Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 05:54:52.774 00:05:03.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 05:59:29.719 00:00:14.594 TCP 1.101.0.1:3000 -> 22.102.0.1:39846 10 6452 1 2025-11-05 05:59:37.021 00:00:10.363 TCP 23.104.0.1:34204 -> 1.101.0.1:3000 11 1507 1 2025-11-05 05:55:52.777 00:05:03.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 06:00:34.375 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33342 10 6452 1 2025-11-05 06:00:37.423 00:00:10.405 TCP 23.104.0.1:45236 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:01:34.595 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40248 10 6452 1 2025-11-05 06:01:37.884 00:00:10.380 TCP 23.104.0.1:54742 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:02:34.776 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36700 10 6452 1 2025-11-05 06:02:38.302 00:00:10.324 TCP 23.104.0.1:49750 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:02:55.983 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 06:02:56.212 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 06:03:34.994 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:40456 10 6452 1 2025-11-05 06:03:38.665 00:00:10.945 TCP 23.104.0.1:35934 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:04:35.223 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40644 10 6452 1 2025-11-05 06:04:39.650 00:00:10.324 TCP 23.104.0.1:50562 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:00:52.780 00:05:03.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 06:05:35.442 00:00:18.826 TCP 1.101.0.1:3000 -> 22.102.0.1:40536 10 6452 1 2025-11-05 06:01:52.783 00:05:03.140 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 06:05:40.020 00:00:14.420 TCP 23.104.0.1:55130 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:06:44.336 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34574 10 6452 1 2025-11-05 06:06:44.490 00:00:10.365 TCP 23.104.0.1:47690 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:07:56.252 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 06:07:44.895 00:00:10.370 TCP 23.104.0.1:59866 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:07:44.555 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41992 10 6452 1 2025-11-05 06:07:55.940 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 06:08:45.302 00:00:10.365 TCP 23.104.0.1:57858 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:08:44.782 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34718 10 6452 1 2025-11-05 06:09:45.707 00:00:10.377 TCP 23.104.0.1:42534 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:09:44.996 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49218 10 6452 1 2025-11-05 06:10:45.219 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42938 10 6452 1 2025-11-05 06:06:52.780 00:05:03.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 06:10:46.112 00:00:10.327 TCP 23.104.0.1:57840 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:07:52.784 00:05:03.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 06:11:46.475 00:00:10.363 TCP 23.104.0.1:44612 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:11:45.429 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35926 10 6452 1 2025-11-05 06:12:56.281 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 06:12:45.601 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40718 10 6452 1 2025-11-05 06:12:56.344 00:00:00.011 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 06:12:46.876 00:00:10.324 TCP 23.104.0.1:48040 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:13:45.775 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60370 10 6452 1 2025-11-05 06:13:47.243 00:00:10.320 TCP 23.104.0.1:35686 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:14:45.991 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:60682 10 6452 1 2025-11-05 06:14:47.602 00:00:10.322 TCP 23.104.0.1:39858 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:15:46.227 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41798 10 6452 1 2025-11-05 06:15:47.960 00:00:10.369 TCP 23.104.0.1:57216 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:12:52.784 00:05:03.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 06:16:46.452 00:00:10.709 TCP 1.101.0.1:3000 -> 22.102.0.1:41182 10 6452 1 2025-11-05 06:16:48.366 00:00:10.331 TCP 23.104.0.1:51758 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:17:56.407 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 06:17:56.172 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 06:13:52.786 00:05:03.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 06:17:47.201 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56926 10 6452 1 2025-11-05 06:17:48.743 00:00:10.366 TCP 23.104.0.1:49558 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:18:47.418 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41954 10 6452 1 2025-11-05 06:18:49.144 00:00:10.365 TCP 23.104.0.1:38844 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:19:47.638 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39198 10 6452 1 2025-11-05 06:19:49.550 00:00:10.323 TCP 23.104.0.1:32886 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:20:47.858 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57974 10 6452 1 2025-11-05 06:20:49.912 00:00:10.366 TCP 23.104.0.1:55102 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:21:48.086 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32830 10 6452 1 2025-11-05 06:21:50.317 00:00:10.327 TCP 23.104.0.1:48028 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:22:56.490 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 06:22:56.127 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 06:18:52.786 00:05:03.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 06:22:50.680 00:00:10.365 TCP 23.104.0.1:52922 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:22:48.302 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42160 10 6452 1 2025-11-05 06:19:52.788 00:05:03.140 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 06:23:48.568 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48888 10 6452 1 2025-11-05 06:23:51.108 00:00:10.368 TCP 23.104.0.1:33714 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:24:51.512 00:00:10.329 TCP 23.104.0.1:56438 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:24:48.792 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59196 10 6452 1 2025-11-05 06:25:49.001 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:53236 10 6452 1 2025-11-05 06:25:51.882 00:00:10.377 TCP 23.104.0.1:39160 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:26:49.230 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:37344 10 6452 1 2025-11-05 06:26:52.300 00:00:10.369 TCP 23.104.0.1:50368 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:27:56.421 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 06:27:56.317 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 06:27:49.414 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50216 10 6452 1 2025-11-05 06:27:52.708 00:00:10.392 TCP 23.104.0.1:54332 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:24:52.787 00:05:03.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 06:28:49.630 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47564 10 6452 1 2025-11-05 06:28:53.138 00:00:10.388 TCP 23.104.0.1:60276 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:25:52.788 00:05:03.