Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 03:53:57.412 00:05:56.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 03:59:20.482 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 03:59:20.315 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 03:59:35.578 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42084 10 6452 1 2025-11-08 03:59:37.818 00:00:10.339 TCP 23.104.0.1:48742 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:54:57.409 00:05:56.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 04:00:35.787 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:56546 10 6452 1 2025-11-08 04:00:38.193 00:00:10.361 TCP 23.104.0.1:55898 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:01:35.956 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39240 12 6556 1 2025-11-08 04:01:38.588 00:00:10.375 TCP 23.104.0.1:58702 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:02:36.183 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:44644 10 6452 1 2025-11-08 04:02:38.995 00:00:10.324 TCP 23.104.0.1:39426 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:03:36.364 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57770 10 6452 1 2025-11-08 04:03:39.353 00:00:10.368 TCP 23.104.0.1:42230 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:04:20.381 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 04:04:20.331 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 04:04:36.577 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47198 10 6452 1 2025-11-08 04:04:39.764 00:00:10.371 TCP 23.104.0.1:54080 -> 1.101.0.1:3000 11 1507 1 2025-11-08 03:59:57.415 00:05:56.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 04:05:36.791 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42032 10 6452 1 2025-11-08 04:05:40.173 00:00:10.367 TCP 23.104.0.1:54920 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:00:57.412 00:05:56.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 04:06:40.578 00:00:10.329 TCP 23.104.0.1:40096 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:06:36.969 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37610 10 6452 1 2025-11-08 04:07:40.946 00:00:10.374 TCP 23.104.0.1:41158 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:07:37.194 00:00:10.449 TCP 1.101.0.1:3000 -> 22.102.0.1:53462 10 6452 1 2025-11-08 04:08:41.355 00:00:10.368 TCP 23.104.0.1:51204 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:08:37.682 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50400 10 6452 1 2025-11-08 04:09:20.264 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 04:09:20.087 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 04:09:37.892 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42272 10 6452 1 2025-11-08 04:09:41.760 00:00:10.369 TCP 23.104.0.1:45768 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:10:38.115 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:40228 10 6452 1 2025-11-08 04:10:42.166 00:00:10.377 TCP 23.104.0.1:41280 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:05:57.416 00:05:56.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 04:11:38.347 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39028 10 6452 1 2025-11-08 04:06:57.415 00:05:56.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 04:11:42.580 00:00:10.361 TCP 23.104.0.1:47840 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:12:38.563 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51076 10 6452 1 2025-11-08 04:12:42.978 00:00:10.363 TCP 23.104.0.1:34638 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:13:38.778 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36004 10 6452 1 2025-11-08 04:13:43.375 00:00:10.363 TCP 23.104.0.1:36798 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:14:20.612 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 04:14:20.247 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 04:14:38.999 00:00:10.362 TCP 1.101.0.1:3000 -> 22.102.0.1:51662 10 6452 1 2025-11-08 04:14:43.776 00:00:10.369 TCP 23.104.0.1:54164 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:15:39.404 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46740 10 6452 1 2025-11-08 04:15:44.183 00:00:10.364 TCP 23.104.0.1:57490 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:16:39.633 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41992 10 6452 1 2025-11-08 04:11:57.419 00:05:56.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 04:16:44.585 00:00:10.634 TCP 23.104.0.1:57130 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:17:39.850 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59108 10 6452 1 2025-11-08 04:17:45.264 00:00:10.364 TCP 23.104.0.1:39174 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:12:57.416 00:05:56.826 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 04:18:40.091 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43038 10 6452 1 2025-11-08 04:18:45.665 00:00:10.368 TCP 23.104.0.1:46538 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:19:21.212 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 04:19:20.703 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 04:19:40.302 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57824 10 6452 1 2025-11-08 04:19:46.099 00:00:10.325 TCP 23.104.0.1:42098 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:20:40.518 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49694 10 6452 1 2025-11-08 04:20:46.461 00:00:10.364 TCP 23.104.0.1:49750 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:21:40.744 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57698 10 6452 1 2025-11-08 04:21:46.862 00:00:10.333 TCP 23.104.0.1:43742 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:22:40.953 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:53968 10 6452 1 2025-11-08 04:17:57.419 00:05:56.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 04:22:47.231 00:00:10.366 TCP 23.104.0.1:49656 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:23:41.196 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47014 10 6452 1 2025-11-08 04:18:57.416 00:05:56.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 04:23:47.632 00:00:10.372 TCP 23.104.0.1:59078 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:24:20.715 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 04:24:20.645 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 04:24:48.034 00:00:14.606 TCP 23.104.0.1:53720 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:24:41.411 00:00:21.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6452 1 2025-11-08 04:25:52.581 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49890 10 6452 1 2025-11-08 04:25:52.679 00:00:10.362 TCP 23.104.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:26:53.105 00:00:10.322 TCP 23.104.0.1:35832 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:26:52.798 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34272 10 6452 1 2025-11-08 04:27:53.017 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57746 10 6452 1 2025-11-08 04:27:53.463 00:00:10.365 TCP 23.104.0.1:42912 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:23:57.422 00:05:56.