Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-10 06:53:58.492 00:05:56.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 06:58:55.411 00:00:10.367 TCP 23.104.0.1:43424 -> 1.101.0.1:3000 11 1507 1 2025-11-10 06:59:19.442 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58296 10 6452 1 2025-11-10 06:59:55.815 00:00:10.368 TCP 23.104.0.1:41446 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:00:21.384 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 07:00:21.221 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 07:00:19.615 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59882 10 6452 1 2025-11-10 07:00:56.226 00:00:10.364 TCP 23.104.0.1:52360 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:01:19.829 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:60526 10 6452 1 2025-11-10 07:01:56.626 00:00:10.364 TCP 23.104.0.1:40692 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:02:20.072 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45610 10 6452 1 2025-11-10 07:02:57.035 00:00:10.814 TCP 23.104.0.1:46704 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:03:20.285 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51372 10 6452 1 2025-11-10 06:58:58.496 00:05:56.684 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 07:03:57.889 00:00:10.346 TCP 23.104.0.1:35008 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:04:20.456 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59564 10 6452 1 2025-11-10 06:59:58.494 00:05:56.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 07:04:58.273 00:00:10.361 TCP 23.104.0.1:49752 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:05:21.449 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 07:05:21.549 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 07:05:20.665 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:58704 10 6452 1 2025-11-10 07:05:58.677 00:00:10.360 TCP 23.104.0.1:51778 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:06:20.872 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52768 10 6452 1 2025-11-10 07:06:59.105 00:00:10.366 TCP 23.104.0.1:47352 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:07:21.085 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39696 10 6452 1 2025-11-10 07:07:59.513 00:00:10.366 TCP 23.104.0.1:35530 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:08:21.304 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40734 10 6452 1 2025-11-10 07:08:59.918 00:00:10.369 TCP 23.104.0.1:40024 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:09:21.519 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57644 10 6452 1 2025-11-10 07:04:58.501 00:05:56.680 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 07:10:00.326 00:00:10.367 TCP 23.104.0.1:50952 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:10:21.626 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 07:10:21.807 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 07:10:21.729 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38856 10 6452 1 2025-11-10 07:05:58.498 00:05:56.685 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 07:11:00.732 00:00:10.365 TCP 23.104.0.1:45090 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:11:21.947 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48886 10 6452 1 2025-11-10 07:12:01.136 00:00:10.367 TCP 23.104.0.1:51066 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:12:22.167 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58412 10 6452 1 2025-11-10 07:13:01.541 00:00:10.367 TCP 23.104.0.1:47148 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:13:22.383 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34288 12 6556 1 2025-11-10 07:14:01.943 00:00:10.372 TCP 23.104.0.1:46484 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:14:22.608 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:53496 10 6452 1 2025-11-10 07:15:21.805 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 07:15:02.351 00:00:10.359 TCP 23.104.0.1:56392 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:15:21.878 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 07:15:22.807 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50254 10 6452 1 2025-11-10 07:10:58.502 00:05:56.679 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 07:16:02.762 00:00:10.331 TCP 23.104.0.1:33332 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:16:23.039 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:60444 10 6452 1 2025-11-10 07:11:58.500 00:05:56.685 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 07:17:03.131 00:00:10.326 TCP 23.104.0.1:38396 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:17:23.291 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59420 10 6452 1 2025-11-10 07:18:03.495 00:00:10.368 TCP 23.104.0.1:54914 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:18:23.459 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32898 10 6452 1 2025-11-10 07:19:03.897 00:00:10.369 TCP 23.104.0.1:40040 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:19:23.672 00:00:10.641 TCP 1.101.0.1:3000 -> 22.102.0.1:35368 10 6452 1 2025-11-10 07:20:04.300 00:00:10.368 TCP 23.104.0.1:58802 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:20:22.132 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 07:20:22.002 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 07:20:24.354 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56370 10 6452 1 2025-11-10 07:21:04.711 00:00:10.371 TCP 23.104.0.1:38652 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:21:24.570 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54416 10 6452 1 2025-11-10 07:16:58.503 00:05:56.679 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 07:22:05.122 00:00:10.365 TCP 23.104.0.1:43024 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:22:24.785 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43260 10 6452 1 2025-11-10 07:17:58.501 00:05:56.684 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 07:23:05.529 00:00:10.366 TCP 23.104.0.1:55436 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:23:24.957 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42840 12 6556 1 2025-11-10 07:24:05.932 00:00:10.351 TCP 23.104.0.1:39334 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:24:25.192 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50182 10 6452 1 2025-11-10 07:25:06.333 00:00:10.365 TCP 23.104.0.1:38722 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:25:21.842 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 07:25:22.009 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 07:25:25.400 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56006 10 6452 1 2025-11-10 07:26:06.738 00:00:10.370 TCP 23.104.