Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 09:53:57.528 00:05:56.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 09:58:50.259 00:00:10.364 TCP 23.104.0.1:57264 -> 1.101.0.1:3000 11 1507 1 2025-11-08 09:59:27.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 09:59:27.416 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 09:59:30.728 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50666 10 6452 1 2025-11-08 09:54:57.524 00:05:56.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 09:59:50.665 00:00:10.516 TCP 23.104.0.1:40516 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:00:30.948 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37112 10 6452 1 2025-11-08 10:00:51.219 00:00:10.367 TCP 23.104.0.1:60660 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:01:31.179 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40894 10 6452 1 2025-11-08 10:01:51.622 00:00:10.363 TCP 23.104.0.1:34746 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:02:31.354 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54158 10 6452 1 2025-11-08 10:02:52.023 00:00:21.329 TCP 23.104.0.1:60632 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:03:31.562 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:51044 10 6452 1 2025-11-08 10:04:03.416 00:00:10.363 TCP 23.104.0.1:60938 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:04:27.446 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 10:04:27.435 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:04:31.797 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41820 10 6452 1 2025-11-08 09:59:57.530 00:05:56.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 10:05:03.823 00:00:10.360 TCP 23.104.0.1:43120 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:05:31.967 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40418 10 6452 1 2025-11-08 10:00:57.528 00:05:56.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 10:06:04.221 00:00:10.364 TCP 23.104.0.1:56292 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:06:32.197 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58722 10 6452 1 2025-11-08 10:07:04.628 00:00:10.361 TCP 23.104.0.1:53266 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:07:32.424 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53018 10 6452 1 2025-11-08 10:08:05.023 00:00:10.319 TCP 23.104.0.1:48940 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:08:32.635 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51378 10 6452 1 2025-11-08 10:09:05.387 00:00:10.363 TCP 23.104.0.1:49130 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:09:27.506 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:09:27.611 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 10:09:32.857 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41164 10 6452 1 2025-11-08 10:10:05.788 00:00:10.374 TCP 23.104.0.1:40316 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:10:33.083 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58014 10 6452 1 2025-11-08 10:05:57.532 00:05:56.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 10:11:06.195 00:00:10.371 TCP 23.104.0.1:33184 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:11:33.258 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54084 10 6452 1 2025-11-08 10:06:57.529 00:05:56.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 10:12:06.600 00:00:10.571 TCP 23.104.0.1:42166 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:12:33.431 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56578 10 6452 1 2025-11-08 10:13:07.203 00:00:10.325 TCP 23.104.0.1:57202 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:13:33.601 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47432 10 6452 1 2025-11-08 10:14:07.565 00:00:10.374 TCP 23.104.0.1:42036 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:14:27.741 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:14:27.489 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 10:14:33.774 00:00:10.424 TCP 1.101.0.1:3000 -> 22.102.0.1:54994 10 6452 1 2025-11-08 10:15:07.974 00:00:10.367 TCP 23.104.0.1:55792 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:15:34.244 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44418 10 6452 1 2025-11-08 10:16:08.385 00:00:10.393 TCP 23.104.0.1:50938 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:16:34.416 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56310 10 6452 1 2025-11-08 10:11:57.534 00:05:56.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 10:17:08.843 00:00:10.394 TCP 23.104.0.1:52856 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:17:34.632 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47296 10 6452 1 2025-11-08 10:12:57.530 00:05:56.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 10:18:09.270 00:00:11.376 TCP 23.104.0.1:51082 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:18:34.804 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57636 10 6452 1 2025-11-08 10:19:10.696 00:00:10.366 TCP 23.104.0.1:58276 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:19:27.855 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 10:19:27.491 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:19:34.971 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35568 10 6452 1 2025-11-08 10:20:11.112 00:00:10.368 TCP 23.104.0.1:51310 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:20:35.194 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52668 10 6452 1 2025-11-08 10:21:11.519 00:00:10.363 TCP 23.104.0.1:33702 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:21:35.404 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38036 10 6452 1 2025-11-08 10:22:11.919 00:00:10.389 TCP 23.104.0.1:38834 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:22:35.617 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38640 10 6452 1 2025-11-08 10:17:57.533 00:05:56.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 10:23:12.346 00:00:10.328 TCP 23.104.0.1:38674 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:23:35.832 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45400 10 6452 1 2025-11-08 10:18:57.530 00:05:56.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 10:24:12.709 00:00:10.322 TCP 23.104.0.1:40126 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:24:27.950 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 10:24:27.745 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:24:36.068 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42672 10 6452 1 2025-11-08 10:25:13.103 00:00:10.361 TCP 23.104.0.1:45488 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:25:36.279 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54128 10 6452 1 2025-11-08 10:26:13.508 00:00:10.367 TCP 23.104.0.1:32862 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:26:36.486 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41956 10 6452 1 2025-11-08 10:27:13.914 00:00:10.373 TCP 23.104.0.1:57252 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:27:36.663 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55854 10 6452 1 2025-11-08 10:28:14.323 00:00:10.366 TCP 23.104.0.1:39160 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:28:36.881 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37420 10 6452 1 2025-11-08 10:23:57.534 00:05:56.