Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 05:58:57.796 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57974 10 6452 1 2025-12-03 05:55:06.950 00:05:04.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 05:55:06.955 00:05:04.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 05:59:20.548 00:00:10.369 TCP 23.104.0.1:60050 -> 1.101.0.1:3000 11 1507 1 2025-12-03 05:59:58.027 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33942 10 6452 1 2025-12-03 06:00:20.954 00:00:10.367 TCP 23.104.0.1:45030 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:00:58.255 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46546 10 6452 1 2025-12-03 06:01:26.412 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 06:01:26.364 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 06:01:21.360 00:00:10.367 TCP 23.104.0.1:43302 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:01:58.482 00:00:10.220 TCP 1.101.0.1:3000 -> 22.102.0.1:39082 10 6452 1 2025-12-03 06:02:21.763 00:00:10.366 TCP 23.104.0.1:39994 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:02:58.745 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:36202 12 10369 1 2025-12-03 06:03:22.168 00:00:10.439 TCP 23.104.0.1:49942 -> 1.101.0.1:3000 15 1926 1 2025-12-03 06:03:58.993 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43014 10 6452 1 2025-12-03 06:04:22.648 00:00:10.366 TCP 23.104.0.1:57130 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:04:59.223 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37290 10 6452 1 2025-12-03 06:01:06.959 00:05:04.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 06:01:06.957 00:05:04.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 06:05:23.066 00:00:10.368 TCP 23.104.0.1:37646 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:05:59.439 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50090 10 6452 1 2025-12-03 06:06:26.460 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 06:06:26.386 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 06:06:23.476 00:00:10.368 TCP 23.104.0.1:49056 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:06:59.653 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60590 10 6452 1 2025-12-03 06:07:23.879 00:00:10.339 TCP 23.104.0.1:51016 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:07:59.874 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57922 12 10375 1 2025-12-03 06:08:24.267 00:00:10.401 TCP 23.104.0.1:35432 -> 1.101.0.1:3000 15 1926 1 2025-12-03 06:09:00.086 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37700 10 6452 1 2025-12-03 06:09:24.706 00:00:10.324 TCP 23.104.0.1:51510 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:10:00.296 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44152 10 6452 1 2025-12-03 06:10:25.098 00:00:10.363 TCP 23.104.0.1:60942 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:07:06.961 00:05:04.840 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 06:11:00.515 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44388 10 6452 1 2025-12-03 06:07:06.958 00:05:04.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 06:11:26.457 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 06:11:26.376 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 06:11:25.496 00:00:10.369 TCP 23.104.0.1:46462 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:12:00.732 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39226 10 6452 1 2025-12-03 06:12:25.905 00:00:10.369 TCP 23.104.0.1:44792 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:13:00.947 00:00:10.689 TCP 1.101.0.1:3000 -> 22.102.0.1:46162 10 6452 1 2025-12-03 06:13:26.315 00:00:10.325 TCP 23.104.0.1:56190 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:14:01.676 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51126 10 6452 1 2025-12-03 06:14:26.679 00:00:10.368 TCP 23.104.0.1:37478 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:15:01.903 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:50006 10 6452 1 2025-12-03 06:15:27.106 00:00:10.365 TCP 23.104.0.1:46774 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:16:02.161 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34774 10 6452 1 2025-12-03 06:16:26.650 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 06:16:26.639 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 06:16:27.511 00:00:10.369 TCP 23.104.0.1:41322 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:13:06.961 00:05:04.841 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 06:17:02.379 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41644 10 6452 1 2025-12-03 06:13:06.958 00:05:04.846 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 06:17:27.915 00:00:10.355 TCP 23.104.0.1:54030 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:18:02.599 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60786 10 6452 1 2025-12-03 06:18:28.310 00:00:10.367 TCP 23.104.0.1:36244 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:19:02.821 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47088 10 6452 1 2025-12-03 06:19:28.713 00:00:10.359 TCP 23.104.0.1:57458 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:20:03.042 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48450 10 6452 1 2025-12-03 06:20:29.116 00:00:10.363 TCP 23.104.0.1:54948 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:21:03.264 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41528 10 6452 1 2025-12-03 06:21:26.697 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 06:21:26.627 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 06:21:29.521 00:00:10.370 TCP 23.104.0.1:49926 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:22:03.438 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55718 10 6452 1 2025-12-03 06:22:29.924 00:00:10.383 TCP 23.104.0.1:51858 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:19:06.965 00:05:04.839 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 06:23:03.649 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37736 10 6452 1 2025-12-03 06:19:06.963 00:05:04.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 06:23:30.348 00:00:10.373 TCP 23.104.0.1:56002 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:24:03.861 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:49206 10 6452 1 2025-12-03 06:24:30.769 00:00:10.371 TCP 23.104.0.1:43190 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:25:04.102 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60318 10 6452 1 2025-12-03 06:25:31.182 00:00:10.324 TCP 23.104.0.1:58116 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:26:04.327 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36242 10 6452 1 2025-12-03 06:26:26.870 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 06:26:26.867 00:00:00.013 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 06:26:31.546 00:00:10.371 TCP 23.104.0.1:51614 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:27:04.543 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:32796 10 6452 1 2025-12-03 06:27:31.950 00:00:10.326 TCP 23.104.0.1:36266 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:28:04.771 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48736 10 6452 1 2025-12-03 06:28:32.312 00:00:10.362 TCP 23.104.0.1:42346 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:25:06.963 00:05:04.844 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 06:25:06.966 00:05:04.