Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 15:58:49.614 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46474 10 6452 1 2025-11-30 15:55:05.810 00:05:04.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 15:55:05.808 00:05:04.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 15:59:07.332 00:00:10.366 TCP 23.104.0.1:38810 -> 1.101.0.1:3000 11 1507 1 2025-11-30 15:59:49.787 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42320 10 6452 1 2025-11-30 16:00:11.586 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 16:00:11.631 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 16:00:07.739 00:00:10.324 TCP 23.104.0.1:40242 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:00:50.001 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49954 10 6452 1 2025-11-30 16:01:08.110 00:00:10.326 TCP 23.104.0.1:46752 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:01:50.214 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48534 10 6452 1 2025-11-30 16:02:08.474 00:00:10.364 TCP 23.104.0.1:49366 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:02:50.433 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59186 10 6452 1 2025-11-30 16:03:08.875 00:00:10.322 TCP 23.104.0.1:40262 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:03:50.652 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52760 10 6452 1 2025-11-30 16:04:09.240 00:00:10.369 TCP 23.104.0.1:38796 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:04:50.861 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:55400 10 6452 1 2025-11-30 16:05:11.774 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 16:01:05.811 00:05:04.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 16:05:11.858 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 16:01:05.809 00:05:04.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 16:05:09.649 00:00:10.766 TCP 23.104.0.1:51004 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:05:51.088 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:43864 10 6452 1 2025-11-30 16:06:10.457 00:00:10.367 TCP 23.104.0.1:40652 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:06:51.297 00:00:10.254 TCP 1.101.0.1:3000 -> 22.102.0.1:35202 10 6452 1 2025-11-30 16:07:10.858 00:00:10.379 TCP 23.104.0.1:51780 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:07:51.615 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49748 10 6452 1 2025-11-30 16:08:11.270 00:00:10.366 TCP 23.104.0.1:37054 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:08:51.831 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:54628 10 6452 1 2025-11-30 16:09:11.681 00:00:10.372 TCP 23.104.0.1:37222 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:09:52.090 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34416 10 6452 1 2025-11-30 16:10:11.887 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 16:10:12.166 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 16:10:12.107 00:00:10.363 TCP 23.104.0.1:44022 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:10:52.307 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53896 10 6452 1 2025-11-30 16:07:05.811 00:05:04.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 16:07:05.814 00:05:04.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 16:11:12.509 00:00:10.366 TCP 23.104.0.1:45178 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:11:52.521 00:00:10.454 TCP 1.101.0.1:3000 -> 22.102.0.1:40782 10 6452 1 2025-11-30 16:12:12.912 00:00:10.363 TCP 23.104.0.1:56272 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:12:53.015 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43224 10 6452 1 2025-11-30 16:13:13.310 00:00:10.375 TCP 23.104.0.1:53354 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:13:53.232 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:37696 10 6452 1 2025-11-30 16:14:13.725 00:00:10.372 TCP 23.104.0.1:41396 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:14:53.488 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55762 10 6452 1 2025-11-30 16:15:11.973 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 16:15:11.915 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 16:15:14.126 00:00:10.368 TCP 23.104.0.1:34902 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:15:53.705 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39422 10 6452 1 2025-11-30 16:16:14.537 00:00:10.360 TCP 23.104.0.1:49266 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:16:53.891 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43182 10 6452 1 2025-11-30 16:13:05.812 00:05:04.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 16:13:05.815 00:05:04.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 16:17:14.932 00:00:10.387 TCP 23.104.0.1:42392 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:17:54.107 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56874 10 6452 1 2025-11-30 16:18:15.360 00:00:10.361 TCP 23.104.0.1:52650 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:18:54.314 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:41712 10 6452 1 2025-11-30 16:19:15.761 00:00:10.382 TCP 23.104.0.1:49900 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:19:54.488 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40560 10 6452 1 2025-11-30 16:20:12.204 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 16:20:12.100 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 16:20:16.181 00:00:10.371 TCP 23.104.0.1:37564 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:20:54.669 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39264 10 6452 1 2025-11-30 16:21:16.593 00:00:10.369 TCP 23.104.0.1:42452 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:21:54.882 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45628 10 6452 1 2025-11-30 16:22:17.003 00:00:10.372 TCP 23.104.0.1:49478 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:22:55.100 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40438 10 6452 1 2025-11-30 16:19:05.814 00:05:04.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 16:19:05.816 00:05:04.782 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 16:23:17.410 00:00:10.369 TCP 23.104.0.1:50664 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:23:55.313 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37454 10 6452 1 2025-11-30 16:24:17.818 00:00:10.324 TCP 23.104.0.1:53628 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:24:55.530 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54926 10 6452 1 2025-11-30 16:25:12.234 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 16:25:12.068 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 16:25:18.179 00:00:10.375 TCP 23.104.0.1:43916 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:25:55.745 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39282 10 6452 1 2025-11-30 16:26:18.594 00:00:10.365 TCP 23.104.0.1:38220 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:26:55.967 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:57848 10 6452 1 2025-11-30 16:27:18.996 00:00:10.367 TCP 23.104.0.1:40472 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:27:56.206 00:00:10.414 TCP 1.101.0.1:3000 -> 22.102.0.1:32908 10 6452 1 2025-11-30 16:28:19.400 00:00:10.367 TCP 23.104.0.1:50212 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:28:56.658 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51100 10 6452 1 2025-11-30 16:25:05.815 00:05:04.