Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 18:53:58.778 00:05:56.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 18:58:45.408 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58886 10 6452 1 2025-11-10 18:59:13.978 00:00:10.368 TCP 23.104.0.1:47884 -> 1.101.0.1:3000 11 1507 1 2025-11-10 18:59:45.624 00:00:10.591 TCP 1.101.0.1:3000 -> 22.102.0.1:59072 10 6452 1 2025-11-10 19:00:14.382 00:00:10.365 TCP 23.104.0.1:43418 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:00:35.741 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 19:00:35.669 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:00:46.255 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57986 10 6452 1 2025-11-10 19:01:14.786 00:00:10.365 TCP 23.104.0.1:51298 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:01:46.475 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53212 10 6452 1 2025-11-10 19:02:15.189 00:00:10.364 TCP 23.104.0.1:48968 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:02:46.698 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33936 10 6452 1 2025-11-10 19:03:15.591 00:00:10.327 TCP 23.104.0.1:48336 -> 1.101.0.1:3000 11 1507 1 2025-11-10 18:58:58.782 00:05:56.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 19:03:46.917 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:39738 10 6452 1 2025-11-10 19:04:15.953 00:00:10.329 TCP 23.104.0.1:38408 -> 1.101.0.1:3000 11 1507 1 2025-11-10 18:59:58.780 00:05:56.599 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 19:04:47.115 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39304 10 6452 1 2025-11-10 19:05:16.317 00:00:10.367 TCP 23.104.0.1:59928 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:05:36.181 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:05:36.240 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 19:05:47.340 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38454 10 6452 1 2025-11-10 19:06:16.733 00:00:10.333 TCP 23.104.0.1:48440 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:06:47.562 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58574 10 6452 1 2025-11-10 19:07:17.105 00:00:10.363 TCP 23.104.0.1:56184 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:07:47.784 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35230 10 6452 1 2025-11-10 19:08:17.505 00:00:10.360 TCP 23.104.0.1:58540 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:08:47.960 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56814 12 6556 1 2025-11-10 19:09:17.903 00:00:10.330 TCP 23.104.0.1:39658 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:04:58.784 00:05:56.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 19:09:48.196 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41124 10 6452 1 2025-11-10 19:10:18.271 00:00:10.371 TCP 23.104.0.1:49100 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:10:36.265 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:10:36.061 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 19:05:58.782 00:05:56.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 19:10:48.412 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41780 10 6452 1 2025-11-10 19:11:18.680 00:00:10.366 TCP 23.104.0.1:59964 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:11:48.628 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47730 10 6452 1 2025-11-10 19:12:19.106 00:00:10.366 TCP 23.104.0.1:38300 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:12:48.841 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43462 10 6452 1 2025-11-10 19:13:19.512 00:00:10.324 TCP 23.104.0.1:41616 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:13:49.083 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42762 10 6452 1 2025-11-10 19:14:19.878 00:00:10.362 TCP 23.104.0.1:45236 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:14:49.300 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44372 10 6452 1 2025-11-10 19:15:20.279 00:00:10.367 TCP 23.104.0.1:39432 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:15:36.383 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:15:36.245 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 19:10:58.786 00:05:56.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 19:15:49.517 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45510 10 6452 1 2025-11-10 19:16:20.681 00:00:10.324 TCP 23.104.0.1:40606 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:11:58.784 00:05:56.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 19:16:49.770 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38828 10 6452 1 2025-11-10 19:17:21.048 00:00:10.374 TCP 23.104.0.1:35426 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:17:49.994 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:45292 10 6452 1 2025-11-10 19:18:21.457 00:00:10.465 TCP 23.104.0.1:51628 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:18:50.179 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52954 10 6452 1 2025-11-10 19:19:21.963 00:00:10.334 TCP 23.104.0.1:48662 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:19:50.395 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:51522 10 6452 1 2025-11-10 19:20:36.381 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 19:20:36.322 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:20:22.342 00:00:10.325 TCP 23.104.0.1:58596 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:20:50.582 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57038 10 6452 1 2025-11-10 19:21:22.706 00:00:10.326 TCP 23.104.0.1:38090 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:16:58.789 00:05:56.597 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 19:21:50.801 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:42620 10 6452 1 2025-11-10 19:22:23.099 00:00:10.325 TCP 23.104.0.1:34194 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:17:58.786 00:05:56.602 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 19:22:51.065 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49700 10 6452 1 2025-11-10 19:23:23.457 00:00:21.735 TCP 23.104.0.1:58130 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:23:51.274 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51036 10 6452 1 2025-11-10 19:24:35.254 00:00:10.364 TCP 23.104.0.1:36866 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:24:51.481 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54690 10 6452 1 2025-11-10 19:25:36.437 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 19:25:36.484 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:25:35.655 00:00:10.319 TCP 23.104.0.1:52032 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:25:51.695 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60750 10 6452 1 2025-11-10 19:26:36.012 00:00:10.368 TCP 23.104.0.1:52928 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:26:51.914 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57640 10 6452 1 2025-11-10 19:27:36.417 00:00:10.373 TCP 23.104.0.1:55976 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:22:58.791 00:05:56.596 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 19:27:52.136 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41878 10 6452 1 2025-11-10 19:28:36.826 00:00:10.361 TCP 23.104.0.1:36804 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:23:58.789 00:05:56.