Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 14:54:52.982 00:05:03.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 14:59:12.344 00:00:10.362 TCP 23.104.0.1:45614 -> 1.101.0.1:3000 11 1507 1 2025-11-05 14:59:30.444 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60236 10 6452 1 2025-11-05 14:55:52.983 00:05:03.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 15:00:12.743 00:00:10.368 TCP 23.104.0.1:56628 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:00:30.624 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57674 10 6452 1 2025-11-05 15:01:13.149 00:00:10.364 TCP 23.104.0.1:55050 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:01:30.843 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:59898 10 6452 1 2025-11-05 15:02:13.556 00:00:10.367 TCP 23.104.0.1:58166 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:02:31.033 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38376 10 6452 1 2025-11-05 15:03:06.610 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 15:03:06.723 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 15:03:13.958 00:00:10.366 TCP 23.104.0.1:44632 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:03:31.240 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:58366 10 6452 1 2025-11-05 15:04:14.363 00:00:10.367 TCP 23.104.0.1:47794 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:04:31.464 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49514 10 6452 1 2025-11-05 15:00:52.982 00:05:03.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 15:05:14.767 00:00:10.372 TCP 23.104.0.1:39958 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:05:31.677 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35120 10 6452 1 2025-11-05 15:01:52.985 00:05:03.153 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 15:06:15.181 00:00:10.382 TCP 23.104.0.1:54804 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:06:31.898 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55848 10 6452 1 2025-11-05 15:07:15.605 00:00:10.371 TCP 23.104.0.1:58134 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:07:32.078 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58392 10 6452 1 2025-11-05 15:08:06.821 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 15:08:06.775 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 15:08:16.019 00:00:10.368 TCP 23.104.0.1:42374 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:08:32.288 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49482 10 6452 1 2025-11-05 15:09:16.427 00:00:10.370 TCP 23.104.0.1:37210 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:09:32.498 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51804 10 6452 1 2025-11-05 15:10:16.840 00:00:10.384 TCP 23.104.0.1:46196 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:10:32.669 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36468 10 6452 1 2025-11-05 15:06:52.986 00:05:03.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 15:11:17.265 00:00:10.397 TCP 23.104.0.1:52710 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:11:32.882 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53982 10 6452 1 2025-11-05 15:07:52.988 00:05:03.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 15:12:17.677 00:00:10.372 TCP 23.104.0.1:35920 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:12:33.111 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58038 10 6452 1 2025-11-05 15:13:07.458 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 15:13:07.527 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 15:13:18.109 00:00:10.368 TCP 23.104.0.1:38230 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:13:33.330 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54758 10 6452 1 2025-11-05 15:14:18.516 00:00:10.385 TCP 23.104.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:14:33.541 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38438 10 6452 1 2025-11-05 15:15:18.928 00:00:10.345 TCP 23.104.0.1:38666 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:15:33.757 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37636 10 6452 1 2025-11-05 15:16:19.310 00:00:10.367 TCP 23.104.0.1:42162 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:16:33.970 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:46078 10 6452 1 2025-11-05 15:12:52.987 00:05:03.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 15:17:19.714 00:00:10.388 TCP 23.104.0.1:34220 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:17:34.203 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43186 10 6452 1 2025-11-05 15:13:52.990 00:05:03.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 15:18:06.996 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 15:18:07.091 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 15:18:20.142 00:00:10.334 TCP 23.104.0.1:46744 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:18:34.376 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35868 10 6452 1 2025-11-05 15:19:20.511 00:00:10.367 TCP 23.104.0.1:43400 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:19:34.554 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47900 12 6556 1 2025-11-05 15:20:20.918 00:00:10.384 TCP 23.104.0.1:48808 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:20:34.773 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:48090 10 6452 1 2025-11-05 15:21:21.335 00:00:10.366 TCP 23.104.0.1:47552 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:21:34.940 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46272 10 6452 1 2025-11-05 15:22:21.738 00:00:10.367 TCP 23.104.0.1:45024 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:22:35.179 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57652 10 6452 1 2025-11-05 15:18:52.988 00:05:03.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 15:23:07.336 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 15:23:07.437 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 15:23:22.143 00:00:10.367 TCP 23.104.0.1:60730 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:23:35.395 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37776 10 6452 1 2025-11-05 15:19:52.991 00:05:03.153 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 15:24:22.558 00:00:10.375 TCP 23.104.0.1:38858 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:24:35.611 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58946 10 6452 1 2025-11-05 15:25:22.972 00:00:10.379 TCP 23.104.0.1:46034 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:25:35.840 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60112 10 6452 1 2025-11-05 15:26:23.389 00:00:10.368 TCP 23.104.0.1:41980 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:26:36.076 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42128 10 6452 1 2025-11-05 15:27:23.789 00:00:10.367 TCP 23.104.0.1:42728 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:27:36.289 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44636 10 6452 1 2025-11-05 15:28:07.426 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 15:28:07.116 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 15:28:24.192 00:00:10.324 TCP 23.104.0.1:58238 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:28:36.503 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33000 10 6452 1 2025-11-05 15:24:52.991 00:05:03.