Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 06:53:57.471 00:05:56.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 06:59:23.812 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 06:59:23.603 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 06:59:25.670 00:00:10.371 TCP 23.104.0.1:33104 -> 1.101.0.1:3000 11 1507 1 2025-11-08 06:59:35.042 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54024 10 6452 1 2025-11-08 06:54:57.468 00:05:56.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 07:00:26.103 00:00:10.368 TCP 23.104.0.1:43112 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:00:35.253 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52020 10 6452 1 2025-11-08 07:01:26.511 00:00:10.361 TCP 23.104.0.1:51290 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:01:35.472 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33998 10 6452 1 2025-11-08 07:02:26.908 00:00:10.365 TCP 23.104.0.1:49334 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:02:35.683 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48680 10 6452 1 2025-11-08 07:03:27.315 00:00:10.359 TCP 23.104.0.1:47062 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:03:35.912 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32864 10 6452 1 2025-11-08 07:04:24.185 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 07:04:24.329 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 07:04:27.713 00:00:10.377 TCP 23.104.0.1:52822 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:04:36.126 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52956 10 6452 1 2025-11-08 06:59:57.474 00:05:56.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 07:05:28.131 00:00:10.324 TCP 23.104.0.1:51542 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:05:36.340 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:32856 10 6452 1 2025-11-08 07:00:57.471 00:05:56.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 07:06:28.491 00:00:10.365 TCP 23.104.0.1:36050 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:06:36.567 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45154 10 6452 1 2025-11-08 07:07:28.895 00:00:10.337 TCP 23.104.0.1:39254 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:07:36.781 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43776 10 6452 1 2025-11-08 07:08:29.279 00:00:10.473 TCP 23.104.0.1:49590 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:08:37.003 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:49984 10 6452 1 2025-11-08 07:09:23.994 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 07:09:23.928 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 07:09:29.800 00:00:10.353 TCP 23.104.0.1:40754 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:09:37.267 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50220 10 6452 1 2025-11-08 07:10:30.189 00:00:10.367 TCP 23.104.0.1:46008 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:10:37.485 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48214 10 6452 1 2025-11-08 07:05:57.476 00:05:56.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 07:11:30.599 00:00:10.367 TCP 23.104.0.1:46296 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:11:37.661 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40530 10 6452 1 2025-11-08 07:06:57.473 00:05:56.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 07:12:31.006 00:00:10.362 TCP 23.104.0.1:60444 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:12:37.874 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49938 10 6452 1 2025-11-08 07:13:31.408 00:00:10.363 TCP 23.104.0.1:52860 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:13:38.098 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59200 10 6452 1 2025-11-08 07:14:23.866 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 07:14:23.983 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 07:14:31.818 00:00:10.363 TCP 23.104.0.1:49928 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:14:38.310 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36686 10 6452 1 2025-11-08 07:15:32.219 00:00:10.645 TCP 23.104.0.1:48916 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:15:38.536 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51290 10 6452 1 2025-11-08 07:16:32.910 00:00:10.364 TCP 23.104.0.1:58596 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:16:38.751 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:43708 10 6452 1 2025-11-08 07:11:57.483 00:05:56.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 07:17:33.313 00:00:10.366 TCP 23.104.0.1:60418 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:17:38.994 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:51554 10 6452 1 2025-11-08 07:12:57.481 00:05:56.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 07:18:33.715 00:00:10.372 TCP 23.104.0.1:35848 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:18:39.205 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55194 10 6452 1 2025-11-08 07:19:24.284 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 07:19:23.918 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 07:19:34.123 00:00:10.369 TCP 23.104.0.1:33188 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:19:39.419 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41966 10 6452 1 2025-11-08 07:20:34.530 00:00:10.323 TCP 23.104.0.1:35790 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:20:39.630 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39068 10 6452 1 2025-11-08 07:21:34.888 00:00:10.391 TCP 23.104.0.1:54204 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:21:39.857 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56664 10 6452 1 2025-11-08 07:22:35.313 00:00:10.362 TCP 23.104.0.1:54136 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:22:40.041 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:59756 10 6452 1 2025-11-08 07:17:57.485 00:05:56.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 07:23:35.713 00:00:10.337 TCP 23.104.0.1:44068 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:23:40.220 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44750 10 6452 1 2025-11-08 07:18:57.483 00:05:56.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 07:24:24.275 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 07:24:24.079 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 07:24:36.106 00:00:10.370 TCP 23.104.0.1:37750 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:24:40.443 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44120 10 6452 1 2025-11-08 07:25:36.512 00:00:10.327 TCP 23.104.0.1:50558 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:25:40.656 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34152 10 6452 1 2025-11-08 07:26:36.879 00:00:10.359 TCP 23.104.0.1:59432 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:26:40.827 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45132 10 6452 1 2025-11-08 07:27:41.009 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:38856 10 6452 1 2025-11-08 07:27:37.283 00:00:10.368 TCP 23.104.0.1:49804 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:28:37.683 00:00:10.369 TCP 23.104.0.1:47636 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:28:41.219 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57580 10 6452 1 2025-11-08 07:23:57.486 00:05:56.