Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 10:54:52.861 00:05:03.204 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 10:59:05.853 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55314 10 6452 1 2025-11-05 10:59:09.798 00:00:10.340 TCP 23.104.0.1:60528 -> 1.101.0.1:3000 11 1507 1 2025-11-05 10:55:52.864 00:05:03.199 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 11:00:06.082 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56214 10 6452 1 2025-11-05 11:00:10.173 00:00:10.365 TCP 23.104.0.1:39102 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:01:06.270 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39528 10 6452 1 2025-11-05 11:01:10.571 00:00:10.369 TCP 23.104.0.1:43310 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:02:06.445 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60876 10 6452 1 2025-11-05 11:02:10.982 00:00:10.365 TCP 23.104.0.1:43296 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:03:02.053 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 11:03:02.141 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 11:03:06.667 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40282 10 6452 1 2025-11-05 11:03:11.389 00:00:10.321 TCP 23.104.0.1:38078 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:04:06.881 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58710 10 6452 1 2025-11-05 11:04:11.750 00:00:10.379 TCP 23.104.0.1:39054 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:00:52.865 00:05:03.203 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 11:05:07.100 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57812 10 6452 1 2025-11-05 11:05:12.175 00:00:10.338 TCP 23.104.0.1:49218 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:01:52.868 00:05:03.199 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 11:06:07.326 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37130 10 6452 1 2025-11-05 11:06:12.546 00:00:10.363 TCP 23.104.0.1:49688 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:07:07.541 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34590 10 6452 1 2025-11-05 11:07:12.949 00:00:10.367 TCP 23.104.0.1:56154 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:08:02.200 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 11:08:02.262 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 11:08:07.756 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55674 10 6452 1 2025-11-05 11:08:13.357 00:00:10.365 TCP 23.104.0.1:49794 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:09:07.972 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46486 10 6452 1 2025-11-05 11:09:13.761 00:00:10.327 TCP 23.104.0.1:59442 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:10:08.207 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58998 10 6452 1 2025-11-05 11:10:14.127 00:00:10.368 TCP 23.104.0.1:50174 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:06:52.865 00:05:03.204 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 11:11:08.422 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50276 10 6452 1 2025-11-05 11:11:14.532 00:00:10.321 TCP 23.104.0.1:33242 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:07:52.867 00:05:03.199 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 11:12:08.638 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46058 10 6452 1 2025-11-05 11:12:14.893 00:00:10.369 TCP 23.104.0.1:43662 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:13:02.294 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 11:13:02.501 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 11:13:08.857 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34048 11 6492 1 2025-11-05 11:13:15.301 00:00:10.424 TCP 23.104.0.1:54088 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:14:09.088 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38578 10 6452 1 2025-11-05 11:14:15.765 00:00:10.376 TCP 23.104.0.1:56522 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:15:09.295 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47808 10 6452 1 2025-11-05 11:15:16.186 00:00:10.365 TCP 23.104.0.1:37464 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:16:09.511 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36118 10 6452 1 2025-11-05 11:16:16.588 00:00:10.364 TCP 23.104.0.1:52252 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:12:52.866 00:05:03.204 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 11:17:09.726 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57408 10 6452 1 2025-11-05 11:17:16.992 00:00:10.364 TCP 23.104.0.1:41558 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:13:52.869 00:05:03.199 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 11:18:02.885 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 11:18:02.974 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 11:18:09.934 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:46214 10 6452 1 2025-11-05 11:18:17.397 00:00:10.362 TCP 23.104.0.1:33880 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:19:10.173 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35484 10 6452 1 2025-11-05 11:19:17.796 00:00:10.371 TCP 23.104.0.1:34618 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:20:10.395 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51266 10 6452 1 2025-11-05 11:20:18.201 00:00:10.369 TCP 23.104.0.1:54986 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:21:10.618 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34938 10 6452 1 2025-11-05 11:21:18.605 00:00:10.363 TCP 23.104.0.1:55986 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:22:10.837 00:00:21.922 TCP 1.101.0.1:3000 -> 22.102.0.1:35490 10 6452 1 2025-11-05 11:22:19.002 00:00:13.859 TCP 23.104.0.1:48876 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:18:52.868 00:05:03.205 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 11:23:02.473 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 11:23:02.371 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 11:23:22.903 00:00:10.371 TCP 23.104.0.1:54822 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:23:22.801 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39752 10 6452 1 2025-11-05 11:19:52.870 00:05:03.200 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 11:24:23.305 00:00:20.953 TCP 23.104.0.1:44656 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:24:23.043 00:00:21.089 TCP 1.101.0.1:3000 -> 22.102.0.1:56908 10 6452 1 2025-11-05 11:25:34.309 00:00:10.359 TCP 23.104.0.1:34024 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:25:34.177 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46496 10 6452 1 2025-11-05 11:26:34.707 00:00:10.366 TCP 23.104.0.1:52314 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:26:34.351 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42650 10 6452 1 2025-11-05 11:27:34.569 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:51590 10 6452 1 2025-11-05 11:27:35.109 00:00:10.373 TCP 23.104.0.1:41234 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:28:02.598 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 11:28:02.514 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 11:28:35.515 00:00:10.324 TCP 23.104.0.1:49632 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:28:34.742 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38304 10 6452 1 2025-11-05 