Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-05 13:58:56.946 00:00:10.329 TCP 23.104.0.1:34124 -> 1.101.0.1:3000 11 1507 1 2025-12-05 13:54:12.956 00:05:55.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 13:55:08.068 00:05:04.888 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 13:59:32.928 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:40082 10 6452 1 2025-12-05 13:59:57.311 00:00:10.321 TCP 23.104.0.1:38632 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:00:33.110 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37646 10 6452 1 2025-12-05 14:00:57.671 00:00:10.395 TCP 23.104.0.1:47990 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:01:33.329 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55348 10 6452 1 2025-12-05 14:01:58.094 00:00:10.322 TCP 23.104.0.1:57090 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:02:33.752 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 14:02:33.618 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 14:02:33.543 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54508 10 6452 1 2025-12-05 14:02:58.457 00:00:10.364 TCP 23.104.0.1:49262 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:03:33.748 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40078 10 6452 1 2025-12-05 14:03:58.856 00:00:10.375 TCP 23.104.0.1:36608 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:04:33.959 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37878 12 6556 1 2025-12-05 14:00:12.959 00:05:55.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 14:04:59.271 00:00:10.363 TCP 23.104.0.1:37146 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:01:08.068 00:05:04.889 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 14:05:34.197 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57216 10 6452 1 2025-12-05 14:05:59.673 00:00:10.383 TCP 23.104.0.1:40540 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:06:34.413 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40492 10 6452 1 2025-12-05 14:07:00.106 00:00:10.363 TCP 23.104.0.1:34132 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:07:33.950 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 14:07:33.686 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 14:07:34.623 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52318 10 6452 1 2025-12-05 14:08:00.506 00:00:10.366 TCP 23.104.0.1:55038 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:08:34.829 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34926 10 6452 1 2025-12-05 14:09:00.908 00:00:10.367 TCP 23.104.0.1:38006 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:09:35.008 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41498 10 6452 1 2025-12-05 14:10:01.311 00:00:10.323 TCP 23.104.0.1:44914 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:10:35.230 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49724 10 6452 1 2025-12-05 14:06:12.960 00:05:55.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 14:11:01.679 00:00:10.361 TCP 23.104.0.1:50028 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:07:08.070 00:05:04.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 14:11:35.447 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53226 10 6452 1 2025-12-05 14:12:02.110 00:00:10.324 TCP 23.104.0.1:41334 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:12:34.050 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 14:12:33.974 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 14:12:35.660 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58162 10 6452 1 2025-12-05 14:13:02.474 00:00:10.365 TCP 23.104.0.1:39442 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:13:35.887 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54272 10 6452 1 2025-12-05 14:14:02.892 00:00:10.377 TCP 23.104.0.1:43144 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:14:36.103 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57040 10 6452 1 2025-12-05 14:15:03.309 00:00:10.361 TCP 23.104.0.1:43418 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:15:36.319 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32926 10 6452 1 2025-12-05 14:16:03.711 00:00:10.387 TCP 23.104.0.1:52670 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:16:36.543 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51144 10 6452 1 2025-12-05 14:12:12.962 00:05:55.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 14:13:08.070 00:05:04.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 14:17:04.142 00:00:10.375 TCP 23.104.0.1:41102 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:17:34.220 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 14:17:34.147 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 14:17:36.769 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:42336 10 6452 1 2025-12-05 14:18:04.563 00:00:10.440 TCP 23.104.0.1:51858 -> 1.101.0.1:3000 15 1926 1 2025-12-05 14:18:36.951 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54526 12 10369 1 2025-12-05 14:19:05.051 00:00:10.368 TCP 23.104.0.1:55466 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:19:37.169 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43944 10 6452 1 2025-12-05 14:20:05.460 00:00:10.365 TCP 23.104.0.1:51790 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:20:37.390 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:32838 10 6452 1 2025-12-05 14:21:05.870 00:00:10.366 TCP 23.104.0.1:41956 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:21:37.668 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60780 10 6452 1 2025-12-05 14:22:06.279 00:00:10.324 TCP 23.104.0.1:40544 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:22:34.101 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 14:22:34.020 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 14:22:37.878 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41468 10 6452 1 2025-12-05 14:18:12.964 00:05:55.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 14:19:08.071 00:05:04.892 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 14:23:06.640 00:00:10.361 TCP 23.104.0.1:49178 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:23:38.108 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45580 10 6452 1 2025-12-05 14:24:07.058 00:00:10.326 TCP 23.104.0.1:55240 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:24:38.276 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57126 10 6452 1 2025-12-05 14:25:07.422 00:00:10.332 TCP 23.104.0.1:48284 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:25:38.447 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34476 10 6452 1 2025-12-05 14:26:07.789 00:00:10.378 TCP 23.104.0.1:47088 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:26:38.659 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56594 10 6452 1 2025-12-05 14:27:08.196 00:00:10.365 TCP 23.104.0.1:34930 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:27:34.083 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 14:27:34.057 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 14:27:38.865 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53100 10 6452 1 2025-12-05 14:28:08.600 00:00:10.446 TCP 23.104.0.1:41766 -> 1.101.0.1:3000 15 1926 1 2025-12-05 14:28:39.092 00:00:16.760 TCP 1.101.0.1:3000 -> 22.102.0.1:47276 12 10369 1 2025-12-05 14:24:12.966 00:05:55.