Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 07:59:19.564 00:00:10.321 TCP 23.104.0.1:52104 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:59:22.739 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41634 10 6452 1 2025-11-21 08:00:19.927 00:00:10.337 TCP 23.104.0.1:50220 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:00:22.914 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34762 10 6452 1 2025-11-21 08:00:42.293 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:00:42.307 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 08:01:20.308 00:00:10.326 TCP 23.104.0.1:36028 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:01:23.124 00:00:10.428 TCP 1.101.0.1:3000 -> 22.102.0.1:39582 10 6452 1 2025-11-21 07:58:01.466 00:05:04.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 07:58:01.463 00:05:04.182 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 08:02:20.673 00:00:10.367 TCP 23.104.0.1:53826 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:02:23.589 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44086 10 6452 1 2025-11-21 08:03:21.106 00:00:10.362 TCP 23.104.0.1:50378 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:03:23.758 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58978 10 6452 1 2025-11-21 08:04:21.507 00:00:11.100 TCP 23.104.0.1:47900 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:04:23.928 00:00:11.297 TCP 1.101.0.1:3000 -> 22.102.0.1:47796 10 6452 1 2025-11-21 08:05:25.264 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46944 10 6452 1 2025-11-21 08:05:22.651 00:00:10.331 TCP 23.104.0.1:46268 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:05:42.270 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 08:05:42.231 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:06:25.478 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:46252 10 6452 1 2025-11-21 08:06:23.017 00:00:10.324 TCP 23.104.0.1:41934 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:07:25.644 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58240 10 6452 1 2025-11-21 08:07:23.382 00:00:10.368 TCP 23.104.0.1:53806 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:04:01.467 00:05:04.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 08:04:01.466 00:05:04.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 08:08:25.863 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59390 10 6452 1 2025-11-21 08:08:23.787 00:00:10.340 TCP 23.104.0.1:57764 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:09:24.164 00:00:10.367 TCP 23.104.0.1:45370 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:09:26.041 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58856 10 6452 1 2025-11-21 08:10:24.576 00:00:10.327 TCP 23.104.0.1:32956 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:10:26.256 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37064 10 6452 1 2025-11-21 08:10:42.225 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:10:42.329 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 08:11:26.426 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48092 10 6452 1 2025-11-21 08:11:24.944 00:00:10.381 TCP 23.104.0.1:35038 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:12:25.367 00:00:10.358 TCP 23.104.0.1:36014 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:12:26.655 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59506 10 6452 1 2025-11-21 08:13:25.767 00:00:10.375 TCP 23.104.0.1:53632 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:13:26.875 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34608 10 6452 1 2025-11-21 08:10:01.464 00:05:04.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 08:10:01.469 00:05:04.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 08:14:26.179 00:00:10.360 TCP 23.104.0.1:37968 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:14:27.098 00:00:10.297 TCP 1.101.0.1:3000 -> 22.102.0.1:44900 10 6452 1 2025-11-21 08:15:26.580 00:00:10.361 TCP 23.104.0.1:43058 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:15:42.840 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:15:27.443 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44650 10 6452 1 2025-11-21 08:15:42.681 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 08:16:27.655 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:48588 10 6452 1 2025-11-21 08:16:26.983 00:00:10.322 TCP 23.104.0.1:53866 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:17:27.344 00:00:10.368 TCP 23.104.0.1:44806 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:17:27.831 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41054 10 6452 1 2025-11-21 08:18:28.008 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57478 10 6452 1 2025-11-21 08:18:27.752 00:00:10.368 TCP 23.104.0.1:43796 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:19:28.152 00:00:10.360 TCP 23.104.0.1:39234 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:19:28.185 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52568 10 6452 1 2025-11-21 08:16:01.469 00:05:04.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 08:16:01.465 00:05:04.185 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 08:20:28.553 00:00:10.587 TCP 23.104.0.1:42840 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:20:42.645 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:20:28.395 00:00:10.684 TCP 1.101.0.1:3000 -> 22.102.0.1:36400 10 6452 1 2025-11-21 08:20:42.300 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 08:21:29.116 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50144 10 6452 1 2025-11-21 08:21:29.177 00:00:10.364 TCP 23.104.0.1:60044 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:22:29.335 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43966 10 6452 1 2025-11-21 08:22:29.585 00:00:10.363 TCP 23.104.0.1:53240 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:23:29.990 00:00:10.364 TCP 23.104.0.1:51236 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:23:29.550 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44120 10 6452 1 2025-11-21 08:24:30.393 00:00:10.359 TCP 23.104.0.1:33988 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:24:29.765 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42664 10 6452 1 2025-11-21 08:25:30.790 00:00:10.368 TCP 23.104.0.1:60234 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:25:29.988 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51828 10 6452 1 2025-11-21 08:25:42.725 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 08:25:42.675 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:22:01.473 00:05:04.177 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 08:22:01.476 00:05:04.172 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 08:26:31.195 00:00:10.323 TCP 23.104.0.1:57256 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:26:30.231 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42030 10 6452 1 2025-11-21 08:27:30.444 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:33178 12 10375 1 2025-11-21 08:27:31.562 00:00:10.438 TCP 23.104.0.1:41980 -> 1.101.0.1:3000 15 1926 1 2025-11-21 08:28:30.692 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56696 10 6452 1 2025-11-21 08:28:32.052 00:00:10.364 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:29:30.907 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32842 10 6452 1 2025-11-21 08:29:32.457 00:00:10.361 TCP 23.104.0.1:55770 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:30:31.121 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:47978 10 6452 1 2025-11-21 08:30:32.857 00:00:10.377 TCP 23.104.0.1:51242 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:30:42.610 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:30:42.641 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 08:31:31.300 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45258 10 6452 1 2025-11-21 08:31:33.277 00:00:10.321 TCP 23.104.0.1:34838 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:28:01.477 00:05:04.