Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 16:54:52.549 00:05:03.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 16:58:44.935 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:36648 10 6452 1 2025-11-04 16:59:14.096 00:00:10.330 TCP 23.104.0.1:52042 -> 1.101.0.1:3000 11 1507 1 2025-11-04 16:59:45.133 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41888 10 6452 1 2025-11-04 16:55:52.550 00:05:03.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 17:00:14.471 00:00:10.365 TCP 23.104.0.1:44308 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:00:45.346 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56412 10 6452 1 2025-11-04 17:01:14.881 00:00:10.344 TCP 23.104.0.1:43340 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:01:45.558 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47956 10 6452 1 2025-11-04 17:02:15.271 00:00:10.369 TCP 23.104.0.1:47660 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:02:40.477 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 17:02:40.220 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 17:02:45.783 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43946 10 6452 1 2025-11-04 17:03:15.679 00:00:10.371 TCP 23.104.0.1:49246 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:03:46.010 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46334 10 6452 1 2025-11-04 17:04:16.109 00:00:10.372 TCP 23.104.0.1:53724 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:00:52.550 00:05:03.096 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 17:04:46.190 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37974 10 6452 1 2025-11-04 17:05:16.522 00:00:10.367 TCP 23.104.0.1:55792 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:05:46.401 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:32808 10 6452 1 2025-11-04 17:01:52.553 00:05:03.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 17:06:16.932 00:00:15.594 TCP 23.104.0.1:46042 -> 1.101.0.1:3000 15 1926 1 2025-11-04 17:06:46.619 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52542 12 10369 1 2025-11-04 17:07:22.599 00:00:10.366 TCP 23.104.0.1:56204 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:07:40.456 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 17:07:40.241 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 17:07:46.858 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35870 10 6452 1 2025-11-04 17:08:23.007 00:00:10.371 TCP 23.104.0.1:49130 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:08:47.083 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52382 10 6452 1 2025-11-04 17:09:23.418 00:00:10.376 TCP 23.104.0.1:49220 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:09:47.294 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51756 10 6452 1 2025-11-04 17:10:23.823 00:00:10.366 TCP 23.104.0.1:48650 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:06:52.551 00:05:03.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 17:10:47.507 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35852 10 6452 1 2025-11-04 17:11:24.232 00:00:10.369 TCP 23.104.0.1:59588 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:07:52.553 00:05:03.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 17:11:47.688 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36146 10 6452 1 2025-11-04 17:12:24.638 00:00:10.364 TCP 23.104.0.1:37898 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:12:40.498 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 17:12:40.614 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 17:12:47.899 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55576 10 6452 1 2025-11-04 17:13:25.047 00:00:10.363 TCP 23.104.0.1:47766 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:13:48.118 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52114 10 6452 1 2025-11-04 17:14:25.451 00:00:10.318 TCP 23.104.0.1:43998 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:14:48.327 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34422 12 6556 1 2025-11-04 17:15:25.806 00:00:10.363 TCP 23.104.0.1:56098 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:15:48.538 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49248 10 6452 1 2025-11-04 17:16:26.209 00:00:10.360 TCP 23.104.0.1:55546 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:12:52.552 00:05:03.096 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 17:16:48.757 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:55028 10 6452 1 2025-11-04 17:17:26.608 00:00:10.362 TCP 23.104.0.1:60962 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:17:40.814 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 17:17:40.773 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 17:13:52.555 00:05:03.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 17:17:48.925 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46422 10 6452 1 2025-11-04 17:18:27.009 00:00:10.360 TCP 23.104.0.1:49402 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:18:49.163 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51038 10 6452 1 2025-11-04 17:19:27.407 00:00:10.366 TCP 23.104.0.1:56274 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:19:49.384 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:37478 10 6452 1 2025-11-04 17:20:27.811 00:00:10.363 TCP 23.104.0.1:52858 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:20:49.564 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43510 10 6452 1 2025-11-04 17:21:28.214 00:00:10.366 TCP 23.104.0.1:33174 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:21:49.773 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:43252 10 6452 1 2025-11-04 17:22:40.890 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 17:22:40.902 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 17:22:28.615 00:00:10.368 TCP 23.104.0.1:60284 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:18:52.553 00:05:03.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 17:22:49.955 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41914 12 6556 1 2025-11-04 17:23:29.020 00:00:10.362 TCP 23.104.0.1:34910 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:19:52.555 00:05:03.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 17:23:50.180 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43338 10 6452 1 2025-11-04 17:24:29.420 00:00:10.368 TCP 23.104.0.1:52140 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:24:50.396 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46458 10 6452 1 2025-11-04 17:25:29.828 00:00:10.347 TCP 23.104.0.1:52980 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:25:50.624 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33404 10 6452 1 2025-11-04 17:26:30.216 00:00:10.374 TCP 23.104.0.1:51304 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:26:50.838 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45546 10 6452 1 2025-11-04 17:27:40.900 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 17:27:30.626 00:00:10.365 TCP 23.104.0.1:38486 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:27:40.730 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 17:27:51.076 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:32848 10 6452 1 2025-11-04 17:28:31.031 00:00:10.365 TCP 23.104.0.1:33878 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:24:52.553 00:05:03.