Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 05:53:57.452 00:05:56.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 05:58:54.891 00:00:10.389 TCP 23.104.0.1:60198 -> 1.101.0.1:3000 11 1507 1 2025-11-08 05:59:22.491 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 05:59:22.493 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 05:59:21.826 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35350 10 6452 1 2025-11-08 05:54:57.450 00:05:56.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 05:59:55.325 00:00:10.565 TCP 23.104.0.1:34190 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:00:22.066 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34902 10 6452 1 2025-11-08 06:00:55.936 00:00:10.382 TCP 23.104.0.1:53156 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:01:22.277 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:59290 10 6452 1 2025-11-08 06:01:56.352 00:00:10.368 TCP 23.104.0.1:58316 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:02:22.482 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43018 10 6452 1 2025-11-08 06:02:56.759 00:00:10.391 TCP 23.104.0.1:55316 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:03:22.690 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54052 10 6452 1 2025-11-08 06:03:57.187 00:00:10.372 TCP 23.104.0.1:44996 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:04:22.810 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:04:22.546 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 06:04:22.903 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35266 10 6452 1 2025-11-08 05:59:57.453 00:05:56.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 06:04:57.616 00:00:10.366 TCP 23.104.0.1:41726 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:05:23.121 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42118 10 6452 1 2025-11-08 06:00:57.450 00:05:56.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 06:05:58.022 00:00:10.362 TCP 23.104.0.1:45760 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:06:23.348 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51434 10 6452 1 2025-11-08 06:06:58.426 00:00:10.369 TCP 23.104.0.1:48674 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:07:23.564 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:36250 12 10369 1 2025-11-08 06:07:58.834 00:00:10.462 TCP 23.104.0.1:56356 -> 1.101.0.1:3000 15 1926 1 2025-11-08 06:08:23.765 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45988 10 6452 1 2025-11-08 06:08:59.338 00:00:10.362 TCP 23.104.0.1:35394 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:09:22.889 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:09:22.912 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 06:09:23.981 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:51962 10 6452 1 2025-11-08 06:09:59.737 00:00:10.369 TCP 23.104.0.1:57262 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:10:24.215 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33034 10 6452 1 2025-11-08 06:05:57.454 00:05:56.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 06:11:00.144 00:00:10.360 TCP 23.104.0.1:54824 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:11:24.425 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:42156 10 6452 1 2025-11-08 06:06:57.451 00:05:56.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 06:12:00.544 00:00:10.324 TCP 23.104.0.1:33472 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:12:24.621 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37318 10 6452 1 2025-11-08 06:13:00.906 00:00:10.370 TCP 23.104.0.1:52454 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:13:24.839 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43308 10 6452 1 2025-11-08 06:14:01.311 00:00:10.367 TCP 23.104.0.1:39122 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:14:22.747 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 06:14:22.919 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:14:25.072 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57226 10 6452 1 2025-11-08 06:15:01.718 00:00:10.390 TCP 23.104.0.1:40282 -> 1.101.0.1:3000 12 1559 1 2025-11-08 06:15:25.247 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51498 10 6452 1 2025-11-08 06:16:02.148 00:00:10.370 TCP 23.104.0.1:36874 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:16:25.459 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46558 10 6452 1 2025-11-08 06:11:57.454 00:05:56.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 06:17:02.587 00:00:10.364 TCP 23.104.0.1:43822 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:17:25.669 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39282 10 6452 1 2025-11-08 06:12:57.454 00:05:56.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 06:18:02.993 00:00:10.394 TCP 23.104.0.1:55926 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:18:25.882 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34074 10 6452 1 2025-11-08 06:19:03.426 00:00:10.367 TCP 23.104.0.1:36624 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:19:23.054 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:19:22.853 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 06:19:26.113 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58948 10 6452 1 2025-11-08 06:20:03.830 00:00:10.393 TCP 23.104.0.1:40694 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:20:26.338 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:43210 10 6452 1 2025-11-08 06:21:04.260 00:00:11.301 TCP 23.104.0.1:34960 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:21:26.530 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:42230 12 6556 1 2025-11-08 06:22:05.590 00:00:10.324 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:22:26.771 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35624 10 6452 1 2025-11-08 06:17:57.458 00:05:56.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 06:23:05.951 00:00:10.366 TCP 23.104.0.1:37778 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:23:26.943 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46376 10 6452 1 2025-11-08 06:18:57.455 00:05:56.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 06:24:06.358 00:00:10.365 TCP 23.104.0.1:57956 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:24:23.788 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 06:24:23.730 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:24:27.191 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44002 10 6452 1 2025-11-08 06:25:06.759 00:00:10.379 TCP 23.104.0.1:54552 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:25:27.402 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59636 10 6452 1 2025-11-08 06:26:07.177 00:00:10.362 TCP 23.104.0.1:45772 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:26:27.622 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59824 10 6452 1 2025-11-08 06:27:07.578 00:00:14.463 TCP 23.104.0.1:60646 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:27:27.846 00:00:10.579 TCP 1.101.0.1:3000 -> 22.102.0.1:33194 10 6452 1 2025-11-08 06:28:12.095 00:00:10.362 TCP 23.104.0.1:49852 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:28:28.472 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34800 10 6452 1 2025-11-08 06:23:57.458 00:05:56.