Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-03 23:54:52.196 00:05:03.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-03 23:59:19.282 00:00:10.363 TCP 23.104.0.1:39956 -> 1.101.0.1:3000 11 1507 1 2025-11-03 23:59:23.675 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42190 10 6452 1 2025-11-03 23:55:52.200 00:05:03.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 00:00:19.684 00:00:10.328 TCP 23.104.0.1:53700 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:00:23.893 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40014 10 6452 1 2025-11-04 00:01:20.055 00:00:10.368 TCP 23.104.0.1:40216 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:01:24.119 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37712 10 6452 1 2025-11-04 00:02:19.876 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 00:02:19.753 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 00:02:20.462 00:00:10.367 TCP 23.104.0.1:54332 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:02:24.343 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:48790 12 6544 1 2025-11-04 00:03:20.862 00:00:10.366 TCP 23.104.0.1:60666 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:03:24.549 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43832 10 6452 1 2025-11-04 00:04:21.266 00:00:10.363 TCP 23.104.0.1:43136 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:04:24.765 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55056 10 6452 1 2025-11-04 00:00:52.199 00:05:03.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 00:05:21.671 00:00:10.385 TCP 23.104.0.1:52620 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:05:24.982 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58974 10 6452 1 2025-11-04 00:01:52.201 00:05:03.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 00:06:25.203 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58302 10 6452 1 2025-11-04 00:06:22.107 00:00:10.362 TCP 23.104.0.1:47654 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:07:19.957 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 00:07:20.053 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 00:07:25.412 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39596 10 6452 1 2025-11-04 00:07:22.510 00:00:10.366 TCP 23.104.0.1:44408 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:08:22.914 00:00:10.375 TCP 23.104.0.1:44368 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:08:25.625 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43562 10 6452 1 2025-11-04 00:09:23.332 00:00:10.374 TCP 23.104.0.1:41062 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:09:25.797 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42584 10 6452 1 2025-11-04 00:10:26.011 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43196 10 6452 1 2025-11-04 00:10:23.741 00:00:10.323 TCP 23.104.0.1:41106 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:06:52.199 00:05:03.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 00:11:24.113 00:00:10.366 TCP 23.104.0.1:49512 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:11:26.230 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37748 10 6452 1 2025-11-04 00:07:52.204 00:05:03.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 00:12:20.176 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 00:12:20.081 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 00:12:26.441 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60156 10 6452 1 2025-11-04 00:12:24.521 00:00:10.365 TCP 23.104.0.1:42880 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:13:24.926 00:00:10.389 TCP 23.104.0.1:51328 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:13:26.652 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42094 10 6452 1 2025-11-04 00:14:26.824 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45418 10 6452 1 2025-11-04 00:14:25.355 00:00:10.325 TCP 23.104.0.1:42240 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:15:25.732 00:00:10.368 TCP 23.104.0.1:49706 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:15:27.037 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44134 10 6452 1 2025-11-04 00:16:26.138 00:00:10.366 TCP 23.104.0.1:49242 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:16:27.252 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56094 10 6452 1 2025-11-04 00:12:52.201 00:05:03.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 00:17:19.977 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 00:17:20.318 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 00:17:26.543 00:00:10.366 TCP 23.104.0.1:45114 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:17:27.463 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38670 10 6452 1 2025-11-04 00:13:52.206 00:05:03.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 00:18:26.946 00:00:11.400 TCP 23.104.0.1:32896 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:18:27.665 00:00:10.592 TCP 1.101.0.1:3000 -> 22.102.0.1:54404 10 6452 1 2025-11-04 00:19:28.321 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52692 10 6452 1 2025-11-04 00:19:28.426 00:00:10.366 TCP 23.104.0.1:39508 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:20:28.545 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57980 10 6452 1 2025-11-04 00:20:28.830 00:00:10.388 TCP 23.104.0.1:53902 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:21:29.258 00:00:10.366 TCP 23.104.0.1:35048 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:21:28.722 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33046 10 6452 1 2025-11-04 00:22:20.301 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 00:22:20.052 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 00:22:29.671 00:00:10.361 TCP 23.104.0.1:59180 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:22:28.896 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52308 10 6452 1 2025-11-04 00:18:52.202 00:05:03.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 00:23:30.102 00:00:10.364 TCP 23.104.0.1:42824 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:23:29.138 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44848 10 6452 1 2025-11-04 00:19:52.205 00:05:03.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 00:24:29.358 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47650 10 6452 1 2025-11-04 00:24:30.508 00:00:10.324 TCP 23.104.0.1:58504 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:25:30.868 00:00:10.441 TCP 23.104.0.1:33116 -> 1.101.0.1:3000 15 1926 1 2025-11-04 00:25:29.577 00:00:10.275 TCP 1.101.0.1:3000 -> 22.102.0.1:37202 14 10479 1 2025-11-04 00:26:31.350 00:00:10.363 TCP 23.104.0.1:51376 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:26:29.891 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36112 10 6452 1 2025-11-04 00:27:20.476 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 00:27:20.371 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 00:27:30.110 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59448 10 6452 1 2025-11-04 00:27:31.750 00:00:10.334 TCP 23.104.0.1:48324 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:28:30.322 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59228 10 6452 1 2025-11-04 00:28:32.123 00:00:10.365 TCP 23.104.0.1:56478 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:24:52.203 00:05:03.