Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 22:53:58.320 00:05:56.718 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 22:59:10.960 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48348 10 6452 1 2025-11-09 22:59:23.806 00:00:10.361 TCP 23.104.0.1:50744 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:00:12.219 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 23:00:12.281 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 23:00:11.193 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50928 10 6452 1 2025-11-09 23:00:24.207 00:00:10.892 TCP 23.104.0.1:40098 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:01:11.408 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52972 10 6452 1 2025-11-09 23:01:25.154 00:00:10.362 TCP 23.104.0.1:40728 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:02:11.583 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36562 10 6452 1 2025-11-09 23:02:25.555 00:00:10.364 TCP 23.104.0.1:42248 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:03:11.817 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41788 10 6452 1 2025-11-09 23:03:25.960 00:00:10.365 TCP 23.104.0.1:52540 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:58:58.325 00:05:56.716 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 23:04:12.039 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45766 10 6452 1 2025-11-09 23:04:26.361 00:00:10.357 TCP 23.104.0.1:52100 -> 1.101.0.1:3000 11 1507 1 2025-11-09 22:59:58.321 00:05:56.722 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 23:05:11.945 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 23:05:11.901 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 23:05:12.211 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36202 10 6452 1 2025-11-09 23:05:26.757 00:00:10.378 TCP 23.104.0.1:35206 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:06:12.430 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53454 10 6452 1 2025-11-09 23:06:27.170 00:00:10.373 TCP 23.104.0.1:42582 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:07:12.650 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58608 10 6452 1 2025-11-09 23:07:27.579 00:00:10.363 TCP 23.104.0.1:59756 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:08:12.866 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53182 10 6452 1 2025-11-09 23:08:27.981 00:00:10.362 TCP 23.104.0.1:38510 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:09:13.079 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54486 10 6452 1 2025-11-09 23:09:28.383 00:00:10.326 TCP 23.104.0.1:58278 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:04:58.325 00:05:56.718 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 23:10:12.022 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 23:10:12.149 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 23:10:13.303 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:56582 10 6452 1 2025-11-09 23:10:28.753 00:00:10.378 TCP 23.104.0.1:54654 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:05:58.322 00:05:56.724 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 23:11:13.486 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33164 10 6452 1 2025-11-09 23:11:29.164 00:00:10.362 TCP 23.104.0.1:34824 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:12:13.701 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58386 10 6452 1 2025-11-09 23:12:29.567 00:00:10.325 TCP 23.104.0.1:57046 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:13:13.876 00:00:10.821 TCP 1.101.0.1:3000 -> 22.102.0.1:50496 10 6452 1 2025-11-09 23:13:29.930 00:00:10.386 TCP 23.104.0.1:45338 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:14:14.741 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56902 10 6452 1 2025-11-09 23:14:30.352 00:00:10.366 TCP 23.104.0.1:38218 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:15:12.143 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 23:15:12.378 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 23:15:14.961 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:59966 13 6608 1 2025-11-09 23:15:30.752 00:00:10.341 TCP 23.104.0.1:40808 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:10:58.326 00:05:56.719 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 23:16:15.224 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43190 10 6452 1 2025-11-09 23:16:31.139 00:00:10.366 TCP 23.104.0.1:42422 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:11:58.324 00:05:56.724 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 23:17:15.434 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59728 10 6452 1 2025-11-09 23:17:31.539 00:00:10.366 TCP 23.104.0.1:50532 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:18:15.641 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54384 10 6452 1 2025-11-09 23:18:31.943 00:00:10.369 TCP 23.104.0.1:34154 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:19:15.853 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34252 10 6452 1 2025-11-09 23:19:32.350 00:00:10.365 TCP 23.104.0.1:44970 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:20:12.149 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 23:20:12.399 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 23:20:16.078 00:00:11.451 TCP 1.101.0.1:3000 -> 22.102.0.1:38202 10 6452 1 2025-11-09 23:20:32.753 00:00:10.349 TCP 23.104.0.1:48698 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:21:17.565 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41188 10 6452 1 2025-11-09 23:21:33.124 00:00:10.324 TCP 23.104.0.1:47664 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:16:58.328 00:05:56.726 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 23:22:17.791 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36758 10 6452 1 2025-11-09 23:22:33.479 00:00:10.370 TCP 23.104.0.1:57678 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:17:58.324 00:05:56.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 23:23:18.013 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42012 10 6452 1 2025-11-09 23:23:33.885 00:00:10.385 TCP 23.104.0.1:60032 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:24:18.254 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59774 10 6452 1 2025-11-09 23:24:34.311 00:00:10.323 TCP 23.104.0.1:37244 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:25:12.465 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 23:25:12.498 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 23:25:18.491 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49254 10 6452 1 2025-11-09 23:25:34.671 00:00:10.363 TCP 23.104.0.1:36768 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:26:18.705 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59418 10 6452 1 2025-11-09 23:26:35.095 00:00:10.322 TCP 23.104.0.1:48614 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:27:18.919 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37094 10 6452 1 2025-11-09 23:27:35.454 00:00:10.364 TCP 23.104.0.1:51166 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:22:58.328 00:05:56.727 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 23:28:19.128 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57660 10 6452 1 2025-11-09 23:28:35.854 00:00:10.374 TCP 23.104.0.1:46472 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:23:58.326 00:05:56.