Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 11:58:56.824 00:00:10.321 TCP 23.104.0.1:37426 -> 1.101.0.1:3000 11 1507 1 2025-11-23 11:59:19.098 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51284 10 6452 1 2025-11-23 11:59:57.184 00:00:10.367 TCP 23.104.0.1:57068 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:00:19.305 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57374 10 6452 1 2025-11-23 12:00:57.591 00:00:10.380 TCP 23.104.0.1:34354 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:01:19.523 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41178 10 6452 1 2025-11-23 12:01:44.472 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 12:01:44.687 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 11:58:02.646 00:05:04.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 12:01:58.013 00:00:10.364 TCP 23.104.0.1:32874 -> 1.101.0.1:3000 11 1507 1 2025-11-23 11:58:02.644 00:05:04.178 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 12:02:19.745 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45946 10 6452 1 2025-11-23 12:02:58.416 00:00:10.414 TCP 23.104.0.1:48448 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:03:19.954 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:33924 10 6452 1 2025-11-23 12:03:58.873 00:00:10.327 TCP 23.104.0.1:51914 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:04:20.145 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49382 10 6452 1 2025-11-23 12:04:59.237 00:00:10.420 TCP 23.104.0.1:54202 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:05:20.353 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34492 10 6452 1 2025-11-23 12:05:59.684 00:00:10.326 TCP 23.104.0.1:55050 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:06:20.571 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38584 10 6452 1 2025-11-23 12:06:44.872 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 12:06:44.946 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 12:07:00.056 00:00:10.365 TCP 23.104.0.1:49200 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:07:20.744 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38658 10 6452 1 2025-11-23 12:04:02.646 00:05:04.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 12:08:00.460 00:00:10.362 TCP 23.104.0.1:49698 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:04:02.647 00:05:04.178 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 12:08:20.963 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51966 10 6452 1 2025-11-23 12:09:00.867 00:00:10.367 TCP 23.104.0.1:57788 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:09:21.194 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57430 10 6452 1 2025-11-23 12:10:01.270 00:00:10.363 TCP 23.104.0.1:56888 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:10:21.408 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57310 10 6452 1 2025-11-23 12:11:01.672 00:00:10.368 TCP 23.104.0.1:40904 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:11:21.625 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51462 10 6452 1 2025-11-23 12:11:44.853 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 12:11:44.780 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 12:12:02.101 00:00:10.365 TCP 23.104.0.1:49944 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:12:21.845 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57298 10 6452 1 2025-11-23 12:13:02.505 00:00:10.383 TCP 23.104.0.1:60148 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:13:22.080 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60530 10 6452 1 2025-11-23 12:10:02.649 00:05:04.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 12:10:02.648 00:05:04.182 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 12:14:02.947 00:00:10.329 TCP 23.104.0.1:49768 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:14:22.291 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56640 10 6452 1 2025-11-23 12:15:03.320 00:00:10.384 TCP 23.104.0.1:35404 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:15:22.518 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38130 10 6452 1 2025-11-23 12:16:03.748 00:00:10.364 TCP 23.104.0.1:35732 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:16:22.690 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55952 10 6452 1 2025-11-23 12:16:45.195 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 12:16:45.263 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 12:17:04.148 00:00:10.367 TCP 23.104.0.1:41642 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:17:22.906 00:00:10.244 TCP 1.101.0.1:3000 -> 22.102.0.1:43942 10 6452 1 2025-11-23 12:18:04.554 00:00:10.364 TCP 23.104.0.1:54942 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:18:23.182 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:38670 10 6452 1 2025-11-23 12:19:04.954 00:00:10.368 TCP 23.104.0.1:47260 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:19:23.369 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41852 10 6452 1 2025-11-23 12:16:02.646 00:05:04.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 12:16:02.650 00:05:04.178 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 12:20:05.362 00:00:10.366 TCP 23.104.0.1:37178 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:20:23.584 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:58216 11 6504 1 2025-11-23 12:21:05.765 00:00:10.368 TCP 23.104.0.1:50368 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:21:23.861 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:53774 10 6452 1 2025-11-23 12:21:44.926 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 12:21:45.012 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 12:22:06.174 00:00:10.325 TCP 23.104.0.1:40930 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:22:24.104 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42844 10 6452 1 2025-11-23 12:23:06.540 00:00:10.368 TCP 23.104.0.1:51040 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:23:24.290 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38554 10 6452 1 2025-11-23 12:24:06.942 00:00:10.340 TCP 23.104.0.1:59542 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:24:24.466 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58470 10 6452 1 2025-11-23 12:25:07.317 00:00:10.325 TCP 23.104.0.1:42482 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:25:24.642 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40492 10 6452 1 2025-11-23 12:22:02.649 00:05:04.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 12:22:02.653 00:05:04.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 12:26:07.680 00:00:10.364 TCP 23.104.0.1:51614 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:26:24.857 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59052 10 6452 1 2025-11-23 12:26:45.294 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 12:26:45.170 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 12:27:08.105 00:00:10.369 TCP 23.104.0.1:50770 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:27:25.075 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53292 10 6452 1 2025-11-23 12:28:08.516 00:00:10.327 TCP 23.104.0.1:57280 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:28:25.287 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52198 10 6452 1 2025-11-23 12:29:08.887 00:00:10.342 TCP 23.104.0.1:46584 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:29:25.500 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36568 10 6452 1 2025-11-23 12:30:09.267 00:00:10.328 TCP 23.104.0.1:32814 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:30:25.713 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:38936 12 10375 1 2025-11-23 12:31:09.634 00:00:10.444 TCP 23.104.0.1:33050 -> 1.101.0.1:3000 15 1926 1 2025-11-23 12:31:25.963 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44032 10 6452 1 2025-11-23 12:31:45.246 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 12:31:45.334 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 12:28:02.652 00:05:04.