Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 21:55:06.374 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 21:55:06.372 00:05:04.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 21:59:14.348 00:00:10.322 TCP 23.104.0.1:36208 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:59:17.754 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58318 10 6452 1 2025-12-01 22:00:14.710 00:00:10.388 TCP 23.104.0.1:40132 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:00:17.975 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:42170 10 6452 1 2025-12-01 22:00:47.566 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 22:00:47.546 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:01:15.139 00:00:10.363 TCP 23.104.0.1:37396 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:01:18.207 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35316 10 6452 1 2025-12-01 22:02:15.542 00:00:10.366 TCP 23.104.0.1:32934 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:02:18.412 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:44286 10 6452 1 2025-12-01 22:03:15.950 00:00:10.375 TCP 23.104.0.1:60376 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:03:18.585 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47722 10 6452 1 2025-12-01 22:04:16.361 00:00:10.366 TCP 23.104.0.1:48746 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:04:18.797 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59182 12 6556 1 2025-12-01 22:01:06.380 00:05:04.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 22:01:06.377 00:05:04.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 22:05:16.767 00:00:10.367 TCP 23.104.0.1:57100 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:05:19.013 00:00:19.203 TCP 1.101.0.1:3000 -> 22.102.0.1:38852 10 6452 1 2025-12-01 22:05:47.930 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:05:47.899 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 22:06:17.173 00:00:10.364 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:06:28.264 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43456 10 6452 1 2025-12-01 22:07:17.572 00:00:10.365 TCP 23.104.0.1:48478 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:07:28.491 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52904 10 6452 1 2025-12-01 22:08:17.987 00:00:10.367 TCP 23.104.0.1:34792 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:08:28.722 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34558 10 6452 1 2025-12-01 22:09:18.394 00:00:13.788 TCP 23.104.0.1:37710 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:09:28.935 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:53856 10 6452 1 2025-12-01 22:10:22.224 00:00:10.321 TCP 23.104.0.1:59480 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:10:29.138 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52088 10 6452 1 2025-12-01 22:10:47.992 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 22:10:47.948 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:07:06.381 00:05:04.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 22:07:06.378 00:05:04.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 22:11:22.587 00:00:10.359 TCP 23.104.0.1:50986 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:11:29.354 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40342 10 6452 1 2025-12-01 22:12:22.984 00:00:10.376 TCP 23.104.0.1:41224 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:12:29.570 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55778 10 6452 1 2025-12-01 22:13:23.398 00:00:11.070 TCP 23.104.0.1:36258 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:13:29.784 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56008 10 6452 1 2025-12-01 22:14:24.508 00:00:10.366 TCP 23.104.0.1:38156 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:14:30.003 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36856 10 6452 1 2025-12-01 22:15:24.917 00:00:10.372 TCP 23.104.0.1:42902 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:15:30.226 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33942 10 6452 1 2025-12-01 22:15:48.194 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:15:48.322 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 22:16:25.328 00:00:10.364 TCP 23.104.0.1:44896 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:16:30.437 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43256 10 6452 1 2025-12-01 22:13:06.383 00:05:04.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 22:13:06.385 00:05:04.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 22:17:25.729 00:00:10.373 TCP 23.104.0.1:59650 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:17:30.653 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:32814 10 6452 1 2025-12-01 22:18:26.141 00:00:10.363 TCP 23.104.0.1:55612 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:18:30.871 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:55830 10 6452 1 2025-12-01 22:19:26.546 00:00:10.366 TCP 23.104.0.1:38640 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:19:31.078 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47614 10 6452 1 2025-12-01 22:20:31.292 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34438 10 6452 1 2025-12-01 22:20:26.956 00:00:10.364 TCP 23.104.0.1:47350 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:20:48.131 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 22:20:47.891 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:21:31.508 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43712 10 6452 1 2025-12-01 22:21:27.361 00:00:10.363 TCP 23.104.0.1:54794 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:22:31.719 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42860 10 6452 1 2025-12-01 22:22:27.772 00:00:10.364 TCP 23.104.0.1:55410 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:19:06.382 00:05:04.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 22:19:06.385 00:05:04.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 22:23:28.202 00:00:10.361 TCP 23.104.0.1:41888 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:23:31.933 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:32964 10 6452 1 2025-12-01 22:24:28.603 00:00:10.363 TCP 23.104.0.1:37804 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:24:32.183 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34150 10 6452 1 2025-12-01 22:25:29.008 00:00:10.365 TCP 23.104.0.1:41134 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:25:32.409 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60832 10 6452 1 2025-12-01 22:25:48.502 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:25:48.275 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 22:26:29.415 00:00:10.365 TCP 23.104.0.1:50498 -> 1.101.0.1:3000 12 1559 1 2025-12-01 22:26:32.637 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39848 10 6452 1 2025-12-01 22:27:29.823 00:00:10.360 TCP 23.104.0.1:44116 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:27:32.846 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49460 10 6452 1 2025-12-01 22:28:30.226 00:00:10.364 TCP 23.104.0.1:47590 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:28:33.085 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36092 10 6452 1 2025-12-01 22:25:06.383 00:05:04.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 22:25:06.386 00:05:04.