Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-28 04:59:00.333 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 04:59:00.624 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 04:59:10.922 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35236 10 6452 1 2025-11-28 04:59:14.933 00:00:10.377 TCP 23.104.0.1:33226 -> 1.101.0.1:3000 11 1507 1 2025-11-28 04:56:04.780 00:05:04.589 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 04:56:04.779 00:05:04.593 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 05:00:11.142 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38100 10 6452 1 2025-11-28 05:00:15.346 00:00:10.365 TCP 23.104.0.1:37660 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:01:11.359 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:36042 10 6452 1 2025-11-28 05:01:15.749 00:00:10.365 TCP 23.104.0.1:55042 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:02:11.528 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41236 10 6452 1 2025-11-28 05:02:16.149 00:00:10.364 TCP 23.104.0.1:39028 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:03:11.748 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53168 10 6452 1 2025-11-28 05:03:16.546 00:00:10.416 TCP 23.104.0.1:34572 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:04:00.849 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 05:04:00.713 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:04:11.924 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58586 10 6452 1 2025-11-28 05:04:17.007 00:00:10.371 TCP 23.104.0.1:54614 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:05:12.107 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37754 10 6452 1 2025-11-28 05:05:17.411 00:00:10.362 TCP 23.104.0.1:49868 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:02:04.783 00:05:04.592 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 05:02:04.780 00:05:04.598 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 05:06:12.333 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47270 10 6452 1 2025-11-28 05:06:17.825 00:00:10.436 TCP 23.104.0.1:55872 -> 1.101.0.1:3000 15 1926 1 2025-11-28 05:07:12.508 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:39890 12 10369 1 2025-11-28 05:07:18.313 00:00:10.343 TCP 23.104.0.1:54096 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:08:12.751 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33984 10 6452 1 2025-11-28 05:08:18.694 00:00:10.330 TCP 23.104.0.1:54496 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:09:00.704 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 05:09:00.770 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:09:12.963 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46418 10 6452 1 2025-11-28 05:09:19.085 00:00:10.366 TCP 23.104.0.1:34216 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:10:13.140 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52372 10 6452 1 2025-11-28 05:10:19.498 00:00:10.369 TCP 23.104.0.1:55920 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:11:13.306 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33760 10 6452 1 2025-11-28 05:11:19.907 00:00:10.370 TCP 23.104.0.1:58262 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:08:04.782 00:05:04.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 05:08:04.780 00:05:04.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 05:12:13.477 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53960 10 6452 1 2025-11-28 05:12:20.324 00:00:10.360 TCP 23.104.0.1:53642 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:13:13.684 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45142 10 6452 1 2025-11-28 05:13:20.726 00:00:10.378 TCP 23.104.0.1:57904 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:14:01.405 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:14:01.341 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 05:14:13.901 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51256 10 6452 1 2025-11-28 05:14:21.141 00:00:10.360 TCP 23.104.0.1:46252 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:15:14.116 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41294 10 6452 1 2025-11-28 05:15:21.541 00:00:10.322 TCP 23.104.0.1:55820 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:16:14.335 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40784 10 6452 1 2025-11-28 05:16:21.898 00:00:10.365 TCP 23.104.0.1:45592 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:17:14.553 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46548 10 6452 1 2025-11-28 05:17:22.308 00:00:10.370 TCP 23.104.0.1:59766 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:14:04.784 00:05:04.595 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 05:14:04.781 00:05:04.600 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 05:18:14.767 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32874 10 6452 1 2025-11-28 05:18:22.713 00:00:10.370 TCP 23.104.0.1:33270 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:19:01.126 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 05:19:00.790 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:19:14.978 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:52598 13 6608 1 2025-11-28 05:19:23.123 00:00:10.325 TCP 23.104.0.1:50568 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:20:15.218 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46320 10 6452 1 2025-11-28 05:20:23.488 00:00:10.326 TCP 23.104.0.1:34914 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:21:15.429 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56380 10 6452 1 2025-11-28 05:21:23.860 00:00:10.375 TCP 23.104.0.1:56564 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:22:15.596 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42078 10 6452 1 2025-11-28 05:22:24.270 00:00:10.363 TCP 23.104.0.1:54220 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:23:15.809 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35540 10 6452 1 2025-11-28 05:23:24.670 00:00:10.371 TCP 23.104.0.1:55170 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:24:01.034 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:24:01.162 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 05:20:04.786 00:05:04.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 05:20:04.782 00:05:04.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 05:24:16.048 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52714 10 6452 1 2025-11-28 05:24:25.101 00:00:10.755 TCP 23.104.0.1:36526 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:25:16.266 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:57682 10 6452 1 2025-11-28 05:25:25.896 00:00:10.373 TCP 23.104.0.1:53552 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:26:16.468 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50102 10 6452 1 2025-11-28 05:26:26.315 00:00:10.324 TCP 23.104.0.1:50980 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:27:16.682 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49900 10 6452 1 2025-11-28 05:27:26.673 00:00:10.378 TCP 23.104.0.1:36584 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:28:16.892 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:48184 10 6452 1 2025-11-28 05:28:27.105 00:00:10.370 TCP 23.104.0.1:46910 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:29:01.059 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:29:01.035 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 05:29:17.080 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57864 10 6452 1 2025-11-28 05:29:27.513 00:00:10.362 TCP 23.104.0.1:37194 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:26:04.787 00:05:04.593 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 05:26:04.784 00:05:04.