Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 12:53:57.575 00:05:56.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 12:58:49.777 00:00:10.369 TCP 23.104.0.1:59742 -> 1.101.0.1:3000 11 1507 1 2025-11-08 12:59:30.726 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 12:59:30.885 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 12:59:31.175 00:00:11.041 TCP 1.101.0.1:3000 -> 22.102.0.1:45830 10 6452 1 2025-11-08 12:54:57.576 00:05:56.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 12:59:50.181 00:00:11.057 TCP 23.104.0.1:58134 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:00:32.257 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60754 10 6452 1 2025-11-08 13:00:51.276 00:00:10.368 TCP 23.104.0.1:58844 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:01:32.467 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40764 10 6452 1 2025-11-08 13:01:51.684 00:00:10.366 TCP 23.104.0.1:51938 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:02:32.681 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45076 10 6452 1 2025-11-08 13:02:52.106 00:00:10.366 TCP 23.104.0.1:55164 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:03:32.848 00:00:10.439 TCP 1.101.0.1:3000 -> 22.102.0.1:42868 10 6452 1 2025-11-08 13:03:52.509 00:00:10.366 TCP 23.104.0.1:60158 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:04:31.217 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 13:04:31.240 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 13:04:33.326 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57326 10 6452 1 2025-11-08 12:59:57.576 00:05:56.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 13:04:52.918 00:00:10.375 TCP 23.104.0.1:38778 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:05:33.543 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44592 10 6452 1 2025-11-08 13:00:57.574 00:05:56.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 13:05:53.338 00:00:10.368 TCP 23.104.0.1:43136 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:06:33.766 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39322 10 6452 1 2025-11-08 13:06:53.746 00:00:10.320 TCP 23.104.0.1:50364 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:07:33.983 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:58676 12 10375 1 2025-11-08 13:07:54.111 00:00:10.405 TCP 23.104.0.1:38594 -> 1.101.0.1:3000 15 1926 1 2025-11-08 13:08:34.236 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51706 10 6452 1 2025-11-08 13:08:54.554 00:00:10.327 TCP 23.104.0.1:41614 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:09:30.947 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 13:09:31.112 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 13:09:34.455 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48080 10 6452 1 2025-11-08 13:09:54.927 00:00:10.378 TCP 23.104.0.1:42156 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:10:34.666 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38420 10 6452 1 2025-11-08 13:05:57.578 00:05:56.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 13:10:55.348 00:00:10.367 TCP 23.104.0.1:34088 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:11:34.876 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47702 10 6452 1 2025-11-08 13:06:57.576 00:05:56.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 13:11:55.756 00:00:10.381 TCP 23.104.0.1:32946 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:12:35.101 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:44242 10 6452 1 2025-11-08 13:12:56.177 00:00:10.323 TCP 23.104.0.1:34202 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:13:35.275 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57518 10 6452 1 2025-11-08 13:13:56.550 00:00:10.365 TCP 23.104.0.1:52318 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:14:31.563 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 13:14:31.022 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 13:14:35.442 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43648 10 6452 1 2025-11-08 13:14:56.966 00:00:10.320 TCP 23.104.0.1:41214 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:15:35.650 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43978 10 6452 1 2025-11-08 13:15:57.325 00:00:10.368 TCP 23.104.0.1:38350 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:16:35.829 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:59444 10 6452 1 2025-11-08 13:11:57.582 00:05:56.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 13:16:57.736 00:00:10.368 TCP 23.104.0.1:43240 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:17:36.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38262 10 6452 1 2025-11-08 13:12:57.577 00:05:56.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 13:17:58.143 00:00:10.363 TCP 23.104.0.1:38476 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:18:36.301 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51620 10 6452 1 2025-11-08 13:18:58.545 00:00:10.326 TCP 23.104.0.1:35192 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:19:31.367 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 13:19:31.467 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 13:19:36.481 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43944 10 6452 1 2025-11-08 13:19:58.909 00:00:10.366 TCP 23.104.0.1:57126 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:20:36.689 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40896 10 6452 1 2025-11-08 13:20:59.310 00:00:10.370 TCP 23.104.0.1:51062 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:21:36.916 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44500 10 6452 1 2025-11-08 13:21:59.714 00:00:10.376 TCP 23.104.0.1:49990 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:22:37.132 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46692 10 6452 1 2025-11-08 13:17:57.581 00:05:56.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 13:23:00.129 00:00:10.368 TCP 23.104.0.1:42418 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:23:37.308 00:00:11.001 TCP 1.101.0.1:3000 -> 22.102.0.1:42854 10 6452 1 2025-11-08 13:18:57.580 00:05:56.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 13:24:00.530 00:00:10.366 TCP 23.104.0.1:43446 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:24:31.564 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 13:24:31.559 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 13:24:38.347 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49642 10 6452 1 2025-11-08 13:25:00.933 00:00:10.379 TCP 23.104.0.1:33792 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:25:38.558 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51268 10 6452 1 2025-11-08 13:26:01.353 00:00:10.363 TCP 23.104.0.1:56812 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:26:38.770 00:00:10.538 TCP 1.101.0.1:3000 -> 22.102.0.1:58290 10 6452 1 2025-11-08 13:27:01.753 00:00:10.387 TCP 23.104.0.1:48094 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:27:39.345 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59252 10 6452 1 2025-11-08 13:28:02.178 00:00:10.365 TCP 23.104.0.1:53500 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:28:39.552 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32850 10 6452 1 2025-11-08 13:23:57.582 00:05:56.