Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 23:54:52.663 00:05:03.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 23:59:09.391 00:00:10.325 TCP 23.104.0.1:51018 -> 1.101.0.1:3000 11 1507 1 2025-11-04 23:59:10.483 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43536 10 6452 1 2025-11-04 23:55:52.666 00:05:03.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 00:00:10.691 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44344 10 6452 1 2025-11-05 00:00:09.753 00:00:10.387 TCP 23.104.0.1:40306 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:01:10.859 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44060 10 6452 1 2025-11-05 00:01:10.179 00:00:10.364 TCP 23.104.0.1:60508 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:02:10.579 00:00:18.702 TCP 23.104.0.1:38946 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:02:11.084 00:00:18.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44874 10 6452 1 2025-11-05 00:02:48.833 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 00:02:48.694 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 00:03:19.316 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50424 10 6452 1 2025-11-05 00:03:19.345 00:00:10.321 TCP 23.104.0.1:43834 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:04:19.704 00:00:10.364 TCP 23.104.0.1:51292 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:04:19.544 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52348 10 6452 1 2025-11-05 00:00:52.664 00:05:03.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 00:05:19.756 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:42576 10 6452 1 2025-11-05 00:05:20.116 00:00:10.363 TCP 23.104.0.1:35816 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:01:52.666 00:05:03.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 00:06:19.941 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:53390 10 6452 1 2025-11-05 00:06:20.518 00:00:10.363 TCP 23.104.0.1:52474 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:07:20.178 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47202 10 6452 1 2025-11-05 00:07:20.935 00:00:10.377 TCP 23.104.0.1:57148 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:07:48.915 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 00:07:48.839 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 00:08:20.390 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34454 10 6452 1 2025-11-05 00:08:21.354 00:00:10.324 TCP 23.104.0.1:50198 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:09:21.719 00:00:18.271 TCP 23.104.0.1:56706 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:09:20.617 00:00:19.281 TCP 1.101.0.1:3000 -> 22.102.0.1:40778 10 6452 1 2025-11-05 00:10:29.943 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:35096 10 6452 1 2025-11-05 00:10:30.050 00:00:10.326 TCP 23.104.0.1:50624 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:06:52.667 00:05:03.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 00:11:30.188 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42764 10 6452 1 2025-11-05 00:11:30.419 00:00:10.368 TCP 23.104.0.1:34346 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:07:52.670 00:05:03.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 00:12:30.411 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48308 10 6452 1 2025-11-05 00:12:30.827 00:00:10.384 TCP 23.104.0.1:60436 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:12:49.119 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 00:12:49.092 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 00:13:30.635 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38996 10 6452 1 2025-11-05 00:13:31.250 00:00:10.364 TCP 23.104.0.1:43092 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:14:30.859 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:48484 10 6452 1 2025-11-05 00:14:31.655 00:00:10.359 TCP 23.104.0.1:41322 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:15:31.110 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45646 10 6452 1 2025-11-05 00:15:32.063 00:00:10.359 TCP 23.104.0.1:41638 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:16:31.317 00:00:10.594 TCP 1.101.0.1:3000 -> 22.102.0.1:46606 10 6452 1 2025-11-05 00:16:32.460 00:00:10.359 TCP 23.104.0.1:58744 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:12:52.668 00:05:03.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 00:17:31.954 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:55746 12 6556 1 2025-11-05 00:17:32.859 00:00:10.371 TCP 23.104.0.1:43564 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:17:49.044 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 00:17:48.926 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 00:13:52.671 00:05:03.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 00:18:33.268 00:00:10.358 TCP 23.104.0.1:42296 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:18:32.191 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44500 10 6452 1 2025-11-05 00:19:32.410 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35200 10 6452 1 2025-11-05 00:19:33.666 00:00:10.367 TCP 23.104.0.1:34596 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:20:34.098 00:00:10.363 TCP 23.104.0.1:34276 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:20:32.635 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49306 10 6452 1 2025-11-05 00:21:32.809 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60642 10 6452 1 2025-11-05 00:21:34.505 00:00:10.366 TCP 23.104.0.1:47046 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:22:34.906 00:00:10.324 TCP 23.104.0.1:35598 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:22:33.042 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54698 10 6452 1 2025-11-05 00:22:49.368 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 00:22:49.267 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 00:18:52.673 00:05:03.137 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 00:23:33.258 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56132 10 6452 1 2025-11-05 00:23:35.270 00:00:10.363 TCP 23.104.0.1:45390 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:19:52.676 00:05:03.131 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 00:24:35.671 00:00:10.363 TCP 23.104.0.1:58826 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:24:33.474 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56166 10 6452 1 2025-11-05 00:25:36.104 00:00:10.362 TCP 23.104.0.1:58734 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:25:33.694 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34974 10 6452 1 2025-11-05 00:26:36.505 00:00:10.323 TCP 23.104.0.1:34386 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:26:33.907 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54678 10 6452 1 2025-11-05 00:27:34.124 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58450 10 6452 1 2025-11-05 00:27:49.382 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 00:27:49.358 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 00:27:36.862 00:00:10.368 TCP 23.104.0.1:45216 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:28:34.349 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57648 10 6452 1 2025-11-05 00:28:37.271 00:00:10.364 TCP 23.104.0.1:42802 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:24:52.673 00:05:03.