Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 20:55:05.491 00:05:04.727 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 20:55:05.489 00:05:04.732 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 20:59:14.111 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:39794 10 6452 1 2025-11-29 20:59:22.726 00:00:10.369 TCP 23.104.0.1:53444 -> 1.101.0.1:3000 11 1507 1 2025-11-29 20:59:48.936 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 20:59:48.886 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 21:00:14.278 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41602 10 6452 1 2025-11-29 21:00:23.134 00:00:10.367 TCP 23.104.0.1:53136 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:01:14.489 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:57174 10 6452 1 2025-11-29 21:01:23.538 00:00:10.364 TCP 23.104.0.1:33668 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:02:14.654 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:51264 10 6452 1 2025-11-29 21:02:23.939 00:00:10.376 TCP 23.104.0.1:47990 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:03:14.916 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38024 10 6452 1 2025-11-29 21:03:24.358 00:00:10.360 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:04:15.128 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51800 10 6452 1 2025-11-29 21:04:24.754 00:00:10.331 TCP 23.104.0.1:40546 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:04:48.714 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 21:04:48.685 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 21:01:05.492 00:05:04.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 21:01:05.496 00:05:04.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 21:05:15.345 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52018 10 6452 1 2025-11-29 21:05:25.126 00:00:10.369 TCP 23.104.0.1:34878 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:06:15.560 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35678 10 6452 1 2025-11-29 21:06:25.535 00:00:10.322 TCP 23.104.0.1:48930 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:07:15.745 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49004 10 6452 1 2025-11-29 21:07:25.897 00:00:10.325 TCP 23.104.0.1:58936 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:08:15.960 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38978 10 6452 1 2025-11-29 21:08:26.263 00:00:10.366 TCP 23.104.0.1:56776 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:09:16.138 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56740 10 6452 1 2025-11-29 21:09:26.669 00:00:10.360 TCP 23.104.0.1:45956 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:09:48.976 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 21:09:48.975 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 21:10:16.312 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39128 10 6452 1 2025-11-29 21:10:27.090 00:00:10.371 TCP 23.104.0.1:34436 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:07:05.497 00:05:04.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 21:07:05.495 00:05:04.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 21:11:16.528 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53312 10 6452 1 2025-11-29 21:11:27.503 00:00:10.369 TCP 23.104.0.1:51752 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:12:16.739 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50122 10 6452 1 2025-11-29 21:12:27.913 00:00:10.364 TCP 23.104.0.1:47978 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:13:16.952 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:48778 10 6452 1 2025-11-29 21:13:28.320 00:00:10.369 TCP 23.104.0.1:57990 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:14:17.137 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41942 10 6452 1 2025-11-29 21:14:28.730 00:00:10.369 TCP 23.104.0.1:44616 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:14:48.932 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 21:14:49.013 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 21:15:17.350 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46296 10 6452 1 2025-11-29 21:15:29.139 00:00:10.364 TCP 23.104.0.1:55946 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:16:17.567 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41072 10 6452 1 2025-11-29 21:16:29.539 00:00:16.088 TCP 23.104.0.1:41912 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:13:05.498 00:05:04.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 21:13:05.495 00:05:04.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 21:17:17.740 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38872 10 6452 1 2025-11-29 21:17:35.678 00:00:10.380 TCP 23.104.0.1:38880 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:18:17.952 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44576 10 6452 1 2025-11-29 21:18:36.106 00:00:10.363 TCP 23.104.0.1:37912 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:19:18.185 00:00:10.472 TCP 1.101.0.1:3000 -> 22.102.0.1:37946 10 6452 1 2025-11-29 21:19:36.509 00:00:10.332 TCP 23.104.0.1:37396 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:19:48.982 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 21:19:49.185 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 21:20:18.696 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45304 10 6452 1 2025-11-29 21:20:36.885 00:00:10.381 TCP 23.104.0.1:43714 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:21:18.912 00:00:10.580 TCP 1.101.0.1:3000 -> 22.102.0.1:36882 11 6504 1 2025-11-29 21:21:37.306 00:00:10.364 TCP 23.104.0.1:34142 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:22:19.536 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48774 10 6452 1 2025-11-29 21:22:37.710 00:00:10.386 TCP 23.104.0.1:52082 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:19:05.497 00:05:04.740 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 21:19:05.499 00:05:04.735 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 21:23:19.747 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45374 10 6452 1 2025-11-29 21:23:38.136 00:00:10.364 TCP 23.104.0.1:60782 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:24:19.958 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44676 12 6556 1 2025-11-29 21:24:49.413 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 21:24:49.475 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 21:24:38.542 00:00:10.359 TCP 23.104.0.1:33306 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:25:20.191 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58868 10 6452 1 2025-11-29 21:25:38.939 00:00:10.342 TCP 23.104.0.1:52316 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:26:20.415 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51954 10 6452 1 2025-11-29 21:26:39.317 00:00:10.369 TCP 23.104.0.1:60448 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:27:20.637 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51170 10 6452 1 2025-11-29 21:27:39.722 00:00:10.368 TCP 23.104.0.1:60904 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:28:20.860 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54720 10 6452 1 2025-11-29 21:28:40.131 00:00:10.369 TCP 23.104.0.1:57196 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:25:05.497 00:05:04.