Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 03:54:52.740 00:05:03.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 03:58:46.906 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58008 10 6452 1 2025-11-05 03:59:40.962 00:00:10.371 TCP 23.104.0.1:33802 -> 1.101.0.1:3000 11 1507 1 2025-11-05 03:55:52.743 00:05:03.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 03:59:47.123 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:36196 10 6452 1 2025-11-05 04:00:41.371 00:00:10.322 TCP 23.104.0.1:47680 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:00:47.358 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46614 10 6452 1 2025-11-05 04:01:41.732 00:00:10.365 TCP 23.104.0.1:37746 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:01:47.573 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33650 10 6452 1 2025-11-05 04:02:53.572 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 04:02:42.136 00:00:10.364 TCP 23.104.0.1:51882 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:02:53.759 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 04:02:47.788 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:60890 10 6452 1 2025-11-05 04:03:42.539 00:00:10.363 TCP 23.104.0.1:33054 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:03:47.974 00:00:21.419 TCP 1.101.0.1:3000 -> 22.102.0.1:59722 10 6452 1 2025-11-05 04:00:52.742 00:05:03.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 04:04:42.942 00:00:10.335 TCP 23.104.0.1:47940 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:04:59.442 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:33926 10 6452 1 2025-11-05 04:01:52.745 00:05:03.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 04:05:43.317 00:00:10.372 TCP 23.104.0.1:42500 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:05:59.612 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:42806 10 6452 1 2025-11-05 04:06:43.719 00:00:10.370 TCP 23.104.0.1:32778 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:06:59.779 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42376 10 6452 1 2025-11-05 04:07:53.748 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 04:07:53.735 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 04:07:44.126 00:00:10.367 TCP 23.104.0.1:60830 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:07:59.994 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:43420 10 6452 1 2025-11-05 04:08:44.534 00:00:10.362 TCP 23.104.0.1:36782 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:09:00.183 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60866 10 6452 1 2025-11-05 04:09:44.936 00:00:10.387 TCP 23.104.0.1:56796 -> 1.101.0.1:3000 12 1559 1 2025-11-05 04:10:00.399 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43682 10 6452 1 2025-11-05 04:06:52.743 00:05:03.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 04:10:45.360 00:00:10.369 TCP 23.104.0.1:50798 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:11:00.610 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59668 10 6452 1 2025-11-05 04:07:52.746 00:05:03.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 04:11:45.765 00:00:10.377 TCP 23.104.0.1:49002 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:12:00.828 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46240 10 6452 1 2025-11-05 04:12:53.820 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 04:12:53.776 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 04:12:46.173 00:00:10.361 TCP 23.104.0.1:37094 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:13:01.079 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55676 10 6452 1 2025-11-05 04:13:46.576 00:00:10.373 TCP 23.104.0.1:39422 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:14:01.291 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35618 10 6452 1 2025-11-05 04:14:46.996 00:00:10.367 TCP 23.104.0.1:51238 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:15:01.505 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37428 10 6452 1 2025-11-05 04:15:47.398 00:00:10.364 TCP 23.104.0.1:59880 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:16:01.719 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58622 10 6452 1 2025-11-05 04:12:52.744 00:05:03.147 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 04:16:47.803 00:00:11.558 TCP 23.104.0.1:51110 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:17:01.932 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49502 10 6452 1 2025-11-05 04:17:54.380 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 04:17:54.270 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 04:13:52.747 00:05:03.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 04:17:49.413 00:00:10.325 TCP 23.104.0.1:48730 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:18:02.158 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35282 10 6452 1 2025-11-05 04:18:49.775 00:00:10.390 TCP 23.104.0.1:35490 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:19:02.371 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42202 10 6452 1 2025-11-05 04:19:50.198 00:00:10.361 TCP 23.104.0.1:43286 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:20:02.589 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59648 10 6452 1 2025-11-05 04:20:50.595 00:00:10.363 TCP 23.104.0.1:57662 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:21:02.803 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54440 10 6452 1 2025-11-05 04:21:50.993 00:00:10.381 TCP 23.104.0.1:56188 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:22:03.029 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53664 10 6452 1 2025-11-05 04:22:53.971 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 04:22:54.175 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 04:18:52.746 00:05:03.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 04:22:51.412 00:00:10.359 TCP 23.104.0.1:32800 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:23:03.246 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33858 10 6452 1 2025-11-05 04:19:52.749 00:05:03.142 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 04:23:51.809 00:00:10.368 TCP 23.104.0.1:56582 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:24:03.474 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51344 10 6452 1 2025-11-05 04:24:52.214 00:00:10.366 TCP 23.104.0.1:33996 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:25:03.695 00:00:14.291 TCP 1.101.0.1:3000 -> 22.102.0.1:57322 10 6452 1 2025-11-05 04:25:52.622 00:00:10.390 TCP 23.104.0.1:52624 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:26:08.026 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39214 10 6452 1 2025-11-05 04:26:53.092 00:00:10.362 TCP 23.104.0.1:39518 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:27:08.243 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53544 10 6452 1 2025-11-05 04:27:53.936 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 04:27:54.047 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 04:27:53.492 00:00:10.369 TCP 23.104.0.1:57234 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:28:08.454 00:00:10.675 TCP 1.101.0.1:3000 -> 22.102.0.1:46638 10 6452 1 2025-11-05 04:24:52.746 00:05:03.