Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-01 19:54:50.968 00:05:03.317 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 19:58:59.701 00:00:10.369 TCP 23.104.0.1:40174 -> 1.101.0.1:3000 11 1507 1 2025-11-01 19:59:33.704 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41968 10 6452 1 2025-11-01 19:54:54.281 00:05:56.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 20:00:00.107 00:00:10.368 TCP 23.104.0.1:37014 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:00:33.913 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58826 10 6452 1 2025-11-01 20:01:00.513 00:00:10.325 TCP 23.104.0.1:46116 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:01:17.374 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:01:17.313 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 20:01:34.134 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46960 10 6452 1 2025-11-01 20:02:00.882 00:00:10.371 TCP 23.104.0.1:38080 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:02:34.348 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52606 10 6452 1 2025-11-01 20:03:01.296 00:00:10.360 TCP 23.104.0.1:55972 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:03:34.517 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54610 10 6452 1 2025-11-01 20:04:01.696 00:00:10.367 TCP 23.104.0.1:43272 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:04:34.703 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33028 10 6452 1 2025-11-01 20:00:50.974 00:05:03.313 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 20:05:02.102 00:00:10.953 TCP 23.104.0.1:37780 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:05:34.915 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53278 10 6452 1 2025-11-01 20:00:54.282 00:05:56.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 20:06:17.358 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 20:06:03.088 00:00:10.325 TCP 23.104.0.1:39294 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:06:17.491 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:06:35.126 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53362 10 6452 1 2025-11-01 20:07:03.450 00:00:10.367 TCP 23.104.0.1:44666 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:07:35.344 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37786 10 6452 1 2025-11-01 20:08:03.853 00:00:10.381 TCP 23.104.0.1:56980 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:08:35.574 00:00:10.629 TCP 1.101.0.1:3000 -> 22.102.0.1:53412 10 6452 1 2025-11-01 20:09:04.274 00:00:10.368 TCP 23.104.0.1:46804 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:09:36.244 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58460 10 6452 1 2025-11-01 20:10:04.682 00:00:10.368 TCP 23.104.0.1:51676 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:10:36.465 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49280 10 6452 1 2025-11-01 20:06:50.976 00:05:03.313 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 20:11:05.103 00:00:10.366 TCP 23.104.0.1:43490 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:11:17.281 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 20:11:17.586 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:11:36.683 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45716 10 6452 1 2025-11-01 20:06:54.287 00:05:56.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 20:12:05.508 00:00:20.756 TCP 23.104.0.1:55620 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:12:36.896 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60758 10 6452 1 2025-11-01 20:13:16.330 00:00:10.361 TCP 23.104.0.1:55242 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:13:37.116 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34598 10 6452 1 2025-11-01 20:14:16.734 00:00:10.371 TCP 23.104.0.1:42790 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:14:37.341 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41076 10 6452 1 2025-11-01 20:15:17.140 00:00:10.373 TCP 23.104.0.1:56438 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:15:37.553 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45894 10 6452 1 2025-11-01 20:16:18.446 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 20:16:18.441 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:16:17.554 00:00:10.361 TCP 23.104.0.1:52568 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:16:37.757 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42614 10 6452 1 2025-11-01 20:12:50.978 00:05:03.311 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 20:17:17.952 00:00:10.366 TCP 23.104.0.1:35882 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:12:54.286 00:05:56.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 20:17:37.973 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60526 10 6452 1 2025-11-01 20:18:18.355 00:00:10.366 TCP 23.104.0.1:36326 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:18:38.208 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45074 10 6452 1 2025-11-01 20:19:18.762 00:00:10.445 TCP 23.104.0.1:55238 -> 1.101.0.1:3000 15 1926 1 2025-11-01 20:19:38.435 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:34548 12 10375 1 2025-11-01 20:20:19.253 00:00:10.322 TCP 23.104.0.1:37846 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:20:38.683 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:39512 10 6452 1 2025-11-01 20:21:17.748 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 20:21:17.776 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:21:19.618 00:00:10.366 TCP 23.104.0.1:50426 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:21:38.859 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51432 10 6452 1 2025-11-01 20:22:20.023 00:00:10.360 TCP 23.104.0.1:52188 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:22:39.086 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49120 10 6452 1 2025-11-01 20:18:50.980 00:05:03.310 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 20:23:20.425 00:00:10.323 TCP 23.104.0.1:51052 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:23:39.299 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:48746 10 6452 1 2025-11-01 20:18:54.287 00:05:56.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 20:24:20.787 00:00:10.327 TCP 23.104.0.1:56824 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:24:39.585 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51814 10 6452 1 2025-11-01 20:25:21.147 00:00:10.367 TCP 23.104.0.1:59176 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:25:39.810 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:38124 10 6452 1 2025-11-01 20:26:17.846 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 20:26:18.007 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:26:21.572 00:00:10.326 TCP 23.104.0.1:46414 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:26:39.993 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47652 10 6452 1 2025-11-01 20:27:21.938 00:00:10.371 TCP 23.104.0.1:58908 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:27:40.226 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49460 10 6452 1 2025-11-01 20:28:22.348 00:00:10.361 TCP 23.104.0.1:58174 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:28:40.446 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44916 10 6452 1 2025-11-01 20:24:50.981 00:05:03.311 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 