Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 14:54:54.865 00:05:03.322 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 14:58:57.306 00:00:10.371 TCP 23.104.0.1:56368 -> 1.101.0.1:3000 11 1507 1 2025-11-09 14:59:13.923 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50512 10 6452 1 2025-11-09 15:00:02.445 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 15:00:02.728 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 14:59:57.714 00:00:10.942 TCP 23.104.0.1:50028 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:00:14.141 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43346 10 6452 1 2025-11-09 15:00:58.701 00:00:10.330 TCP 23.104.0.1:55052 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:01:14.315 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34422 10 6452 1 2025-11-09 15:01:59.096 00:00:10.371 TCP 23.104.0.1:53456 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:02:14.527 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49166 10 6452 1 2025-11-09 15:02:59.512 00:00:10.327 TCP 23.104.0.1:45924 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:03:14.737 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52858 10 6452 1 2025-11-09 14:59:54.865 00:05:03.326 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 15:03:59.880 00:00:10.493 TCP 23.104.0.1:50708 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:04:14.949 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47028 10 6452 1 2025-11-09 15:00:54.867 00:05:03.321 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 15:05:02.342 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 15:05:02.491 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 15:05:00.415 00:00:10.365 TCP 23.104.0.1:49884 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:05:15.178 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44322 10 6452 1 2025-11-09 15:06:00.822 00:00:10.362 TCP 23.104.0.1:33346 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:06:15.393 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52016 10 6452 1 2025-11-09 15:07:01.225 00:00:10.327 TCP 23.104.0.1:57154 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:07:15.604 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59048 10 6452 1 2025-11-09 15:08:01.592 00:00:10.984 TCP 23.104.0.1:57150 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:08:15.826 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50972 10 6452 1 2025-11-09 15:09:02.617 00:00:10.369 TCP 23.104.0.1:36786 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:09:16.063 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34620 10 6452 1 2025-11-09 15:05:54.864 00:05:03.328 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 15:10:02.444 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 15:10:02.553 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 15:10:03.030 00:00:10.362 TCP 23.104.0.1:45464 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:10:16.272 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39760 10 6452 1 2025-11-09 15:06:54.868 00:05:03.322 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 15:11:03.432 00:00:10.367 TCP 23.104.0.1:53240 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:11:16.491 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:53790 11 6504 1 2025-11-09 15:12:03.838 00:00:10.396 TCP 23.104.0.1:43012 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:12:16.777 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40882 10 6452 1 2025-11-09 15:13:04.268 00:00:10.362 TCP 23.104.0.1:55726 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:13:16.992 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39348 10 6452 1 2025-11-09 15:14:04.669 00:00:10.365 TCP 23.104.0.1:47766 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:14:17.212 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42622 10 6452 1 2025-11-09 15:15:02.524 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 15:15:02.210 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 15:15:05.101 00:00:10.320 TCP 23.104.0.1:55910 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:15:17.431 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60454 10 6452 1 2025-11-09 15:11:54.866 00:05:03.326 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 15:16:05.461 00:00:10.323 TCP 23.104.0.1:54828 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:16:17.644 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50886 10 6452 1 2025-11-09 15:12:54.868 00:05:03.322 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 15:17:05.823 00:00:10.362 TCP 23.104.0.1:48664 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:17:17.859 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40296 10 6452 1 2025-11-09 15:18:06.222 00:00:10.362 TCP 23.104.0.1:58278 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:18:18.037 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36432 10 6452 1 2025-11-09 15:19:06.623 00:00:10.365 TCP 23.104.0.1:53736 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:19:18.252 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57290 10 6452 1 2025-11-09 15:20:02.808 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 15:20:02.822 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 15:20:07.025 00:00:10.366 TCP 23.104.0.1:34102 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:20:18.457 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36198 10 6452 1 2025-11-09 15:21:07.431 00:00:10.365 TCP 23.104.0.1:58656 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:21:18.666 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33958 10 6452 1 2025-11-09 15:17:54.867 00:05:03.327 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 15:22:07.837 00:00:10.344 TCP 23.104.0.1:37156 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:22:18.877 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41114 10 6452 1 2025-11-09 15:18:54.869 00:05:03.322 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 15:23:08.220 00:00:10.329 TCP 23.104.0.1:46194 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:23:19.104 00:00:10.451 TCP 1.101.0.1:3000 -> 22.102.0.1:48644 10 6452 1 2025-11-09 15:24:08.582 00:00:10.361 TCP 23.104.0.1:54148 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:24:19.596 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51478 10 6452 1 2025-11-09 15:25:03.347 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 15:25:02.727 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 15:25:08.982 00:00:10.364 TCP 23.104.0.1:47380 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:25:19.813 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52726 10 6452 1 2025-11-09 15:26:09.385 00:00:10.360 TCP 23.104.0.1:50262 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:26:20.044 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53878 10 6452 1 2025-11-09 15:27:09.785 00:00:10.373 TCP 23.104.0.1:36814 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:27:20.210 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:43788 10 6452 1 2025-11-09 15:23:54.868 00:05:03.326 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 15:28:10.199 00:00:10.363 TCP 23.104.0.1:37902 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:28:20.394 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40366 10 6452 1 2025-11-09 15:24:54.871 00:05:03.322 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 15:29:10.599 