Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 11:53:57.557 00:05:56.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 11:59:00.473 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37878 10 6452 1 2025-11-08 11:59:00.974 00:00:10.374 TCP 23.104.0.1:35562 -> 1.101.0.1:3000 11 1507 1 2025-11-08 11:59:29.651 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 11:59:29.708 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 11:54:57.556 00:05:56.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 12:00:00.688 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43378 10 6452 1 2025-11-08 12:00:01.390 00:00:10.321 TCP 23.104.0.1:38948 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:01:00.902 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36910 10 6452 1 2025-11-08 12:01:01.748 00:00:10.396 TCP 23.104.0.1:45662 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:02:01.083 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48624 10 6452 1 2025-11-08 12:02:02.179 00:00:10.365 TCP 23.104.0.1:49540 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:03:01.298 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33068 10 6452 1 2025-11-08 12:03:02.582 00:00:10.368 TCP 23.104.0.1:48068 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:04:01.513 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58632 10 6452 1 2025-11-08 12:04:02.984 00:00:10.324 TCP 23.104.0.1:35128 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:04:30.043 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 12:04:30.187 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 11:59:57.560 00:05:56.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 12:05:01.733 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32878 10 6452 1 2025-11-08 12:05:03.348 00:00:10.364 TCP 23.104.0.1:51050 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:00:57.557 00:05:56.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 12:06:03.754 00:00:22.785 TCP 23.104.0.1:53298 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:06:01.947 00:00:24.503 TCP 1.101.0.1:3000 -> 22.102.0.1:50406 10 6452 1 2025-11-08 12:07:16.497 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49496 10 6452 1 2025-11-08 12:07:16.600 00:00:10.324 TCP 23.104.0.1:46232 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:08:16.725 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:36372 10 6452 1 2025-11-08 12:08:16.963 00:00:10.374 TCP 23.104.0.1:36882 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:09:16.915 00:00:10.860 TCP 1.101.0.1:3000 -> 22.102.0.1:35114 10 6452 1 2025-11-08 12:09:29.978 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 12:09:17.380 00:00:10.488 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:09:29.924 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 12:10:17.824 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42268 10 6452 1 2025-11-08 12:10:17.920 00:00:10.330 TCP 23.104.0.1:34390 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:05:57.564 00:05:56.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 12:11:18.289 00:00:10.364 TCP 23.104.0.1:41408 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:11:18.083 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51916 10 6452 1 2025-11-08 12:06:57.561 00:05:56.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 12:12:18.261 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55018 10 6452 1 2025-11-08 12:12:18.693 00:00:10.324 TCP 23.104.0.1:42632 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:13:18.475 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38982 10 6452 1 2025-11-08 12:13:19.087 00:00:10.362 TCP 23.104.0.1:51178 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:14:30.366 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 12:14:18.691 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42226 10 6452 1 2025-11-08 12:14:30.451 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 12:14:19.487 00:00:10.328 TCP 23.104.0.1:54762 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:15:19.854 00:00:10.384 TCP 23.104.0.1:39038 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:15:18.903 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53466 10 6452 1 2025-11-08 12:16:20.276 00:00:10.336 TCP 23.104.0.1:52832 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:16:19.121 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34816 10 6452 1 2025-11-08 12:11:57.567 00:05:56.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 12:17:20.648 00:00:10.365 TCP 23.104.0.1:48010 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:17:19.334 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39544 10 6452 1 2025-11-08 12:12:57.563 00:05:56.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 12:18:19.554 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55740 10 6452 1 2025-11-08 12:18:21.055 00:00:10.365 TCP 23.104.0.1:36452 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:19:19.778 00:00:10.507 TCP 1.101.0.1:3000 -> 22.102.0.1:60202 10 6452 1 2025-11-08 12:19:30.021 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 12:19:30.041 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 12:19:21.463 00:00:10.327 TCP 23.104.0.1:52072 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:20:20.325 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43718 10 6452 1 2025-11-08 12:20:21.829 00:00:10.377 TCP 23.104.0.1:41958 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:21:20.540 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53190 10 6452 1 2025-11-08 12:21:22.247 00:00:10.329 TCP 23.104.0.1:33600 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:22:20.756 00:00:11.550 TCP 1.101.0.1:3000 -> 22.102.0.1:60264 10 6452 1 2025-11-08 12:22:22.619 00:00:10.365 TCP 23.104.0.1:58938 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:17:57.568 00:05:56.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 12:23:22.341 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46216 10 6452 1 2025-11-08 12:23:23.021 00:00:10.366 TCP 23.104.0.1:49240 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:18:57.563 00:05:56.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 12:24:30.188 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 12:24:30.231 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 12:24:23.421 00:00:10.325 TCP 23.104.0.1:42524 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:24:22.562 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37938 10 6452 1 2025-11-08 12:25:22.777 00:00:10.473 TCP 1.101.0.1:3000 -> 22.102.0.1:58532 10 6452 1 2025-11-08 12:25:23.788 00:00:10.363 TCP 23.104.0.1:47062 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:26:24.197 00:00:10.367 TCP 23.104.0.1:56150 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:26:23.286 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59562 10 6452 1 2025-11-08 12:27:23.511 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42680 10 6452 1 2025-11-08 12:27:24.594 00:00:10.366 TCP 23.104.0.1:36346 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:28:23.726 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33880 10 6452 1 2025-11-08 12:28:25.001 00:00:11.696 TCP 23.104.0.1:58510 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:23:57.567 00:05:56.