Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 16:55:06.270 00:05:04.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 16:55:06.274 00:05:04.806 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 16:59:01.897 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:45198 10 6452 1 2025-12-01 16:59:08.131 00:00:10.373 TCP 23.104.0.1:40686 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:00:02.091 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:47174 10 6452 1 2025-12-01 17:00:08.545 00:00:10.366 TCP 23.104.0.1:33408 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:00:41.722 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 17:00:41.635 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 17:01:02.273 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35510 10 6452 1 2025-12-01 17:01:08.954 00:00:10.364 TCP 23.104.0.1:60356 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:02:02.491 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:45444 10 6452 1 2025-12-01 17:02:09.359 00:00:10.363 TCP 23.104.0.1:59146 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:03:02.676 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:59182 12 10375 1 2025-12-01 17:03:09.760 00:00:10.401 TCP 23.104.0.1:33624 -> 1.101.0.1:3000 15 1926 1 2025-12-01 17:04:02.918 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45862 10 6452 1 2025-12-01 17:04:10.201 00:00:10.365 TCP 23.104.0.1:40244 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:01:06.273 00:05:04.810 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 17:01:06.276 00:05:04.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 17:05:03.132 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42552 10 6452 1 2025-12-01 17:05:10.609 00:00:10.366 TCP 23.104.0.1:46584 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:05:41.805 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 17:05:41.763 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 17:06:03.350 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49846 10 6452 1 2025-12-01 17:06:11.016 00:00:10.374 TCP 23.104.0.1:50512 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:07:03.568 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49082 10 6452 1 2025-12-01 17:07:11.428 00:00:10.375 TCP 23.104.0.1:34640 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:08:03.779 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36732 10 6452 1 2025-12-01 17:08:11.844 00:00:10.378 TCP 23.104.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:09:04.002 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38010 10 6452 1 2025-12-01 17:09:12.269 00:00:10.368 TCP 23.104.0.1:40396 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:10:04.229 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33400 10 6452 1 2025-12-01 17:10:12.673 00:00:10.318 TCP 23.104.0.1:39690 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:10:42.030 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 17:10:41.982 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 17:07:06.277 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 17:07:06.280 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 17:11:04.449 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58294 10 6452 1 2025-12-01 17:11:13.031 00:00:10.329 TCP 23.104.0.1:33244 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:12:04.672 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45158 10 6452 1 2025-12-01 17:12:13.400 00:00:10.365 TCP 23.104.0.1:57208 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:13:04.895 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36788 10 6452 1 2025-12-01 17:13:13.808 00:00:10.364 TCP 23.104.0.1:38864 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:14:05.114 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42870 10 6452 1 2025-12-01 17:14:14.209 00:00:10.367 TCP 23.104.0.1:55944 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:15:05.339 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:59188 10 6452 1 2025-12-01 17:15:14.613 00:00:10.374 TCP 23.104.0.1:37076 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:15:42.032 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 17:15:42.061 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 17:16:05.517 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56010 10 6452 1 2025-12-01 17:16:15.026 00:00:10.360 TCP 23.104.0.1:56174 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:13:06.279 00:05:04.805 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 17:17:05.730 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33744 10 6452 1 2025-12-01 17:13:06.274 00:05:04.811 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 17:17:15.419 00:00:10.364 TCP 23.104.0.1:35530 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:18:05.941 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:51426 10 6452 1 2025-12-01 17:18:15.820 00:00:10.398 TCP 23.104.0.1:57694 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:19:06.180 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57724 10 6452 1 2025-12-01 17:19:16.258 00:00:10.367 TCP 23.104.0.1:59392 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:20:06.392 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60746 10 6452 1 2025-12-01 17:20:16.660 00:00:10.374 TCP 23.104.0.1:59222 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:20:41.936 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 17:20:42.058 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 17:21:06.571 00:00:10.698 TCP 1.101.0.1:3000 -> 22.102.0.1:57014 10 6452 1 2025-12-01 17:21:17.095 00:00:10.371 TCP 23.104.0.1:43600 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:22:07.312 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33894 10 6452 1 2025-12-01 17:22:17.511 00:00:10.379 TCP 23.104.0.1:51842 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:19:06.278 00:05:04.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 17:19:06.281 00:05:04.803 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 17:23:07.521 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40640 10 6452 1 2025-12-01 17:23:17.924 00:00:10.400 TCP 23.104.0.1:33216 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:24:07.746 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60354 10 6452 1 2025-12-01 17:24:18.359 00:00:10.326 TCP 23.104.0.1:59492 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:25:07.958 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:58926 10 6452 1 2025-12-01 17:25:18.723 00:00:10.373 TCP 23.104.0.1:50020 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:25:42.469 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 17:25:42.285 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 17:26:08.146 00:00:10.941 TCP 1.101.0.1:3000 -> 22.102.0.1:35302 10 6452 1 2025-12-01 17:26:19.136 00:00:10.329 TCP 23.104.0.1:59280 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:27:09.134 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58490 10 6452 1 2025-12-01 17:27:19.506 00:00:10.368 TCP 23.104.0.1:54866 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:28:09.304 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:44816 10 6452 1 2025-12-01 17:28:19.913 00:00:10.363 TCP 23.104.0.1:59912 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:25:06.283 00:05:04.