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 17:28:51.313 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-11-04 17:29:31.435 00:00:10.368 TCP 23.104.0.1:52756 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:25:52.557 00:05:03.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 17:29:51.542 00:00:10.647 TCP 1.101.0.1:3000 -> 22.102.0.1:55540 10 6452 1 2025-11-04 17:30:31.841 00:00:10.393 TCP 23.104.0.1:50076 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:30:52.232 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41346 10 6452 1 2025-11-04 17:31:32.275 00:00:10.369 TCP 23.104.0.1:48866 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:31:52.407 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41796 10 6452 1 2025-11-04 17:32:40.935 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 17:32:41.044 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 17:32:32.680 00:00:10.367 TCP 23.104.0.1:43784 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:32:52.623 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55868 10 6452 1 2025-11-04 17:33:33.108 00:00:10.512 TCP 23.104.0.1:58860 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:33:52.836 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51024 10 6452 1 2025-11-04 17:34:33.662 00:00:10.362 TCP 23.104.0.1:33112 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:30:52.556 00:05:03.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 17:34:53.074 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36772 10 6452 1 2025-11-04 17:35:34.079 00:00:10.320 TCP 23.104.0.1:33734 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:31:52.558 00:05:03.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 17:35:53.279 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35974 10 6452 1 2025-11-04 17:36:34.438 00:00:10.368 TCP 23.104.0.1:49966 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:36:53.500 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46194 10 6452 1 2025-11-04 17:37:40.846 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 17:37:41.218 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 17:37:34.846 00:00:10.374 TCP 23.104.0.1:43042 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:37:53.717 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37148 10 6452 1 2025-11-04 17:38:35.261 00:00:10.381 TCP 23.104.0.1:44072 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:38:53.898 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59606 10 6452 1 2025-11-04 17:39:35.726 00:00:10.367 TCP 23.104.0.1:40810 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:39:54.115 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43212 10 6452 1 2025-11-04 17:40:36.137 00:00:10.373 TCP 23.104.0.1:35142 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:36:52.556 00:05:03.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 17:40:54.288 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:54904 10 6452 1 2025-11-04 17:41:36.548 00:00:10.372 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:37:52.559 00:05:03.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 17:41:54.495 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43640 10 6452 1 2025-11-04 17:42:41.277 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 17:42:41.194 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 17:42:36.952 00:00:10.329 TCP 23.104.0.1:51986 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:42:54.716 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50542 10 6452 1 2025-11-04 17:43:37.317 00:00:10.360 TCP 23.104.0.1:60338 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:43:54.928 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39722 10 6452 1 2025-11-04 17:44:37.714 00:00:10.376 TCP 23.104.0.1:41502 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:44:55.160 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37610 10 6452 1 2025-11-04 17:45:38.127 00:00:10.321 TCP 23.104.0.1:36922 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:45:55.332 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45350 10 6452 1 2025-11-04 17:46:38.483 00:00:10.361 TCP 23.104.0.1:50780 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:42:52.557 00:05:03.096 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 17:46:55.547 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47464 10 6452 1 2025-11-04 17:47:41.385 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 17:47:41.101 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 17:47:38.884 00:00:10.370 TCP 23.104.0.1:42898 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:43:52.561 00:05:03.090 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 17:47:55.727 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34800 10 6452 1 2025-11-04 17:48:39.296 00:00:10.366 TCP 23.104.0.1:41470 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:48:55.943 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:39340 10 6452 1 2025-11-04 17:49:39.697 00:00:10.360 TCP 23.104.0.1:57724 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:49:56.170 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39924 10 6452 1 2025-11-04 17:50:40.107 00:00:10.362 TCP 23.104.0.1:54360 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:50:56.392 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48262 10 6452 1 2025-11-04 17:51:40.505 00:00:10.443 TCP 23.104.0.1:56166 -> 1.101.0.1:3000 15 1926 1 2025-11-04 17:51:56.603 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:55036 12 10375 1 2025-11-04 17:52:41.538 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 17:52:41.389 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 17:52:40.988 00:00:10.363 TCP 23.104.0.1:57442 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:48:52.561 00:05:03.095 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 17:52:56.847 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44262 10 6452 1 2025-11-04 17:53:41.387 00:00:10.363 TCP 23.104.0.1:47040 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:49:52.562 00:05:03.090 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 17:53:57.082 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43772 10 6452 1 2025-11-04 17:54:41.788 00:00:10.350 TCP 23.104.0.1:50292 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:54:57.295 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46640 10 6452 1 2025-11-04 17:55:42.196 00:00:10.366 TCP 23.104.0.1:39130 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:55:57.515 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37010 10 6452 1 2025-11-04 17:56:42.595 00:00:10.326 TCP 23.104.0.1:50668 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:56:57.739 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50028 10 6452 1 2025-11-04 17:57:41.477 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 17:57:41.660 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 17:57:42.959 00:00:10.323 TCP 23.104.0.1:56852 -> 1.101.0.1:3000 11 1507 1 2025-11-04 17:57:57.959 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:34794 12 6556 1 Summary: total flows: 163, total bytes: 505831, total packets: 1579, avg bps: 1066, avg pps: 0, avg bpp: 320 Time window: 2025-11-04 16:54:52 - 2025-11-04 17:58:08 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0074s User: 0.0037s Wall: 0.0031s flows/second: 52956.7 Runtime: 0.0031s