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 21:25:05.501 00:05:04.735 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 21:29:21.086 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42318 10 6452 1 2025-11-29 21:29:40.536 00:00:10.365 TCP 23.104.0.1:56080 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:29:49.604 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 21:29:49.427 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 21:30:21.301 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40710 10 6452 1 2025-11-29 21:30:40.940 00:00:10.335 TCP 23.104.0.1:35670 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:31:21.514 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60124 10 6452 1 2025-11-29 21:31:41.312 00:00:10.358 TCP 23.104.0.1:43162 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:32:21.724 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45810 10 6452 1 2025-11-29 21:32:41.710 00:00:10.373 TCP 23.104.0.1:52112 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:33:21.932 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:35226 10 6452 1 2025-11-29 21:33:42.114 00:00:10.366 TCP 23.104.0.1:53774 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:34:22.168 00:00:10.619 TCP 1.101.0.1:3000 -> 22.102.0.1:35526 10 6452 1 2025-11-29 21:34:50.908 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 21:34:50.534 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 21:34:42.516 00:00:10.371 TCP 23.104.0.1:37612 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:31:05.501 00:05:04.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 21:31:05.498 00:05:04.742 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 21:35:22.829 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44122 10 6452 1 2025-11-29 21:35:42.926 00:00:10.349 TCP 23.104.0.1:50756 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:36:23.057 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36814 10 6452 1 2025-11-29 21:36:43.312 00:00:10.364 TCP 23.104.0.1:56592 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:37:23.268 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41234 10 6452 1 2025-11-29 21:37:43.718 00:00:10.383 TCP 23.104.0.1:49754 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:38:23.479 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35966 10 6452 1 2025-11-29 21:38:44.142 00:00:10.373 TCP 23.104.0.1:56576 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:39:23.650 00:00:10.634 TCP 1.101.0.1:3000 -> 22.102.0.1:52124 10 6452 1 2025-11-29 21:39:49.795 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 21:39:49.454 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 21:39:44.546 00:00:10.367 TCP 23.104.0.1:35330 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:40:24.327 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60190 10 6452 1 2025-11-29 21:40:44.950 00:00:10.365 TCP 23.104.0.1:54252 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:37:05.503 00:05:04.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 21:37:05.505 00:05:04.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 21:41:24.537 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32814 10 6452 1 2025-11-29 21:41:45.350 00:00:10.376 TCP 23.104.0.1:59524 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:42:24.750 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38546 12 6556 1 2025-11-29 21:42:45.762 00:00:10.333 TCP 23.104.0.1:53588 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:43:24.962 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:58418 10 6452 1 2025-11-29 21:43:46.130 00:00:10.567 TCP 23.104.0.1:38568 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:44:25.147 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33590 10 6452 1 2025-11-29 21:44:49.740 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 21:44:49.592 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 21:44:46.739 00:00:10.364 TCP 23.104.0.1:50384 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:45:25.359 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58882 10 6452 1 2025-11-29 21:45:47.140 00:00:10.366 TCP 23.104.0.1:50926 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:46:25.577 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51904 10 6452 1 2025-11-29 21:46:47.549 00:00:10.374 TCP 23.104.0.1:57352 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:43:05.505 00:05:04.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 21:43:05.503 00:05:04.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 21:47:25.803 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38058 10 6452 1 2025-11-29 21:47:47.967 00:00:10.374 TCP 23.104.0.1:38168 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:48:26.026 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41616 10 6452 1 2025-11-29 21:48:48.381 00:00:10.990 TCP 23.104.0.1:47182 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:49:26.251 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:47932 10 6452 1 2025-11-29 21:49:49.940 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 21:49:49.896 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 21:49:49.407 00:00:10.362 TCP 23.104.0.1:42610 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:50:26.531 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47986 10 6452 1 2025-11-29 21:50:49.807 00:00:10.366 TCP 23.104.0.1:47996 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:51:26.705 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47310 10 6452 1 2025-11-29 21:51:50.209 00:00:10.325 TCP 23.104.0.1:37570 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:52:26.926 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35684 10 6452 1 2025-11-29 21:52:50.570 00:00:10.363 TCP 23.104.0.1:44542 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:49:05.507 00:05:04.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 21:49:05.505 00:05:04.743 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 21:53:27.133 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46158 10 6452 1 2025-11-29 21:53:50.971 00:00:10.376 TCP 23.104.0.1:39090 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:54:27.351 00:00:10.241 TCP 1.101.0.1:3000 -> 22.102.0.1:56028 11 6504 1 2025-11-29 21:54:49.775 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 21:54:49.805 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 21:54:51.388 00:00:10.368 TCP 23.104.0.1:39118 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:55:27.634 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48680 10 6452 1 2025-11-29 21:55:51.792 00:00:10.369 TCP 23.104.0.1:37088 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:56:27.840 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35450 10 6452 1 2025-11-29 21:56:52.194 00:00:10.367 TCP 23.104.0.1:47402 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:57:28.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55664 10 6452 1 2025-11-29 21:57:52.595 00:00:10.806 TCP 23.104.0.1:36690 -> 1.101.0.1:3000 11 1507 1 2025-11-29 21:58:28.296 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51388 10 6452 1 Summary: total flows: 163, total bytes: 497153, total packets: 1567, avg bps: 1043, avg pps: 0, avg bpp: 317 Time window: 2025-11-29 20:55:05 - 2025-11-29 21:58:38 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0041s User: 0.0010s Wall: 0.0021s flows/second: 77505.0 Runtime: 0.0021s