Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 07:54:52.811 00:05:03.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 07:59:09.793 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60176 10 6452 1 2025-11-05 07:59:29.323 00:00:10.323 TCP 23.104.0.1:33488 -> 1.101.0.1:3000 11 1507 1 2025-11-05 07:55:52.817 00:05:03.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 08:00:10.018 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42684 10 6452 1 2025-11-05 08:00:29.735 00:00:10.374 TCP 23.104.0.1:53820 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:01:10.236 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57072 10 6452 1 2025-11-05 08:01:30.147 00:00:10.365 TCP 23.104.0.1:45974 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:02:10.451 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50788 10 6452 1 2025-11-05 08:02:30.554 00:00:10.368 TCP 23.104.0.1:45658 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:02:58.724 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 08:02:58.459 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 08:03:10.664 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33240 10 6452 1 2025-11-05 08:03:30.962 00:00:10.366 TCP 23.104.0.1:54156 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:04:10.832 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33676 10 6452 1 2025-11-05 08:04:31.370 00:00:10.326 TCP 23.104.0.1:58190 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:00:52.815 00:05:03.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 08:05:11.061 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57970 10 6452 1 2025-11-05 08:05:31.740 00:00:10.326 TCP 23.104.0.1:39026 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:01:52.819 00:05:03.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 08:06:11.286 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39808 10 6452 1 2025-11-05 08:06:32.110 00:00:10.371 TCP 23.104.0.1:39828 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:07:11.504 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44524 10 6452 1 2025-11-05 08:07:32.522 00:00:10.361 TCP 23.104.0.1:46662 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:07:58.440 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 08:07:58.640 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 08:08:11.714 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41854 10 6452 1 2025-11-05 08:08:32.925 00:00:10.384 TCP 23.104.0.1:54484 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:09:11.935 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:34476 10 6452 1 2025-11-05 08:09:33.345 00:00:10.360 TCP 23.104.0.1:35216 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:10:12.175 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50378 10 6452 1 2025-11-05 08:10:33.739 00:00:10.331 TCP 23.104.0.1:49814 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:06:52.816 00:05:03.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 08:11:12.401 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:38020 10 6452 1 2025-11-05 08:11:34.104 00:00:10.361 TCP 23.104.0.1:34330 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:07:52.819 00:05:03.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 08:12:12.654 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56586 10 6452 1 2025-11-05 08:12:34.505 00:00:10.329 TCP 23.104.0.1:42926 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:12:58.591 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 08:12:58.708 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 08:13:12.886 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:51220 10 6452 1 2025-11-05 08:13:34.871 00:00:10.328 TCP 23.104.0.1:47160 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:14:13.090 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46218 10 6452 1 2025-11-05 08:14:35.235 00:00:10.362 TCP 23.104.0.1:58058 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:15:13.316 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59308 10 6452 1 2025-11-05 08:15:35.635 00:00:10.365 TCP 23.104.0.1:55232 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:16:13.543 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43408 10 6452 1 2025-11-05 08:16:36.048 00:00:10.451 TCP 23.104.0.1:42316 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:12:52.818 00:05:03.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 08:17:13.765 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:59022 10 6452 1 2025-11-05 08:17:36.540 00:00:10.370 TCP 23.104.0.1:42216 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:13:52.821 00:05:03.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 08:17:59.814 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 08:17:58.612 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 08:18:13.944 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:48218 10 6452 1 2025-11-05 08:18:36.947 00:00:10.369 TCP 23.104.0.1:36622 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:19:14.180 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51618 10 6452 1 2025-11-05 08:19:37.352 00:00:10.326 TCP 23.104.0.1:47094 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:20:14.402 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53540 10 6452 1 2025-11-05 08:20:37.712 00:00:10.375 TCP 23.104.0.1:46150 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:21:14.580 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34188 10 6452 1 2025-11-05 08:21:38.140 00:00:10.385 TCP 23.104.0.1:37604 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:22:14.759 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45180 10 6452 1 2025-11-05 08:22:38.566 00:00:10.341 TCP 23.104.0.1:45132 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:18:52.819 00:05:03.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 08:22:58.927 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 08:22:58.888 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 08:23:14.936 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:38696 10 6452 1 2025-11-05 08:23:38.942 00:00:10.380 TCP 23.104.0.1:41790 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:19:52.822 00:05:03.153 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 08:24:15.182 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37012 10 6452 1 2025-11-05 08:24:39.352 00:00:10.364 TCP 23.104.0.1:44082 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:25:15.406 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50392 10 6452 1 2025-11-05 08:25:39.757 00:00:10.338 TCP 23.104.0.1:35086 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:26:15.628 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43412 10 6452 1 2025-11-05 08:26:40.138 00:00:10.326 TCP 23.104.0.1:33686 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:27:15.860 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:57696 10 6452 1 2025-11-05 08:27:40.510 00:00:10.328 TCP 23.104.0.1:60504 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:27:59.018 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 08:27:58.881 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 08:28:16.117 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43254 10 6452 1 2025-11-05 08:28:40.876 00:00:10.360 TCP 23.104.0.1:59038 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:24:52.822 00:05:03.