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 00:29:30.535 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57124 10 6452 1 2025-11-04 00:29:32.524 00:00:10.368 TCP 23.104.0.1:35210 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:25:52.206 00:05:03.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 00:30:30.744 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34112 10 6452 1 2025-11-04 00:30:32.928 00:00:10.387 TCP 23.104.0.1:47234 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:31:30.969 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:50336 10 6452 1 2025-11-04 00:31:33.353 00:00:10.367 TCP 23.104.0.1:59016 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:32:20.573 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 00:32:20.505 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 00:32:31.208 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40102 10 6452 1 2025-11-04 00:32:33.754 00:00:10.370 TCP 23.104.0.1:50882 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:33:31.420 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:45794 10 6452 1 2025-11-04 00:33:34.161 00:00:10.363 TCP 23.104.0.1:51798 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:34:31.597 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52284 10 6452 1 2025-11-04 00:34:34.562 00:00:10.363 TCP 23.104.0.1:39300 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:30:52.204 00:05:03.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 00:35:31.811 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39440 10 6452 1 2025-11-04 00:35:34.968 00:00:10.334 TCP 23.104.0.1:37232 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:31:52.209 00:05:03.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 00:36:32.034 00:00:10.401 TCP 1.101.0.1:3000 -> 22.102.0.1:56884 10 6452 1 2025-11-04 00:36:35.336 00:00:10.362 TCP 23.104.0.1:36948 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:37:20.688 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 00:37:20.565 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 00:37:32.475 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48172 10 6452 1 2025-11-04 00:37:35.740 00:00:10.320 TCP 23.104.0.1:41446 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:38:36.105 00:00:10.372 TCP 23.104.0.1:53278 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:38:32.701 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:37916 10 6452 1 2025-11-04 00:39:36.511 00:00:10.363 TCP 23.104.0.1:60520 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:39:32.964 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55312 12 6556 1 2025-11-04 00:40:33.194 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59626 10 6452 1 2025-11-04 00:40:36.915 00:00:10.372 TCP 23.104.0.1:47028 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:36:52.210 00:05:03.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 00:41:33.425 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56816 10 6452 1 2025-11-04 00:41:37.328 00:00:10.367 TCP 23.104.0.1:45664 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:37:52.212 00:05:03.100 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 00:42:20.865 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 00:42:20.733 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 00:42:33.650 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58076 10 6452 1 2025-11-04 00:42:37.733 00:00:10.382 TCP 23.104.0.1:43682 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:43:33.871 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53918 10 6452 1 2025-11-04 00:43:38.164 00:00:10.341 TCP 23.104.0.1:59492 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:44:34.098 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53350 10 6452 1 2025-11-04 00:44:38.537 00:00:10.365 TCP 23.104.0.1:57008 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:45:34.318 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49130 10 6452 1 2025-11-04 00:45:38.953 00:00:10.379 TCP 23.104.0.1:59740 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:46:34.530 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33094 10 6452 1 2025-11-04 00:46:39.371 00:00:10.368 TCP 23.104.0.1:34004 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:42:52.210 00:05:03.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 00:47:20.886 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 00:47:20.785 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 00:47:34.741 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53328 10 6452 1 2025-11-04 00:47:39.774 00:00:10.370 TCP 23.104.0.1:55072 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:43:52.213 00:05:03.100 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 00:48:34.952 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47766 10 6452 1 2025-11-04 00:48:40.183 00:00:10.368 TCP 23.104.0.1:53698 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:49:35.178 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39014 10 6452 1 2025-11-04 00:49:40.585 00:00:10.360 TCP 23.104.0.1:58080 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:50:35.400 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47604 10 6452 1 2025-11-04 00:50:40.979 00:00:10.424 TCP 23.104.0.1:52738 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:51:35.615 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48126 10 6452 1 2025-11-04 00:51:41.441 00:00:10.326 TCP 23.104.0.1:53772 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:52:21.319 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 00:52:20.913 00:00:00.062 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 00:52:35.789 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38772 10 6452 1 2025-11-04 00:48:52.212 00:05:03.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 00:52:41.809 00:00:10.368 TCP 23.104.0.1:53940 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:53:36.004 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55036 10 6452 1 2025-11-04 00:53:42.213 00:00:10.326 TCP 23.104.0.1:52316 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:49:52.214 00:05:03.100 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 00:54:36.217 00:00:10.399 TCP 1.101.0.1:3000 -> 22.102.0.1:43574 10 6452 1 2025-11-04 00:54:42.579 00:00:25.053 TCP 23.104.0.1:58132 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:55:36.657 00:00:11.102 TCP 1.101.0.1:3000 -> 22.102.0.1:36502 10 6452 1 2025-11-04 00:55:57.706 00:00:10.363 TCP 23.104.0.1:53816 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:56:37.798 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49910 10 6452 1 2025-11-04 00:56:58.108 00:00:10.364 TCP 23.104.0.1:35664 -> 1.101.0.1:3000 11 1507 1 2025-11-04 00:57:20.772 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 00:57:21.037 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 00:57:38.026 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:54682 10 6452 1 2025-11-04 00:57:58.509 00:00:10.361 TCP 23.104.0.1:60010 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 495031, total packets: 1563, avg bps: 1043, avg pps: 0, avg bpp: 316 Time window: 2025-11-03 23:54:52 - 2025-11-04 00:58:08 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0031s User: 0.0021s Wall: 0.0020s flows/second: 80554.5 Runtime: 0.0020s