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 14:25:08.076 00:05:04.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 14:29:09.102 00:00:10.365 TCP 23.104.0.1:35730 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:29:45.882 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:57166 10 6452 1 2025-12-05 14:30:09.502 00:00:10.389 TCP 23.104.0.1:51182 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:30:46.115 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54538 10 6452 1 2025-12-05 14:31:09.916 00:00:10.322 TCP 23.104.0.1:38678 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:31:46.362 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46962 10 6452 1 2025-12-05 14:32:10.280 00:00:10.370 TCP 23.104.0.1:53884 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:32:34.451 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 14:32:34.392 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 14:32:46.584 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46482 10 6452 1 2025-12-05 14:33:10.688 00:00:10.323 TCP 23.104.0.1:47358 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:33:46.808 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50190 10 6452 1 2025-12-05 14:34:11.051 00:00:11.081 TCP 23.104.0.1:53992 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:34:47.033 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58226 10 6452 1 2025-12-05 14:30:12.968 00:05:55.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 14:31:08.076 00:05:04.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 14:35:12.177 00:00:10.361 TCP 23.104.0.1:37580 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:35:47.264 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45488 10 6452 1 2025-12-05 14:36:12.575 00:00:10.361 TCP 23.104.0.1:59974 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:36:47.500 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47712 10 6452 1 2025-12-05 14:37:12.975 00:00:10.329 TCP 23.104.0.1:45898 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:37:34.566 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 14:37:34.477 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 14:37:47.715 00:00:10.438 TCP 1.101.0.1:3000 -> 22.102.0.1:54754 10 6452 1 2025-12-05 14:38:13.339 00:00:10.370 TCP 23.104.0.1:58640 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:38:48.188 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51378 10 6452 1 2025-12-05 14:39:13.741 00:00:10.364 TCP 23.104.0.1:48366 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:39:48.406 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:53370 10 6452 1 2025-12-05 14:40:14.147 00:00:10.327 TCP 23.104.0.1:57036 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:40:48.633 00:00:12.041 TCP 1.101.0.1:3000 -> 22.102.0.1:55176 10 6452 1 2025-12-05 14:36:12.968 00:05:55.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 14:37:08.075 00:05:04.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 14:41:14.515 00:00:10.326 TCP 23.104.0.1:47454 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:41:50.710 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34014 10 6452 1 2025-12-05 14:42:14.883 00:00:10.394 TCP 23.104.0.1:38844 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:42:34.598 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 14:42:34.549 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 14:42:50.890 00:00:10.503 TCP 1.101.0.1:3000 -> 22.102.0.1:34772 10 6452 1 2025-12-05 14:43:15.316 00:00:10.361 TCP 23.104.0.1:55394 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:43:51.438 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38514 10 6452 1 2025-12-05 14:44:15.721 00:00:10.370 TCP 23.104.0.1:37156 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:44:51.613 00:00:10.320 TCP 1.101.0.1:3000 -> 22.102.0.1:33004 10 6452 1 2025-12-05 14:45:16.129 00:00:10.348 TCP 23.104.0.1:53196 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:45:51.970 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:51206 10 6452 1 2025-12-05 14:46:16.513 00:00:10.370 TCP 23.104.0.1:57400 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:46:52.210 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55416 10 6452 1 2025-12-05 14:42:12.971 00:05:55.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 14:43:08.077 00:05:04.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 14:47:34.445 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 14:47:16.933 00:00:10.388 TCP 23.104.0.1:40044 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:47:34.514 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 14:47:52.397 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51614 10 6452 1 2025-12-05 14:48:17.383 00:00:10.360 TCP 23.104.0.1:52338 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:48:52.623 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41918 10 6452 1 2025-12-05 14:49:17.781 00:00:10.368 TCP 23.104.0.1:50368 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:49:52.840 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49462 10 6452 1 2025-12-05 14:50:18.189 00:00:10.368 TCP 23.104.0.1:54054 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:50:53.084 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41636 10 6452 1 2025-12-05 14:51:18.595 00:00:10.370 TCP 23.104.0.1:39768 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:51:53.291 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58844 10 6452 1 2025-12-05 14:52:19.006 00:00:10.364 TCP 23.104.0.1:53770 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:52:34.735 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 14:52:34.769 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 14:52:53.509 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42972 10 6452 1 2025-12-05 14:48:12.974 00:05:55.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-05 14:49:08.077 00:05:04.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-05 14:53:19.407 00:00:10.377 TCP 23.104.0.1:45716 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:53:53.730 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55882 10 6452 1 2025-12-05 14:54:19.822 00:00:10.325 TCP 23.104.0.1:58778 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:54:53.900 00:00:11.844 TCP 1.101.0.1:3000 -> 22.102.0.1:38678 10 6452 1 2025-12-05 14:55:20.182 00:00:10.362 TCP 23.104.0.1:47234 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:55:55.791 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48110 10 6452 1 2025-12-05 14:56:20.585 00:00:10.364 TCP 23.104.0.1:57238 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:56:56.023 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49924 10 6452 1 2025-12-05 14:57:20.985 00:00:10.365 TCP 23.104.0.1:59998 -> 1.101.0.1:3000 11 1507 1 2025-12-05 14:57:35.130 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-05 14:57:34.548 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-05 14:57:56.200 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53214 10 6452 1 2025-12-05 14:58:21.402 00:00:10.438 TCP 23.104.0.1:50986 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 163, total bytes: 501091, total packets: 1580, avg bps: 1038, avg pps: 0, avg bpp: 317 Time window: 2025-12-05 13:54:12 - 2025-12-05 14:58:31 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0052s User: 0.0010s Wall: 0.0024s flows/second: 68176.3 Runtime: 0.0024s