Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-18 22:58:42.302 00:00:10.365 TCP 23.104.0.1:45098 -> 1.101.0.1:3000 11 1507 1 2025-11-18 22:59:31.691 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 22:59:31.791 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 22:59:41.730 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44520 10 6452 1 2025-11-18 22:59:42.706 00:00:10.829 TCP 23.104.0.1:53376 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:00:41.942 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:48596 10 6452 1 2025-11-18 23:00:43.573 00:00:10.361 TCP 23.104.0.1:48550 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:01:42.133 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40186 10 6452 1 2025-11-18 23:01:43.975 00:00:10.366 TCP 23.104.0.1:44632 -> 1.101.0.1:3000 11 1507 1 2025-11-18 22:57:59.636 00:05:04.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 23:02:42.352 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50782 10 6452 1 2025-11-18 23:02:44.381 00:00:10.366 TCP 23.104.0.1:44052 -> 1.101.0.1:3000 11 1507 1 2025-11-18 22:58:59.639 00:05:04.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 23:03:44.787 00:00:10.367 TCP 23.104.0.1:35136 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:03:42.574 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45966 10 6452 1 2025-11-18 23:04:31.954 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 23:04:31.643 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 23:04:42.799 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60128 10 6452 1 2025-11-18 23:04:45.193 00:00:10.363 TCP 23.104.0.1:55278 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:05:43.032 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48228 10 6452 1 2025-11-18 23:05:45.599 00:00:10.327 TCP 23.104.0.1:59552 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:06:45.961 00:00:10.326 TCP 23.104.0.1:33650 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:06:43.249 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59784 10 6452 1 2025-11-18 23:07:43.467 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58380 10 6452 1 2025-11-18 23:07:46.324 00:00:10.364 TCP 23.104.0.1:34132 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:03:59.644 00:05:04.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 23:08:43.682 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48290 10 6452 1 2025-11-18 23:08:46.728 00:00:10.408 TCP 23.104.0.1:50058 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:04:59.643 00:05:04.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 23:09:32.040 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 23:09:32.018 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 23:09:43.897 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38136 10 6452 1 2025-11-18 23:09:47.172 00:00:10.364 TCP 23.104.0.1:42448 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:10:44.124 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50598 10 6452 1 2025-11-18 23:10:47.576 00:00:10.364 TCP 23.104.0.1:44464 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:11:44.346 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54542 10 6452 1 2025-11-18 23:11:47.984 00:00:10.332 TCP 23.104.0.1:60726 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:12:44.522 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55362 10 6452 1 2025-11-18 23:12:48.351 00:00:10.382 TCP 23.104.0.1:36790 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:13:44.744 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56458 10 6452 1 2025-11-18 23:13:48.786 00:00:10.365 TCP 23.104.0.1:36048 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:09:59.642 00:05:04.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 23:14:32.032 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 23:14:31.981 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 23:14:44.965 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33578 10 6452 1 2025-11-18 23:14:49.186 00:00:10.363 TCP 23.104.0.1:51286 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:10:59.644 00:05:04.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 23:15:45.183 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45110 12 6556 1 2025-11-18 23:15:49.588 00:00:10.374 TCP 23.104.0.1:37046 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:16:45.406 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36652 10 6452 1 2025-11-18 23:16:49.997 00:00:10.320 TCP 23.104.0.1:43200 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:17:45.622 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35346 10 6452 1 2025-11-18 23:17:50.359 00:00:10.369 TCP 23.104.0.1:40244 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:18:45.841 00:00:10.389 TCP 1.101.0.1:3000 -> 22.102.0.1:56816 10 6452 1 2025-11-18 23:18:50.771 00:00:10.375 TCP 23.104.0.1:60072 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:19:32.420 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 23:19:32.220 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 23:19:46.268 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58766 10 6452 1 2025-11-18 23:19:51.185 00:00:10.329 TCP 23.104.0.1:47918 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:15:59.642 00:05:04.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 23:20:46.486 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35684 10 6452 1 2025-11-18 23:20:51.552 00:00:10.322 TCP 23.104.0.1:33348 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:16:59.646 00:05:04.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 23:21:46.716 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33200 10 6452 1 2025-11-18 23:21:51.912 00:00:10.364 TCP 23.104.0.1:52856 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:22:46.940 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:50658 10 6452 1 2025-11-18 23:22:52.317 00:00:10.370 TCP 23.104.0.1:33238 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:23:47.180 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59156 10 6452 1 2025-11-18 23:23:52.717 00:00:10.377 TCP 23.104.0.1:37394 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:24:32.177 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 23:24:32.284 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 23:24:47.396 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55866 10 6452 1 2025-11-18 23:24:53.131 00:00:10.323 TCP 23.104.0.1:47850 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:25:47.618 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36156 10 6452 1 2025-11-18 23:21:59.646 00:05:04.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 23:25:53.497 00:00:10.366 TCP 23.104.0.1:46146 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:26:47.835 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33800 10 6452 1 2025-11-18 23:22:59.650 00:05:04.