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:26:25.613 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58296 10 6452 1 2025-11-10 07:27:07.146 00:00:10.367 TCP 23.104.0.1:37588 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:27:25.825 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50452 10 6452 1 2025-11-10 07:22:58.505 00:05:56.679 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 07:28:07.553 00:00:10.368 TCP 23.104.0.1:52746 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:28:25.990 00:00:10.804 TCP 1.101.0.1:3000 -> 22.102.0.1:45940 12 6556 1 2025-11-10 07:23:58.503 00:05:56.685 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 07:29:07.959 00:00:10.366 TCP 23.104.0.1:54800 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:29:26.834 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36158 10 6452 1 2025-11-10 07:30:08.362 00:00:10.362 TCP 23.104.0.1:46248 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:30:22.013 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 07:30:22.071 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 07:30:27.073 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60528 10 6452 1 2025-11-10 07:31:08.765 00:00:10.369 TCP 23.104.0.1:47486 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:31:27.284 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54406 10 6452 1 2025-11-10 07:32:09.172 00:00:10.372 TCP 23.104.0.1:53110 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:32:27.461 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48746 10 6452 1 2025-11-10 07:33:09.576 00:00:10.365 TCP 23.104.0.1:59570 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:33:27.672 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44100 10 6452 1 2025-11-10 07:28:58.505 00:05:56.679 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 07:34:09.978 00:00:10.373 TCP 23.104.0.1:57314 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:34:27.881 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52130 10 6452 1 2025-11-10 07:29:58.503 00:05:56.684 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 07:35:10.386 00:00:10.326 TCP 23.104.0.1:45276 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:35:22.460 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 07:35:22.479 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 07:35:28.104 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33432 10 6452 1 2025-11-10 07:36:10.747 00:00:10.362 TCP 23.104.0.1:34774 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:36:28.334 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48692 10 6452 1 2025-11-10 07:37:11.147 00:00:10.361 TCP 23.104.0.1:55888 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:37:28.518 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42942 10 6452 1 2025-11-10 07:38:11.548 00:00:10.365 TCP 23.104.0.1:53650 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:38:28.725 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47864 10 6452 1 2025-11-10 07:39:11.951 00:00:10.365 TCP 23.104.0.1:50028 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:39:28.934 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:47436 10 6452 1 2025-11-10 07:34:58.507 00:05:56.679 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 07:40:22.390 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 07:40:12.358 00:00:10.334 TCP 23.104.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:40:22.257 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 07:40:29.166 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44412 10 6452 1 2025-11-10 07:35:58.504 00:05:56.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 07:41:12.730 00:00:10.374 TCP 23.104.0.1:36662 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:41:29.379 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59700 10 6452 1 2025-11-10 07:42:13.143 00:00:10.369 TCP 23.104.0.1:57030 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:42:29.598 00:00:10.512 TCP 1.101.0.1:3000 -> 22.102.0.1:50270 10 6452 1 2025-11-10 07:43:13.553 00:00:10.366 TCP 23.104.0.1:33036 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:43:30.157 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34634 10 6452 1 2025-11-10 07:44:13.956 00:00:10.366 TCP 23.104.0.1:52068 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:44:30.371 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40554 10 6452 1 2025-11-10 07:45:14.358 00:00:11.322 TCP 23.104.0.1:60578 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:45:22.531 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 07:45:22.236 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 07:45:30.595 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57486 10 6452 1 2025-11-10 07:40:58.508 00:05:56.682 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 07:46:15.721 00:00:10.322 TCP 23.104.0.1:60944 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:46:30.812 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39750 10 6452 1 2025-11-10 07:41:58.506 00:05:56.687 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 07:47:16.107 00:00:10.322 TCP 23.104.0.1:58984 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:47:31.038 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58236 10 6452 1 2025-11-10 07:48:16.468 00:00:10.363 TCP 23.104.0.1:41834 -> 1.101.0.1:3000 12 1559 1 2025-11-10 07:48:31.251 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50250 10 6452 1 2025-11-10 07:49:16.876 00:00:10.364 TCP 23.104.0.1:48630 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:49:31.472 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38462 10 6452 1 2025-11-10 07:50:22.578 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 07:50:22.631 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 07:50:17.283 00:00:10.319 TCP 23.104.0.1:38490 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:50:31.678 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43940 10 6452 1 2025-11-10 07:51:17.642 00:00:10.424 TCP 23.104.0.1:45268 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:51:31.897 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50216 10 6452 1 2025-11-10 07:46:58.510 00:05:56.683 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 07:52:18.113 00:00:10.358 TCP 23.104.0.1:36834 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:52:32.106 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51808 10 6452 1 2025-11-10 07:47:58.507 00:05:56.687 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-10 07:53:18.519 00:00:10.363 TCP 23.104.0.1:35140 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:53:32.320 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42796 10 6452 1 2025-11-10 07:54:18.920 00:00:10.376 TCP 23.104.0.1:33156 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:54:32.532 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52482 10 6452 1 2025-11-10 07:55:22.736 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-10 07:55:22.770 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-10 07:55:19.335 00:00:10.365 TCP 23.104.0.1:54180 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:55:32.749 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37792 10 6452 1 2025-11-10 07:56:19.736 00:00:10.365 TCP 23.104.0.1:42750 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:56:32.958 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:34430 12 6556 1 2025-11-10 07:57:20.141 00:00:10.369 TCP 23.104.0.1:45182 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:57:33.189 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48414 10 6452 1 2025-11-10 07:52:58.511 00:05:56.681 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-10 07:58:20.551 00:00:10.336 TCP 23.104.0.1:37998 -> 1.101.0.1:3000 11 1507 1 2025-11-10 07:58:33.403 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33052 10 6452 1 Summary: total flows: 164, total bytes: 498816, total packets: 1581, avg bps: 1024, avg pps: 0, avg bpp: 315 Time window: 2025-11-10 06:53:58 - 2025-11-10 07:58:55 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0020s Wall: 0.0042s flows/second: 39329.1 Runtime: 0.0042s