Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 22:58:53.861 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50222 10 6452 1 2025-11-26 22:59:05.236 00:00:10.364 TCP 23.104.0.1:33544 -> 1.101.0.1:3000 11 1507 1 2025-11-26 22:59:54.083 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41604 10 6452 1 2025-11-26 23:00:05.639 00:00:10.376 TCP 23.104.0.1:49692 -> 1.101.0.1:3000 11 1507 1 2025-11-26 22:56:08.687 00:05:55.551 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 23:00:54.301 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39362 10 6452 1 2025-11-26 22:56:08.689 00:05:55.546 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 23:01:06.060 00:00:10.326 TCP 23.104.0.1:56822 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:01:54.520 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41258 10 6452 1 2025-11-26 23:02:06.424 00:00:10.367 TCP 23.104.0.1:35896 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:02:54.732 00:00:10.587 TCP 1.101.0.1:3000 -> 22.102.0.1:55420 10 6452 1 2025-11-26 23:03:06.826 00:00:10.364 TCP 23.104.0.1:48652 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:03:24.401 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 23:03:24.678 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 23:03:55.358 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60820 10 6452 1 2025-11-26 23:04:07.225 00:00:10.362 TCP 23.104.0.1:39040 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:04:55.572 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39548 10 6452 1 2025-11-26 23:05:07.626 00:00:10.364 TCP 23.104.0.1:55648 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:05:55.786 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58078 10 6452 1 2025-11-26 23:06:08.031 00:00:10.371 TCP 23.104.0.1:60764 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:02:08.689 00:05:55.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 23:06:56.000 00:00:10.513 TCP 1.101.0.1:3000 -> 22.102.0.1:48506 10 6452 1 2025-11-26 23:02:08.691 00:05:55.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 23:07:08.440 00:00:10.360 TCP 23.104.0.1:36196 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:07:56.555 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51134 10 6452 1 2025-11-26 23:08:08.840 00:00:10.406 TCP 23.104.0.1:43368 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:08:24.833 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 23:08:24.756 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 23:08:56.770 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34316 10 6452 1 2025-11-26 23:09:09.281 00:00:10.364 TCP 23.104.0.1:34876 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:09:56.981 00:00:10.636 TCP 1.101.0.1:3000 -> 22.102.0.1:36596 10 6452 1 2025-11-26 23:10:09.684 00:00:10.366 TCP 23.104.0.1:38610 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:10:57.653 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53368 10 6452 1 2025-11-26 23:11:10.098 00:00:10.363 TCP 23.104.0.1:34950 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:11:57.869 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:49756 10 6452 1 2025-11-26 23:12:10.500 00:00:10.367 TCP 23.104.0.1:41332 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:08:08.692 00:05:55.548 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 23:08:08.689 00:05:55.552 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 23:12:58.138 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59460 10 6452 1 2025-11-26 23:13:10.904 00:00:10.374 TCP 23.104.0.1:50048 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:13:24.989 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 23:13:24.794 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 23:13:58.366 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51852 10 6452 1 2025-11-26 23:14:11.313 00:00:10.363 TCP 23.104.0.1:55732 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:14:58.579 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50632 10 6452 1 2025-11-26 23:15:11.721 00:00:10.369 TCP 23.104.0.1:33704 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:15:58.801 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45444 10 6452 1 2025-11-26 23:16:12.131 00:00:10.332 TCP 23.104.0.1:47576 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:16:59.036 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52222 10 6452 1 2025-11-26 23:17:12.526 00:00:10.367 TCP 23.104.0.1:36634 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:17:59.244 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36798 10 6452 1 2025-11-26 23:18:24.759 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 23:18:12.929 00:00:10.383 TCP 23.104.0.1:40220 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:18:24.836 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 23:14:08.697 00:05:55.548 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 23:14:08.696 00:05:55.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 23:18:59.467 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60480 10 6452 1 2025-11-26 23:19:13.345 00:00:10.325 TCP 23.104.0.1:47952 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:19:59.634 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37790 10 6452 1 2025-11-26 23:20:13.702 00:00:10.373 TCP 23.104.0.1:51310 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:20:59.846 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34742 10 6452 1 2025-11-26 23:21:14.115 00:00:10.365 TCP 23.104.0.1:53686 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:22:00.029 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35216 10 6452 1 2025-11-26 23:22:14.513 00:00:10.367 TCP 23.104.0.1:33048 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:23:00.245 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37670 10 6452 1 2025-11-26 23:23:25.062 00:00:00.042 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 23:23:25.066 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 23:23:14.919 00:00:10.386 TCP 23.104.0.1:40816 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:24:00.465 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60442 10 6452 1 2025-11-26 23:24:15.343 00:00:10.373 TCP 23.104.0.1:54482 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:20:08.697 00:05:55.549 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 23:20:08.695 00:05:55.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 23:25:00.676 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:50588 10 6452 1 2025-11-26 23:25:15.752 00:00:10.395 TCP 23.104.0.1:36626 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:26:00.912 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:48026 10 6452 1 2025-11-26 23:26:16.187 00:00:10.366 TCP 23.104.0.1:39524 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:27:01.097 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:55314 10 6452 1 2025-11-26 23:27:16.592 00:00:10.359 TCP 23.104.0.1:35550 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:28:01.289 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42588 10 6452 1 2025-11-26 23:28:25.079 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 23:28:25.120 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 23:28:16.994 00:00:10.408 TCP 23.104.0.1:38082 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:29:01.502 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40164 10 6452 1 2025-11-26 23:29:17.447 00:00:10.324 TCP 23.104.0.1:39396 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:30:01.714 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:41576 10 6452 1 2025-11-26 23:30:17.814 00:00:10.377 TCP 23.104.0.1:34834 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:26:08.700 00:05:55.