Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-26 20:59:15.807 00:00:10.752 TCP 23.104.0.1:52762 -> 1.101.0.1:3000 11 1507 1 2025-11-26 20:59:24.086 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37492 10 6452 1 2025-11-26 21:00:16.601 00:00:10.360 TCP 23.104.0.1:60886 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:00:24.293 00:00:10.579 TCP 1.101.0.1:3000 -> 22.102.0.1:48342 10 6452 1 2025-11-26 20:56:08.635 00:05:55.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 20:56:08.631 00:05:55.569 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 21:01:17.002 00:00:10.467 TCP 23.104.0.1:57624 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:01:24.911 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56694 10 6452 1 2025-11-26 21:02:17.510 00:00:10.328 TCP 23.104.0.1:47832 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:02:25.115 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43580 10 6452 1 2025-11-26 21:03:22.459 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 21:03:22.279 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 21:03:17.875 00:00:10.324 TCP 23.104.0.1:44658 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:03:25.334 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:36828 10 6452 1 2025-11-26 21:04:18.234 00:00:10.327 TCP 23.104.0.1:52354 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:04:25.581 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:41018 10 6452 1 2025-11-26 21:05:18.598 00:00:10.739 TCP 23.104.0.1:53024 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:05:25.817 00:00:10.288 TCP 1.101.0.1:3000 -> 22.102.0.1:35910 10 6452 1 2025-11-26 21:06:19.379 00:00:10.439 TCP 23.104.0.1:54030 -> 1.101.0.1:3000 15 1926 1 2025-11-26 21:06:26.146 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49172 12 10375 1 2025-11-26 21:02:08.635 00:05:55.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 21:02:08.633 00:05:55.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 21:07:19.859 00:00:10.472 TCP 23.104.0.1:46816 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:07:26.384 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47244 10 6452 1 2025-11-26 21:08:22.239 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 21:08:22.206 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 21:08:20.372 00:00:10.364 TCP 23.104.0.1:55548 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:08:26.600 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47580 10 6452 1 2025-11-26 21:09:20.775 00:00:10.370 TCP 23.104.0.1:46136 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:09:26.783 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59324 10 6452 1 2025-11-26 21:10:21.185 00:00:10.362 TCP 23.104.0.1:58326 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:10:27.006 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39886 10 6452 1 2025-11-26 21:11:21.590 00:00:10.362 TCP 23.104.0.1:44364 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:11:27.174 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46434 10 6452 1 2025-11-26 21:12:21.993 00:00:10.328 TCP 23.104.0.1:50320 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:12:27.385 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46120 10 6452 1 2025-11-26 21:08:08.635 00:05:55.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 21:08:08.637 00:05:55.562 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 21:13:22.212 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 21:13:22.339 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 21:13:22.359 00:00:10.367 TCP 23.104.0.1:48700 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:13:27.603 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35576 10 6452 1 2025-11-26 21:14:22.770 00:00:10.367 TCP 23.104.0.1:35702 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:14:27.822 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34654 10 6452 1 2025-11-26 21:15:23.177 00:00:10.363 TCP 23.104.0.1:56664 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:15:28.069 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35380 10 6452 1 2025-11-26 21:16:23.584 00:00:10.372 TCP 23.104.0.1:50066 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:16:28.240 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49834 10 6452 1 2025-11-26 21:17:23.993 00:00:10.369 TCP 23.104.0.1:55034 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:17:28.449 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47106 10 6452 1 2025-11-26 21:18:22.359 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 21:18:22.277 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 21:18:24.403 00:00:10.365 TCP 23.104.0.1:53678 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:18:28.662 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38308 10 6452 1 2025-11-26 21:14:08.641 00:05:55.560 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 21:14:08.639 00:05:55.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 21:19:24.805 00:00:10.338 TCP 23.104.0.1:54548 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:19:28.902 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43708 10 6452 1 2025-11-26 21:20:25.186 00:00:10.359 TCP 23.104.0.1:55894 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:20:29.122 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39592 10 6452 1 2025-11-26 21:21:25.583 00:00:10.362 TCP 23.104.0.1:41364 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:21:29.342 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:47516 10 6452 1 2025-11-26 21:22:25.986 00:00:10.369 TCP 23.104.0.1:60188 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:22:29.582 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47382 10 6452 1 2025-11-26 21:23:22.588 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 21:23:22.621 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 21:23:26.394 00:00:10.364 TCP 23.104.0.1:33944 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:23:29.792 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57846 10 6452 1 2025-11-26 21:24:26.797 00:00:10.373 TCP 23.104.0.1:40756 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:24:30.025 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53538 10 6452 1 2025-11-26 21:20:08.638 00:05:55.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 21:20:08.642 00:05:55.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 21:25:30.237 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33916 10 6452 1 2025-11-26 21:25:27.212 00:00:10.325 TCP 23.104.0.1:39054 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:26:30.461 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42744 10 6452 1 2025-11-26 21:26:27.572 00:00:10.362 TCP 23.104.0.1:57974 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:27:30.684 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47388 10 6452 1 2025-11-26 21:27:27.971 00:00:10.367 TCP 23.104.0.1:54122 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:28:22.575 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 21:28:22.616 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 21:28:30.861 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34492 10 6452 1 2025-11-26 21:28:28.378 00:00:10.359 TCP 23.104.0.1:33476 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:29:31.083 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46736 10 6452 1 2025-11-26 21:29:28.775 00:00:10.371 TCP 23.104.0.1:55880 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:30:29.184 00:00:10.326 TCP 23.104.0.1:60866 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:30:31.312 00:00:10.732 TCP 1.101.0.1:3000 -> 22.102.0.1:51116 10 6452 1 2025-11-26 21:26:08.646 00:05:55.