00:00:10.362 TCP 23.104.0.1:51604 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:29:20.619 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56598 10 6452 1 2025-11-09 15:30:02.933 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 15:30:02.853 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 15:30:11.001 00:00:10.537 TCP 23.104.0.1:42658 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:30:20.839 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60444 10 6452 1 2025-11-09 15:31:11.578 00:00:10.368 TCP 23.104.0.1:39976 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:31:21.084 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35484 10 6452 1 2025-11-09 15:32:11.986 00:00:10.322 TCP 23.104.0.1:51870 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:32:21.299 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41252 10 6452 1 2025-11-09 15:33:12.349 00:00:10.865 TCP 23.104.0.1:40318 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:33:21.507 00:00:11.402 TCP 1.101.0.1:3000 -> 22.102.0.1:52346 10 6452 1 2025-11-09 15:29:54.870 00:05:03.326 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 15:34:13.250 00:00:10.363 TCP 23.104.0.1:46646 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:34:22.949 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50148 10 6452 1 2025-11-09 15:30:54.873 00:05:03.321 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 15:35:03.079 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 15:35:02.921 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 15:35:13.655 00:00:10.367 TCP 23.104.0.1:55426 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:35:23.169 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55762 10 6452 1 2025-11-09 15:36:14.066 00:00:10.366 TCP 23.104.0.1:32768 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:36:23.377 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51468 10 6452 1 2025-11-09 15:37:14.478 00:00:10.360 TCP 23.104.0.1:44434 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:37:23.549 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:44984 10 6452 1 2025-11-09 15:38:14.876 00:00:10.370 TCP 23.104.0.1:50526 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:38:23.786 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38102 10 6452 1 2025-11-09 15:39:15.285 00:00:10.360 TCP 23.104.0.1:40168 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:39:24.027 00:00:10.596 TCP 1.101.0.1:3000 -> 22.102.0.1:35704 10 6452 1 2025-11-09 15:35:54.874 00:05:03.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 15:40:03.029 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 15:40:03.035 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 15:40:15.680 00:00:10.367 TCP 23.104.0.1:33114 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:40:24.673 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36660 10 6452 1 2025-11-09 15:36:54.876 00:05:03.319 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 15:41:16.105 00:00:10.363 TCP 23.104.0.1:33998 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:41:24.849 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57290 10 6452 1 2025-11-09 15:42:16.524 00:00:10.318 TCP 23.104.0.1:55172 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:42:25.080 00:00:11.093 TCP 1.101.0.1:3000 -> 22.102.0.1:34780 10 6452 1 2025-11-09 15:43:16.880 00:00:10.543 TCP 23.104.0.1:40944 -> 1.101.0.1:3000 17 2241 1 2025-11-09 15:43:26.208 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:60310 14 14292 1 2025-11-09 15:44:17.465 00:00:10.365 TCP 23.104.0.1:46706 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:44:26.484 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49572 10 6452 1 2025-11-09 15:45:03.253 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 15:45:03.402 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 15:45:17.864 00:00:10.369 TCP 23.104.0.1:37304 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:45:26.701 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54576 10 6452 1 2025-11-09 15:41:54.876 00:05:03.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 15:46:18.273 00:00:10.366 TCP 23.104.0.1:44838 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:46:26.926 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:38968 10 6452 1 2025-11-09 15:42:54.877 00:05:03.319 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 15:47:18.674 00:00:10.370 TCP 23.104.0.1:55630 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:47:27.170 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50320 10 6452 1 2025-11-09 15:48:19.109 00:00:10.371 TCP 23.104.0.1:47930 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:48:27.341 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51374 10 6452 1 2025-11-09 15:49:19.516 00:00:10.325 TCP 23.104.0.1:40000 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:49:27.556 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:36908 10 6452 1 2025-11-09 15:50:03.416 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 15:50:03.352 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 15:50:19.878 00:00:10.367 TCP 23.104.0.1:35336 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:50:27.792 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43208 10 6452 1 2025-11-09 15:51:20.282 00:00:10.328 TCP 23.104.0.1:36336 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:51:27.965 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52346 10 6452 1 2025-11-09 15:47:54.875 00:05:03.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 15:52:20.664 00:00:10.365 TCP 23.104.0.1:42982 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:52:28.194 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37908 10 6452 1 2025-11-09 15:48:54.879 00:05:03.318 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 15:53:21.102 00:00:10.361 TCP 23.104.0.1:36186 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:53:28.407 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49708 10 6452 1 2025-11-09 15:54:21.503 00:00:10.367 TCP 23.104.0.1:43990 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:54:28.625 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50182 10 6452 1 2025-11-09 15:55:03.350 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 15:55:03.289 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 15:55:21.913 00:00:10.362 TCP 23.104.0.1:48916 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:55:28.829 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58318 10 6452 1 2025-11-09 15:56:22.308 00:00:10.369 TCP 23.104.0.1:58634 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:56:29.069 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37672 10 6452 1 2025-11-09 15:57:22.714 00:00:10.376 TCP 23.104.0.1:41976 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:57:29.281 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41726 10 6452 1 2025-11-09 15:53:54.876 00:05:03.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 15:58:23.128 00:00:10.365 TCP 23.104.0.1:55006 -> 1.101.0.1:3000 11 1507 1 2025-11-09 15:58:29.499 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58576 10 6452 1 Summary: total flows: 164, total bytes: 506974, total packets: 1583, avg bps: 1055, avg pps: 0, avg bpp: 320 Time window: 2025-11-09 14:54:54 - 2025-11-09 15:58:58 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0025s User: 0.0025s Wall: 0.0021s flows/second: 76319.3 Runtime: 0.0022s