Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-09 19:54:54.950 00:05:03.312 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 19:59:01.913 00:00:10.362 TCP 23.104.0.1:47632 -> 1.101.0.1:3000 11 1507 1 2025-11-09 19:59:26.749 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53908 10 6452 1 2025-11-09 20:00:08.445 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 20:00:08.215 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 20:00:02.317 00:00:10.326 TCP 23.104.0.1:59230 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:00:26.967 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:58038 10 6452 1 2025-11-09 20:01:02.681 00:00:10.368 TCP 23.104.0.1:40604 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:01:27.203 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38374 10 6452 1 2025-11-09 20:02:03.103 00:00:10.369 TCP 23.104.0.1:46784 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:02:27.422 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:32908 10 6452 1 2025-11-09 20:03:03.512 00:00:10.370 TCP 23.104.0.1:50812 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:03:27.645 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50448 10 6452 1 2025-11-09 19:59:54.950 00:05:03.316 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 20:04:03.925 00:00:10.355 TCP 23.104.0.1:50218 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:04:27.867 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:46194 10 6452 1 2025-11-09 20:00:54.952 00:05:03.311 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 20:05:08.249 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 20:05:08.543 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 20:05:04.320 00:00:10.327 TCP 23.104.0.1:41880 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:05:28.110 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44218 10 6452 1 2025-11-09 20:06:04.686 00:00:10.362 TCP 23.104.0.1:60320 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:06:28.327 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:50170 10 6452 1 2025-11-09 20:07:05.104 00:00:10.371 TCP 23.104.0.1:40812 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:07:28.575 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58998 10 6452 1 2025-11-09 20:08:05.512 00:00:10.367 TCP 23.104.0.1:34130 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:08:28.789 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43462 10 6452 1 2025-11-09 20:09:05.919 00:00:10.372 TCP 23.104.0.1:51886 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:09:29.030 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57332 10 6452 1 2025-11-09 20:05:54.950 00:05:03.317 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 20:10:08.318 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 20:10:08.662 00:00:00.011 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 20:10:06.325 00:00:10.364 TCP 23.104.0.1:54386 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:10:29.254 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35978 10 6452 1 2025-11-09 20:06:54.953 00:05:03.311 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 20:11:06.724 00:00:10.372 TCP 23.104.0.1:51890 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:11:29.475 00:00:10.782 TCP 1.101.0.1:3000 -> 22.102.0.1:35558 10 6452 1 2025-11-09 20:12:07.135 00:00:10.325 TCP 23.104.0.1:48448 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:12:30.299 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37308 10 6452 1 2025-11-09 20:13:07.504 00:00:10.364 TCP 23.104.0.1:54424 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:13:30.507 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48506 10 6452 1 2025-11-09 20:14:07.906 00:00:10.368 TCP 23.104.0.1:60852 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:14:30.718 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55296 10 6452 1 2025-11-09 20:15:08.522 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 20:15:08.725 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 20:15:08.312 00:00:10.366 TCP 23.104.0.1:45096 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:15:30.930 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:49788 10 6452 1 2025-11-09 20:11:54.953 00:05:03.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 20:16:08.714 00:00:10.374 TCP 23.104.0.1:53026 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:16:31.193 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55460 10 6452 1 2025-11-09 20:12:54.955 00:05:03.310 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 20:17:09.127 00:00:10.369 TCP 23.104.0.1:46712 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:17:31.419 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34962 10 6452 1 2025-11-09 20:18:09.534 00:00:10.325 TCP 23.104.0.1:36172 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:18:31.636 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47340 10 6452 1 2025-11-09 20:19:09.904 00:00:10.743 TCP 23.104.0.1:47188 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:19:31.851 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44444 10 6452 1 2025-11-09 20:20:08.900 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 20:20:08.640 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 20:20:10.684 00:00:10.365 TCP 23.104.0.1:42874 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:20:32.028 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38020 10 6452 1 2025-11-09 20:21:11.108 00:00:10.368 TCP 23.104.0.1:39794 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:21:32.240 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59154 10 6452 1 2025-11-09 20:17:54.953 00:05:03.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 20:22:11.514 00:00:10.377 TCP 23.104.0.1:45442 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:22:32.450 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44504 10 6452 1 2025-11-09 20:18:54.958 00:05:03.310 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 20:23:11.929 00:00:10.388 TCP 23.104.0.1:39112 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:23:32.665 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51890 10 6452 1 2025-11-09 20:24:12.355 00:00:10.369 TCP 23.104.0.1:57770 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:24:32.878 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33602 10 6452 1 2025-11-09 20:25:08.882 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 20:25:08.758 00:00:00.014 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 20:25:12.756 00:00:10.373 TCP 23.104.0.1:36406 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:25:33.109 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37948 10 6452 1 2025-11-09 20:26:13.166 00:00:10.367 TCP 23.104.0.1:58298 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:26:33.288 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47178 10 6452 1 2025-11-09 20:27:13.569 00:00:10.366 TCP 23.104.0.1:43616 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:27:33.498 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43234 10 6452 1 2025-11-09 20:23:54.958 00:05:03.312 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 20:28:13.971 00:00:10.438 TCP 23.104.0.1:49226 -> 1.101.0.1:3000 15 1926 1 2025-11-09 20:28:33.672 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:39124 12 10369 1 2025-11-09 20:24:54.961 00:05:03.307 