Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 20:55:07.244 00:05:04.908 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 20:55:07.247 00:05:04.903 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 20:59:11.674 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43218 10 6452 1 2025-12-03 20:59:14.525 00:00:10.368 TCP 23.104.0.1:58258 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:00:14.928 00:00:10.349 TCP 23.104.0.1:38546 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:00:11.888 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48416 10 6452 1 2025-12-03 21:01:12.111 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48064 10 6452 1 2025-12-03 21:01:15.318 00:00:10.365 TCP 23.104.0.1:34736 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:01:44.172 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 21:01:44.436 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 21:02:12.325 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42574 10 6452 1 2025-12-03 21:02:15.717 00:00:10.373 TCP 23.104.0.1:53226 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:03:12.497 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59750 10 6452 1 2025-12-03 21:03:16.126 00:00:10.373 TCP 23.104.0.1:51870 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:04:16.534 00:00:10.372 TCP 23.104.0.1:45638 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:04:12.723 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54156 10 6452 1 2025-12-03 21:01:07.247 00:05:04.904 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 21:01:07.245 00:05:04.909 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 21:05:12.939 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:53320 10 6452 1 2025-12-03 21:05:16.948 00:00:10.369 TCP 23.104.0.1:42614 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:06:13.174 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51236 10 6452 1 2025-12-03 21:06:17.360 00:00:10.364 TCP 23.104.0.1:52536 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:06:44.169 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 21:06:44.427 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 21:07:13.391 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45190 10 6452 1 2025-12-03 21:07:17.768 00:00:10.375 TCP 23.104.0.1:57972 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:08:13.610 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39046 10 6452 1 2025-12-03 21:08:18.179 00:00:10.654 TCP 23.104.0.1:40094 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:09:13.828 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37342 10 6452 1 2025-12-03 21:09:18.874 00:00:10.363 TCP 23.104.0.1:34950 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:10:14.077 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56318 10 6452 1 2025-12-03 21:10:19.278 00:00:10.361 TCP 23.104.0.1:40436 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:07:07.252 00:05:04.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 21:07:07.255 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 21:11:14.291 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39248 10 6452 1 2025-12-03 21:11:19.677 00:00:10.323 TCP 23.104.0.1:58970 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:11:44.938 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 21:11:44.724 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 21:12:14.529 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44242 10 6452 1 2025-12-03 21:12:20.055 00:00:10.362 TCP 23.104.0.1:44966 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:13:14.744 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54830 10 6452 1 2025-12-03 21:13:20.455 00:00:10.326 TCP 23.104.0.1:60122 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:14:14.981 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39396 10 6452 1 2025-12-03 21:14:20.821 00:00:10.369 TCP 23.104.0.1:51264 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:15:15.214 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41668 11 6504 1 2025-12-03 21:15:21.220 00:00:10.380 TCP 23.104.0.1:46528 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:16:15.442 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41150 10 6452 1 2025-12-03 21:16:21.641 00:00:10.364 TCP 23.104.0.1:60350 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:16:44.654 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 21:16:44.779 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 21:13:07.256 00:05:04.899 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 21:13:07.254 00:05:04.904 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 21:17:15.664 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46524 10 6452 1 2025-12-03 21:17:22.043 00:00:10.373 TCP 23.104.0.1:35094 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:18:15.887 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47010 10 6452 1 2025-12-03 21:18:22.456 00:00:10.358 TCP 23.104.0.1:44030 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:19:16.114 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43964 10 6452 1 2025-12-03 21:19:22.856 00:00:10.397 TCP 23.104.0.1:46230 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:20:16.325 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37032 10 6452 1 2025-12-03 21:20:23.301 00:00:10.939 TCP 23.104.0.1:58788 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:21:16.537 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51120 10 6452 1 2025-12-03 21:21:24.300 00:00:10.325 TCP 23.104.0.1:54580 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:21:44.462 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 21:21:44.767 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 21:22:16.753 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47540 10 6452 1 2025-12-03 21:22:24.665 00:00:10.378 TCP 23.104.0.1:49900 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:19:07.261 00:05:04.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 21:19:07.263 00:05:04.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 21:23:16.976 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:56290 10 6452 1 2025-12-03 21:23:25.098 00:00:10.380 TCP 23.104.0.1:47182 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:24:17.206 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42298 10 6452 1 2025-12-03 21:24:25.503 00:00:10.371 TCP 23.104.0.1:50042 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:25:17.435 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37484 10 6452 1 2025-12-03 21:25:25.912 00:00:10.368 TCP 23.104.0.1:56442 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:26:17.670 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49534 10 6452 1 2025-12-03 21:26:26.329 00:00:10.482 TCP 23.104.0.1:35764 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:26:44.887 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 21:26:44.800 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 21:27:17.897 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:52346 10 6452 1 2025-12-03 21:27:26.849 00:00:10.387 TCP 23.104.0.1:50378 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:28:18.097 00:00:10.267 TCP 1.101.0.1:3000 -> 22.102.0.1:45448 10 6452 1 2025-12-03 21:28:27.268 00:00:10.326 TCP 23.104.0.1:45862 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:25:07.260 00:05:04.