Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 01:55:05.577 00:05:04.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 01:55:05.579 00:05:04.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 01:59:25.259 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:55104 10 6452 1 2025-11-30 01:59:33.190 00:00:10.366 TCP 23.104.0.1:59834 -> 1.101.0.1:3000 11 1507 1 2025-11-30 01:59:54.858 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 01:59:54.693 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 02:00:25.531 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40466 12 6556 1 2025-11-30 02:00:33.590 00:00:10.363 TCP 23.104.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:01:25.754 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50860 10 6452 1 2025-11-30 02:01:33.993 00:00:10.363 TCP 23.104.0.1:49834 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:02:25.978 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:54882 12 10375 1 2025-11-30 02:02:34.397 00:00:10.440 TCP 23.104.0.1:38196 -> 1.101.0.1:3000 15 1926 1 2025-11-30 02:03:26.254 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55498 10 6452 1 2025-11-30 02:03:34.876 00:00:10.368 TCP 23.104.0.1:59836 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:04:26.429 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46328 10 6452 1 2025-11-30 02:04:35.278 00:00:10.372 TCP 23.104.0.1:53884 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:04:55.007 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 02:04:55.027 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 02:01:05.580 00:05:04.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 02:01:05.577 00:05:04.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 02:05:26.643 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54304 10 6452 1 2025-11-30 02:05:35.691 00:00:10.365 TCP 23.104.0.1:38752 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:06:26.859 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:58016 10 6452 1 2025-11-30 02:06:36.110 00:00:10.368 TCP 23.104.0.1:55638 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:07:27.065 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40410 10 6452 1 2025-11-30 02:07:36.517 00:00:10.370 TCP 23.104.0.1:44004 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:08:27.241 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41254 10 6452 1 2025-11-30 02:08:36.928 00:00:10.389 TCP 23.104.0.1:41558 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:09:27.464 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38914 10 6452 1 2025-11-30 02:09:37.359 00:00:10.425 TCP 23.104.0.1:54240 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:09:54.932 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 02:09:54.752 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 02:10:27.676 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47762 10 6452 1 2025-11-30 02:10:37.825 00:00:10.363 TCP 23.104.0.1:60178 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:07:05.578 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 02:07:05.580 00:05:04.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 02:11:27.896 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43898 10 6452 1 2025-11-30 02:11:38.234 00:00:10.369 TCP 23.104.0.1:55360 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:12:28.110 00:00:10.623 TCP 1.101.0.1:3000 -> 22.102.0.1:39622 12 6544 1 2025-11-30 02:12:38.648 00:00:10.368 TCP 23.104.0.1:34794 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:13:28.720 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43024 10 6452 1 2025-11-30 02:13:39.064 00:00:10.368 TCP 23.104.0.1:54806 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:14:28.932 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:47918 10 6452 1 2025-11-30 02:14:39.470 00:00:10.369 TCP 23.104.0.1:55692 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:14:55.071 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 02:14:55.003 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 02:15:29.167 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47010 10 6452 1 2025-11-30 02:15:39.879 00:00:10.374 TCP 23.104.0.1:49476 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:16:29.391 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53824 10 6452 1 2025-11-30 02:16:40.296 00:00:10.377 TCP 23.104.0.1:57396 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:13:05.583 00:05:04.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 02:13:05.581 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 02:17:29.599 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39458 10 6452 1 2025-11-30 02:17:40.713 00:00:10.379 TCP 23.104.0.1:33096 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:18:29.822 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49268 10 6452 1 2025-11-30 02:18:41.132 00:00:10.364 TCP 23.104.0.1:44312 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:19:30.069 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59276 10 6452 1 2025-11-30 02:19:41.541 00:00:10.319 TCP 23.104.0.1:54684 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:19:55.604 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 02:19:55.533 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 02:20:30.281 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36324 10 6452 1 2025-11-30 02:20:41.900 00:00:10.371 TCP 23.104.0.1:47830 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:21:30.493 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39106 10 6452 1 2025-11-30 02:21:42.309 00:00:10.330 TCP 23.104.0.1:36196 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:22:30.667 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57364 10 6452 1 2025-11-30 02:22:42.675 00:00:10.375 TCP 23.104.0.1:53118 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:19:05.587 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 02:19:05.584 00:05:04.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 02:23:30.881 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44598 10 6452 1 2025-11-30 02:23:43.111 00:00:10.363 TCP 23.104.0.1:44242 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:24:31.075 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55846 10 6452 1 2025-11-30 02:24:55.397 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 02:24:43.512 00:00:10.368 TCP 23.104.0.1:55568 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:24:55.422 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 02:25:31.249 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37856 10 6452 1 2025-11-30 02:25:43.916 00:00:10.370 TCP 23.104.0.1:38758 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:26:31.465 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57824 10 6452 1 2025-11-30 02:26:44.326 00:00:10.367 TCP 23.104.0.1:52046 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:27:31.681 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34482 10 6452 1 2025-11-30 02:27:44.732 00:00:10.333 TCP 23.104.0.1:54844 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:28:31.909 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51142 10 6452 1 2025-11-30 02:28:45.106 00:00:10.368 TCP 23.104.0.1:35870 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:25:05.589 00:05:04.