Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 23:59:06.135 00:00:10.360 TCP 23.104.0.1:36906 -> 1.101.0.1:3000 11 1507 1 2025-11-21 23:59:27.941 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38502 10 6452 1 2025-11-22 00:00:06.532 00:00:10.368 TCP 23.104.0.1:36334 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:00:28.168 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53064 10 6452 1 2025-11-22 00:01:01.041 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:01:01.189 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 00:01:06.948 00:00:10.374 TCP 23.104.0.1:54058 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:01:28.393 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57898 10 6452 1 2025-11-21 23:58:01.871 00:05:04.130 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 23:58:01.870 00:05:04.135 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 00:02:07.360 00:00:10.363 TCP 23.104.0.1:56490 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:02:28.571 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35292 10 6452 1 2025-11-22 00:03:07.761 00:00:11.021 TCP 23.104.0.1:46730 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:03:28.746 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49758 10 6452 1 2025-11-22 00:04:08.821 00:00:10.324 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:04:28.959 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33384 12 6556 1 2025-11-22 00:05:09.184 00:00:10.363 TCP 23.104.0.1:58736 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:05:29.184 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-11-22 00:06:01.369 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:06:01.501 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 00:06:09.587 00:00:10.366 TCP 23.104.0.1:51508 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:06:29.395 00:00:10.253 TCP 1.101.0.1:3000 -> 22.102.0.1:44550 10 6452 1 2025-11-22 00:07:09.989 00:00:10.367 TCP 23.104.0.1:34816 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:07:29.708 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:55464 10 6452 1 2025-11-22 00:04:01.870 00:05:04.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 00:04:01.873 00:05:04.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 00:08:10.393 00:00:10.368 TCP 23.104.0.1:47232 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:08:29.949 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43770 10 6452 1 2025-11-22 00:09:10.796 00:00:10.363 TCP 23.104.0.1:44586 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:09:30.189 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33974 10 6452 1 2025-11-22 00:10:11.194 00:00:10.329 TCP 23.104.0.1:59904 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:10:30.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59482 10 6452 1 2025-11-22 00:11:01.516 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:11:01.524 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 00:11:11.554 00:00:10.360 TCP 23.104.0.1:42226 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:11:30.648 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59954 10 6452 1 2025-11-22 00:12:11.948 00:00:10.376 TCP 23.104.0.1:33118 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:12:30.818 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46054 10 6452 1 2025-11-22 00:13:12.376 00:00:10.437 TCP 23.104.0.1:48070 -> 1.101.0.1:3000 15 1926 1 2025-11-22 00:13:31.035 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35398 12 10375 1 2025-11-22 00:10:01.881 00:05:04.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 00:10:01.878 00:05:04.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 00:14:12.854 00:00:10.382 TCP 23.104.0.1:45724 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:14:31.278 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34760 10 6452 1 2025-11-22 00:15:13.273 00:00:10.365 TCP 23.104.0.1:48172 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:15:31.502 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36402 10 6452 1 2025-11-22 00:16:01.763 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:16:01.513 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 00:16:13.684 00:00:10.373 TCP 23.104.0.1:44962 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:16:31.726 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:33756 10 6452 1 2025-11-22 00:17:14.104 00:00:10.363 TCP 23.104.0.1:36496 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:17:31.973 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:49900 10 6452 1 2025-11-22 00:18:14.508 00:00:10.365 TCP 23.104.0.1:41074 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:18:32.213 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59828 10 6452 1 2025-11-22 00:19:14.916 00:00:10.374 TCP 23.104.0.1:44556 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:19:32.426 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39080 10 6452 1 2025-11-22 00:16:01.880 00:05:04.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 00:16:01.879 00:05:04.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 00:20:15.333 00:00:18.904 TCP 23.104.0.1:48440 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:20:32.640 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47282 10 6452 1 2025-11-22 00:21:01.663 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:21:01.783 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 00:21:24.343 00:00:10.370 TCP 23.104.0.1:33462 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:21:32.850 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54844 10 6452 1 2025-11-22 00:22:24.749 00:00:10.363 TCP 23.104.0.1:58962 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:22:33.085 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56288 10 6452 1 2025-11-22 00:23:25.146 00:00:10.362 TCP 23.104.0.1:50976 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:23:33.298 00:00:15.428 TCP 1.101.0.1:3000 -> 22.102.0.1:52528 10 6452 1 2025-11-22 00:24:25.546 00:00:10.363 TCP 23.104.0.1:57974 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:24:38.783 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:48692 10 6452 1 2025-11-22 00:25:25.945 00:00:10.331 TCP 23.104.0.1:38786 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:25:38.993 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59846 10 6452 1 2025-11-22 00:26:01.964 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:22:01.899 00:05:04.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 00:26:01.789 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 00:22:01.887 00:05:04.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 00:26:26.314 00:00:10.370 TCP 23.104.0.1:52520 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:26:39.218 00:00:10.794 TCP 1.101.0.1:3000 -> 22.102.0.1:45436 10 6452 1 2025-11-22 00:27:26.723 00:00:10.375 TCP 23.104.0.1:52300 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:27:40.076 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55026 10 6452 1 2025-11-22 00:28:27.137 00:00:14.437 TCP 23.104.0.1:59516 -> 1.101.0.1:3000 15 1926 1 2025-11-22 00:28:40.256 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:60530 12 10369 1 2025-11-22 00:29:31.617 00:00:10.363 TCP 23.104.0.1:53672 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:29:40.504 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40030 10 6452 1 2025-11-22 00:30:32.015 00:00:10.369 TCP 23.104.0.1:55158 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:30:40.726 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49378 10 6452 1 2025-11-22 00:31:01.774 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 00:31:01.989 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:31:32.423 00:00:10.365 TCP 23.104.0.1:39386 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:31:40.949 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51290 10 6452 1 2025-11-22 00:28:01.880 00:05:04.