Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 18:58:54.194 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49442 10 6452 1 2025-12-05 18:55:08.185 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 18:59:02.606 00:00:10.360 TCP 23.104.0.1:33152 -> 1.101.0.1:3000 11 1507 1 2025-12-05 18:59:54.406 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34230 10 6452 1 2025-12-05 19:00:02.995 00:00:10.329 TCP 23.104.0.1:59780 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:00:54.619 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37692 10 6452 1 2025-12-05 19:01:03.365 00:00:10.326 TCP 23.104.0.1:60400 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:01:54.829 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35374 10 6452 1 2025-12-05 19:02:03.730 00:00:10.367 TCP 23.104.0.1:59956 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:02:39.745 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 19:02:39.909 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 19:02:55.070 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53828 10 6452 1 2025-12-05 19:03:04.137 00:00:10.365 TCP 23.104.0.1:36396 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:03:55.290 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46296 10 6452 1 2025-12-05 19:00:08.184 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 19:04:04.542 00:00:10.364 TCP 23.104.0.1:47838 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:04:55.499 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59684 10 6452 1 2025-12-05 19:01:08.187 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 19:05:04.943 00:00:10.492 TCP 23.104.0.1:36466 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:05:55.709 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44026 10 6452 1 2025-12-05 19:06:05.478 00:00:10.364 TCP 23.104.0.1:55188 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:06:55.923 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:60084 10 6452 1 2025-12-05 19:07:05.885 00:00:10.345 TCP 23.104.0.1:52848 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:07:40.048 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 19:07:39.904 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 19:07:56.115 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:36414 11 6504 1 2025-12-05 19:08:06.268 00:00:10.366 TCP 23.104.0.1:54128 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:08:56.380 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34802 10 6452 1 2025-12-05 19:09:06.673 00:00:10.361 TCP 23.104.0.1:56118 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:09:56.596 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48886 10 6452 1 2025-12-05 19:06:08.185 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 19:10:07.097 00:00:10.363 TCP 23.104.0.1:34228 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:10:56.810 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50410 10 6452 1 2025-12-05 19:07:08.189 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 19:11:07.496 00:00:10.325 TCP 23.104.0.1:46766 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:11:57.032 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40130 10 6452 1 2025-12-05 19:12:07.858 00:00:10.330 TCP 23.104.0.1:59316 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:12:40.012 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 19:12:39.990 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 19:12:57.242 00:00:10.741 TCP 1.101.0.1:3000 -> 22.102.0.1:51078 10 6452 1 2025-12-05 19:13:08.227 00:00:10.323 TCP 23.104.0.1:36498 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:13:58.040 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35528 10 6452 1 2025-12-05 19:14:08.587 00:00:10.362 TCP 23.104.0.1:55532 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:14:58.250 00:00:10.397 TCP 1.101.0.1:3000 -> 22.102.0.1:41612 10 6452 1 2025-12-05 19:15:08.988 00:00:10.361 TCP 23.104.0.1:33096 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:15:58.693 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38960 10 6452 1 2025-12-05 19:12:08.187 00:05:04.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 19:16:09.393 00:00:10.361 TCP 23.104.0.1:37220 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:16:58.906 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59902 10 6452 1 2025-12-05 19:13:08.188 00:05:04.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 19:17:09.795 00:00:10.364 TCP 23.104.0.1:50958 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:17:39.917 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 19:17:40.019 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 19:17:59.131 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52170 10 6452 1 2025-12-05 19:18:10.196 00:00:10.375 TCP 23.104.0.1:42638 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:18:59.362 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55834 10 6452 1 2025-12-05 19:19:10.611 00:00:10.359 TCP 23.104.0.1:46432 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:19:59.573 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40484 10 6452 1 2025-12-05 19:20:11.009 00:00:10.360 TCP 23.104.0.1:57250 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:20:59.790 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57586 10 6452 1 2025-12-05 19:21:11.412 00:00:10.363 TCP 23.104.0.1:51974 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:22:00.009 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38206 10 6452 1 2025-12-05 19:18:08.190 00:05:04.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 19:22:11.815 00:00:10.361 TCP 23.104.0.1:58910 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:22:40.173 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 19:22:40.065 00:00:00.041 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 19:23:00.223 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59090 10 6452 1 2025-12-05 19:19:08.193 00:05:04.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 19:23:12.219 00:00:10.359 TCP 23.104.0.1:56438 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:24:00.441 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41998 10 6452 1 2025-12-05 19:24:12.624 00:00:10.368 TCP 23.104.0.1:57640 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:25:00.650 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50598 10 6452 1 2025-12-05 19:25:13.031 00:00:10.364 TCP 23.104.0.1:50186 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:26:00.821 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:52654 10 6452 1 2025-12-05 19:26:13.469 00:00:10.326 TCP 23.104.0.1:36118 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:27:01.006 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38076 10 6452 1 2025-12-05 19:27:13.832 00:00:10.343 TCP 23.104.0.1:41360 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:27:40.114 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 19:27:40.286 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 19:28:01.224 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50762 10 6452 1 2025-12-05 19:24:08.190 00:05:04.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 19:28:14.212 00:00:10.325 TCP 23.104.0.1:55108 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:29:01.434 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50202 10 6452 1 2025-12-05 19:25:08.193 00:05:04.