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 20:29:14.450 00:00:10.328 TCP 23.104.0.1:54356 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:29:33.915 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55534 10 6452 1 2025-11-09 20:30:08.918 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 20:30:08.689 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 20:30:14.816 00:00:10.368 TCP 23.104.0.1:40384 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:30:34.126 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51010 10 6452 1 2025-11-09 20:31:15.214 00:00:10.366 TCP 23.104.0.1:36756 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:31:34.339 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48916 10 6452 1 2025-11-09 20:32:15.619 00:00:10.386 TCP 23.104.0.1:41572 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:32:34.556 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:52664 10 6452 1 2025-11-09 20:33:16.041 00:00:10.368 TCP 23.104.0.1:42850 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:33:34.733 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:50654 10 6452 1 2025-11-09 20:29:54.959 00:05:03.311 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 20:34:16.447 00:00:10.366 TCP 23.104.0.1:50674 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:34:34.991 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52486 10 6452 1 2025-11-09 20:30:54.962 00:05:03.307 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 20:35:09.248 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 20:35:09.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 20:35:16.849 00:00:10.384 TCP 23.104.0.1:47272 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:35:35.218 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47992 10 6452 1 2025-11-09 20:36:17.269 00:00:10.378 TCP 23.104.0.1:48624 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:36:35.429 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41102 10 6452 1 2025-11-09 20:37:17.688 00:00:10.365 TCP 23.104.0.1:53726 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:37:35.638 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49318 10 6452 1 2025-11-09 20:38:18.105 00:00:10.321 TCP 23.104.0.1:41428 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:38:35.807 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53042 10 6452 1 2025-11-09 20:39:18.466 00:00:10.370 TCP 23.104.0.1:41876 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:39:35.985 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:43238 10 6452 1 2025-11-09 20:35:54.960 00:05:03.312 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 20:40:09.145 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 20:40:08.891 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 20:40:18.873 00:00:10.327 TCP 23.104.0.1:42668 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:40:36.226 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35156 10 6452 1 2025-11-09 20:36:54.963 00:05:03.307 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 20:41:19.234 00:00:10.373 TCP 23.104.0.1:42926 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:41:36.440 00:00:10.629 TCP 1.101.0.1:3000 -> 22.102.0.1:60226 10 6452 1 2025-11-09 20:42:19.644 00:00:10.368 TCP 23.104.0.1:40910 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:42:37.108 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42032 10 6452 1 2025-11-09 20:43:20.047 00:00:10.374 TCP 23.104.0.1:44174 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:43:37.317 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35072 10 6452 1 2025-11-09 20:44:20.458 00:00:10.328 TCP 23.104.0.1:49820 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:44:37.484 00:00:11.354 TCP 1.101.0.1:3000 -> 22.102.0.1:38074 10 6452 1 2025-11-09 20:45:09.194 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 20:45:09.193 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 20:45:20.825 00:00:10.368 TCP 23.104.0.1:51864 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:45:38.881 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:33414 10 6452 1 2025-11-09 20:41:54.963 00:05:03.311 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 20:46:21.230 00:00:10.368 TCP 23.104.0.1:43478 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:46:39.080 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53048 10 6452 1 2025-11-09 20:42:54.965 00:05:03.307 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 20:47:21.635 00:00:10.366 TCP 23.104.0.1:51124 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:47:39.257 00:00:10.785 TCP 1.101.0.1:3000 -> 22.102.0.1:36222 10 6452 1 2025-11-09 20:48:22.052 00:00:10.366 TCP 23.104.0.1:36138 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:48:40.090 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40224 10 6452 1 2025-11-09 20:49:22.455 00:00:10.369 TCP 23.104.0.1:55124 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:49:40.301 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35942 10 6452 1 2025-11-09 20:50:09.443 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 20:50:09.334 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 20:50:22.857 00:00:10.373 TCP 23.104.0.1:38958 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:50:40.511 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60552 10 6452 1 2025-11-09 20:51:23.269 00:00:10.327 TCP 23.104.0.1:59004 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:51:40.728 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56072 10 6452 1 2025-11-09 20:47:54.967 00:05:03.309 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 20:52:23.633 00:00:10.367 TCP 23.104.0.1:40478 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:52:40.943 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:42904 10 6452 1 2025-11-09 20:48:54.968 00:05:03.306 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-09 20:53:24.036 00:00:10.369 TCP 23.104.0.1:50136 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:53:41.139 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41070 10 6452 1 2025-11-09 20:54:24.446 00:00:10.323 TCP 23.104.0.1:60956 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:54:41.362 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36450 10 6452 1 2025-11-09 20:55:09.506 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-09 20:55:09.489 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-09 20:55:24.802 00:00:10.369 TCP 23.104.0.1:39282 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:55:41.537 00:00:10.536 TCP 1.101.0.1:3000 -> 22.102.0.1:51734 10 6452 1 2025-11-09 20:56:25.209 00:00:10.360 TCP 23.104.0.1:33228 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:56:42.109 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39080 10 6452 1 2025-11-09 20:57:25.608 00:00:10.374 TCP 23.104.0.1:48812 -> 1.101.0.1:3000 11 1507 1 2025-11-09 20:57:42.336 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:51800 12 10375 1 2025-11-09 20:53:54.967 00:05:03.310 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-09 20:58:26.023 00:00:10.445 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 163, total bytes: 500574, total packets: 1574, avg bps: 1041, avg pps: 0, avg bpp: 318 Time window: 2025-11-09 19:54:54 - 2025-11-09 20:58:58 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0019s Wall: 0.0021s flows/second: 77689.9 Runtime: 0.0021s