Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-29 22:58:43.184 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44464 10 6452 1 2025-11-29 22:55:05.525 00:05:04.740 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 22:55:05.527 00:05:04.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 22:59:20.008 00:00:10.369 TCP 23.104.0.1:58814 -> 1.101.0.1:3000 11 1507 1 2025-11-29 22:59:51.176 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 22:59:50.872 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 22:59:43.406 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58270 10 6452 1 2025-11-29 23:00:20.413 00:00:10.370 TCP 23.104.0.1:35794 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:00:43.631 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36486 10 6452 1 2025-11-29 23:01:20.818 00:00:10.373 TCP 23.104.0.1:47916 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:01:43.848 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44462 10 6452 1 2025-11-29 23:02:21.222 00:00:10.369 TCP 23.104.0.1:45874 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:02:44.080 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58956 10 6452 1 2025-11-29 23:03:21.633 00:00:10.362 TCP 23.104.0.1:59936 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:03:44.298 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52394 10 6452 1 2025-11-29 23:04:22.034 00:00:10.360 TCP 23.104.0.1:35978 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:04:51.545 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 23:04:51.586 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 23:04:44.504 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38916 10 6452 1 2025-11-29 23:01:05.526 00:05:04.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 23:01:05.530 00:05:04.735 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 23:05:22.437 00:00:10.361 TCP 23.104.0.1:51014 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:05:44.715 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39240 10 6452 1 2025-11-29 23:06:22.837 00:00:10.393 TCP 23.104.0.1:39084 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:06:44.937 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:33140 10 6452 1 2025-11-29 23:07:23.264 00:00:10.368 TCP 23.104.0.1:55504 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:07:45.147 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38976 10 6452 1 2025-11-29 23:08:23.679 00:00:10.365 TCP 23.104.0.1:54334 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:08:45.361 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33088 10 6452 1 2025-11-29 23:09:24.110 00:00:10.409 TCP 23.104.0.1:40440 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:09:51.328 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 23:09:51.598 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 23:09:45.569 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49792 10 6452 1 2025-11-29 23:10:24.555 00:00:10.374 TCP 23.104.0.1:45968 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:10:45.789 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47816 10 6452 1 2025-11-29 23:07:05.530 00:05:04.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 23:07:05.527 00:05:04.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 23:11:24.960 00:00:10.382 TCP 23.104.0.1:44098 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:11:46.003 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33528 10 6452 1 2025-11-29 23:12:25.378 00:00:10.372 TCP 23.104.0.1:57450 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:12:46.214 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37636 10 6452 1 2025-11-29 23:13:25.788 00:00:10.369 TCP 23.104.0.1:57994 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:13:46.433 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:52954 10 6452 1 2025-11-29 23:14:26.193 00:00:10.362 TCP 23.104.0.1:55518 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:14:51.490 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 23:14:51.463 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 23:14:46.633 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46302 10 6452 1 2025-11-29 23:15:26.595 00:00:10.366 TCP 23.104.0.1:58214 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:15:46.849 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:52812 10 6452 1 2025-11-29 23:16:26.996 00:00:10.332 TCP 23.104.0.1:45048 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:16:47.025 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52886 10 6452 1 2025-11-29 23:13:05.534 00:05:04.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 23:13:05.531 00:05:04.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 23:17:27.365 00:00:10.329 TCP 23.104.0.1:35288 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:17:47.199 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50584 10 6452 1 2025-11-29 23:18:27.734 00:00:10.326 TCP 23.104.0.1:58882 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:18:47.410 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42876 10 6452 1 2025-11-29 23:19:28.104 00:00:10.364 TCP 23.104.0.1:59096 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:19:51.588 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 23:19:51.667 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 23:19:47.631 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36590 11 6813 1 2025-11-29 23:20:28.509 00:00:10.367 TCP 23.104.0.1:34662 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:20:47.875 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41472 10 6452 1 2025-11-29 23:21:28.919 00:00:10.361 TCP 23.104.0.1:56002 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:21:48.111 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41854 10 6452 1 2025-11-29 23:22:29.319 00:00:10.369 TCP 23.104.0.1:45096 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:22:48.324 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55904 10 6452 1 2025-11-29 23:19:05.535 00:05:04.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 23:19:05.532 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 23:23:29.730 00:00:10.372 TCP 23.104.0.1:41058 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:23:48.495 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39042 10 6452 1 2025-11-29 23:24:30.139 00:00:10.371 TCP 23.104.0.1:37992 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:24:51.747 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 23:24:51.909 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 23:24:48.666 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58038 10 6452 1 2025-11-29 23:25:30.549 00:00:10.368 TCP 23.104.0.1:53174 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:25:48.880 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57430 10 6452 1 2025-11-29 23:26:30.955 00:00:10.372 TCP 23.104.0.1:39646 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:26:49.076 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41922 10 6452 1 2025-11-29 23:27:31.364 00:00:10.326 TCP 23.104.0.1:56232 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:27:49.288 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60828 10 6452 1 2025-11-29 23:28:31.733 00:00:10.370 TCP 23.104.0.1:34632 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:28:49.501 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35712 10 6452 1 2025-11-29 23:25:05.535 00:05:04.