Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 01:58:53.390 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60762 10 6452 1 2025-11-24 01:59:38.641 00:00:10.323 TCP 23.104.0.1:47624 -> 1.101.0.1:3000 11 1507 1 2025-11-24 01:59:53.604 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32852 10 6452 1 2025-11-24 02:00:39.003 00:00:10.362 TCP 23.104.0.1:54250 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:00:53.817 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54128 10 6452 1 2025-11-24 02:01:39.406 00:00:10.366 TCP 23.104.0.1:46844 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:02:01.398 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 02:02:01.509 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 02:01:53.992 00:00:10.620 TCP 1.101.0.1:3000 -> 22.102.0.1:48302 10 6452 1 2025-11-24 01:58:02.889 00:05:04.287 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 01:58:02.885 00:05:04.293 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 02:02:39.811 00:00:10.363 TCP 23.104.0.1:51346 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:02:54.659 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57412 10 6452 1 2025-11-24 02:03:40.213 00:00:10.363 TCP 23.104.0.1:58152 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:03:54.876 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35988 10 6452 1 2025-11-24 02:04:40.612 00:00:10.320 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:04:55.102 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58300 10 6452 1 2025-11-24 02:05:40.973 00:00:10.439 TCP 23.104.0.1:52058 -> 1.101.0.1:3000 15 1926 1 2025-11-24 02:05:55.319 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48314 12 10375 1 2025-11-24 02:06:41.446 00:00:10.365 TCP 23.104.0.1:51466 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:07:01.655 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 02:07:01.648 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 02:06:55.553 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57292 10 6452 1 2025-11-24 02:07:41.854 00:00:10.380 TCP 23.104.0.1:36300 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:07:55.768 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54666 10 6452 1 2025-11-24 02:04:02.887 00:05:04.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 02:04:02.890 00:05:04.289 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 02:08:42.268 00:00:10.368 TCP 23.104.0.1:44566 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:08:55.995 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58822 10 6452 1 2025-11-24 02:09:42.673 00:00:10.385 TCP 23.104.0.1:38154 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:09:56.215 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53540 10 6452 1 2025-11-24 02:10:43.099 00:00:10.322 TCP 23.104.0.1:58488 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:10:56.432 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-11-24 02:11:43.458 00:00:10.365 TCP 23.104.0.1:57830 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:12:01.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 02:12:01.776 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 02:11:56.640 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43714 10 6452 1 2025-11-24 02:12:43.858 00:00:10.333 TCP 23.104.0.1:46290 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:12:56.854 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40266 10 6452 1 2025-11-24 02:13:44.231 00:00:10.361 TCP 23.104.0.1:36858 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:10:02.891 00:05:04.295 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 02:10:02.889 00:05:04.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 02:13:57.086 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:48882 10 6452 1 2025-11-24 02:14:44.630 00:00:10.325 TCP 23.104.0.1:35068 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:14:57.298 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:36476 10 6452 1 2025-11-24 02:15:44.997 00:00:10.367 TCP 23.104.0.1:40184 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:15:57.480 00:00:10.764 TCP 1.101.0.1:3000 -> 22.102.0.1:48998 10 6452 1 2025-11-24 02:16:45.402 00:00:10.376 TCP 23.104.0.1:34046 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:17:01.814 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 02:17:01.790 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 02:16:58.284 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39988 10 6452 1 2025-11-24 02:17:45.821 00:00:10.967 TCP 23.104.0.1:54450 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:17:58.497 00:00:10.966 TCP 1.101.0.1:3000 -> 22.102.0.1:41876 10 6452 1 2025-11-24 02:18:46.836 00:00:10.348 TCP 23.104.0.1:49638 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:18:59.511 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52530 10 6452 1 2025-11-24 02:19:47.218 00:00:10.367 TCP 23.104.0.1:41408 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:16:02.891 00:05:04.296 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 02:19:59.719 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52490 10 6452 1 2025-11-24 02:16:02.889 00:05:04.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 02:20:47.622 00:00:10.366 TCP 23.104.0.1:43194 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:20:59.939 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47516 10 6452 1 2025-11-24 02:22:01.925 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 02:21:48.027 00:00:10.415 TCP 23.104.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:22:01.873 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 02:22:00.169 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51562 10 6452 1 2025-11-24 02:22:48.487 00:00:10.336 TCP 23.104.0.1:55884 -> 1.101.0.1:3000 12 1559 1 2025-11-24 02:23:00.388 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47088 10 6452 1 2025-11-24 02:23:48.870 00:00:10.408 TCP 23.104.0.1:43924 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:24:00.601 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56876 10 6452 1 2025-11-24 02:24:49.313 00:00:10.367 TCP 23.104.0.1:40660 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:25:00.811 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:34622 10 6452 1 2025-11-24 02:25:49.718 00:00:10.375 TCP 23.104.0.1:59754 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:22:02.893 00:05:04.296 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 02:26:01.025 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50012 10 6452 1 2025-11-24 02:22:02.891 00:05:04.300 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 02:26:50.130 00:00:10.323 TCP 23.104.0.1:41488 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:27:01.718 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 02:27:02.141 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 02:27:01.230 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43210 10 6452 1 2025-11-24 02:27:50.495 00:00:10.366 TCP 23.104.0.1:59838 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:28:01.414 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:57628 10 6452 1 2025-11-24 02:28:50.894 00:00:10.365 TCP 23.104.0.1:34260 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:29:01.648 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43210 10 6452 1 2025-11-24 02:29:51.300 00:00:10.365 