Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 01:59:08.799 00:00:10.366 TCP 23.104.0.1:49470 -> 1.101.0.1:3000 11 1507 1 2025-11-15 01:59:07.479 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51564 10 6452 1 2025-11-15 02:00:07.657 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:37702 10 6452 1 2025-11-15 02:00:09.207 00:00:10.369 TCP 23.104.0.1:49546 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:01:09.609 00:00:10.374 TCP 23.104.0.1:39184 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:01:07.912 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50614 10 6452 1 2025-11-15 02:02:10.018 00:00:10.365 TCP 23.104.0.1:45728 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:02:08.140 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60276 10 6452 1 2025-11-15 02:02:39.895 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:02:39.978 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 02:03:10.422 00:00:10.363 TCP 23.104.0.1:52016 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:03:08.308 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42328 10 6452 1 2025-11-15 01:59:57.294 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 01:59:57.294 00:05:04.514 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 02:04:08.520 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44934 10 6452 1 2025-11-15 02:04:10.822 00:00:10.360 TCP 23.104.0.1:49424 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:05:08.732 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42114 10 6452 1 2025-11-15 02:05:11.223 00:00:10.369 TCP 23.104.0.1:38008 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:06:11.626 00:00:10.360 TCP 23.104.0.1:51590 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:06:08.946 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36826 10 6452 1 2025-11-15 02:07:09.129 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45382 10 6452 1 2025-11-15 02:07:12.026 00:00:10.365 TCP 23.104.0.1:36366 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:07:39.945 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:07:40.210 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 02:08:09.342 00:00:10.402 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-11-15 02:08:12.429 00:00:10.317 TCP 23.104.0.1:39920 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:09:09.784 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42758 10 6452 1 2025-11-15 02:09:12.787 00:00:10.365 TCP 23.104.0.1:58554 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:05:57.297 00:05:04.510 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 02:05:57.294 00:05:04.516 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 02:10:10.007 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:38732 10 6452 1 2025-11-15 02:10:13.196 00:00:13.523 TCP 23.104.0.1:35976 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:11:10.193 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:60008 12 10375 1 2025-11-15 02:11:16.762 00:00:10.455 TCP 23.104.0.1:39982 -> 1.101.0.1:3000 15 1926 1 2025-11-15 02:12:10.440 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:43836 11 6504 1 2025-11-15 02:12:17.252 00:00:10.370 TCP 23.104.0.1:37452 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:12:39.983 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:12:40.470 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 02:13:10.719 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49200 10 6452 1 2025-11-15 02:13:17.655 00:00:10.373 TCP 23.104.0.1:58096 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:14:10.945 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:53820 10 6452 1 2025-11-15 02:14:18.092 00:00:10.322 TCP 23.104.0.1:49528 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:15:11.144 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58924 10 6452 1 2025-11-15 02:15:18.455 00:00:10.362 TCP 23.104.0.1:56960 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:11:57.294 00:05:04.516 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 02:11:57.297 00:05:04.511 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 02:16:11.366 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53552 10 6452 1 2025-11-15 02:16:18.857 00:00:10.369 TCP 23.104.0.1:49888 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:17:11.600 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40230 10 6452 1 2025-11-15 02:17:19.267 00:00:10.373 TCP 23.104.0.1:45292 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:17:40.376 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:17:40.319 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 02:18:11.811 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57394 10 6452 1 2025-11-15 02:18:19.677 00:00:10.371 TCP 23.104.0.1:40954 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:19:12.034 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43352 10 6452 1 2025-11-15 02:19:20.103 00:00:10.358 TCP 23.104.0.1:47162 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:20:12.247 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50266 10 6452 1 2025-11-15 02:20:20.504 00:00:10.328 TCP 23.104.0.1:55752 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:21:12.457 00:00:10.163 TCP 1.101.0.1:3000 -> 22.102.0.1:35932 13 13949 1 2025-11-15 02:21:20.877 00:00:10.395 TCP 23.104.0.1:37026 -> 1.101.0.1:3000 15 1926 1 2025-11-15 02:17:57.296 00:05:04.518 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 02:17:57.299 00:05:04.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 02:22:12.663 00:00:13.249 TCP 1.101.0.1:3000 -> 22.102.0.1:54796 10 6452 1 2025-11-15 02:22:21.315 00:00:10.367 TCP 23.104.0.1:45040 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:22:40.454 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 02:22:40.272 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:23:15.951 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45914 10 6452 1 2025-11-15 02:23:21.721 00:00:10.370 TCP 23.104.0.1:46016 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:24:16.175 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32936 10 6452 1 2025-11-15 02:24:22.134 00:00:10.344 TCP 23.104.0.1:57462 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:25:16.383 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36082 10 6452 1 2025-11-15 02:25:22.537 00:00:10.494 TCP 23.104.0.1:43386 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:26:16.608 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35626 10 6452 1 2025-11-15 02:26:23.093 00:00:10.367 TCP 23.104.0.1:37462 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:27:16.828 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:56616 10 6452 1 2025-11-15 02:27:23.498 00:00:10.367 TCP 23.104.0.1:48342 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:27:40.462 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:27:40.473 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 02:23:57.300 00:05:04.512 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 02:23:57.297 00:05:04.517 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 02:28:17.009 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53040 10 6452 1 2025-11-15 02:28:23.904 00:00:10.334 TCP 23.104.0.1:58804 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:29:17.219 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:33916 