Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 05:55:06.080 00:05:04.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 05:55:06.078 00:05:04.777 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 05:59:06.355 00:00:10.330 TCP 23.104.0.1:35672 -> 1.101.0.1:3000 11 1507 1 2025-12-01 05:59:26.556 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40848 10 6452 1 2025-12-01 06:00:06.724 00:00:10.668 TCP 23.104.0.1:43354 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:00:28.537 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 06:00:28.287 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 06:00:26.773 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51384 10 6452 1 2025-12-01 06:01:07.433 00:00:10.370 TCP 23.104.0.1:59414 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:01:26.989 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50646 10 6452 1 2025-12-01 06:02:07.843 00:00:10.389 TCP 23.104.0.1:51722 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:02:27.211 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56588 10 6452 1 2025-12-01 06:03:08.269 00:00:10.368 TCP 23.104.0.1:48352 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:03:27.388 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46922 10 6452 1 2025-12-01 06:04:08.672 00:00:10.331 TCP 23.104.0.1:53204 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:04:27.613 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39510 10 6452 1 2025-12-01 06:01:06.079 00:05:04.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 06:01:06.082 00:05:04.772 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 06:05:09.048 00:00:10.368 TCP 23.104.0.1:53638 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:05:28.475 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 06:05:28.380 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 06:05:27.839 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55940 10 6452 1 2025-12-01 06:06:09.460 00:00:10.365 TCP 23.104.0.1:43734 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:06:28.072 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60108 10 6452 1 2025-12-01 06:07:09.863 00:00:10.367 TCP 23.104.0.1:59398 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:07:28.297 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39154 10 6452 1 2025-12-01 06:08:10.266 00:00:10.944 TCP 23.104.0.1:51956 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:08:28.516 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55414 10 6452 1 2025-12-01 06:09:11.250 00:00:10.365 TCP 23.104.0.1:60434 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:09:28.735 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40438 10 6452 1 2025-12-01 06:10:11.657 00:00:10.359 TCP 23.104.0.1:46628 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:10:28.972 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 06:10:28.786 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 06:10:28.954 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43510 10 6452 1 2025-12-01 06:07:06.081 00:05:04.773 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 06:07:06.081 00:05:04.778 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 06:11:12.094 00:00:10.372 TCP 23.104.0.1:59278 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:11:29.183 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37820 10 6452 1 2025-12-01 06:12:12.508 00:00:10.370 TCP 23.104.0.1:43926 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:12:29.362 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:41098 10 6452 1 2025-12-01 06:13:12.919 00:00:10.374 TCP 23.104.0.1:45506 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:13:29.599 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35726 10 6452 1 2025-12-01 06:14:13.339 00:00:10.380 TCP 23.104.0.1:58926 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:14:29.820 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40140 10 6452 1 2025-12-01 06:15:13.804 00:00:10.337 TCP 23.104.0.1:50588 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:15:28.920 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 06:15:28.803 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 06:15:30.041 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38214 10 6452 1 2025-12-01 06:16:14.179 00:00:10.322 TCP 23.104.0.1:45450 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:16:30.219 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47786 10 6452 1 2025-12-01 06:13:06.089 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 06:13:06.085 00:05:04.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 06:17:14.539 00:00:10.361 TCP 23.104.0.1:59212 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:17:30.434 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55672 10 6452 1 2025-12-01 06:18:14.940 00:00:10.369 TCP 23.104.0.1:40204 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:18:30.646 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43136 10 6452 1 2025-12-01 06:19:15.349 00:00:10.366 TCP 23.104.0.1:55082 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:19:30.861 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35554 10 6452 1 2025-12-01 06:20:15.755 00:00:10.366 TCP 23.104.0.1:58714 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:20:28.878 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 06:20:28.836 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 06:20:31.069 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38886 10 6452 1 2025-12-01 06:21:16.160 00:00:10.362 TCP 23.104.0.1:46038 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:21:31.281 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38710 10 6452 1 2025-12-01 06:22:16.567 00:00:10.439 TCP 23.104.0.1:52880 -> 1.101.0.1:3000 15 1926 1 2025-12-01 06:22:31.498 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57388 12 10375 1 2025-12-01 06:19:06.085 00:05:04.774 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 06:19:06.089 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 06:23:17.044 00:00:10.364 TCP 23.104.0.1:33712 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:23:31.735 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55528 10 6452 1 2025-12-01 06:24:17.447 00:00:10.362 TCP 23.104.0.1:47368 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:24:31.950 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:37634 10 6452 1 2025-12-01 06:25:28.959 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 06:25:17.855 00:00:10.377 TCP 23.104.0.1:46428 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:25:29.033 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 06:25:32.186 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44542 10 6452 1 2025-12-01 06:26:18.274 00:00:10.362 TCP 23.104.0.1:57072 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:26:32.411 00:00:10.256 TCP 1.101.0.1:3000 -> 22.102.0.1:56830 10 6452 1 2025-12-01 06:27:18.680 00:00:10.369 TCP 23.104.0.1:59598 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:27:32.705 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55876 10 6452 1 2025-12-01 06:28:19.114 00:00:10.362 TCP 23.104.0.1:51870 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:28:32.933 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:38372 10 6452 1 2025-12-01 06:25:06.088 00:05:04.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 06:25:06.090 00:05:04.