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 21:25:07.262 00:05:04.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 21:29:18.401 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33458 10 6452 1 2025-12-03 21:29:27.631 00:00:10.371 TCP 23.104.0.1:46384 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:30:18.621 00:00:10.614 TCP 1.101.0.1:3000 -> 22.102.0.1:48964 10 6452 1 2025-12-03 21:30:28.045 00:00:10.326 TCP 23.104.0.1:56800 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:31:19.273 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55532 10 6452 1 2025-12-03 21:31:28.414 00:00:10.373 TCP 23.104.0.1:58508 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:31:45.074 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 21:31:45.110 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 21:32:19.483 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42648 10 6452 1 2025-12-03 21:32:28.824 00:00:10.363 TCP 23.104.0.1:51492 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:33:19.699 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45786 10 6452 1 2025-12-03 21:33:29.223 00:00:10.371 TCP 23.104.0.1:49620 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:34:19.929 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:55314 10 6452 1 2025-12-03 21:34:29.634 00:00:10.363 TCP 23.104.0.1:51612 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:31:07.261 00:05:04.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 21:31:07.264 00:05:04.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 21:35:20.126 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34188 10 6452 1 2025-12-03 21:35:30.034 00:00:10.362 TCP 23.104.0.1:60094 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:36:20.342 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60544 10 6452 1 2025-12-03 21:36:30.439 00:00:10.323 TCP 23.104.0.1:49314 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:36:45.038 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 21:36:44.981 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 21:37:20.554 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36426 10 6452 1 2025-12-03 21:37:30.799 00:00:11.599 TCP 23.104.0.1:48856 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:38:20.764 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58862 10 6452 1 2025-12-03 21:38:32.432 00:00:10.360 TCP 23.104.0.1:58440 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:39:20.979 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:50384 10 6452 1 2025-12-03 21:39:32.834 00:00:10.384 TCP 23.104.0.1:57316 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:40:21.205 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60272 10 6452 1 2025-12-03 21:40:33.256 00:00:10.360 TCP 23.104.0.1:55574 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:37:07.266 00:05:04.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 21:37:07.263 00:05:04.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 21:41:21.428 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38400 10 6452 1 2025-12-03 21:41:45.219 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 21:41:45.076 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 21:41:33.657 00:00:10.364 TCP 23.104.0.1:56518 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:42:21.642 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49216 10 6452 1 2025-12-03 21:42:34.063 00:00:10.366 TCP 23.104.0.1:54014 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:43:21.855 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41388 10 6452 1 2025-12-03 21:43:34.472 00:00:10.346 TCP 23.104.0.1:40008 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:44:22.087 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39972 10 6452 1 2025-12-03 21:44:34.852 00:00:10.331 TCP 23.104.0.1:33872 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:45:22.303 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55388 10 6452 1 2025-12-03 21:45:35.220 00:00:10.363 TCP 23.104.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:46:22.521 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49528 10 6452 1 2025-12-03 21:46:45.238 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 21:46:45.095 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 21:46:35.622 00:00:10.368 TCP 23.104.0.1:44190 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:43:07.266 00:05:04.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 21:43:07.264 00:05:04.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 21:47:22.729 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43528 10 6452 1 2025-12-03 21:47:36.025 00:00:10.448 TCP 23.104.0.1:34734 -> 1.101.0.1:3000 15 1926 1 2025-12-03 21:48:22.904 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:40710 12 10369 1 2025-12-03 21:48:36.508 00:00:10.369 TCP 23.104.0.1:60244 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:49:23.145 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44420 10 6452 1 2025-12-03 21:49:36.918 00:00:10.335 TCP 23.104.0.1:44518 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:50:23.363 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59184 10 6452 1 2025-12-03 21:50:37.294 00:00:10.363 TCP 23.104.0.1:51050 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:51:23.532 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36852 10 6452 1 2025-12-03 21:51:45.209 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 21:51:45.595 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 21:51:37.695 00:00:10.363 TCP 23.104.0.1:33206 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:52:23.743 00:00:10.539 TCP 1.101.0.1:3000 -> 22.102.0.1:49600 10 6452 1 2025-12-03 21:52:38.111 00:00:10.362 TCP 23.104.0.1:35500 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:49:07.269 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-03 21:49:07.267 00:05:04.901 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-03 21:53:24.334 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56010 10 6452 1 2025-12-03 21:53:38.515 00:00:10.366 TCP 23.104.0.1:51416 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:54:24.545 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36822 10 6452 1 2025-12-03 21:54:38.916 00:00:10.333 TCP 23.104.0.1:38716 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:55:24.753 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40562 10 6452 1 2025-12-03 21:55:39.291 00:00:10.369 TCP 23.104.0.1:57414 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:56:24.967 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54482 10 6452 1 2025-12-03 21:56:45.442 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-03 21:56:45.563 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-03 21:56:39.698 00:00:10.368 TCP 23.104.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:57:25.151 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48458 10 6452 1 2025-12-03 21:57:40.123 00:00:10.369 TCP 23.104.0.1:46916 -> 1.101.0.1:3000 11 1507 1 2025-12-03 21:58:25.328 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57928 10 6452 1 2025-12-03 21:58:40.527 00:00:10.360 TCP 23.104.0.1:37308 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502736, total packets: 1579, avg bps: 1051, avg pps: 0, avg bpp: 318 Time window: 2025-12-03 20:55:07 - 2025-12-03 21:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0028s Wall: 0.0029s flows/second: 56628.5 Runtime: 0.0029s