Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 20:55:05.893 00:05:04.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 20:55:05.895 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 20:59:03.006 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49140 10 6452 1 2025-11-30 20:59:11.197 00:00:10.365 TCP 23.104.0.1:47088 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:00:03.222 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45988 10 6452 1 2025-11-30 21:00:17.685 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 21:00:17.865 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 21:00:11.600 00:00:10.327 TCP 23.104.0.1:55358 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:01:03.437 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54700 10 6452 1 2025-11-30 21:01:11.964 00:00:10.330 TCP 23.104.0.1:50822 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:02:03.658 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60494 10 6452 1 2025-11-30 21:02:12.336 00:00:10.379 TCP 23.104.0.1:50280 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:03:03.873 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33926 10 6452 1 2025-11-30 21:03:12.754 00:00:10.379 TCP 23.104.0.1:35752 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:04:04.089 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36060 10 6452 1 2025-11-30 21:04:13.170 00:00:10.364 TCP 23.104.0.1:46172 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:01:05.895 00:05:04.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 21:01:05.897 00:05:04.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 21:05:04.304 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60588 10 6452 1 2025-11-30 21:05:17.958 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 21:05:17.965 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 21:05:13.569 00:00:10.325 TCP 23.104.0.1:42308 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:06:04.524 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53988 10 6452 1 2025-11-30 21:06:13.934 00:00:10.407 TCP 23.104.0.1:50452 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:07:04.732 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51760 10 6452 1 2025-11-30 21:07:14.383 00:00:10.322 TCP 23.104.0.1:37716 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:08:04.951 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45584 10 6452 1 2025-11-30 21:08:14.746 00:00:10.366 TCP 23.104.0.1:50578 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:09:05.177 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34704 10 6452 1 2025-11-30 21:09:15.150 00:00:10.360 TCP 23.104.0.1:41756 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:10:05.385 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41758 10 6452 1 2025-11-30 21:10:17.873 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 21:10:17.932 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 21:10:15.552 00:00:10.362 TCP 23.104.0.1:50932 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:07:05.899 00:05:04.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 21:07:05.896 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 21:11:05.596 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39614 10 6452 1 2025-11-30 21:11:15.956 00:00:10.325 TCP 23.104.0.1:45888 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:12:05.809 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38810 10 6452 1 2025-11-30 21:12:16.320 00:00:10.363 TCP 23.104.0.1:57822 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:13:06.034 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58276 10 6452 1 2025-11-30 21:13:16.723 00:00:10.326 TCP 23.104.0.1:39818 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:14:06.201 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40114 10 6452 1 2025-11-30 21:14:17.104 00:00:10.365 TCP 23.104.0.1:60072 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:15:06.412 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46736 10 6452 1 2025-11-30 21:15:17.978 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 21:15:18.165 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 21:15:17.511 00:00:10.323 TCP 23.104.0.1:58626 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:16:06.616 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37286 10 6452 1 2025-11-30 21:16:17.867 00:00:10.360 TCP 23.104.0.1:32894 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:13:05.899 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 21:13:05.902 00:05:04.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 21:17:06.830 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39014 10 6452 1 2025-11-30 21:17:18.277 00:00:10.366 TCP 23.104.0.1:35452 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:18:07.069 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39582 10 6452 1 2025-11-30 21:18:18.686 00:00:10.373 TCP 23.104.0.1:52022 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:19:07.289 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47418 10 6452 1 2025-11-30 21:19:19.102 00:00:10.374 TCP 23.104.0.1:45668 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:20:18.169 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 21:20:07.459 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53254 10 6452 1 2025-11-30 21:20:18.049 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 21:20:19.515 00:00:10.325 TCP 23.104.0.1:39980 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:21:07.677 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59826 10 6452 1 2025-11-30 21:21:19.878 00:00:10.397 TCP 23.104.0.1:48036 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:22:07.905 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36822 10 6452 1 2025-11-30 21:22:20.316 00:00:10.369 TCP 23.104.0.1:43552 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:19:05.901 00:05:04.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 21:19:05.899 00:05:04.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 21:23:08.114 00:00:11.442 TCP 1.101.0.1:3000 -> 22.102.0.1:38152 10 6452 1 2025-11-30 21:23:20.725 00:00:10.367 TCP 23.104.0.1:45332 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:24:09.605 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47620 10 6452 1 2025-11-30 21:24:21.130 00:00:10.364 TCP 23.104.0.1:60240 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:25:09.780 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60596 10 6452 1 2025-11-30 21:25:18.101 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 21:25:18.111 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 21:25:21.532 00:00:10.364 TCP 23.104.0.1:54000 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:26:09.999 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47452 10 6452 1 2025-11-30 21:26:21.936 00:00:10.331 TCP 23.104.0.1:60878 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:27:10.222 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34858 10 6452 1 2025-11-30 21:27:22.307 00:00:10.361 TCP 23.104.0.1:39566 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:28:10.393 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54050 10 6452 1 2025-11-30 21:28:22.708 00:00:10.368 TCP 23.104.0.1:42476 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:25:05.900 00:05:04.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 21:25:05.903 00:05:04.