Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 19:59:01.115 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54912 12 6556 1 2025-11-29 19:55:05.473 00:05:04.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 19:55:05.475 00:05:04.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 19:58:57.647 00:00:10.318 TCP 23.104.0.1:36976 -> 1.101.0.1:3000 11 1507 1 2025-11-29 19:59:47.957 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 19:59:47.864 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 20:00:01.323 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41276 10 6452 1 2025-11-29 19:59:58.007 00:00:10.323 TCP 23.104.0.1:50298 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:00:58.370 00:00:10.318 TCP 23.104.0.1:34548 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:01:01.530 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50072 10 6452 1 2025-11-29 20:01:58.728 00:00:10.366 TCP 23.104.0.1:42748 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:02:01.743 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56692 10 6452 1 2025-11-29 20:02:59.133 00:00:10.357 TCP 23.104.0.1:57350 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:03:01.959 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:34204 10 6452 1 2025-11-29 20:03:59.528 00:00:10.323 TCP 23.104.0.1:52294 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:04:02.188 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33862 10 6452 1 2025-11-29 20:04:47.725 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 20:04:47.677 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 20:01:05.478 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 20:04:59.886 00:00:10.437 TCP 23.104.0.1:41870 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:01:05.475 00:05:04.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 20:05:02.409 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51440 10 6452 1 2025-11-29 20:06:00.359 00:00:10.356 TCP 23.104.0.1:56378 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:06:02.622 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57602 10 6452 1 2025-11-29 20:07:00.759 00:00:10.453 TCP 23.104.0.1:58634 -> 1.101.0.1:3000 15 1926 1 2025-11-29 20:07:02.831 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:34676 12 10375 1 2025-11-29 20:08:01.250 00:00:10.371 TCP 23.104.0.1:60004 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:08:03.089 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37326 10 6452 1 2025-11-29 20:09:03.302 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40482 10 6452 1 2025-11-29 20:09:01.690 00:00:10.363 TCP 23.104.0.1:56116 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:09:47.814 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 20:09:47.734 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 20:10:02.102 00:00:10.375 TCP 23.104.0.1:60696 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:10:03.517 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43468 10 6452 1 2025-11-29 20:07:05.478 00:05:04.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 20:11:03.727 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50560 10 6452 1 2025-11-29 20:07:05.479 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 20:11:02.522 00:00:10.331 TCP 23.104.0.1:57662 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:12:03.961 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:47174 12 10375 1 2025-11-29 20:12:02.893 00:00:10.441 TCP 23.104.0.1:60628 -> 1.101.0.1:3000 15 1926 1 2025-11-29 20:13:04.208 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34930 10 6452 1 2025-11-29 20:13:03.371 00:00:10.331 TCP 23.104.0.1:35706 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:14:04.426 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42376 10 6452 1 2025-11-29 20:14:03.750 00:00:10.391 TCP 23.104.0.1:38924 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:14:48.756 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 20:14:48.740 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 20:15:04.172 00:00:10.368 TCP 23.104.0.1:42506 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:15:04.640 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49568 10 6452 1 2025-11-29 20:16:04.579 00:00:10.370 TCP 23.104.0.1:51404 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:16:04.853 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58750 10 6452 1 2025-11-29 20:13:05.480 00:05:04.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 20:13:05.478 00:05:04.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 20:17:05.083 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49550 10 6452 1 2025-11-29 20:17:04.988 00:00:10.330 TCP 23.104.0.1:34864 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:18:05.357 00:00:10.360 TCP 23.104.0.1:60540 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:18:05.258 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45274 10 6452 1 2025-11-29 20:19:05.427 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57262 10 6452 1 2025-11-29 20:19:05.758 00:00:10.375 TCP 23.104.0.1:57476 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:19:48.229 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 20:19:48.176 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 20:20:05.647 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52596 10 6452 1 2025-11-29 20:20:06.173 00:00:10.367 TCP 23.104.0.1:42570 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:21:06.579 00:00:10.361 TCP 23.104.0.1:46534 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:21:05.874 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45206 10 6452 1 2025-11-29 20:22:06.105 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57106 10 6452 1 2025-11-29 20:22:06.984 00:00:10.333 TCP 23.104.0.1:41126 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:19:05.478 00:05:04.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 20:19:05.480 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 20:23:06.320 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46096 10 6452 1 2025-11-29 20:23:07.354 00:00:10.370 TCP 23.104.0.1:60824 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:24:06.539 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48238 10 6452 1 2025-11-29 20:24:07.763 00:00:10.330 TCP 23.104.0.1:54660 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:24:47.941 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 20:24:48.029 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 20:25:06.743 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59364 10 6452 1 2025-11-29 20:25:08.134 00:00:10.366 TCP 23.104.0.1:58896 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:26:06.955 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:53570 10 6452 1 2025-11-29 20:26:08.539 00:00:10.323 TCP 23.104.0.1:37272 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:27:08.900 00:00:10.368 TCP 23.104.0.1:37600 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:27:07.154 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41308 10 6452 1 2025-11-29 20:28:09.309 00:00:10.362 TCP 23.104.0.1:58308 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:28:07.375 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35024 10 6452 1 2025-11-29 20:25:05.482 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 20:25:05.480 00:05:04.