Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-04 09:55:07.507 00:05:04.884 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 09:59:01.043 00:00:10.590 TCP 1.101.0.1:3000 -> 22.102.0.1:56322 10 6452 1 2025-12-04 09:55:07.504 00:05:04.890 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 09:59:16.129 00:00:10.363 TCP 23.104.0.1:36034 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:00:01.668 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33392 10 6452 1 2025-12-04 10:00:16.532 00:00:10.367 TCP 23.104.0.1:53582 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:01:01.882 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56016 10 6452 1 2025-12-04 10:01:16.932 00:00:10.379 TCP 23.104.0.1:50520 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:02:00.055 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 10:01:59.643 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 10:02:02.109 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59540 10 6452 1 2025-12-04 10:02:17.347 00:00:10.369 TCP 23.104.0.1:57154 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:03:02.319 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37848 10 6452 1 2025-12-04 10:03:17.755 00:00:10.343 TCP 23.104.0.1:51820 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:04:02.532 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53016 10 6452 1 2025-12-04 10:04:18.163 00:00:10.373 TCP 23.104.0.1:33856 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:01:07.508 00:05:04.886 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 10:05:02.749 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37286 10 6452 1 2025-12-04 10:01:07.506 00:05:04.891 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 10:05:18.574 00:00:10.364 TCP 23.104.0.1:58740 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:06:02.968 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34748 10 6452 1 2025-12-04 10:06:18.982 00:00:10.368 TCP 23.104.0.1:46950 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:07:00.216 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 10:06:59.874 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 10:07:03.202 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34928 10 6452 1 2025-12-04 10:07:19.389 00:00:10.370 TCP 23.104.0.1:57874 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:08:03.426 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35912 10 6452 1 2025-12-04 10:08:19.798 00:00:10.375 TCP 23.104.0.1:35956 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:09:03.644 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33148 10 6452 1 2025-12-04 10:09:20.203 00:00:10.389 TCP 23.104.0.1:56190 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:10:03.857 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38954 10 6452 1 2025-12-04 10:10:20.622 00:00:10.362 TCP 23.104.0.1:42672 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:07:07.510 00:05:04.885 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 10:11:04.083 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35392 10 6452 1 2025-12-04 10:07:07.507 00:05:04.890 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 10:11:21.026 00:00:10.365 TCP 23.104.0.1:40572 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:12:00.506 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 10:12:00.450 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 10:12:04.296 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43514 10 6452 1 2025-12-04 10:12:21.433 00:00:10.329 TCP 23.104.0.1:53904 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:13:04.504 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38618 10 6452 1 2025-12-04 10:13:21.802 00:00:10.370 TCP 23.104.0.1:52928 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:14:04.712 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49964 10 6452 1 2025-12-04 10:14:22.212 00:00:10.365 TCP 23.104.0.1:42816 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:15:04.920 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49616 10 6452 1 2025-12-04 10:15:22.614 00:00:10.365 TCP 23.104.0.1:32808 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:16:05.135 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40080 10 6452 1 2025-12-04 10:16:23.019 00:00:10.324 TCP 23.104.0.1:60480 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:17:00.166 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 10:17:00.016 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 10:13:07.512 00:05:04.884 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 10:17:05.360 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46192 10 6452 1 2025-12-04 10:13:07.510 00:05:04.889 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 10:17:23.391 00:00:10.361 TCP 23.104.0.1:45056 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:18:05.540 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52156 10 6452 1 2025-12-04 10:18:23.792 00:00:10.363 TCP 23.104.0.1:44880 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:19:05.772 00:00:10.610 TCP 1.101.0.1:3000 -> 22.102.0.1:48880 10 6452 1 2025-12-04 10:19:24.193 00:00:10.361 TCP 23.104.0.1:47002 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:20:06.420 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55212 10 6452 1 2025-12-04 10:20:24.594 00:00:10.371 TCP 23.104.0.1:56350 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:21:06.643 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:35994 10 6452 1 2025-12-04 10:21:25.002 00:00:10.364 TCP 23.104.0.1:50830 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:22:00.501 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 10:22:00.157 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 10:22:06.891 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35646 10 6452 1 2025-12-04 10:22:25.403 00:00:10.363 TCP 23.104.0.1:50266 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:19:07.511 00:05:04.888 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 10:19:07.515 00:05:04.883 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 10:23:07.113 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57434 10 6452 1 2025-12-04 10:23:25.806 00:00:10.362 TCP 23.104.0.1:57862 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:24:07.326 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45986 10 6452 1 2025-12-04 10:24:26.205 00:00:10.366 TCP 23.104.0.1:52102 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:25:07.496 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55292 10 6452 1 2025-12-04 10:25:26.612 00:00:10.368 TCP 23.104.0.1:52538 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:26:07.703 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57250 10 6452 1 2025-12-04 10:26:27.021 00:00:10.899 TCP 23.104.0.1:34658 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:27:00.382 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 10:27:00.479 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 10:27:07.923 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58496 10 6452 1 2025-12-04 10:27:27.959 00:00:10.358 TCP 23.104.0.1:47868 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:28:08.131 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34620 10 6452 1 2025-12-04 10:28:28.364 00:00:11.643 TCP 23.104.0.1:45244 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:25:07.513 00:05:04.887 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 