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 08:28:01.476 00:05:04.179 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 08:32:31.515 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48936 10 6452 1 2025-11-21 08:32:33.634 00:00:10.368 TCP 23.104.0.1:53188 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:33:31.732 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53372 10 6452 1 2025-11-21 08:33:34.040 00:00:10.362 TCP 23.104.0.1:41586 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:34:34.440 00:00:10.323 TCP 23.104.0.1:57416 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:34:31.945 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:57528 10 6452 1 2025-11-21 08:35:34.802 00:00:10.419 TCP 23.104.0.1:59048 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:35:42.720 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:35:42.669 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 08:35:32.188 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38954 10 6452 1 2025-11-21 08:36:35.259 00:00:10.364 TCP 23.104.0.1:38176 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:36:32.400 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36956 10 6452 1 2025-11-21 08:37:32.625 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55892 10 6452 1 2025-11-21 08:37:35.662 00:00:10.368 TCP 23.104.0.1:55312 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:34:01.479 00:05:04.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 08:34:01.476 00:05:04.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 08:38:32.801 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46442 10 6452 1 2025-11-21 08:38:36.095 00:00:10.369 TCP 23.104.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:39:33.012 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45158 10 6452 1 2025-11-21 08:39:36.497 00:00:10.371 TCP 23.104.0.1:54406 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:40:33.238 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52864 10 6452 1 2025-11-21 08:40:42.889 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 08:40:42.674 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:40:36.909 00:00:10.363 TCP 23.104.0.1:40110 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:41:33.461 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51392 10 6452 1 2025-11-21 08:41:37.310 00:00:10.324 TCP 23.104.0.1:39986 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:42:33.676 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52952 10 6452 1 2025-11-21 08:42:37.678 00:00:10.368 TCP 23.104.0.1:58776 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:43:33.855 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44458 10 6452 1 2025-11-21 08:43:38.097 00:00:10.366 TCP 23.104.0.1:41646 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:40:01.479 00:05:04.198 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 08:40:01.477 00:05:04.203 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 08:44:34.100 00:00:10.909 TCP 1.101.0.1:3000 -> 22.102.0.1:55894 10 6452 1 2025-11-21 08:44:38.504 00:00:10.412 TCP 23.104.0.1:46418 -> 1.101.0.1:3000 11 1348 1 2025-11-21 08:44:50.432 00:00:10.303 TCP 23.104.0.1:53930 -> 1.101.0.1:3000 10 1308 1 2025-11-21 08:45:43.075 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:45:43.045 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 08:45:35.078 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46944 10 6452 1 2025-11-21 08:45:50.786 00:00:10.368 TCP 23.104.0.1:41878 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:46:35.289 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37326 10 6452 1 2025-11-21 08:46:51.193 00:00:10.374 TCP 23.104.0.1:47252 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:47:35.501 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47340 10 6452 1 2025-11-21 08:47:51.603 00:00:10.373 TCP 23.104.0.1:56732 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:48:35.711 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60568 10 6452 1 2025-11-21 08:48:52.008 00:00:10.360 TCP 23.104.0.1:36640 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:49:35.921 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43150 10 6452 1 2025-11-21 08:46:01.479 00:05:04.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 08:46:01.480 00:05:04.198 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 08:49:52.404 00:00:10.321 TCP 23.104.0.1:49404 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:50:36.126 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45724 10 6452 1 2025-11-21 08:50:43.177 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 08:50:43.102 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:50:52.763 00:00:10.376 TCP 23.104.0.1:41756 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:51:36.337 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43076 10 6452 1 2025-11-21 08:51:53.178 00:00:10.362 TCP 23.104.0.1:37748 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:52:36.559 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33738 10 6452 1 2025-11-21 08:52:53.579 00:00:10.323 TCP 23.104.0.1:41738 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:53:36.775 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45138 10 6452 1 2025-11-21 08:53:53.944 00:00:10.701 TCP 23.104.0.1:48068 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:54:36.998 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45806 10 6452 1 2025-11-21 08:54:54.688 00:00:10.320 TCP 23.104.0.1:52992 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:55:43.283 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 08:55:43.335 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 08:55:37.221 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57576 10 6452 1 2025-11-21 08:55:55.056 00:00:10.361 TCP 23.104.0.1:55760 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:52:01.483 00:05:04.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 08:52:01.481 00:05:04.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 08:56:37.447 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34072 10 6452 1 2025-11-21 08:56:55.462 00:00:10.802 TCP 23.104.0.1:58634 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:57:37.670 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43528 10 6452 1 2025-11-21 08:57:56.298 00:00:10.500 TCP 23.104.0.1:54254 -> 1.101.0.1:3000 11 1507 1 2025-11-21 08:58:37.879 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58108 10 6452 1 Summary: total flows: 164, total bytes: 502332, total packets: 1577, avg bps: 1102, avg pps: 0, avg bpp: 318 Time window: 2025-11-21 07:58:01 - 2025-11-21 08:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0010s Wall: 0.0021s flows/second: 79577.3 Runtime: 0.0021s