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 16:25:05.813 00:05:04.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 16:29:19.806 00:00:10.361 TCP 23.104.0.1:57486 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:29:56.877 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50164 10 6452 1 2025-11-30 16:30:12.308 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 16:30:12.215 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 16:30:20.204 00:00:10.328 TCP 23.104.0.1:40910 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:30:57.075 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43640 10 6452 1 2025-11-30 16:31:20.570 00:00:10.371 TCP 23.104.0.1:43972 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:31:57.283 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60060 10 6452 1 2025-11-30 16:32:20.977 00:00:10.445 TCP 23.104.0.1:60818 -> 1.101.0.1:3000 15 1926 1 2025-11-30 16:32:57.499 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:57902 12 10369 1 2025-11-30 16:33:21.459 00:00:10.363 TCP 23.104.0.1:43366 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:33:57.736 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44580 10 6452 1 2025-11-30 16:34:21.858 00:00:10.419 TCP 23.104.0.1:55608 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:31:05.815 00:05:04.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 16:34:57.945 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:59896 10 6452 1 2025-11-30 16:31:05.818 00:05:04.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 16:35:12.186 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 16:35:12.434 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 16:35:22.316 00:00:10.370 TCP 23.104.0.1:52804 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:35:58.183 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41218 10 6452 1 2025-11-30 16:36:22.720 00:00:10.379 TCP 23.104.0.1:54960 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:36:58.355 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59122 10 6452 1 2025-11-30 16:37:23.141 00:00:10.879 TCP 23.104.0.1:37772 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:37:58.582 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37126 10 6452 1 2025-11-30 16:38:24.082 00:00:10.364 TCP 23.104.0.1:50722 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:38:58.798 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36262 10 6452 1 2025-11-30 16:39:24.485 00:00:10.359 TCP 23.104.0.1:36852 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:39:59.008 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56756 10 6452 1 2025-11-30 16:40:12.556 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 16:40:12.390 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 16:40:24.884 00:00:10.384 TCP 23.104.0.1:59754 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:40:59.179 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44942 10 6452 1 2025-11-30 16:37:05.817 00:05:04.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 16:37:05.819 00:05:04.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 16:41:25.305 00:00:10.372 TCP 23.104.0.1:34990 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:41:59.388 00:00:10.401 TCP 1.101.0.1:3000 -> 22.102.0.1:42272 10 6452 1 2025-11-30 16:42:25.715 00:00:10.375 TCP 23.104.0.1:40298 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:42:59.827 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34220 10 6452 1 2025-11-30 16:43:26.128 00:00:10.375 TCP 23.104.0.1:49966 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:44:00.008 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:55112 10 6452 1 2025-11-30 16:44:26.535 00:00:10.329 TCP 23.104.0.1:46756 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:45:00.190 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51258 10 6452 1 2025-11-30 16:45:12.578 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 16:45:13.012 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 16:45:26.904 00:00:10.324 TCP 23.104.0.1:33372 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:46:00.407 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42446 10 6452 1 2025-11-30 16:46:27.268 00:00:10.363 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:43:05.818 00:05:04.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 16:47:00.620 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36422 10 6452 1 2025-11-30 16:43:05.821 00:05:04.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 16:47:27.671 00:00:10.323 TCP 23.104.0.1:59352 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:48:00.836 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57276 10 6452 1 2025-11-30 16:48:28.034 00:00:10.363 TCP 23.104.0.1:48616 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:49:01.088 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36316 10 6452 1 2025-11-30 16:49:28.433 00:00:10.364 TCP 23.104.0.1:39200 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:50:01.257 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34052 10 6452 1 2025-11-30 16:50:12.504 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 16:50:12.795 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 16:50:28.837 00:00:10.468 TCP 23.104.0.1:33640 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:51:01.468 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56314 10 6452 1 2025-11-30 16:51:29.354 00:00:10.366 TCP 23.104.0.1:52082 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:52:01.681 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51524 10 6452 1 2025-11-30 16:52:29.759 00:00:10.330 TCP 23.104.0.1:39880 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:49:05.822 00:05:04.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 16:49:05.824 00:05:04.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 16:53:01.890 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:48646 10 6452 1 2025-11-30 16:53:30.127 00:00:10.361 TCP 23.104.0.1:43152 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:54:02.086 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48968 10 6452 1 2025-11-30 16:54:30.530 00:00:10.365 TCP 23.104.0.1:56896 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:55:02.300 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41864 10 6452 1 2025-11-30 16:55:12.845 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 16:55:13.210 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 16:55:30.931 00:00:10.377 TCP 23.104.0.1:56818 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:56:02.515 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52648 10 6452 1 2025-11-30 16:56:31.346 00:00:10.369 TCP 23.104.0.1:34812 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:57:02.685 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40492 10 6452 1 2025-11-30 16:57:31.750 00:00:10.379 TCP 23.104.0.1:58330 -> 1.101.0.1:3000 11 1507 1 2025-11-30 16:58:02.900 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43044 10 6452 1 2025-11-30 16:58:32.165 00:00:10.326 TCP 23.104.0.1:55202 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502684, total packets: 1578, avg bps: 1053, avg pps: 0, avg bpp: 318 Time window: 2025-11-30 15:55:05 - 2025-11-30 16:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0058s User: 0.0000s Wall: 0.0031s flows/second: 53701.8 Runtime: 0.0031s