Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 05:59:24.434 00:00:10.361 TCP 23.104.0.1:43030 -> 1.101.0.1:3000 11 1507 1 2025-11-15 05:59:29.958 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47018 10 6452 1 2025-11-15 06:00:24.838 00:00:10.389 TCP 23.104.0.1:50818 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:00:30.177 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:49916 10 6452 1 2025-11-15 06:01:25.269 00:00:10.363 TCP 23.104.0.1:38818 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:01:30.416 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:52980 10 6452 1 2025-11-15 06:02:25.672 00:00:10.320 TCP 23.104.0.1:51988 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:02:30.591 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33478 10 6452 1 2025-11-15 06:02:45.039 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 06:02:44.806 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 06:03:26.032 00:00:10.364 TCP 23.104.0.1:45846 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:03:30.769 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41718 10 6452 1 2025-11-15 05:59:57.348 00:05:04.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 05:59:57.347 00:05:04.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 06:04:26.433 00:00:10.367 TCP 23.104.0.1:56658 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:04:30.984 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:40140 10 6452 1 2025-11-15 06:05:26.837 00:00:10.380 TCP 23.104.0.1:35174 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:05:31.181 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39754 10 6452 1 2025-11-15 06:06:27.259 00:00:10.322 TCP 23.104.0.1:56902 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:06:31.400 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45726 10 6452 1 2025-11-15 06:07:27.620 00:00:10.363 TCP 23.104.0.1:46780 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:07:44.924 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 06:07:31.612 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53846 10 6452 1 2025-11-15 06:07:44.798 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 06:08:28.029 00:00:10.386 TCP 23.104.0.1:52116 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:08:31.821 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48122 10 6452 1 2025-11-15 06:09:28.460 00:00:10.358 TCP 23.104.0.1:52280 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:09:32.062 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60026 10 6452 1 2025-11-15 06:05:57.346 00:05:04.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 06:05:57.350 00:05:04.555 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 06:10:28.856 00:00:10.375 TCP 23.104.0.1:49124 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:10:32.273 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50536 10 6452 1 2025-11-15 06:11:29.274 00:00:10.439 TCP 23.104.0.1:34914 -> 1.101.0.1:3000 15 1926 1 2025-11-15 06:11:32.489 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51264 12 10375 1 2025-11-15 06:12:32.725 00:00:10.613 TCP 1.101.0.1:3000 -> 22.102.0.1:52324 10 6452 1 2025-11-15 06:12:44.938 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 06:12:29.747 00:00:10.754 TCP 23.104.0.1:55902 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:12:44.598 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 06:13:30.540 00:00:10.374 TCP 23.104.0.1:38316 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:13:33.374 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58618 10 6452 1 2025-11-15 06:14:30.945 00:00:10.369 TCP 23.104.0.1:49130 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:14:33.593 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39972 10 6452 1 2025-11-15 06:15:31.351 00:00:10.376 TCP 23.104.0.1:40882 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:15:33.825 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:47804 10 6452 1 2025-11-15 06:11:57.349 00:05:04.559 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 06:11:57.351 00:05:04.554 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 06:16:34.077 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59468 10 6452 1 2025-11-15 06:16:31.759 00:00:10.379 TCP 23.104.0.1:51468 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:17:45.001 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 06:17:34.289 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35072 10 6452 1 2025-11-15 06:17:45.084 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 06:17:32.181 00:00:10.361 TCP 23.104.0.1:54774 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:18:32.582 00:00:10.374 TCP 23.104.0.1:42762 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:18:34.457 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40406 10 6452 1 2025-11-15 06:19:32.993 00:00:10.364 TCP 23.104.0.1:33348 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:19:34.635 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36342 10 6452 1 2025-11-15 06:20:34.851 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35728 10 6452 1 2025-11-15 06:20:33.395 00:00:10.375 TCP 23.104.0.1:47878 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:21:33.801 00:00:10.412 TCP 23.104.0.1:34784 -> 1.101.0.1:3000 15 1926 1 2025-11-15 06:21:35.082 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:59416 12 10369 1 2025-11-15 06:17:57.350 00:05:04.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 06:17:57.352 00:05:04.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 06:22:45.185 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 06:22:45.086 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 06:22:35.331 00:00:16.124 TCP 1.101.0.1:3000 -> 22.102.0.1:53768 10 6452 1 2025-11-15 06:22:34.251 00:00:17.296 TCP 23.104.0.1:54484 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:23:41.505 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37292 10 6452 1 2025-11-15 06:23:41.594 00:00:10.362 TCP 23.104.0.1:47462 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:24:41.738 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39486 10 6452 1 2025-11-15 06:24:41.996 00:00:10.364 TCP 23.104.0.1:41952 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:25:42.396 00:00:10.324 TCP 23.104.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:25:41.915 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49318 10 6452 1 2025-11-15 06:26:42.761 00:00:10.331 TCP 23.104.0.1:50114 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:26:42.132 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37750 12 6556 1 2025-11-15 06:27:45.254 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 06:27:45.192 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 06:27:43.124 00:00:10.365 TCP 23.104.0.1:41120 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:27:42.340 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52900 10 6452 1 2025-11-15 06:23:57.355 00:05:04.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 06:23:57.352 00:05:04.