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 23:29:19.342 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53146 10 6452 1 2025-11-09 23:29:36.269 00:00:10.366 TCP 23.104.0.1:51560 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:30:12.614 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 23:30:12.539 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 23:30:19.522 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45922 10 6452 1 2025-11-09 23:30:36.674 00:00:10.379 TCP 23.104.0.1:37630 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:31:19.738 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54046 10 6452 1 2025-11-09 23:31:37.101 00:00:10.370 TCP 23.104.0.1:56968 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:32:19.956 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60672 12 6556 1 2025-11-09 23:32:37.510 00:00:10.365 TCP 23.104.0.1:54142 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:33:20.183 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36254 10 6452 1 2025-11-09 23:33:37.912 00:00:10.363 TCP 23.104.0.1:33988 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:28:58.332 00:05:56.723 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 23:34:20.390 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49890 10 6452 1 2025-11-09 23:34:38.314 00:00:10.366 TCP 23.104.0.1:36422 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:29:58.331 00:05:56.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 23:35:12.704 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 23:35:12.867 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 23:35:20.563 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47888 10 6452 1 2025-11-09 23:35:38.719 00:00:10.374 TCP 23.104.0.1:39498 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:36:20.743 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42704 10 6452 1 2025-11-09 23:36:39.131 00:00:10.362 TCP 23.104.0.1:54404 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:37:20.955 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41198 10 6452 1 2025-11-09 23:37:39.531 00:00:10.366 TCP 23.104.0.1:34382 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:38:21.195 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:38858 10 6452 1 2025-11-09 23:38:39.935 00:00:10.376 TCP 23.104.0.1:46492 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:39:21.396 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:59458 10 6452 1 2025-11-09 23:39:40.353 00:00:10.364 TCP 23.104.0.1:39866 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:34:58.333 00:05:56.723 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 23:40:12.896 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 23:40:12.621 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 23:40:21.570 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41652 10 6452 1 2025-11-09 23:40:40.759 00:00:10.381 TCP 23.104.0.1:50030 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:35:58.332 00:05:56.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 23:41:21.782 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43070 10 6452 1 2025-11-09 23:41:41.177 00:00:20.294 TCP 23.104.0.1:55344 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:42:21.997 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:52542 10 6452 1 2025-11-09 23:42:51.564 00:00:10.362 TCP 23.104.0.1:60606 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:43:22.191 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57148 10 6452 1 2025-11-09 23:43:51.968 00:00:10.333 TCP 23.104.0.1:45740 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:44:22.360 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44486 10 6452 1 2025-11-09 23:44:52.341 00:00:10.319 TCP 23.104.0.1:40618 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:45:13.010 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 23:45:12.776 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 23:45:22.572 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36306 10 6452 1 2025-11-09 23:40:58.335 00:05:56.723 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 23:45:52.698 00:00:10.327 TCP 23.104.0.1:58294 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:46:22.785 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54586 10 6452 1 2025-11-09 23:41:58.333 00:05:56.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 23:46:53.062 00:00:10.370 TCP 23.104.0.1:52706 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:47:22.999 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34456 10 6452 1 2025-11-09 23:47:53.463 00:00:10.358 TCP 23.104.0.1:57114 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:48:23.214 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37450 10 6452 1 2025-11-09 23:48:53.859 00:00:10.372 TCP 23.104.0.1:51864 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:49:23.426 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56360 10 6452 1 2025-11-09 23:49:54.269 00:00:10.370 TCP 23.104.0.1:52156 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:50:12.944 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 23:50:12.847 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 23:50:23.634 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49906 10 6452 1 2025-11-09 23:50:54.671 00:00:10.379 TCP 23.104.0.1:42214 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:51:23.808 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34866 10 6452 1 2025-11-09 23:46:58.339 00:05:56.722 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 23:51:55.092 00:00:10.370 TCP 23.104.0.1:43980 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:52:24.037 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54912 10 6452 1 2025-11-09 23:47:58.336 00:05:56.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 23:52:55.501 00:00:10.362 TCP 23.104.0.1:57852 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:53:24.255 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44266 10 6452 1 2025-11-09 23:53:55.906 00:00:10.627 TCP 23.104.0.1:40058 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:54:24.471 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39532 10 6452 1 2025-11-09 23:54:56.568 00:00:10.368 TCP 23.104.0.1:54286 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:55:13.401 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 23:55:13.690 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 23:55:24.684 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47700 10 6452 1 2025-11-09 23:55:56.972 00:00:10.343 TCP 23.104.0.1:55062 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:56:24.893 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38606 10 6452 1 2025-11-09 23:56:57.351 00:00:10.365 TCP 23.104.0.1:55728 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:57:25.105 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36110 10 6452 1 2025-11-09 23:52:58.340 00:05:56.722 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 23:57:57.751 00:00:10.391 TCP 23.104.0.1:43790 -> 1.101.0.1:3000 11 1507 1 2025-11-09 23:58:25.320 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:49348 10 6452 1 Summary: total flows: 163, total bytes: 497101, total packets: 1566, avg bps: 1020, avg pps: 0, avg bpp: 317 Time window: 2025-11-09 22:53:58 - 2025-11-09 23:58:55 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0032s User: 0.0021s Wall: 0.0027s flows/second: 61047.6 Runtime: 0.0027s