Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 22:58:58.630 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55996 10 6452 1 2025-11-20 22:59:04.746 00:00:10.339 TCP 23.104.0.1:39274 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:59:58.835 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46258 10 6452 1 2025-11-20 23:00:05.119 00:00:10.367 TCP 23.104.0.1:53014 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:00:31.296 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 23:00:31.152 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 23:00:59.075 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44040 10 6452 1 2025-11-20 23:01:05.522 00:00:10.364 TCP 23.104.0.1:39046 -> 1.101.0.1:3000 11 1507 1 2025-11-20 22:58:01.166 00:05:04.317 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 22:58:01.163 00:05:04.323 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 23:01:59.294 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50834 10 6452 1 2025-11-20 23:02:05.932 00:00:10.387 TCP 23.104.0.1:36384 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:02:59.508 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44696 10 6452 1 2025-11-20 23:03:06.354 00:00:10.363 TCP 23.104.0.1:37472 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:03:59.715 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50964 10 6452 1 2025-11-20 23:04:06.761 00:00:10.374 TCP 23.104.0.1:56704 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:04:59.893 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42338 10 6452 1 2025-11-20 23:05:07.173 00:00:10.358 TCP 23.104.0.1:40892 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:05:31.521 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 23:05:31.318 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 23:06:00.114 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46032 10 6452 1 2025-11-20 23:06:07.574 00:00:10.364 TCP 23.104.0.1:56230 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:07:00.323 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58284 10 6452 1 2025-11-20 23:07:07.978 00:00:10.374 TCP 23.104.0.1:37530 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:04:01.168 00:05:04.317 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 23:04:01.164 00:05:04.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 23:08:00.537 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:43126 10 6452 1 2025-11-20 23:08:08.389 00:00:10.322 TCP 23.104.0.1:33516 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:09:00.722 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34662 10 6452 1 2025-11-20 23:09:08.748 00:00:10.373 TCP 23.104.0.1:56448 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:10:00.931 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:52854 10 6452 1 2025-11-20 23:10:09.162 00:00:10.326 TCP 23.104.0.1:58450 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:10:31.486 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 23:10:31.429 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 23:11:01.124 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52210 10 6452 1 2025-11-20 23:11:09.527 00:00:10.365 TCP 23.104.0.1:45410 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:12:01.336 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41830 10 6452 1 2025-11-20 23:12:09.930 00:00:21.127 TCP 23.104.0.1:55486 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:13:01.553 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55050 10 6452 1 2025-11-20 23:13:21.101 00:00:10.360 TCP 23.104.0.1:39760 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:10:01.168 00:05:04.317 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 23:10:01.165 00:05:04.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 23:14:01.759 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34768 10 6452 1 2025-11-20 23:14:21.498 00:00:10.319 TCP 23.104.0.1:58848 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:15:01.975 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:42072 10 6452 1 2025-11-20 23:15:31.618 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 23:15:31.678 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 23:15:21.855 00:00:10.368 TCP 23.104.0.1:51858 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:16:02.176 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48228 10 6452 1 2025-11-20 23:16:22.262 00:00:10.360 TCP 23.104.0.1:38062 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:17:02.395 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42266 10 6452 1 2025-11-20 23:17:22.666 00:00:10.363 TCP 23.104.0.1:39590 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:18:02.572 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39674 10 6452 1 2025-11-20 23:18:23.091 00:00:10.365 TCP 23.104.0.1:54622 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:19:02.794 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43674 10 6452 1 2025-11-20 23:19:23.495 00:00:10.362 TCP 23.104.0.1:55924 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:16:01.166 00:05:04.323 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 23:16:01.169 00:05:04.318 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 23:20:02.963 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33856 10 6452 1 2025-11-20 23:20:31.782 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 23:20:31.656 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 23:20:23.893 00:00:10.375 TCP 23.104.0.1:50886 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:21:03.184 00:00:10.565 TCP 1.101.0.1:3000 -> 22.102.0.1:55572 10 6452 1 2025-11-20 23:21:24.309 00:00:10.361 TCP 23.104.0.1:42254 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:22:03.782 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53318 10 6452 1 2025-11-20 23:22:24.711 00:00:10.364 TCP 23.104.0.1:39824 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:23:03.997 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:60104 10 6452 1 2025-11-20 23:23:25.115 00:00:10.370 TCP 23.104.0.1:39996 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:24:04.178 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56344 10 6452 1 2025-11-20 23:24:25.521 00:00:10.324 TCP 23.104.0.1:53958 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:25:04.353 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:47834 10 6452 1 2025-11-20 23:25:31.819 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 23:25:31.767 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 23:25:25.885 00:00:10.384 TCP 23.104.0.1:58334 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:22:01.172 00:05:04.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 23:22:01.175 00:05:04.315 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 23:26:04.561 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55312 10 6452 1 2025-11-20 23:26:26.310 00:00:10.324 TCP 23.104.0.1:51682 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:27:04.773 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32824 10 6452 1 2025-11-20 23:27:26.677 00:00:10.365 TCP 23.104.0.1:40424 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:28:04.982 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43820 10 6452 1 2025-11-20 23:28:27.106 00:00:10.986 TCP 23.104.0.1:36994 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:29:05.168 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46388 10 6452 1 2025-11-20 23:29:28.128 00:00:10.365 TCP 23.104.0.1:60834 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:30:05.384 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50908 10 6452 1 2025-11-20 23:30:31.619 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 23:30:31.744 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 23:30:28.530 00:00:10.532 TCP 23.104.0.1:49144 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:31:05.604 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59634 10 6452 1 2025-11-20 23:31:29.110 00:00:10.329 TCP 23.104.0.1:60330 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:28:01.177 00:05:04.315 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 23:28:01.174 00:05:04.