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 10:29:14.729 00:00:10.369 TCP 23.104.0.1:42676 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:29:28.195 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:29:28.113 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 10:29:37.079 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46228 10 6452 1 2025-11-08 10:24:57.531 00:05:56.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 10:30:15.139 00:00:10.370 TCP 23.104.0.1:34508 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:30:37.292 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54630 10 6452 1 2025-11-08 10:31:15.542 00:00:10.376 TCP 23.104.0.1:48322 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:31:37.502 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38282 10 6452 1 2025-11-08 10:32:15.948 00:00:10.373 TCP 23.104.0.1:54322 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:32:37.715 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38988 10 6452 1 2025-11-08 10:33:16.359 00:00:10.379 TCP 23.104.0.1:43640 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:33:37.887 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50734 10 6452 1 2025-11-08 10:34:27.947 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 10:34:16.764 00:00:10.336 TCP 23.104.0.1:53880 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:34:28.049 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:34:38.080 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40636 10 6452 1 2025-11-08 10:29:57.537 00:05:56.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 10:35:17.139 00:00:10.496 TCP 23.104.0.1:45176 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:35:38.298 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53934 10 6452 1 2025-11-08 10:30:57.534 00:05:56.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 10:36:17.673 00:00:10.373 TCP 23.104.0.1:39106 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:36:38.530 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42356 10 6452 1 2025-11-08 10:37:18.116 00:00:10.366 TCP 23.104.0.1:46544 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:37:38.749 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:55924 12 10375 1 2025-11-08 10:38:18.515 00:00:10.440 TCP 23.104.0.1:42888 -> 1.101.0.1:3000 15 1926 1 2025-11-08 10:38:38.946 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45310 10 6452 1 2025-11-08 10:39:28.046 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 10:39:28.264 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:39:18.997 00:00:10.367 TCP 23.104.0.1:41106 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:39:39.176 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44276 10 6452 1 2025-11-08 10:40:19.401 00:00:10.364 TCP 23.104.0.1:46848 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:40:39.403 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36934 10 6452 1 2025-11-08 10:35:57.537 00:05:56.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 10:41:19.800 00:00:10.335 TCP 23.104.0.1:42204 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:41:39.616 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46094 10 6452 1 2025-11-08 10:36:57.535 00:05:56.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 10:42:20.172 00:00:10.367 TCP 23.104.0.1:36650 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:42:39.830 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45198 10 6452 1 2025-11-08 10:43:20.577 00:00:10.324 TCP 23.104.0.1:38252 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:43:40.007 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58426 10 6452 1 2025-11-08 10:44:28.564 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 10:44:28.479 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:44:20.940 00:00:10.390 TCP 23.104.0.1:59938 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:44:40.215 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55972 10 6452 1 2025-11-08 10:45:21.368 00:00:10.367 TCP 23.104.0.1:53254 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:45:40.426 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32990 10 6452 1 2025-11-08 10:46:21.774 00:00:10.366 TCP 23.104.0.1:37546 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:46:40.639 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48530 10 6452 1 2025-11-08 10:41:57.539 00:05:56.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 10:47:22.183 00:00:13.387 TCP 23.104.0.1:42064 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:47:40.814 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44752 10 6452 1 2025-11-08 10:42:57.537 00:05:56.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 10:48:25.643 00:00:10.365 TCP 23.104.0.1:60304 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:48:41.041 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46830 10 6452 1 2025-11-08 10:49:28.288 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:49:28.333 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 10:49:26.058 00:00:10.362 TCP 23.104.0.1:42964 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:49:41.252 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60408 10 6452 1 2025-11-08 10:50:26.461 00:00:10.319 TCP 23.104.0.1:34366 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:50:41.421 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39088 10 6452 1 2025-11-08 10:51:26.820 00:00:10.368 TCP 23.104.0.1:39322 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:51:41.636 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54100 10 6452 1 2025-11-08 10:52:27.232 00:00:10.432 TCP 23.104.0.1:55872 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:52:41.853 00:00:10.267 TCP 1.101.0.1:3000 -> 22.102.0.1:49758 10 6452 1 2025-11-08 10:47:57.542 00:05:56.822 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 10:53:27.697 00:00:10.367 TCP 23.104.0.1:47562 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:53:42.156 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33190 10 6452 1 2025-11-08 10:48:57.539 00:05:56.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 10:54:28.783 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 10:54:28.851 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 10:54:28.107 00:00:10.548 TCP 23.104.0.1:45252 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:54:42.376 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43640 10 6452 1 2025-11-08 10:55:28.692 00:00:10.365 TCP 23.104.0.1:58460 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:55:42.594 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50614 10 6452 1 2025-11-08 10:56:29.105 00:00:10.361 TCP 23.104.0.1:40726 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:56:42.818 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33336 10 6452 1 2025-11-08 10:57:29.503 00:00:10.368 TCP 23.104.0.1:59108 -> 1.101.0.1:3000 11 1507 1 2025-11-08 10:57:43.055 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:36534 10 6452 1 2025-11-08 10:58:29.908 00:00:10.365 TCP 23.104.0.1:35084 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496238, total packets: 1568, avg bps: 1022, avg pps: 0, avg bpp: 316 Time window: 2025-11-08 09:53:57 - 2025-11-08 10:58:40 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0049s User: 0.0016s Wall: 0.0023s flows/second: 70773.5 Runtime: 0.0023s