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 06:28:43.527 00:00:10.390 TCP 23.104.0.1:46764 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:28:42.558 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34748 10 6452 1 2025-11-15 06:29:43.956 00:00:10.365 TCP 23.104.0.1:34312 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:29:42.779 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55566 10 6452 1 2025-11-15 06:30:44.364 00:00:10.386 TCP 23.104.0.1:53558 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:30:42.990 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58424 10 6452 1 2025-11-15 06:31:44.782 00:00:10.370 TCP 23.104.0.1:44096 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:31:43.213 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:39528 10 6452 1 2025-11-15 06:32:45.495 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 06:32:45.534 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 06:32:45.189 00:00:10.363 TCP 23.104.0.1:51214 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:32:43.389 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:55706 10 6452 1 2025-11-15 06:33:45.588 00:00:10.322 TCP 23.104.0.1:35362 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:33:43.616 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54142 10 6452 1 2025-11-15 06:29:57.353 00:05:04.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 06:29:57.356 00:05:04.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 06:34:43.837 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53466 10 6452 1 2025-11-15 06:34:45.946 00:00:10.335 TCP 23.104.0.1:60392 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:35:46.327 00:00:10.373 TCP 23.104.0.1:40126 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:35:44.080 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42258 10 6452 1 2025-11-15 06:36:44.293 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47592 10 6452 1 2025-11-15 06:36:46.744 00:00:10.364 TCP 23.104.0.1:38562 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:37:45.470 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 06:37:45.437 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 06:37:44.514 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58396 10 6452 1 2025-11-15 06:37:47.146 00:00:10.368 TCP 23.104.0.1:52148 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:38:44.742 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57272 10 6452 1 2025-11-15 06:38:47.547 00:00:10.365 TCP 23.104.0.1:47852 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:39:44.957 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:52346 10 6452 1 2025-11-15 06:39:47.962 00:00:10.382 TCP 23.104.0.1:58976 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:35:57.357 00:05:04.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 06:35:57.355 00:05:04.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 06:40:45.188 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46268 10 6452 1 2025-11-15 06:40:48.391 00:00:10.361 TCP 23.104.0.1:41952 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:41:45.415 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58500 10 6452 1 2025-11-15 06:41:48.792 00:00:10.358 TCP 23.104.0.1:34422 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:42:45.498 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 06:42:45.617 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 06:42:45.631 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37782 10 6452 1 2025-11-15 06:42:49.189 00:00:10.364 TCP 23.104.0.1:52570 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:43:45.849 00:00:10.708 TCP 1.101.0.1:3000 -> 22.102.0.1:49690 10 6452 1 2025-11-15 06:43:49.591 00:00:10.366 TCP 23.104.0.1:53674 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:44:46.597 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:36116 10 6452 1 2025-11-15 06:44:49.993 00:00:10.328 TCP 23.104.0.1:40308 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:45:46.788 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45278 10 6452 1 2025-11-15 06:45:50.357 00:00:10.366 TCP 23.104.0.1:57776 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:41:57.358 00:05:04.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 06:41:57.356 00:05:04.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 06:46:50.760 00:00:10.380 TCP 23.104.0.1:42654 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:46:46.998 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49524 10 6452 1 2025-11-15 06:47:45.697 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 06:47:45.743 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 06:47:51.179 00:00:10.367 TCP 23.104.0.1:49508 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:47:47.215 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46218 10 6452 1 2025-11-15 06:48:51.586 00:00:10.363 TCP 23.104.0.1:58790 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:48:47.429 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51270 10 6452 1 2025-11-15 06:49:47.645 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50646 10 6452 1 2025-11-15 06:49:51.986 00:00:10.362 TCP 23.104.0.1:58306 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:50:47.855 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41294 10 6452 1 2025-11-15 06:50:52.387 00:00:10.424 TCP 23.104.0.1:49874 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:51:48.087 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39160 10 6452 1 2025-11-15 06:47:57.358 00:05:04.580 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 06:51:52.853 00:00:10.335 TCP 23.104.0.1:40436 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:47:57.360 00:05:04.575 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 06:52:45.629 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 06:52:45.743 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 06:52:48.307 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56144 10 6452 1 2025-11-15 06:52:53.230 00:00:10.377 TCP 23.104.0.1:44474 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:53:48.527 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49342 10 6452 1 2025-11-15 06:53:53.649 00:00:10.385 TCP 23.104.0.1:39402 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:54:48.742 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34400 10 6452 1 2025-11-15 06:54:54.102 00:00:10.364 TCP 23.104.0.1:34954 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:55:48.969 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:52454 10 6452 1 2025-11-15 06:55:54.509 00:00:10.360 TCP 23.104.0.1:55524 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:56:49.206 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57232 10 6452 1 2025-11-15 06:56:54.915 00:00:10.372 TCP 23.104.0.1:54432 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:57:45.729 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 06:57:45.892 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 06:57:49.425 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35752 10 6452 1 2025-11-15 06:53:57.359 00:05:04.579 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 06:57:55.328 00:00:10.361 TCP 23.104.0.1:43932 -> 1.101.0.1:3000 11 1507 1 2025-11-15 06:53:57.361 00:05:04.574 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 Summary: total flows: 162, total bytes: 499171, total packets: 1565, avg bps: 1116, avg pps: 0, avg bpp: 318 Time window: 2025-11-15 05:59:24 - 2025-11-15 06:59:01 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0049s User: 0.0010s Wall: 0.0016s flows/second: 101687.7 Runtime: 0.0016s