Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-04 02:54:52.239 00:05:03.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 02:59:02.949 00:00:10.366 TCP 23.104.0.1:41536 -> 1.101.0.1:3000 11 1507 1 2025-11-04 02:59:26.701 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41756 10 6452 1 2025-11-04 02:55:52.241 00:05:03.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 03:00:03.361 00:00:10.324 TCP 23.104.0.1:41574 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:00:26.920 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:36548 10 6452 1 2025-11-04 03:01:03.732 00:00:10.366 TCP 23.104.0.1:49536 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:01:27.175 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:44490 10 6452 1 2025-11-04 03:02:04.141 00:00:10.362 TCP 23.104.0.1:38902 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:02:23.524 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 03:02:23.436 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 03:02:27.400 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48764 10 6452 1 2025-11-04 03:03:04.543 00:00:10.363 TCP 23.104.0.1:38662 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:03:27.618 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41010 10 6452 1 2025-11-04 03:04:04.947 00:00:10.364 TCP 23.104.0.1:38576 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:04:27.790 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57764 10 6452 1 2025-11-04 03:00:52.240 00:05:03.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 03:05:05.349 00:00:10.367 TCP 23.104.0.1:36760 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:05:28.004 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:45134 12 10375 1 2025-11-04 03:01:52.243 00:05:03.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 03:06:05.761 00:00:10.454 TCP 23.104.0.1:52064 -> 1.101.0.1:3000 15 1926 1 2025-11-04 03:06:28.254 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58956 10 6452 1 2025-11-04 03:07:06.252 00:00:10.365 TCP 23.104.0.1:35190 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:07:23.763 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 03:07:23.843 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 03:07:28.473 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44952 10 6452 1 2025-11-04 03:08:06.653 00:00:10.366 TCP 23.104.0.1:54060 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:08:28.692 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55442 10 6452 1 2025-11-04 03:09:07.066 00:00:10.367 TCP 23.104.0.1:50396 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:09:28.913 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41664 10 6452 1 2025-11-04 03:10:07.471 00:00:10.370 TCP 23.104.0.1:42354 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:10:29.141 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54052 10 6452 1 2025-11-04 03:06:52.241 00:05:03.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 03:11:07.878 00:00:10.369 TCP 23.104.0.1:45958 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:11:29.359 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57126 10 6452 1 2025-11-04 03:07:52.244 00:05:03.121 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 03:12:08.281 00:00:10.332 TCP 23.104.0.1:40606 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:12:23.992 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 03:12:23.796 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 03:12:29.541 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41312 10 6452 1 2025-11-04 03:13:08.652 00:00:10.365 TCP 23.104.0.1:33900 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:13:29.764 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35172 10 6452 1 2025-11-04 03:14:09.070 00:00:10.321 TCP 23.104.0.1:50998 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:14:29.980 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:60746 10 6452 1 2025-11-04 03:15:09.430 00:00:10.361 TCP 23.104.0.1:34496 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:15:30.237 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40700 10 6452 1 2025-11-04 03:16:09.834 00:00:10.394 TCP 23.104.0.1:56332 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:16:30.458 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41158 10 6452 1 2025-11-04 03:12:52.243 00:05:03.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 03:17:23.778 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 03:17:23.748 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 03:17:10.269 00:00:20.091 TCP 23.104.0.1:49402 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:17:30.677 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58174 10 6452 1 2025-11-04 03:13:52.247 00:05:03.119 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 03:18:20.452 00:00:10.363 TCP 23.104.0.1:41982 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:18:30.903 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50472 10 6452 1 2025-11-04 03:19:20.851 00:00:10.705 TCP 23.104.0.1:37162 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:19:31.129 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37654 10 6452 1 2025-11-04 03:20:21.596 00:00:10.363 TCP 23.104.0.1:35088 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:20:31.347 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55148 10 6452 1 2025-11-04 03:21:21.999 00:00:10.324 TCP 23.104.0.1:43146 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:21:31.563 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54220 10 6452 1 2025-11-04 03:22:23.751 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 03:22:23.809 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 03:22:22.363 00:00:10.361 TCP 23.104.0.1:60026 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:22:31.782 00:00:10.277 TCP 1.101.0.1:3000 -> 22.102.0.1:52586 13 6608 1 2025-11-04 03:18:52.243 00:05:03.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 03:23:22.762 00:00:10.380 TCP 23.104.0.1:60512 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:23:32.114 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54296 10 6452 1 2025-11-04 03:19:52.248 00:05:03.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 03:24:23.182 00:00:10.363 TCP 23.104.0.1:36940 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:24:32.323 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58116 10 6452 1 2025-11-04 03:25:23.586 00:00:10.363 TCP 23.104.0.1:43050 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:25:32.542 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41114 10 6452 1 2025-11-04 03:26:23.986 00:00:10.325 TCP 23.104.0.1:54080 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:26:32.764 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60388 10 6452 1 2025-11-04 03:27:24.098 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 03:27:23.891 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 03:27:24.353 00:00:10.360 TCP 23.104.0.1:47286 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:27:32.943 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44850 10 6452 1 2025-11-04 03:28:24.753 00:00:10.342 TCP 23.104.0.1:55052 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:28:33.166 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35302 10 6452 1 2025-11-04 03:24:52.244 00:05:03.