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 19:28:52.345 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59202 10 6452 1 2025-11-10 19:29:37.226 00:00:10.331 TCP 23.104.0.1:55874 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:29:52.564 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39174 10 6452 1 2025-11-10 19:30:36.496 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 19:30:36.401 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:30:37.591 00:00:10.366 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:30:52.776 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:43390 10 6452 1 2025-11-10 19:31:37.996 00:00:10.365 TCP 23.104.0.1:58248 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:31:52.981 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:52406 10 6452 1 2025-11-10 19:32:38.403 00:00:10.363 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:32:53.169 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45460 10 6452 1 2025-11-10 19:33:38.807 00:00:10.365 TCP 23.104.0.1:45850 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:28:58.793 00:05:56.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 19:33:53.377 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51290 10 6452 1 2025-11-10 19:34:39.211 00:00:10.321 TCP 23.104.0.1:34876 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:29:58.790 00:05:56.600 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 19:34:53.595 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:46416 10 6452 1 2025-11-10 19:35:36.686 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:35:36.746 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 19:35:39.571 00:00:10.365 TCP 23.104.0.1:56580 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:35:53.785 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44584 10 6452 1 2025-11-10 19:36:39.975 00:00:10.373 TCP 23.104.0.1:41134 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:36:54.000 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57492 10 6452 1 2025-11-10 19:37:40.379 00:00:10.539 TCP 23.104.0.1:49138 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:37:54.218 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59130 10 6452 1 2025-11-10 19:38:40.956 00:00:10.364 TCP 23.104.0.1:50874 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:38:54.426 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42626 10 6452 1 2025-11-10 19:39:41.361 00:00:10.361 TCP 23.104.0.1:53500 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:34:58.793 00:05:56.595 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 19:39:54.600 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39882 10 6452 1 2025-11-10 19:40:36.778 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 19:40:36.615 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:35:58.799 00:05:56.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 19:40:41.761 00:00:10.694 TCP 23.104.0.1:43992 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:40:54.821 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47786 10 6452 1 2025-11-10 19:41:42.495 00:00:10.364 TCP 23.104.0.1:49166 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:41:55.052 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49166 10 6452 1 2025-11-10 19:42:42.901 00:00:10.371 TCP 23.104.0.1:43002 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:42:55.261 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52372 10 6452 1 2025-11-10 19:43:43.313 00:00:11.353 TCP 23.104.0.1:36976 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:43:55.480 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45380 10 6452 1 2025-11-10 19:44:44.701 00:00:10.331 TCP 23.104.0.1:55342 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:44:55.688 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60228 10 6452 1 2025-11-10 19:45:36.958 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:45:36.715 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 19:45:45.098 00:00:10.356 TCP 23.104.0.1:50520 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:40:58.804 00:05:56.585 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 19:45:55.892 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43692 10 6452 1 2025-11-10 19:41:58.801 00:05:56.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 19:46:45.493 00:00:10.634 TCP 23.104.0.1:40060 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:46:56.113 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46224 10 6452 1 2025-11-10 19:47:46.165 00:00:10.492 TCP 23.104.0.1:53220 -> 1.101.0.1:3000 15 1926 1 2025-11-10 19:47:56.324 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55988 12 10369 1 2025-11-10 19:48:46.700 00:00:10.370 TCP 23.104.0.1:47448 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:48:56.530 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47304 10 6452 1 2025-11-10 19:49:47.108 00:00:10.597 TCP 23.104.0.1:42972 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:49:56.744 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44820 10 6452 1 2025-11-10 19:50:36.680 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:50:37.033 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 19:50:47.747 00:00:10.363 TCP 23.104.0.1:43820 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:50:56.969 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:34190 10 6452 1 2025-11-10 19:46:58.805 00:05:56.586 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 19:51:48.152 00:00:10.364 TCP 23.104.0.1:37780 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:51:57.159 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45906 10 6452 1 2025-11-10 19:47:58.803 00:05:56.591 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 19:52:48.558 00:00:10.397 TCP 23.104.0.1:54556 -> 1.101.0.1:3000 15 1926 1 2025-11-10 19:52:57.376 00:00:10.741 TCP 1.101.0.1:3000 -> 22.102.0.1:38620 12 10369 1 2025-11-10 19:53:48.995 00:00:10.365 TCP 23.104.0.1:36738 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:53:58.159 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43898 10 6452 1 2025-11-10 19:54:49.394 00:00:10.368 TCP 23.104.0.1:43922 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:54:58.371 00:00:10.698 TCP 1.101.0.1:3000 -> 22.102.0.1:56168 10 6452 1 2025-11-10 19:55:36.973 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 19:55:37.070 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 19:55:49.801 00:00:10.336 TCP 23.104.0.1:51068 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:55:59.104 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33284 10 6452 1 2025-11-10 19:56:50.172 00:00:10.494 TCP 23.104.0.1:49148 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:56:59.274 00:00:10.910 TCP 1.101.0.1:3000 -> 22.102.0.1:40692 10 6452 1 2025-11-10 19:52:58.812 00:05:56.581 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 19:57:50.699 00:00:10.367 TCP 23.104.0.1:50112 -> 1.101.0.1:3000 11 1507 1 2025-11-10 19:58:00.218 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44504 10 6452 1 Summary: total flows: 163, total bytes: 505617, total packets: 1575, avg bps: 1038, avg pps: 0, avg bpp: 321 Time window: 2025-11-10 18:53:58 - 2025-11-10 19:58:55 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0011s Wall: 0.0027s flows/second: 60347.0 Runtime: 0.0027s