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 00:29:34.572 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49704 10 6452 1 2025-11-05 00:29:37.676 00:00:10.372 TCP 23.104.0.1:45686 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:25:52.676 00:05:03.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 00:30:34.787 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58084 10 6452 1 2025-11-05 00:30:38.096 00:00:10.362 TCP 23.104.0.1:35746 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:31:35.011 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:44134 12 10375 1 2025-11-05 00:31:38.500 00:00:10.440 TCP 23.104.0.1:41514 -> 1.101.0.1:3000 15 1926 1 2025-11-05 00:32:35.261 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47946 12 6556 1 2025-11-05 00:32:49.422 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 00:32:38.976 00:00:10.338 TCP 23.104.0.1:37068 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:32:49.215 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 00:33:35.493 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44602 10 6452 1 2025-11-05 00:33:39.356 00:00:10.363 TCP 23.104.0.1:36358 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:34:35.729 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38800 10 6452 1 2025-11-05 00:34:39.756 00:00:10.384 TCP 23.104.0.1:59322 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:30:52.674 00:05:03.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 00:35:35.944 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47226 10 6452 1 2025-11-05 00:35:40.177 00:00:10.369 TCP 23.104.0.1:39164 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:31:52.677 00:05:03.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 00:36:36.177 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56838 10 6452 1 2025-11-05 00:36:40.582 00:00:10.370 TCP 23.104.0.1:51938 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:37:36.398 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39842 10 6452 1 2025-11-05 00:37:49.154 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 00:37:40.986 00:00:10.378 TCP 23.104.0.1:32928 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:37:49.538 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 00:38:36.619 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46890 10 6452 1 2025-11-05 00:38:41.402 00:00:10.340 TCP 23.104.0.1:39804 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:39:36.842 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40172 10 6452 1 2025-11-05 00:39:41.782 00:00:10.369 TCP 23.104.0.1:42404 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:40:37.025 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40260 10 6452 1 2025-11-05 00:36:52.675 00:05:03.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 00:40:42.191 00:00:10.324 TCP 23.104.0.1:42016 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:41:37.194 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56024 10 6452 1 2025-11-05 00:41:42.555 00:00:10.365 TCP 23.104.0.1:58036 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:37:52.678 00:05:03.140 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 00:42:49.728 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 00:42:37.370 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49798 10 6452 1 2025-11-05 00:42:49.649 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 00:42:42.963 00:00:10.363 TCP 23.104.0.1:34774 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:43:37.585 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55120 10 6452 1 2025-11-05 00:43:43.364 00:00:10.365 TCP 23.104.0.1:38278 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:44:37.811 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53656 10 6452 1 2025-11-05 00:44:43.769 00:00:17.511 TCP 23.104.0.1:53860 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:45:38.041 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39624 10 6452 1 2025-11-05 00:45:51.339 00:00:10.362 TCP 23.104.0.1:52382 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:46:38.262 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56346 10 6452 1 2025-11-05 00:42:52.676 00:05:03.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 00:46:51.740 00:00:10.370 TCP 23.104.0.1:59830 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:47:49.879 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 00:47:38.494 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37422 10 6452 1 2025-11-05 00:47:49.730 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 00:43:52.679 00:05:03.138 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 00:47:52.154 00:00:10.324 TCP 23.104.0.1:57048 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:48:38.723 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47910 10 6452 1 2025-11-05 00:48:52.519 00:00:10.365 TCP 23.104.0.1:40858 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:49:38.934 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:33796 10 6452 1 2025-11-05 00:49:52.923 00:00:10.336 TCP 23.104.0.1:43980 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:50:39.192 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54264 10 6452 1 2025-11-05 00:50:53.297 00:00:10.369 TCP 23.104.0.1:55210 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:51:39.413 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35888 10 6452 1 2025-11-05 00:51:53.708 00:00:10.368 TCP 23.104.0.1:46110 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:52:49.883 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 00:52:39.625 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38566 10 6452 1 2025-11-05 00:52:49.822 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 00:48:52.677 00:05:03.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 00:52:54.112 00:00:10.360 TCP 23.104.0.1:54128 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:53:39.841 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43640 10 6452 1 2025-11-05 00:49:52.681 00:05:03.138 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 00:53:54.512 00:00:10.326 TCP 23.104.0.1:54608 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:54:40.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44244 10 6452 1 2025-11-05 00:54:54.874 00:00:10.328 TCP 23.104.0.1:50730 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:55:40.299 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42382 10 6452 1 2025-11-05 00:55:55.241 00:00:10.367 TCP 23.104.0.1:57330 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:56:40.515 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40516 10 6452 1 2025-11-05 00:56:55.647 00:00:10.368 TCP 23.104.0.1:48564 -> 1.101.0.1:3000 11 1507 1 2025-11-05 00:57:49.717 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 00:57:49.923 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 00:57:40.730 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58674 10 6452 1 2025-11-05 00:57:56.055 00:00:10.331 TCP 23.104.0.1:35180 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494939, total packets: 1561, avg bps: 1043, avg pps: 0, avg bpp: 317 Time window: 2025-11-04 23:54:52 - 2025-11-05 00:58:06 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0023s User: 0.0035s Wall: 0.0026s flows/second: 63207.2 Runtime: 0.0026s