Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 07:58:58.725 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46386 10 6452 1 2025-12-05 07:55:07.899 00:05:04.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 07:55:07.898 00:05:04.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 07:59:17.516 00:00:10.372 TCP 23.104.0.1:40528 -> 1.101.0.1:3000 11 1507 1 2025-12-05 07:59:58.947 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41404 10 6452 1 2025-12-05 08:00:17.928 00:00:10.379 TCP 23.104.0.1:33618 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:00:59.178 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57820 10 6452 1 2025-12-05 08:01:18.343 00:00:10.330 TCP 23.104.0.1:43344 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:01:59.393 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:32890 10 6452 1 2025-12-05 08:02:26.346 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 08:02:26.192 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 08:02:18.713 00:00:10.383 TCP 23.104.0.1:36198 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:02:59.602 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53036 10 6452 1 2025-12-05 08:03:19.135 00:00:10.370 TCP 23.104.0.1:33566 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:03:59.812 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34868 10 6452 1 2025-12-05 08:04:19.544 00:00:10.365 TCP 23.104.0.1:56486 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:01:07.901 00:05:04.923 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 08:05:00.049 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43198 10 6452 1 2025-12-05 08:01:07.898 00:05:04.929 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 08:05:19.964 00:00:10.371 TCP 23.104.0.1:48556 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:06:00.261 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53290 10 6452 1 2025-12-05 08:06:20.374 00:00:10.359 TCP 23.104.0.1:46030 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:07:00.465 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48666 10 6452 1 2025-12-05 08:07:26.563 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 08:07:20.772 00:00:10.369 TCP 23.104.0.1:34086 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:07:27.026 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 08:08:00.682 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48170 10 6452 1 2025-12-05 08:08:21.199 00:00:10.587 TCP 23.104.0.1:36698 -> 1.101.0.1:3000 12 1559 1 2025-12-05 08:09:00.888 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40252 10 6452 1 2025-12-05 08:09:21.802 00:00:10.372 TCP 23.104.0.1:40724 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:10:01.109 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41934 10 6452 1 2025-12-05 08:10:22.208 00:00:10.362 TCP 23.104.0.1:37870 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:11:01.279 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:49554 10 6452 1 2025-12-05 08:07:07.903 00:05:04.922 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 08:07:07.900 00:05:04.928 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 08:11:22.610 00:00:10.361 TCP 23.104.0.1:56074 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:12:01.522 00:00:10.661 TCP 1.101.0.1:3000 -> 22.102.0.1:44042 10 6452 1 2025-12-05 08:12:26.614 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 08:12:26.443 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 08:12:23.012 00:00:10.362 TCP 23.104.0.1:60334 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:13:02.227 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42822 10 6452 1 2025-12-05 08:13:23.412 00:00:10.360 TCP 23.104.0.1:51406 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:14:02.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52708 10 6452 1 2025-12-05 08:14:23.817 00:00:10.324 TCP 23.104.0.1:44558 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:15:02.652 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:40818 10 6452 1 2025-12-05 08:15:24.182 00:00:10.364 TCP 23.104.0.1:54662 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:16:02.832 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45488 10 6452 1 2025-12-05 08:16:24.584 00:00:10.364 TCP 23.104.0.1:56914 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:17:03.078 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51802 10 6452 1 2025-12-05 08:13:07.901 00:05:04.927 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 08:13:07.903 00:05:04.922 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 08:17:26.906 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 08:17:26.498 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 08:17:24.987 00:00:10.370 TCP 23.104.0.1:36556 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:18:03.295 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49224 10 6452 1 2025-12-05 08:18:25.389 00:00:10.360 TCP 23.104.0.1:47562 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:19:03.466 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58942 10 6452 1 2025-12-05 08:19:25.790 00:00:10.575 TCP 23.104.0.1:47224 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:20:03.682 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55586 10 6452 1 2025-12-05 08:20:26.406 00:00:10.324 TCP 23.104.0.1:35220 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:21:03.889 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40468 10 6452 1 2025-12-05 08:21:26.767 00:00:10.372 TCP 23.104.0.1:47114 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:22:04.106 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53078 10 6452 1 2025-12-05 08:22:26.866 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 08:22:26.876 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 08:22:27.176 00:00:10.327 TCP 23.104.0.1:56338 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:19:07.903 00:05:04.927 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 08:23:04.319 00:00:10.380 TCP 1.101.0.1:3000 -> 22.102.0.1:43336 10 6452 1 2025-12-05 08:19:07.906 00:05:04.922 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 08:23:27.540 00:00:10.326 TCP 23.104.0.1:45228 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:24:04.736 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46536 10 6452 1 2025-12-05 08:24:27.909 00:00:10.364 TCP 23.104.0.1:50502 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:25:04.908 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45028 10 6452 1 2025-12-05 08:25:28.315 00:00:10.361 TCP 23.104.0.1:43528 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:26:05.121 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:40906 10 6452 1 2025-12-05 08:26:28.716 00:00:10.335 TCP 23.104.0.1:56572 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:27:05.293 00:00:10.369 TCP 1.101.0.1:3000 -> 22.102.0.1:44856 10 6452 1 2025-12-05 08:27:27.077 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 08:27:27.118 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 08:27:29.107 00:00:10.322 TCP 23.104.0.1:40466 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:28:05.702 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35620 10 6452 1 2025-12-05 08:28:29.472 00:00:10.363 TCP 23.104.0.1:42778 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:25:07.906 00:05:04.923 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 