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 00:28:01.882 00:05:04.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 00:32:32.832 00:00:10.359 TCP 23.104.0.1:60064 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:32:41.197 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60596 10 6452 1 2025-11-22 00:33:33.232 00:00:10.445 TCP 23.104.0.1:40664 -> 1.101.0.1:3000 15 1926 1 2025-11-22 00:33:41.374 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:55628 12 10369 1 2025-11-22 00:34:33.717 00:00:10.369 TCP 23.104.0.1:45814 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:34:41.581 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43288 10 6452 1 2025-11-22 00:35:34.129 00:00:10.367 TCP 23.104.0.1:37592 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:35:41.794 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36182 10 6452 1 2025-11-22 00:36:01.841 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:36:02.177 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 00:36:34.530 00:00:10.365 TCP 23.104.0.1:35942 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:36:41.965 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:46226 10 6452 1 2025-11-22 00:37:34.938 00:00:10.387 TCP 23.104.0.1:54308 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:37:42.214 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53568 10 6452 1 2025-11-22 00:34:01.881 00:05:04.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 00:34:01.884 00:05:04.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 00:38:35.362 00:00:10.366 TCP 23.104.0.1:53238 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:38:42.428 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35526 10 6452 1 2025-11-22 00:39:35.767 00:00:10.371 TCP 23.104.0.1:50828 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:39:42.650 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34954 10 6452 1 2025-11-22 00:40:36.182 00:00:10.368 TCP 23.104.0.1:56544 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:40:42.871 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39252 10 6452 1 2025-11-22 00:41:02.210 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 00:41:02.138 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:41:36.578 00:00:10.361 TCP 23.104.0.1:42128 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:41:43.105 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38610 10 6452 1 2025-11-22 00:42:36.980 00:00:10.328 TCP 23.104.0.1:60826 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:42:43.317 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35758 12 6556 1 2025-11-22 00:43:37.349 00:00:10.369 TCP 23.104.0.1:34636 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:43:43.541 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41686 10 6452 1 2025-11-22 00:40:01.888 00:05:04.160 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 00:40:01.885 00:05:04.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 00:44:37.758 00:00:10.369 TCP 23.104.0.1:60508 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:44:43.765 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49454 10 6452 1 2025-11-22 00:45:38.164 00:00:10.368 TCP 23.104.0.1:39008 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:45:43.988 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39330 10 6452 1 2025-11-22 00:46:02.393 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:46:02.555 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 00:46:38.571 00:00:10.368 TCP 23.104.0.1:42550 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:46:44.218 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57128 10 6452 1 2025-11-22 00:47:38.976 00:00:10.367 TCP 23.104.0.1:34046 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:47:44.435 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51974 10 6452 1 2025-11-22 00:48:39.382 00:00:10.319 TCP 23.104.0.1:43772 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:48:44.656 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:49380 10 6452 1 2025-11-22 00:49:39.737 00:00:10.322 TCP 23.104.0.1:49746 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:49:44.823 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50420 10 6452 1 2025-11-22 00:46:01.886 00:05:04.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 00:46:01.889 00:05:04.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 00:50:40.104 00:00:10.369 TCP 23.104.0.1:35428 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:50:45.054 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40588 10 6452 1 2025-11-22 00:51:02.700 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 00:51:02.323 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:51:40.511 00:00:10.328 TCP 23.104.0.1:42368 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:51:45.259 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35310 10 6452 1 2025-11-22 00:52:40.880 00:00:12.029 TCP 23.104.0.1:57986 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:52:45.468 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:40428 10 6452 1 2025-11-22 00:53:42.993 00:00:10.363 TCP 23.104.0.1:33912 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:53:45.740 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:48538 10 6452 1 2025-11-22 00:54:46.035 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37416 10 6452 1 2025-11-22 00:54:43.397 00:00:10.362 TCP 23.104.0.1:43602 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:55:43.800 00:00:10.365 TCP 23.104.0.1:60248 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:55:46.255 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39516 10 6452 1 2025-11-22 00:56:02.409 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 00:52:01.888 00:05:04.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 00:56:02.418 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 00:52:01.891 00:05:04.161 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 00:56:44.205 00:00:10.357 TCP 23.104.0.1:35062 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:56:46.477 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44706 10 6452 1 2025-11-22 00:57:44.598 00:00:10.365 TCP 23.104.0.1:50672 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:57:46.692 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33988 10 6452 1 Summary: total flows: 162, total bytes: 503611, total packets: 1573, avg bps: 1120, avg pps: 0, avg bpp: 320 Time window: 2025-11-21 23:58:01 - 2025-11-22 00:57:56 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0051s User: 0.0013s Wall: 0.0018s flows/second: 91009.5 Runtime: 0.0018s