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 04:28:53.897 00:00:10.367 TCP 23.104.0.1:41074 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:29:09.169 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51308 10 6452 1 2025-11-05 04:25:52.751 00:05:03.140 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 04:29:54.302 00:00:10.326 TCP 23.104.0.1:57552 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:30:09.388 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45950 10 6452 1 2025-11-05 04:30:54.672 00:00:10.364 TCP 23.104.0.1:36238 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:31:09.609 00:00:10.368 TCP 1.101.0.1:3000 -> 22.102.0.1:55402 10 6452 1 2025-11-05 04:31:55.105 00:00:10.367 TCP 23.104.0.1:52344 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:32:10.028 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57518 10 6452 1 2025-11-05 04:32:54.153 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 04:32:54.026 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 04:32:55.516 00:00:10.322 TCP 23.104.0.1:47194 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:33:10.253 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45088 10 6452 1 2025-11-05 04:33:55.873 00:00:10.423 TCP 23.104.0.1:43502 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:34:10.477 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:58552 10 6452 1 2025-11-05 04:30:52.749 00:05:03.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 04:34:56.331 00:00:10.361 TCP 23.104.0.1:34462 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:35:10.658 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50676 10 6452 1 2025-11-05 04:31:52.752 00:05:03.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 04:35:56.728 00:00:10.370 TCP 23.104.0.1:45662 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:36:10.862 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52318 10 6452 1 2025-11-05 04:36:57.139 00:00:10.391 TCP 23.104.0.1:52740 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:37:11.086 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38222 10 6452 1 2025-11-05 04:37:54.392 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 04:37:54.223 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 04:37:57.568 00:00:10.362 TCP 23.104.0.1:57444 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:38:11.299 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53776 10 6452 1 2025-11-05 04:38:57.970 00:00:10.380 TCP 23.104.0.1:43452 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:39:11.510 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44006 10 6452 1 2025-11-05 04:39:58.389 00:00:10.327 TCP 23.104.0.1:44658 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:40:11.731 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49430 10 6452 1 2025-11-05 04:36:52.753 00:05:03.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 04:40:58.750 00:00:10.366 TCP 23.104.0.1:53596 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:41:11.957 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39302 10 6452 1 2025-11-05 04:37:52.757 00:05:03.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 04:41:59.155 00:00:10.440 TCP 23.104.0.1:60526 -> 1.101.0.1:3000 15 1926 1 2025-11-05 04:42:12.184 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49596 12 10375 1 2025-11-05 04:42:54.430 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 04:42:54.475 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 04:42:59.632 00:00:10.377 TCP 23.104.0.1:59316 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:43:12.425 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34304 10 6452 1 2025-11-05 04:44:00.056 00:00:10.325 TCP 23.104.0.1:51716 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:44:12.641 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35448 10 6452 1 2025-11-05 04:45:00.423 00:00:10.365 TCP 23.104.0.1:47114 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:45:12.846 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:55826 10 6452 1 2025-11-05 04:46:00.827 00:00:10.380 TCP 23.104.0.1:42090 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:46:13.089 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55526 10 6452 1 2025-11-05 04:42:52.754 00:05:03.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 04:47:01.239 00:00:10.364 TCP 23.104.0.1:59814 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:47:13.264 00:00:10.296 TCP 1.101.0.1:3000 -> 22.102.0.1:55830 10 6452 1 2025-11-05 04:47:54.503 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 04:43:52.758 00:05:03.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 04:47:54.321 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 04:48:01.643 00:00:10.332 TCP 23.104.0.1:32916 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:48:13.597 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45622 10 6452 1 2025-11-05 04:49:02.015 00:00:10.370 TCP 23.104.0.1:56898 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:49:13.812 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52880 10 6452 1 2025-11-05 04:50:02.422 00:00:10.370 TCP 23.104.0.1:33508 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:50:14.029 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34878 10 6452 1 2025-11-05 04:51:02.830 00:00:10.345 TCP 23.104.0.1:34454 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:51:14.246 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49262 10 6452 1 2025-11-05 04:52:03.220 00:00:10.322 TCP 23.104.0.1:34934 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:52:14.458 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42104 10 6452 1 2025-11-05 04:52:54.720 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 04:48:52.756 00:05:03.145 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 04:52:54.671 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 04:53:03.581 00:00:10.362 TCP 23.104.0.1:44388 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:53:14.670 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43824 10 6452 1 2025-11-05 04:49:52.759 00:05:03.140 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 04:54:03.984 00:00:10.772 TCP 23.104.0.1:59890 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:54:14.881 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37596 10 6452 1 2025-11-05 04:55:04.795 00:00:10.363 TCP 23.104.0.1:35746 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:55:15.100 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37582 10 6452 1 2025-11-05 04:56:05.198 00:00:10.323 TCP 23.104.0.1:57258 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:56:15.310 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46992 10 6452 1 2025-11-05 04:57:05.564 00:00:10.369 TCP 23.104.0.1:58014 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:57:15.523 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44608 10 6452 1 2025-11-05 04:57:54.880 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 04:57:54.938 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 04:58:05.966 00:00:10.367 TCP 23.104.0.1:60734 -> 1.101.0.1:3000 11 1507 1 2025-11-05 04:58:15.737 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51170 10 6452 1 Summary: total flows: 163, total bytes: 501235, total packets: 1568, avg bps: 1051, avg pps: 0, avg bpp: 319 Time window: 2025-11-05 03:54:52 - 2025-11-05 04:58:25 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0057s User: 0.0008s Wall: 0.0037s flows/second: 44414.4 Runtime: 0.0037s