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 03:29:25.127 00:00:10.360 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:29:33.376 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60350 10 6452 1 2025-11-04 03:25:52.247 00:05:03.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 03:30:25.523 00:00:10.329 TCP 23.104.0.1:51628 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:30:33.597 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44044 10 6452 1 2025-11-04 03:31:25.891 00:00:10.337 TCP 23.104.0.1:41582 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:31:33.818 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55916 10 6452 1 2025-11-04 03:32:24.407 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 03:32:24.407 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 03:32:26.268 00:00:10.366 TCP 23.104.0.1:59042 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:32:34.037 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46878 10 6452 1 2025-11-04 03:33:26.680 00:00:10.381 TCP 23.104.0.1:58546 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:33:34.261 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55532 10 6452 1 2025-11-04 03:34:27.108 00:00:10.332 TCP 23.104.0.1:58554 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:34:34.484 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51134 10 6452 1 2025-11-04 03:30:52.247 00:05:03.124 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 03:35:27.501 00:00:10.372 TCP 23.104.0.1:52428 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:35:34.699 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41300 10 6452 1 2025-11-04 03:31:52.249 00:05:03.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 03:36:27.905 00:00:10.373 TCP 23.104.0.1:43284 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:36:34.913 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44788 10 6452 1 2025-11-04 03:37:24.385 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 03:37:24.399 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 03:37:28.316 00:00:10.364 TCP 23.104.0.1:54978 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:37:35.133 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40094 10 6452 1 2025-11-04 03:38:28.719 00:00:10.375 TCP 23.104.0.1:39050 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:38:35.356 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35772 10 6452 1 2025-11-04 03:39:29.154 00:00:10.326 TCP 23.104.0.1:54756 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:39:35.584 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37510 10 6452 1 2025-11-04 03:40:29.517 00:00:10.375 TCP 23.104.0.1:38396 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:40:35.807 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45644 10 6452 1 2025-11-04 03:36:52.248 00:05:03.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 03:41:29.932 00:00:10.340 TCP 23.104.0.1:44216 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:41:36.041 00:00:10.377 TCP 1.101.0.1:3000 -> 22.102.0.1:57324 10 6452 1 2025-11-04 03:37:52.251 00:05:03.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 03:42:23.963 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 03:42:24.306 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 03:42:30.315 00:00:10.365 TCP 23.104.0.1:41962 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:42:36.460 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44988 10 6452 1 2025-11-04 03:43:30.714 00:00:10.376 TCP 23.104.0.1:60162 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:43:36.677 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37904 10 6452 1 2025-11-04 03:44:31.123 00:00:10.360 TCP 23.104.0.1:33080 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:44:36.898 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57690 10 6452 1 2025-11-04 03:45:31.528 00:00:10.372 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:45:37.127 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58716 10 6452 1 2025-11-04 03:46:31.937 00:00:10.371 TCP 23.104.0.1:57882 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:46:37.345 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53326 10 6452 1 2025-11-04 03:42:52.248 00:05:03.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 03:47:24.473 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 03:47:24.296 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 03:47:32.346 00:00:10.363 TCP 23.104.0.1:53930 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:47:37.571 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47428 10 6452 1 2025-11-04 03:43:52.252 00:05:03.117 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 03:48:32.749 00:00:10.343 TCP 23.104.0.1:37532 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:48:37.785 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53248 10 6452 1 2025-11-04 03:49:33.131 00:00:19.202 TCP 23.104.0.1:55960 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:49:38.003 00:00:14.303 TCP 1.101.0.1:3000 -> 22.102.0.1:54640 10 6452 1 2025-11-04 03:50:42.368 00:00:10.514 TCP 23.104.0.1:50992 -> 1.101.0.1:3000 17 2241 1 2025-11-04 03:50:42.342 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:46292 14 14298 1 2025-11-04 03:51:42.578 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44564 10 6452 1 2025-11-04 03:51:42.926 00:00:10.387 TCP 23.104.0.1:38290 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:52:24.386 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 03:52:24.310 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 03:52:43.352 00:00:11.040 TCP 23.104.0.1:55110 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:52:42.807 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32898 10 6452 1 2025-11-04 03:48:52.249 00:05:03.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-04 03:53:44.434 00:00:10.330 TCP 23.104.0.1:59006 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:49:52.254 00:05:03.120 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-04 03:53:43.034 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33138 10 6452 1 2025-11-04 03:54:44.799 00:00:10.368 TCP 23.104.0.1:60820 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:54:43.244 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58554 10 6452 1 2025-11-04 03:55:43.474 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57932 10 6452 1 2025-11-04 03:55:45.204 00:00:10.374 TCP 23.104.0.1:49880 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:56:43.689 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40390 10 6452 1 2025-11-04 03:56:45.618 00:00:10.366 TCP 23.104.0.1:55626 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:57:24.386 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-04 03:57:24.342 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-04 03:57:46.025 00:00:10.364 TCP 23.104.0.1:38032 -> 1.101.0.1:3000 11 1507 1 2025-11-04 03:57:43.903 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40130 10 6452 1 Summary: total flows: 162, total bytes: 503467, total packets: 1570, avg bps: 1064, avg pps: 0, avg bpp: 320 Time window: 2025-11-04 02:54:52 - 2025-11-04 03:57:56 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0029s User: 0.0029s Wall: 0.0027s flows/second: 60721.8 Runtime: 0.0027s