Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 02:54:52.712 00:05:03.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 02:59:04.765 00:00:10.336 TCP 23.104.0.1:46260 -> 1.101.0.1:3000 11 1507 1 2025-11-05 02:59:25.455 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49722 10 6452 1 2025-11-05 02:55:52.716 00:05:03.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 03:00:05.140 00:00:10.326 TCP 23.104.0.1:44080 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:00:25.631 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34064 10 6452 1 2025-11-05 03:01:05.506 00:00:10.463 TCP 23.104.0.1:33662 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:01:25.843 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54142 10 6452 1 2025-11-05 03:02:06.009 00:00:10.327 TCP 23.104.0.1:51914 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:02:26.084 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38506 10 6452 1 2025-11-05 03:02:52.378 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 03:02:52.371 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 03:03:06.370 00:00:10.365 TCP 23.104.0.1:40346 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:03:26.298 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39634 10 6452 1 2025-11-05 03:04:06.771 00:00:10.366 TCP 23.104.0.1:33464 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:04:26.511 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59752 10 6452 1 2025-11-05 03:00:52.715 00:05:03.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 03:05:07.177 00:00:10.365 TCP 23.104.0.1:52336 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:05:26.725 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42392 10 6452 1 2025-11-05 03:01:52.718 00:05:03.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 03:06:07.576 00:00:10.366 TCP 23.104.0.1:53644 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:06:26.944 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:44882 10 6452 1 2025-11-05 03:07:07.977 00:00:10.371 TCP 23.104.0.1:49562 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:07:27.207 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60528 10 6452 1 2025-11-05 03:07:52.381 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 03:07:52.366 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 03:08:08.386 00:00:10.405 TCP 23.104.0.1:39484 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:08:27.434 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52664 10 6452 1 2025-11-05 03:09:08.827 00:00:10.367 TCP 23.104.0.1:47346 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:09:27.645 00:00:10.641 TCP 1.101.0.1:3000 -> 22.102.0.1:49564 10 6452 1 2025-11-05 03:10:09.228 00:00:10.370 TCP 23.104.0.1:52912 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:10:28.316 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50048 10 6452 1 2025-11-05 03:06:52.716 00:05:03.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 03:11:09.636 00:00:10.366 TCP 23.104.0.1:48138 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:11:28.486 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:36142 12 10375 1 2025-11-05 03:07:52.717 00:05:03.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 03:12:10.046 00:00:10.444 TCP 23.104.0.1:40682 -> 1.101.0.1:3000 15 1926 1 2025-11-05 03:12:28.730 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32776 10 6452 1 2025-11-05 03:12:52.747 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 03:12:52.490 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 03:13:10.528 00:00:10.367 TCP 23.104.0.1:49410 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:13:28.936 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:60974 10 6452 1 2025-11-05 03:14:10.932 00:00:10.395 TCP 23.104.0.1:41118 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:14:29.170 00:00:17.716 TCP 1.101.0.1:3000 -> 22.102.0.1:35158 10 6452 1 2025-11-05 03:15:11.367 00:00:10.354 TCP 23.104.0.1:59710 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:15:36.925 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41914 10 6452 1 2025-11-05 03:16:11.761 00:00:10.375 TCP 23.104.0.1:36260 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:16:37.134 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:37456 12 10375 1 2025-11-05 03:12:52.718 00:05:03.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 03:17:12.174 00:00:10.437 TCP 23.104.0.1:48998 -> 1.101.0.1:3000 15 1926 1 2025-11-05 03:17:37.375 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40620 10 6452 1 2025-11-05 03:17:53.128 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 03:13:52.721 00:05:03.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 03:17:53.310 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 03:18:12.657 00:00:10.369 TCP 23.104.0.1:33808 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:18:37.593 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39386 10 6452 1 2025-11-05 03:19:13.088 00:00:10.362 TCP 23.104.0.1:49560 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:19:37.765 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46572 10 6452 1 2025-11-05 03:20:13.495 00:00:10.363 TCP 23.104.0.1:58094 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:20:37.975 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:51222 13 6608 1 2025-11-05 03:21:13.898 00:00:10.366 TCP 23.104.0.1:53408 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:21:38.230 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:37286 12 10369 1 2025-11-05 03:22:14.306 00:00:10.438 TCP 23.104.0.1:54812 -> 1.101.0.1:3000 15 1926 1 2025-11-05 03:22:38.477 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45066 10 6452 1 2025-11-05 03:22:52.918 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 03:22:52.831 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 03:18:52.718 00:05:03.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 03:23:14.782 00:00:10.974 TCP 23.104.0.1:52768 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:23:38.699 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37506 10 6452 1 2025-11-05 03:19:52.721 00:05:03.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 03:24:15.789 00:00:10.362 TCP 23.104.0.1:50542 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:24:38.920 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:48506 10 6452 1 2025-11-05 03:25:16.186 00:00:10.377 TCP 23.104.0.1:44072 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:25:39.168 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56116 10 6452 1 2025-11-05 03:26:16.604 00:00:10.446 TCP 23.104.0.1:43080 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:26:39.382 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60200 10 6452 1 2025-11-05 03:27:17.099 00:00:10.363 TCP 23.104.0.1:47682 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:27:39.602 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59376 10 6452 1 2025-11-05 03:27:52.961 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 03:27:52.949 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 03:28:17.498 00:00:10.367 TCP 23.104.0.1:36030 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:28:39.825 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48958 10 6452 1 2025-11-05 03:24:52.721 00:05:03.