Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 15:54:50.878 00:05:03.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 15:58:57.659 00:00:10.361 TCP 23.104.0.1:40900 -> 1.101.0.1:3000 11 1507 1 2025-11-01 15:59:22.184 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:40266 10 6452 1 2025-11-01 15:54:54.195 00:05:56.687 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 15:59:58.066 00:00:10.368 TCP 23.104.0.1:59918 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:00:22.391 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60014 10 6452 1 2025-11-01 16:00:58.473 00:00:10.358 TCP 23.104.0.1:40968 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:01:12.399 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 16:01:12.433 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 16:01:22.606 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51472 10 6452 1 2025-11-01 16:01:58.869 00:00:10.370 TCP 23.104.0.1:50512 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:02:22.816 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:55460 10 6452 1 2025-11-01 16:02:59.287 00:00:10.417 TCP 23.104.0.1:55848 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:03:23.044 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49374 10 6452 1 2025-11-01 16:03:59.747 00:00:10.323 TCP 23.104.0.1:44882 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:04:23.255 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49406 10 6452 1 2025-11-01 16:00:50.879 00:05:03.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 16:05:00.118 00:00:10.327 TCP 23.104.0.1:53288 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:05:23.498 00:00:10.406 TCP 1.101.0.1:3000 -> 22.102.0.1:50374 10 6452 1 2025-11-01 16:00:54.196 00:05:56.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 16:06:12.363 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 16:06:00.486 00:00:10.365 TCP 23.104.0.1:54432 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:06:12.564 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 16:06:23.949 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:39682 10 6452 1 2025-11-01 16:07:00.894 00:00:10.329 TCP 23.104.0.1:34894 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:07:24.141 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52864 10 6452 1 2025-11-01 16:08:01.258 00:00:10.363 TCP 23.104.0.1:34840 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:08:24.342 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57186 10 6452 1 2025-11-01 16:09:01.658 00:00:10.368 TCP 23.104.0.1:52186 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:09:24.559 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:49946 10 6452 1 2025-11-01 16:10:02.093 00:00:10.365 TCP 23.104.0.1:36398 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:10:24.751 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55940 10 6452 1 2025-11-01 16:06:50.884 00:05:03.319 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 16:11:12.719 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 16:11:12.720 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 16:11:02.501 00:00:10.364 TCP 23.104.0.1:33728 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:11:24.960 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:56280 12 6556 1 2025-11-01 16:06:54.198 00:05:56.692 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 16:12:02.902 00:00:10.374 TCP 23.104.0.1:51318 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:12:25.201 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59650 10 6452 1 2025-11-01 16:13:03.310 00:00:10.323 TCP 23.104.0.1:59228 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:13:25.411 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37120 10 6452 1 2025-11-01 16:14:03.669 00:00:10.364 TCP 23.104.0.1:43598 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:14:25.628 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39024 10 6452 1 2025-11-01 16:15:04.097 00:00:10.361 TCP 23.104.0.1:51196 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:15:25.844 00:00:11.002 TCP 1.101.0.1:3000 -> 22.102.0.1:44562 10 6452 1 2025-11-01 16:16:13.454 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 16:16:13.350 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 16:16:04.500 00:00:10.370 TCP 23.104.0.1:55784 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:16:26.878 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36674 10 6452 1 2025-11-01 16:12:50.887 00:05:03.317 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 16:17:04.908 00:00:10.328 TCP 23.104.0.1:38650 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:17:27.073 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39088 10 6452 1 2025-11-01 16:12:54.201 00:05:56.690 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 16:18:05.269 00:00:10.368 TCP 23.104.0.1:47616 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:18:27.289 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37776 10 6452 1 2025-11-01 16:19:05.672 00:00:10.368 TCP 23.104.0.1:49426 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:19:27.513 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:48102 10 6452 1 2025-11-01 16:20:06.103 00:00:10.416 TCP 23.104.0.1:48020 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:20:27.695 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51382 10 6452 1 2025-11-01 16:21:12.778 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 16:21:12.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 16:21:06.559 00:00:10.366 TCP 23.104.0.1:39266 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:21:27.912 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58856 10 6452 1 2025-11-01 16:22:06.962 00:00:10.325 TCP 23.104.0.1:53030 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:22:28.127 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39410 10 6452 1 2025-11-01 16:18:50.890 00:05:03.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 16:23:07.328 00:00:10.363 TCP 23.104.0.1:47702 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:23:28.336 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:48292 11 7373 1 2025-11-01 16:18:54.202 00:05:56.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 16:24:07.728 00:00:10.326 TCP 23.104.0.1:36676 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:24:28.577 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51394 10 6452 1 2025-11-01 16:25:08.102 00:00:10.367 TCP 23.104.0.1:54044 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:25:28.794 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51166 10 6452 1 2025-11-01 16:26:12.947 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 16:26:12.825 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 16:26:08.507 00:00:10.368 TCP 23.104.0.1:36658 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:26:29.028 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:54920 10 6452 1 2025-11-01 16:27:08.907 00:00:10.890 TCP 23.104.0.1:38896 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:27:29.217 00:00:11.981 TCP 1.101.0.1:3000 -> 22.102.0.1:45590 10 6452 1 2025-11-01 16:28:09.830 00:00:10.384 TCP 23.104.0.1:49180 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:28:31.254 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:34094 10 6452 1 2025-11-01 16:24:50.891 00:05:03.319 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 