Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-05 18:54:53.122 00:05:03.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 18:59:04.785 00:00:10.366 TCP 23.104.0.1:45036 -> 1.101.0.1:3000 11 1507 1 2025-11-05 18:59:30.180 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48208 10 6452 1 2025-11-05 18:55:53.125 00:05:03.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 19:00:05.197 00:00:10.368 TCP 23.104.0.1:60810 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:00:30.387 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58634 10 6452 1 2025-11-05 19:01:05.600 00:00:10.367 TCP 23.104.0.1:35860 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:01:30.597 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43952 10 6452 1 2025-11-05 19:02:06.006 00:00:10.442 TCP 23.104.0.1:53216 -> 1.101.0.1:3000 15 1926 1 2025-11-05 19:02:30.816 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:57536 12 10375 1 2025-11-05 19:03:11.773 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 19:03:11.387 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 19:03:06.484 00:00:10.331 TCP 23.104.0.1:32986 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:03:31.089 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:32820 10 6452 1 2025-11-05 19:04:06.846 00:00:10.383 TCP 23.104.0.1:33074 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:04:31.297 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38118 10 6452 1 2025-11-05 19:00:53.124 00:05:03.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 19:05:07.266 00:00:10.366 TCP 23.104.0.1:51266 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:05:31.509 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54298 10 6452 1 2025-11-05 19:01:53.127 00:05:03.095 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 19:06:07.671 00:00:10.386 TCP 23.104.0.1:33336 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:06:31.729 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44254 10 6452 1 2025-11-05 19:07:08.097 00:00:10.367 TCP 23.104.0.1:41226 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:07:31.895 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36812 10 6452 1 2025-11-05 19:08:11.898 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 19:08:11.750 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 19:08:08.505 00:00:10.367 TCP 23.104.0.1:45198 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:08:32.111 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:42602 10 6452 1 2025-11-05 19:09:08.910 00:00:10.328 TCP 23.104.0.1:52698 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:09:32.291 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48988 10 6452 1 2025-11-05 19:10:09.294 00:00:10.328 TCP 23.104.0.1:60856 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:10:32.477 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43788 10 6452 1 2025-11-05 19:06:53.125 00:05:03.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 19:11:09.662 00:00:10.344 TCP 23.104.0.1:46412 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:11:32.690 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41652 10 6452 1 2025-11-05 19:07:53.127 00:05:03.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 19:12:10.029 00:00:10.325 TCP 23.104.0.1:43280 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:12:32.872 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49154 10 6452 1 2025-11-05 19:13:11.923 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 19:13:12.028 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 19:13:10.394 00:00:10.368 TCP 23.104.0.1:49140 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:13:33.095 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50192 10 6452 1 2025-11-05 19:14:10.800 00:00:10.368 TCP 23.104.0.1:58664 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:14:33.311 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56170 10 6452 1 2025-11-05 19:15:11.204 00:00:10.324 TCP 23.104.0.1:55206 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:15:33.530 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59838 10 6452 1 2025-11-05 19:16:11.567 00:00:10.364 TCP 23.104.0.1:50616 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:16:33.742 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44414 10 6452 1 2025-11-05 19:12:53.107 00:05:03.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 19:17:11.971 00:00:10.374 TCP 23.104.0.1:56872 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:17:33.959 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36580 10 6452 1 2025-11-05 19:13:53.109 00:05:03.116 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 19:18:12.154 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 19:18:12.110 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 19:18:12.387 00:00:10.364 TCP 23.104.0.1:33896 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:18:34.189 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55928 10 6452 1 2025-11-05 19:19:12.783 00:00:10.327 TCP 23.104.0.1:49236 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:19:34.410 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57356 10 6452 1 2025-11-05 19:20:13.153 00:00:10.328 TCP 23.104.0.1:51226 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:20:34.627 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45982 10 6452 1 2025-11-05 19:21:13.522 00:00:10.369 TCP 23.104.0.1:42694 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:21:34.841 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36082 10 6452 1 2025-11-05 19:22:13.926 00:00:10.381 TCP 23.104.0.1:60018 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:22:35.077 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55220 10 6452 1 2025-11-05 19:18:53.107 00:05:03.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 19:23:11.947 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 19:23:12.230 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 19:23:14.345 00:00:10.368 TCP 23.104.0.1:45902 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:23:35.289 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56520 10 6452 1 2025-11-05 19:19:53.111 00:05:03.118 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 19:24:14.752 00:00:10.329 TCP 23.104.0.1:44228 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:24:35.505 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48178 10 6452 1 2025-11-05 19:25:15.125 00:00:10.366 TCP 23.104.0.1:44884 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:25:35.674 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59026 10 6452 1 2025-11-05 19:26:15.531 00:00:10.330 TCP 23.104.0.1:52848 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:26:35.893 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38962 10 6452 1 2025-11-05 19:27:15.898 00:00:11.028 TCP 23.104.0.1:52640 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:27:36.110 00:00:17.060 TCP 1.101.0.1:3000 -> 22.102.0.1:36552 10 6452 1 2025-11-05 19:28:11.935 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 19:28:12.264 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 19:28:16.967 00:00:10.381 TCP 23.104.0.1:59584 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:28:43.233 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46310 10 6452 1 2025-11-05 19:24:53.114 00:05:03.