Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 11:58:43.994 00:00:10.323 TCP 23.104.0.1:57378 -> 1.101.0.1:3000 11 1507 1 2025-11-27 11:59:35.966 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56992 12 6556 1 2025-11-27 11:59:44.358 00:00:10.365 TCP 23.104.0.1:52342 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:00:36.190 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39396 10 6452 1 2025-11-27 12:00:44.766 00:00:10.329 TCP 23.104.0.1:47888 -> 1.101.0.1:3000 11 1507 1 2025-11-27 11:56:08.953 00:05:55.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 11:56:08.956 00:05:55.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 12:01:36.401 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34850 10 6452 1 2025-11-27 12:01:45.132 00:00:10.364 TCP 23.104.0.1:50440 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:02:36.633 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44518 10 6452 1 2025-11-27 12:02:45.534 00:00:10.367 TCP 23.104.0.1:48144 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:03:40.192 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 12:03:40.523 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 12:03:36.847 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52464 10 6452 1 2025-11-27 12:03:45.937 00:00:10.333 TCP 23.104.0.1:39420 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:04:37.090 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38314 10 6452 1 2025-11-27 12:04:46.311 00:00:10.368 TCP 23.104.0.1:46254 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:05:37.305 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52188 10 6452 1 2025-11-27 12:05:46.716 00:00:10.386 TCP 23.104.0.1:42238 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:06:37.487 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43126 10 6452 1 2025-11-27 12:06:47.137 00:00:10.366 TCP 23.104.0.1:59724 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:02:08.955 00:05:55.532 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 12:02:08.959 00:05:55.527 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 12:07:37.712 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33300 10 6452 1 2025-11-27 12:07:47.545 00:00:10.323 TCP 23.104.0.1:56766 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:08:40.587 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 12:08:40.608 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 12:08:37.885 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39076 10 6452 1 2025-11-27 12:08:47.908 00:00:10.365 TCP 23.104.0.1:57784 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:09:38.105 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:45262 10 6452 1 2025-11-27 12:09:48.305 00:00:10.363 TCP 23.104.0.1:53706 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:10:38.275 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48272 10 6452 1 2025-11-27 12:10:48.705 00:00:10.381 TCP 23.104.0.1:45784 -> 1.101.0.1:3000 12 1559 1 2025-11-27 12:11:38.484 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57606 10 6452 1 2025-11-27 12:11:49.129 00:00:10.364 TCP 23.104.0.1:34624 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:12:38.652 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39978 10 6452 1 2025-11-27 12:12:49.530 00:00:10.368 TCP 23.104.0.1:38252 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:08:08.959 00:05:55.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 12:08:08.963 00:05:55.523 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 12:13:40.446 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 12:13:40.497 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 12:13:38.871 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48288 10 6452 1 2025-11-27 12:13:49.936 00:00:10.378 TCP 23.104.0.1:46966 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:14:39.096 00:00:10.945 TCP 1.101.0.1:3000 -> 22.102.0.1:58830 10 6452 1 2025-11-27 12:14:50.354 00:00:10.335 TCP 23.104.0.1:53824 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:15:40.085 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50542 10 6452 1 2025-11-27 12:15:50.740 00:00:10.370 TCP 23.104.0.1:44590 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:16:40.296 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46960 10 6452 1 2025-11-27 12:16:51.146 00:00:10.368 TCP 23.104.0.1:34528 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:17:40.464 00:00:10.484 TCP 1.101.0.1:3000 -> 22.102.0.1:44390 10 6452 1 2025-11-27 12:17:51.555 00:00:11.213 TCP 23.104.0.1:48346 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:18:40.614 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 12:18:40.693 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 12:18:40.990 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37368 10 6452 1 2025-11-27 12:18:52.819 00:00:10.369 TCP 23.104.0.1:57110 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:14:08.961 00:05:55.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 12:14:08.963 00:05:55.524 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 12:19:41.220 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52278 10 6452 1 2025-11-27 12:19:53.222 00:00:10.927 TCP 23.104.0.1:39098 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:20:41.393 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37368 10 6452 1 2025-11-27 12:20:54.189 00:00:10.367 TCP 23.104.0.1:43256 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:21:41.599 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:58318 12 10369 1 2025-11-27 12:21:54.596 00:00:10.452 TCP 23.104.0.1:53018 -> 1.101.0.1:3000 15 1926 1 2025-11-27 12:22:41.835 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45202 10 6452 1 2025-11-27 12:22:55.109 00:00:10.371 TCP 23.104.0.1:54970 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:23:41.818 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 12:23:42.017 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 12:23:42.076 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36644 10 6452 1 2025-11-27 12:23:55.516 00:00:10.365 TCP 23.104.0.1:52056 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:24:42.300 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:40558 10 6452 1 2025-11-27 12:20:08.962 00:05:55.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 12:24:55.919 00:00:10.370 TCP 23.104.0.1:41650 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:20:08.964 00:05:55.525 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 12:25:42.491 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45982 10 6452 1 2025-11-27 12:25:56.330 00:00:10.916 TCP 23.104.0.1:49920 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:26:42.704 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37992 10 6452 1 2025-11-27 12:26:57.284 00:00:10.368 TCP 23.104.0.1:48950 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:27:42.910 00:00:10.835 TCP 1.101.0.1:3000 -> 22.102.0.1:40144 10 6452 1 2025-11-27 12:27:57.690 00:00:11.497 TCP 23.104.0.1:43038 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:28:40.925 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 12:28:40.706 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 12:28:43.783 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57856 10 6452 1 2025-11-27 12:28:59.222 00:00:10.364 TCP 23.104.0.1:53164 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:29:43.992 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36232 10 6452 1 2025-11-27 12:29:59.626 00:00:11.045 TCP 23.104.0.1:45708 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:30:44.207 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:43978 10 6452 1 2025-11-27 12:26:08.965 00:05:55.