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 20:29:09.712 00:00:10.383 TCP 23.104.0.1:33080 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:29:07.592 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33542 10 6452 1 2025-11-29 20:29:48.272 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 20:29:48.219 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 20:30:10.133 00:00:10.369 TCP 23.104.0.1:50740 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:30:07.814 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45122 10 6452 1 2025-11-29 20:31:07.989 00:00:10.382 TCP 1.101.0.1:3000 -> 22.102.0.1:57768 10 6452 1 2025-11-29 20:31:10.538 00:00:10.324 TCP 23.104.0.1:36294 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:32:08.403 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:47274 12 10375 1 2025-11-29 20:32:10.902 00:00:10.438 TCP 23.104.0.1:41468 -> 1.101.0.1:3000 15 1926 1 2025-11-29 20:33:08.650 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:34442 10 6452 1 2025-11-29 20:33:11.381 00:00:10.360 TCP 23.104.0.1:50796 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:34:08.889 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40034 10 6452 1 2025-11-29 20:34:11.780 00:00:10.364 TCP 23.104.0.1:36248 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:34:48.256 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 20:34:48.185 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 20:31:05.485 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 20:31:05.482 00:05:04.733 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 20:35:09.111 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59406 10 6452 1 2025-11-29 20:35:12.190 00:00:10.368 TCP 23.104.0.1:56270 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:36:09.329 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49774 10 6452 1 2025-11-29 20:36:12.596 00:00:10.370 TCP 23.104.0.1:37274 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:37:09.501 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33344 10 6452 1 2025-11-29 20:37:13.000 00:00:10.384 TCP 23.104.0.1:35878 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:38:09.727 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6452 1 2025-11-29 20:38:13.425 00:00:10.331 TCP 23.104.0.1:44998 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:39:09.951 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:50432 10 6452 1 2025-11-29 20:39:13.797 00:00:10.347 TCP 23.104.0.1:38446 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:39:48.560 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 20:39:48.388 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 20:40:10.195 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41452 10 6452 1 2025-11-29 20:40:14.182 00:00:10.327 TCP 23.104.0.1:38000 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:37:05.484 00:05:04.733 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 20:37:05.488 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 20:41:10.363 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59346 10 6452 1 2025-11-29 20:41:14.544 00:00:10.369 TCP 23.104.0.1:54576 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:42:10.586 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59272 10 6452 1 2025-11-29 20:42:14.950 00:00:10.326 TCP 23.104.0.1:42884 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:43:10.802 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40716 10 6452 1 2025-11-29 20:43:15.310 00:00:10.364 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:44:10.980 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:47830 10 6452 1 2025-11-29 20:44:15.713 00:00:10.386 TCP 23.104.0.1:36030 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:44:48.865 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 20:44:48.807 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 20:45:11.212 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49258 10 6452 1 2025-11-29 20:45:16.138 00:00:10.321 TCP 23.104.0.1:52652 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:46:11.417 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38890 10 6452 1 2025-11-29 20:46:16.499 00:00:10.363 TCP 23.104.0.1:57404 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:43:05.486 00:05:04.733 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 20:43:05.490 00:05:04.728 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 20:47:11.588 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52874 10 6452 1 2025-11-29 20:47:16.909 00:00:10.367 TCP 23.104.0.1:60386 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:48:11.808 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33406 10 6452 1 2025-11-29 20:48:17.314 00:00:10.327 TCP 23.104.0.1:46076 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:49:12.036 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55408 10 6452 1 2025-11-29 20:49:17.678 00:00:10.368 TCP 23.104.0.1:54590 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:49:48.526 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 20:49:48.313 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 20:50:12.251 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36708 10 6452 1 2025-11-29 20:50:18.108 00:00:10.365 TCP 23.104.0.1:56438 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:51:12.464 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56118 10 6452 1 2025-11-29 20:51:18.506 00:00:10.395 TCP 23.104.0.1:42022 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:52:12.683 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52720 10 6452 1 2025-11-29 20:52:18.940 00:00:10.375 TCP 23.104.0.1:41534 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:49:05.486 00:05:04.733 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 20:49:05.490 00:05:04.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 20:53:12.899 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56222 10 6452 1 2025-11-29 20:53:19.352 00:00:10.363 TCP 23.104.0.1:55460 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:54:13.113 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36370 10 6452 1 2025-11-29 20:54:19.752 00:00:10.396 TCP 23.104.0.1:41126 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:54:48.608 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 20:54:48.865 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 20:55:13.288 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52442 10 6452 1 2025-11-29 20:55:20.185 00:00:11.349 TCP 23.104.0.1:51080 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:56:13.498 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59828 10 6452 1 2025-11-29 20:56:21.573 00:00:10.325 TCP 23.104.0.1:34518 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:57:13.675 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43390 10 6452 1 2025-11-29 20:57:21.937 00:00:10.339 TCP 23.104.0.1:42136 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:58:13.887 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44560 10 6452 1 2025-11-29 20:58:22.314 00:00:10.372 TCP 23.104.0.1:44064 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511478, total packets: 1592, avg bps: 1074, avg pps: 0, avg bpp: 321 Time window: 2025-11-29 19:55:05 - 2025-11-29 20:58:32 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0041s User: 0.0021s Wall: 0.0023s flows/second: 71832.3 Runtime: 0.0023s