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 06:29:19.521 00:00:10.364 TCP 23.104.0.1:42384 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:29:33.174 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:35082 10 6452 1 2025-12-01 06:30:28.889 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 06:30:28.857 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 06:30:19.925 00:00:10.696 TCP 23.104.0.1:56038 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:30:33.358 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39092 10 6452 1 2025-12-01 06:31:20.667 00:00:10.362 TCP 23.104.0.1:47106 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:31:33.538 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60714 10 6452 1 2025-12-01 06:32:21.097 00:00:10.364 TCP 23.104.0.1:39310 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:32:33.754 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38570 10 6452 1 2025-12-01 06:33:21.498 00:00:10.365 TCP 23.104.0.1:60680 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:33:33.975 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42948 10 6452 1 2025-12-01 06:34:21.903 00:00:10.322 TCP 23.104.0.1:35270 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:34:34.211 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53360 10 6452 1 2025-12-01 06:31:06.092 00:05:04.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 06:31:06.091 00:05:04.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 06:35:29.185 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 06:35:29.324 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 06:35:22.265 00:00:10.364 TCP 23.104.0.1:39996 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:35:34.424 00:00:10.597 TCP 1.101.0.1:3000 -> 22.102.0.1:55220 10 6452 1 2025-12-01 06:36:22.668 00:00:10.375 TCP 23.104.0.1:49634 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:36:35.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57844 10 6452 1 2025-12-01 06:37:23.098 00:00:10.363 TCP 23.104.0.1:58506 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:37:35.285 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43008 10 6452 1 2025-12-01 06:38:23.498 00:00:10.370 TCP 23.104.0.1:58690 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:38:35.499 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37208 10 6452 1 2025-12-01 06:39:23.904 00:00:10.375 TCP 23.104.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:39:35.714 00:00:10.654 TCP 1.101.0.1:3000 -> 22.102.0.1:45332 10 6452 1 2025-12-01 06:40:29.432 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 06:40:29.306 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 06:40:24.317 00:00:10.374 TCP 23.104.0.1:39138 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:40:36.410 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42714 10 6452 1 2025-12-01 06:37:06.092 00:05:04.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 06:37:06.095 00:05:04.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 06:41:24.729 00:00:10.380 TCP 23.104.0.1:40996 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:41:36.620 00:00:10.700 TCP 1.101.0.1:3000 -> 22.102.0.1:59908 10 6452 1 2025-12-01 06:42:25.163 00:00:10.367 TCP 23.104.0.1:37184 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:42:37.359 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:45248 10 6452 1 2025-12-01 06:43:25.565 00:00:10.359 TCP 23.104.0.1:35806 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:43:37.563 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34546 10 6452 1 2025-12-01 06:44:25.962 00:00:10.333 TCP 23.104.0.1:57326 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:44:37.772 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56520 10 6452 1 2025-12-01 06:45:29.502 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 06:45:29.456 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 06:45:26.339 00:00:10.322 TCP 23.104.0.1:53350 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:45:37.991 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47566 10 6452 1 2025-12-01 06:46:26.698 00:00:10.363 TCP 23.104.0.1:47302 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:46:38.210 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:53004 10 6452 1 2025-12-01 06:43:06.097 00:05:04.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 06:43:06.094 00:05:04.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 06:47:27.108 00:00:10.376 TCP 23.104.0.1:34806 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:47:38.451 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52714 10 6452 1 2025-12-01 06:48:27.522 00:00:10.364 TCP 23.104.0.1:56064 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:48:38.660 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49698 10 6452 1 2025-12-01 06:49:27.921 00:00:10.381 TCP 23.104.0.1:60558 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:49:38.877 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38822 10 6452 1 2025-12-01 06:50:29.590 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 06:50:29.592 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 06:50:28.343 00:00:10.367 TCP 23.104.0.1:59980 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:50:39.115 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41544 10 6452 1 2025-12-01 06:51:28.749 00:00:10.325 TCP 23.104.0.1:51602 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:51:39.344 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55726 10 6452 1 2025-12-01 06:52:29.118 00:00:10.325 TCP 23.104.0.1:57372 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:52:39.564 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34882 10 6452 1 2025-12-01 06:49:06.098 00:05:04.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 06:49:06.095 00:05:04.771 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 06:53:29.478 00:00:10.360 TCP 23.104.0.1:52920 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:53:39.785 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59400 10 6452 1 2025-12-01 06:54:29.879 00:00:10.365 TCP 23.104.0.1:57500 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:54:40.003 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43008 10 6452 1 2025-12-01 06:55:29.869 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 06:55:29.917 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 06:55:30.284 00:00:10.710 TCP 23.104.0.1:55212 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:55:40.220 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52480 10 6452 1 2025-12-01 06:56:31.033 00:00:10.327 TCP 23.104.0.1:52386 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:56:40.443 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39170 10 6452 1 2025-12-01 06:57:31.397 00:00:10.398 TCP 23.104.0.1:47628 -> 1.101.0.1:3000 15 1926 1 2025-12-01 06:57:40.658 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:53872 12 10375 1 2025-12-01 06:58:31.834 00:00:10.400 TCP 23.104.0.1:49614 -> 1.101.0.1:3000 11 1507 1 2025-12-01 06:58:40.899 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47462 10 6452 1 Summary: total flows: 164, total bytes: 507032, total packets: 1584, avg bps: 1060, avg pps: 0, avg bpp: 320 Time window: 2025-12-01 05:55:06 - 2025-12-01 06:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0043s User: 0.0011s Wall: 0.0023s flows/second: 70269.3 Runtime: 0.0023s