Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 04:58:55.103 00:00:10.365 TCP 23.104.0.1:38730 -> 1.101.0.1:3000 11 1507 1 2025-11-21 04:59:34.971 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:35526 10 6452 1 2025-11-21 04:59:55.503 00:00:10.365 TCP 23.104.0.1:44276 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:00:38.489 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 05:00:38.658 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 05:00:35.161 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35384 10 6452 1 2025-11-21 05:00:55.910 00:00:10.369 TCP 23.104.0.1:33720 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:01:35.331 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52392 10 6452 1 2025-11-21 04:58:01.351 00:05:04.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 05:01:56.314 00:00:10.451 TCP 23.104.0.1:40874 -> 1.101.0.1:3000 11 1507 1 2025-11-21 04:58:01.348 00:05:04.242 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 05:02:35.502 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38648 10 6452 1 2025-11-21 05:02:56.806 00:00:10.368 TCP 23.104.0.1:40076 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:03:35.715 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58998 10 6452 1 2025-11-21 05:03:57.210 00:00:10.369 TCP 23.104.0.1:58710 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:04:35.935 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:46312 10 6452 1 2025-11-21 05:04:57.615 00:00:10.363 TCP 23.104.0.1:59178 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:05:38.447 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 05:05:38.570 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 05:05:36.173 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35568 10 6452 1 2025-11-21 05:05:58.018 00:00:10.361 TCP 23.104.0.1:35918 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:06:36.387 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54920 10 6452 1 2025-11-21 05:06:58.413 00:00:10.364 TCP 23.104.0.1:57984 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:07:36.619 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41150 10 6452 1 2025-11-21 05:04:01.350 00:05:04.244 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 05:04:01.352 00:05:04.239 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 05:07:58.816 00:00:10.363 TCP 23.104.0.1:57594 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:08:36.789 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45278 10 6452 1 2025-11-21 05:08:59.215 00:00:10.371 TCP 23.104.0.1:39874 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:09:37.007 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38108 10 6452 1 2025-11-21 05:09:59.626 00:00:10.325 TCP 23.104.0.1:53968 -> 1.101.0.1:3000 12 1559 1 2025-11-21 05:10:38.713 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 05:10:38.599 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 05:10:37.220 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35848 10 6452 1 2025-11-21 05:10:59.988 00:00:10.336 TCP 23.104.0.1:52036 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:11:37.439 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52250 10 6452 1 2025-11-21 05:12:00.365 00:00:10.361 TCP 23.104.0.1:50298 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:12:37.650 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57240 10 6452 1 2025-11-21 05:13:00.763 00:00:10.377 TCP 23.104.0.1:35730 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:13:37.865 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56560 10 6452 1 2025-11-21 05:10:01.351 00:05:04.244 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 05:10:01.355 00:05:04.238 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 05:14:01.191 00:00:10.362 TCP 23.104.0.1:39654 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:14:38.090 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43128 10 6452 1 2025-11-21 05:15:01.588 00:00:10.370 TCP 23.104.0.1:37762 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:15:38.657 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 05:15:38.800 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 05:15:38.305 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39616 10 6452 1 2025-11-21 05:16:02.000 00:00:10.698 TCP 23.104.0.1:48594 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:16:38.518 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56334 10 6452 1 2025-11-21 05:17:02.734 00:00:10.373 TCP 23.104.0.1:37094 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:17:38.691 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50904 10 6452 1 2025-11-21 05:18:03.142 00:00:10.360 TCP 23.104.0.1:33190 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:18:38.908 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57386 10 6452 1 2025-11-21 05:19:03.535 00:00:10.325 TCP 23.104.0.1:40888 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:19:39.128 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41128 10 6452 1 2025-11-21 05:16:01.354 00:05:04.239 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 05:16:01.352 00:05:04.244 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 05:20:03.898 00:00:10.378 TCP 23.104.0.1:35778 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:20:39.041 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 05:20:39.104 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 05:20:39.350 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49430 10 6452 1 2025-11-21 05:21:04.312 00:00:10.324 TCP 23.104.0.1:34852 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:21:39.565 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59148 10 6452 1 2025-11-21 05:22:04.678 00:00:10.365 TCP 23.104.0.1:37420 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:22:39.778 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35050 10 6452 1 2025-11-21 05:23:05.107 00:00:10.369 TCP 23.104.0.1:37488 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:23:39.992 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50626 10 6452 1 2025-11-21 05:24:05.513 00:00:10.365 TCP 23.104.0.1:44444 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:24:40.221 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38512 10 6452 1 2025-11-21 05:25:05.917 00:00:10.380 TCP 23.104.0.1:43540 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:25:39.071 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 05:25:38.920 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 05:25:40.445 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40632 10 6452 1 2025-11-21 05:22:01.358 00:05:04.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 05:22:01.356 00:05:04.242 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 05:26:06.338 00:00:10.321 TCP 23.104.0.1:45478 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:26:40.665 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48060 10 6452 1 2025-11-21 05:27:06.699 00:00:10.365 TCP 23.104.0.1:35452 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:27:40.880 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40540 10 6452 1 2025-11-21 05:28:07.111 00:00:10.364 TCP 23.104.0.1:39516 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:28:41.111 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41796 10 6452 1 2025-11-21 05:29:07.511 00:00:10.319 TCP 23.104.0.1:50864 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:29:41.323 00:00:11.545 TCP 1.101.0.1:3000 -> 22.102.0.1:33046 10 6452 1 2025-11-21 05:30:07.868 00:00:10.321 TCP 23.104.0.1:48614 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:30:38.892 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 05:30:39.060 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 05:30:42.903 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:55274 11 6504 1 2025-11-21 05:31:08.229 00:00:10.360 TCP 23.104.0.1:51920 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:31:43.185 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40694 10 6452 1 2025-11-21 05:28:01.365 00:05:04.