Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-25 15:58:45.301 00:00:10.370 TCP 23.104.0.1:35136 -> 1.101.0.1:3000 11 1507 1 2025-11-25 15:59:07.875 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54656 10 6452 1 2025-11-25 15:59:45.711 00:00:10.539 TCP 23.104.0.1:33766 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:00:08.091 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38124 10 6452 1 2025-11-25 16:00:46.288 00:00:10.369 TCP 23.104.0.1:40230 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:01:08.304 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:37568 12 10369 1 2025-11-25 15:57:07.953 00:05:55.691 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:01:46.696 00:00:10.448 TCP 23.104.0.1:55460 -> 1.101.0.1:3000 15 1926 1 2025-11-25 15:57:07.951 00:05:55.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:02:08.541 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60274 10 6452 1 2025-11-25 16:02:47.217 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:02:47.117 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:02:47.178 00:00:10.366 TCP 23.104.0.1:37852 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:03:08.753 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34330 10 6452 1 2025-11-25 16:03:47.580 00:00:10.323 TCP 23.104.0.1:46848 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:04:08.975 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:54894 10 6452 1 2025-11-25 16:04:47.947 00:00:10.385 TCP 23.104.0.1:44870 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:05:09.220 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39434 10 6452 1 2025-11-25 16:05:48.372 00:00:10.364 TCP 23.104.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:06:09.441 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48876 10 6452 1 2025-11-25 16:06:48.771 00:00:10.368 TCP 23.104.0.1:36890 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:07:09.663 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48144 10 6452 1 2025-11-25 16:07:47.976 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:07:48.038 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:07:49.179 00:00:10.368 TCP 23.104.0.1:35456 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:03:07.955 00:05:55.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:03:07.953 00:05:55.697 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:08:09.887 00:00:10.594 TCP 1.101.0.1:3000 -> 22.102.0.1:44022 10 6452 1 2025-11-25 16:08:49.585 00:00:10.366 TCP 23.104.0.1:49050 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:09:10.525 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58198 10 6452 1 2025-11-25 16:09:49.990 00:00:10.326 TCP 23.104.0.1:38944 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:10:10.744 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54502 10 6452 1 2025-11-25 16:10:50.351 00:00:10.369 TCP 23.104.0.1:41298 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:11:10.965 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60088 10 6452 1 2025-11-25 16:11:50.762 00:00:10.364 TCP 23.104.0.1:53906 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:12:11.189 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 10 6452 1 2025-11-25 16:12:47.564 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:12:47.363 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:12:51.165 00:00:10.494 TCP 23.104.0.1:60758 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:13:11.400 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39008 10 6452 1 2025-11-25 16:09:07.957 00:05:55.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:13:51.699 00:00:10.364 TCP 23.104.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:09:07.955 00:05:55.696 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:14:11.615 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58636 10 6452 1 2025-11-25 16:14:52.108 00:00:10.365 TCP 23.104.0.1:57166 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:15:11.841 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46518 10 6452 1 2025-11-25 16:15:52.513 00:00:10.363 TCP 23.104.0.1:44006 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:16:12.078 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55000 10 6452 1 2025-11-25 16:16:52.920 00:00:10.382 TCP 23.104.0.1:34004 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:17:12.296 00:00:11.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41656 10 6452 1 2025-11-25 16:17:47.675 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:17:47.548 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:17:53.339 00:00:10.364 TCP 23.104.0.1:60858 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:18:13.528 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42654 10 6452 1 2025-11-25 16:18:53.749 00:00:10.379 TCP 23.104.0.1:54686 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:19:13.751 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47578 10 6452 1 2025-11-25 16:15:07.961 00:05:55.688 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:19:54.168 00:00:10.331 TCP 23.104.0.1:48194 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:15:07.960 00:05:55.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:20:13.967 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56198 10 6452 1 2025-11-25 16:20:54.536 00:00:10.371 TCP 23.104.0.1:38202 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:21:14.190 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49956 10 6452 1 2025-11-25 16:21:54.954 00:00:10.370 TCP 23.104.0.1:41962 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:22:14.403 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39444 10 6452 1 2025-11-25 16:22:47.550 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:22:47.579 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:22:55.363 00:00:10.368 TCP 23.104.0.1:58900 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:23:14.572 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36548 10 6452 1 2025-11-25 16:23:55.769 00:00:10.373 TCP 23.104.0.1:39912 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:24:14.743 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34994 10 6452 1 2025-11-25 16:24:56.174 00:00:10.367 TCP 23.104.0.1:60220 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:25:14.955 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:54080 12 6556 1 2025-11-25 16:21:07.961 00:05:55.691 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:21:07.963 00:05:55.686 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:25:56.577 00:00:10.569 TCP 23.104.0.1:53078 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:26:15.208 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36368 10 6452 1 2025-11-25 16:26:57.179 00:00:10.364 TCP 23.104.0.1:54156 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:27:15.427 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53358 10 6452 1 2025-11-25 16:27:47.801 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:27:48.007 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:27:57.583 00:00:10.324 TCP 23.104.0.1:34482 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:28:15.646 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41760 10 6452 1 2025-11-25 16:28:57.948 00:00:10.332 TCP 23.104.0.1:35830 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:29:15.880 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35696 10 6452 1 2025-11-25 16:29:58.316 00:00:10.363 TCP 23.104.0.1:41434 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:30:16.101 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44940 10 6452 1 2025-11-25 16:30:58.714 00:00:10.509 TCP 23.104.0.1:56390 -> 1.101.0.1:3000 15 1926 1 2025-11-25 16:31:16.325 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44956 12 10369 1 2025-11-25 16:27:07.961 00:05:55.