Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-07 23:53:57.342 00:05:56.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-07 23:58:44.120 00:00:10.363 TCP 23.104.0.1:37522 -> 1.101.0.1:3000 11 1507 1 2025-11-07 23:59:15.241 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-07 23:59:15.456 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-07 23:59:28.973 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:54790 10 6452 1 2025-11-07 23:54:57.338 00:05:56.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-07 23:59:44.523 00:00:10.370 TCP 23.104.0.1:41090 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:00:29.215 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50240 10 6452 1 2025-11-08 00:00:44.931 00:00:10.382 TCP 23.104.0.1:53834 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:01:29.434 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41556 10 6452 1 2025-11-08 00:01:45.353 00:00:10.363 TCP 23.104.0.1:39714 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:02:29.653 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40914 10 6452 1 2025-11-08 00:02:45.758 00:00:10.354 TCP 23.104.0.1:34324 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:03:29.869 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53852 10 6452 1 2025-11-08 00:03:46.137 00:00:10.379 TCP 23.104.0.1:37464 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:04:15.270 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 00:04:15.559 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 00:04:30.066 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33594 10 6452 1 2025-11-08 00:04:46.547 00:00:10.361 TCP 23.104.0.1:40162 -> 1.101.0.1:3000 11 1507 1 2025-11-07 23:59:57.342 00:05:56.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 00:05:30.283 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60202 10 6452 1 2025-11-08 00:00:57.338 00:05:56.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 00:05:46.945 00:00:10.373 TCP 23.104.0.1:51642 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:06:30.497 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55332 10 6452 1 2025-11-08 00:06:47.356 00:00:10.368 TCP 23.104.0.1:46186 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:07:30.715 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57890 10 6452 1 2025-11-08 00:07:47.762 00:00:10.377 TCP 23.104.0.1:44422 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:08:30.893 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47322 10 6452 1 2025-11-08 00:08:48.177 00:00:10.368 TCP 23.104.0.1:47792 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:09:15.475 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 00:09:15.568 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 00:09:31.107 00:00:10.505 TCP 1.101.0.1:3000 -> 22.102.0.1:46182 10 6452 1 2025-11-08 00:09:48.581 00:00:10.596 TCP 23.104.0.1:50330 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:10:31.654 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43712 10 6452 1 2025-11-08 00:05:57.343 00:05:56.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 00:10:49.219 00:00:10.325 TCP 23.104.0.1:60704 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:11:31.869 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36676 10 6452 1 2025-11-08 00:06:57.340 00:05:56.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 00:11:49.588 00:00:10.363 TCP 23.104.0.1:43662 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:12:32.087 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52268 10 6452 1 2025-11-08 00:12:49.990 00:00:10.369 TCP 23.104.0.1:57014 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:13:32.300 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40902 10 6452 1 2025-11-08 00:13:50.398 00:00:10.362 TCP 23.104.0.1:56540 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:14:15.697 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 00:14:15.845 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 00:14:32.512 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48686 10 6452 1 2025-11-08 00:14:50.812 00:00:10.366 TCP 23.104.0.1:54244 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:15:32.730 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47942 10 6452 1 2025-11-08 00:15:51.225 00:00:10.326 TCP 23.104.0.1:35896 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:16:32.944 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46690 10 6452 1 2025-11-08 00:11:57.346 00:05:56.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 00:16:51.592 00:00:10.372 TCP 23.104.0.1:55216 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:17:33.173 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59844 10 6452 1 2025-11-08 00:12:57.342 00:05:56.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 00:17:52.009 00:00:10.363 TCP 23.104.0.1:44748 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:18:33.345 00:00:10.368 TCP 1.101.0.1:3000 -> 22.102.0.1:53776 10 6452 1 2025-11-08 00:18:52.412 00:00:10.372 TCP 23.104.0.1:37024 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:19:15.600 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 00:19:15.753 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 00:19:33.751 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58036 10 6452 1 2025-11-08 00:19:52.820 00:00:10.327 TCP 23.104.0.1:47962 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:20:33.973 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47700 10 6452 1 2025-11-08 00:20:53.189 00:00:10.370 TCP 23.104.0.1:56786 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:21:34.194 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37622 10 6452 1 2025-11-08 00:21:53.594 00:00:10.363 TCP 23.104.0.1:49170 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:22:34.415 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:50738 12 10369 1 2025-11-08 00:17:57.346 00:05:56.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 00:22:54.002 00:00:10.435 TCP 23.104.0.1:47542 -> 1.101.0.1:3000 15 1926 1 2025-11-08 00:23:34.618 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57608 10 6452 1 2025-11-08 00:18:57.343 00:05:56.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 00:23:54.480 00:00:10.368 TCP 23.104.0.1:36610 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:24:15.855 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 00:24:15.821 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 00:24:34.795 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48096 10 6452 1 2025-11-08 00:24:54.888 00:00:10.330 TCP 23.104.0.1:58886 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:25:35.014 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41368 10 6452 1 2025-11-08 00:25:55.253 00:00:10.363 TCP 23.104.0.1:59338 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:26:35.232 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53176 10 6452 1 2025-11-08 00:26:55.660 00:00:10.364 TCP 23.104.0.1:54276 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:27:35.454 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50012 10 6452 1 2025-11-08 00:27:56.090 00:00:10.329 TCP 23.104.0.1:45658 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:28:35.665 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58232 10 6452 1 2025-11-08 00:23:57.346 00:05:56.