Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 11:58:59.514 00:00:10.324 TCP 23.104.0.1:39500 -> 1.101.0.1:3000 11 1507 1 2025-11-24 11:59:37.780 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57924 10 6452 1 2025-11-24 11:59:59.876 00:00:10.392 TCP 23.104.0.1:32880 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:00:38.005 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48106 10 6452 1 2025-11-24 12:01:00.306 00:00:10.325 TCP 23.104.0.1:39826 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:01:38.231 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37862 10 6452 1 2025-11-24 11:57:07.386 00:05:55.729 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 11:57:07.383 00:05:55.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:02:13.586 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:02:13.474 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:02:00.672 00:00:26.351 TCP 23.104.0.1:45688 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:02:38.441 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41168 10 6452 1 2025-11-24 12:03:17.109 00:00:10.358 TCP 23.104.0.1:50328 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:03:38.660 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44214 10 6452 1 2025-11-24 12:04:17.506 00:00:10.364 TCP 23.104.0.1:57670 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:04:38.839 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52718 10 6452 1 2025-11-24 12:05:17.913 00:00:10.363 TCP 23.104.0.1:39746 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:05:39.070 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58352 10 6452 1 2025-11-24 12:06:18.316 00:00:10.364 TCP 23.104.0.1:43652 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:06:39.296 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51192 10 6452 1 2025-11-24 12:07:13.727 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:07:13.638 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:07:18.720 00:00:10.325 TCP 23.104.0.1:41864 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:07:39.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45162 10 6452 1 2025-11-24 12:03:07.389 00:05:55.729 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:03:07.385 00:05:55.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:08:19.106 00:00:10.324 TCP 23.104.0.1:56046 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:08:39.734 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40074 10 6452 1 2025-11-24 12:09:19.469 00:00:10.360 TCP 23.104.0.1:52638 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:09:39.950 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53638 10 6452 1 2025-11-24 12:10:19.870 00:00:10.367 TCP 23.104.0.1:56744 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:10:40.174 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50904 10 6452 1 2025-11-24 12:11:20.278 00:00:10.391 TCP 23.104.0.1:38694 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:11:40.387 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39770 10 6452 1 2025-11-24 12:12:13.907 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:12:13.805 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:12:20.721 00:00:10.375 TCP 23.104.0.1:46566 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:12:40.606 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50648 10 6452 1 2025-11-24 12:13:21.137 00:00:10.340 TCP 23.104.0.1:42622 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:13:40.816 00:00:10.494 TCP 1.101.0.1:3000 -> 22.102.0.1:39224 10 6452 1 2025-11-24 12:09:07.386 00:05:55.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:09:07.390 00:05:55.729 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:14:21.519 00:00:10.369 TCP 23.104.0.1:44504 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:14:41.354 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58480 10 6452 1 2025-11-24 12:15:21.932 00:00:10.381 TCP 23.104.0.1:48866 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:15:41.565 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53724 10 6452 1 2025-11-24 12:16:22.350 00:00:10.367 TCP 23.104.0.1:59882 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:16:41.785 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35312 10 6452 1 2025-11-24 12:17:13.856 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:17:13.796 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:17:22.757 00:00:10.378 TCP 23.104.0.1:41940 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:17:42.003 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52160 10 6452 1 2025-11-24 12:18:23.174 00:00:10.357 TCP 23.104.0.1:34268 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:18:42.240 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57100 10 6452 1 2025-11-24 12:19:23.573 00:00:10.366 TCP 23.104.0.1:34612 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:19:42.466 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50466 10 6452 1 2025-11-24 12:15:07.390 00:05:55.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:15:07.392 00:05:55.728 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:20:23.978 00:00:10.375 TCP 23.104.0.1:54326 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:20:42.681 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44274 10 6452 1 2025-11-24 12:21:24.399 00:00:10.329 TCP 23.104.0.1:35532 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:21:42.893 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50984 10 6452 1 2025-11-24 12:22:13.745 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:22:13.998 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:22:24.760 00:00:10.375 TCP 23.104.0.1:39090 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:22:43.106 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43512 10 6452 1 2025-11-24 12:23:25.176 00:00:10.365 TCP 23.104.0.1:39482 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:23:43.313 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36938 10 6452 1 2025-11-24 12:24:25.582 00:00:10.368 TCP 23.104.0.1:53502 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:24:43.523 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56218 10 6452 1 2025-11-24 12:25:25.993 00:00:10.321 TCP 23.104.0.1:56668 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:25:43.703 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53926 10 6452 1 2025-11-24 12:21:07.390 00:05:55.735 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:21:07.393 00:05:55.729 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:26:26.351 00:00:10.359 TCP 23.104.0.1:51048 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:26:43.910 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57090 10 6452 1 2025-11-24 12:27:14.024 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:27:14.082 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:27:26.752 00:00:11.650 TCP 23.104.0.1:42342 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:27:44.120 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38234 10 6452 1 2025-11-24 12:28:28.443 00:00:10.361 TCP 23.104.0.1:44728 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:28:44.339 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37494 10 6452 1 2025-11-24 12:29:28.856 00:00:10.376 TCP 23.104.0.1:53820 