10:25:07.517 00:05:04.882 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 10:29:08.335 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57998 10 6452 1 2025-12-04 10:29:30.060 00:00:10.364 TCP 23.104.0.1:45980 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:30:08.546 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40246 10 6452 1 2025-12-04 10:30:30.460 00:00:10.365 TCP 23.104.0.1:51894 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:31:08.760 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46148 10 6452 1 2025-12-04 10:31:30.863 00:00:10.371 TCP 23.104.0.1:33000 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:32:00.833 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 10:32:00.899 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 10:32:08.974 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:45938 10 6452 1 2025-12-04 10:32:31.267 00:00:10.363 TCP 23.104.0.1:60142 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:33:09.166 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34582 10 6452 1 2025-12-04 10:33:31.666 00:00:10.366 TCP 23.104.0.1:46090 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:34:09.382 00:00:10.413 TCP 1.101.0.1:3000 -> 22.102.0.1:44076 10 6452 1 2025-12-04 10:34:32.103 00:00:10.324 TCP 23.104.0.1:55640 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:31:07.515 00:05:04.888 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 10:31:07.518 00:05:04.882 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 10:35:09.835 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40220 10 6452 1 2025-12-04 10:35:32.464 00:00:10.413 TCP 23.104.0.1:46694 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:36:10.077 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57098 10 6452 1 2025-12-04 10:36:32.917 00:00:10.407 TCP 23.104.0.1:37746 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:37:00.611 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 10:37:00.455 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 10:37:10.299 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40254 10 6452 1 2025-12-04 10:37:33.371 00:00:10.369 TCP 23.104.0.1:47930 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:38:10.521 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46612 10 6452 1 2025-12-04 10:38:33.777 00:00:10.338 TCP 23.104.0.1:37762 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:39:10.746 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54010 10 6452 1 2025-12-04 10:39:34.155 00:00:10.378 TCP 23.104.0.1:53422 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:40:10.968 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45890 10 6452 1 2025-12-04 10:40:34.564 00:00:10.357 TCP 23.104.0.1:53828 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:37:07.520 00:05:04.882 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 10:37:07.516 00:05:04.887 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 10:41:11.193 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36846 10 6452 1 2025-12-04 10:41:34.959 00:00:10.376 TCP 23.104.0.1:38494 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:42:00.739 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 10:42:00.721 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 10:42:11.410 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59556 10 6452 1 2025-12-04 10:42:35.373 00:00:10.366 TCP 23.104.0.1:33080 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:43:11.624 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48446 10 6452 1 2025-12-04 10:43:35.782 00:00:10.374 TCP 23.104.0.1:38960 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:44:11.843 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41670 10 6452 1 2025-12-04 10:44:36.204 00:00:10.383 TCP 23.104.0.1:34654 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:45:12.080 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50364 10 6452 1 2025-12-04 10:45:36.623 00:00:10.318 TCP 23.104.0.1:57694 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:46:12.294 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40004 10 6452 1 2025-12-04 10:46:36.979 00:00:10.332 TCP 23.104.0.1:43096 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:47:00.815 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 10:47:00.849 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 10:43:07.516 00:05:04.890 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 10:43:07.520 00:05:04.885 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 10:47:12.509 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36634 10 6452 1 2025-12-04 10:47:37.351 00:00:10.367 TCP 23.104.0.1:43642 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:48:12.723 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42028 10 6452 1 2025-12-04 10:48:37.755 00:00:10.382 TCP 23.104.0.1:47414 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:49:12.932 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41426 10 6452 1 2025-12-04 10:49:38.177 00:00:10.365 TCP 23.104.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:50:13.167 00:00:10.372 TCP 1.101.0.1:3000 -> 22.102.0.1:53960 10 6452 1 2025-12-04 10:50:38.577 00:00:10.363 TCP 23.104.0.1:40072 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:51:13.578 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59572 10 6452 1 2025-12-04 10:51:38.980 00:00:10.364 TCP 23.104.0.1:59898 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:52:01.062 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 10:52:00.712 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 10:52:13.750 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41528 10 6452 1 2025-12-04 10:52:39.383 00:00:10.320 TCP 23.104.0.1:56440 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:49:07.521 00:05:04.887 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-04 10:49:07.519 00:05:04.892 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-04 10:53:13.968 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:39070 13 6608 1 2025-12-04 10:53:39.741 00:00:10.366 TCP 23.104.0.1:56160 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:54:14.166 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55960 10 6452 1 2025-12-04 10:54:40.144 00:00:10.364 TCP 23.104.0.1:38286 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:55:14.382 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38764 10 6452 1 2025-12-04 10:55:40.542 00:00:10.412 TCP 23.104.0.1:52730 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:56:14.591 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44602 10 6452 1 2025-12-04 10:56:41.000 00:00:10.371 TCP 23.104.0.1:40014 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:57:01.181 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-04 10:57:01.358 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-04 10:57:14.812 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:42580 10 6452 1 2025-12-04 10:57:41.403 00:00:10.369 TCP 23.104.0.1:48640 -> 1.101.0.1:3000 11 1507 1 2025-12-04 10:58:14.980 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:59146 10 6452 1 Summary: total flows: 163, total bytes: 496997, total packets: 1564, avg bps: 1046, avg pps: 0, avg bpp: 317 Time window: 2025-12-04 09:55:07 - 2025-12-04 10:58:25 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0046s User: 0.0012s Wall: 0.0022s flows/second: 75427.1 Runtime: 0.0022s