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 23:26:08.696 00:05:55.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 23:31:01.880 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:50308 10 6452 1 2025-11-26 23:31:18.227 00:00:10.326 TCP 23.104.0.1:45136 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:32:02.102 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42720 10 6452 1 2025-11-26 23:32:18.584 00:00:10.365 TCP 23.104.0.1:34470 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:33:02.307 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38756 10 6452 1 2025-11-26 23:33:25.146 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 23:33:25.135 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 23:33:18.993 00:00:10.368 TCP 23.104.0.1:39334 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:34:02.525 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56730 10 6452 1 2025-11-26 23:34:19.398 00:00:10.366 TCP 23.104.0.1:42818 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:35:02.702 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37254 10 6452 1 2025-11-26 23:35:19.802 00:00:10.368 TCP 23.104.0.1:43380 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:36:02.916 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53208 10 6452 1 2025-11-26 23:36:20.212 00:00:10.366 TCP 23.104.0.1:52808 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:32:08.701 00:05:55.549 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 23:32:08.697 00:05:55.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 23:37:03.129 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39060 10 6452 1 2025-11-26 23:37:20.621 00:00:10.327 TCP 23.104.0.1:41040 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:38:03.340 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42496 10 6452 1 2025-11-26 23:38:25.251 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 23:38:24.966 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 23:38:20.982 00:00:10.374 TCP 23.104.0.1:52664 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:39:03.554 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59494 10 6452 1 2025-11-26 23:39:21.408 00:00:10.366 TCP 23.104.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:40:03.765 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46566 10 6452 1 2025-11-26 23:40:21.813 00:00:10.368 TCP 23.104.0.1:38484 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:41:03.972 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:51292 10 6452 1 2025-11-26 23:41:22.223 00:00:10.362 TCP 23.104.0.1:37026 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:42:04.166 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32898 10 6452 1 2025-11-26 23:42:22.628 00:00:10.382 TCP 23.104.0.1:43446 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:38:08.698 00:05:55.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 23:38:08.701 00:05:55.550 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 23:43:04.381 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52604 10 6452 1 2025-11-26 23:43:25.476 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 23:43:25.662 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 23:43:23.054 00:00:10.364 TCP 23.104.0.1:50832 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:44:04.591 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48846 10 6452 1 2025-11-26 23:44:23.459 00:00:10.536 TCP 23.104.0.1:49886 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:45:04.800 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37592 10 6452 1 2025-11-26 23:45:24.056 00:00:10.359 TCP 23.104.0.1:51070 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:46:04.973 00:00:10.665 TCP 1.101.0.1:3000 -> 22.102.0.1:37890 10 6452 1 2025-11-26 23:46:24.458 00:00:10.639 TCP 23.104.0.1:55330 -> 1.101.0.1:3000 15 1926 1 2025-11-26 23:47:05.679 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:53918 12 10369 1 2025-11-26 23:47:25.138 00:00:10.959 TCP 23.104.0.1:44218 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:48:05.923 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56952 10 6452 1 2025-11-26 23:48:25.451 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 23:48:25.611 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 23:48:26.133 00:00:10.366 TCP 23.104.0.1:42202 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:44:08.702 00:05:55.553 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 23:44:08.706 00:05:55.548 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 23:49:06.137 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58022 10 6452 1 2025-11-26 23:49:26.539 00:00:10.332 TCP 23.104.0.1:36806 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:50:06.361 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47022 10 6452 1 2025-11-26 23:50:26.906 00:00:10.369 TCP 23.104.0.1:33738 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:51:06.525 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:38560 10 6452 1 2025-11-26 23:51:27.314 00:00:10.327 TCP 23.104.0.1:59148 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:52:06.719 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55280 10 6452 1 2025-11-26 23:52:27.674 00:00:10.333 TCP 23.104.0.1:38494 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:53:06.935 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:60656 10 6452 1 2025-11-26 23:53:25.547 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 23:53:25.600 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 23:53:28.055 00:00:10.325 TCP 23.104.0.1:48906 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:54:07.170 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59774 10 6452 1 2025-11-26 23:54:28.423 00:00:10.368 TCP 23.104.0.1:52040 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:50:08.707 00:05:55.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 23:50:08.706 00:05:55.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 23:55:07.394 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49588 10 6452 1 2025-11-26 23:55:28.828 00:00:10.381 TCP 23.104.0.1:59198 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:56:07.607 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35712 10 6452 1 2025-11-26 23:56:29.249 00:00:10.366 TCP 23.104.0.1:43498 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:57:07.817 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36748 10 6452 1 2025-11-26 23:57:29.656 00:00:10.364 TCP 23.104.0.1:46326 -> 1.101.0.1:3000 11 1507 1 2025-11-26 23:58:08.044 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47610 10 6452 1 2025-11-26 23:58:25.747 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 23:58:25.654 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 23:58:30.078 00:00:10.382 TCP 23.104.0.1:50182 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502684, total packets: 1578, avg bps: 1071, avg pps: 0, avg bpp: 318 Time window: 2025-11-26 22:56:08 - 2025-11-26 23:58:40 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0052s User: 0.0009s Wall: 0.0017s flows/second: 95789.7 Runtime: 0.0017s