TCP 23.104.0.1:40282 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:30:01.865 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51336 10 6452 1 2025-11-24 02:30:51.704 00:00:10.439 TCP 23.104.0.1:41216 -> 1.101.0.1:3000 15 1926 1 2025-11-24 02:31:02.045 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:52056 12 10375 1 2025-11-24 02:32:02.371 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 02:31:52.185 00:00:10.361 TCP 23.104.0.1:40816 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:28:02.894 00:05:04.297 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 02:32:02.435 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 02:28:02.891 00:05:04.302 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 02:32:02.240 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51192 10 6452 1 2025-11-24 02:32:52.584 00:00:10.559 TCP 23.104.0.1:47684 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:33:02.409 00:00:10.528 TCP 1.101.0.1:3000 -> 22.102.0.1:46514 10 6452 1 2025-11-24 02:33:53.183 00:00:10.363 TCP 23.104.0.1:53390 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:34:02.979 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:56326 10 6452 1 2025-11-24 02:34:53.583 00:00:10.365 TCP 23.104.0.1:48016 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:35:03.176 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45430 10 6452 1 2025-11-24 02:35:53.985 00:00:10.365 TCP 23.104.0.1:37908 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:36:03.389 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41386 10 6452 1 2025-11-24 02:37:02.260 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 02:37:02.265 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 02:36:54.384 00:00:10.367 TCP 23.104.0.1:52162 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:37:03.602 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32902 10 6452 1 2025-11-24 02:37:54.789 00:00:10.361 TCP 23.104.0.1:37162 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:34:02.894 00:05:04.296 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 02:34:02.892 00:05:04.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 02:38:03.814 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43302 10 6452 1 2025-11-24 02:38:55.191 00:00:10.330 TCP 23.104.0.1:42396 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:39:04.041 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45160 10 6452 1 2025-11-24 02:39:55.557 00:00:10.373 TCP 23.104.0.1:51258 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:40:04.220 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55382 10 6452 1 2025-11-24 02:40:55.966 00:00:10.337 TCP 23.104.0.1:45280 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:41:04.433 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49882 10 6452 1 2025-11-24 02:42:02.321 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 02:42:02.265 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 02:41:56.342 00:00:10.324 TCP 23.104.0.1:60644 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:42:04.647 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46420 10 6452 1 2025-11-24 02:42:56.705 00:00:10.387 TCP 23.104.0.1:56278 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:43:04.863 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57680 10 6452 1 2025-11-24 02:40:02.895 00:05:04.302 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 02:40:02.897 00:05:04.297 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 02:43:57.132 00:00:10.364 TCP 23.104.0.1:38330 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:44:05.040 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40332 10 6452 1 2025-11-24 02:44:57.533 00:00:10.369 TCP 23.104.0.1:47702 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:45:05.254 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49166 10 6452 1 2025-11-24 02:45:57.950 00:00:10.329 TCP 23.104.0.1:56692 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:46:05.427 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49396 10 6452 1 2025-11-24 02:47:02.504 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 02:47:02.143 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 02:46:58.320 00:00:10.365 TCP 23.104.0.1:46982 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:47:05.641 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40456 10 6452 1 2025-11-24 02:47:58.727 00:00:10.375 TCP 23.104.0.1:49336 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:48:05.852 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55080 10 6452 1 2025-11-24 02:48:59.147 00:00:10.364 TCP 23.104.0.1:46528 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:49:06.044 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41438 10 6452 1 2025-11-24 02:49:59.545 00:00:10.367 TCP 23.104.0.1:54864 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:46:02.899 00:05:04.297 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 02:46:02.896 00:05:04.302 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 02:50:06.272 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49796 10 6452 1 2025-11-24 02:50:59.952 00:00:10.370 TCP 23.104.0.1:49266 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:51:06.490 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37192 10 6452 1 2025-11-24 02:52:02.327 00:00:00.013 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 02:52:02.468 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 02:52:00.359 00:00:10.365 TCP 23.104.0.1:56858 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:52:06.708 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42436 10 6452 1 2025-11-24 02:53:00.793 00:00:10.365 TCP 23.104.0.1:35320 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:53:06.937 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:59378 10 6452 1 2025-11-24 02:54:01.199 00:00:10.363 TCP 23.104.0.1:56018 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:54:07.180 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41720 10 6452 1 2025-11-24 02:55:01.603 00:00:10.366 TCP 23.104.0.1:45022 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:55:07.397 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53950 10 6452 1 2025-11-24 02:52:02.902 00:05:04.300 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 02:52:02.898 00:05:04.305 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 02:56:02.009 00:00:10.371 TCP 23.104.0.1:57300 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:56:07.614 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50596 10 6452 1 2025-11-24 02:57:02.845 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 02:57:02.673 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 02:57:02.422 00:00:10.328 TCP 23.104.0.1:56404 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:57:07.820 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57774 10 6452 1 2025-11-24 02:58:02.788 00:00:10.351 TCP 23.104.0.1:55600 -> 1.101.0.1:3000 11 1507 1 2025-11-24 02:58:07.995 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53064 10 6452 1 Summary: total flows: 163, total bytes: 505577, total packets: 1574, avg bps: 1118, avg pps: 0, avg bpp: 321 Time window: 2025-11-24 01:58:02 - 2025-11-24 02:58:18 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0035s User: 0.0017s Wall: 0.0017s flows/second: 93949.6 Runtime: 0.0018s