Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 20:58:50.177 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:53290 10 6452 1 2025-12-02 20:55:06.808 00:05:04.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 20:55:06.804 00:05:04.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 20:59:25.362 00:00:10.329 TCP 23.104.0.1:39008 -> 1.101.0.1:3000 11 1507 1 2025-12-02 20:59:50.392 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57706 10 6452 1 2025-12-02 21:00:25.728 00:00:10.375 TCP 23.104.0.1:43672 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:00:50.605 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41592 10 6452 1 2025-12-02 21:01:15.395 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 21:01:15.520 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 21:01:26.137 00:00:10.371 TCP 23.104.0.1:47442 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:01:50.819 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49230 10 6452 1 2025-12-02 21:02:26.543 00:00:10.366 TCP 23.104.0.1:50868 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:02:51.069 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:53290 12 10375 1 2025-12-02 21:03:26.954 00:00:10.410 TCP 23.104.0.1:49102 -> 1.101.0.1:3000 15 1926 1 2025-12-02 21:03:51.315 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48202 10 6452 1 2025-12-02 21:04:27.412 00:00:10.367 TCP 23.104.0.1:60762 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:04:51.533 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57138 10 6452 1 2025-12-02 21:01:06.807 00:05:04.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 21:01:06.811 00:05:04.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 21:05:27.816 00:00:10.374 TCP 23.104.0.1:36512 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:05:51.759 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45734 10 6452 1 2025-12-02 21:06:15.439 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 21:06:15.393 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 21:06:28.224 00:00:10.580 TCP 23.104.0.1:49874 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:06:51.972 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:37614 10 6452 1 2025-12-02 21:07:28.843 00:00:10.384 TCP 23.104.0.1:43364 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:07:52.208 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43206 10 6452 1 2025-12-02 21:08:29.268 00:00:10.359 TCP 23.104.0.1:32956 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:08:52.421 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44912 10 6452 1 2025-12-02 21:09:29.676 00:00:10.379 TCP 23.104.0.1:48040 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:09:52.595 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38026 10 6452 1 2025-12-02 21:10:30.107 00:00:10.367 TCP 23.104.0.1:38702 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:10:52.819 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41556 10 6452 1 2025-12-02 21:07:06.812 00:05:04.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 21:11:15.744 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 21:11:15.685 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 21:07:06.809 00:05:04.790 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 21:11:30.511 00:00:10.369 TCP 23.104.0.1:46940 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:11:53.059 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33712 10 6452 1 2025-12-02 21:12:30.924 00:00:10.998 TCP 23.104.0.1:55432 -> 1.101.0.1:3000 15 1926 1 2025-12-02 21:12:53.284 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:40930 12 10375 1 2025-12-02 21:13:31.961 00:00:10.365 TCP 23.104.0.1:47662 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:13:53.529 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57726 10 6452 1 2025-12-02 21:14:32.365 00:00:10.362 TCP 23.104.0.1:44642 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:14:53.741 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56046 10 6452 1 2025-12-02 21:15:32.763 00:00:10.381 TCP 23.104.0.1:50918 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:15:53.953 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56030 10 6452 1 2025-12-02 21:16:15.973 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 21:16:15.918 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 21:16:33.184 00:00:10.323 TCP 23.104.0.1:40696 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:16:54.164 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37086 10 6452 1 2025-12-02 21:13:06.812 00:05:04.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 21:13:06.816 00:05:04.784 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 21:17:33.547 00:00:10.320 TCP 23.104.0.1:51246 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:17:54.383 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53258 10 6452 1 2025-12-02 21:18:33.911 00:00:10.361 TCP 23.104.0.1:39844 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:18:54.600 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52196 10 6452 1 2025-12-02 21:19:34.311 00:00:10.324 TCP 23.104.0.1:60484 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:19:54.818 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39756 10 6452 1 2025-12-02 21:20:34.674 00:00:10.366 TCP 23.104.0.1:43810 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:20:54.994 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53450 10 6452 1 2025-12-02 21:21:15.820 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 21:21:15.820 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 21:21:35.106 00:00:10.770 TCP 23.104.0.1:56770 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:21:55.224 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49094 10 6452 1 2025-12-02 21:22:35.916 00:00:10.384 TCP 23.104.0.1:45638 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:22:55.439 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:55974 10 6452 1 2025-12-02 21:19:06.816 00:05:04.783 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 21:19:06.813 00:05:04.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 21:23:36.342 00:00:10.366 TCP 23.104.0.1:51054 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:23:55.605 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60898 10 6452 1 2025-12-02 21:24:36.745 00:00:10.395 TCP 23.104.0.1:35422 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:24:55.824 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59426 10 6452 1 2025-12-02 21:25:37.181 00:00:10.366 TCP 23.104.0.1:47812 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:25:56.042 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40020 10 6452 1 2025-12-02 21:26:15.953 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 21:26:16.051 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 21:26:37.582 00:00:10.332 TCP 23.104.0.1:57118 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:26:56.251 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:50832 10 6452 1 2025-12-02 21:27:37.951 00:00:10.333 TCP 23.104.0.1:45128 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:27:56.430 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56004 10 6452 1 2025-12-02 21:28:38.320 00:00:10.366 TCP 23.104.0.1:38796 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:28:56.644 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35670 10 6452 1 2025-12-02 21:25:06.817 00:05:04.