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 12:26:08.968 00:05:55.521 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 12:31:00.708 00:00:10.317 TCP 23.104.0.1:49244 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:31:44.379 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34428 10 6452 1 2025-11-27 12:32:01.097 00:00:10.363 TCP 23.104.0.1:49940 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:32:44.591 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54932 10 6452 1 2025-11-27 12:33:01.500 00:00:10.362 TCP 23.104.0.1:32774 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:33:41.159 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 12:33:40.972 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 12:33:44.805 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45246 10 6452 1 2025-11-27 12:34:01.901 00:00:10.364 TCP 23.104.0.1:39502 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:34:45.031 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47134 10 6452 1 2025-11-27 12:35:02.308 00:00:10.366 TCP 23.104.0.1:45044 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:35:45.206 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36212 10 6452 1 2025-11-27 12:36:02.715 00:00:10.370 TCP 23.104.0.1:35496 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:36:45.377 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50052 10 6452 1 2025-11-27 12:32:08.969 00:05:55.521 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 12:32:08.966 00:05:55.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 12:37:03.127 00:00:10.322 TCP 23.104.0.1:36938 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:37:45.550 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55344 10 6452 1 2025-11-27 12:38:03.487 00:00:10.365 TCP 23.104.0.1:47554 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:38:41.065 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 12:38:40.970 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 12:38:45.767 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52700 10 6452 1 2025-11-27 12:39:03.906 00:00:10.373 TCP 23.104.0.1:58004 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:39:45.973 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53500 10 6452 1 2025-11-27 12:40:04.344 00:00:10.365 TCP 23.104.0.1:53950 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:40:46.207 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54572 10 6452 1 2025-11-27 12:41:04.760 00:00:10.376 TCP 23.104.0.1:47416 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:41:46.419 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44190 10 6452 1 2025-11-27 12:42:05.175 00:00:10.361 TCP 23.104.0.1:48704 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:42:46.637 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56694 10 6452 1 2025-11-27 12:38:08.971 00:05:55.526 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 12:38:08.972 00:05:55.521 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 12:43:05.583 00:00:10.321 TCP 23.104.0.1:46470 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:43:40.927 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 12:43:41.032 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 12:43:46.851 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60054 10 6452 1 2025-11-27 12:44:05.942 00:00:10.372 TCP 23.104.0.1:41040 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:44:47.080 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:53718 10 6452 1 2025-11-27 12:45:06.373 00:00:10.367 TCP 23.104.0.1:60504 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:45:47.254 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:35382 10 6452 1 2025-11-27 12:46:06.780 00:00:10.362 TCP 23.104.0.1:59558 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:46:47.436 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56278 10 6452 1 2025-11-27 12:47:07.183 00:00:10.366 TCP 23.104.0.1:45296 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:47:47.651 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59278 10 6452 1 2025-11-27 12:48:07.595 00:00:10.494 TCP 23.104.0.1:52250 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:48:41.263 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 12:48:40.988 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 12:48:47.868 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49578 10 6452 1 2025-11-27 12:44:08.971 00:05:55.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 12:44:08.974 00:05:55.521 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 12:49:08.128 00:00:10.323 TCP 23.104.0.1:45726 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:49:48.108 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54672 10 6452 1 2025-11-27 12:50:08.492 00:00:10.365 TCP 23.104.0.1:47514 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:50:48.322 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54196 10 6452 1 2025-11-27 12:51:08.904 00:00:10.366 TCP 23.104.0.1:39380 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:51:48.538 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35728 10 6452 1 2025-11-27 12:52:09.311 00:00:10.364 TCP 23.104.0.1:58386 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:52:48.757 00:00:10.758 TCP 1.101.0.1:3000 -> 22.102.0.1:39720 10 6452 1 2025-11-27 12:53:09.715 00:00:13.190 TCP 23.104.0.1:55566 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:53:41.473 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 12:53:41.471 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 12:53:49.553 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:45856 10 6452 1 2025-11-27 12:54:12.945 00:00:10.366 TCP 23.104.0.1:48528 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:54:49.756 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38372 10 6452 1 2025-11-27 12:50:08.976 00:05:55.520 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 12:50:08.975 00:05:55.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 12:55:13.348 00:00:10.368 TCP 23.104.0.1:56286 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:55:49.975 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:51366 10 6452 1 2025-11-27 12:56:13.756 00:00:10.377 TCP 23.104.0.1:46220 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:56:50.209 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33176 10 6452 1 2025-11-27 12:57:14.172 00:00:10.321 TCP 23.104.0.1:44954 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:57:50.422 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57234 10 6452 1 2025-11-27 12:58:14.535 00:00:10.361 TCP 23.104.0.1:45830 -> 1.101.0.1:3000 11 1507 1 2025-11-27 12:58:41.463 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 12:58:41.392 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 163, total bytes: 496388, total packets: 1571, avg bps: 1058, avg pps: 0, avg bpp: 315 Time window: 2025-11-27 11:56:08 - 2025-11-27 12:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0033s User: 0.0022s Wall: 0.0022s flows/second: 72445.9 Runtime: 0.0023s