Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 01:54:52.696 00:05:03.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 01:59:03.075 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50774 10 6452 1 2025-11-05 01:59:23.057 00:00:10.412 TCP 23.104.0.1:49968 -> 1.101.0.1:3000 11 1507 1 2025-11-05 01:55:52.699 00:05:03.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 02:00:03.297 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59704 10 6452 1 2025-11-05 02:00:23.509 00:00:10.365 TCP 23.104.0.1:44630 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:01:03.516 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34198 10 6452 1 2025-11-05 02:01:23.912 00:00:10.363 TCP 23.104.0.1:51618 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:02:03.742 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:52950 12 10375 1 2025-11-05 02:02:24.315 00:00:10.439 TCP 23.104.0.1:35230 -> 1.101.0.1:3000 15 1926 1 2025-11-05 02:02:51.540 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 02:02:51.156 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 02:03:03.985 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33498 10 6452 1 2025-11-05 02:03:24.795 00:00:10.367 TCP 23.104.0.1:38764 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:04:04.215 00:00:12.427 TCP 1.101.0.1:3000 -> 22.102.0.1:47960 10 6452 1 2025-11-05 02:04:25.203 00:00:10.362 TCP 23.104.0.1:43984 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:00:52.697 00:05:03.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 02:05:06.684 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39096 10 6452 1 2025-11-05 02:05:25.599 00:00:10.370 TCP 23.104.0.1:56964 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:01:52.700 00:05:03.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 02:06:06.913 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58008 10 6452 1 2025-11-05 02:06:26.008 00:00:10.365 TCP 23.104.0.1:56016 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:07:07.132 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45834 10 6452 1 2025-11-05 02:07:26.411 00:00:10.369 TCP 23.104.0.1:47212 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:07:51.397 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 02:07:51.523 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 02:08:07.354 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56432 10 6452 1 2025-11-05 02:08:26.817 00:00:10.365 TCP 23.104.0.1:55128 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:09:07.568 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57038 10 6452 1 2025-11-05 02:09:27.218 00:00:10.375 TCP 23.104.0.1:32932 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:10:07.785 00:00:14.378 TCP 1.101.0.1:3000 -> 22.102.0.1:56602 10 6452 1 2025-11-05 02:10:27.619 00:00:10.369 TCP 23.104.0.1:39306 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:06:52.697 00:05:03.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 02:11:12.211 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41200 10 6452 1 2025-11-05 02:11:28.024 00:00:10.363 TCP 23.104.0.1:33586 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:07:52.701 00:05:03.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 02:12:12.427 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56606 10 6452 1 2025-11-05 02:12:28.424 00:00:10.359 TCP 23.104.0.1:36748 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:12:51.661 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 02:12:51.451 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 02:13:12.646 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35338 10 6452 1 2025-11-05 02:13:28.823 00:00:13.715 TCP 23.104.0.1:34442 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:14:12.867 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52588 10 6452 1 2025-11-05 02:14:32.590 00:00:10.328 TCP 23.104.0.1:39782 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:15:13.096 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35760 10 6452 1 2025-11-05 02:15:32.950 00:00:10.370 TCP 23.104.0.1:58994 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:16:13.262 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39588 10 6452 1 2025-11-05 02:16:33.359 00:00:10.321 TCP 23.104.0.1:57454 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:12:52.701 00:05:03.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 02:17:13.486 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48154 10 6452 1 2025-11-05 02:17:33.718 00:00:10.329 TCP 23.104.0.1:49742 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:17:51.353 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 02:17:51.547 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 02:13:52.703 00:05:03.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 02:18:13.698 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48698 10 6452 1 2025-11-05 02:18:34.101 00:00:10.367 TCP 23.104.0.1:41304 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:19:13.869 00:00:10.252 TCP 1.101.0.1:3000 -> 22.102.0.1:48020 10 6452 1 2025-11-05 02:19:34.505 00:00:10.363 TCP 23.104.0.1:53298 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:20:14.158 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33542 10 6452 1 2025-11-05 02:20:34.905 00:00:10.322 TCP 23.104.0.1:53038 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:21:14.371 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:51470 10 6452 1 2025-11-05 02:21:35.266 00:00:10.370 TCP 23.104.0.1:54382 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:22:14.565 00:00:10.927 TCP 1.101.0.1:3000 -> 22.102.0.1:40944 10 6452 1 2025-11-05 02:22:35.675 00:00:10.369 TCP 23.104.0.1:39842 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:22:51.593 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 02:22:51.604 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 02:18:52.703 00:05:03.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 02:23:15.535 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34298 12 6556 1 2025-11-05 02:23:36.102 00:00:10.361 TCP 23.104.0.1:52368 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:19:52.706 00:05:03.140 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 02:24:15.747 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38100 10 6452 1 2025-11-05 02:24:36.505 00:00:10.324 TCP 23.104.0.1:48632 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:25:15.962 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59966 10 6452 1 2025-11-05 02:25:36.868 00:00:10.367 TCP 23.104.0.1:44830 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:26:16.196 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47300 10 6452 1 2025-11-05 02:26:37.277 00:00:10.364 TCP 23.104.0.1:45638 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:27:16.363 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49472 10 6452 1 2025-11-05 02:27:37.689 00:00:10.327 TCP 23.104.0.1:41710 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:27:53.047 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 02:27:53.232 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 02:28:16.577 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37450 10 6452 1 2025-11-05 02:28:38.066 00:00:10.361 TCP 23.104.0.1:37168 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:24:52.703 00:05:03.