Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 00:58:45.307 00:00:10.359 TCP 23.104.0.1:56050 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:58:53.302 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40172 12 6556 1 2025-11-23 00:59:45.706 00:00:10.363 TCP 23.104.0.1:50154 -> 1.101.0.1:3000 11 1507 1 2025-11-23 00:59:53.516 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51670 10 6452 1 2025-11-23 01:00:46.114 00:00:10.366 TCP 23.104.0.1:51240 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:00:53.692 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45280 10 6452 1 2025-11-23 01:01:31.493 00:00:00.049 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 01:01:31.306 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 01:01:46.516 00:00:10.369 TCP 23.104.0.1:34774 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:01:53.905 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:60404 10 6452 1 2025-11-23 00:58:02.449 00:05:04.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 00:58:02.445 00:05:04.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 01:02:46.923 00:00:10.383 TCP 23.104.0.1:49596 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:02:54.103 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41600 10 6452 1 2025-11-23 01:03:47.349 00:00:10.380 TCP 23.104.0.1:45994 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:03:54.277 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:38956 10 6452 1 2025-11-23 01:04:47.766 00:00:10.382 TCP 23.104.0.1:59716 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:04:54.443 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:36878 10 6452 1 2025-11-23 01:05:48.188 00:00:10.364 TCP 23.104.0.1:46912 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:05:54.621 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50228 10 6452 1 2025-11-23 01:06:31.626 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 01:06:31.484 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 01:06:48.589 00:00:10.366 TCP 23.104.0.1:44122 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:06:54.827 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:50448 10 6452 1 2025-11-23 01:07:48.994 00:00:10.363 TCP 23.104.0.1:52218 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:07:55.004 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34350 10 6452 1 2025-11-23 01:04:02.449 00:05:04.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 01:04:02.448 00:05:04.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 01:08:49.398 00:00:10.360 TCP 23.104.0.1:33940 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:08:55.216 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37318 10 6452 1 2025-11-23 01:09:49.801 00:00:10.363 TCP 23.104.0.1:56630 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:09:55.422 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56498 10 6452 1 2025-11-23 01:10:50.203 00:00:10.323 TCP 23.104.0.1:39478 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:10:55.597 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55974 10 6452 1 2025-11-23 01:11:31.745 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 01:11:31.733 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 01:11:50.565 00:00:10.371 TCP 23.104.0.1:56600 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:11:55.811 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54018 10 6452 1 2025-11-23 01:12:50.994 00:00:10.367 TCP 23.104.0.1:37134 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:12:55.988 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44402 10 6452 1 2025-11-23 01:13:51.403 00:00:10.319 TCP 23.104.0.1:38752 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:13:56.206 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42354 10 6452 1 2025-11-23 01:10:02.448 00:05:04.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 01:10:02.450 00:05:04.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 01:14:56.421 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48510 10 6452 1 2025-11-23 01:14:51.774 00:00:10.367 TCP 23.104.0.1:56286 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:15:52.178 00:00:10.371 TCP 23.104.0.1:35938 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:15:56.594 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52620 10 6452 1 2025-11-23 01:16:31.574 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 01:16:31.852 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 01:16:56.771 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48632 10 6452 1 2025-11-23 01:16:52.586 00:00:10.334 TCP 23.104.0.1:50594 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:17:52.965 00:00:10.378 TCP 23.104.0.1:44540 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:17:56.985 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55076 10 6452 1 2025-11-23 01:18:53.384 00:00:10.366 TCP 23.104.0.1:45282 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:18:57.214 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52044 10 6452 1 2025-11-23 01:19:53.790 00:00:10.377 TCP 23.104.0.1:57616 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:16:02.452 00:05:04.153 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 01:19:57.436 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43322 10 6452 1 2025-11-23 01:16:02.451 00:05:04.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 01:20:54.205 00:00:10.367 TCP 23.104.0.1:49668 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:20:57.608 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46320 10 6452 1 2025-11-23 01:21:32.390 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 01:21:32.397 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 01:21:54.614 00:00:10.362 TCP 23.104.0.1:59160 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:21:57.835 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55804 10 6452 1 2025-11-23 01:22:55.013 00:00:10.359 TCP 23.104.0.1:52426 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:22:58.071 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49148 10 6452 1 2025-11-23 01:23:55.412 00:00:10.367 TCP 23.104.0.1:58596 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:23:58.284 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34258 10 6452 1 2025-11-23 01:24:55.817 00:00:10.368 TCP 23.104.0.1:42248 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:24:58.499 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48120 10 6452 1 2025-11-23 01:22:02.450 00:05:04.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 01:25:56.221 00:00:10.362 TCP 23.104.0.1:34240 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:22:02.453 00:05:04.