Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 10:58:46.981 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56848 10 6452 1 2025-11-29 10:58:55.582 00:00:10.370 TCP 23.104.0.1:50518 -> 1.101.0.1:3000 11 1507 1 2025-11-29 10:59:36.822 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 10:59:36.790 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 10:59:47.204 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57226 10 6452 1 2025-11-29 10:55:09.969 00:05:55.344 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 10:59:55.993 00:00:10.365 TCP 23.104.0.1:57190 -> 1.101.0.1:3000 11 1507 1 2025-11-29 10:55:09.971 00:05:55.340 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 11:00:47.419 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46900 10 6452 1 2025-11-29 11:00:56.408 00:00:10.367 TCP 23.104.0.1:32920 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:01:47.639 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45712 10 6452 1 2025-11-29 11:01:56.817 00:00:10.367 TCP 23.104.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:02:47.853 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46296 10 6452 1 2025-11-29 11:02:57.222 00:00:10.365 TCP 23.104.0.1:39682 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:03:48.078 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40832 10 6452 1 2025-11-29 11:03:57.623 00:00:10.367 TCP 23.104.0.1:46276 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:04:36.878 00:00:00.059 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 11:04:37.151 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 11:04:48.289 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:50568 10 6452 1 2025-11-29 11:04:58.026 00:00:10.362 TCP 23.104.0.1:38774 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:05:48.456 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60558 10 6452 1 2025-11-29 11:01:09.972 00:05:55.341 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 11:01:09.969 00:05:55.346 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 11:05:58.424 00:00:11.193 TCP 23.104.0.1:34488 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:06:48.668 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49816 10 6452 1 2025-11-29 11:06:59.653 00:00:10.324 TCP 23.104.0.1:58774 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:07:48.881 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52656 10 6452 1 2025-11-29 11:08:00.015 00:00:10.367 TCP 23.104.0.1:53122 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:08:49.078 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52630 10 6452 1 2025-11-29 11:09:00.421 00:00:10.364 TCP 23.104.0.1:51954 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:09:36.756 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 11:09:36.977 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 11:09:49.292 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34412 10 6452 1 2025-11-29 11:10:00.822 00:00:10.324 TCP 23.104.0.1:35288 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:10:49.462 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45970 10 6452 1 2025-11-29 11:11:01.193 00:00:10.367 TCP 23.104.0.1:43788 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:11:49.634 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49744 10 6452 1 2025-11-29 11:07:09.979 00:05:55.337 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 11:07:09.977 00:05:55.343 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 11:12:01.599 00:00:10.364 TCP 23.104.0.1:40958 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:12:49.851 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42794 10 6452 1 2025-11-29 11:13:02.004 00:00:10.328 TCP 23.104.0.1:57772 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:13:50.085 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:39936 10 6452 1 2025-11-29 11:14:02.371 00:00:10.368 TCP 23.104.0.1:47112 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:14:36.899 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 11:14:37.157 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 11:14:50.289 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50402 10 6452 1 2025-11-29 11:15:02.779 00:00:10.324 TCP 23.104.0.1:34836 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:15:50.506 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47106 10 6452 1 2025-11-29 11:16:03.142 00:00:10.334 TCP 23.104.0.1:51870 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:16:50.680 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44036 10 6452 1 2025-11-29 11:17:03.516 00:00:10.360 TCP 23.104.0.1:58938 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:17:50.857 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40730 10 6452 1 2025-11-29 11:13:09.977 00:05:55.346 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 11:13:09.980 00:05:55.341 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 11:18:03.917 00:00:10.334 TCP 23.104.0.1:46320 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:18:51.088 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:35160 10 6452 1 2025-11-29 11:19:04.287 00:00:10.366 TCP 23.104.0.1:44538 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:19:37.197 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 11:19:37.083 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 11:19:51.298 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37266 10 6452 1 2025-11-29 11:20:04.689 00:00:10.370 TCP 23.104.0.1:36220 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:20:51.507 00:00:10.277 TCP 1.101.0.1:3000 -> 22.102.0.1:60526 10 6452 1 2025-11-29 11:21:05.109 00:00:10.368 TCP 23.104.0.1:40672 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:21:51.824 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34520 10 6452 1 2025-11-29 11:22:05.512 00:00:10.376 TCP 23.104.0.1:39358 -> 1.101.0.1:3000 12 1559 1 2025-11-29 11:22:51.990 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57402 10 6452 1 2025-11-29 11:23:05.918 00:00:10.331 TCP 23.104.0.1:37304 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:23:52.213 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49210 10 6452 1 2025-11-29 11:19:09.981 00:05:55.341 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 11:19:09.978 00:05:55.346 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 11:24:06.287 00:00:10.372 TCP 23.104.0.1:60588 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:24:37.530 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 11:24:37.410 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 11:24:52.421 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52134 10 6452 1 2025-11-29 11:25:06.700 00:00:10.335 TCP 23.104.0.1:47804 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:25:52.630 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49972 12 6556 1 2025-11-29 11:26:07.108 00:00:10.365 TCP 23.104.0.1:51524 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:26:52.851 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43528 10 6452 1 2025-11-29 11:27:07.511 00:00:10.363 TCP 23.104.0.1:32834 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:27:53.088 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37504 10 6452 1 2025-11-29 11:28:07.920 00:00:10.349 TCP 23.104.0.1:35880 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:28:53.307 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48350 10 6452 1 