Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 03:58:48.672 00:00:10.362 TCP 23.104.0.1:42354 -> 1.101.0.1:3000 11 1507 1 2025-11-14 03:59:18.914 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52656 10 6452 1 2025-11-14 03:59:49.097 00:00:10.377 TCP 23.104.0.1:56056 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:00:19.150 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44152 10 6452 1 2025-11-14 04:00:49.517 00:00:10.359 TCP 23.104.0.1:58182 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:01:19.365 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54988 10 6452 1 2025-11-14 04:01:49.915 00:00:10.389 TCP 23.104.0.1:33254 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:02:13.235 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 04:02:13.561 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 04:02:19.579 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48230 10 6452 1 2025-11-14 04:02:50.344 00:00:10.362 TCP 23.104.0.1:42280 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:03:19.795 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42996 10 6452 1 2025-11-14 04:03:50.742 00:00:10.368 TCP 23.104.0.1:38484 -> 1.101.0.1:3000 11 1507 1 2025-11-14 03:59:56.844 00:05:04.382 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 03:59:56.842 00:05:04.388 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 04:04:20.007 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48990 10 6452 1 2025-11-14 04:04:51.157 00:00:10.364 TCP 23.104.0.1:49352 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:05:20.226 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48764 10 6452 1 2025-11-14 04:05:51.555 00:00:10.392 TCP 23.104.0.1:55112 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:06:20.450 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36622 10 6452 1 2025-11-14 04:06:52.005 00:00:10.328 TCP 23.104.0.1:46854 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:07:13.621 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 04:07:13.670 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 04:07:20.660 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60142 10 6452 1 2025-11-14 04:07:52.376 00:00:10.372 TCP 23.104.0.1:58340 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:08:20.874 00:00:10.309 TCP 1.101.0.1:3000 -> 22.102.0.1:57576 10 6452 1 2025-11-14 04:08:52.783 00:00:10.363 TCP 23.104.0.1:38954 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:09:21.222 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60724 10 6452 1 2025-11-14 04:05:56.846 00:05:04.382 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 04:05:56.843 00:05:04.388 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 04:09:53.182 00:00:10.364 TCP 23.104.0.1:37414 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:10:21.440 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52878 10 6452 1 2025-11-14 04:10:53.581 00:00:10.375 TCP 23.104.0.1:43690 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:11:21.653 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48908 10 6452 1 2025-11-14 04:11:53.993 00:00:10.369 TCP 23.104.0.1:37596 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:12:13.708 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 04:12:13.790 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 04:12:21.826 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38752 10 6452 1 2025-11-14 04:12:54.396 00:00:10.369 TCP 23.104.0.1:34322 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:13:22.057 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36898 10 6452 1 2025-11-14 04:13:54.804 00:00:10.362 TCP 23.104.0.1:52814 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:14:22.280 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57708 10 6452 1 2025-11-14 04:14:55.206 00:00:10.322 TCP 23.104.0.1:35744 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:15:22.450 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34400 10 6452 1 2025-11-14 04:11:56.848 00:05:04.381 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 04:11:56.845 00:05:04.386 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 04:15:55.570 00:00:10.369 TCP 23.104.0.1:47008 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:16:22.666 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49796 10 6452 1 2025-11-14 04:16:55.979 00:00:10.320 TCP 23.104.0.1:40042 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:17:13.808 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 04:17:13.713 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 04:17:22.860 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50134 10 6452 1 2025-11-14 04:17:56.338 00:00:10.365 TCP 23.104.0.1:54184 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:18:23.078 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38834 10 6452 1 2025-11-14 04:18:56.741 00:00:10.366 TCP 23.104.0.1:56944 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:19:23.291 00:00:20.703 TCP 1.101.0.1:3000 -> 22.102.0.1:41998 10 6452 1 2025-11-14 04:19:57.145 00:00:10.369 TCP 23.104.0.1:40246 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:20:34.043 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53224 10 6452 1 2025-11-14 04:20:57.550 00:00:10.322 TCP 23.104.0.1:42396 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:21:34.274 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36270 10 6452 1 2025-11-14 04:17:56.850 00:05:04.382 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 04:17:56.852 00:05:04.378 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 04:22:14.004 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 04:21:57.913 00:00:10.362 TCP 23.104.0.1:49216 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:22:14.268 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 04:22:34.492 00:00:11.346 TCP 1.101.0.1:3000 -> 22.102.0.1:45006 10 6452 1 2025-11-14 04:22:58.314 00:00:10.365 TCP 23.104.0.1:35840 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:23:35.876 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56090 10 6452 1 2025-11-14 04:23:58.720 00:00:10.369 TCP 23.104.0.1:43844 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:24:36.098 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:60364 10 6452 1 2025-11-14 04:24:59.130 00:00:10.325 TCP 23.104.0.1:43620 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:25:36.279 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46120 10 6452 1 2025-11-14 04:25:59.491 00:00:10.886 TCP 23.104.0.1:51648 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:26:36.495 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33308 10 6452 1 2025-11-14 04:27:00.412 00:00:10.322 TCP 23.104.0.1:44518 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:27:13.910 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 04:27:14.030 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 04:27:36.712 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37112 10 6452 1 2025-11-14 04:23:56.854 00:05:04.