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 19:29:17.389 00:00:10.379 TCP 23.104.0.1:43332 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:29:43.445 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58946 10 6452 1 2025-11-05 19:25:53.118 00:05:03.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 19:30:17.820 00:00:10.367 TCP 23.104.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:30:43.659 00:00:10.342 TCP 1.101.0.1:3000 -> 22.102.0.1:34834 10 6452 1 2025-11-05 19:31:18.226 00:00:10.321 TCP 23.104.0.1:55146 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:31:44.039 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:44626 12 10369 1 2025-11-05 19:32:18.588 00:00:10.443 TCP 23.104.0.1:58944 -> 1.101.0.1:3000 15 1926 1 2025-11-05 19:32:44.291 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49044 10 6452 1 2025-11-05 19:33:12.339 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 19:33:12.175 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 19:33:19.093 00:00:10.362 TCP 23.104.0.1:47164 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:33:44.502 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57778 10 6452 1 2025-11-05 19:34:19.492 00:00:10.363 TCP 23.104.0.1:52584 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:34:44.723 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39702 10 6452 1 2025-11-05 19:30:53.116 00:05:03.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 19:35:19.893 00:00:10.375 TCP 23.104.0.1:47832 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:31:53.124 00:05:03.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 19:35:44.937 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:55522 10 6452 1 2025-11-05 19:36:20.313 00:00:10.319 TCP 23.104.0.1:57114 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:36:45.178 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34618 10 6452 1 2025-11-05 19:37:20.672 00:00:10.321 TCP 23.104.0.1:49000 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:37:45.402 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49558 10 6452 1 2025-11-05 19:38:12.227 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 19:38:12.320 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 19:38:21.031 00:00:10.366 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:38:45.621 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55294 10 6452 1 2025-11-05 19:39:21.433 00:00:10.362 TCP 23.104.0.1:33912 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:39:45.833 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46472 10 6452 1 2025-11-05 19:40:21.831 00:00:10.382 TCP 23.104.0.1:56438 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:40:46.082 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57188 10 6452 1 2025-11-05 19:36:53.124 00:05:03.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 19:41:22.254 00:00:10.323 TCP 23.104.0.1:41372 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:41:46.297 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38162 10 6452 1 2025-11-05 19:37:53.126 00:05:03.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 19:42:22.613 00:00:10.362 TCP 23.104.0.1:50148 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:42:46.517 00:00:10.710 TCP 1.101.0.1:3000 -> 22.102.0.1:39536 10 6452 1 2025-11-05 19:43:12.602 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 19:43:12.610 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 19:43:23.017 00:00:10.325 TCP 23.104.0.1:54420 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:43:47.267 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56324 10 6452 1 2025-11-05 19:44:23.382 00:00:10.365 TCP 23.104.0.1:37452 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:44:47.486 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42586 10 6452 1 2025-11-05 19:45:23.788 00:00:10.323 TCP 23.104.0.1:59652 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:45:47.708 00:00:10.629 TCP 1.101.0.1:3000 -> 22.102.0.1:53988 10 6452 1 2025-11-05 19:46:24.149 00:00:10.365 TCP 23.104.0.1:54184 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:42:53.129 00:05:03.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 19:46:48.376 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33286 10 6452 1 2025-11-05 19:47:24.551 00:00:10.368 TCP 23.104.0.1:56954 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:43:53.131 00:05:03.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 19:47:48.595 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44720 10 6452 1 2025-11-05 19:48:12.459 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 19:48:12.574 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 19:48:24.955 00:00:10.371 TCP 23.104.0.1:43820 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:48:48.819 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53380 10 6452 1 2025-11-05 19:49:25.358 00:00:10.365 TCP 23.104.0.1:51350 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:49:49.037 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56410 10 6452 1 2025-11-05 19:50:25.761 00:00:10.386 TCP 23.104.0.1:51116 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:50:49.278 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57398 10 6452 1 2025-11-05 19:51:26.185 00:00:10.364 TCP 23.104.0.1:53272 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:51:49.453 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44258 10 6452 1 2025-11-05 19:52:26.586 00:00:10.366 TCP 23.104.0.1:59730 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:48:53.129 00:05:03.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-05 19:52:49.670 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32804 10 6452 1 2025-11-05 19:53:12.715 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 19:53:12.412 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 19:53:26.990 00:00:10.368 TCP 23.104.0.1:51498 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:49:53.133 00:05:03.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-05 19:53:49.887 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59558 10 6452 1 2025-11-05 19:54:27.398 00:00:10.363 TCP 23.104.0.1:46610 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:54:50.111 00:00:10.794 TCP 1.101.0.1:3000 -> 22.102.0.1:52078 10 6452 1 2025-11-05 19:55:27.804 00:00:10.342 TCP 23.104.0.1:47950 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:55:50.945 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39296 10 6452 1 2025-11-05 19:56:28.190 00:00:10.350 TCP 23.104.0.1:53124 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:56:51.182 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50544 10 6452 1 2025-11-05 19:57:28.577 00:00:10.372 TCP 23.104.0.1:39570 -> 1.101.0.1:3000 11 1507 1 2025-11-05 19:57:51.399 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52392 10 6452 1 2025-11-05 19:58:12.800 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-05 19:58:12.845 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-05 19:58:28.987 00:00:10.780 TCP 23.104.0.1:47432 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500574, total packets: 1574, avg bps: 1046, avg pps: 0, avg bpp: 318 Time window: 2025-11-05 18:54:53 - 2025-11-05 19:58:39 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0049s User: 0.0000s Wall: 0.0022s flows/second: 74022.5 Runtime: 0.0022s