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 12:28:02.650 00:05:04.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 12:32:10.115 00:00:10.339 TCP 23.104.0.1:42564 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:32:26.140 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58088 10 6452 1 2025-11-23 12:33:10.494 00:00:10.380 TCP 23.104.0.1:39918 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:33:26.351 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54380 10 6452 1 2025-11-23 12:34:10.914 00:00:10.360 TCP 23.104.0.1:59874 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:34:26.575 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38066 10 6452 1 2025-11-23 12:35:11.311 00:00:10.363 TCP 23.104.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:35:26.745 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52276 10 6452 1 2025-11-23 12:36:11.714 00:00:10.376 TCP 23.104.0.1:37958 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:36:46.052 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 12:36:26.954 00:00:19.906 TCP 1.101.0.1:3000 -> 22.102.0.1:44966 10 6452 1 2025-11-23 12:36:45.963 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 12:37:12.127 00:00:10.367 TCP 23.104.0.1:60212 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:37:36.903 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44862 10 6452 1 2025-11-23 12:34:02.650 00:05:04.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 12:34:02.654 00:05:04.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 12:38:12.533 00:00:10.324 TCP 23.104.0.1:40282 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:38:37.121 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44338 10 6452 1 2025-11-23 12:39:12.897 00:00:10.367 TCP 23.104.0.1:54224 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:39:37.335 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38056 10 6452 1 2025-11-23 12:40:13.308 00:00:10.358 TCP 23.104.0.1:52822 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:40:37.551 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:51498 10 6452 1 2025-11-23 12:41:13.705 00:00:10.371 TCP 23.104.0.1:60742 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:41:45.523 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 12:41:45.321 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 12:41:37.759 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:55154 10 6452 1 2025-11-23 12:42:14.113 00:00:10.366 TCP 23.104.0.1:45994 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:42:37.925 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:50854 10 6452 1 2025-11-23 12:43:14.518 00:00:10.367 TCP 23.104.0.1:60446 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:43:38.117 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46104 10 6452 1 2025-11-23 12:40:02.656 00:05:04.198 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 12:40:02.655 00:05:04.204 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 12:44:14.920 00:00:10.382 TCP 23.104.0.1:60782 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:44:38.346 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38192 10 6452 1 2025-11-23 12:45:15.342 00:00:10.459 TCP 23.104.0.1:33118 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:45:38.557 00:00:10.655 TCP 1.101.0.1:3000 -> 22.102.0.1:60100 10 6452 1 2025-11-23 12:46:15.835 00:00:10.401 TCP 23.104.0.1:45324 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:46:45.420 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 12:46:45.706 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 12:46:39.252 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37920 10 6452 1 2025-11-23 12:47:16.263 00:00:10.368 TCP 23.104.0.1:51674 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:47:39.469 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38522 10 6452 1 2025-11-23 12:48:16.667 00:00:10.323 TCP 23.104.0.1:37674 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:48:39.683 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39368 10 6452 1 2025-11-23 12:49:17.026 00:00:10.327 TCP 23.104.0.1:41600 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:49:39.893 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48248 10 6452 1 2025-11-23 12:46:02.661 00:05:04.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 12:46:02.657 00:05:04.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 12:50:17.394 00:00:10.361 TCP 23.104.0.1:42534 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:50:40.110 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47994 10 6452 1 2025-11-23 12:51:17.796 00:00:10.346 TCP 23.104.0.1:34474 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:51:45.751 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 12:51:45.515 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 12:51:40.322 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53508 10 6452 1 2025-11-23 12:52:18.177 00:00:10.321 TCP 23.104.0.1:46612 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:52:40.536 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:41586 10 6452 1 2025-11-23 12:53:18.538 00:00:10.366 TCP 23.104.0.1:43384 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:53:40.705 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42666 10 6452 1 2025-11-23 12:54:18.945 00:00:10.367 TCP 23.104.0.1:55112 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:54:40.923 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:38944 10 6452 1 2025-11-23 12:55:19.351 00:00:10.363 TCP 23.104.0.1:38386 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:55:41.171 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37040 10 6452 1 2025-11-23 12:52:02.665 00:05:04.194 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 12:52:02.661 00:05:04.199 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 12:56:19.752 00:00:10.379 TCP 23.104.0.1:35282 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:56:46.139 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 12:56:46.280 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 12:56:41.409 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47978 10 6452 1 2025-11-23 12:57:20.171 00:00:10.368 TCP 23.104.0.1:51176 -> 1.101.0.1:3000 11 1507 1 2025-11-23 12:57:41.624 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51386 10 6452 1 2025-11-23 12:58:20.574 00:00:10.319 TCP 23.104.0.1:35488 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496290, total packets: 1569, avg bps: 1094, avg pps: 0, avg bpp: 316 Time window: 2025-11-23 11:58:02 - 2025-11-23 12:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0040s User: 0.0020s Wall: 0.0028s flows/second: 58528.5 Runtime: 0.0028s