08:29:05.918 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34948 10 6452 1 2025-12-05 08:25:07.905 00:05:04.928 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 08:29:29.879 00:00:10.372 TCP 23.104.0.1:46012 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:30:06.127 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47608 10 6452 1 2025-12-05 08:30:30.289 00:00:10.373 TCP 23.104.0.1:54658 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:31:06.333 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55064 10 6452 1 2025-12-05 08:31:30.703 00:00:10.507 TCP 23.104.0.1:42560 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:32:06.556 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45738 10 6452 1 2025-12-05 08:32:26.994 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 08:32:27.139 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 08:32:31.252 00:00:10.329 TCP 23.104.0.1:40810 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:33:06.774 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43602 10 6452 1 2025-12-05 08:33:31.624 00:00:10.365 TCP 23.104.0.1:38532 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:34:06.984 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50278 10 6452 1 2025-12-05 08:34:32.029 00:00:10.326 TCP 23.104.0.1:42148 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:31:07.906 00:05:04.931 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 08:31:07.910 00:05:04.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 08:35:07.210 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43652 10 6452 1 2025-12-05 08:35:32.396 00:00:10.362 TCP 23.104.0.1:42196 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:36:07.427 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43106 10 6452 1 2025-12-05 08:36:32.796 00:00:10.369 TCP 23.104.0.1:55686 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:37:07.644 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48618 10 6452 1 2025-12-05 08:37:27.111 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 08:37:27.329 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 08:37:33.211 00:00:10.365 TCP 23.104.0.1:50364 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:38:07.856 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:43868 12 10375 1 2025-12-05 08:38:33.618 00:00:10.442 TCP 23.104.0.1:35530 -> 1.101.0.1:3000 15 1926 1 2025-12-05 08:39:08.106 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43086 10 6452 1 2025-12-05 08:39:34.105 00:00:10.369 TCP 23.104.0.1:34552 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:40:08.321 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35304 10 6452 1 2025-12-05 08:40:34.515 00:00:11.343 TCP 23.104.0.1:45138 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:37:07.910 00:05:04.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 08:37:07.908 00:05:04.930 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 08:41:08.534 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58136 10 6452 1 2025-12-05 08:41:35.903 00:00:10.362 TCP 23.104.0.1:52052 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:42:08.749 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38228 10 6452 1 2025-12-05 08:42:26.973 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 08:42:27.318 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 08:42:36.307 00:00:10.320 TCP 23.104.0.1:35636 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:43:08.973 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47340 10 6452 1 2025-12-05 08:43:36.668 00:00:10.365 TCP 23.104.0.1:32780 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:44:09.210 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56160 10 6452 1 2025-12-05 08:44:37.099 00:00:10.367 TCP 23.104.0.1:47644 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:45:09.432 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54362 10 6452 1 2025-12-05 08:45:37.506 00:00:10.370 TCP 23.104.0.1:50530 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:46:09.652 00:00:10.659 TCP 1.101.0.1:3000 -> 22.102.0.1:60730 10 6452 1 2025-12-05 08:46:37.919 00:00:10.338 TCP 23.104.0.1:60930 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:43:07.913 00:05:04.923 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 08:43:07.910 00:05:04.928 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 08:47:10.346 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43604 10 6452 1 2025-12-05 08:47:27.227 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 08:47:27.292 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 08:47:38.296 00:00:10.324 TCP 23.104.0.1:49508 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:48:10.552 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51912 10 6452 1 2025-12-05 08:48:38.661 00:00:10.364 TCP 23.104.0.1:39442 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:49:10.768 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:45718 10 6452 1 2025-12-05 08:49:39.098 00:00:10.387 TCP 23.104.0.1:40588 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:50:10.949 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:37806 12 6556 1 2025-12-05 08:50:39.549 00:00:10.376 TCP 23.104.0.1:43712 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:51:11.180 00:00:10.306 TCP 1.101.0.1:3000 -> 22.102.0.1:50188 10 6452 1 2025-12-05 08:51:39.949 00:00:10.369 TCP 23.104.0.1:47306 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:52:11.530 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48038 10 6452 1 2025-12-05 08:52:27.410 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 08:52:27.538 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 08:52:40.361 00:00:10.363 TCP 23.104.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:49:07.911 00:05:04.930 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 08:49:07.914 00:05:04.925 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 08:53:11.749 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48382 10 6452 1 2025-12-05 08:53:40.765 00:00:10.379 TCP 23.104.0.1:50870 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:54:11.969 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50788 10 6452 1 2025-12-05 08:54:41.178 00:00:10.364 TCP 23.104.0.1:54062 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:55:12.151 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41418 10 6452 1 2025-12-05 08:55:41.578 00:00:10.368 TCP 23.104.0.1:59744 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:56:12.371 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40542 10 6452 1 2025-12-05 08:56:41.986 00:00:10.323 TCP 23.104.0.1:51798 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:57:12.579 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56194 10 6452 1 2025-12-05 08:57:27.431 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 08:57:27.543 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 08:57:42.347 00:00:10.325 TCP 23.104.0.1:53606 -> 1.101.0.1:3000 11 1507 1 2025-12-05 08:58:12.793 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:47100 12 10369 1 Summary: total flows: 163, total bytes: 505256, total packets: 1572, avg bps: 1065, avg pps: 0, avg bpp: 321 Time window: 2025-12-05 07:55:07 - 2025-12-05 08:58:23 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0094s User: 0.0019s Wall: 0.0019s flows/second: 85023.2 Runtime: 0.0020s