Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 15:53:57.637 00:05:56.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 15:59:11.325 00:00:10.357 TCP 23.104.0.1:60140 -> 1.101.0.1:3000 11 1507 1 2025-11-08 15:59:15.596 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:52190 10 6452 1 2025-11-08 15:59:34.664 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 15:59:34.611 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 15:54:57.634 00:05:56.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 16:00:11.718 00:00:10.377 TCP 23.104.0.1:41226 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:00:15.826 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41106 10 6452 1 2025-11-08 16:01:12.129 00:00:10.368 TCP 23.104.0.1:32950 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:01:16.074 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41022 10 6452 1 2025-11-08 16:02:16.290 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49726 10 6452 1 2025-11-08 16:02:12.538 00:00:10.366 TCP 23.104.0.1:57658 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:03:16.523 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60120 10 6452 1 2025-11-08 16:03:12.940 00:00:10.378 TCP 23.104.0.1:41238 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:04:13.360 00:00:10.364 TCP 23.104.0.1:59764 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:04:16.735 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55514 10 6452 1 2025-11-08 16:04:34.552 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 16:04:34.662 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 15:59:57.640 00:05:56.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 16:05:13.763 00:00:10.376 TCP 23.104.0.1:41058 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:05:16.950 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46952 10 6452 1 2025-11-08 16:00:57.634 00:05:56.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 16:06:14.175 00:00:10.373 TCP 23.104.0.1:51430 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:06:17.177 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59148 10 6452 1 2025-11-08 16:07:14.585 00:00:10.366 TCP 23.104.0.1:48830 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:07:17.400 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47942 10 6452 1 2025-11-08 16:08:14.989 00:00:10.322 TCP 23.104.0.1:44334 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:08:17.614 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40372 10 6452 1 2025-11-08 16:09:17.828 00:00:15.450 TCP 1.101.0.1:3000 -> 22.102.0.1:41390 10 6452 1 2025-11-08 16:09:34.869 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 16:09:34.740 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 16:09:15.346 00:00:17.945 TCP 23.104.0.1:39766 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:10:23.321 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44472 10 6452 1 2025-11-08 16:10:23.332 00:00:10.322 TCP 23.104.0.1:49764 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:05:57.639 00:05:56.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 16:11:23.548 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33632 10 6452 1 2025-11-08 16:11:23.693 00:00:10.366 TCP 23.104.0.1:52284 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:06:57.636 00:05:56.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 16:12:24.103 00:00:10.367 TCP 23.104.0.1:34638 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:12:23.756 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55740 12 6556 1 2025-11-08 16:13:23.965 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41892 12 6556 1 2025-11-08 16:13:24.503 00:00:10.370 TCP 23.104.0.1:44196 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:14:24.912 00:00:10.364 TCP 23.104.0.1:54644 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:14:34.902 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 16:14:24.184 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35510 10 6452 1 2025-11-08 16:14:34.808 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 16:15:24.357 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52198 10 6452 1 2025-11-08 16:15:25.313 00:00:10.323 TCP 23.104.0.1:43296 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:16:25.677 00:00:10.365 TCP 23.104.0.1:56912 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:16:24.567 00:00:10.752 TCP 1.101.0.1:3000 -> 22.102.0.1:60410 10 6452 1 2025-11-08 16:11:57.639 00:05:56.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 16:17:25.360 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43502 10 6452 1 2025-11-08 16:17:26.106 00:00:10.366 TCP 23.104.0.1:52758 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:12:57.637 00:05:56.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 16:18:25.572 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40254 10 6452 1 2025-11-08 16:18:26.514 00:00:10.365 TCP 23.104.0.1:55340 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:19:25.788 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51454 10 6452 1 2025-11-08 16:19:35.038 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 16:19:34.790 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 16:19:26.916 00:00:10.324 TCP 23.104.0.1:54438 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:20:26.008 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52580 10 6452 1 2025-11-08 16:20:27.278 00:00:10.326 TCP 23.104.0.1:48588 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:21:26.235 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36432 10 6452 1 2025-11-08 16:21:27.640 00:00:10.324 TCP 23.104.0.1:34964 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:22:26.454 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58558 10 6452 1 2025-11-08 16:22:28.004 00:00:10.366 TCP 23.104.0.1:57562 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:17:57.641 00:05:56.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 16:23:26.678 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53582 10 6452 1 2025-11-08 16:23:28.400 00:00:10.368 TCP 23.104.0.1:39158 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:18:57.639 00:05:56.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 16:24:35.214 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 16:24:35.176 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 16:24:26.900 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55322 10 6452 1 2025-11-08 16:24:28.803 00:00:10.369 TCP 23.104.0.1:35170 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:25:29.210 00:00:10.658 TCP 23.104.0.1:57008 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:25:27.118 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:55806 10 6452 1 2025-11-08 16:26:29.905 00:00:10.368 TCP 23.104.0.1:51614 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:26:27.384 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41010 10 6452 1 2025-11-08 16:27:27.600 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49316 10 6452 1 2025-11-08 16:27:30.311 00:00:10.438 TCP 23.104.0.1:39188 -> 1.101.0.1:3000 15 1926 1 2025-11-08 16:28:27.812 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 12 10369 1 2025-11-08 16:28:30.786 00:00:10.348 TCP 23.104.0.1:55226 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:23:57.643 00:05:56.