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 23:25:05.533 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 23:29:32.141 00:00:10.359 TCP 23.104.0.1:48362 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:29:51.856 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 23:29:51.978 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 23:29:49.715 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35516 10 6452 1 2025-11-29 23:30:32.538 00:00:10.367 TCP 23.104.0.1:48006 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:30:49.924 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:39214 10 6452 1 2025-11-29 23:31:32.948 00:00:10.367 TCP 23.104.0.1:38548 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:31:50.169 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45934 10 6452 1 2025-11-29 23:32:33.361 00:00:10.788 TCP 23.104.0.1:57240 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:32:50.388 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:49816 10 6452 1 2025-11-29 23:33:34.189 00:00:10.325 TCP 23.104.0.1:56788 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:33:50.619 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34342 10 6452 1 2025-11-29 23:34:34.549 00:00:10.360 TCP 23.104.0.1:40758 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:34:51.652 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 23:34:52.002 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 23:34:50.835 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50150 10 6452 1 2025-11-29 23:31:05.536 00:05:04.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 23:31:05.534 00:05:04.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 23:35:34.951 00:00:10.367 TCP 23.104.0.1:50770 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:35:51.082 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51452 10 6452 1 2025-11-29 23:36:35.358 00:00:10.378 TCP 23.104.0.1:32856 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:36:51.297 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55296 10 6452 1 2025-11-29 23:37:35.778 00:00:10.377 TCP 23.104.0.1:44154 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:37:51.520 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35584 10 6452 1 2025-11-29 23:38:36.211 00:00:10.363 TCP 23.104.0.1:40606 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:38:51.748 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41280 10 6452 1 2025-11-29 23:39:36.614 00:00:10.374 TCP 23.104.0.1:40404 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:39:52.269 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 23:39:52.188 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 23:39:51.957 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42896 10 6452 1 2025-11-29 23:40:37.027 00:00:10.364 TCP 23.104.0.1:57560 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:40:52.193 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:42448 10 6452 1 2025-11-29 23:37:05.536 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 23:37:05.539 00:05:04.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 23:41:37.432 00:00:10.366 TCP 23.104.0.1:36118 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:41:52.377 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45316 12 10369 1 2025-11-29 23:42:37.842 00:00:10.459 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 15 1926 1 2025-11-29 23:42:52.618 00:00:10.577 TCP 1.101.0.1:3000 -> 22.102.0.1:44826 10 6452 1 2025-11-29 23:43:38.339 00:00:10.367 TCP 23.104.0.1:48200 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:43:53.234 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41926 10 6452 1 2025-11-29 23:44:38.752 00:00:10.383 TCP 23.104.0.1:34946 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:44:51.983 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 23:44:52.146 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 23:44:53.411 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:39956 10 6452 1 2025-11-29 23:45:39.177 00:00:10.372 TCP 23.104.0.1:57996 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:45:53.584 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43414 10 6452 1 2025-11-29 23:46:39.589 00:00:10.363 TCP 23.104.0.1:33674 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:46:53.759 00:00:10.531 TCP 1.101.0.1:3000 -> 22.102.0.1:50808 10 6452 1 2025-11-29 23:43:05.539 00:05:04.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 23:43:05.536 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 23:47:39.994 00:00:10.364 TCP 23.104.0.1:41294 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:47:54.334 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55200 10 6452 1 2025-11-29 23:48:40.403 00:00:10.357 TCP 23.104.0.1:52052 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:48:54.561 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52930 10 6452 1 2025-11-29 23:49:52.141 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 23:49:40.798 00:00:10.341 TCP 23.104.0.1:38140 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:49:52.295 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 23:49:54.778 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60398 10 6452 1 2025-11-29 23:50:41.178 00:00:10.375 TCP 23.104.0.1:36202 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:50:54.951 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:55850 12 6556 1 2025-11-29 23:51:41.587 00:00:10.365 TCP 23.104.0.1:33742 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:51:55.225 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39418 10 6452 1 2025-11-29 23:52:41.992 00:00:10.364 TCP 23.104.0.1:60672 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:52:55.436 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55064 10 6452 1 2025-11-29 23:49:05.538 00:05:04.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-29 23:49:05.541 00:05:04.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-29 23:53:42.394 00:00:10.369 TCP 23.104.0.1:41474 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:53:55.649 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57054 10 6452 1 2025-11-29 23:54:52.386 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-29 23:54:52.376 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-29 23:54:42.798 00:00:10.347 TCP 23.104.0.1:39394 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:54:55.873 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:33024 10 6452 1 2025-11-29 23:55:43.187 00:00:10.366 TCP 23.104.0.1:40616 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:55:56.106 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51740 10 6452 1 2025-11-29 23:56:43.592 00:00:10.366 TCP 23.104.0.1:56168 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:56:56.323 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:50940 10 6452 1 2025-11-29 23:57:43.996 00:00:10.378 TCP 23.104.0.1:53954 -> 1.101.0.1:3000 11 1507 1 2025-11-29 23:57:56.508 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34770 10 6452 1 Summary: total flows: 163, total bytes: 501642, total packets: 1570, avg bps: 1061, avg pps: 0, avg bpp: 319 Time window: 2025-11-29 22:55:05 - 2025-11-29 23:58:06 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0036s User: 0.0018s Wall: 0.0037s flows/second: 44365.4 Runtime: 0.0037s