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 21:29:10.621 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35748 10 6452 1 2025-11-30 21:29:23.112 00:00:10.326 TCP 23.104.0.1:55024 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:30:18.417 00:00:00.012 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 21:30:18.306 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 21:30:10.842 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41214 10 6452 1 2025-11-30 21:30:23.480 00:00:10.384 TCP 23.104.0.1:39038 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:31:11.078 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44278 10 6452 1 2025-11-30 21:31:23.969 00:00:10.369 TCP 23.104.0.1:46782 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:32:11.294 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46348 10 6452 1 2025-11-30 21:32:24.378 00:00:10.367 TCP 23.104.0.1:50186 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:33:11.508 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33336 10 6452 1 2025-11-30 21:33:24.784 00:00:10.318 TCP 23.104.0.1:47068 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:34:11.725 00:00:10.473 TCP 1.101.0.1:3000 -> 22.102.0.1:42960 10 6452 1 2025-11-30 21:34:25.146 00:00:10.329 TCP 23.104.0.1:38188 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:31:05.901 00:05:04.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 21:31:05.904 00:05:04.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 21:35:18.502 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 21:35:18.392 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 21:35:12.244 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60134 10 6452 1 2025-11-30 21:35:25.511 00:00:10.331 TCP 23.104.0.1:45326 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:36:12.453 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34056 10 6452 1 2025-11-30 21:36:25.883 00:00:10.385 TCP 23.104.0.1:49990 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:37:12.666 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54444 10 6452 1 2025-11-30 21:37:26.308 00:00:10.367 TCP 23.104.0.1:48630 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:38:12.879 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39746 10 6452 1 2025-11-30 21:38:26.714 00:00:10.379 TCP 23.104.0.1:37168 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:39:13.083 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42150 10 6452 1 2025-11-30 21:39:27.132 00:00:10.373 TCP 23.104.0.1:38128 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:40:18.535 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 21:40:18.706 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 21:40:13.294 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46462 10 6452 1 2025-11-30 21:40:27.542 00:00:10.364 TCP 23.104.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:37:05.904 00:05:04.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 21:37:05.906 00:05:04.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 21:41:13.507 00:00:10.562 TCP 1.101.0.1:3000 -> 22.102.0.1:58420 10 6452 1 2025-11-30 21:41:27.946 00:00:11.541 TCP 23.104.0.1:54354 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:42:14.109 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42794 10 6452 1 2025-11-30 21:42:29.524 00:00:10.367 TCP 23.104.0.1:53552 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:43:14.329 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59742 10 6452 1 2025-11-30 21:43:29.928 00:00:10.390 TCP 23.104.0.1:48900 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:44:14.551 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32944 10 6452 1 2025-11-30 21:44:30.357 00:00:10.326 TCP 23.104.0.1:55990 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:45:18.724 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 21:45:18.815 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 21:45:14.766 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37024 10 6452 1 2025-11-30 21:45:30.720 00:00:10.379 TCP 23.104.0.1:59740 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:46:14.992 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:55408 10 6452 1 2025-11-30 21:46:31.133 00:00:10.369 TCP 23.104.0.1:33256 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:43:05.906 00:05:04.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 21:43:05.909 00:05:04.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 21:47:15.221 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48838 10 6452 1 2025-11-30 21:47:31.536 00:00:10.360 TCP 23.104.0.1:59078 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:48:15.434 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52720 10 6452 1 2025-11-30 21:48:31.933 00:00:10.386 TCP 23.104.0.1:40280 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:49:15.651 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54690 10 6452 1 2025-11-30 21:49:32.360 00:00:10.367 TCP 23.104.0.1:36496 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:50:18.804 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 21:50:18.590 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 21:50:15.867 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33482 10 6452 1 2025-11-30 21:50:32.767 00:00:10.375 TCP 23.104.0.1:40352 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:51:16.070 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58282 10 6452 1 2025-11-30 21:51:33.190 00:00:10.331 TCP 23.104.0.1:51396 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:52:16.284 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42412 10 6452 1 2025-11-30 21:52:33.566 00:00:10.361 TCP 23.104.0.1:44954 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:49:05.908 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 21:49:05.910 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 21:53:16.496 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54602 10 6452 1 2025-11-30 21:53:33.971 00:00:10.379 TCP 23.104.0.1:42176 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:54:16.706 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44682 10 6452 1 2025-11-30 21:54:34.388 00:00:10.371 TCP 23.104.0.1:43484 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:55:18.800 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-30 21:55:18.712 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-30 21:55:16.919 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:43612 10 6452 1 2025-11-30 21:55:34.800 00:00:10.374 TCP 23.104.0.1:34840 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:56:17.107 00:00:10.436 TCP 1.101.0.1:3000 -> 22.102.0.1:42850 10 6452 1 2025-11-30 21:56:35.210 00:00:10.328 TCP 23.104.0.1:38816 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:57:17.581 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39430 10 6452 1 2025-11-30 21:57:35.576 00:00:10.381 TCP 23.104.0.1:54810 -> 1.101.0.1:3000 11 1507 1 2025-11-30 21:58:17.793 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42848 10 6452 1 2025-11-30 21:58:36.014 00:00:10.377 TCP 23.104.0.1:35086 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1043, avg pps: 0, avg bpp: 317 Time window: 2025-11-30 20:55:05 - 2025-11-30 21:58:46 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0029s User: 0.0029s Wall: 0.0029s flows/second: 56433.3 Runtime: 0.0029s