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 06:29:23.205 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:29:12.496 00:00:10.365 TCP 23.104.0.1:57038 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:29:23.164 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 06:29:28.646 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60940 10 6452 1 2025-11-08 06:24:57.457 00:05:56.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 06:30:12.898 00:00:10.983 TCP 23.104.0.1:37614 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:30:28.819 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35826 10 6452 1 2025-11-08 06:31:13.920 00:00:10.388 TCP 23.104.0.1:60944 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:31:29.051 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60830 10 6452 1 2025-11-08 06:32:14.346 00:00:10.364 TCP 23.104.0.1:42848 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:32:29.221 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47154 10 6452 1 2025-11-08 06:33:14.746 00:00:10.388 TCP 23.104.0.1:42704 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:33:29.436 00:00:10.297 TCP 1.101.0.1:3000 -> 22.102.0.1:53564 10 6452 1 2025-11-08 06:34:15.173 00:00:10.369 TCP 23.104.0.1:57682 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:34:23.422 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:34:23.287 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 06:34:29.774 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46770 10 6452 1 2025-11-08 06:29:57.463 00:05:56.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 06:35:15.577 00:00:10.366 TCP 23.104.0.1:39354 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:35:29.995 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:50646 10 6452 1 2025-11-08 06:30:57.460 00:05:56.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 06:36:15.980 00:00:10.390 TCP 23.104.0.1:33444 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:36:30.188 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40634 10 6452 1 2025-11-08 06:37:16.407 00:00:10.367 TCP 23.104.0.1:57706 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:37:30.400 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56210 10 6452 1 2025-11-08 06:38:16.813 00:00:10.361 TCP 23.104.0.1:47046 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:38:30.618 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41090 10 6452 1 2025-11-08 06:39:23.403 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 06:39:23.450 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:39:17.215 00:00:10.745 TCP 23.104.0.1:42088 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:39:30.828 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58270 10 6452 1 2025-11-08 06:40:18.010 00:00:10.368 TCP 23.104.0.1:52640 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:40:31.064 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49676 10 6452 1 2025-11-08 06:35:57.464 00:05:56.837 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 06:41:18.415 00:00:10.373 TCP 23.104.0.1:59870 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:41:31.236 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34416 10 6452 1 2025-11-08 06:36:57.463 00:05:56.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 06:42:18.822 00:00:10.361 TCP 23.104.0.1:43090 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:42:31.409 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48554 10 6452 1 2025-11-08 06:43:19.220 00:00:10.368 TCP 23.104.0.1:42124 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:43:31.578 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50446 10 6452 1 2025-11-08 06:44:23.195 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:44:23.470 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 06:44:19.642 00:00:10.364 TCP 23.104.0.1:50052 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:44:31.803 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36110 10 6452 1 2025-11-08 06:45:20.046 00:00:10.366 TCP 23.104.0.1:55386 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:45:32.042 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46936 10 6452 1 2025-11-08 06:46:20.451 00:00:10.368 TCP 23.104.0.1:60816 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:46:32.251 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46940 10 6452 1 2025-11-08 06:41:57.466 00:05:56.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 06:47:20.859 00:00:10.373 TCP 23.104.0.1:44292 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:47:32.465 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49926 10 6452 1 2025-11-08 06:42:57.465 00:05:56.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 06:48:21.273 00:00:10.365 TCP 23.104.0.1:39352 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:48:32.678 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:44226 10 6452 1 2025-11-08 06:49:23.968 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 06:49:23.915 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:49:21.682 00:00:10.369 TCP 23.104.0.1:53666 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:49:32.858 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58984 10 6452 1 2025-11-08 06:50:22.101 00:00:10.369 TCP 23.104.0.1:45204 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:50:33.080 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54192 10 6452 1 2025-11-08 06:51:22.511 00:00:10.323 TCP 23.104.0.1:40450 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:51:33.300 00:00:10.253 TCP 1.101.0.1:3000 -> 22.102.0.1:58578 10 6452 1 2025-11-08 06:52:22.873 00:00:10.381 TCP 23.104.0.1:48968 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:52:33.610 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:60394 10 6452 1 2025-11-08 06:47:57.469 00:05:56.835 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 06:53:23.291 00:00:10.324 TCP 23.104.0.1:42156 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:53:33.790 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42914 10 6452 1 2025-11-08 06:48:57.469 00:05:56.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 06:54:23.608 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 06:54:23.667 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:54:23.657 00:00:10.361 TCP 23.104.0.1:44352 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:54:34.003 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48724 10 6452 1 2025-11-08 06:55:24.058 00:00:10.363 TCP 23.104.0.1:43728 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:55:34.225 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60724 10 6452 1 2025-11-08 06:56:24.460 00:00:10.363 TCP 23.104.0.1:41450 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:56:34.443 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45844 10 6452 1 2025-11-08 06:57:24.859 00:00:10.370 TCP 23.104.0.1:57340 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:57:34.654 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36380 10 6452 1 2025-11-08 06:58:25.265 00:00:10.366 TCP 23.104.0.1:37282 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:58:34.824 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43982 10 6452 1 Summary: total flows: 164, total bytes: 502840, total packets: 1581, avg bps: 1034, avg pps: 0, avg bpp: 318 Time window: 2025-11-08 05:53:57 - 2025-11-08 06:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0011s Wall: 0.0026s flows/second: 62647.2 Runtime: 0.0026s