20:29:22.748 00:00:10.384 TCP 23.104.0.1:56426 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:24:54.288 00:05:56.699 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 20:29:40.665 00:00:10.281 TCP 1.101.0.1:3000 -> 22.102.0.1:52612 10 6452 1 2025-11-01 20:30:23.180 00:00:10.364 TCP 23.104.0.1:40456 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:30:40.982 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:51872 10 6452 1 2025-11-01 20:31:17.866 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 20:31:17.844 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:31:23.578 00:00:10.326 TCP 23.104.0.1:48746 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:31:41.179 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:49202 10 6452 1 2025-11-01 20:32:23.940 00:00:10.379 TCP 23.104.0.1:37522 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:32:41.357 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34434 10 6452 1 2025-11-01 20:33:24.357 00:00:10.363 TCP 23.104.0.1:48580 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:33:41.568 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57440 10 6452 1 2025-11-01 20:34:24.760 00:00:10.332 TCP 23.104.0.1:57300 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:34:41.785 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49920 10 6452 1 2025-11-01 20:30:50.985 00:05:03.310 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 20:35:25.126 00:00:11.568 TCP 23.104.0.1:53832 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:30:54.289 00:05:56.699 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 20:35:41.995 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56884 10 6452 1 2025-11-01 20:36:17.965 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:36:18.014 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 20:36:26.733 00:00:10.328 TCP 23.104.0.1:43400 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:36:42.174 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45250 10 6452 1 2025-11-01 20:37:27.107 00:00:10.322 TCP 23.104.0.1:54382 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:37:42.395 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32798 10 6452 1 2025-11-01 20:38:27.475 00:00:10.374 TCP 23.104.0.1:57972 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:38:42.618 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60120 10 6452 1 2025-11-01 20:39:27.892 00:00:10.382 TCP 23.104.0.1:45536 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:39:42.865 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:45096 10 6452 1 2025-11-01 20:40:28.310 00:00:10.364 TCP 23.104.0.1:52782 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:40:43.103 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55594 10 6452 1 2025-11-01 20:36:50.986 00:05:03.312 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 20:41:18.039 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:41:18.271 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 20:41:28.710 00:00:10.435 TCP 23.104.0.1:56178 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:36:54.295 00:05:56.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 20:41:43.322 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54886 10 6452 1 2025-11-01 20:42:29.180 00:00:10.371 TCP 23.104.0.1:59006 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:42:43.535 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53480 10 6452 1 2025-11-01 20:43:29.588 00:00:10.367 TCP 23.104.0.1:53564 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:43:43.749 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:55524 10 6452 1 2025-11-01 20:44:29.992 00:00:10.362 TCP 23.104.0.1:60398 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:44:43.938 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:55812 10 6452 1 2025-11-01 20:45:30.392 00:00:10.365 TCP 23.104.0.1:35600 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:45:44.175 00:00:10.478 TCP 1.101.0.1:3000 -> 22.102.0.1:44484 10 6452 1 2025-11-01 20:46:18.495 00:00:00.038 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:46:18.344 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 20:46:30.798 00:00:10.363 TCP 23.104.0.1:34856 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:46:44.692 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:51752 10 6452 1 2025-11-01 20:42:50.986 00:05:03.312 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 20:47:31.224 00:00:10.325 TCP 23.104.0.1:35524 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:42:54.296 00:05:56.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 20:47:44.866 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57842 10 6452 1 2025-11-01 20:48:31.585 00:00:10.370 TCP 23.104.0.1:45162 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:48:45.091 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54220 10 6452 1 2025-11-01 20:49:31.992 00:00:10.370 TCP 23.104.0.1:35730 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:49:45.308 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49436 10 6452 1 2025-11-01 20:50:32.398 00:00:10.325 TCP 23.104.0.1:56360 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:50:45.514 00:00:21.500 TCP 1.101.0.1:3000 -> 22.102.0.1:53862 10 6452 1 2025-11-01 20:51:18.143 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:51:18.383 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 20:51:32.760 00:00:10.385 TCP 23.104.0.1:34032 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:51:57.085 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45172 10 6452 1 2025-11-01 20:52:33.183 00:00:10.369 TCP 23.104.0.1:51488 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:48:50.988 00:05:03.313 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-01 20:52:57.305 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55160 10 6452 1 2025-11-01 20:53:33.601 00:00:10.335 TCP 23.104.0.1:46252 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:48:54.296 00:05:56.695 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-01 20:53:57.530 00:00:10.348 TCP 1.101.0.1:3000 -> 22.102.0.1:43720 10 6452 1 2025-11-01 20:54:34.005 00:00:10.332 TCP 23.104.0.1:48058 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:54:57.924 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42174 10 6452 1 2025-11-01 20:55:34.383 00:00:10.331 TCP 23.104.0.1:50586 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:55:58.157 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54176 10 6452 1 2025-11-01 20:56:18.425 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-01 20:56:18.558 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-01 20:56:34.751 00:00:10.401 TCP 23.104.0.1:56222 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:56:58.382 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35544 10 6452 1 2025-11-01 20:57:35.187 00:00:10.365 TCP 23.104.0.1:56796 -> 1.101.0.1:3000 11 1507 1 2025-11-01 20:57:58.598 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54546 10 6452 1 2025-11-01 20:58:35.588 00:00:10.369 TCP 23.104.0.1:47920 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496238, total packets: 1568, avg bps: 1035, avg pps: 0, avg bpp: 316 Time window: 2025-11-01 19:54:50 - 2025-11-01 20:58:45 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0044s User: 0.0018s Wall: 0.0023s flows/second: 69366.0 Runtime: 0.0024s