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 22:29:30.631 00:00:10.364 TCP 23.104.0.1:45590 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:29:33.315 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41080 10 6452 1 2025-12-01 22:30:31.037 00:00:10.330 TCP 23.104.0.1:39058 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:30:33.533 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47910 10 6452 1 2025-12-01 22:30:48.459 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:30:48.239 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 22:31:31.400 00:00:10.327 TCP 23.104.0.1:48908 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:31:33.758 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45032 10 6452 1 2025-12-01 22:32:33.986 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:47692 10 6452 1 2025-12-01 22:32:31.769 00:00:10.373 TCP 23.104.0.1:51182 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:33:34.224 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50414 10 6452 1 2025-12-01 22:33:32.181 00:00:10.364 TCP 23.104.0.1:47000 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:34:32.581 00:00:10.366 TCP 23.104.0.1:34028 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:34:34.441 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40108 10 6452 1 2025-12-01 22:31:06.388 00:05:04.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 22:31:06.385 00:05:04.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 22:35:34.649 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41426 10 6452 1 2025-12-01 22:35:48.679 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 22:35:32.985 00:00:10.363 TCP 23.104.0.1:51738 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:35:48.596 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:36:34.820 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34960 10 6452 1 2025-12-01 22:36:33.386 00:00:10.330 TCP 23.104.0.1:54968 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:37:35.070 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34886 10 6452 1 2025-12-01 22:37:33.757 00:00:10.386 TCP 23.104.0.1:57996 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:38:34.181 00:00:10.373 TCP 23.104.0.1:36620 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:38:35.281 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:46996 11 6504 1 2025-12-01 22:39:35.559 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:33896 10 6452 1 2025-12-01 22:39:34.587 00:00:10.884 TCP 23.104.0.1:44834 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:40:35.746 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42648 10 6452 1 2025-12-01 22:40:35.511 00:00:10.372 TCP 23.104.0.1:58936 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:40:48.664 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:40:48.648 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 22:37:06.388 00:05:04.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 22:37:06.391 00:05:04.785 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 22:41:35.961 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:38174 10 6452 1 2025-12-01 22:41:35.920 00:00:10.392 TCP 23.104.0.1:43846 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:42:36.195 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57602 10 6452 1 2025-12-01 22:42:36.350 00:00:10.326 TCP 23.104.0.1:51134 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:43:36.406 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37660 10 6452 1 2025-12-01 22:43:36.709 00:00:10.362 TCP 23.104.0.1:58814 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:44:36.620 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58500 10 6452 1 2025-12-01 22:44:37.112 00:00:10.364 TCP 23.104.0.1:56916 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:45:36.838 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36490 10 6452 1 2025-12-01 22:45:48.472 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 22:45:48.491 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:45:37.512 00:00:10.365 TCP 23.104.0.1:44998 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:46:37.076 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53954 10 6452 1 2025-12-01 22:46:37.915 00:00:10.369 TCP 23.104.0.1:39588 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:43:06.391 00:05:04.786 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 22:43:06.388 00:05:04.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 22:47:37.296 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36366 10 6452 1 2025-12-01 22:47:38.321 00:00:10.418 TCP 23.104.0.1:51290 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:48:38.783 00:00:10.365 TCP 23.104.0.1:47948 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:48:37.470 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51162 10 6452 1 2025-12-01 22:49:37.686 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48766 10 6452 1 2025-12-01 22:49:39.187 00:00:10.323 TCP 23.104.0.1:56062 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:50:48.742 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:50:39.554 00:00:10.361 TCP 23.104.0.1:60790 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:50:37.903 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:47850 10 6452 1 2025-12-01 22:50:48.871 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 22:51:38.088 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47524 10 6452 1 2025-12-01 22:51:39.954 00:00:10.367 TCP 23.104.0.1:43050 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:52:38.299 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46240 10 6452 1 2025-12-01 22:52:40.366 00:00:10.369 TCP 23.104.0.1:51274 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:49:06.393 00:05:04.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 22:49:06.390 00:05:04.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 22:53:40.774 00:00:10.368 TCP 23.104.0.1:56210 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:53:38.519 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36070 10 6452 1 2025-12-01 22:54:41.182 00:00:10.371 TCP 23.104.0.1:41050 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:54:38.749 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36090 10 6452 1 2025-12-01 22:55:41.590 00:00:10.391 TCP 23.104.0.1:40802 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:55:48.977 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 22:55:38.974 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53774 10 6452 1 2025-12-01 22:55:48.769 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 22:56:39.206 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39800 10 6452 1 2025-12-01 22:56:42.059 00:00:10.369 TCP 23.104.0.1:56850 -> 1.101.0.1:3000 11 1507 1 2025-12-01 22:57:39.424 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:48698 12 10375 1 2025-12-01 22:57:42.466 00:00:10.448 TCP 23.104.0.1:59392 -> 1.101.0.1:3000 15 1926 1 2025-12-01 22:58:39.664 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45528 10 6452 1 Summary: total flows: 163, total bytes: 501391, total packets: 1571, avg bps: 1049, avg pps: 0, avg bpp: 319 Time window: 2025-12-01 21:55:06 - 2025-12-01 22:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0053s User: 0.0008s Wall: 0.0022s flows/second: 75393.9 Runtime: 0.0022s