Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 04:59:15.738 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59726 10 6452 1 2025-11-16 04:59:29.324 00:00:10.322 TCP 23.104.0.1:37668 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:00:15.917 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55918 10 6452 1 2025-11-16 05:00:29.686 00:00:10.364 TCP 23.104.0.1:59168 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:01:16.135 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56302 10 6452 1 2025-11-16 05:01:30.109 00:00:10.319 TCP 23.104.0.1:59870 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:02:16.356 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40054 10 6452 1 2025-11-16 05:02:30.466 00:00:10.387 TCP 23.104.0.1:43554 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:03:12.388 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 05:03:12.567 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 05:03:16.565 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52330 10 6452 1 2025-11-16 05:03:30.897 00:00:10.384 TCP 23.104.0.1:38258 -> 1.101.0.1:3000 11 1507 1 2025-11-16 04:59:57.830 00:05:04.718 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 04:59:57.829 00:05:04.722 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 05:04:16.777 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36346 10 6452 1 2025-11-16 05:04:31.317 00:00:10.365 TCP 23.104.0.1:54456 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:05:16.945 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:45220 10 6452 1 2025-11-16 05:05:31.718 00:00:10.372 TCP 23.104.0.1:42200 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:06:17.178 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52192 10 6452 1 2025-11-16 05:06:32.131 00:00:10.368 TCP 23.104.0.1:54568 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:07:17.398 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41756 10 6452 1 2025-11-16 05:07:32.542 00:00:10.365 TCP 23.104.0.1:54776 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:08:12.433 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 05:08:12.533 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 05:08:17.609 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51806 12 6556 1 2025-11-16 05:08:32.952 00:00:10.328 TCP 23.104.0.1:34980 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:09:17.822 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47970 10 6452 1 2025-11-16 05:09:33.323 00:00:10.365 TCP 23.104.0.1:40142 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:05:57.831 00:05:04.724 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 05:05:57.832 00:05:04.719 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 05:10:17.991 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43320 10 6452 1 2025-11-16 05:10:33.727 00:00:10.335 TCP 23.104.0.1:37560 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:11:18.217 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46482 10 6452 1 2025-11-16 05:11:34.104 00:00:10.327 TCP 23.104.0.1:56464 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:12:18.432 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49100 10 6452 1 2025-11-16 05:12:34.475 00:00:10.367 TCP 23.104.0.1:48410 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:13:12.582 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 05:13:12.734 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 05:13:18.649 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37464 10 6452 1 2025-11-16 05:13:34.885 00:00:10.634 TCP 23.104.0.1:56384 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:14:18.861 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47910 10 6452 1 2025-11-16 05:14:35.566 00:00:10.321 TCP 23.104.0.1:43902 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:15:19.087 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34960 10 6452 1 2025-11-16 05:15:35.924 00:00:10.393 TCP 23.104.0.1:43070 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:11:57.833 00:05:04.719 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 05:11:57.831 00:05:04.724 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 05:16:19.302 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48540 10 6452 1 2025-11-16 05:16:36.359 00:00:10.362 TCP 23.104.0.1:43378 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:17:19.515 00:00:10.283 TCP 1.101.0.1:3000 -> 22.102.0.1:35236 10 6452 1 2025-11-16 05:17:36.763 00:00:10.383 TCP 23.104.0.1:33736 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:18:12.603 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 05:18:12.580 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 05:18:19.838 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33102 10 6452 1 2025-11-16 05:18:37.187 00:00:10.361 TCP 23.104.0.1:58986 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:19:20.075 00:00:11.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48922 10 6452 1 2025-11-16 05:19:37.583 00:00:10.373 TCP 23.104.0.1:53622 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:20:21.302 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36858 10 6452 1 2025-11-16 05:20:37.992 00:00:10.366 TCP 23.104.0.1:55364 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:21:21.514 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45936 10 6452 1 2025-11-16 05:21:38.400 00:00:10.363 TCP 23.104.0.1:46068 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:17:57.835 00:05:04.721 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 05:17:57.834 00:05:04.726 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 05:22:21.735 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42428 10 6452 1 2025-11-16 05:22:38.801 00:00:10.370 TCP 23.104.0.1:36940 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:23:12.910 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 05:23:12.758 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 05:23:21.958 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49320 10 6452 1 2025-11-16 05:23:39.203 00:00:10.332 TCP 23.104.0.1:48584 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:24:22.178 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48848 10 6452 1 2025-11-16 05:24:39.570 00:00:10.331 TCP 23.104.0.1:50532 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:25:22.390 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41958 10 6452 1 2025-11-16 05:25:39.955 00:00:10.367 TCP 23.104.0.1:52164 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:26:22.612 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41670 10 6452 1 2025-11-16 05:26:40.362 00:00:10.320 TCP 23.104.0.1:47580 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:27:22.787 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52228 10 6452 1 2025-11-16 05:27:40.722 00:00:10.367 TCP 23.104.0.1:58894 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:23:57.834 00:05:04.725 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 05:23:57.837 00:05:04.720 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 05:28:13.018 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 05:28:12.833 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 05:28:22.996 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33026 10 6452 1 2025-11-16 05:28:41.128 00:00:10.424 TCP 23.104.0.1:58774 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:29:23.227 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:39288 10 6452 1 2025-11-16 05:29:41.590 00:00:10.363 TCP 23.104.0.1:36592 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:30:23.401 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37192 10 6452 1 2025-11-16 05:30:42.002 00:00:10.364 TCP 23.104.0.1:51796 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:31:23.574 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43784 10 6452 1 2025-11-16 05:31:42.411 00:00:10.366 TCP 23.104.0.1:34832 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:32:23.789 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37050 10 6452 1 2025-11-16 05:32:42.816 00:00:10.367 TCP 23.104.0.1:51510 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:33:12.993 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 05:33:12.907 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 05:33:23.962 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36430 10 6452 1 2025-11-16 05:33:43.221 00:00:10.368 TCP 23.104.0.1:38164 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:29:57.835 00:05:04.