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:27:07.966 00:05:55.687 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:31:59.262 00:00:10.327 TCP 23.104.0.1:35888 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:32:16.568 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58642 10 6452 1 2025-11-25 16:32:47.627 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:32:48.064 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:32:59.629 00:00:10.362 TCP 23.104.0.1:56946 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:33:16.785 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36542 10 6452 1 2025-11-25 16:34:00.030 00:00:10.323 TCP 23.104.0.1:56416 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:34:16.995 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41088 10 6452 1 2025-11-25 16:35:00.390 00:00:10.366 TCP 23.104.0.1:43950 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:35:17.215 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44964 10 6452 1 2025-11-25 16:36:00.800 00:00:10.369 TCP 23.104.0.1:35168 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:36:17.445 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43658 10 6452 1 2025-11-25 16:37:01.207 00:00:10.366 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:37:17.662 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50764 10 6452 1 2025-11-25 16:37:47.963 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:37:47.859 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:33:07.966 00:05:55.688 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:33:07.963 00:05:55.693 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:38:01.614 00:00:10.364 TCP 23.104.0.1:50614 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:38:17.875 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43680 10 6452 1 2025-11-25 16:39:02.018 00:00:10.361 TCP 23.104.0.1:44688 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:39:18.078 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51164 10 6452 1 2025-11-25 16:40:02.417 00:00:10.364 TCP 23.104.0.1:44208 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:40:18.289 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44096 11 6492 1 2025-11-25 16:41:02.822 00:00:10.363 TCP 23.104.0.1:41156 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:41:18.521 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52352 10 6452 1 2025-11-25 16:42:03.222 00:00:10.968 TCP 23.104.0.1:56224 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:42:18.740 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36786 10 6452 1 2025-11-25 16:42:48.033 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:42:48.347 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:43:04.229 00:00:10.363 TCP 23.104.0.1:58882 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:43:18.967 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41060 10 6452 1 2025-11-25 16:39:07.966 00:05:55.689 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:39:07.965 00:05:55.694 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:44:04.631 00:00:10.358 TCP 23.104.0.1:32946 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:44:19.191 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34922 10 6452 1 2025-11-25 16:45:05.028 00:00:10.370 TCP 23.104.0.1:52008 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:45:19.406 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49334 10 6452 1 2025-11-25 16:46:05.435 00:00:10.360 TCP 23.104.0.1:35236 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:46:19.615 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52046 10 6452 1 2025-11-25 16:47:05.838 00:00:10.372 TCP 23.104.0.1:55652 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:47:19.830 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34772 10 6452 1 2025-11-25 16:47:48.560 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:47:48.476 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:48:06.247 00:00:10.719 TCP 23.104.0.1:58530 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:48:20.008 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60208 10 6452 1 2025-11-25 16:49:07.014 00:00:10.366 TCP 23.104.0.1:39428 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:49:20.231 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33244 10 6452 1 2025-11-25 16:45:07.971 00:05:55.685 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:45:07.969 00:05:55.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:50:07.419 00:00:10.380 TCP 23.104.0.1:54798 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:50:20.458 00:00:10.255 TCP 1.101.0.1:3000 -> 22.102.0.1:37606 10 6452 1 2025-11-25 16:51:07.839 00:00:10.346 TCP 23.104.0.1:51750 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:51:20.761 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49892 10 6452 1 2025-11-25 16:52:08.233 00:00:10.330 TCP 23.104.0.1:35534 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:52:20.981 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:53586 10 6452 1 2025-11-25 16:52:48.136 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:52:48.348 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:53:08.596 00:00:10.367 TCP 23.104.0.1:47552 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:53:21.219 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36200 10 6452 1 2025-11-25 16:54:09.001 00:00:10.328 TCP 23.104.0.1:43912 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:54:21.441 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44064 10 6452 1 2025-11-25 16:55:09.360 00:00:10.366 TCP 23.104.0.1:60830 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:55:21.665 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35046 10 6452 1 2025-11-25 16:51:07.975 00:05:55.682 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-25 16:51:07.972 00:05:55.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-25 16:56:09.765 00:00:10.373 TCP 23.104.0.1:48542 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:56:21.840 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53448 10 6452 1 2025-11-25 16:57:10.177 00:00:10.374 TCP 23.104.0.1:59910 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:57:22.079 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59504 10 6452 1 2025-11-25 16:57:48.371 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-25 16:57:48.449 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-25 16:58:10.597 00:00:10.364 TCP 23.104.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-11-25 16:58:22.305 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58342 10 6452 1 Summary: total flows: 164, total bytes: 507164, total packets: 1587, avg bps: 1101, avg pps: 0, avg bpp: 319 Time window: 2025-11-25 15:57:07 - 2025-11-25 16:58:32 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0028s User: 0.0028s Wall: 0.0026s flows/second: 62499.2 Runtime: 0.0026s