Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 09:53:58.564 00:05:56.658 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 09:59:01.420 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33858 10 6452 1 2025-11-10 09:59:10.189 00:00:10.318 TCP 23.104.0.1:56838 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:00:01.642 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53588 10 6452 1 2025-11-10 10:00:10.551 00:00:10.322 TCP 23.104.0.1:46238 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:00:25.201 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 10:00:25.122 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 10:01:01.854 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49720 10 6452 1 2025-11-10 10:01:10.914 00:00:10.363 TCP 23.104.0.1:37014 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:02:02.082 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51926 10 6452 1 2025-11-10 10:02:11.316 00:00:10.326 TCP 23.104.0.1:36170 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:03:02.258 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43630 10 6452 1 2025-11-10 10:03:11.682 00:00:10.324 TCP 23.104.0.1:48788 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:58:58.568 00:05:56.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 10:04:02.471 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55400 10 6452 1 2025-11-10 10:04:12.056 00:00:10.364 TCP 23.104.0.1:40168 -> 1.101.0.1:3000 11 1507 1 2025-11-10 09:59:58.565 00:05:56.658 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 10:05:02.643 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44740 10 6452 1 2025-11-10 10:05:25.589 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 10:05:25.618 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 10:05:12.465 00:00:10.365 TCP 23.104.0.1:43622 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:06:02.849 00:00:10.123 TCP 1.101.0.1:3000 -> 22.102.0.1:60624 10 6452 1 2025-11-10 10:06:12.870 00:00:10.363 TCP 23.104.0.1:45280 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:07:03.012 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33386 10 6452 1 2025-11-10 10:07:13.271 00:00:10.327 TCP 23.104.0.1:51698 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:08:03.227 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44746 10 6452 1 2025-11-10 10:08:13.639 00:00:10.337 TCP 23.104.0.1:57480 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:09:03.443 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47624 10 6452 1 2025-11-10 10:09:14.020 00:00:10.319 TCP 23.104.0.1:46548 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:04:58.569 00:05:56.652 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 10:10:03.653 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58434 10 6452 1 2025-11-10 10:10:25.461 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 10:10:14.380 00:00:10.363 TCP 23.104.0.1:48990 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:10:25.465 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 10:05:58.567 00:05:56.657 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 10:11:03.827 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:56098 10 6452 1 2025-11-10 10:11:14.782 00:00:10.327 TCP 23.104.0.1:51594 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:12:04.038 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45940 10 6452 1 2025-11-10 10:12:15.147 00:00:10.363 TCP 23.104.0.1:44536 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:13:04.253 00:00:10.785 TCP 1.101.0.1:3000 -> 22.102.0.1:51254 10 6452 1 2025-11-10 10:13:15.551 00:00:10.370 TCP 23.104.0.1:48558 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:14:05.079 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42778 10 6452 1 2025-11-10 10:14:15.958 00:00:10.379 TCP 23.104.0.1:45792 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:15:05.294 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:41536 10 6452 1 2025-11-10 10:15:25.713 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 10:15:16.373 00:00:10.327 TCP 23.104.0.1:46458 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:15:25.549 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 10:10:58.571 00:05:56.652 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 10:16:05.458 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36080 10 6452 1 2025-11-10 10:16:16.738 00:00:10.367 TCP 23.104.0.1:51044 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:11:58.568 00:05:56.657 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 10:17:05.668 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47934 10 6452 1 2025-11-10 10:17:17.143 00:00:10.328 TCP 23.104.0.1:33578 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:18:05.846 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40092 10 6452 1 2025-11-10 10:18:17.508 00:00:10.365 TCP 23.104.0.1:58458 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:19:06.082 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40110 10 6452 1 2025-11-10 10:19:17.912 00:00:10.361 TCP 23.104.0.1:60782 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:20:06.296 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34816 10 6452 1 2025-11-10 10:20:25.579 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 10:20:25.427 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 10:20:18.319 00:00:10.367 TCP 23.104.0.1:49444 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:21:06.509 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45180 10 6452 1 2025-11-10 10:21:18.727 00:00:10.367 TCP 23.104.0.1:34076 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:16:58.572 00:05:56.651 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 10:22:06.720 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34952 10 6452 1 2025-11-10 10:22:19.133 00:00:10.367 TCP 23.104.0.1:50398 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:17:58.572 00:05:56.654 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 10:23:06.931 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52794 10 6452 1 2025-11-10 10:23:19.533 00:00:10.372 TCP 23.104.0.1:42464 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:24:07.167 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52576 10 6452 1 2025-11-10 10:24:19.945 00:00:10.368 TCP 23.104.0.1:34424 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:25:25.924 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 10:25:07.380 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54192 10 6452 1 2025-11-10 10:25:26.040 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 10:25:20.348 00:00:10.326 TCP 23.104.0.1:48714 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:26:07.601 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42792 10 6452 1 2025-11-10 10:26:20.709 00:00:10.365 TCP 23.104.0.1:37484 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:27:07.769 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45332 10 6452 1 2025-11-10 10:27:21.119 00:00:10.365 TCP 23.104.0.1:41592 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:22:58.574 00:05:56.650 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 10:28:07.983 00:00:10.438 TCP 1.101.0.1:3000 -> 22.102.0.1:38554 10 6452 1 2025-11-10 10:28:21.524 00:00:10.365 TCP 23.104.0.1:56638 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:23:58.571 00:05:56.655 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 10:29:08.455 