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 15:29:24.557 00:00:10.365 TCP 23.104.0.1:59872 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:29:36.716 00:00:10.552 TCP 1.101.0.1:3000 -> 22.102.0.1:40844 10 6452 1 2025-11-05 15:25:52.992 00:05:03.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 15:30:24.964 00:00:10.379 TCP 23.104.0.1:55708 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:30:37.300 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57906 10 6452 1 2025-11-05 15:31:25.383 00:00:10.320 TCP 23.104.0.1:53972 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:31:37.516 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38236 10 6452 1 2025-11-05 15:32:25.743 00:00:10.364 TCP 23.104.0.1:58304 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:32:37.725 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57784 10 6452 1 2025-11-05 15:33:07.701 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 15:33:07.568 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 15:33:26.147 00:00:10.364 TCP 23.104.0.1:39552 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:33:37.947 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57908 10 6452 1 2025-11-05 15:34:26.548 00:00:10.367 TCP 23.104.0.1:55820 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:34:38.179 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52564 10 6452 1 2025-11-05 15:30:52.990 00:05:03.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 15:35:26.952 00:00:10.374 TCP 23.104.0.1:35952 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:35:38.418 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50336 10 6452 1 2025-11-05 15:31:52.993 00:05:03.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 15:36:27.368 00:00:10.367 TCP 23.104.0.1:55204 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:36:38.635 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58430 10 6452 1 2025-11-05 15:37:27.774 00:00:10.338 TCP 23.104.0.1:40386 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:37:38.847 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37330 10 6452 1 2025-11-05 15:38:07.514 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 15:38:07.582 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 15:38:28.168 00:00:10.367 TCP 23.104.0.1:60200 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:38:39.085 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55988 10 6452 1 2025-11-05 15:39:28.572 00:00:10.367 TCP 23.104.0.1:36196 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:39:39.294 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51252 10 6452 1 2025-11-05 15:40:28.986 00:00:10.376 TCP 23.104.0.1:33838 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:40:39.472 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36636 10 6452 1 2025-11-05 15:36:52.991 00:05:03.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 15:41:29.407 00:00:10.360 TCP 23.104.0.1:36338 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:41:39.680 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60368 10 6452 1 2025-11-05 15:37:52.995 00:05:03.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 15:42:29.813 00:00:10.370 TCP 23.104.0.1:42908 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:42:39.894 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44052 10 6452 1 2025-11-05 15:43:08.300 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 15:43:08.394 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 15:43:30.221 00:00:10.363 TCP 23.104.0.1:60172 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:43:40.109 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50628 10 6452 1 2025-11-05 15:44:30.625 00:00:10.626 TCP 23.104.0.1:57722 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:44:40.318 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44114 10 6452 1 2025-11-05 15:45:31.289 00:00:10.329 TCP 23.104.0.1:35404 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:45:40.529 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44590 10 6452 1 2025-11-05 15:46:31.661 00:00:10.369 TCP 23.104.0.1:59162 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:46:40.752 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51214 10 6452 1 2025-11-05 15:42:52.992 00:05:03.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 15:47:32.093 00:00:10.364 TCP 23.104.0.1:34706 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:47:40.973 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:57702 10 6452 1 2025-11-05 15:43:52.996 00:05:03.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 15:48:07.730 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 15:48:07.485 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 15:48:32.494 00:00:10.367 TCP 23.104.0.1:47930 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:48:41.162 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50064 10 6452 1 2025-11-05 15:49:32.900 00:00:10.363 TCP 23.104.0.1:42454 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:49:41.333 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46676 10 6452 1 2025-11-05 15:50:33.304 00:00:10.361 TCP 23.104.0.1:58260 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:50:41.543 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51926 10 6452 1 2025-11-05 15:51:33.704 00:00:10.364 TCP 23.104.0.1:42402 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:51:41.755 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57610 10 6452 1 2025-11-05 15:52:34.113 00:00:10.361 TCP 23.104.0.1:45936 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:48:52.994 00:05:03.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 15:52:41.967 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37910 10 6452 1 2025-11-05 15:53:07.787 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 15:53:07.884 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 15:53:34.515 00:00:10.364 TCP 23.104.0.1:41242 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:49:52.998 00:05:03.162 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 15:53:42.183 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54258 10 6452 1 2025-11-05 15:54:34.915 00:00:10.362 TCP 23.104.0.1:55162 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:54:42.359 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36150 10 6452 1 2025-11-05 15:55:35.319 00:00:10.328 TCP 23.104.0.1:36298 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:55:42.570 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:41764 10 6452 1 2025-11-05 15:56:35.684 00:00:10.364 TCP 23.104.0.1:48004 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:56:42.848 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52156 10 6452 1 2025-11-05 15:57:36.105 00:00:10.325 TCP 23.104.0.1:59422 -> 1.101.0.1:3000 11 1507 1 2025-11-05 15:57:43.085 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39836 10 6452 1 2025-11-05 15:58:07.923 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 15:58:07.948 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 15:58:36.472 00:00:10.364 TCP 23.104.0.1:41546 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492000, total packets: 1564, avg bps: 1026, avg pps: 0, avg bpp: 314 Time window: 2025-11-05 14:54:52 - 2025-11-05 15:58:46 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0026s User: 0.0026s Wall: 0.0020s flows/second: 79626.3 Runtime: 0.0021s