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 05:28:01.368 00:05:04.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 05:32:08.629 00:00:10.382 TCP 23.104.0.1:51978 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:32:43.397 00:00:10.670 TCP 1.101.0.1:3000 -> 22.102.0.1:40128 10 6452 1 2025-11-21 05:33:09.067 00:00:10.369 TCP 23.104.0.1:34736 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:33:44.102 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43294 10 6452 1 2025-11-21 05:34:09.478 00:00:10.371 TCP 23.104.0.1:52070 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:34:44.315 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51348 10 6452 1 2025-11-21 05:35:09.884 00:00:10.380 TCP 23.104.0.1:35276 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:35:39.284 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 05:35:39.148 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 05:35:44.530 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:41226 12 6556 1 2025-11-21 05:36:10.306 00:00:10.365 TCP 23.104.0.1:35752 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:36:44.783 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58490 10 6452 1 2025-11-21 05:37:10.709 00:00:10.367 TCP 23.104.0.1:46004 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:37:45.001 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46408 10 6452 1 2025-11-21 05:34:01.370 00:05:04.227 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 05:34:01.367 00:05:04.232 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 05:38:11.113 00:00:10.326 TCP 23.104.0.1:43160 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:38:45.218 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58562 10 6452 1 2025-11-21 05:39:11.476 00:00:10.365 TCP 23.104.0.1:35058 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:39:45.402 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49604 10 6452 1 2025-11-21 05:40:11.876 00:00:10.322 TCP 23.104.0.1:45980 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:40:39.365 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 05:40:39.119 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 05:40:45.619 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45438 10 6452 1 2025-11-21 05:41:12.241 00:00:10.327 TCP 23.104.0.1:48088 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:41:45.836 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48572 10 6452 1 2025-11-21 05:42:12.606 00:00:10.368 TCP 23.104.0.1:49074 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:42:46.074 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33270 10 6452 1 2025-11-21 05:43:13.010 00:00:10.387 TCP 23.104.0.1:50744 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:43:46.288 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46842 10 6452 1 2025-11-21 05:40:01.372 00:05:04.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 05:40:01.369 00:05:04.231 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 05:44:13.436 00:00:10.362 TCP 23.104.0.1:44540 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:44:46.498 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45186 10 6452 1 2025-11-21 05:45:13.840 00:00:11.595 TCP 23.104.0.1:34756 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:45:39.775 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 05:45:39.518 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 05:45:46.708 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47774 10 6452 1 2025-11-21 05:46:15.478 00:00:10.363 TCP 23.104.0.1:46402 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:46:46.919 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42070 10 6452 1 2025-11-21 05:47:15.889 00:00:10.330 TCP 23.104.0.1:46222 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:47:47.132 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57026 10 6452 1 2025-11-21 05:48:16.255 00:00:10.322 TCP 23.104.0.1:52290 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:48:47.349 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50202 10 6452 1 2025-11-21 05:49:16.638 00:00:10.393 TCP 23.104.0.1:58166 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:46:01.385 00:05:04.216 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 05:49:47.567 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59606 10 6452 1 2025-11-21 05:46:01.384 00:05:04.221 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 05:50:17.106 00:00:10.360 TCP 23.104.0.1:32892 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:50:39.295 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 05:50:39.162 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 05:50:47.792 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45750 10 6452 1 2025-11-21 05:51:17.506 00:00:10.363 TCP 23.104.0.1:47446 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:51:48.006 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45428 10 6452 1 2025-11-21 05:52:17.908 00:00:10.361 TCP 23.104.0.1:55564 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:52:48.221 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48102 10 6452 1 2025-11-21 05:53:18.310 00:00:10.371 TCP 23.104.0.1:57116 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:53:48.437 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44682 10 6452 1 2025-11-21 05:54:18.722 00:00:10.372 TCP 23.104.0.1:53518 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:54:48.651 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48080 10 6452 1 2025-11-21 05:55:19.133 00:00:10.365 TCP 23.104.0.1:34168 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:55:39.258 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 05:55:39.683 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 05:55:48.865 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45514 10 6452 1 2025-11-21 05:52:01.383 00:05:04.224 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 05:52:01.386 00:05:04.218 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 05:56:19.533 00:00:10.378 TCP 23.104.0.1:59794 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:56:49.090 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53336 10 6452 1 2025-11-21 05:57:19.951 00:00:10.365 TCP 23.104.0.1:50168 -> 1.101.0.1:3000 11 1507 1 2025-11-21 05:57:49.266 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55398 10 6452 1 2025-11-21 05:58:20.367 00:00:10.374 TCP 23.104.0.1:46930 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 492104, total packets: 1566, avg bps: 1084, avg pps: 0, avg bpp: 314 Time window: 2025-11-21 04:58:01 - 2025-11-21 05:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0008s Wall: 0.0018s flows/second: 88147.4 Runtime: 0.0019s