2025-11-29 11:29:08.309 00:00:10.364 TCP 23.104.0.1:50524 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:29:37.504 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 11:29:37.272 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 11:25:09.980 00:05:55.347 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 11:25:09.983 00:05:55.342 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 11:29:53.519 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37948 10 6452 1 2025-11-29 11:30:08.711 00:00:10.378 TCP 23.104.0.1:48348 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:30:53.745 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:53980 10 6452 1 2025-11-29 11:31:09.113 00:00:10.365 TCP 23.104.0.1:34352 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:31:53.992 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6452 1 2025-11-29 11:32:09.511 00:00:10.374 TCP 23.104.0.1:39444 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:32:54.214 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60846 10 6452 1 2025-11-29 11:33:09.919 00:00:10.370 TCP 23.104.0.1:57588 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:33:54.429 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56020 10 6452 1 2025-11-29 11:34:10.325 00:00:10.378 TCP 23.104.0.1:34040 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:34:37.943 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 11:34:38.164 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 11:34:54.599 00:00:10.494 TCP 1.101.0.1:3000 -> 22.102.0.1:57328 10 6452 1 2025-11-29 11:35:10.741 00:00:10.368 TCP 23.104.0.1:38440 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:31:09.982 00:05:55.347 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 11:35:55.129 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35694 10 6452 1 2025-11-29 11:31:09.986 00:05:55.342 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 11:36:11.143 00:00:10.326 TCP 23.104.0.1:45970 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:36:55.337 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43240 10 6452 1 2025-11-29 11:37:11.503 00:00:10.368 TCP 23.104.0.1:32810 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:37:55.546 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42724 10 6452 1 2025-11-29 11:38:11.908 00:00:10.368 TCP 23.104.0.1:58792 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:38:55.764 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60948 10 6452 1 2025-11-29 11:39:12.309 00:00:10.374 TCP 23.104.0.1:43054 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:39:37.921 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 11:39:37.731 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 11:39:55.977 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:45860 10 6452 1 2025-11-29 11:40:12.717 00:00:10.369 TCP 23.104.0.1:41160 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:40:56.175 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58674 10 6452 1 2025-11-29 11:41:13.124 00:00:10.363 TCP 23.104.0.1:41244 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:37:09.984 00:05:55.348 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 11:41:56.400 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33324 10 6452 1 2025-11-29 11:37:09.987 00:05:55.342 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 11:42:13.523 00:00:10.363 TCP 23.104.0.1:40092 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:42:56.618 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35042 10 6452 1 2025-11-29 11:43:13.927 00:00:10.349 TCP 23.104.0.1:60958 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:43:56.837 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44146 12 6556 1 2025-11-29 11:44:14.314 00:00:10.370 TCP 23.104.0.1:41642 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:44:37.835 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 11:44:37.687 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 11:44:57.083 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59168 10 6452 1 2025-11-29 11:45:14.729 00:00:10.375 TCP 23.104.0.1:39150 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:45:57.311 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46816 10 6452 1 2025-11-29 11:46:15.153 00:00:10.365 TCP 23.104.0.1:56786 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:46:57.533 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51718 12 10375 1 2025-11-29 11:47:15.558 00:00:10.435 TCP 23.104.0.1:33718 -> 1.101.0.1:3000 15 1926 1 2025-11-29 11:43:09.985 00:05:55.347 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 11:43:09.989 00:05:55.342 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 11:47:57.774 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35980 10 6452 1 2025-11-29 11:48:16.032 00:00:10.368 TCP 23.104.0.1:54384 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:48:57.998 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:46010 10 6452 1 2025-11-29 11:49:16.440 00:00:10.322 TCP 23.104.0.1:51754 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:49:37.771 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 11:49:37.769 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 11:49:58.184 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55084 10 6452 1 2025-11-29 11:50:16.802 00:00:10.366 TCP 23.104.0.1:35268 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:50:58.396 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:59214 10 6452 1 2025-11-29 11:51:17.204 00:00:10.366 TCP 23.104.0.1:53186 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:51:58.576 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34446 10 6452 1 2025-11-29 11:52:17.613 00:00:10.364 TCP 23.104.0.1:59740 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:52:58.796 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54356 10 6452 1 2025-11-29 11:53:18.017 00:00:10.364 TCP 23.104.0.1:60510 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:49:09.987 00:05:55.347 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 11:49:09.988 00:05:55.342 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 11:53:59.030 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56132 10 6452 1 2025-11-29 11:54:18.421 00:00:10.366 TCP 23.104.0.1:53210 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:54:37.910 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 11:54:37.819 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 11:54:59.238 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48608 10 6452 1 2025-11-29 11:55:18.829 00:00:10.392 TCP 23.104.0.1:33310 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:55:59.472 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33192 10 6452 1 2025-11-29 11:56:19.259 00:00:10.322 TCP 23.104.0.1:43134 -> 1.101.0.1:3000 11 1507 1 2025-11-29 11:56:59.690 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:44942 12 10369 1 2025-11-29 11:57:19.619 00:00:10.444 TCP 23.104.0.1:33122 -> 1.101.0.1:3000 15 1926 1 2025-11-29 11:57:59.970 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41344 10 6452 1 2025-11-29 11:58:20.113 00:00:10.363 TCP 23.104.0.1:60176 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507286, total packets: 1589, avg bps: 1067, avg pps: 0, avg bpp: 319 Time window: 2025-11-29 10:55:09 - 2025-11-29 11:58:30 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0029s Wall: 0.0028s flows/second: 59034.1 Runtime: 0.0028s