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 23:26:53.904 00:00:10.365 TCP 23.104.0.1:35122 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:27:48.079 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38012 10 6452 1 2025-11-18 23:27:54.307 00:00:10.365 TCP 23.104.0.1:35708 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:28:48.301 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40968 10 6452 1 2025-11-18 23:28:54.707 00:00:10.364 TCP 23.104.0.1:39698 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:29:32.003 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 23:29:32.283 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 23:29:48.516 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37218 10 6452 1 2025-11-18 23:29:55.116 00:00:10.359 TCP 23.104.0.1:42990 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:30:48.732 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57726 10 6452 1 2025-11-18 23:30:55.513 00:00:10.326 TCP 23.104.0.1:37914 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:31:48.947 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44716 10 6452 1 2025-11-18 23:27:59.647 00:05:04.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 23:31:55.878 00:00:10.327 TCP 23.104.0.1:54060 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:32:56.243 00:00:10.628 TCP 23.104.0.1:36548 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:28:59.651 00:05:04.831 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 23:32:49.190 00:00:17.588 TCP 1.101.0.1:3000 -> 22.102.0.1:58104 10 6452 1 2025-11-18 23:33:56.835 00:00:21.636 TCP 1.101.0.1:3000 -> 22.102.0.1:57456 10 6452 1 2025-11-18 23:33:56.946 00:00:21.630 TCP 23.104.0.1:57906 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:34:32.590 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 23:34:32.317 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 23:35:08.647 00:00:10.317 TCP 23.104.0.1:35492 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:35:08.531 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35276 10 6452 1 2025-11-18 23:36:09.006 00:00:10.373 TCP 23.104.0.1:46136 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:36:08.761 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34330 10 6452 1 2025-11-18 23:37:08.974 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:48282 10 6452 1 2025-11-18 23:37:09.422 00:00:11.081 TCP 23.104.0.1:57502 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:33:59.653 00:05:04.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 23:38:10.541 00:00:10.323 TCP 23.104.0.1:38428 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:38:09.209 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43338 10 6452 1 2025-11-18 23:34:59.654 00:05:04.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 23:39:10.903 00:00:10.342 TCP 23.104.0.1:58362 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:39:09.426 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35216 10 6452 1 2025-11-18 23:39:32.561 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 23:39:32.660 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 23:40:11.283 00:00:10.364 TCP 23.104.0.1:57416 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:40:09.645 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:34854 10 6452 1 2025-11-18 23:41:09.813 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47582 10 6452 1 2025-11-18 23:41:11.687 00:00:10.370 TCP 23.104.0.1:34942 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:42:10.041 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:50034 10 6452 1 2025-11-18 23:42:12.108 00:00:10.366 TCP 23.104.0.1:55562 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:43:10.229 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36340 10 6452 1 2025-11-18 23:43:12.513 00:00:10.326 TCP 23.104.0.1:56982 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:39:59.656 00:05:04.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 23:44:10.438 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45286 10 6452 1 2025-11-18 23:44:12.879 00:00:10.365 TCP 23.104.0.1:52128 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:44:32.703 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 23:44:32.717 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 23:40:59.672 00:05:04.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 23:45:10.611 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:32984 10 6452 1 2025-11-18 23:45:13.278 00:00:10.369 TCP 23.104.0.1:54238 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:46:10.779 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59014 10 6452 1 2025-11-18 23:46:13.681 00:00:10.367 TCP 23.104.0.1:52652 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:47:10.989 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59554 10 6452 1 2025-11-18 23:47:14.104 00:00:10.365 TCP 23.104.0.1:35038 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:48:11.219 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41504 10 6452 1 2025-11-18 23:48:14.508 00:00:10.324 TCP 23.104.0.1:55036 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:49:11.443 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49070 10 6452 1 2025-11-18 23:49:14.871 00:00:10.848 TCP 23.104.0.1:56296 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:49:32.784 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 23:49:32.958 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 23:45:59.657 00:05:04.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 23:50:11.666 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33136 10 6452 1 2025-11-18 23:50:15.760 00:00:10.380 TCP 23.104.0.1:42526 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:46:59.660 00:05:04.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 23:51:16.180 00:00:10.364 TCP 23.104.0.1:48378 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:51:11.884 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40288 10 6452 1 2025-11-18 23:52:16.579 00:00:10.363 TCP 23.104.0.1:53550 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:52:12.112 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55754 10 6452 1 2025-11-18 23:53:12.328 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56732 10 6452 1 2025-11-18 23:53:16.981 00:00:10.366 TCP 23.104.0.1:60820 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:54:12.547 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38710 10 6452 1 2025-11-18 23:54:17.388 00:00:10.359 TCP 23.104.0.1:48186 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:54:32.960 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-18 23:54:32.943 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-18 23:55:12.717 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57840 10 6452 1 2025-11-18 23:55:17.785 00:00:10.372 TCP 23.104.0.1:60680 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:51:59.659 00:05:04.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-18 23:56:12.930 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:36310 10 6452 1 2025-11-18 23:56:18.196 00:00:10.364 TCP 23.104.0.1:34168 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:52:59.661 00:05:04.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-18 23:57:13.167 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59328 10 6452 1 2025-11-18 23:57:18.602 00:00:10.359 TCP 23.104.0.1:35106 -> 1.101.0.1:3000 11 1507 1 2025-11-18 23:58:13.341 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:56154 10 6452 1 2025-11-18 23:58:18.997 00:00:10.366 TCP 23.104.0.1:57114 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492000, total packets: 1564, avg bps: 1084, avg pps: 0, avg bpp: 314 Time window: 2025-11-18 22:57:59 - 2025-11-18 23:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0021s User: 0.0031s Wall: 0.0025s flows/second: 65198.5 Runtime: 0.0025s