Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 05:53:58.475 00:05:56.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 05:58:51.684 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:44532 10 6452 1 2025-11-10 05:59:31.178 00:00:10.363 TCP 23.104.0.1:45424 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:59:51.913 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42988 10 6452 1 2025-11-10 06:00:20.281 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 06:00:20.355 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 06:00:31.578 00:00:10.366 TCP 23.104.0.1:36314 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:00:52.125 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:37568 10 6452 1 2025-11-10 06:01:31.980 00:00:10.333 TCP 23.104.0.1:53998 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:01:52.294 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34756 10 6452 1 2025-11-10 06:02:32.353 00:00:10.367 TCP 23.104.0.1:43784 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:02:52.507 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37848 10 6452 1 2025-11-10 06:03:32.756 00:00:10.640 TCP 23.104.0.1:45428 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:58:58.479 00:05:56.686 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 06:03:52.732 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36826 10 6452 1 2025-11-10 06:04:33.432 00:00:10.372 TCP 23.104.0.1:47344 -> 1.101.0.1:3000 11 1507 1 2025-11-10 05:59:58.478 00:05:56.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 06:04:52.906 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37058 10 6452 1 2025-11-10 06:05:20.539 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 06:05:20.483 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 06:05:33.837 00:00:10.386 TCP 23.104.0.1:36482 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:05:53.121 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44964 10 6452 1 2025-11-10 06:06:34.265 00:00:10.369 TCP 23.104.0.1:46090 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:06:53.331 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54394 10 6452 1 2025-11-10 06:07:34.669 00:00:10.324 TCP 23.104.0.1:56564 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:07:53.541 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46504 10 6452 1 2025-11-10 06:08:35.032 00:00:10.361 TCP 23.104.0.1:50092 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:08:53.757 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:56958 10 6452 1 2025-11-10 06:09:35.427 00:00:10.326 TCP 23.104.0.1:35876 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:04:58.480 00:05:56.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 06:09:53.944 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:48694 10 6452 1 2025-11-10 06:10:20.469 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 06:10:20.530 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 06:10:35.796 00:00:10.368 TCP 23.104.0.1:55554 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:05:58.480 00:05:56.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 06:10:54.140 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52994 10 6452 1 2025-11-10 06:11:36.202 00:00:10.365 TCP 23.104.0.1:48332 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:11:54.360 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34272 10 6452 1 2025-11-10 06:12:36.605 00:00:10.324 TCP 23.104.0.1:55662 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:12:54.581 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56486 10 6452 1 2025-11-10 06:13:36.966 00:00:10.377 TCP 23.104.0.1:34690 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:13:54.791 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34112 10 6452 1 2025-11-10 06:14:37.389 00:00:10.373 TCP 23.104.0.1:56796 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:14:54.961 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:52204 10 6452 1 2025-11-10 06:15:20.492 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 06:15:20.745 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 06:15:37.804 00:00:10.364 TCP 23.104.0.1:42400 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:10:58.481 00:05:56.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 06:15:55.149 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45330 10 6452 1 2025-11-10 06:16:38.207 00:00:10.367 TCP 23.104.0.1:33292 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:11:58.479 00:05:56.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 06:16:55.355 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42934 10 6452 1 2025-11-10 06:17:38.613 00:00:10.356 TCP 23.104.0.1:35148 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:17:55.574 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:44840 12 10375 1 2025-11-10 06:18:39.010 00:00:10.445 TCP 23.104.0.1:34150 -> 1.101.0.1:3000 15 1926 1 2025-11-10 06:18:55.815 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33444 10 6452 1 2025-11-10 06:19:39.497 00:00:10.361 TCP 23.104.0.1:43840 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:19:56.054 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55254 10 6452 1 2025-11-10 06:20:20.908 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 06:20:20.633 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 06:20:39.900 00:00:10.371 TCP 23.104.0.1:48214 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:20:56.266 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40320 10 6452 1 2025-11-10 06:21:40.315 00:00:10.323 TCP 23.104.0.1:33222 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:16:58.483 00:05:56.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 06:21:56.481 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42108 10 6452 1 2025-11-10 06:22:40.676 00:00:10.376 TCP 23.104.0.1:39028 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:17:58.483 00:05:56.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 06:22:56.651 00:00:13.696 TCP 1.101.0.1:3000 -> 22.102.0.1:40060 10 6452 1 2025-11-10 06:23:41.096 00:00:10.364 TCP 23.104.0.1:51478 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:24:00.383 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59902 10 6452 1 2025-11-10 06:24:41.503 00:00:10.361 TCP 23.104.0.1:59950 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:25:00.556 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47488 10 6452 1 2025-11-10 06:25:20.685 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 06:25:20.972 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 06:25:41.909 00:00:10.324 TCP 23.104.0.1:51130 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:26:00.766 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60170 10 6452 1 2025-11-10 06:26:42.271 00:00:10.364 TCP 23.104.0.1:33298 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:27:00.977 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41270 10 6452 1 2025-11-10 06:22:58.486 00:05:56.684 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 06:27:42.681 00:00:10.369 TCP 23.104.0.1:33106 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:28:01.204 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46326 10 6452 1 2025-11-10 06:28:43.111 00:00:10.440 TCP 23.104.0.1:58736 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:23:58.484 00:05:56.