Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 11:59:20.960 00:00:10.365 TCP 23.104.0.1:35130 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:59:33.036 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35318 10 6452 1 2025-11-21 12:00:21.363 00:00:10.326 TCP 23.104.0.1:53002 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:00:33.245 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33594 10 6452 1 2025-11-21 12:00:46.883 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 12:00:47.147 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 12:01:21.725 00:00:10.370 TCP 23.104.0.1:44660 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:01:33.461 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49916 10 6452 1 2025-11-21 11:58:01.580 00:05:04.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 11:58:01.578 00:05:04.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 12:02:22.132 00:00:10.372 TCP 23.104.0.1:36322 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:02:33.670 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50514 10 6452 1 2025-11-21 12:03:22.534 00:00:10.826 TCP 23.104.0.1:51550 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:03:33.881 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60922 10 6452 1 2025-11-21 12:04:23.400 00:00:10.323 TCP 23.104.0.1:59436 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:04:34.073 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43874 10 6452 1 2025-11-21 12:05:23.763 00:00:10.373 TCP 23.104.0.1:37690 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:05:46.801 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 12:05:34.285 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58222 10 6452 1 2025-11-21 12:05:46.971 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 12:06:24.179 00:00:10.372 TCP 23.104.0.1:39004 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:06:34.496 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54786 10 6452 1 2025-11-21 12:07:24.589 00:00:10.331 TCP 23.104.0.1:40654 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:07:34.708 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54602 10 6452 1 2025-11-21 12:04:01.581 00:05:04.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 12:04:01.579 00:05:04.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 12:08:24.955 00:00:10.367 TCP 23.104.0.1:50316 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:08:34.880 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52246 10 6452 1 2025-11-21 12:09:25.361 00:00:10.379 TCP 23.104.0.1:56848 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:09:35.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54116 10 6452 1 2025-11-21 12:10:25.779 00:00:10.325 TCP 23.104.0.1:44312 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:10:35.294 00:00:10.938 TCP 1.101.0.1:3000 -> 22.102.0.1:51392 10 6452 1 2025-11-21 12:10:46.962 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 12:10:47.015 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 12:11:26.145 00:00:10.367 TCP 23.104.0.1:52220 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:11:36.291 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:40918 10 6452 1 2025-11-21 12:12:26.555 00:00:10.365 TCP 23.104.0.1:40032 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:12:36.457 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52110 10 6452 1 2025-11-21 12:13:26.961 00:00:10.366 TCP 23.104.0.1:53414 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:13:36.676 00:00:10.485 TCP 1.101.0.1:3000 -> 22.102.0.1:52754 10 6452 1 2025-11-21 12:10:01.582 00:05:04.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 12:10:01.580 00:05:04.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 12:14:27.364 00:00:10.360 TCP 23.104.0.1:40798 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:14:37.198 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54204 10 6452 1 2025-11-21 12:15:27.769 00:00:10.368 TCP 23.104.0.1:36032 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:15:37.412 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60346 10 6452 1 2025-11-21 12:15:47.270 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 12:15:47.385 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 12:16:28.174 00:00:10.318 TCP 23.104.0.1:42334 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:16:37.644 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47964 10 6452 1 2025-11-21 12:17:28.538 00:00:10.370 TCP 23.104.0.1:47540 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:17:37.863 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45020 10 6452 1 2025-11-21 12:18:28.944 00:00:10.374 TCP 23.104.0.1:42500 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:18:38.087 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:36996 10 6452 1 2025-11-21 12:19:29.360 00:00:10.327 TCP 23.104.0.1:53694 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:19:38.320 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49996 10 6452 1 2025-11-21 12:16:01.586 00:05:04.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 12:16:01.582 00:05:04.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 12:20:29.723 00:00:10.325 TCP 23.104.0.1:59254 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:20:47.209 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 12:20:38.538 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34314 10 6452 1 2025-11-21 12:20:47.420 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 12:21:30.108 00:00:10.361 TCP 23.104.0.1:42630 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:21:38.766 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37350 10 6452 1 2025-11-21 12:22:30.513 00:00:10.368 TCP 23.104.0.1:38228 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:22:38.940 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:60970 10 6452 1 2025-11-21 12:23:30.921 00:00:10.386 TCP 23.104.0.1:35138 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:23:39.185 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:60902 10 6452 1 2025-11-21 12:24:31.345 00:00:10.366 TCP 23.104.0.1:36808 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:24:39.363 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41548 10 6452 1 2025-11-21 12:25:31.746 00:00:10.367 TCP 23.104.0.1:44058 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:25:47.457 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 12:25:47.514 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 12:25:39.579 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38880 10 6452 1 2025-11-21 12:22:01.584 00:05:04.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 12:22:01.587 00:05:04.