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 02:29:16.784 00:00:10.335 TCP 1.101.0.1:3000 -> 22.102.0.1:37206 10 6452 1 2025-11-05 02:29:38.464 00:00:10.362 TCP 23.104.0.1:60456 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:25:52.707 00:05:03.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 02:30:17.164 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54774 10 6452 1 2025-11-05 02:30:38.868 00:00:10.325 TCP 23.104.0.1:50360 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:31:17.376 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45078 10 6452 1 2025-11-05 02:31:39.233 00:00:10.320 TCP 23.104.0.1:54646 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:32:17.600 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37874 10 6452 1 2025-11-05 02:32:51.568 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 02:32:51.750 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 02:32:39.594 00:00:10.371 TCP 23.104.0.1:59942 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:33:17.822 00:00:12.162 TCP 1.101.0.1:3000 -> 22.102.0.1:60148 10 6452 1 2025-11-05 02:33:40.006 00:00:25.196 TCP 23.104.0.1:39254 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:34:20.023 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45862 10 6452 1 2025-11-05 02:30:52.707 00:05:03.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 02:34:55.239 00:00:10.355 TCP 23.104.0.1:33112 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:35:20.200 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47438 10 6452 1 2025-11-05 02:31:52.710 00:05:03.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 02:35:55.633 00:00:10.362 TCP 23.104.0.1:57008 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:36:20.372 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36720 10 6452 1 2025-11-05 02:36:56.034 00:00:10.320 TCP 23.104.0.1:55364 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:37:20.586 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52584 10 6452 1 2025-11-05 02:37:51.913 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 02:37:51.987 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 02:37:56.391 00:00:10.363 TCP 23.104.0.1:50160 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:38:20.799 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41320 10 6452 1 2025-11-05 02:38:56.795 00:00:10.364 TCP 23.104.0.1:50492 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:39:21.023 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37230 10 6452 1 2025-11-05 02:39:57.200 00:00:10.363 TCP 23.104.0.1:57804 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:40:21.239 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45800 10 6452 1 2025-11-05 02:36:52.710 00:05:03.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 02:40:57.609 00:00:10.365 TCP 23.104.0.1:50432 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:41:21.450 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46810 10 6452 1 2025-11-05 02:37:52.714 00:05:03.138 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 02:41:58.016 00:00:10.326 TCP 23.104.0.1:48638 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:42:21.668 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42594 10 6452 1 2025-11-05 02:42:52.006 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 02:42:52.021 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 02:42:58.378 00:00:10.359 TCP 23.104.0.1:60758 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:43:21.848 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42988 10 6452 1 2025-11-05 02:43:58.775 00:00:10.368 TCP 23.104.0.1:60332 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:44:22.084 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45070 10 6452 1 2025-11-05 02:44:59.183 00:00:10.364 TCP 23.104.0.1:59258 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:45:22.291 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60706 10 6452 1 2025-11-05 02:45:59.582 00:00:10.367 TCP 23.104.0.1:36606 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:46:22.506 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48146 10 6452 1 2025-11-05 02:42:52.712 00:05:03.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 02:46:59.984 00:00:10.366 TCP 23.104.0.1:54480 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:47:22.719 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35278 10 6452 1 2025-11-05 02:47:52.048 00:00:00.052 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 02:47:52.203 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 02:43:52.714 00:05:03.138 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 02:48:00.390 00:00:10.366 TCP 23.104.0.1:45480 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:48:22.929 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:38882 10 6452 1 2025-11-05 02:49:00.791 00:00:10.336 TCP 23.104.0.1:51186 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:49:23.163 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46580 10 6452 1 2025-11-05 02:50:01.163 00:00:10.367 TCP 23.104.0.1:47940 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:50:23.377 00:00:10.314 TCP 1.101.0.1:3000 -> 22.102.0.1:34926 11 6504 1 2025-11-05 02:51:01.567 00:00:10.340 TCP 23.104.0.1:35976 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:51:23.736 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40976 10 6452 1 2025-11-05 02:52:01.954 00:00:10.329 TCP 23.104.0.1:35524 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:52:23.956 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:50990 10 6452 1 2025-11-05 02:52:52.102 00:00:00.056 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 02:52:51.980 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 02:48:52.712 00:05:03.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 02:53:02.320 00:00:10.366 TCP 23.104.0.1:40692 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:53:24.168 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49502 10 6452 1 2025-11-05 02:49:52.716 00:05:03.140 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 02:54:02.727 00:00:10.365 TCP 23.104.0.1:34076 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:54:24.392 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51672 10 6452 1 2025-11-05 02:55:03.131 00:00:10.362 TCP 23.104.0.1:48156 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:55:24.616 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:49762 10 6452 1 2025-11-05 02:56:03.532 00:00:10.363 TCP 23.104.0.1:49218 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:56:24.795 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42872 10 6452 1 2025-11-05 02:57:03.941 00:00:10.382 TCP 23.104.0.1:38406 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:57:25.020 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34356 10 6452 1 2025-11-05 02:57:52.380 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 02:57:52.242 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 02:58:04.362 00:00:10.367 TCP 23.104.0.1:36320 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:58:25.235 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56684 10 6452 1 Summary: total flows: 163, total bytes: 501339, total packets: 1570, avg bps: 1049, avg pps: 0, avg bpp: 319 Time window: 2025-11-05 01:54:52 - 2025-11-05 02:58:35 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0011s Wall: 0.0022s flows/second: 74263.7 Runtime: 0.0022s