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 06:29:01.415 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44496 10 6452 1 2025-11-10 06:29:43.590 00:00:10.369 TCP 23.104.0.1:50380 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:30:01.633 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45482 10 6452 1 2025-11-10 06:30:20.915 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 06:30:20.761 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 06:30:43.997 00:00:10.364 TCP 23.104.0.1:42712 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:31:01.843 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36578 10 6452 1 2025-11-10 06:31:44.397 00:00:10.322 TCP 23.104.0.1:54352 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:32:02.080 00:00:12.418 TCP 1.101.0.1:3000 -> 22.102.0.1:33192 10 6452 1 2025-11-10 06:32:44.763 00:00:10.381 TCP 23.104.0.1:51144 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:33:04.539 00:00:10.510 TCP 1.101.0.1:3000 -> 22.102.0.1:58010 10 6452 1 2025-11-10 06:33:45.183 00:00:10.359 TCP 23.104.0.1:45676 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:28:58.487 00:05:56.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 06:34:05.088 00:00:11.432 TCP 1.101.0.1:3000 -> 22.102.0.1:34652 10 6452 1 2025-11-10 06:34:45.578 00:00:10.364 TCP 23.104.0.1:60982 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:29:58.486 00:05:56.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 06:35:06.556 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53240 10 6452 1 2025-11-10 06:35:21.004 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 06:35:20.941 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 06:35:45.984 00:00:10.325 TCP 23.104.0.1:55728 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:36:06.770 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47106 10 6452 1 2025-11-10 06:36:46.348 00:00:10.364 TCP 23.104.0.1:44646 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:37:06.980 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:36754 10 6452 1 2025-11-10 06:37:46.753 00:00:10.388 TCP 23.104.0.1:57114 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:38:07.213 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33484 10 6452 1 2025-11-10 06:38:47.181 00:00:10.364 TCP 23.104.0.1:39108 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:39:07.426 00:00:17.943 TCP 1.101.0.1:3000 -> 22.102.0.1:44982 10 6452 1 2025-11-10 06:34:58.489 00:05:56.684 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 06:39:47.580 00:00:10.449 TCP 23.104.0.1:46198 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:40:20.961 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 06:40:20.883 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 06:40:15.407 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34466 10 6452 1 2025-11-10 06:35:58.487 00:05:56.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 06:40:48.105 00:00:10.364 TCP 23.104.0.1:43780 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:41:15.621 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45452 10 6452 1 2025-11-10 06:41:48.513 00:00:10.360 TCP 23.104.0.1:43264 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:42:15.837 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48218 10 6452 1 2025-11-10 06:42:48.914 00:00:10.363 TCP 23.104.0.1:39680 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:43:16.088 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39544 10 6452 1 2025-11-10 06:43:49.316 00:00:10.368 TCP 23.104.0.1:34002 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:44:16.261 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46366 10 6452 1 2025-11-10 06:44:49.721 00:00:10.379 TCP 23.104.0.1:51514 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:45:21.259 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 06:45:21.289 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 06:45:16.477 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36088 10 6452 1 2025-11-10 06:40:58.490 00:05:56.684 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 06:45:50.134 00:00:10.366 TCP 23.104.0.1:42514 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:46:16.696 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37394 10 6452 1 2025-11-10 06:41:58.488 00:05:56.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 06:46:50.538 00:00:10.324 TCP 23.104.0.1:37612 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:47:16.913 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51408 10 6452 1 2025-11-10 06:47:50.897 00:00:10.328 TCP 23.104.0.1:34140 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:48:17.130 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35194 10 6452 1 2025-11-10 06:48:51.269 00:00:10.369 TCP 23.104.0.1:48672 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:49:17.301 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55030 10 6452 1 2025-11-10 06:49:51.677 00:00:10.380 TCP 23.104.0.1:55384 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:50:21.749 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 06:50:21.897 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 06:50:17.517 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59244 10 6452 1 2025-11-10 06:50:52.107 00:00:10.365 TCP 23.104.0.1:59980 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:51:17.732 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49038 10 6452 1 2025-11-10 06:46:58.492 00:05:56.684 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 06:51:52.513 00:00:10.371 TCP 23.104.0.1:39984 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:52:17.965 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49146 10 6452 1 2025-11-10 06:47:58.490 00:05:56.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 06:52:52.927 00:00:10.407 TCP 23.104.0.1:37114 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:53:18.185 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37230 10 6452 1 2025-11-10 06:53:53.373 00:00:10.414 TCP 23.104.0.1:46876 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:54:18.399 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54178 10 6452 1 2025-11-10 06:54:53.827 00:00:10.377 TCP 23.104.0.1:35228 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:55:21.207 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 06:55:21.522 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 06:55:18.614 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38692 10 6452 1 2025-11-10 06:55:54.239 00:00:10.322 TCP 23.104.0.1:50678 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:56:18.833 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40888 10 6452 1 2025-11-10 06:56:54.598 00:00:10.369 TCP 23.104.0.1:44168 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:57:19.009 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47024 10 6452 1 2025-11-10 06:52:58.494 00:05:56.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 06:57:55.010 00:00:10.362 TCP 23.104.0.1:43272 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:58:19.225 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34136 10 6452 1 Summary: total flows: 163, total bytes: 501183, total packets: 1567, avg bps: 1028, avg pps: 0, avg bpp: 319 Time window: 2025-11-10 05:53:58 - 2025-11-10 06:58:55 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0010s Wall: 0.0041s flows/second: 39332.2 Runtime: 0.0042s