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 12:26:32.152 00:00:10.364 TCP 23.104.0.1:57712 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:26:39.793 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45268 10 6452 1 2025-11-21 12:27:32.551 00:00:10.366 TCP 23.104.0.1:43942 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:27:40.010 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60892 10 6452 1 2025-11-21 12:28:32.961 00:00:10.341 TCP 23.104.0.1:42128 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:28:40.220 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35340 10 6452 1 2025-11-21 12:29:33.364 00:00:10.367 TCP 23.104.0.1:53076 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:29:40.432 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58296 11 6492 1 2025-11-21 12:30:33.767 00:00:10.374 TCP 23.104.0.1:34420 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:30:40.644 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56190 10 6452 1 2025-11-21 12:30:47.669 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 12:30:47.676 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 12:31:34.181 00:00:10.375 TCP 23.104.0.1:39462 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:31:40.858 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:42068 10 6452 1 2025-11-21 12:28:01.589 00:05:04.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 12:28:01.586 00:05:04.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 12:32:34.600 00:00:10.372 TCP 23.104.0.1:38258 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:32:41.103 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38282 10 6452 1 2025-11-21 12:33:35.009 00:00:10.366 TCP 23.104.0.1:60770 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:33:41.282 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43538 10 6452 1 2025-11-21 12:34:35.416 00:00:10.365 TCP 23.104.0.1:50588 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:34:41.511 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58768 10 6452 1 2025-11-21 12:35:35.818 00:00:10.366 TCP 23.104.0.1:50498 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:35:41.725 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57014 10 6452 1 2025-11-21 12:35:47.362 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 12:35:47.689 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 12:36:36.220 00:00:10.366 TCP 23.104.0.1:56090 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:36:41.942 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:51400 10 6452 1 2025-11-21 12:37:36.623 00:00:10.368 TCP 23.104.0.1:52382 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:37:42.130 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51242 10 6452 1 2025-11-21 12:34:01.590 00:05:04.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 12:34:01.588 00:05:04.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 12:38:37.030 00:00:10.367 TCP 23.104.0.1:55028 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:38:42.352 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40216 10 6452 1 2025-11-21 12:39:37.435 00:00:10.360 TCP 23.104.0.1:54846 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:39:42.564 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33272 10 6452 1 2025-11-21 12:40:47.705 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 12:40:47.959 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 12:40:37.835 00:00:10.334 TCP 23.104.0.1:57586 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:40:42.786 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41824 10 6452 1 2025-11-21 12:41:38.203 00:00:10.363 TCP 23.104.0.1:34660 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:41:43.006 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54246 10 6452 1 2025-11-21 12:42:38.603 00:00:10.362 TCP 23.104.0.1:56456 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:42:43.226 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51488 10 6452 1 2025-11-21 12:43:39.005 00:00:10.320 TCP 23.104.0.1:45252 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:43:43.399 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53100 10 6452 1 2025-11-21 12:40:01.590 00:05:04.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 12:40:01.592 00:05:04.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 12:44:39.361 00:00:10.328 TCP 23.104.0.1:57706 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:44:43.621 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41882 10 6452 1 2025-11-21 12:45:47.786 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 12:45:39.731 00:00:10.323 TCP 23.104.0.1:49040 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:45:47.635 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 12:45:43.835 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46854 10 6452 1 2025-11-21 12:46:40.106 00:00:10.324 TCP 23.104.0.1:59564 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:46:44.078 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38340 10 6452 1 2025-11-21 12:47:40.476 00:00:11.135 TCP 23.104.0.1:51292 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:47:44.293 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33422 10 6452 1 2025-11-21 12:48:44.506 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40310 10 6452 1 2025-11-21 12:48:41.650 00:00:10.362 TCP 23.104.0.1:56928 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:49:44.720 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46918 10 6452 1 2025-11-21 12:49:42.060 00:00:10.362 TCP 23.104.0.1:45760 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:46:01.595 00:05:04.171 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 12:46:01.598 00:05:04.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 12:50:47.893 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 12:50:47.832 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 12:50:42.462 00:00:10.360 TCP 23.104.0.1:34434 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:50:44.936 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:34406 10 6452 1 2025-11-21 12:51:42.861 00:00:10.367 TCP 23.104.0.1:33244 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:51:45.177 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54080 10 6452 1 2025-11-21 12:52:43.266 00:00:10.317 TCP 23.104.0.1:35412 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:52:45.385 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46348 10 6452 1 2025-11-21 12:53:45.597 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42962 10 6452 1 2025-11-21 12:53:43.621 00:00:10.364 TCP 23.104.0.1:55268 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:54:45.811 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53762 10 6452 1 2025-11-21 12:54:44.033 00:00:10.365 TCP 23.104.0.1:56018 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:55:48.019 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 12:55:48.208 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 12:55:44.433 00:00:10.362 TCP 23.104.0.1:42234 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:55:46.039 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38804 10 6452 1 2025-11-21 12:52:01.598 00:05:04.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 12:52:01.596 00:05:04.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 12:56:44.834 00:00:10.379 TCP 23.104.0.1:37824 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:56:46.260 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34040 10 6452 1 2025-11-21 12:57:45.251 00:00:10.319 TCP 23.104.0.1:41946 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:57:46.468 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41056 10 6452 1 Summary: total flows: 162, total bytes: 490429, total packets: 1552, avg bps: 1091, avg pps: 0, avg bpp: 315 Time window: 2025-11-21 11:58:01 - 2025-11-21 12:57:56 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0029s User: 0.0019s Wall: 0.0014s flows/second: 114718.4 Runtime: 0.0014s