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 03:29:17.904 00:00:10.368 TCP 23.104.0.1:60792 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:29:40.061 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60748 10 6452 1 2025-11-05 03:25:52.725 00:05:03.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 03:30:18.311 00:00:10.365 TCP 23.104.0.1:43546 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:30:40.274 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40546 10 6452 1 2025-11-05 03:31:18.721 00:00:10.323 TCP 23.104.0.1:55934 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:31:40.505 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35304 10 6452 1 2025-11-05 03:32:19.109 00:00:20.537 TCP 23.104.0.1:42000 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:32:40.718 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54598 10 6452 1 2025-11-05 03:32:53.041 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 03:32:52.881 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 03:33:29.687 00:00:10.367 TCP 23.104.0.1:51824 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:33:40.930 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:36764 10 6452 1 2025-11-05 03:34:30.106 00:00:10.361 TCP 23.104.0.1:44626 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:34:41.175 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48184 10 6452 1 2025-11-05 03:30:52.734 00:05:03.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 03:35:30.509 00:00:10.323 TCP 23.104.0.1:43500 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:35:41.347 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56944 10 6452 1 2025-11-05 03:31:52.736 00:05:03.140 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 03:36:30.873 00:00:10.607 TCP 23.104.0.1:52768 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:36:41.564 00:00:10.868 TCP 1.101.0.1:3000 -> 22.102.0.1:41564 10 6452 1 2025-11-05 03:37:31.519 00:00:10.363 TCP 23.104.0.1:46738 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:37:52.876 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 03:37:42.474 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:34870 10 6452 1 2025-11-05 03:37:52.831 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 03:38:31.918 00:00:10.383 TCP 23.104.0.1:40852 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:38:42.655 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47324 10 6452 1 2025-11-05 03:39:32.339 00:00:10.373 TCP 23.104.0.1:38984 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:39:42.866 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:45576 10 6452 1 2025-11-05 03:40:32.749 00:00:10.340 TCP 23.104.0.1:40452 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:40:43.098 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42324 10 6452 1 2025-11-05 03:36:52.734 00:05:03.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 03:41:33.131 00:00:10.366 TCP 23.104.0.1:60784 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:37:52.736 00:05:03.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 03:41:43.308 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44280 10 6452 1 2025-11-05 03:42:33.541 00:00:10.361 TCP 23.104.0.1:56408 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:42:53.096 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 03:42:43.528 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53530 10 6452 1 2025-11-05 03:42:53.347 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 03:43:33.943 00:00:10.369 TCP 23.104.0.1:53520 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:43:43.744 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56226 10 6452 1 2025-11-05 03:44:34.362 00:00:10.362 TCP 23.104.0.1:50292 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:44:43.969 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:36056 10 6452 1 2025-11-05 03:45:34.765 00:00:10.371 TCP 23.104.0.1:54812 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:45:44.151 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37398 10 6452 1 2025-11-05 03:46:35.175 00:00:10.361 TCP 23.104.0.1:57228 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:46:44.368 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43360 10 6452 1 2025-11-05 03:42:52.737 00:05:03.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 03:47:35.574 00:00:10.360 TCP 23.104.0.1:55324 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:47:53.373 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 03:43:52.739 00:05:03.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 03:47:44.576 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50904 10 6452 1 2025-11-05 03:47:53.414 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 03:48:35.971 00:00:10.363 TCP 23.104.0.1:39726 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:48:44.799 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58982 10 6452 1 2025-11-05 03:49:36.372 00:00:10.366 TCP 23.104.0.1:53760 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:49:45.032 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39196 10 6452 1 2025-11-05 03:50:36.783 00:00:10.375 TCP 23.104.0.1:50770 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:50:45.208 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60534 10 6452 1 2025-11-05 03:51:37.198 00:00:10.364 TCP 23.104.0.1:40718 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:51:45.425 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55904 10 6452 1 2025-11-05 03:52:37.603 00:00:10.977 TCP 23.104.0.1:46512 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:52:53.499 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 03:52:45.646 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49516 10 6452 1 2025-11-05 03:52:53.523 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 03:48:52.739 00:05:03.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 03:53:38.620 00:00:10.362 TCP 23.104.0.1:56532 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:49:52.741 00:05:03.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 03:53:45.863 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:35962 10 6452 1 2025-11-05 03:54:39.027 00:00:10.328 TCP 23.104.0.1:49868 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:54:46.097 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47964 10 6452 1 2025-11-05 03:55:39.394 00:00:10.361 TCP 23.104.0.1:60596 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:55:46.306 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34928 10 6452 1 2025-11-05 03:56:39.791 00:00:10.364 TCP 23.104.0.1:56544 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:56:46.483 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51474 10 6452 1 2025-11-05 03:57:40.195 00:00:10.326 TCP 23.104.0.1:51996 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:57:53.463 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 03:57:46.691 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46488 10 6452 1 2025-11-05 03:57:53.636 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 03:58:40.563 00:00:10.360 TCP 23.104.0.1:46864 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505072, total packets: 1583, avg bps: 1052, avg pps: 0, avg bpp: 319 Time window: 2025-11-05 02:54:52 - 2025-11-05 03:58:50 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0035s User: 0.0017s Wall: 0.0022s flows/second: 73292.4 Runtime: 0.0022s