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 07:29:24.418 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 07:29:24.421 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 07:29:41.436 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57840 10 6452 1 2025-11-08 07:29:38.104 00:00:10.325 TCP 23.104.0.1:40482 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:24:57.485 00:05:56.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 07:30:38.470 00:00:10.365 TCP 23.104.0.1:37930 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:30:41.647 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56506 10 6452 1 2025-11-08 07:31:38.872 00:00:10.367 TCP 23.104.0.1:58890 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:31:41.853 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53972 10 6452 1 2025-11-08 07:32:39.282 00:00:10.326 TCP 23.104.0.1:42434 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:32:42.030 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60132 10 6452 1 2025-11-08 07:33:39.652 00:00:10.362 TCP 23.104.0.1:37738 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:33:42.236 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55294 10 6452 1 2025-11-08 07:34:24.291 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 07:34:24.460 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 07:34:40.058 00:00:10.363 TCP 23.104.0.1:56658 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:34:42.450 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54960 10 6452 1 2025-11-08 07:29:57.489 00:05:56.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 07:35:40.460 00:00:10.366 TCP 23.104.0.1:53770 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:30:57.485 00:05:56.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 07:35:42.659 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37484 10 6452 1 2025-11-08 07:36:40.866 00:00:10.327 TCP 23.104.0.1:52364 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:36:42.878 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58460 10 6452 1 2025-11-08 07:37:41.233 00:00:10.364 TCP 23.104.0.1:44944 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:37:43.097 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33560 10 6452 1 2025-11-08 07:38:41.639 00:00:10.373 TCP 23.104.0.1:60660 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:38:43.308 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34044 10 6452 1 2025-11-08 07:39:24.664 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 07:39:24.592 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 07:39:43.520 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56284 10 6452 1 2025-11-08 07:39:42.059 00:00:10.326 TCP 23.104.0.1:36620 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:40:42.421 00:00:10.375 TCP 23.104.0.1:37224 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:40:43.728 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51760 10 6452 1 2025-11-08 07:35:57.489 00:05:56.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 07:36:57.490 00:05:56.834 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 07:41:42.834 00:00:10.399 TCP 23.104.0.1:47906 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:41:43.948 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:42886 10 6452 1 2025-11-08 07:42:43.289 00:00:10.363 TCP 23.104.0.1:54294 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:42:44.191 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51144 10 6452 1 2025-11-08 07:43:44.410 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35064 10 6452 1 2025-11-08 07:43:43.688 00:00:10.366 TCP 23.104.0.1:49244 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:44:24.671 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 07:44:24.709 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 07:44:44.629 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60796 10 6452 1 2025-11-08 07:44:44.130 00:00:10.366 TCP 23.104.0.1:47064 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:45:44.843 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54724 10 6452 1 2025-11-08 07:45:44.532 00:00:10.359 TCP 23.104.0.1:49404 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:46:44.927 00:00:10.374 TCP 23.104.0.1:41956 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:46:45.080 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38868 10 6452 1 2025-11-08 07:41:57.495 00:05:56.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 07:47:45.351 00:00:10.365 TCP 23.104.0.1:36862 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:42:57.495 00:05:56.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 07:47:45.295 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59198 10 6452 1 2025-11-08 07:48:45.750 00:00:10.368 TCP 23.104.0.1:38210 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:48:45.466 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60918 10 6452 1 2025-11-08 07:49:25.324 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 07:49:25.182 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 07:49:45.689 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55818 10 6452 1 2025-11-08 07:49:46.167 00:00:10.327 TCP 23.104.0.1:58788 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:50:46.528 00:00:10.362 TCP 23.104.0.1:40590 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:50:45.906 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47322 10 6452 1 2025-11-08 07:51:46.122 00:00:10.872 TCP 1.101.0.1:3000 -> 22.102.0.1:54016 10 6452 1 2025-11-08 07:51:46.924 00:00:10.383 TCP 23.104.0.1:40626 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:47:57.497 00:05:56.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 07:52:47.039 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57712 10 6452 1 2025-11-08 07:52:47.341 00:00:10.323 TCP 23.104.0.1:46910 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:53:47.254 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53816 10 6452 1 2025-11-08 07:48:57.494 00:05:56.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 07:53:47.702 00:00:10.368 TCP 23.104.0.1:55696 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:54:24.851 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 07:54:24.725 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 07:54:47.470 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51870 10 6452 1 2025-11-08 07:54:48.109 00:00:10.329 TCP 23.104.0.1:40870 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:55:48.475 00:00:10.366 TCP 23.104.0.1:48230 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:55:47.685 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36380 10 6452 1 2025-11-08 07:56:48.879 00:00:10.398 TCP 23.104.0.1:38396 -> 1.101.0.1:3000 11 1507 1 2025-11-08 07:56:47.893 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48982 10 6452 1 2025-11-08 07:57:48.115 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43178 10 6452 1 2025-11-08 07:57:49.312 00:00:10.826 TCP 23.104.0.1:53622 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490389, total packets: 1551, avg bps: 1020, avg pps: 0, avg bpp: 316 Time window: 2025-11-08 06:53:57 - 2025-11-08 07:58:00 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0054s User: 0.0009s Wall: 0.0028s flows/second: 58890.4 Runtime: 0.0028s