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 16:29:34.929 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 16:29:35.387 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 16:29:28.032 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41994 10 6452 1 2025-11-08 16:29:31.173 00:00:10.634 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:24:57.641 00:05:56.837 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 16:30:28.255 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58742 10 6452 1 2025-11-08 16:30:31.853 00:00:10.371 TCP 23.104.0.1:40684 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:31:28.467 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53410 10 6452 1 2025-11-08 16:31:32.263 00:00:10.362 TCP 23.104.0.1:44496 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:32:28.703 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:37880 10 6452 1 2025-11-08 16:32:32.664 00:00:10.371 TCP 23.104.0.1:34686 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:33:28.884 00:00:10.508 TCP 1.101.0.1:3000 -> 22.102.0.1:56138 11 6504 1 2025-11-08 16:33:33.102 00:00:10.644 TCP 23.104.0.1:46140 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:34:35.337 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 16:34:35.049 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 16:34:29.434 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43200 10 6452 1 2025-11-08 16:34:33.800 00:00:10.364 TCP 23.104.0.1:56498 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:29:57.645 00:05:56.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 16:35:29.642 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33778 10 6452 1 2025-11-08 16:35:34.202 00:00:10.373 TCP 23.104.0.1:33974 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:30:57.643 00:05:56.835 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 16:36:29.853 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59194 10 6452 1 2025-11-08 16:36:34.620 00:00:10.370 TCP 23.104.0.1:53056 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:37:30.079 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37566 10 6452 1 2025-11-08 16:37:35.019 00:00:10.364 TCP 23.104.0.1:43122 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:38:30.309 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36478 10 6452 1 2025-11-08 16:38:35.424 00:00:10.374 TCP 23.104.0.1:41902 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:39:35.181 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 16:39:35.412 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 16:39:30.525 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49578 10 6452 1 2025-11-08 16:39:35.832 00:00:10.391 TCP 23.104.0.1:41672 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:40:30.739 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51436 10 6452 1 2025-11-08 16:40:36.266 00:00:10.366 TCP 23.104.0.1:55492 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:35:57.647 00:05:56.831 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 16:41:30.963 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58204 12 6556 1 2025-11-08 16:41:36.671 00:00:10.363 TCP 23.104.0.1:60396 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:36:57.644 00:05:56.836 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 16:42:31.193 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47232 10 6452 1 2025-11-08 16:42:37.090 00:00:10.358 TCP 23.104.0.1:60714 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:43:31.366 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60574 10 6452 1 2025-11-08 16:43:37.487 00:00:10.364 TCP 23.104.0.1:44278 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:44:35.584 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 16:44:35.645 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 16:44:31.580 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35812 10 6452 1 2025-11-08 16:44:37.895 00:00:10.380 TCP 23.104.0.1:39884 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:45:31.806 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43952 10 6452 1 2025-11-08 16:45:38.313 00:00:10.368 TCP 23.104.0.1:42170 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:46:32.037 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59042 10 6452 1 2025-11-08 16:46:38.717 00:00:10.371 TCP 23.104.0.1:46426 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:41:57.650 00:05:56.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 16:47:32.254 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47422 10 6452 1 2025-11-08 16:47:39.128 00:00:10.364 TCP 23.104.0.1:35598 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:42:57.649 00:05:56.833 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 16:48:32.467 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36602 10 6452 1 2025-11-08 16:48:39.532 00:00:10.371 TCP 23.104.0.1:35864 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:49:36.459 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 16:49:36.531 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 16:49:32.686 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39032 10 6452 1 2025-11-08 16:49:39.939 00:00:10.389 TCP 23.104.0.1:59992 -> 1.101.0.1:3000 12 1559 1 2025-11-08 16:50:32.902 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57992 13 6891 1 2025-11-08 16:50:40.370 00:00:10.328 TCP 23.104.0.1:59980 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:51:33.122 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59790 10 6452 1 2025-11-08 16:51:40.745 00:00:10.364 TCP 23.104.0.1:52868 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:52:33.345 00:00:10.645 TCP 1.101.0.1:3000 -> 22.102.0.1:46708 10 6452 1 2025-11-08 16:52:41.150 00:00:10.378 TCP 23.104.0.1:49004 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:47:57.652 00:05:56.839 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 16:53:34.038 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53022 10 6452 1 2025-11-08 16:53:41.580 00:00:10.361 TCP 23.104.0.1:34704 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:48:57.649 00:05:56.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 16:54:36.062 00:00:00.051 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 16:54:35.997 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 16:54:34.259 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:51584 10 6452 1 2025-11-08 16:54:41.981 00:00:10.331 TCP 23.104.0.1:38666 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:55:34.538 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60166 10 6452 1 2025-11-08 16:55:42.350 00:00:10.370 TCP 23.104.0.1:44684 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:56:34.752 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40222 10 6452 1 2025-11-08 16:56:42.758 00:00:10.373 TCP 23.104.0.1:60564 -> 1.101.0.1:3000 11 1507 1 2025-11-08 16:57:34.977 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:49818 12 10375 1 2025-11-08 16:57:43.168 00:00:10.436 TCP 23.104.0.1:48234 -> 1.101.0.1:3000 15 1926 1 2025-11-08 16:58:35.252 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53674 10 6452 1 Summary: total flows: 163, total bytes: 506374, total packets: 1584, avg bps: 1041, avg pps: 0, avg bpp: 319 Time window: 2025-11-08 15:53:57 - 2025-11-08 16:58:45 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0020s Wall: 0.0021s flows/second: 76851.6 Runtime: 0.0021s