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 19:29:14.577 00:00:10.369 TCP 23.104.0.1:58928 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:30:01.608 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53240 10 6452 1 2025-12-05 19:30:14.983 00:00:10.377 TCP 23.104.0.1:57476 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:31:01.819 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44530 10 6452 1 2025-12-05 19:31:15.402 00:00:10.363 TCP 23.104.0.1:47958 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:32:02.045 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49682 10 6452 1 2025-12-05 19:32:15.806 00:00:10.372 TCP 23.104.0.1:39188 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:32:40.455 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 19:32:40.394 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 19:33:02.259 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34820 10 6452 1 2025-12-05 19:33:16.217 00:00:10.377 TCP 23.104.0.1:55064 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:34:02.473 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49986 10 6452 1 2025-12-05 19:30:08.212 00:05:04.880 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 19:34:16.642 00:00:10.369 TCP 23.104.0.1:36910 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:31:08.215 00:05:04.874 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 19:35:02.684 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39706 10 6452 1 2025-12-05 19:35:17.055 00:00:10.382 TCP 23.104.0.1:38998 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:36:02.897 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57892 10 6452 1 2025-12-05 19:36:17.473 00:00:10.326 TCP 23.104.0.1:58648 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:37:03.116 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46682 10 6452 1 2025-12-05 19:37:17.833 00:00:10.389 TCP 23.104.0.1:45854 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:37:40.250 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 19:37:40.324 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 19:38:03.325 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50600 10 6452 1 2025-12-05 19:38:18.256 00:00:10.323 TCP 23.104.0.1:46808 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:39:03.535 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43520 10 6452 1 2025-12-05 19:39:18.619 00:00:10.332 TCP 23.104.0.1:50360 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:40:03.712 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57560 10 6452 1 2025-12-05 19:36:08.214 00:05:04.879 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 19:40:18.987 00:00:10.371 TCP 23.104.0.1:44778 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:37:08.216 00:05:04.874 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 19:41:03.922 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43644 10 6452 1 2025-12-05 19:41:19.398 00:00:10.524 TCP 23.104.0.1:34032 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:42:04.139 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55148 10 6452 1 2025-12-05 19:42:19.955 00:00:10.324 TCP 23.104.0.1:41938 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:42:40.489 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 19:42:40.714 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 19:43:04.361 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:57612 12 10375 1 2025-12-05 19:43:20.314 00:00:10.443 TCP 23.104.0.1:54608 -> 1.101.0.1:3000 15 1926 1 2025-12-05 19:44:04.614 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45050 10 6452 1 2025-12-05 19:44:20.799 00:00:10.367 TCP 23.104.0.1:57878 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:45:04.786 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50960 10 6452 1 2025-12-05 19:45:21.205 00:00:10.367 TCP 23.104.0.1:59246 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:46:05.007 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50170 10 6452 1 2025-12-05 19:42:08.215 00:05:04.880 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 19:46:21.610 00:00:10.375 TCP 23.104.0.1:55448 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:43:08.217 00:05:04.875 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 19:47:05.239 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37884 10 6452 1 2025-12-05 19:47:22.027 00:00:10.367 TCP 23.104.0.1:57984 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:47:40.626 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 19:47:40.490 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 19:48:05.486 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38258 10 6452 1 2025-12-05 19:48:22.430 00:00:10.367 TCP 23.104.0.1:35340 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:49:05.698 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50184 10 6452 1 2025-12-05 19:49:22.831 00:00:10.440 TCP 23.104.0.1:57950 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:50:05.911 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:33222 10 6452 1 2025-12-05 19:50:23.310 00:00:10.331 TCP 23.104.0.1:46832 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:51:06.095 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54598 10 6452 1 2025-12-05 19:51:23.689 00:00:10.367 TCP 23.104.0.1:32976 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:52:06.305 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43562 10 6452 1 2025-12-05 19:48:08.216 00:05:04.882 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 19:52:24.104 00:00:10.356 TCP 23.104.0.1:41948 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:52:40.710 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 19:52:40.780 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 19:49:08.218 00:05:04.877 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 19:53:06.479 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:45956 10 6452 1 2025-12-05 19:53:24.499 00:00:10.365 TCP 23.104.0.1:35956 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:54:06.649 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44018 10 6452 1 2025-12-05 19:54:24.909 00:00:10.363 TCP 23.104.0.1:49470 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:55:06.860 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46008 10 6452 1 2025-12-05 19:55:25.312 00:00:10.359 TCP 23.104.0.1:39344 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:56:07.037 00:00:13.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45180 10 6452 1 2025-12-05 19:56:25.717 00:00:10.375 TCP 23.104.0.1:49332 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:57:10.249 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33500 10 6452 1 2025-12-05 19:57:26.131 00:00:10.363 TCP 23.104.0.1:46518 -> 1.101.0.1:3000 11 1507 1 2025-12-05 19:57:40.889 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 19:57:40.753 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 19:54:08.218 00:05:04.881 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 19:58:10.458 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52162 10 6452 1 2025-12-05 19:58:26.530 00:00:10.338 TCP 23.104.0.1:46910 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502742, total packets: 1579, avg bps: 1046, avg pps: 0, avg bpp: 318 Time window: 2025-12-05 18:55:08 - 2025-12-05 19:59:13 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0022s User: 0.0032s Wall: 0.0021s flows/second: 77575.9 Runtime: 0.0021s