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 04:23:56.851 00:05:04.386 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 04:28:00.777 00:00:10.389 TCP 23.104.0.1:44052 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:28:36.928 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:36142 10 6452 1 2025-11-14 04:29:01.219 00:00:10.371 TCP 23.104.0.1:41806 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:29:37.193 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46990 10 6452 1 2025-11-14 04:30:01.632 00:00:10.363 TCP 23.104.0.1:58508 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:30:37.415 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59022 10 6452 1 2025-11-14 04:31:02.036 00:00:10.367 TCP 23.104.0.1:58354 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:31:37.633 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:52502 10 6452 1 2025-11-14 04:32:14.284 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 04:32:02.439 00:00:10.360 TCP 23.104.0.1:36134 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:32:14.157 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 04:32:37.827 00:00:10.487 TCP 1.101.0.1:3000 -> 22.102.0.1:52422 10 6452 1 2025-11-14 04:33:02.839 00:00:10.382 TCP 23.104.0.1:52688 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:33:38.356 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52310 10 6452 1 2025-11-14 04:29:56.852 00:05:04.388 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 04:29:56.854 00:05:04.383 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 04:34:03.255 00:00:10.367 TCP 23.104.0.1:60810 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:34:38.582 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45724 10 6452 1 2025-11-14 04:35:03.661 00:00:10.368 TCP 23.104.0.1:37306 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:35:38.808 00:00:10.643 TCP 1.101.0.1:3000 -> 22.102.0.1:38554 10 6452 1 2025-11-14 04:36:04.093 00:00:10.321 TCP 23.104.0.1:56446 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:36:39.495 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55850 10 6452 1 2025-11-14 04:37:04.448 00:00:10.330 TCP 23.104.0.1:40564 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:37:14.444 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 04:37:14.390 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 04:37:39.663 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56586 10 6452 1 2025-11-14 04:38:04.814 00:00:10.364 TCP 23.104.0.1:39876 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:38:39.840 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52180 10 6452 1 2025-11-14 04:39:05.216 00:00:10.372 TCP 23.104.0.1:39244 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:39:40.073 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48752 10 6452 1 2025-11-14 04:35:56.858 00:05:04.383 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 04:35:56.855 00:05:04.388 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 04:40:05.627 00:00:10.364 TCP 23.104.0.1:50718 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:40:40.294 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34756 10 6452 1 2025-11-14 04:41:06.030 00:00:10.362 TCP 23.104.0.1:60032 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:41:40.514 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44716 10 6452 1 2025-11-14 04:42:14.426 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 04:42:14.327 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 04:42:06.426 00:00:10.419 TCP 23.104.0.1:57992 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:42:40.726 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35906 10 6452 1 2025-11-14 04:43:06.887 00:00:10.381 TCP 23.104.0.1:35090 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:43:40.942 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:59862 10 6452 1 2025-11-14 04:44:07.312 00:00:10.327 TCP 23.104.0.1:50176 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:44:41.135 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46390 12 10375 1 2025-11-14 04:45:07.684 00:00:10.457 TCP 23.104.0.1:38898 -> 1.101.0.1:3000 15 1926 1 2025-11-14 04:45:41.344 00:00:11.988 TCP 1.101.0.1:3000 -> 22.102.0.1:53826 10 6452 1 2025-11-14 04:41:56.858 00:05:04.384 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 04:41:56.854 00:05:04.389 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 04:46:08.179 00:00:10.323 TCP 23.104.0.1:58528 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:46:43.374 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57520 10 6452 1 2025-11-14 04:47:14.455 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 04:47:14.388 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 04:47:08.539 00:00:10.368 TCP 23.104.0.1:48548 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:47:43.596 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52128 10 6452 1 2025-11-14 04:48:08.942 00:00:10.373 TCP 23.104.0.1:52966 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:48:43.812 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:39298 10 6452 1 2025-11-14 04:49:09.351 00:00:10.365 TCP 23.104.0.1:53908 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:49:43.995 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51582 10 6452 1 2025-11-14 04:50:09.753 00:00:10.393 TCP 23.104.0.1:43276 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:50:44.224 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51470 10 6452 1 2025-11-14 04:51:10.179 00:00:10.372 TCP 23.104.0.1:46202 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:51:44.442 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39640 10 6452 1 2025-11-14 04:47:56.858 00:05:04.403 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 04:47:56.856 00:05:04.408 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 04:52:14.242 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 04:52:14.323 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 04:52:10.588 00:00:10.365 TCP 23.104.0.1:59956 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:52:44.663 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37638 10 6452 1 2025-11-14 04:53:10.994 00:00:10.365 TCP 23.104.0.1:37778 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:53:44.883 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44008 10 6452 1 2025-11-14 04:54:11.398 00:00:10.335 TCP 23.104.0.1:55552 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:54:45.113 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52768 10 6452 1 2025-11-14 04:55:11.770 00:00:20.910 TCP 23.104.0.1:42376 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:55:45.327 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45954 10 6452 1 2025-11-14 04:56:22.729 00:00:10.369 TCP 23.104.0.1:39900 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:56:45.544 00:00:16.641 TCP 1.101.0.1:3000 -> 22.102.0.1:35020 10 6452 1 2025-11-14 04:57:14.587 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 04:57:14.692 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 04:57:23.165 00:00:10.335 TCP 23.104.0.1:34458 -> 1.101.0.1:3000 11 1507 1 2025-11-14 04:53:56.861 00:05:04.403 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 04:57:52.239 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49594 10 6452 1 2025-11-14 04:53:56.858 00:05:04.409 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 04:58:23.566 00:00:10.329 TCP 23.104.0.1:42740 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496238, total packets: 1568, avg bps: 1098, avg pps: 0, avg bpp: 316 Time window: 2025-11-14 03:58:48 - 2025-11-14 04:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0051s User: 0.0009s Wall: 0.0018s flows/second: 90648.6 Runtime: 0.0018s