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48092 10 6452 1 2025-11-10 10:29:21.929 00:00:10.342 TCP 23.104.0.1:53538 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:30:08.669 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51734 10 6452 1 2025-11-10 10:30:25.850 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 10:30:25.824 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 10:30:22.314 00:00:10.371 TCP 23.104.0.1:54230 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:31:08.880 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58056 10 6452 1 2025-11-10 10:31:22.717 00:00:10.379 TCP 23.104.0.1:32962 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:32:09.115 00:00:10.703 TCP 1.101.0.1:3000 -> 22.102.0.1:57638 10 6452 1 2025-11-10 10:32:23.132 00:00:11.133 TCP 23.104.0.1:49512 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:33:09.855 00:00:10.290 TCP 1.101.0.1:3000 -> 22.102.0.1:41088 15 14344 1 2025-11-10 10:33:24.299 00:00:10.518 TCP 23.104.0.1:35144 -> 1.101.0.1:3000 17 2241 1 2025-11-10 10:28:58.587 00:05:56.637 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 10:34:10.187 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:34732 11 6504 1 2025-11-10 10:34:24.860 00:00:10.374 TCP 23.104.0.1:41770 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:29:58.584 00:05:56.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 10:35:10.453 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41846 10 6452 1 2025-11-10 10:35:25.697 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 10:35:25.893 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 10:35:25.270 00:00:10.376 TCP 23.104.0.1:52410 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:36:10.660 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:36518 10 6452 1 2025-11-10 10:36:25.684 00:00:10.764 TCP 23.104.0.1:55104 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:37:10.868 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60042 10 6452 1 2025-11-10 10:37:26.509 00:00:10.368 TCP 23.104.0.1:57960 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:38:11.091 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60616 10 6452 1 2025-11-10 10:38:26.922 00:00:10.388 TCP 23.104.0.1:57282 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:39:11.265 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41190 10 6452 1 2025-11-10 10:39:27.345 00:00:10.367 TCP 23.104.0.1:55972 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:34:58.589 00:05:56.636 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 10:40:11.478 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32878 10 6452 1 2025-11-10 10:40:25.921 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 10:40:25.984 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 10:40:27.749 00:00:10.367 TCP 23.104.0.1:36424 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:35:58.587 00:05:56.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 10:41:11.688 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47916 10 6452 1 2025-11-10 10:41:28.147 00:00:10.361 TCP 23.104.0.1:57514 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:42:11.902 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55518 10 6452 1 2025-11-10 10:42:28.553 00:00:10.319 TCP 23.104.0.1:46676 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:43:12.120 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42762 10 6452 1 2025-11-10 10:43:28.921 00:00:10.383 TCP 23.104.0.1:51536 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:44:12.327 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54086 10 6452 1 2025-11-10 10:44:29.344 00:00:10.365 TCP 23.104.0.1:42930 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:45:25.954 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 10:45:12.535 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 10 6452 1 2025-11-10 10:45:25.917 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 10:45:29.746 00:00:10.363 TCP 23.104.0.1:60326 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:40:58.590 00:05:56.637 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 10:46:12.752 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44550 10 6452 1 2025-11-10 10:46:30.146 00:00:10.368 TCP 23.104.0.1:47706 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:41:58.589 00:05:56.643 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 10:47:12.979 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:59438 10 6452 1 2025-11-10 10:47:30.551 00:00:10.364 TCP 23.104.0.1:43522 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:48:13.224 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41528 10 6452 1 2025-11-10 10:48:30.951 00:00:10.366 TCP 23.104.0.1:60904 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:49:13.435 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43692 10 6452 1 2025-11-10 10:49:31.359 00:00:10.366 TCP 23.104.0.1:44452 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:50:25.972 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 10:50:13.647 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38388 10 6452 1 2025-11-10 10:50:25.985 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 10:50:31.761 00:00:10.379 TCP 23.104.0.1:33108 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:51:13.824 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42838 10 6452 1 2025-11-10 10:51:32.179 00:00:10.324 TCP 23.104.0.1:43150 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:46:58.592 00:05:56.638 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 10:52:14.077 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35176 10 6452 1 2025-11-10 10:52:32.543 00:00:10.364 TCP 23.104.0.1:52404 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:47:58.590 00:05:56.643 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 10:53:14.249 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54156 10 6452 1 2025-11-10 10:53:32.947 00:00:10.370 TCP 23.104.0.1:33566 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:54:14.471 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43928 10 6452 1 2025-11-10 10:54:33.379 00:00:10.362 TCP 23.104.0.1:50784 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:55:14.639 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58074 10 6452 1 2025-11-10 10:55:25.982 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 10:55:26.637 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 10:55:33.782 00:00:10.327 TCP 23.104.0.1:43490 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:56:14.855 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38040 10 6452 1 2025-11-10 10:56:34.142 00:00:10.364 TCP 23.104.0.1:44780 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:57:15.073 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45768 10 6452 1 2025-11-10 10:57:34.542 00:00:10.327 TCP 23.104.0.1:33360 -> 1.101.0.1:3000 11 1507 1 2025-11-10 10:52:58.593 00:05:56.638 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 10:58:15.287 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44122 10 6452 1 2025-11-10 10:58:34.907 00:00:10.363 TCP 23.104.0.1:51292 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507026, total packets: 1584, avg bps: 1040, avg pps: 0, avg bpp: 320 Time window: 2025-11-10 09:53:58 - 2025-11-10 10:58:55 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0010s User: 0.0042s Wall: 0.0023s flows/second: 70262.1 Runtime: 0.0024s