Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-30 23:55:05.945 00:05:04.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-30 23:59:00.165 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46344 10 6452 1 2025-11-30 23:55:05.942 00:05:04.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-30 23:59:26.310 00:00:10.366 TCP 23.104.0.1:48228 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:00:00.377 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33916 10 6452 1 2025-12-01 00:00:21.304 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 00:00:21.280 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 00:00:26.716 00:00:10.362 TCP 23.104.0.1:59352 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:01:00.591 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56010 10 6452 1 2025-12-01 00:01:27.104 00:00:10.849 TCP 23.104.0.1:50728 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:02:00.805 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52180 10 6452 1 2025-12-01 00:02:27.992 00:00:10.366 TCP 23.104.0.1:46196 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:03:01.029 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43904 10 6452 1 2025-12-01 00:03:28.396 00:00:10.367 TCP 23.104.0.1:47810 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:04:01.240 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48452 10 6452 1 2025-12-01 00:04:28.803 00:00:10.369 TCP 23.104.0.1:48754 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:01:05.941 00:05:04.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 00:05:01.456 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33856 10 6452 1 2025-12-01 00:01:05.943 00:05:04.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 00:05:21.552 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 00:05:21.405 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 00:05:29.211 00:00:10.365 TCP 23.104.0.1:34446 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:06:01.669 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:33502 10 6452 1 2025-12-01 00:06:29.620 00:00:10.360 TCP 23.104.0.1:50156 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:07:01.845 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:47242 11 6492 1 2025-12-01 00:07:30.018 00:00:10.436 TCP 23.104.0.1:43974 -> 1.101.0.1:3000 15 1926 1 2025-12-01 00:08:02.078 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:37262 12 10375 1 2025-12-01 00:08:30.496 00:00:10.360 TCP 23.104.0.1:41764 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:09:02.322 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52558 10 6452 1 2025-12-01 00:09:30.899 00:00:10.378 TCP 23.104.0.1:52348 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:10:02.553 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55642 10 6452 1 2025-12-01 00:10:21.527 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 00:10:21.631 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 00:10:31.317 00:00:10.363 TCP 23.104.0.1:46554 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:07:05.946 00:05:04.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 00:07:05.944 00:05:04.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 00:11:02.769 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51580 10 6452 1 2025-12-01 00:11:31.721 00:00:10.328 TCP 23.104.0.1:55688 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:12:02.995 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56178 10 6452 1 2025-12-01 00:12:32.102 00:00:10.368 TCP 23.104.0.1:43046 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:13:03.218 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46236 10 6452 1 2025-12-01 00:13:32.511 00:00:10.325 TCP 23.104.0.1:33096 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:14:03.435 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:47652 10 6452 1 2025-12-01 00:14:32.877 00:00:10.367 TCP 23.104.0.1:60898 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:15:03.667 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43308 10 6452 1 2025-12-01 00:15:21.590 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 00:15:21.632 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 00:15:33.281 00:00:10.368 TCP 23.104.0.1:48354 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:16:03.887 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55974 10 6452 1 2025-12-01 00:16:33.687 00:00:10.373 TCP 23.104.0.1:47158 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:13:05.945 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 00:13:05.948 00:05:04.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 00:17:04.108 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58186 10 6452 1 2025-12-01 00:17:34.106 00:00:10.368 TCP 23.104.0.1:47144 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:18:04.321 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49672 10 6452 1 2025-12-01 00:18:34.512 00:00:10.323 TCP 23.104.0.1:50086 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:19:04.532 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48828 10 6452 1 2025-12-01 00:19:34.872 00:00:10.324 TCP 23.104.0.1:53572 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:20:04.704 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50570 10 6452 1 2025-12-01 00:20:21.584 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 00:20:21.866 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 00:20:35.232 00:00:10.365 TCP 23.104.0.1:44024 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:21:04.918 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40160 10 6452 1 2025-12-01 00:21:35.636 00:00:10.408 TCP 23.104.0.1:37772 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:22:05.134 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44154 10 6452 1 2025-12-01 00:22:36.098 00:00:10.412 TCP 23.104.0.1:57286 -> 1.101.0.1:3000 15 1926 1 2025-12-01 00:19:05.949 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 00:19:05.945 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 00:23:05.347 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39824 12 10369 1 2025-12-01 00:23:36.552 00:00:10.370 TCP 23.104.0.1:40356 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:24:05.586 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42280 10 6452 1 2025-12-01 00:24:36.966 00:00:10.364 TCP 23.104.0.1:50404 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:25:05.804 00:00:10.467 TCP 1.101.0.1:3000 -> 22.102.0.1:36556 10 6452 1 2025-12-01 00:25:21.909 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 00:25:21.929 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 00:25:37.371 00:00:10.371 TCP 23.104.0.1:52734 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:26:06.308 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44630 10 6452 1 2025-12-01 00:26:37.782 00:00:10.364 TCP 23.104.0.1:45752 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:27:06.523 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49814 10 6452 1 2025-12-01 00:27:38.184 00:00:10.321 TCP 23.104.0.1:35840 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:28:06.736 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52500 10 6452 1 2025-12-01 00:28:38.545 00:00:10.319 TCP 23.104.0.1:51612 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:25:05.947 00:05:04.