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 21:25:06.814 00:05:04.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 21:29:38.722 00:00:10.377 TCP 23.104.0.1:58042 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:29:56.818 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59046 10 6452 1 2025-12-02 21:30:39.137 00:00:10.360 TCP 23.104.0.1:53312 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:30:56.994 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37858 10 6452 1 2025-12-02 21:31:16.197 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 21:31:16.036 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 21:31:39.535 00:00:10.368 TCP 23.104.0.1:44798 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:31:57.219 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46236 10 6452 1 2025-12-02 21:32:39.940 00:00:10.381 TCP 23.104.0.1:52808 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:32:57.433 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44408 10 6452 1 2025-12-02 21:33:40.363 00:00:10.375 TCP 23.104.0.1:59110 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:33:57.640 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52762 10 6452 1 2025-12-02 21:34:40.777 00:00:10.369 TCP 23.104.0.1:44848 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:31:06.817 00:05:04.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 21:34:57.858 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50954 10 6452 1 2025-12-02 21:31:06.820 00:05:04.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 21:35:41.187 00:00:10.366 TCP 23.104.0.1:44504 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:35:58.089 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35024 10 6452 1 2025-12-02 21:36:16.175 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 21:36:16.201 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 21:36:41.589 00:00:10.328 TCP 23.104.0.1:55934 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:36:58.303 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59400 10 6452 1 2025-12-02 21:37:41.950 00:00:10.368 TCP 23.104.0.1:46564 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:37:58.517 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34128 10 6452 1 2025-12-02 21:38:42.355 00:00:10.321 TCP 23.104.0.1:46764 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:38:58.722 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37440 10 6452 1 2025-12-02 21:39:42.715 00:00:10.377 TCP 23.104.0.1:47204 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:39:58.947 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42878 10 6452 1 2025-12-02 21:40:43.136 00:00:10.365 TCP 23.104.0.1:40668 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:40:59.177 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59266 10 6452 1 2025-12-02 21:41:16.481 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 21:37:06.819 00:05:04.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 21:37:06.821 00:05:04.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 21:41:16.546 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 21:41:43.542 00:00:10.368 TCP 23.104.0.1:57456 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:41:59.386 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54242 10 6452 1 2025-12-02 21:42:43.952 00:00:10.365 TCP 23.104.0.1:50002 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:42:59.559 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46324 10 6452 1 2025-12-02 21:43:44.354 00:00:10.369 TCP 23.104.0.1:38282 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:43:59.768 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39400 10 6452 1 2025-12-02 21:44:44.764 00:00:10.368 TCP 23.104.0.1:40012 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:44:59.981 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:52396 10 6452 1 2025-12-02 21:45:45.166 00:00:10.362 TCP 23.104.0.1:43610 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:46:00.230 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58222 10 6452 1 2025-12-02 21:46:16.460 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 21:46:16.531 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 21:46:45.570 00:00:10.362 TCP 23.104.0.1:43598 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:47:00.441 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37322 10 6452 1 2025-12-02 21:43:06.821 00:05:04.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 21:43:06.823 00:05:04.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 21:47:45.965 00:00:10.329 TCP 23.104.0.1:44074 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:48:00.656 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43138 10 6452 1 2025-12-02 21:48:46.328 00:00:10.365 TCP 23.104.0.1:36902 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:49:00.865 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:48152 10 6452 1 2025-12-02 21:49:46.732 00:00:10.369 TCP 23.104.0.1:34682 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:50:01.119 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37800 10 6452 1 2025-12-02 21:50:47.139 00:00:10.366 TCP 23.104.0.1:42200 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:51:01.343 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49478 10 6452 1 2025-12-02 21:51:16.447 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 21:51:16.557 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 21:51:47.548 00:00:10.364 TCP 23.104.0.1:60882 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:52:01.559 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48262 10 6452 1 2025-12-02 21:52:47.950 00:00:10.369 TCP 23.104.0.1:38680 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:49:06.824 00:05:04.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 21:53:01.741 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40218 10 6452 1 2025-12-02 21:49:06.820 00:05:04.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 21:53:48.354 00:00:10.368 TCP 23.104.0.1:36280 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:54:01.949 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49998 10 6452 1 2025-12-02 21:54:48.753 00:00:10.479 TCP 23.104.0.1:33082 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:55:02.170 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56220 10 6452 1 2025-12-02 21:55:49.278 00:00:10.370 TCP 23.104.0.1:53914 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:56:16.773 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 21:56:02.405 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47202 10 6452 1 2025-12-02 21:56:16.446 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 21:56:49.687 00:00:10.367 TCP 23.104.0.1:52210 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:57:02.624 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44458 10 6452 1 2025-12-02 21:57:50.101 00:00:10.365 TCP 23.104.0.1:60788 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:58:02.834 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39114 10 6452 1 Summary: total flows: 163, total bytes: 505525, total packets: 1573, avg bps: 1068, avg pps: 0, avg bpp: 321 Time window: 2025-12-02 20:55:06 - 2025-12-02 21:58:13 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0038s Wall: 0.0020s flows/second: 79942.9 Runtime: 0.0021s