Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 03:53:57.867 00:05:56.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 03:59:15.683 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41366 10 6452 1 2025-11-09 03:59:14.910 00:00:10.363 TCP 23.104.0.1:34158 -> 1.101.0.1:3000 11 1507 1 2025-11-09 03:59:49.281 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 03:59:49.104 00:00:00.049 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 03:54:57.864 00:05:56.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 04:00:15.899 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42800 10 6452 1 2025-11-09 04:00:15.311 00:00:10.366 TCP 23.104.0.1:50620 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:01:15.719 00:00:10.376 TCP 23.104.0.1:60928 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:01:16.116 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57012 10 6452 1 2025-11-09 04:02:16.343 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46814 10 6452 1 2025-11-09 04:02:16.131 00:00:10.372 TCP 23.104.0.1:53048 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:03:16.543 00:00:11.633 TCP 23.104.0.1:44598 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:03:16.562 00:00:11.519 TCP 1.101.0.1:3000 -> 22.102.0.1:34396 10 6452 1 2025-11-09 04:04:18.121 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46650 10 6452 1 2025-11-09 04:04:18.213 00:00:10.359 TCP 23.104.0.1:52262 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:04:49.210 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 04:04:49.226 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 03:59:57.870 00:05:56.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 04:05:18.337 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59624 10 6452 1 2025-11-09 04:05:18.607 00:00:10.374 TCP 23.104.0.1:60068 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:00:57.867 00:05:56.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 04:06:18.549 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53174 10 6452 1 2025-11-09 04:06:19.018 00:00:11.121 TCP 23.104.0.1:48054 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:07:20.180 00:00:10.368 TCP 23.104.0.1:38026 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:07:18.764 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:42304 10 6452 1 2025-11-09 04:08:20.590 00:00:10.373 TCP 23.104.0.1:60848 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:08:18.947 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:40910 10 6452 1 2025-11-09 04:09:19.147 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39540 10 6452 1 2025-11-09 04:09:21.003 00:00:10.367 TCP 23.104.0.1:48776 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:09:49.222 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 04:09:49.325 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 04:10:19.324 00:00:10.497 TCP 1.101.0.1:3000 -> 22.102.0.1:50066 10 6452 1 2025-11-09 04:10:21.410 00:00:10.898 TCP 23.104.0.1:53140 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:05:57.872 00:05:56.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 04:11:19.860 00:00:11.086 TCP 1.101.0.1:3000 -> 22.102.0.1:56906 11 6504 1 2025-11-09 04:11:22.345 00:00:10.970 TCP 23.104.0.1:56230 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:06:57.868 00:05:56.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 04:12:20.989 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36420 10 6452 1 2025-11-09 04:12:23.354 00:00:10.364 TCP 23.104.0.1:45002 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:13:21.212 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48988 10 6452 1 2025-11-09 04:13:23.758 00:00:10.384 TCP 23.104.0.1:33202 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:14:21.432 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37072 10 6452 1 2025-11-09 04:14:24.177 00:00:10.369 TCP 23.104.0.1:41206 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:14:49.522 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 04:14:49.275 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 04:15:21.651 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48430 10 6452 1 2025-11-09 04:15:24.590 00:00:10.361 TCP 23.104.0.1:45766 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:16:24.993 00:00:10.364 TCP 23.104.0.1:40814 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:16:21.877 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:59144 10 6452 1 2025-11-09 04:11:57.873 00:05:56.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 04:17:22.154 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56860 10 6452 1 2025-11-09 04:17:25.397 00:00:10.367 TCP 23.104.0.1:44332 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:12:57.871 00:05:56.817 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 04:18:25.802 00:00:10.332 TCP 23.104.0.1:41674 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:18:22.384 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37410 10 6452 1 2025-11-09 04:19:26.172 00:00:10.368 TCP 23.104.0.1:54126 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:19:22.598 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:45624 10 6452 1 2025-11-09 04:19:49.626 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 04:19:49.584 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 04:20:26.578 00:00:10.387 TCP 23.104.0.1:54068 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:20:22.783 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50818 10 6452 1 2025-11-09 04:21:23.016 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41536 10 6452 1 2025-11-09 04:21:27.003 00:00:10.354 TCP 23.104.0.1:60748 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:22:23.234 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51800 10 6452 1 2025-11-09 04:22:27.402 00:00:10.374 TCP 23.104.0.1:57408 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:17:57.875 00:05:56.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 04:23:23.451 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46650 10 6452 1 2025-11-09 04:23:27.818 00:00:10.366 TCP 23.104.0.1:60218 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:18:57.872 00:05:56.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 04:24:23.670 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:51618 10 6452 1 2025-11-09 04:24:28.221 00:00:10.364 TCP 23.104.0.1:46646 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:24:49.287 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 04:24:49.408 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 04:25:23.915 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:37044 10 6452 1 2025-11-09 04:25:28.625 00:00:10.368 TCP 23.104.0.1:60882 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:26:24.112 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38130 10 6452 1 2025-11-09 04:26:29.034 00:00:10.368 TCP 23.104.0.1:52718 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:27:24.331 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:49570 10 6452 1 2025-11-09 04:27:29.438 00:00:10.367 TCP 23.104.0.1:37788 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:28:24.561 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40156 10 6452 1 2025-11-09 04:28:29.848 00:00:10.387 TCP 23.104.0.1:48060 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:23:57.878 00:05:56.