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 04:28:53.241 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:60030 10 6452 1 2025-11-08 04:28:53.861 00:00:10.375 TCP 23.104.0.1:36280 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:29:20.841 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 04:29:20.693 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 04:24:57.421 00:05:56.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 04:29:54.271 00:00:10.330 TCP 23.104.0.1:42418 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:29:53.428 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:58678 10 6452 1 2025-11-08 04:30:54.640 00:00:10.368 TCP 23.104.0.1:37604 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:30:53.599 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35362 10 6452 1 2025-11-08 04:31:55.061 00:00:10.367 TCP 23.104.0.1:56314 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:31:53.809 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33576 10 6452 1 2025-11-08 04:32:54.027 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38212 10 6452 1 2025-11-08 04:32:55.465 00:00:10.364 TCP 23.104.0.1:60330 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:33:54.237 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43992 10 6452 1 2025-11-08 04:33:55.868 00:00:10.372 TCP 23.104.0.1:41088 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:34:20.981 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 04:34:20.718 00:00:00.013 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 04:29:57.424 00:05:56.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 04:34:56.279 00:00:10.371 TCP 23.104.0.1:41966 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:34:54.447 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41648 10 6452 1 2025-11-08 04:30:57.426 00:05:56.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 04:35:54.659 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44490 10 6452 1 2025-11-08 04:35:56.683 00:00:10.374 TCP 23.104.0.1:45758 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:36:54.874 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60810 10 6452 1 2025-11-08 04:36:57.104 00:00:10.363 TCP 23.104.0.1:49874 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:37:55.092 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:42350 12 10375 1 2025-11-08 04:37:57.506 00:00:10.451 TCP 23.104.0.1:36702 -> 1.101.0.1:3000 15 1926 1 2025-11-08 04:38:55.331 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53890 10 6452 1 2025-11-08 04:38:57.998 00:00:10.363 TCP 23.104.0.1:51170 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:39:20.792 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 04:39:20.915 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 04:39:55.545 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33940 10 6452 1 2025-11-08 04:39:58.402 00:00:11.231 TCP 23.104.0.1:35476 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:35:57.432 00:05:56.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 04:40:55.721 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49466 10 6452 1 2025-11-08 04:40:59.669 00:00:10.365 TCP 23.104.0.1:58212 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:36:57.430 00:05:56.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 04:41:55.935 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56548 10 6452 1 2025-11-08 04:42:00.096 00:00:10.364 TCP 23.104.0.1:42094 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:42:56.167 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56678 10 6452 1 2025-11-08 04:43:00.495 00:00:10.367 TCP 23.104.0.1:52848 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:43:56.369 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50078 10 6452 1 2025-11-08 04:44:00.896 00:00:10.806 TCP 23.104.0.1:50830 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:44:21.354 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 04:44:21.163 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 04:44:56.579 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44970 10 6452 1 2025-11-08 04:45:01.743 00:00:10.367 TCP 23.104.0.1:57294 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:45:56.800 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59624 10 6452 1 2025-11-08 04:46:02.143 00:00:10.362 TCP 23.104.0.1:49704 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:41:57.433 00:05:56.818 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 04:46:57.029 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34470 10 6452 1 2025-11-08 04:47:02.540 00:00:10.363 TCP 23.104.0.1:46846 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:42:57.430 00:05:56.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 04:47:57.250 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53452 10 6452 1 2025-11-08 04:48:02.950 00:00:10.384 TCP 23.104.0.1:53910 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:48:57.464 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36054 10 6452 1 2025-11-08 04:49:03.380 00:00:10.365 TCP 23.104.0.1:53494 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:49:20.960 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 04:49:21.159 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 04:50:03.784 00:00:11.614 TCP 23.104.0.1:37982 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:49:57.638 00:00:17.665 TCP 1.101.0.1:3000 -> 22.102.0.1:46852 10 6452 1 2025-11-08 04:51:05.463 00:00:10.362 TCP 23.104.0.1:59266 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:51:05.367 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58816 10 6452 1 2025-11-08 04:52:05.582 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51102 10 6452 1 2025-11-08 04:52:05.865 00:00:10.362 TCP 23.104.0.1:56902 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:47:57.434 00:05:56.821 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 04:53:05.812 00:00:10.494 TCP 1.101.0.1:3000 -> 22.102.0.1:55796 10 6452 1 2025-11-08 04:53:06.263 00:00:10.365 TCP 23.104.0.1:39968 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:48:57.432 00:05:56.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 04:54:21.365 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 04:54:06.674 00:00:10.367 TCP 23.104.0.1:57640 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:54:06.339 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58746 10 6452 1 2025-11-08 04:54:21.243 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 04:55:06.552 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43646 10 6452 1 2025-11-08 04:55:07.096 00:00:10.361 TCP 23.104.0.1:59842 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:56:06.763 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37418 10 6452 1 2025-11-08 04:56:07.499 00:00:10.368 TCP 23.104.0.1:54740 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:57:06.979 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54618 10 6452 1 2025-11-08 04:57:07.907 00:00:10.331 TCP 23.104.0.1:59444 -> 1.101.0.1:3000 12 1559 1 2025-11-08 04:58:08.278 00:00:10.322 TCP 23.104.0.1:58250 -> 1.101.0.1:3000 11 1507 1 2025-11-08 04:58:07.215 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40192 10 6452 1 Summary: total flows: 162, total bytes: 494887, total packets: 1560, avg bps: 1025, avg pps: 0, avg bpp: 317 Time window: 2025-11-08 03:53:57 - 2025-11-08 04:58:18 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0041s User: 0.0021s Wall: 0.0029s flows/second: 56131.9 Runtime: 0.0029s