16:29:10.256 00:00:10.331 TCP 23.104.0.1:55256 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:29:31.489 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42848 10 6452 1 2025-11-01 16:24:54.206 00:05:56.686 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 16:30:10.621 00:00:10.371 TCP 23.104.0.1:51868 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:30:31.703 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:51594 10 6452 1 2025-11-01 16:31:13.132 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 16:31:13.023 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 16:31:11.030 00:00:10.363 TCP 23.104.0.1:49340 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:31:31.882 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56826 10 6452 1 2025-11-01 16:32:11.432 00:00:10.348 TCP 23.104.0.1:36558 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:32:32.104 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50764 10 6452 1 2025-11-01 16:33:11.836 00:00:10.400 TCP 23.104.0.1:55666 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:33:32.332 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48160 10 6452 1 2025-11-01 16:34:12.280 00:00:10.362 TCP 23.104.0.1:41952 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:34:32.544 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36520 10 6452 1 2025-11-01 16:30:50.891 00:05:03.321 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 16:35:12.686 00:00:10.323 TCP 23.104.0.1:44184 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:35:32.771 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57198 10 6452 1 2025-11-01 16:30:54.208 00:05:56.686 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 16:36:13.528 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 16:36:13.083 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 16:36:13.063 00:00:10.361 TCP 23.104.0.1:41640 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:36:32.998 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57580 10 6452 1 2025-11-01 16:37:13.467 00:00:10.376 TCP 23.104.0.1:37566 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:37:33.216 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58002 10 6452 1 2025-11-01 16:38:13.881 00:00:10.799 TCP 23.104.0.1:50976 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:38:33.436 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:56020 10 6452 1 2025-11-01 16:39:14.723 00:00:10.368 TCP 23.104.0.1:45354 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:39:33.643 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42506 10 6452 1 2025-11-01 16:40:15.130 00:00:10.365 TCP 23.104.0.1:48930 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:40:33.822 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60986 10 6452 1 2025-11-01 16:36:50.891 00:05:03.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 16:41:13.380 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 16:41:13.252 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 16:41:15.531 00:00:10.374 TCP 23.104.0.1:50178 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:41:34.009 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39720 10 6452 1 2025-11-01 16:36:54.209 00:05:56.686 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 16:42:15.942 00:00:10.374 TCP 23.104.0.1:46804 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:42:34.224 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38026 10 6452 1 2025-11-01 16:43:16.359 00:00:10.324 TCP 23.104.0.1:50202 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:43:34.437 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49502 10 6452 1 2025-11-01 16:44:16.721 00:00:10.372 TCP 23.104.0.1:56216 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:44:34.644 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59718 10 6452 1 2025-11-01 16:45:17.131 00:00:10.366 TCP 23.104.0.1:60986 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:45:34.857 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48420 10 6452 1 2025-11-01 16:46:13.356 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 16:46:13.165 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 16:46:17.532 00:00:10.363 TCP 23.104.0.1:42434 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:46:35.041 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53940 10 6452 1 2025-11-01 16:42:50.893 00:05:03.323 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 16:47:17.934 00:00:10.381 TCP 23.104.0.1:54716 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:47:35.252 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57640 10 6452 1 2025-11-01 16:42:54.213 00:05:56.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 16:48:18.356 00:00:10.361 TCP 23.104.0.1:57116 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:48:35.465 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50608 12 6556 1 2025-11-01 16:49:18.767 00:00:10.374 TCP 23.104.0.1:60666 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:49:35.674 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54278 10 6452 1 2025-11-01 16:50:19.180 00:00:10.324 TCP 23.104.0.1:33788 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:50:35.878 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57612 10 6452 1 2025-11-01 16:51:13.526 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 16:51:13.356 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 16:51:19.540 00:00:10.366 TCP 23.104.0.1:38600 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:51:36.109 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45218 10 6452 1 2025-11-01 16:52:19.943 00:00:11.100 TCP 23.104.0.1:60322 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:52:36.321 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:53494 10 6452 1 2025-11-01 16:48:50.903 00:05:03.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 16:53:21.105 00:00:10.363 TCP 23.104.0.1:51488 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:53:36.512 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55242 10 6452 1 2025-11-01 16:48:54.212 00:05:56.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 16:54:21.510 00:00:10.364 TCP 23.104.0.1:55882 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:54:36.740 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40722 10 6452 1 2025-11-01 16:55:21.913 00:00:10.367 TCP 23.104.0.1:34666 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:55:36.950 00:00:10.528 TCP 1.101.0.1:3000 -> 22.102.0.1:49612 12 6556 1 2025-11-01 16:56:13.898 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 16:56:13.309 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 16:56:22.321 00:00:10.366 TCP 23.104.0.1:45252 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:56:37.513 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42072 10 6452 1 2025-11-01 16:57:22.728 00:00:10.321 TCP 23.104.0.1:60476 -> 1.101.0.1:3000 11 1507 1 2025-11-01 16:57:37.740 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:32784 10 6452 1 2025-11-01 16:58:23.103 00:00:10.368 TCP 23.104.0.1:48600 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 493129, total packets: 1569, avg bps: 1032, avg pps: 0, avg bpp: 314 Time window: 2025-11-01 15:54:50 - 2025-11-01 16:58:33 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0009s Wall: 0.0028s flows/second: 57762.0 Runtime: 0.0028s