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 00:28:56.457 00:00:10.372 TCP 23.104.0.1:37974 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:29:16.059 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 00:29:16.144 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 00:29:35.835 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53846 10 6452 1 2025-11-08 00:24:57.343 00:05:56.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 00:29:56.867 00:00:10.375 TCP 23.104.0.1:42544 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:30:36.073 00:00:10.506 TCP 1.101.0.1:3000 -> 22.102.0.1:57630 10 6452 1 2025-11-08 00:30:57.279 00:00:10.365 TCP 23.104.0.1:32904 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:31:36.620 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:51852 10 6452 1 2025-11-08 00:31:57.684 00:00:10.448 TCP 23.104.0.1:57550 -> 1.101.0.1:3000 15 1926 1 2025-11-08 00:32:36.825 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:45680 12 10375 1 2025-11-08 00:32:58.170 00:00:10.365 TCP 23.104.0.1:58436 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:33:37.075 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37442 10 6452 1 2025-11-08 00:33:58.574 00:00:10.365 TCP 23.104.0.1:41336 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:34:15.912 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 00:34:15.891 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 00:34:37.300 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50252 10 6452 1 2025-11-08 00:29:57.348 00:05:56.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 00:34:58.977 00:00:10.372 TCP 23.104.0.1:33046 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:35:37.525 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38202 10 6452 1 2025-11-08 00:30:57.347 00:05:56.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 00:35:59.386 00:00:10.325 TCP 23.104.0.1:49454 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:36:37.705 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56232 10 6452 1 2025-11-08 00:36:59.747 00:00:10.369 TCP 23.104.0.1:59200 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:37:37.919 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39302 10 6452 1 2025-11-08 00:38:00.150 00:00:10.327 TCP 23.104.0.1:55400 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:38:38.127 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49708 10 6452 1 2025-11-08 00:39:00.513 00:00:10.592 TCP 23.104.0.1:47762 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:39:16.280 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 00:39:16.449 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 00:39:38.352 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48104 10 6452 1 2025-11-08 00:40:01.144 00:00:10.320 TCP 23.104.0.1:53740 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:40:38.570 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37246 10 6452 1 2025-11-08 00:35:57.350 00:05:56.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 00:41:01.502 00:00:10.371 TCP 23.104.0.1:54110 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:41:38.800 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40578 10 6452 1 2025-11-08 00:36:57.346 00:05:56.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 00:42:01.908 00:00:10.320 TCP 23.104.0.1:50104 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:42:38.973 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:58348 10 6452 1 2025-11-08 00:43:02.271 00:00:10.378 TCP 23.104.0.1:59720 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:43:39.220 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:54584 10 6452 1 2025-11-08 00:44:16.377 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 00:44:16.292 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 00:44:02.690 00:00:10.321 TCP 23.104.0.1:34356 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:44:39.387 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56596 10 6452 1 2025-11-08 00:45:03.063 00:00:10.359 TCP 23.104.0.1:60846 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:45:39.599 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56310 10 6452 1 2025-11-08 00:46:03.461 00:00:10.359 TCP 23.104.0.1:40842 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:46:39.815 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45572 10 6452 1 2025-11-08 00:41:57.350 00:05:56.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 00:47:03.856 00:00:10.341 TCP 23.104.0.1:44610 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:47:40.040 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58490 10 6452 1 2025-11-08 00:42:57.347 00:05:56.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 00:48:04.232 00:00:10.363 TCP 23.104.0.1:54808 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:48:40.257 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37706 10 6452 1 2025-11-08 00:49:16.131 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 00:49:16.217 00:00:00.010 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 00:49:04.635 00:00:10.367 TCP 23.104.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:49:40.474 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51108 10 6452 1 2025-11-08 00:50:05.060 00:00:10.371 TCP 23.104.0.1:32996 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:50:40.684 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33812 10 6452 1 2025-11-08 00:51:05.468 00:00:10.361 TCP 23.104.0.1:58744 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:51:40.899 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40778 10 6452 1 2025-11-08 00:52:05.869 00:00:10.369 TCP 23.104.0.1:45572 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:52:41.121 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54506 10 6452 1 2025-11-08 00:47:57.352 00:05:56.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 00:53:06.281 00:00:11.989 TCP 23.104.0.1:40900 -> 1.101.0.1:3000 13 1611 1 2025-11-08 00:53:41.333 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35922 10 6452 1 2025-11-08 00:48:57.348 00:05:56.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 00:54:16.272 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 00:54:16.544 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 00:54:08.311 00:00:10.365 TCP 23.104.0.1:38660 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:54:41.505 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46450 10 6452 1 2025-11-08 00:55:08.721 00:00:10.372 TCP 23.104.0.1:49526 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:55:41.707 00:00:10.459 TCP 1.101.0.1:3000 -> 22.102.0.1:42326 10 6452 1 2025-11-08 00:56:09.128 00:00:10.370 TCP 23.104.0.1:37536 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:56:42.204 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44864 10 6452 1 2025-11-08 00:57:09.535 00:00:10.327 TCP 23.104.0.1:53326 -> 1.101.0.1:3000 11 1507 1 2025-11-08 00:57:42.412 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34038 10 6452 1 2025-11-08 00:58:09.903 00:00:10.329 TCP 23.104.0.1:58278 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500678, total packets: 1576, avg bps: 1036, avg pps: 0, avg bpp: 317 Time window: 2025-11-07 23:53:57 - 2025-11-08 00:58:20 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0029s Wall: 0.0025s flows/second: 65991.5 Runtime: 0.0025s