Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-08 18:53:57.700 00:05:56.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 18:58:47.509 00:00:10.364 TCP 23.104.0.1:56678 -> 1.101.0.1:3000 11 1507 1 2025-11-08 18:59:02.978 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:60792 10 6452 1 2025-11-08 18:59:38.111 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 18:59:38.233 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 18:54:57.697 00:05:56.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 18:59:47.905 00:00:10.329 TCP 23.104.0.1:42962 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:00:03.242 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43286 10 6452 1 2025-11-08 19:00:48.273 00:00:10.321 TCP 23.104.0.1:36396 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:01:03.463 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49458 10 6452 1 2025-11-08 19:01:48.642 00:00:10.359 TCP 23.104.0.1:41284 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:02:03.682 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49806 10 6452 1 2025-11-08 19:02:49.059 00:00:10.367 TCP 23.104.0.1:42326 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:03:03.893 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60330 10 6452 1 2025-11-08 19:03:49.462 00:00:10.720 TCP 23.104.0.1:35354 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:04:04.111 00:00:10.340 TCP 1.101.0.1:3000 -> 22.102.0.1:57152 10 6452 1 2025-11-08 19:04:38.480 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 19:04:38.535 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 18:59:57.702 00:05:56.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 19:04:50.198 00:00:10.325 TCP 23.104.0.1:33408 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:05:04.494 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36848 10 6452 1 2025-11-08 19:00:57.698 00:05:56.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 19:05:50.562 00:00:10.328 TCP 23.104.0.1:58088 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:06:04.717 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41318 10 6452 1 2025-11-08 19:06:50.927 00:00:10.353 TCP 23.104.0.1:46630 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:07:04.933 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45988 10 6452 1 2025-11-08 19:07:51.315 00:00:10.398 TCP 23.104.0.1:34720 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:08:05.167 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37320 10 6452 1 2025-11-08 19:08:51.752 00:00:10.383 TCP 23.104.0.1:54280 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:09:05.378 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57726 10 6452 1 2025-11-08 19:09:38.473 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 19:09:38.497 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 19:09:52.177 00:00:10.377 TCP 23.104.0.1:45836 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:10:05.599 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60696 10 6452 1 2025-11-08 19:05:57.704 00:05:56.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 19:10:52.587 00:00:10.364 TCP 23.104.0.1:44330 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:11:05.775 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33624 10 6452 1 2025-11-08 19:06:57.703 00:05:56.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 19:11:53.014 00:00:10.372 TCP 23.104.0.1:54590 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:12:05.990 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41952 10 6452 1 2025-11-08 19:12:53.419 00:00:10.365 TCP 23.104.0.1:56444 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:13:06.221 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40346 10 6452 1 2025-11-08 19:13:53.823 00:00:10.330 TCP 23.104.0.1:59274 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:14:06.440 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:53460 12 6556 1 2025-11-08 19:14:38.499 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 19:14:38.433 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 19:14:54.187 00:00:11.074 TCP 23.104.0.1:54164 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:15:06.658 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45252 10 6452 1 2025-11-08 19:15:55.302 00:00:10.363 TCP 23.104.0.1:42096 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:16:06.848 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60670 10 6452 1 2025-11-08 19:11:57.706 00:05:56.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 19:16:55.704 00:00:10.370 TCP 23.104.0.1:44952 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:17:07.083 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43872 10 6452 1 2025-11-08 19:12:57.706 00:05:56.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 19:17:56.108 00:00:10.372 TCP 23.104.0.1:53144 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:18:07.292 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:58162 10 6452 1 2025-11-08 19:18:56.514 00:00:10.323 TCP 23.104.0.1:36364 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:19:07.486 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42110 10 6452 1 2025-11-08 19:19:38.628 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 19:19:38.697 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 19:19:56.876 00:00:10.370 TCP 23.104.0.1:38276 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:20:07.699 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50842 10 6452 1 2025-11-08 19:20:57.284 00:00:10.324 TCP 23.104.0.1:51520 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:21:07.913 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44412 10 6452 1 2025-11-08 19:21:57.644 00:00:10.369 TCP 23.104.0.1:56320 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:22:08.125 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45224 10 6452 1 2025-11-08 19:17:57.709 00:05:56.823 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 19:22:58.054 00:00:10.361 TCP 23.104.0.1:52156 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:23:08.339 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53752 10 6452 1 2025-11-08 19:18:57.705 00:05:56.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 19:23:58.458 00:00:10.360 TCP 23.104.0.1:57286 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:24:08.550 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43574 12 6556 1 2025-11-08 19:24:38.806 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 19:24:38.783 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 19:24:58.862 00:00:10.371 TCP 23.104.0.1:39160 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:25:08.766 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60698 10 6452 1 2025-11-08 19:25:59.276 00:00:10.360 TCP 23.104.0.1:57940 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:26:08.977 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:43674 10 6452 1 2025-11-08 19:26:59.674 00:00:10.367 TCP 23.104.0.1:42050 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:27:09.208 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41320 10 6452 1 2025-11-08 19:28:00.096 00:00:10.360 TCP 23.104.0.1:60528 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:28:09.419 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46360 10 6452 1 2025-11-08 19:23:57.710 00:05:56.824 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 19:29:00.497 00:00:10.363 TCP 23.104.0.1:38332 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:29:09.629 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48678 10 6452 1 2025-11-08 19:29:38.794 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 19:29:38.978 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 19:24:57.706 00:05:56.