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 02:25:05.584 00:05:04.737 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 02:29:32.126 00:00:12.552 TCP 1.101.0.1:3000 -> 22.102.0.1:57978 10 6452 1 2025-11-30 02:29:55.451 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 02:29:55.445 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 02:29:45.518 00:00:10.381 TCP 23.104.0.1:43498 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:30:34.731 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54546 10 6452 1 2025-11-30 02:30:45.946 00:00:10.375 TCP 23.104.0.1:58120 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:31:34.944 00:00:10.300 TCP 1.101.0.1:3000 -> 22.102.0.1:37430 10 6452 1 2025-11-30 02:31:46.358 00:00:10.366 TCP 23.104.0.1:51444 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:32:35.278 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43520 10 6452 1 2025-11-30 02:32:46.759 00:00:10.371 TCP 23.104.0.1:38204 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:33:35.495 00:00:10.882 TCP 1.101.0.1:3000 -> 22.102.0.1:33928 10 6452 1 2025-11-30 02:33:47.168 00:00:10.320 TCP 23.104.0.1:54348 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:34:36.416 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46856 10 6452 1 2025-11-30 02:34:55.824 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 02:34:55.947 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 02:34:47.529 00:00:10.360 TCP 23.104.0.1:56512 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:31:05.592 00:05:04.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 02:31:05.590 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 02:35:36.630 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33174 10 6452 1 2025-11-30 02:35:47.929 00:00:10.349 TCP 23.104.0.1:56830 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:36:36.844 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52906 10 6452 1 2025-11-30 02:36:48.316 00:00:10.383 TCP 23.104.0.1:34486 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:37:37.083 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37856 10 6452 1 2025-11-30 02:37:48.736 00:00:10.368 TCP 23.104.0.1:60000 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:38:37.293 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58232 10 6452 1 2025-11-30 02:38:49.142 00:00:10.366 TCP 23.104.0.1:39876 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:39:37.505 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:43796 10 6452 1 2025-11-30 02:39:55.701 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 02:39:55.627 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 02:39:49.549 00:00:10.369 TCP 23.104.0.1:59418 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:40:37.680 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47148 10 6452 1 2025-11-30 02:40:49.957 00:00:10.371 TCP 23.104.0.1:52502 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:37:05.591 00:05:04.740 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 02:37:05.594 00:05:04.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 02:41:37.850 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58404 10 6452 1 2025-11-30 02:41:50.368 00:00:10.363 TCP 23.104.0.1:54394 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:42:38.082 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52466 10 6452 1 2025-11-30 02:42:50.777 00:00:10.366 TCP 23.104.0.1:53862 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:43:38.294 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45282 10 6452 1 2025-11-30 02:43:51.184 00:00:10.361 TCP 23.104.0.1:52278 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:44:38.508 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44158 10 6452 1 2025-11-30 02:44:55.910 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 02:44:55.790 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 02:44:51.584 00:00:10.362 TCP 23.104.0.1:55482 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:45:38.732 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:55842 10 6452 1 2025-11-30 02:45:51.982 00:00:10.371 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:46:38.994 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44458 10 6452 1 2025-11-30 02:46:52.391 00:00:10.366 TCP 23.104.0.1:38054 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:43:05.595 00:05:04.736 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 02:43:05.592 00:05:04.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 02:47:39.209 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33438 10 6452 1 2025-11-30 02:47:52.792 00:00:10.372 TCP 23.104.0.1:36100 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:48:39.434 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51104 10 6452 1 2025-11-30 02:48:53.205 00:00:10.568 TCP 23.104.0.1:56200 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:49:39.654 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46848 10 6452 1 2025-11-30 02:49:55.737 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 02:49:55.759 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 02:49:53.812 00:00:10.332 TCP 23.104.0.1:60466 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:50:39.880 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59862 10 6452 1 2025-11-30 02:50:54.179 00:00:10.369 TCP 23.104.0.1:51200 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:51:40.109 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33414 10 6452 1 2025-11-30 02:51:54.586 00:00:10.337 TCP 23.104.0.1:53244 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:52:40.329 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51222 10 6452 1 2025-11-30 02:52:54.961 00:00:10.359 TCP 23.104.0.1:54298 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:49:05.597 00:05:04.736 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 02:49:05.595 00:05:04.741 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 02:53:40.556 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32920 10 6452 1 2025-11-30 02:53:55.360 00:00:10.362 TCP 23.104.0.1:44890 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:54:40.774 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49636 10 6452 1 2025-11-30 02:54:55.928 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 02:54:55.860 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 02:54:55.763 00:00:10.383 TCP 23.104.0.1:56888 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:55:40.990 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:33770 10 6452 1 2025-11-30 02:55:56.185 00:00:10.323 TCP 23.104.0.1:36184 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:56:41.241 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51698 10 6452 1 2025-11-30 02:56:56.555 00:00:10.379 TCP 23.104.0.1:41634 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:57:41.462 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50422 10 6452 1 2025-11-30 02:57:56.974 00:00:10.368 TCP 23.104.0.1:58032 -> 1.101.0.1:3000 11 1507 1 2025-11-30 02:58:41.672 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:55376 10 6452 1 Summary: total flows: 163, total bytes: 501379, total packets: 1571, avg bps: 1048, avg pps: 0, avg bpp: 319 Time window: 2025-11-30 01:55:05 - 2025-11-30 02:58:51 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0048s User: 0.0010s Wall: 0.0022s flows/second: 72669.2 Runtime: 0.0023s