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 23:32:05.816 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59042 12 6556 1 2025-11-20 23:32:29.489 00:00:10.509 TCP 23.104.0.1:35580 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:33:06.069 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56524 10 6452 1 2025-11-20 23:33:30.047 00:00:10.368 TCP 23.104.0.1:60158 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:34:06.285 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57150 10 6452 1 2025-11-20 23:34:30.451 00:00:15.522 TCP 23.104.0.1:33580 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:35:06.509 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56246 10 6452 1 2025-11-20 23:35:31.760 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 23:35:32.037 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 23:35:36.015 00:00:10.361 TCP 23.104.0.1:39754 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:36:06.680 00:00:10.440 TCP 1.101.0.1:3000 -> 22.102.0.1:56472 10 6452 1 2025-11-20 23:36:36.415 00:00:10.363 TCP 23.104.0.1:51938 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:37:07.162 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38486 10 6452 1 2025-11-20 23:37:36.815 00:00:10.363 TCP 23.104.0.1:59622 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:34:01.194 00:05:04.300 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 23:34:01.192 00:05:04.305 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 23:38:07.383 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50082 10 6452 1 2025-11-20 23:38:37.213 00:00:10.325 TCP 23.104.0.1:39426 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:39:07.598 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54548 10 6452 1 2025-11-20 23:39:37.580 00:00:10.364 TCP 23.104.0.1:33204 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:40:07.815 00:00:10.269 TCP 1.101.0.1:3000 -> 22.102.0.1:35944 10 6452 1 2025-11-20 23:40:32.144 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 23:40:32.049 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 23:40:37.978 00:00:10.378 TCP 23.104.0.1:52510 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:41:08.122 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39808 10 6452 1 2025-11-20 23:41:38.399 00:00:10.361 TCP 23.104.0.1:55710 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:42:08.334 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55808 10 6452 1 2025-11-20 23:42:38.800 00:00:10.372 TCP 23.104.0.1:39794 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:43:08.553 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34358 10 6452 1 2025-11-20 23:43:39.208 00:00:10.359 TCP 23.104.0.1:40896 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:40:01.203 00:05:04.295 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 23:40:01.200 00:05:04.300 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 23:44:08.789 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59962 10 6452 1 2025-11-20 23:44:39.602 00:00:10.363 TCP 23.104.0.1:57378 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:45:09.013 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59610 10 6452 1 2025-11-20 23:45:32.056 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 23:45:32.151 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 23:45:40.003 00:00:10.365 TCP 23.104.0.1:42592 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:46:09.225 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46074 10 6452 1 2025-11-20 23:46:40.405 00:00:10.365 TCP 23.104.0.1:41508 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:47:09.444 00:00:10.260 TCP 1.101.0.1:3000 -> 22.102.0.1:37060 10 6452 1 2025-11-20 23:47:40.809 00:00:10.363 TCP 23.104.0.1:39132 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:48:09.739 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58498 10 6452 1 2025-11-20 23:48:41.215 00:00:10.364 TCP 23.104.0.1:58992 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:49:09.952 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36874 10 6452 1 2025-11-20 23:49:41.617 00:00:10.370 TCP 23.104.0.1:46750 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:46:01.206 00:05:04.295 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 23:46:01.210 00:05:04.290 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 23:50:10.181 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39540 10 6452 1 2025-11-20 23:50:32.308 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 23:50:32.249 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 23:50:42.026 00:00:11.116 TCP 23.104.0.1:53916 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:51:10.395 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48766 10 6452 1 2025-11-20 23:51:43.181 00:00:10.362 TCP 23.104.0.1:46340 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:52:10.609 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44334 10 6452 1 2025-11-20 23:52:43.580 00:00:10.323 TCP 23.104.0.1:33132 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:53:10.827 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45388 10 6452 1 2025-11-20 23:53:43.940 00:00:10.370 TCP 23.104.0.1:52722 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:54:11.003 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44412 10 6452 1 2025-11-20 23:54:44.350 00:00:10.361 TCP 23.104.0.1:58210 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:55:11.223 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53540 10 6452 1 2025-11-20 23:55:32.248 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 23:55:32.373 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 23:55:44.754 00:00:10.381 TCP 23.104.0.1:49756 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:52:01.214 00:05:04.287 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 23:52:01.211 00:05:04.293 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 23:56:11.430 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53370 10 6452 1 2025-11-20 23:56:45.174 00:00:10.328 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:57:11.657 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55382 10 6452 1 2025-11-20 23:57:45.540 00:00:10.366 TCP 23.104.0.1:45056 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:58:11.886 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59862 10 6452 1 Summary: total flows: 163, total bytes: 496945, total packets: 1563, avg bps: 1097, avg pps: 0, avg bpp: 317 Time window: 2025-11-20 22:58:01 - 2025-11-20 23:58:22 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0036s User: 0.0018s Wall: 0.0020s flows/second: 80375.2 Runtime: 0.0020s