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 00:25:05.949 00:05:04.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 00:29:06.954 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:59292 12 6556 1 2025-12-01 00:29:38.907 00:00:10.362 TCP 23.104.0.1:59536 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:30:07.187 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59872 10 6452 1 2025-12-01 00:30:21.734 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 00:30:22.023 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 00:30:39.309 00:00:10.362 TCP 23.104.0.1:34692 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:31:07.402 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58580 10 6452 1 2025-12-01 00:31:39.713 00:00:10.373 TCP 23.104.0.1:51146 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:32:07.617 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 12 10369 1 2025-12-01 00:32:40.124 00:00:10.977 TCP 23.104.0.1:38528 -> 1.101.0.1:3000 15 1926 1 2025-12-01 00:33:07.830 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60836 10 6452 1 2025-12-01 00:33:41.138 00:00:10.320 TCP 23.104.0.1:33872 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:34:08.069 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42768 10 6452 1 2025-12-01 00:34:41.498 00:00:10.359 TCP 23.104.0.1:39524 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:31:05.948 00:05:04.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 00:31:05.952 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 00:35:21.854 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 00:35:08.294 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:57974 10 6452 1 2025-12-01 00:35:22.128 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 00:35:41.896 00:00:10.371 TCP 23.104.0.1:51992 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:36:08.475 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45608 10 6452 1 2025-12-01 00:36:42.308 00:00:10.365 TCP 23.104.0.1:35782 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:37:08.694 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:46972 10 6452 1 2025-12-01 00:37:42.705 00:00:10.327 TCP 23.104.0.1:37186 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:38:08.951 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33228 10 6452 1 2025-12-01 00:38:43.096 00:00:10.336 TCP 23.104.0.1:33316 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:39:09.183 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46550 10 6452 1 2025-12-01 00:39:43.465 00:00:10.365 TCP 23.104.0.1:37194 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:40:21.920 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 00:40:09.404 00:00:10.304 TCP 1.101.0.1:3000 -> 22.102.0.1:53228 10 6452 1 2025-12-01 00:40:22.022 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 00:40:43.868 00:00:10.325 TCP 23.104.0.1:43942 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:37:05.950 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 00:37:05.952 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 00:41:09.742 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58810 10 6452 1 2025-12-01 00:41:44.230 00:00:10.362 TCP 23.104.0.1:34360 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:42:09.956 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50258 12 6556 1 2025-12-01 00:42:44.633 00:00:10.328 TCP 23.104.0.1:33604 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:43:10.192 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:53728 10 6452 1 2025-12-01 00:43:45.003 00:00:10.453 TCP 23.104.0.1:43746 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:44:10.392 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36380 10 6452 1 2025-12-01 00:44:45.497 00:00:10.365 TCP 23.104.0.1:51746 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:45:10.564 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37186 10 6452 1 2025-12-01 00:45:22.134 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 00:45:22.180 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 00:45:45.899 00:00:10.369 TCP 23.104.0.1:57032 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:46:10.780 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56644 10 6452 1 2025-12-01 00:46:46.306 00:00:10.367 TCP 23.104.0.1:38234 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:43:05.961 00:05:04.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 00:43:05.959 00:05:04.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 00:47:10.994 00:00:11.018 TCP 1.101.0.1:3000 -> 22.102.0.1:53342 10 6452 1 2025-12-01 00:47:46.711 00:00:10.391 TCP 23.104.0.1:44404 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:48:12.075 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57716 10 6452 1 2025-12-01 00:48:47.141 00:00:10.369 TCP 23.104.0.1:45722 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:49:12.304 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59810 10 6452 1 2025-12-01 00:49:47.544 00:00:10.361 TCP 23.104.0.1:32904 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:50:12.511 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42846 10 6452 1 2025-12-01 00:50:22.805 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 00:50:22.569 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 00:50:47.944 00:00:10.367 TCP 23.104.0.1:34502 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:51:12.724 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60962 10 6452 1 2025-12-01 00:51:48.350 00:00:10.364 TCP 23.104.0.1:43492 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:52:12.940 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:53726 10 6452 1 2025-12-01 00:52:48.755 00:00:10.383 TCP 23.104.0.1:48112 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:49:05.961 00:05:04.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 00:49:05.958 00:05:04.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 00:53:13.176 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35878 10 6452 1 2025-12-01 00:53:49.173 00:00:10.362 TCP 23.104.0.1:41872 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:54:13.400 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53468 10 6452 1 2025-12-01 00:54:49.574 00:00:10.363 TCP 23.104.0.1:34590 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:55:13.615 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35014 10 6452 1 2025-12-01 00:55:22.380 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 00:55:22.460 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 00:55:49.975 00:00:10.367 TCP 23.104.0.1:45590 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:56:13.826 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59594 10 6452 1 2025-12-01 00:56:50.388 00:00:10.374 TCP 23.104.0.1:42884 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:57:14.071 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51700 10 6452 1 2025-12-01 00:57:50.806 00:00:10.362 TCP 23.104.0.1:53248 -> 1.101.0.1:3000 11 1507 1 2025-12-01 00:58:14.282 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52924 10 6452 1 Summary: total flows: 163, total bytes: 510103, total packets: 1584, avg bps: 1074, avg pps: 0, avg bpp: 322 Time window: 2025-11-30 23:55:05 - 2025-12-01 00:58:24 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0033s User: 0.0033s Wall: 0.0047s flows/second: 34979.4 Runtime: 0.0047s