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 04:29:24.793 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49606 10 6452 1 2025-11-09 04:29:30.275 00:00:10.327 TCP 23.104.0.1:34422 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:29:49.536 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 04:29:49.563 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 04:24:57.875 00:05:56.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 04:30:24.974 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37182 10 6452 1 2025-11-09 04:30:30.641 00:00:10.364 TCP 23.104.0.1:39286 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:31:25.206 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34456 10 6452 1 2025-11-09 04:31:31.052 00:00:10.362 TCP 23.104.0.1:60094 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:32:25.383 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57586 10 6452 1 2025-11-09 04:32:31.453 00:00:10.362 TCP 23.104.0.1:42338 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:33:25.601 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53502 10 6452 1 2025-11-09 04:33:31.857 00:00:10.376 TCP 23.104.0.1:56708 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:34:25.814 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58260 10 6452 1 2025-11-09 04:34:32.271 00:00:10.363 TCP 23.104.0.1:52190 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:34:49.676 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 04:34:49.848 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 04:29:57.879 00:05:56.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 04:35:26.033 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54374 10 6452 1 2025-11-09 04:35:32.680 00:00:10.372 TCP 23.104.0.1:54796 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:30:57.876 00:05:56.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 04:36:26.248 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40896 10 6452 1 2025-11-09 04:36:33.098 00:00:10.365 TCP 23.104.0.1:49254 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:37:26.459 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40592 10 6452 1 2025-11-09 04:37:33.502 00:00:10.373 TCP 23.104.0.1:53586 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:38:26.672 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56276 10 6452 1 2025-11-09 04:38:33.906 00:00:10.369 TCP 23.104.0.1:52676 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:39:26.888 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59088 10 6452 1 2025-11-09 04:39:34.313 00:00:10.363 TCP 23.104.0.1:56724 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:39:49.982 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 04:39:49.914 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 04:40:27.105 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44060 10 6452 1 2025-11-09 04:40:34.711 00:00:10.373 TCP 23.104.0.1:47144 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:35:57.879 00:05:56.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 04:41:27.314 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58596 10 6452 1 2025-11-09 04:41:35.122 00:00:10.363 TCP 23.104.0.1:59174 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:36:57.878 00:05:56.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 04:42:27.519 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35884 10 6452 1 2025-11-09 04:42:35.526 00:00:10.370 TCP 23.104.0.1:41646 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:43:27.740 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:36608 10 6452 1 2025-11-09 04:43:35.934 00:00:10.386 TCP 23.104.0.1:35506 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:44:27.932 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54358 10 6452 1 2025-11-09 04:44:36.359 00:00:10.362 TCP 23.104.0.1:57366 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:44:50.004 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 04:44:49.993 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 04:45:28.169 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34724 10 6452 1 2025-11-09 04:45:36.757 00:00:10.386 TCP 23.104.0.1:36660 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:46:28.400 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46656 10 6452 1 2025-11-09 04:46:37.182 00:00:10.368 TCP 23.104.0.1:50164 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:41:57.882 00:05:56.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 04:47:28.607 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38148 10 6452 1 2025-11-09 04:47:37.589 00:00:10.365 TCP 23.104.0.1:45202 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:42:57.879 00:05:56.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 04:48:28.822 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60178 10 6452 1 2025-11-09 04:48:37.991 00:00:10.368 TCP 23.104.0.1:53388 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:49:29.043 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41200 10 6452 1 2025-11-09 04:49:49.971 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 04:49:38.394 00:00:10.617 TCP 23.104.0.1:44794 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:49:49.913 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 04:50:29.271 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36584 10 6452 1 2025-11-09 04:50:39.053 00:00:10.363 TCP 23.104.0.1:58868 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:51:29.481 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44958 10 6452 1 2025-11-09 04:51:39.460 00:00:10.370 TCP 23.104.0.1:47402 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:52:29.707 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37106 10 6452 1 2025-11-09 04:52:39.862 00:00:10.375 TCP 23.104.0.1:44780 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:47:57.883 00:05:56.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 04:53:29.927 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:55658 10 6452 1 2025-11-09 04:53:40.277 00:00:10.375 TCP 23.104.0.1:43084 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:48:57.880 00:05:56.818 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 04:54:30.173 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:59056 10 6452 1 2025-11-09 04:54:50.285 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 04:54:50.176 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 04:54:40.686 00:00:10.376 TCP 23.104.0.1:42020 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:55:30.356 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59892 10 6452 1 2025-11-09 04:55:41.131 00:00:10.367 TCP 23.104.0.1:40804 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:56:30.570 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44978 10 6452 1 2025-11-09 04:56:41.535 00:00:10.365 TCP 23.104.0.1:48078 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:57:30.785 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53600 10 6452 1 2025-11-09 04:57:41.941 00:00:10.333 TCP 23.104.0.1:48398 -> 1.101.0.1:3000 11 1507 1 2025-11-09 04:58:31.000 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50046 10 6452 1 Summary: total flows: 163, total bytes: 496893, total packets: 1562, avg bps: 1023, avg pps: 0, avg bpp: 318 Time window: 2025-11-09 03:53:57 - 2025-11-09 04:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0022s User: 0.0033s Wall: 0.0044s flows/second: 36869.5 Runtime: 0.0044s