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 06:29:49.847 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41728 10 6452 1 2025-11-05 06:29:53.540 00:00:10.335 TCP 23.104.0.1:55002 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:30:50.078 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36536 10 6452 1 2025-11-05 06:30:53.910 00:00:10.366 TCP 23.104.0.1:59544 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:31:50.287 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:47252 10 6452 1 2025-11-05 06:31:54.316 00:00:10.370 TCP 23.104.0.1:52040 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:32:56.507 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 06:32:56.527 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 06:32:50.477 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36142 10 6452 1 2025-11-05 06:32:54.723 00:00:10.367 TCP 23.104.0.1:58640 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:33:50.689 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54876 10 6452 1 2025-11-05 06:33:55.134 00:00:10.369 TCP 23.104.0.1:38044 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:30:52.786 00:05:03.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 06:34:50.912 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59320 10 6452 1 2025-11-05 06:34:55.541 00:00:10.369 TCP 23.104.0.1:34582 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:31:52.791 00:05:03.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 06:35:51.135 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50264 10 6452 1 2025-11-05 06:35:55.942 00:00:10.368 TCP 23.104.0.1:45190 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:36:51.351 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:54924 10 6452 1 2025-11-05 06:36:56.344 00:00:10.329 TCP 23.104.0.1:42782 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:37:56.722 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 06:37:57.078 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 06:37:51.576 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39650 10 6452 1 2025-11-05 06:37:56.712 00:00:10.361 TCP 23.104.0.1:52534 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:38:51.789 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54422 10 6452 1 2025-11-05 06:38:57.112 00:00:10.477 TCP 23.104.0.1:58126 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:39:52.002 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60082 10 6452 1 2025-11-05 06:39:57.633 00:00:10.324 TCP 23.104.0.1:49452 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:36:52.788 00:05:03.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 06:40:52.219 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54998 10 6452 1 2025-11-05 06:40:57.995 00:00:10.367 TCP 23.104.0.1:33418 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:37:52.791 00:05:03.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 06:41:52.391 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36562 10 6452 1 2025-11-05 06:41:58.403 00:00:10.325 TCP 23.104.0.1:45944 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:42:56.971 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 06:42:56.870 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 06:42:52.601 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37918 10 6452 1 2025-11-05 06:42:58.767 00:00:10.368 TCP 23.104.0.1:45114 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:43:52.821 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45050 10 6452 1 2025-11-05 06:43:59.173 00:00:10.364 TCP 23.104.0.1:51886 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:44:53.057 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:46626 10 6452 1 2025-11-05 06:44:59.574 00:00:10.370 TCP 23.104.0.1:50740 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:45:53.287 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45256 10 6452 1 2025-11-05 06:45:59.982 00:00:10.328 TCP 23.104.0.1:53264 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:42:52.788 00:05:03.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 06:46:53.511 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34868 10 6452 1 2025-11-05 06:47:00.351 00:00:10.365 TCP 23.104.0.1:49666 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:47:57.108 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 06:43:52.792 00:05:03.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 06:47:57.058 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 06:47:53.724 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50760 10 6452 1 2025-11-05 06:48:00.755 00:00:10.331 TCP 23.104.0.1:35966 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:48:53.946 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:34720 10 6452 1 2025-11-05 06:49:01.119 00:00:10.362 TCP 23.104.0.1:58094 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:49:54.180 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42660 10 6452 1 2025-11-05 06:50:01.522 00:00:10.364 TCP 23.104.0.1:56402 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:50:54.352 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:53734 10 6452 1 2025-11-05 06:51:01.929 00:00:10.398 TCP 23.104.0.1:38584 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:51:54.521 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:41298 12 10375 1 2025-11-05 06:52:02.385 00:00:10.444 TCP 23.104.0.1:49354 -> 1.101.0.1:3000 15 1926 1 2025-11-05 06:48:52.790 00:05:03.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 06:52:57.053 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 06:52:57.097 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 06:52:54.761 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41682 10 6452 1 2025-11-05 06:53:02.871 00:00:10.409 TCP 23.104.0.1:33834 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:49:52.792 00:05:03.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 06:53:54.972 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:34988 10 6452 1 2025-11-05 06:54:03.329 00:00:10.368 TCP 23.104.0.1:45838 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:54:55.206 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49620 10 6452 1 2025-11-05 06:55:03.735 00:00:10.377 TCP 23.104.0.1:33676 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:55:55.419 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48954 10 6452 1 2025-11-05 06:56:04.152 00:00:10.374 TCP 23.104.0.1:51854 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:56:55.633 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:32924 10 6452 1 2025-11-05 06:57:04.564 00:00:10.368 TCP 23.104.0.1:54102 -> 1.101.0.1:3000 11 1507 1 2025-11-05 06:57:57.187 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 06:57:57.196 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 06:57:55.857 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42746 10 6452 1 2025-11-05 06:58:04.969 00:00:10.331 TCP 23.104.0.1:51072 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494731, total packets: 1557, avg bps: 1040, avg pps: 0, avg bpp: 317 Time window: 2025-11-05 05:54:52 - 2025-11-05 06:58:15 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0025s User: 0.0025s Wall: 0.0024s flows/second: 67616.4 Runtime: 0.0024s