:01.321 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45450 10 6452 1 2025-11-03 04:31:58.211 00:00:10.361 TCP 23.104.0.1:38582 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:33:01.496 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55168 10 6452 1 2025-11-03 04:32:58.607 00:00:10.325 TCP 23.104.0.1:52182 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:34:01.710 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53436 10 6452 1 2025-11-03 04:33:58.968 00:00:10.382 TCP 23.104.0.1:44060 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:30:51.780 00:05:03.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 04:34:59.389 00:00:10.334 TCP 23.104.0.1:46482 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:35:01.924 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40132 10 6452 1 2025-11-03 04:31:51.783 00:05:03.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 04:35:59.772 00:00:10.368 TCP 23.104.0.1:57122 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:36:02.142 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49176 10 6452 1 2025-11-03 04:36:56.678 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 04:36:56.736 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 04:37:00.177 00:00:10.374 TCP 23.104.0.1:40692 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:37:02.361 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53476 10 6452 1 2025-11-03 04:38:00.593 00:00:10.324 TCP 23.104.0.1:43744 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:38:02.587 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41724 10 6452 1 2025-11-03 04:39:00.961 00:00:10.335 TCP 23.104.0.1:39622 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:39:02.764 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53004 10 6452 1 2025-11-03 04:40:01.328 00:00:10.332 TCP 23.104.0.1:34302 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:40:02.991 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42986 10 6452 1 2025-11-03 04:36:51.781 00:05:03.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 04:41:01.704 00:00:10.327 TCP 23.104.0.1:47248 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:41:03.220 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50476 10 6452 1 2025-11-03 04:41:56.650 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 04:37:51.786 00:05:03.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 04:41:56.604 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 04:42:02.106 00:00:10.367 TCP 23.104.0.1:49600 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:42:03.399 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42200 10 6452 1 2025-11-03 04:43:03.628 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:44934 10 6452 1 2025-11-03 04:43:02.508 00:00:10.324 TCP 23.104.0.1:54864 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:44:03.834 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49348 10 6452 1 2025-11-03 04:44:02.872 00:00:10.326 TCP 23.104.0.1:55410 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:45:03.233 00:00:10.364 TCP 23.104.0.1:58088 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:45:04.068 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:57922 10 6452 1 2025-11-03 04:46:04.235 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46944 10 6452 1 2025-11-03 04:46:03.633 00:00:10.362 TCP 23.104.0.1:56072 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:46:56.673 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 04:46:56.774 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 04:42:51.785 00:05:03.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 04:47:04.036 00:00:10.653 TCP 23.104.0.1:48068 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:47:04.454 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56622 10 6452 1 2025-11-03 04:43:51.787 00:05:03.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 04:48:04.688 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42142 10 6452 1 2025-11-03 04:48:04.727 00:00:10.370 TCP 23.104.0.1:58942 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:49:05.135 00:00:10.323 TCP 23.104.0.1:60034 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:49:04.902 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48634 10 6452 1 2025-11-03 04:50:05.123 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41680 10 6452 1 2025-11-03 04:50:05.494 00:00:10.361 TCP 23.104.0.1:56124 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:51:05.898 00:00:10.363 TCP 23.104.0.1:46090 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:51:05.343 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60682 10 6452 1 2025-11-03 04:51:56.920 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 04:51:57.004 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 04:52:05.554 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34588 10 6452 1 2025-11-03 04:52:06.301 00:00:10.363 TCP 23.104.0.1:56096 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:48:51.786 00:05:03.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 04:53:05.765 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51270 10 6452 1 2025-11-03 04:53:06.698 00:00:10.372 TCP 23.104.0.1:47782 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:49:51.787 00:05:03.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-03 04:54:05.974 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56034 10 6452 1 2025-11-03 04:54:07.107 00:00:11.197 TCP 23.104.0.1:40412 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:55:06.215 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55372 10 6452 1 2025-11-03 04:55:08.342 00:00:10.369 TCP 23.104.0.1:51162 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:56:06.440 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59038 10 6452 1 2025-11-03 04:56:08.742 00:00:10.322 TCP 23.104.0.1:55256 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:56:56.973 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-03 04:56:57.121 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-03 04:57:06.663 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43530 10 6452 1 2025-11-03 04:57:09.111 00:00:10.365 TCP 23.104.0.1:53232 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:58:09.510 00:00:10.367 TCP 23.104.0.1:51508 -> 1.101.0.1:3000 11 1507 1 2025-11-03 04:58:06.877 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41702 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1043, avg pps: 0, avg bpp: 318 Time window: 2025-11-03 03:54:51 - 2025-11-03 04:58:19 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0020s Wall: 0.0022s flows/second: 74022.5 Runtime: 0.0022s