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 08:29:16.336 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38224 10 6452 1 2025-11-05 08:29:41.275 00:00:10.325 TCP 23.104.0.1:33034 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:25:52.825 00:05:03.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 08:30:16.552 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33534 10 6452 1 2025-11-05 08:30:41.640 00:00:10.365 TCP 23.104.0.1:48206 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:31:16.779 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:45022 10 6452 1 2025-11-05 08:31:42.046 00:00:10.363 TCP 23.104.0.1:49564 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:32:16.975 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:42684 10 6452 1 2025-11-05 08:32:42.445 00:00:10.369 TCP 23.104.0.1:41972 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:32:59.015 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 08:32:59.161 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 08:33:17.221 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35448 10 6452 1 2025-11-05 08:33:42.853 00:00:10.339 TCP 23.104.0.1:46408 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:34:17.438 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45776 10 6452 1 2025-11-05 08:30:52.825 00:05:03.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 08:34:43.243 00:00:10.378 TCP 23.104.0.1:49134 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:35:17.678 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48420 10 6452 1 2025-11-05 08:35:43.672 00:00:10.362 TCP 23.104.0.1:51376 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:31:52.827 00:05:03.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 08:36:17.857 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34164 10 6452 1 2025-11-05 08:36:44.108 00:00:10.363 TCP 23.104.0.1:51416 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:37:18.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53694 10 6452 1 2025-11-05 08:37:44.510 00:00:10.374 TCP 23.104.0.1:58838 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:37:59.017 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 08:37:59.324 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 08:38:18.296 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55226 10 6452 1 2025-11-05 08:38:44.930 00:00:10.454 TCP 23.104.0.1:56634 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:39:18.469 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37436 10 6452 1 2025-11-05 08:39:45.419 00:00:10.360 TCP 23.104.0.1:33178 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:40:18.651 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:46388 10 6452 1 2025-11-05 08:40:45.819 00:00:10.363 TCP 23.104.0.1:39448 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:36:52.826 00:05:03.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 08:41:18.875 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51150 10 6452 1 2025-11-05 08:41:46.217 00:00:10.358 TCP 23.104.0.1:45846 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:37:52.828 00:05:03.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 08:42:19.097 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:56558 10 6452 1 2025-11-05 08:42:46.615 00:00:10.370 TCP 23.104.0.1:43302 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:42:59.270 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 08:42:59.335 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 08:43:19.265 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38538 10 6452 1 2025-11-05 08:43:47.020 00:00:10.364 TCP 23.104.0.1:53104 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:44:19.482 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34814 10 6452 1 2025-11-05 08:44:47.422 00:00:10.362 TCP 23.104.0.1:40768 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:45:19.688 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58576 10 6452 1 2025-11-05 08:45:47.820 00:00:10.366 TCP 23.104.0.1:57752 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:46:19.905 00:00:10.509 TCP 1.101.0.1:3000 -> 22.102.0.1:57284 10 6452 1 2025-11-05 08:42:52.827 00:05:03.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 08:46:48.222 00:00:10.368 TCP 23.104.0.1:52902 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:47:20.453 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38102 10 6452 1 2025-11-05 08:43:52.831 00:05:03.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 08:47:59.291 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 08:47:59.449 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 08:47:48.627 00:00:10.367 TCP 23.104.0.1:43290 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:48:20.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37008 10 6452 1 2025-11-05 08:48:49.032 00:00:10.369 TCP 23.104.0.1:52720 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:49:20.832 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40558 10 6452 1 2025-11-05 08:49:49.457 00:00:10.364 TCP 23.104.0.1:44882 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:50:21.016 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44786 10 6452 1 2025-11-05 08:50:49.866 00:00:10.364 TCP 23.104.0.1:46674 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:51:21.242 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60420 10 6452 1 2025-11-05 08:51:50.276 00:00:10.368 TCP 23.104.0.1:52720 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:52:21.457 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48460 10 6452 1 2025-11-05 08:48:52.828 00:05:03.175 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 08:52:59.285 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 08:52:59.357 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 08:52:50.683 00:00:10.340 TCP 23.104.0.1:33782 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:53:21.680 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43212 10 6452 1 2025-11-05 08:49:52.831 00:05:03.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 08:53:51.099 00:00:10.329 TCP 23.104.0.1:57064 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:54:21.855 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45038 10 6452 1 2025-11-05 08:54:51.469 00:00:10.365 TCP 23.104.0.1:42054 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:55:22.076 00:00:10.542 TCP 1.101.0.1:3000 -> 22.102.0.1:48240 10 6452 1 2025-11-05 08:55:51.877 00:00:10.388 TCP 23.104.0.1:54560 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:56:22.657 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60844 10 6452 1 2025-11-05 08:56:52.300 00:00:10.363 TCP 23.104.0.1:56460 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:57:22.872 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56936 10 6452 1 2025-11-05 08:57:59.279 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 08:57:59.778 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 08:57:52.703 00:00:10.369 TCP 23.104.0.1:34388 -> 1.101.0.1:3000 11 1507 1 2025-11-05 08:58:23.100 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39650 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1040, avg pps: 0, avg bpp: 318 Time window: 2025-11-05 07:54:52 - 2025-11-05 08:58:33 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0012s Wall: 0.0022s flows/second: 74126.8 Runtime: 0.0022s