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 05:29:57.839 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 05:34:24.193 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59764 10 6452 1 2025-11-16 05:34:43.629 00:00:10.361 TCP 23.104.0.1:32826 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:35:24.364 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50444 10 6452 1 2025-11-16 05:35:44.026 00:00:10.363 TCP 23.104.0.1:56840 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:36:24.579 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46694 10 6452 1 2025-11-16 05:36:44.429 00:00:10.365 TCP 23.104.0.1:48742 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:37:24.745 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33326 10 6452 1 2025-11-16 05:37:44.827 00:00:10.341 TCP 23.104.0.1:45214 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:38:13.476 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 05:38:13.060 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 05:38:24.960 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:59276 10 6452 1 2025-11-16 05:38:45.205 00:00:10.364 TCP 23.104.0.1:49508 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:39:25.189 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48440 10 6452 1 2025-11-16 05:39:45.603 00:00:10.365 TCP 23.104.0.1:35224 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:35:57.841 00:05:04.729 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 05:35:57.838 00:05:04.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 05:40:25.399 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52754 10 6452 1 2025-11-16 05:40:46.002 00:00:10.371 TCP 23.104.0.1:49690 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:41:25.612 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35102 10 6452 1 2025-11-16 05:41:46.421 00:00:10.373 TCP 23.104.0.1:55754 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:42:25.825 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37894 10 6452 1 2025-11-16 05:42:46.829 00:00:10.370 TCP 23.104.0.1:47582 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:43:13.083 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 05:43:13.163 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 05:43:25.997 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56746 10 6452 1 2025-11-16 05:43:47.233 00:00:10.373 TCP 23.104.0.1:44292 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:44:26.171 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43186 10 6452 1 2025-11-16 05:44:47.641 00:00:10.368 TCP 23.104.0.1:44164 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:45:26.386 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34336 10 6452 1 2025-11-16 05:45:48.056 00:00:10.368 TCP 23.104.0.1:40400 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:41:57.840 00:05:04.732 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 05:41:57.843 00:05:04.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 05:46:26.600 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37560 10 6452 1 2025-11-16 05:46:48.467 00:00:10.366 TCP 23.104.0.1:35084 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:47:26.813 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52954 10 6452 1 2025-11-16 05:47:48.874 00:00:10.367 TCP 23.104.0.1:38116 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:48:13.212 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 05:48:13.434 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 05:48:26.988 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54760 10 6452 1 2025-11-16 05:48:49.285 00:00:10.362 TCP 23.104.0.1:35658 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:49:27.207 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47074 10 6452 1 2025-11-16 05:49:49.686 00:00:10.368 TCP 23.104.0.1:47550 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:50:27.416 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39356 10 6452 1 2025-11-16 05:50:50.106 00:00:10.361 TCP 23.104.0.1:35304 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:51:27.632 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41832 10 6452 1 2025-11-16 05:51:50.504 00:00:10.607 TCP 23.104.0.1:43800 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:47:57.843 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 05:47:57.840 00:05:04.733 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 05:52:27.852 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:34286 10 6452 1 2025-11-16 05:52:51.149 00:00:10.367 TCP 23.104.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:53:13.918 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 05:53:13.868 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 05:53:28.094 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57072 10 6452 1 2025-11-16 05:53:51.558 00:00:10.369 TCP 23.104.0.1:40836 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:54:28.306 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40764 10 6452 1 2025-11-16 05:54:51.966 00:00:10.372 TCP 23.104.0.1:57352 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:55:28.480 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34518 10 6452 1 2025-11-16 05:55:52.383 00:00:10.364 TCP 23.104.0.1:50846 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:56:28.692 00:00:14.167 TCP 1.101.0.1:3000 -> 22.102.0.1:41718 10 6452 1 2025-11-16 05:56:52.788 00:00:10.365 TCP 23.104.0.1:38940 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:57:32.903 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35352 10 6452 1 2025-11-16 05:57:53.194 00:00:10.420 TCP 23.104.0.1:56494 -> 1.101.0.1:3000 11 1507 1 2025-11-16 05:53:57.847 00:05:04.724 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 05:53:57.844 00:05:04.729 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 05:58:13.744 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 05:58:13.557 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 05:58:33.132 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42308 10 6452 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1108, avg pps: 0, avg bpp: 317 Time window: 2025-11-16 04:59:15 - 2025-11-16 05:59:02 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0061s User: 0.0000s Wall: 0.0021s flows/second: 78142.8 Runtime: 0.0021s