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 12:29:30.420 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 12:29:30.211 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 12:29:23.941 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:54164 10 6452 1 2025-11-08 12:29:26.742 00:00:10.370 TCP 23.104.0.1:56696 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:24:57.564 00:05:56.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 12:30:24.200 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40586 10 6452 1 2025-11-08 12:30:27.149 00:00:10.363 TCP 23.104.0.1:46366 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:31:24.415 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:49542 10 6452 1 2025-11-08 12:31:27.551 00:00:10.333 TCP 23.104.0.1:45804 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:32:24.658 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58002 10 6452 1 2025-11-08 12:32:27.918 00:00:10.380 TCP 23.104.0.1:60548 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:33:24.866 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33990 10 6452 1 2025-11-08 12:33:28.340 00:00:10.364 TCP 23.104.0.1:53352 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:34:30.568 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 12:34:30.365 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 12:34:25.090 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37762 10 6452 1 2025-11-08 12:34:28.747 00:00:10.364 TCP 23.104.0.1:56438 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:29:57.568 00:05:56.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 12:35:25.307 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47528 10 6452 1 2025-11-08 12:35:29.153 00:00:10.331 TCP 23.104.0.1:36316 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:30:57.566 00:05:56.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 12:36:25.542 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55478 10 6452 1 2025-11-08 12:36:29.551 00:00:10.375 TCP 23.104.0.1:53482 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:37:25.716 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33778 10 6452 1 2025-11-08 12:37:29.962 00:00:10.364 TCP 23.104.0.1:38472 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:38:25.928 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:47302 10 6452 1 2025-11-08 12:38:30.367 00:00:21.721 TCP 23.104.0.1:60788 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:39:30.614 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 12:39:30.510 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 12:39:26.127 00:00:10.299 TCP 1.101.0.1:3000 -> 22.102.0.1:60668 10 6452 1 2025-11-08 12:39:42.153 00:00:10.369 TCP 23.104.0.1:51458 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:40:26.466 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42912 10 6452 1 2025-11-08 12:35:57.570 00:05:56.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 12:40:42.564 00:00:10.371 TCP 23.104.0.1:42204 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:41:26.676 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38974 10 6452 1 2025-11-08 12:36:57.569 00:05:56.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 12:41:42.975 00:00:10.374 TCP 23.104.0.1:58586 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:42:26.891 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42626 10 6452 1 2025-11-08 12:42:43.382 00:00:10.363 TCP 23.104.0.1:34880 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:43:27.111 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58114 10 6452 1 2025-11-08 12:43:43.785 00:00:10.325 TCP 23.104.0.1:52946 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:44:30.711 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 12:44:30.644 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 12:44:27.333 00:00:10.564 TCP 1.101.0.1:3000 -> 22.102.0.1:36898 10 6452 1 2025-11-08 12:44:44.146 00:00:10.360 TCP 23.104.0.1:60516 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:45:27.934 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:47220 10 6452 1 2025-11-08 12:45:44.549 00:00:10.329 TCP 23.104.0.1:49280 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:46:28.191 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:59354 10 6452 1 2025-11-08 12:46:44.914 00:00:10.372 TCP 23.104.0.1:48190 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:41:57.571 00:05:56.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 12:47:28.396 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59662 10 6452 1 2025-11-08 12:47:45.322 00:00:10.360 TCP 23.104.0.1:47900 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:42:57.567 00:05:56.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 12:48:28.620 00:00:10.317 TCP 1.101.0.1:3000 -> 22.102.0.1:59490 10 6452 1 2025-11-08 12:48:45.722 00:00:10.327 TCP 23.104.0.1:33868 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:49:30.958 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 12:49:31.138 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 12:49:28.977 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:46052 10 6452 1 2025-11-08 12:49:46.110 00:00:10.383 TCP 23.104.0.1:43926 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:50:29.239 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59428 10 6452 1 2025-11-08 12:50:46.532 00:00:10.368 TCP 23.104.0.1:47648 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:51:29.460 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:39030 10 6452 1 2025-11-08 12:51:46.941 00:00:10.368 TCP 23.104.0.1:51358 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:52:29.645 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54502 10 6452 1 2025-11-08 12:47:57.573 00:05:56.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 12:52:47.349 00:00:10.372 TCP 23.104.0.1:44656 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:53:29.881 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35894 10 6452 1 2025-11-08 12:48:57.571 00:05:56.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 12:53:47.753 00:00:10.360 TCP 23.104.0.1:38126 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:54:30.639 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 12:54:30.695 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 12:54:30.112 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49720 10 6452 1 2025-11-08 12:54:48.151 00:00:10.364 TCP 23.104.0.1:39166 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:55:30.335 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36384 10 6452 1 2025-11-08 12:55:48.553 00:00:10.414 TCP 23.104.0.1:42200 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:56:30.547 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35260 10 6452 1 2025-11-08 12:56:49.011 00:00:10.368 TCP 23.104.0.1:56918 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:57:30.784 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60556 10 6452 1 2025-11-08 12:57:49.419 00:00:10.326 TCP 23.104.0.1:60856 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:58:31.005 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:55918 10 6452 1 Summary: total flows: 163, total bytes: 496841, total packets: 1561, avg bps: 1023, avg pps: 0, avg bpp: 318 Time window: 2025-11-08 11:53:57 - 2025-11-08 12:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0046s User: 0.0000s Wall: 0.0015s flows/second: 105293.6 Runtime: 0.0016s