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 21:26:08.643 00:05:55.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 21:31:29.549 00:00:10.366 TCP 23.104.0.1:54742 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:31:32.081 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40518 10 6452 1 2025-11-26 21:32:29.956 00:00:10.327 TCP 23.104.0.1:38184 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:32:32.252 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41170 10 6452 1 2025-11-26 21:33:22.785 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 21:33:22.856 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 21:33:30.321 00:00:10.366 TCP 23.104.0.1:60428 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:33:32.465 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57102 10 6452 1 2025-11-26 21:34:30.722 00:00:10.380 TCP 23.104.0.1:45178 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:34:32.677 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34586 10 6452 1 2025-11-26 21:35:31.136 00:00:10.367 TCP 23.104.0.1:47316 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:35:32.893 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49646 10 6452 1 2025-11-26 21:36:31.540 00:00:10.322 TCP 23.104.0.1:50234 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:36:33.112 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36770 10 6452 1 2025-11-26 21:32:08.646 00:05:55.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 21:32:08.648 00:05:55.557 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 21:37:33.283 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56258 10 6452 1 2025-11-26 21:37:31.903 00:00:10.325 TCP 23.104.0.1:37432 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:38:22.748 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 21:38:23.088 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 21:38:33.500 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38636 10 6452 1 2025-11-26 21:38:32.269 00:00:10.368 TCP 23.104.0.1:44246 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:39:32.680 00:00:10.366 TCP 23.104.0.1:49164 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:39:33.714 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43532 10 6452 1 2025-11-26 21:40:33.919 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36308 10 6452 1 2025-11-26 21:40:33.105 00:00:10.329 TCP 23.104.0.1:56276 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:41:34.132 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59472 10 6452 1 2025-11-26 21:41:33.468 00:00:10.360 TCP 23.104.0.1:50290 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:42:34.348 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47080 10 6452 1 2025-11-26 21:42:33.868 00:00:10.369 TCP 23.104.0.1:41290 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:38:08.649 00:05:55.556 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 21:38:08.646 00:05:55.562 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 21:43:23.020 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 21:43:22.843 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 21:43:34.271 00:00:10.319 TCP 23.104.0.1:37178 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:43:34.562 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54336 10 6452 1 2025-11-26 21:44:34.629 00:00:10.323 TCP 23.104.0.1:34566 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:44:34.794 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59650 10 6452 1 2025-11-26 21:45:35.007 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51102 10 6452 1 2025-11-26 21:45:34.989 00:00:10.364 TCP 23.104.0.1:42386 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:46:35.400 00:00:10.366 TCP 23.104.0.1:36008 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:46:35.218 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55352 10 6452 1 2025-11-26 21:47:35.806 00:00:10.366 TCP 23.104.0.1:34788 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:47:35.458 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:36484 10 6452 1 2025-11-26 21:48:23.184 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 21:48:23.241 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 21:48:35.656 00:00:10.381 TCP 1.101.0.1:3000 -> 22.102.0.1:44014 10 6452 1 2025-11-26 21:48:36.220 00:00:10.383 TCP 23.104.0.1:41424 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:44:08.650 00:05:55.563 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 21:44:08.647 00:05:55.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 21:49:36.099 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40948 10 6452 1 2025-11-26 21:49:36.642 00:00:10.366 TCP 23.104.0.1:50936 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:50:36.320 00:00:10.629 TCP 1.101.0.1:3000 -> 22.102.0.1:49932 10 6452 1 2025-11-26 21:50:37.049 00:00:10.367 TCP 23.104.0.1:39116 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:51:36.988 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:35274 10 6452 1 2025-11-26 21:51:37.462 00:00:10.357 TCP 23.104.0.1:34756 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:52:37.221 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37820 10 6452 1 2025-11-26 21:52:37.859 00:00:10.379 TCP 23.104.0.1:59702 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:53:23.141 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 21:53:23.224 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 21:53:38.274 00:00:10.367 TCP 23.104.0.1:59640 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:53:37.437 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53172 10 6452 1 2025-11-26 21:54:37.659 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47606 10 6452 1 2025-11-26 21:54:38.679 00:00:10.368 TCP 23.104.0.1:37042 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:50:08.652 00:05:55.561 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-26 21:50:08.650 00:05:55.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-26 21:55:37.876 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53552 10 6452 1 2025-11-26 21:55:39.100 00:00:10.363 TCP 23.104.0.1:38916 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:56:39.505 00:00:10.365 TCP 23.104.0.1:39712 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:56:38.101 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50766 10 6452 1 2025-11-26 21:57:38.322 00:00:10.398 TCP 1.101.0.1:3000 -> 22.102.0.1:56302 10 6452 1 2025-11-26 21:57:39.908 00:00:10.364 TCP 23.104.0.1:35946 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:58:23.308 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-26 21:58:23.424 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-26 21:58:40.310 00:00:10.324 TCP 23.104.0.1:37538 -> 1.101.0.1:3000 11 1507 1 2025-11-26 21:58:38.757 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49206 10 6452 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1068, avg pps: 0, avg bpp: 318 Time window: 2025-11-26 20:56:08 - 2025-11-26 21:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0018s Wall: 0.0024s flows/second: 67266.4 Runtime: 0.0025s