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 06:29:04.980 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59854 10 6452 1 2025-12-03 06:29:32.713 00:00:10.369 TCP 23.104.0.1:40422 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:30:05.212 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38554 10 6452 1 2025-12-03 06:30:33.122 00:00:10.370 TCP 23.104.0.1:42346 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:31:05.428 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56586 10 6452 1 2025-12-03 06:31:27.230 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 06:31:27.178 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 06:31:33.529 00:00:10.324 TCP 23.104.0.1:60098 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:32:05.640 00:00:10.835 TCP 1.101.0.1:3000 -> 22.102.0.1:49732 10 6452 1 2025-12-03 06:32:33.891 00:00:10.370 TCP 23.104.0.1:35806 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:33:06.515 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38004 10 6452 1 2025-12-03 06:33:34.305 00:00:10.372 TCP 23.104.0.1:59548 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:34:06.739 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56954 10 6452 1 2025-12-03 06:34:34.715 00:00:10.376 TCP 23.104.0.1:50962 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:31:06.967 00:05:04.838 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 06:31:06.965 00:05:04.843 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 06:35:06.948 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37950 10 6452 1 2025-12-03 06:35:35.131 00:00:10.364 TCP 23.104.0.1:32992 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:36:07.177 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56474 10 6452 1 2025-12-03 06:36:26.815 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 06:36:27.038 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 06:36:35.532 00:00:10.375 TCP 23.104.0.1:42762 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:37:07.390 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41042 10 6452 1 2025-12-03 06:37:35.945 00:00:10.371 TCP 23.104.0.1:53320 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:38:07.600 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58856 10 6452 1 2025-12-03 06:38:36.357 00:00:10.364 TCP 23.104.0.1:38418 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:39:07.827 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55024 10 6452 1 2025-12-03 06:39:36.762 00:00:10.379 TCP 23.104.0.1:37976 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:40:08.004 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53618 10 6452 1 2025-12-03 06:40:37.183 00:00:10.361 TCP 23.104.0.1:59210 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:37:06.966 00:05:04.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 06:37:06.968 00:05:04.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 06:41:08.229 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35402 10 6452 1 2025-12-03 06:41:26.974 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 06:41:26.919 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 06:41:37.583 00:00:10.385 TCP 23.104.0.1:55670 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:42:08.445 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57768 10 6452 1 2025-12-03 06:42:37.997 00:00:10.369 TCP 23.104.0.1:54980 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:43:08.656 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38550 10 6452 1 2025-12-03 06:43:38.413 00:00:10.365 TCP 23.104.0.1:42510 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:44:08.877 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34128 10 6452 1 2025-12-03 06:44:38.815 00:00:10.376 TCP 23.104.0.1:37712 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:45:09.107 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54660 10 6452 1 2025-12-03 06:45:39.224 00:00:10.363 TCP 23.104.0.1:48814 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:46:09.316 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59152 10 6452 1 2025-12-03 06:46:27.233 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 06:46:27.200 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 06:46:39.628 00:00:10.365 TCP 23.104.0.1:34656 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:43:06.974 00:05:04.842 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 06:43:06.970 00:05:04.847 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 06:47:09.531 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57682 10 6452 1 2025-12-03 06:47:40.035 00:00:10.360 TCP 23.104.0.1:35192 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:48:09.749 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48724 10 6452 1 2025-12-03 06:48:40.436 00:00:10.374 TCP 23.104.0.1:60320 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:49:09.917 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56874 10 6452 1 2025-12-03 06:49:40.847 00:00:10.382 TCP 23.104.0.1:33034 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:50:10.133 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35306 10 6452 1 2025-12-03 06:50:41.264 00:00:10.364 TCP 23.104.0.1:52220 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:51:10.344 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41502 10 6452 1 2025-12-03 06:51:27.060 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 06:51:27.409 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 06:51:41.665 00:00:12.484 TCP 23.104.0.1:35634 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:52:10.559 00:00:15.529 TCP 1.101.0.1:3000 -> 22.102.0.1:44566 10 6452 1 2025-12-03 06:52:44.181 00:00:10.358 TCP 23.104.0.1:53242 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:49:06.974 00:05:04.843 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 06:49:06.972 00:05:04.848 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 06:53:16.132 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42908 10 6452 1 2025-12-03 06:53:44.580 00:00:10.365 TCP 23.104.0.1:47708 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:54:16.343 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38708 10 6452 1 2025-12-03 06:54:44.986 00:00:10.368 TCP 23.104.0.1:49236 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:55:16.556 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37786 10 6452 1 2025-12-03 06:55:45.397 00:00:10.361 TCP 23.104.0.1:50342 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:56:16.767 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47854 10 6452 1 2025-12-03 06:56:27.141 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 06:56:27.366 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 06:56:45.798 00:00:10.369 TCP 23.104.0.1:47330 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:57:16.983 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:35914 10 6452 1 2025-12-03 06:57:46.206 00:00:10.329 TCP 23.104.0.1:56142 -> 1.101.0.1:3000 11 1507 1 2025-12-03 06:58:17.221 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47352 10 6452 1 Summary: total flows: 163, total bytes: 505519, total packets: 1573, avg bps: 1064, avg pps: 0, avg bpp: 321 Time window: 2025-12-03 05:55:06 - 2025-12-03 06:58:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0050s User: 0.0010s Wall: 0.0017s flows/second: 95886.6 Runtime: 0.0017s