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 13:29:02.581 00:00:10.363 TCP 23.104.0.1:40512 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:29:31.486 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 13:29:31.496 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 13:29:39.770 00:00:10.914 TCP 1.101.0.1:3000 -> 22.102.0.1:54582 10 6452 1 2025-11-08 13:24:57.581 00:05:56.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 13:30:02.980 00:00:10.375 TCP 23.104.0.1:45480 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:30:40.718 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57504 10 6452 1 2025-11-08 13:31:03.392 00:00:10.365 TCP 23.104.0.1:49360 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:31:40.940 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:44124 10 6452 1 2025-11-08 13:32:03.794 00:00:10.338 TCP 23.104.0.1:57674 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:32:41.185 00:00:10.871 TCP 1.101.0.1:3000 -> 22.102.0.1:53894 10 6452 1 2025-11-08 13:33:04.172 00:00:10.363 TCP 23.104.0.1:59136 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:33:42.095 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47260 10 6452 1 2025-11-08 13:34:04.570 00:00:10.369 TCP 23.104.0.1:58824 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:34:31.789 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 13:34:31.901 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 13:29:57.588 00:05:56.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 13:34:42.270 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35256 10 6452 1 2025-11-08 13:35:04.972 00:00:10.375 TCP 23.104.0.1:39730 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:30:57.586 00:05:56.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 13:35:42.483 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46122 10 6452 1 2025-11-08 13:36:05.386 00:00:10.325 TCP 23.104.0.1:54158 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:36:42.700 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:46478 10 6452 1 2025-11-08 13:37:05.759 00:00:10.376 TCP 23.104.0.1:37420 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:37:42.892 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:38692 12 10375 1 2025-11-08 13:38:06.182 00:00:10.454 TCP 23.104.0.1:35374 -> 1.101.0.1:3000 15 1926 1 2025-11-08 13:38:43.132 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52166 10 6452 1 2025-11-08 13:39:06.666 00:00:10.399 TCP 23.104.0.1:39260 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:39:31.903 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 13:39:31.990 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 13:39:43.344 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49496 10 6452 1 2025-11-08 13:40:07.126 00:00:10.365 TCP 23.104.0.1:48546 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:40:43.568 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38930 10 6452 1 2025-11-08 13:35:57.592 00:05:56.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 13:41:07.532 00:00:10.356 TCP 23.104.0.1:47180 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:36:57.590 00:05:56.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 13:41:43.784 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34278 10 6452 1 2025-11-08 13:42:07.927 00:00:10.381 TCP 23.104.0.1:41628 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:42:44.000 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49024 10 6452 1 2025-11-08 13:43:08.349 00:00:10.370 TCP 23.104.0.1:44936 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:43:44.241 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60722 10 6452 1 2025-11-08 13:44:08.754 00:00:10.375 TCP 23.104.0.1:56532 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:44:31.785 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 13:44:31.624 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 13:44:44.453 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55686 10 6452 1 2025-11-08 13:45:09.161 00:00:11.718 TCP 23.104.0.1:34290 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:45:44.700 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51546 10 6452 1 2025-11-08 13:46:10.927 00:00:10.391 TCP 23.104.0.1:38924 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:46:44.914 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55938 10 6452 1 2025-11-08 13:41:57.595 00:05:56.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 13:47:11.357 00:00:10.324 TCP 23.104.0.1:43060 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:47:45.148 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33992 10 6452 1 2025-11-08 13:42:57.593 00:05:56.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 13:48:11.722 00:00:10.325 TCP 23.104.0.1:42536 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:48:45.371 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56994 10 6452 1 2025-11-08 13:49:12.111 00:00:10.365 TCP 23.104.0.1:54312 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:49:31.911 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 13:49:32.080 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 13:49:45.591 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35692 10 6452 1 2025-11-08 13:50:12.520 00:00:10.363 TCP 23.104.0.1:58720 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:50:45.815 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51822 10 6452 1 2025-11-08 13:51:12.921 00:00:10.379 TCP 23.104.0.1:58696 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:51:46.031 00:00:10.410 TCP 1.101.0.1:3000 -> 22.102.0.1:48734 10 6452 1 2025-11-08 13:52:13.335 00:00:10.366 TCP 23.104.0.1:35528 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:47:57.597 00:05:56.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 13:52:46.480 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47938 10 6452 1 2025-11-08 13:53:13.742 00:00:10.365 TCP 23.104.0.1:56764 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:48:57.597 00:05:56.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 13:53:46.704 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60680 10 6452 1 2025-11-08 13:54:14.145 00:00:10.361 TCP 23.104.0.1:38114 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:54:32.380 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 13:54:32.044 00:00:00.057 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 13:54:46.920 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51498 10 6452 1 2025-11-08 13:55:14.549 00:00:15.082 TCP 23.104.0.1:34472 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:55:47.137 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:51640 10 6452 1 2025-11-08 13:56:19.684 00:00:10.370 TCP 23.104.0.1:44316 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:56:47.315 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44458 10 6452 1 2025-11-08 13:57:20.102 00:00:10.365 TCP 23.104.0.1:39366 -> 1.101.0.1:3000 11 1507 1 2025-11-08 13:57:47.535 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46542 10 6452 1 2025-11-08 13:58:20.516 00:00:10.363 TCP 23.104.0.1:59504 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500580, total packets: 1574, avg bps: 1033, avg pps: 0, avg bpp: 318 Time window: 2025-11-08 12:53:57 - 2025-11-08 13:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0055s User: 0.0009s Wall: 0.0022s flows/second: 73120.0 Runtime: 0.0022s