11:24:52.867 00:05:03.205 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 11:29:35.879 00:00:10.372 TCP 23.104.0.1:49150 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:29:34.962 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58456 10 6452 1 2025-11-05 11:25:52.871 00:05:03.200 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 11:30:35.181 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38672 10 6452 1 2025-11-05 11:30:36.295 00:00:10.365 TCP 23.104.0.1:58356 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:31:35.399 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47652 10 6452 1 2025-11-05 11:31:36.704 00:00:10.367 TCP 23.104.0.1:56030 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:32:35.616 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57102 10 6452 1 2025-11-05 11:32:37.110 00:00:10.364 TCP 23.104.0.1:46952 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:33:02.677 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 11:33:02.497 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 11:33:35.829 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59596 10 6452 1 2025-11-05 11:33:37.509 00:00:10.369 TCP 23.104.0.1:56500 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:34:36.061 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52934 10 6452 1 2025-11-05 11:34:37.916 00:00:10.364 TCP 23.104.0.1:48886 -> 1.101.0.1:3000 12 1559 1 2025-11-05 11:30:52.868 00:05:03.206 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 11:35:36.272 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:43252 10 6452 1 2025-11-05 11:35:38.317 00:00:10.359 TCP 23.104.0.1:55594 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:31:52.871 00:05:03.200 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 11:36:36.478 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33008 10 6452 1 2025-11-05 11:36:38.718 00:00:11.072 TCP 23.104.0.1:49748 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:37:36.695 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44262 10 6452 1 2025-11-05 11:37:39.824 00:00:10.365 TCP 23.104.0.1:51220 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:38:02.703 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 11:38:02.802 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 11:38:40.222 00:00:10.326 TCP 23.104.0.1:43930 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:38:36.910 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53166 10 6452 1 2025-11-05 11:39:37.128 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33804 10 6452 1 2025-11-05 11:39:40.597 00:00:18.470 TCP 23.104.0.1:44450 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:40:37.339 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34484 10 6452 1 2025-11-05 11:36:52.869 00:05:03.206 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 11:40:49.113 00:00:10.364 TCP 23.104.0.1:39100 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:41:37.562 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:34202 12 10369 1 2025-11-05 11:37:52.873 00:05:03.200 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 11:41:49.513 00:00:10.437 TCP 23.104.0.1:45164 -> 1.101.0.1:3000 15 1926 1 2025-11-05 11:42:37.809 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:58558 10 6452 1 2025-11-05 11:42:49.996 00:00:10.368 TCP 23.104.0.1:53244 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:43:02.762 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 11:43:02.693 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 11:43:38.083 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37490 10 6452 1 2025-11-05 11:43:50.401 00:00:10.362 TCP 23.104.0.1:38734 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:44:38.298 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59904 10 6452 1 2025-11-05 11:44:50.804 00:00:10.359 TCP 23.104.0.1:49986 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:45:38.478 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49564 10 6452 1 2025-11-05 11:45:51.207 00:00:10.453 TCP 23.104.0.1:45516 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:46:38.695 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:33640 10 6452 1 2025-11-05 11:42:52.871 00:05:03.205 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 11:46:51.693 00:00:10.329 TCP 23.104.0.1:37750 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:47:38.881 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52172 10 6452 1 2025-11-05 11:43:52.875 00:05:03.199 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 11:48:02.889 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 11:47:52.074 00:00:10.358 TCP 23.104.0.1:56278 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:48:03.162 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 11:48:39.108 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60506 10 6452 1 2025-11-05 11:48:52.471 00:00:10.366 TCP 23.104.0.1:57052 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:49:39.322 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60486 10 6452 1 2025-11-05 11:49:52.873 00:00:10.367 TCP 23.104.0.1:35050 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:50:39.537 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:33996 10 6452 1 2025-11-05 11:50:53.278 00:00:10.368 TCP 23.104.0.1:52316 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:51:39.714 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51226 10 6452 1 2025-11-05 11:51:53.687 00:00:10.324 TCP 23.104.0.1:39528 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:52:39.921 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60956 10 6452 1 2025-11-05 11:48:52.873 00:05:03.204 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 11:53:02.949 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 11:52:54.065 00:00:10.357 TCP 23.104.0.1:54872 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:53:03.064 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 11:53:40.125 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53680 10 6452 1 2025-11-05 11:49:52.876 00:05:03.199 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 11:53:54.461 00:00:10.361 TCP 23.104.0.1:60606 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:54:40.348 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40450 10 6452 1 2025-11-05 11:54:54.863 00:00:10.368 TCP 23.104.0.1:50150 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:55:40.574 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59888 10 6452 1 2025-11-05 11:55:55.269 00:00:10.361 TCP 23.104.0.1:42584 -> 1.101.0.1:3000 11 1507 1 2025-11-05 11:56:40.786 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:42744 12 10369 1 2025-11-05 11:56:55.674 00:00:10.435 TCP 23.104.0.1:38428 -> 1.101.0.1:3000 15 1926 1 2025-11-05 11:57:41.067 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38796 10 6452 1 2025-11-05 11:58:03.136 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 11:58:03.034 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 11:57:56.149 00:00:10.337 TCP 23.104.0.1:59882 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499153, total packets: 1565, avg bps: 1052, avg pps: 0, avg bpp: 318 Time window: 2025-11-05 10:54:52 - 2025-11-05 11:58:06 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0030s User: 0.0020s Wall: 0.0022s flows/second: 74341.1 Runtime: 0.0022s