10 6452 1 2025-11-15 02:29:24.276 00:00:10.327 TCP 23.104.0.1:32982 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:30:17.386 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42482 10 6452 1 2025-11-15 02:30:24.638 00:00:10.360 TCP 23.104.0.1:58562 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:31:17.596 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48022 10 6452 1 2025-11-15 02:31:25.035 00:00:10.323 TCP 23.104.0.1:56362 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:32:17.811 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58506 10 6452 1 2025-11-15 02:32:25.397 00:00:10.363 TCP 23.104.0.1:41038 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:32:40.425 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 02:32:40.562 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:33:18.025 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:32934 10 6452 1 2025-11-15 02:33:25.799 00:00:10.367 TCP 23.104.0.1:42744 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:29:57.300 00:05:04.515 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 02:29:57.299 00:05:04.521 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 02:34:18.245 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36908 10 6452 1 2025-11-15 02:34:26.200 00:00:10.360 TCP 23.104.0.1:44412 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:35:18.463 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60276 10 6452 1 2025-11-15 02:35:26.599 00:00:10.439 TCP 23.104.0.1:46400 -> 1.101.0.1:3000 15 1926 1 2025-11-15 02:36:18.646 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:48386 12 10369 1 2025-11-15 02:36:27.101 00:00:10.377 TCP 23.104.0.1:46060 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:37:18.901 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59572 10 6452 1 2025-11-15 02:37:40.651 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:37:27.508 00:00:10.366 TCP 23.104.0.1:54884 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:37:40.847 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 02:38:19.122 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48980 10 6452 1 2025-11-15 02:38:27.909 00:00:10.330 TCP 23.104.0.1:60176 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:39:19.288 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52714 10 6452 1 2025-11-15 02:39:28.279 00:00:10.368 TCP 23.104.0.1:43378 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:35:57.303 00:05:04.516 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 02:35:57.299 00:05:04.521 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 02:40:19.503 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51632 10 6452 1 2025-11-15 02:40:28.683 00:00:10.366 TCP 23.104.0.1:43134 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:41:19.676 00:00:10.578 TCP 1.101.0.1:3000 -> 22.102.0.1:55182 10 6452 1 2025-11-15 02:41:29.114 00:00:20.973 TCP 23.104.0.1:34028 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:42:20.291 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34854 10 6452 1 2025-11-15 02:42:40.669 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:42:40.749 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 02:42:40.124 00:00:10.362 TCP 23.104.0.1:47652 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:43:20.531 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:46396 10 6452 1 2025-11-15 02:43:40.524 00:00:10.774 TCP 23.104.0.1:60736 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:44:20.733 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41390 10 6452 1 2025-11-15 02:44:41.339 00:00:10.361 TCP 23.104.0.1:37934 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:45:20.965 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37642 12 6556 1 2025-11-15 02:45:41.738 00:00:10.364 TCP 23.104.0.1:40366 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:41:57.299 00:05:04.523 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 02:41:57.301 00:05:04.517 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 02:46:21.203 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34334 10 6452 1 2025-11-15 02:46:42.140 00:00:10.365 TCP 23.104.0.1:40076 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:47:21.427 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40224 10 6452 1 2025-11-15 02:47:40.905 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 02:47:40.787 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:47:42.546 00:00:10.362 TCP 23.104.0.1:34746 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:48:21.639 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58708 10 6452 1 2025-11-15 02:48:42.947 00:00:10.372 TCP 23.104.0.1:55920 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:49:21.855 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44220 10 6452 1 2025-11-15 02:49:43.360 00:00:10.371 TCP 23.104.0.1:40250 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:50:22.088 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49896 10 6452 1 2025-11-15 02:50:43.767 00:00:10.372 TCP 23.104.0.1:40726 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:51:22.304 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58712 10 6452 1 2025-11-15 02:51:44.181 00:00:10.420 TCP 23.104.0.1:50538 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:47:57.304 00:05:04.517 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 02:47:57.302 00:05:04.521 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 02:52:41.172 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:52:22.524 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33070 10 6452 1 2025-11-15 02:52:40.885 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 02:52:44.643 00:00:10.368 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:53:22.744 00:00:11.019 TCP 1.101.0.1:3000 -> 22.102.0.1:37538 10 6452 1 2025-11-15 02:53:45.059 00:00:10.372 TCP 23.104.0.1:52904 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:54:23.802 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54732 10 6452 1 2025-11-15 02:54:45.476 00:00:10.385 TCP 23.104.0.1:35318 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:55:24.025 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33260 10 6452 1 2025-11-15 02:55:45.906 00:00:10.379 TCP 23.104.0.1:35524 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:56:24.239 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56942 10 6452 1 2025-11-15 02:56:46.317 00:00:10.366 TCP 23.104.0.1:54562 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:57:24.462 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60472 10 6452 1 2025-11-15 02:57:41.062 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 02:57:40.783 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 02:57:46.723 00:00:10.372 TCP 23.104.0.1:39666 -> 1.101.0.1:3000 11 1507 1 2025-11-15 02:53:57.302 00:05:04.522 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 02:53:57.301 00:05:04.527 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 02:58:24.681 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34296 10 6452 1 Summary: total flows: 163, total bytes: 513591, total packets: 1583, avg bps: 1143, avg pps: 0, avg bpp: 324 Time window: 2025-11-15 01:59:07 - 2025-11-15 02:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0019s Wall: 0.0024s flows/second: 68572.9 Runtime: 0.0024s