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:29:44.544 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48712 10 6452 1 2025-11-24 12:30:29.269 00:00:10.369 TCP 23.104.0.1:38126 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:30:44.768 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34676 10 6452 1 2025-11-24 12:31:29.676 00:00:10.371 TCP 23.104.0.1:59158 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:31:44.996 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:42334 10 6452 1 2025-11-24 12:27:07.394 00:05:55.730 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:27:07.391 00:05:55.735 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:32:14.252 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:32:14.315 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:32:30.113 00:00:10.367 TCP 23.104.0.1:51180 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:32:45.221 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47596 10 6452 1 2025-11-24 12:33:30.515 00:00:10.367 TCP 23.104.0.1:50672 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:33:45.433 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49042 10 6452 1 2025-11-24 12:34:30.918 00:00:10.398 TCP 23.104.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:34:45.647 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55400 10 6452 1 2025-11-24 12:35:31.352 00:00:10.365 TCP 23.104.0.1:54586 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:35:45.830 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56296 10 6452 1 2025-11-24 12:36:31.752 00:00:10.390 TCP 23.104.0.1:54382 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:36:46.065 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39714 10 6452 1 2025-11-24 12:37:14.474 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:37:14.347 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:37:32.193 00:00:10.423 TCP 23.104.0.1:58154 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:37:46.240 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38488 10 6452 1 2025-11-24 12:33:07.394 00:05:55.732 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:33:07.393 00:05:55.737 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:38:32.661 00:00:10.368 TCP 23.104.0.1:48452 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:38:46.455 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34728 10 6452 1 2025-11-24 12:39:33.094 00:00:10.369 TCP 23.104.0.1:44770 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:39:46.670 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57236 10 6452 1 2025-11-24 12:40:33.501 00:00:10.367 TCP 23.104.0.1:60540 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:40:46.898 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48892 10 6452 1 2025-11-24 12:41:33.909 00:00:10.386 TCP 23.104.0.1:38832 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:41:47.116 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49142 10 6452 1 2025-11-24 12:42:14.449 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:42:14.412 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:42:34.335 00:00:10.369 TCP 23.104.0.1:51944 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:42:47.328 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39228 10 6452 1 2025-11-24 12:43:34.744 00:00:10.326 TCP 23.104.0.1:43916 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:43:47.512 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46088 10 6452 1 2025-11-24 12:39:07.394 00:05:55.733 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:39:07.392 00:05:55.738 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:44:35.112 00:00:10.372 TCP 23.104.0.1:42528 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:44:47.730 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45674 10 6452 1 2025-11-24 12:45:35.522 00:00:10.415 TCP 23.104.0.1:48902 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:45:47.910 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53902 10 6452 1 2025-11-24 12:46:35.980 00:00:10.366 TCP 23.104.0.1:54230 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:46:48.128 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33484 10 6452 1 2025-11-24 12:47:14.405 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:47:14.544 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:47:36.390 00:00:10.364 TCP 23.104.0.1:43650 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:47:48.345 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46188 10 6452 1 2025-11-24 12:48:36.789 00:00:10.372 TCP 23.104.0.1:56566 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:48:48.564 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:41216 10 6452 1 2025-11-24 12:49:37.203 00:00:10.977 TCP 23.104.0.1:53158 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:49:48.800 00:00:10.757 TCP 1.101.0.1:3000 -> 22.102.0.1:42152 10 6452 1 2025-11-24 12:45:07.396 00:05:55.733 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:45:07.394 00:05:55.738 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:50:38.217 00:00:10.368 TCP 23.104.0.1:33994 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:50:49.601 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48290 10 6452 1 2025-11-24 12:51:38.624 00:00:10.367 TCP 23.104.0.1:53230 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:51:49.774 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42826 10 6452 1 2025-11-24 12:52:14.634 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:52:14.682 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:52:39.034 00:00:10.362 TCP 23.104.0.1:59622 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:52:50.001 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59066 10 6452 1 2025-11-24 12:53:39.435 00:00:10.364 TCP 23.104.0.1:42584 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:53:50.215 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41066 10 6452 1 2025-11-24 12:54:39.833 00:00:10.371 TCP 23.104.0.1:41160 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:54:50.434 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:59952 10 6452 1 2025-11-24 12:55:40.249 00:00:10.471 TCP 23.104.0.1:57344 -> 1.101.0.1:3000 17 2241 1 2025-11-24 12:51:07.395 00:05:55.754 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 12:55:50.603 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:54648 14 14298 1 2025-11-24 12:51:07.398 00:05:55.749 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 12:56:40.771 00:00:10.370 TCP 23.104.0.1:49244 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:56:50.886 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58250 10 6452 1 2025-11-24 12:57:14.672 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 12:57:14.764 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 12:57:41.179 00:00:10.329 TCP 23.104.0.1:45584 -> 1.101.0.1:3000 11 1507 1 2025-11-24 12:57:51.102 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55898 10 6452 1 2025-11-24 12:58:41.552 00:00:10.364 TCP 23.104.0.1:42516 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500476, total packets: 1572, avg bps: 1080, avg pps: 0, avg bpp: 318 Time window: 2025-11-24 11:57:07 - 2025-11-24 12:58:51 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0047s User: 0.0016s Wall: 0.0025s flows/second: 65248.3 Runtime: 0.0025s