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 19:30:00.901 00:00:10.334 TCP 23.104.0.1:33298 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:30:09.839 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52508 10 6452 1 2025-11-08 19:31:01.273 00:00:10.342 TCP 23.104.0.1:39278 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:31:10.087 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52258 10 6452 1 2025-11-08 19:32:01.654 00:00:10.366 TCP 23.104.0.1:33202 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:32:10.298 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54830 12 6556 1 2025-11-08 19:33:02.065 00:00:10.368 TCP 23.104.0.1:43214 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:33:10.508 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60812 10 6452 1 2025-11-08 19:34:02.464 00:00:10.362 TCP 23.104.0.1:60316 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:34:10.682 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38948 10 6452 1 2025-11-08 19:34:38.932 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 19:34:38.909 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 19:29:57.709 00:05:56.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 19:35:02.868 00:00:10.365 TCP 23.104.0.1:43926 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:35:10.897 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50694 10 6452 1 2025-11-08 19:30:57.707 00:05:56.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 19:36:03.272 00:00:10.358 TCP 23.104.0.1:49616 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:36:11.112 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41850 10 6452 1 2025-11-08 19:37:03.670 00:00:10.349 TCP 23.104.0.1:50464 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:37:11.328 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47656 10 6452 1 2025-11-08 19:38:04.086 00:00:10.368 TCP 23.104.0.1:45544 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:38:11.540 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38070 10 6452 1 2025-11-08 19:39:04.497 00:00:10.327 TCP 23.104.0.1:48644 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:39:11.750 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35112 10 6452 1 2025-11-08 19:39:38.948 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 19:39:38.757 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 19:40:04.861 00:00:10.379 TCP 23.104.0.1:60474 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:40:11.923 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58498 10 6452 1 2025-11-08 19:35:57.712 00:05:56.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 19:41:05.277 00:00:10.362 TCP 23.104.0.1:46268 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:41:12.151 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41728 10 6452 1 2025-11-08 19:36:57.710 00:05:56.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 19:42:05.676 00:00:10.319 TCP 23.104.0.1:42266 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:42:12.323 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52650 10 6452 1 2025-11-08 19:43:06.034 00:00:10.340 TCP 23.104.0.1:46940 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:43:12.535 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41306 10 6452 1 2025-11-08 19:44:06.405 00:00:10.366 TCP 23.104.0.1:47522 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:44:12.748 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57236 10 6452 1 2025-11-08 19:44:39.356 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 19:44:39.451 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 19:45:06.812 00:00:10.367 TCP 23.104.0.1:50866 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:45:12.974 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:53498 10 6452 1 2025-11-08 19:46:07.226 00:00:10.363 TCP 23.104.0.1:59286 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:46:13.207 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56176 10 6452 1 2025-11-08 19:41:57.712 00:05:56.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 19:47:07.624 00:00:10.363 TCP 23.104.0.1:41918 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:47:13.433 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56394 10 6452 1 2025-11-08 19:42:57.711 00:05:56.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 19:48:08.025 00:00:10.366 TCP 23.104.0.1:59648 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:48:13.617 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46626 10 6452 1 2025-11-08 19:49:08.428 00:00:10.365 TCP 23.104.0.1:56002 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:49:13.795 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59340 10 6452 1 2025-11-08 19:49:39.187 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 19:49:39.109 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 19:50:08.831 00:00:10.390 TCP 23.104.0.1:37882 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:50:13.965 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58972 12 6556 1 2025-11-08 19:51:09.255 00:00:10.364 TCP 23.104.0.1:40966 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:51:14.186 00:00:10.349 TCP 1.101.0.1:3000 -> 22.102.0.1:43196 10 6452 1 2025-11-08 19:52:09.658 00:00:10.368 TCP 23.104.0.1:42734 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:52:14.574 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43514 10 6452 1 2025-11-08 19:47:57.715 00:05:56.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-08 19:53:10.079 00:00:10.369 TCP 23.104.0.1:41304 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:53:14.747 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:51878 10 6452 1 2025-11-08 19:48:57.712 00:05:56.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-08 19:54:10.486 00:00:10.368 TCP 23.104.0.1:58626 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:54:14.929 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48638 10 6452 1 2025-11-08 19:54:39.466 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-08 19:54:39.382 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-08 19:55:10.895 00:00:10.376 TCP 23.104.0.1:48170 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:55:15.166 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:56838 10 6452 1 2025-11-08 19:56:11.312 00:00:10.367 TCP 23.104.0.1:34558 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:56:15.347 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40038 10 6452 1 2025-11-08 19:57:15.565 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48780 10 6452 1 2025-11-08 19:57:11.712 00:00:10.378 TCP 23.104.0.1:56402 -> 1.101.0.1:3000 11 1507 1 2025-11-08 19:58:15.787 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37180 10 6452 1 2025-11-08 19:58:12.127 00:00:10.366 TCP 23.104.0.1:60738 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498764, total packets: 1580, avg bps: 1031, avg pps: 0, avg bpp: 315 Time window: 2025-11-08 18:53:57 - 2025-11-08 19:58:25 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0052s User: 0.0000s Wall: 0.0027s flows/second: 61285.3 Runtime: 0.0027s