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 17:25:06.280 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 17:29:09.500 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33836 10 6452 1 2025-12-01 17:29:20.311 00:00:10.368 TCP 23.104.0.1:52864 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:30:09.666 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40852 10 6452 1 2025-12-01 17:30:20.717 00:00:10.359 TCP 23.104.0.1:59664 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:30:42.256 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 17:30:42.355 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 17:31:09.846 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49754 10 6452 1 2025-12-01 17:31:21.115 00:00:10.365 TCP 23.104.0.1:37542 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:32:10.083 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54090 10 6452 1 2025-12-01 17:32:21.520 00:00:10.358 TCP 23.104.0.1:52116 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:33:10.300 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34852 10 6452 1 2025-12-01 17:33:21.919 00:00:10.392 TCP 23.104.0.1:45874 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:34:10.509 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43070 10 6452 1 2025-12-01 17:34:22.349 00:00:10.375 TCP 23.104.0.1:60560 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:31:06.284 00:05:04.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 17:31:06.282 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 17:35:10.681 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50674 10 6452 1 2025-12-01 17:35:22.760 00:00:11.235 TCP 23.104.0.1:41030 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:35:42.486 00:00:00.019 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 17:35:42.167 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 17:36:10.891 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39470 10 6452 1 2025-12-01 17:36:24.032 00:00:10.362 TCP 23.104.0.1:58998 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:37:11.081 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42496 10 6452 1 2025-12-01 17:37:24.433 00:00:10.402 TCP 23.104.0.1:46318 -> 1.101.0.1:3000 15 1926 1 2025-12-01 17:38:11.251 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:35824 12 10369 1 2025-12-01 17:38:24.871 00:00:10.373 TCP 23.104.0.1:39720 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:39:11.491 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48460 10 6452 1 2025-12-01 17:39:25.286 00:00:10.366 TCP 23.104.0.1:59192 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:40:11.698 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53958 10 6452 1 2025-12-01 17:40:25.687 00:00:10.362 TCP 23.104.0.1:45276 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:40:42.685 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 17:40:42.552 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 17:37:06.285 00:05:04.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 17:37:06.289 00:05:04.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 17:41:11.913 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:55962 10 6452 1 2025-12-01 17:41:26.105 00:00:10.361 TCP 23.104.0.1:52292 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:42:12.121 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47642 10 6452 1 2025-12-01 17:42:26.505 00:00:10.322 TCP 23.104.0.1:35142 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:43:12.298 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33138 10 6452 1 2025-12-01 17:43:26.871 00:00:10.368 TCP 23.104.0.1:33902 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:44:12.515 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48216 10 6452 1 2025-12-01 17:44:27.288 00:00:10.364 TCP 23.104.0.1:36668 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:45:12.686 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51232 10 6452 1 2025-12-01 17:45:27.708 00:00:10.323 TCP 23.104.0.1:45018 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:45:42.781 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 17:45:42.598 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 17:46:12.904 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44174 10 6452 1 2025-12-01 17:46:28.093 00:00:10.370 TCP 23.104.0.1:33460 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:43:06.285 00:05:04.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 17:43:06.288 00:05:04.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 17:47:13.085 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47186 10 6452 1 2025-12-01 17:47:28.513 00:00:10.515 TCP 23.104.0.1:43408 -> 1.101.0.1:3000 17 2241 1 2025-12-01 17:48:13.300 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:52662 14 14292 1 2025-12-01 17:48:29.099 00:00:10.382 TCP 23.104.0.1:47634 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:49:13.566 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47418 10 6452 1 2025-12-01 17:49:29.530 00:00:10.333 TCP 23.104.0.1:42376 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:50:13.773 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44802 10 6452 1 2025-12-01 17:50:29.906 00:00:10.364 TCP 23.104.0.1:60510 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:50:42.993 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 17:50:42.853 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 17:51:13.991 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59666 10 6452 1 2025-12-01 17:51:30.308 00:00:10.365 TCP 23.104.0.1:48608 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:52:14.211 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33272 10 6452 1 2025-12-01 17:52:30.710 00:00:10.363 TCP 23.104.0.1:57224 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:49:06.287 00:05:04.809 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 17:49:06.288 00:05:04.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 17:53:14.436 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39140 10 6452 1 2025-12-01 17:53:31.115 00:00:10.363 TCP 23.104.0.1:55268 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:54:14.651 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59004 10 6452 1 2025-12-01 17:54:31.518 00:00:10.365 TCP 23.104.0.1:53810 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:55:14.859 00:00:10.834 TCP 1.101.0.1:3000 -> 22.102.0.1:47996 10 6452 1 2025-12-01 17:55:42.931 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 17:55:31.915 00:00:10.365 TCP 23.104.0.1:50716 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:55:43.119 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 17:56:15.731 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57324 10 6452 1 2025-12-01 17:56:32.321 00:00:10.364 TCP 23.104.0.1:40878 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:57:15.937 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:60116 10 6452 1 2025-12-01 17:57:32.732 00:00:10.369 TCP 23.104.0.1:50062 -> 1.101.0.1:3000 11 1507 1 2025-12-01 17:58:16.128 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47344 10 6452 1 2025-12-01 17:58:33.136 00:00:10.364 TCP 23.104.0.1:51788 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 515600, total packets: 1594, avg bps: 1080, avg pps: 0, avg bpp: 323 Time window: 2025-12-01 16:55:06 - 2025-12-01 17:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0023s Wall: 0.0037s flows/second: 44917.5 Runtime: 0.0037s