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 01:25:58.670 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48826 10 6452 1 2025-11-23 01:26:31.937 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 01:26:32.068 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 01:26:56.620 00:00:10.366 TCP 23.104.0.1:43022 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:26:58.892 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:36368 10 6452 1 2025-11-23 01:27:59.117 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43234 10 6452 1 2025-11-23 01:27:57.028 00:00:10.362 TCP 23.104.0.1:41408 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:28:59.335 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41854 10 6452 1 2025-11-23 01:28:57.429 00:00:10.366 TCP 23.104.0.1:37222 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:29:57.831 00:00:10.392 TCP 23.104.0.1:49940 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:29:59.548 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37176 10 6452 1 2025-11-23 01:30:58.260 00:00:10.327 TCP 23.104.0.1:40776 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:30:59.761 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54216 10 6452 1 2025-11-23 01:31:31.662 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 01:31:32.066 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 01:31:59.979 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33684 10 6452 1 2025-11-23 01:28:02.454 00:05:04.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 01:28:02.457 00:05:04.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 01:31:58.624 00:00:10.367 TCP 23.104.0.1:34400 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:33:00.219 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45840 10 6452 1 2025-11-23 01:32:59.029 00:00:10.369 TCP 23.104.0.1:55514 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:34:00.434 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40862 10 6452 1 2025-11-23 01:33:59.439 00:00:10.368 TCP 23.104.0.1:57146 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:34:59.850 00:00:10.374 TCP 23.104.0.1:53502 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:35:00.652 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59182 10 6452 1 2025-11-23 01:36:00.258 00:00:10.363 TCP 23.104.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:36:00.872 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:50512 10 6452 1 2025-11-23 01:36:32.189 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 01:36:32.093 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 01:37:01.082 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37338 10 6452 1 2025-11-23 01:37:00.657 00:00:10.367 TCP 23.104.0.1:54830 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:34:02.458 00:05:04.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 01:38:01.097 00:00:10.419 TCP 23.104.0.1:37886 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:34:02.455 00:05:04.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 01:38:01.292 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53248 10 6452 1 2025-11-23 01:39:01.508 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50610 10 6452 1 2025-11-23 01:39:01.560 00:00:10.377 TCP 23.104.0.1:50768 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:40:01.729 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57714 10 6452 1 2025-11-23 01:40:01.966 00:00:10.382 TCP 23.104.0.1:40256 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:41:02.389 00:00:10.381 TCP 23.104.0.1:46258 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:41:01.939 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:60670 10 6452 1 2025-11-23 01:41:32.215 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 01:41:32.008 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 01:42:02.805 00:00:10.368 TCP 23.104.0.1:33376 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:42:02.182 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53420 10 6452 1 2025-11-23 01:43:02.391 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41718 10 6452 1 2025-11-23 01:43:03.208 00:00:10.350 TCP 23.104.0.1:57670 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:40:02.457 00:05:04.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 01:40:02.460 00:05:04.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 01:44:03.589 00:00:10.367 TCP 23.104.0.1:36658 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:44:02.601 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46072 10 6452 1 2025-11-23 01:45:03.993 00:00:10.375 TCP 23.104.0.1:51306 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:45:02.814 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40444 10 6452 1 2025-11-23 01:46:04.410 00:00:10.373 TCP 23.104.0.1:53702 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:46:03.038 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36460 10 6452 1 2025-11-23 01:46:32.326 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 01:46:32.351 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 01:47:04.820 00:00:10.374 TCP 23.104.0.1:59594 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:47:03.257 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:34010 10 6452 1 2025-11-23 01:48:05.229 00:00:10.369 TCP 23.104.0.1:35850 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:48:03.426 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59050 10 6452 1 2025-11-23 01:49:05.638 00:00:10.873 TCP 23.104.0.1:41252 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:49:03.638 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42648 10 6452 1 2025-11-23 01:46:02.462 00:05:04.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 01:46:02.459 00:05:04.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 01:50:03.850 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43710 10 6452 1 2025-11-23 01:50:06.552 00:00:10.367 TCP 23.104.0.1:48048 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:51:04.026 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54944 10 6452 1 2025-11-23 01:51:06.960 00:00:10.363 TCP 23.104.0.1:43548 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:51:32.576 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 01:51:32.865 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 01:52:04.242 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57716 10 6452 1 2025-11-23 01:52:07.363 00:00:10.321 TCP 23.104.0.1:59314 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:53:04.417 00:00:10.646 TCP 1.101.0.1:3000 -> 22.102.0.1:52874 10 6452 1 2025-11-23 01:53:07.721 00:00:10.325 TCP 23.104.0.1:44158 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:54:05.100 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41124 10 6452 1 2025-11-23 01:54:08.104 00:00:10.329 TCP 23.104.0.1:49812 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:55:05.314 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33454 10 6452 1 2025-11-23 01:55:08.466 00:00:10.364 TCP 23.104.0.1:56800 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:52:02.464 00:05:04.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 01:52:02.462 00:05:04.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 01:56:05.526 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:43176 10 6452 1 2025-11-23 01:56:08.867 00:00:10.370 TCP 23.104.0.1:55944 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:56:33.100 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 01:56:32.674 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 01:57:05.706 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50662 10 6452 1 2025-11-23 01:57:09.274 00:00:10.332 TCP 23.104.0.1:49470 -> 1.101.0.1:3000 11 1507 1 2025-11-23 01:58:05.929 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54832 10 6452 1 2025-11-23 01:58:09.643 00:00:10.364 TCP 23.104.0.1:49352 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1102, avg pps: 0, avg bpp: 316 Time window: 2025-11-23 00:58:02 - 2025-11-23 01:58:20 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0047s User: 0.0016s Wall: 0.0026s flows/second: 63223.0 Runtime: 0.0026s