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 05:30:17.254 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45516 10 6452 1 2025-11-28 05:30:27.911 00:00:10.367 TCP 23.104.0.1:47256 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:31:17.428 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52436 10 6452 1 2025-11-28 05:31:28.318 00:00:10.372 TCP 23.104.0.1:57010 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:32:17.656 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55132 10 6452 1 2025-11-28 05:32:28.729 00:00:10.326 TCP 23.104.0.1:53418 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:33:17.876 00:00:10.394 TCP 1.101.0.1:3000 -> 22.102.0.1:39120 10 6452 1 2025-11-28 05:33:29.108 00:00:10.328 TCP 23.104.0.1:56324 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:34:01.394 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 05:34:01.364 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:34:18.306 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45978 10 6452 1 2025-11-28 05:34:29.482 00:00:10.375 TCP 23.104.0.1:58854 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:35:18.521 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57214 10 6452 1 2025-11-28 05:35:29.896 00:00:10.371 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:32:04.786 00:05:04.599 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 05:32:04.788 00:05:04.594 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 05:36:18.692 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35918 10 6452 1 2025-11-28 05:36:30.322 00:00:10.368 TCP 23.104.0.1:44278 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:37:18.904 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:58704 10 6452 1 2025-11-28 05:37:30.733 00:00:10.376 TCP 23.104.0.1:49550 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:38:19.092 00:00:10.285 TCP 1.101.0.1:3000 -> 22.102.0.1:57240 10 6452 1 2025-11-28 05:38:31.157 00:00:10.366 TCP 23.104.0.1:48674 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:39:01.337 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 05:39:01.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:39:19.419 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39856 10 6452 1 2025-11-28 05:39:31.566 00:00:10.371 TCP 23.104.0.1:33914 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:40:19.646 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37706 10 6452 1 2025-11-28 05:40:31.969 00:00:10.382 TCP 23.104.0.1:58544 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:41:19.858 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37034 10 6452 1 2025-11-28 05:41:32.390 00:00:10.367 TCP 23.104.0.1:38186 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:38:04.788 00:05:04.600 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 05:38:04.789 00:05:04.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 05:42:20.088 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39292 10 6452 1 2025-11-28 05:42:32.804 00:00:10.412 TCP 23.104.0.1:37182 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:43:20.307 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60774 10 6452 1 2025-11-28 05:43:33.255 00:00:10.362 TCP 23.104.0.1:40660 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:44:01.387 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:44:01.692 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 05:44:20.527 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54770 10 6452 1 2025-11-28 05:44:33.659 00:00:10.363 TCP 23.104.0.1:50534 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:45:20.747 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:51312 10 6452 1 2025-11-28 05:45:34.089 00:00:10.323 TCP 23.104.0.1:39574 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:46:20.911 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:60136 10 6452 1 2025-11-28 05:46:34.453 00:00:10.365 TCP 23.104.0.1:43602 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:47:21.115 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:42044 11 6504 1 2025-11-28 05:47:34.853 00:00:10.381 TCP 23.104.0.1:51988 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:44:04.791 00:05:04.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 05:44:04.788 00:05:04.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 05:48:21.380 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34996 10 6452 1 2025-11-28 05:48:35.277 00:00:10.368 TCP 23.104.0.1:51462 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:49:01.612 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:49:01.422 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 05:49:21.607 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49660 10 6452 1 2025-11-28 05:49:35.683 00:00:10.367 TCP 23.104.0.1:37974 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:50:21.826 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43334 10 6452 1 2025-11-28 05:50:36.096 00:00:10.364 TCP 23.104.0.1:58504 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:51:22.077 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56546 10 6452 1 2025-11-28 05:51:36.503 00:00:10.333 TCP 23.104.0.1:53318 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:52:22.298 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:54490 10 6452 1 2025-11-28 05:52:36.872 00:00:10.362 TCP 23.104.0.1:41374 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:53:22.493 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52900 10 6452 1 2025-11-28 05:53:37.278 00:00:10.360 TCP 23.104.0.1:50250 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:54:01.720 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-28 05:54:01.922 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-28 05:50:04.789 00:05:04.604 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-28 05:50:04.792 00:05:04.598 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-28 05:54:22.709 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37948 10 6452 1 2025-11-28 05:54:37.676 00:00:10.367 TCP 23.104.0.1:45876 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:55:22.921 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47274 10 6452 1 2025-11-28 05:55:38.106 00:00:10.717 TCP 23.104.0.1:36672 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:56:23.135 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46688 10 6452 1 2025-11-28 05:56:38.859 00:00:10.334 TCP 23.104.0.1:53114 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:57:23.352 00:00:10.294 TCP 1.101.0.1:3000 -> 22.102.0.1:57096 10 6452 1 2025-11-28 05:57:39.226 00:00:10.364 TCP 23.104.0.1:39412 -> 1.101.0.1:3000 11 1507 1 2025-11-28 05:58:23.685 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36306 10 6452 1 2025-11-28 05:58:39.629 00:00:10.359 TCP 23.104.0.1:36282 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502892, total packets: 1582, avg bps: 1068, avg pps: 0, avg bpp: 317 Time window: 2025-11-28 04:56:04 - 2025-11-28 05:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0061s User: 0.0008s Wall: 0.0027s flows/second: 59830.0 Runtime: 0.0028s