Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 00:58:45.004 00:00:10.365 TCP 23.104.0.1:42370 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:58:46.915 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:35892 10 6452 1 2025-11-22 00:59:45.415 00:00:10.374 TCP 23.104.0.1:49514 -> 1.101.0.1:3000 11 1507 1 2025-11-22 00:59:47.157 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44356 10 6452 1 2025-11-22 01:00:45.822 00:00:10.365 TCP 23.104.0.1:45212 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:00:47.328 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42606 10 6452 1 2025-11-22 01:01:02.428 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 01:01:02.517 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 01:01:46.223 00:00:10.371 TCP 23.104.0.1:33096 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:01:47.542 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40116 10 6452 1 2025-11-22 00:58:01.902 00:05:04.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 00:58:01.905 00:05:04.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 01:02:47.753 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55944 10 6452 1 2025-11-22 01:02:46.634 00:00:10.381 TCP 23.104.0.1:39352 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:03:47.067 00:00:10.363 TCP 23.104.0.1:35200 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:03:47.968 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:53666 10 6452 1 2025-11-22 01:04:47.473 00:00:10.320 TCP 23.104.0.1:37870 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:04:48.206 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32790 10 6452 1 2025-11-22 01:05:47.830 00:00:11.145 TCP 23.104.0.1:57948 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:05:48.420 00:00:10.523 TCP 1.101.0.1:3000 -> 22.102.0.1:42466 10 6452 1 2025-11-22 01:06:02.842 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 01:06:02.908 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 01:06:49.012 00:00:10.363 TCP 23.104.0.1:41898 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:06:48.980 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37506 10 6452 1 2025-11-22 01:07:49.201 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48822 10 6452 1 2025-11-22 01:04:01.903 00:05:04.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 01:07:49.414 00:00:10.367 TCP 23.104.0.1:36934 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:04:01.905 00:05:04.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 01:08:49.429 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42626 10 6452 1 2025-11-22 01:08:49.822 00:00:10.363 TCP 23.104.0.1:46938 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:09:49.643 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51642 10 6452 1 2025-11-22 01:09:50.228 00:00:10.324 TCP 23.104.0.1:36314 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:10:50.587 00:00:10.322 TCP 23.104.0.1:52468 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:11:02.576 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 01:10:49.853 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38806 10 6452 1 2025-11-22 01:11:02.850 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 01:11:50.949 00:00:10.332 TCP 23.104.0.1:46720 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:11:50.041 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50504 10 6452 1 2025-11-22 01:12:50.261 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53646 10 6452 1 2025-11-22 01:12:51.323 00:00:10.368 TCP 23.104.0.1:57146 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:13:50.477 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:49602 10 6452 1 2025-11-22 01:10:01.918 00:05:04.143 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 01:13:51.730 00:00:11.226 TCP 23.104.0.1:55198 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:10:01.914 00:05:04.149 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 01:14:50.664 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39584 10 6452 1 2025-11-22 01:14:52.995 00:00:10.371 TCP 23.104.0.1:59116 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:15:50.882 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46376 10 6452 1 2025-11-22 01:16:02.801 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 01:16:02.863 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 01:15:53.402 00:00:10.365 TCP 23.104.0.1:54898 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:16:51.120 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:42506 10 6452 1 2025-11-22 01:16:53.803 00:00:10.367 TCP 23.104.0.1:57636 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:17:51.415 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57912 10 6452 1 2025-11-22 01:17:54.210 00:00:10.321 TCP 23.104.0.1:34006 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:18:51.648 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34166 10 6452 1 2025-11-22 01:18:54.571 00:00:10.386 TCP 23.104.0.1:58926 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:19:55.091 00:00:10.371 TCP 23.104.0.1:34210 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:16:01.908 00:05:04.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 01:19:51.820 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48742 10 6452 1 2025-11-22 01:16:01.905 00:05:04.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 01:20:52.052 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38230 10 6452 1 2025-11-22 01:21:02.924 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 01:21:02.912 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 01:20:55.498 00:00:10.364 TCP 23.104.0.1:46812 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:21:55.909 00:00:10.794 TCP 23.104.0.1:46622 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:21:52.259 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:39940 10 6452 1 2025-11-22 01:22:52.445 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43294 10 6452 1 2025-11-22 01:22:56.757 00:00:10.377 TCP 23.104.0.1:38898 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:23:52.612 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39914 10 6452 1 2025-11-22 01:23:57.169 00:00:10.367 TCP 23.104.0.1:34114 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:24:52.790 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49636 10 6452 1 2025-11-22 01:24:57.577 00:00:10.367 TCP 23.104.0.1:55194 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:26:03.462 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 01:22:01.909 00:05:04.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 01:26:03.264 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 01:22:01.908 00:05:04.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 01:25:53.003 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40530 10 6452 1 2025-11-22 01:25:57.982 00:00:10.368 TCP 23.104.0.1:33580 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:26:53.221 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45710 10 6452 1 2025-11-22 01:26:58.388 00:00:10.366 TCP 23.104.0.1:38722 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:27:53.432 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58558 10 6452 1 2025-11-22 01:27:58.790 00:00:10.366 TCP 23.104.0.1:58014 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:28:53.649 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57956 10 6452 1 2025-11-22 01:28:59.195 00:00:10.369 TCP 23.104.0.1:33910 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:29:53.862 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43902 10 6452 1 2025-11-22 01:29:59.599 00:00:10.372 TCP 23.104.0.1:55406 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:30:54.092 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50684 10 6452 1 2025-11-22 01:31:02.994 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 01:31:03.086 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 01:31:00.010 00:00:10.365 TCP 23.104.0.1:48086 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:28:01.909 00:05:04.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 01:31:54.316 00:00:10.944 TCP 1.101.0.1:3000 -> 22.102.0.1:37792 10 6452 1 2025-11-22 01:28:01.911 00:05:04.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 01:32:00.420 00:00:23.226 TCP 23.104.0.1:52154 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:32:55.298 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54168 10 6452 1 2025-11-22 01:33:13.720 00:00:10.377 TCP 23.104.0.1:51800 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:33:55.521 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56450 10 6452 1 2025-11-22 01:34:14.130 00:00:10.321 TCP 23.104.0.1:54274 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:34:55.749 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36918 10 6452 1 2025-11-22 01:35:14.492 00:00:10.364 TCP 23.104.0.1:49950 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:36:03.900 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 01:35:55.967 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:47960 10 6452 1 2025-11-22 01:36:03.755 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 01:36:14.894 00:00:10.379 TCP 23.104.0.1:50466 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:36:56.203 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:53742 10 6452 1 2025-11-22 01:37:15.315 00:00:10.373 TCP 23.104.0.1:45150 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:34:01.919 00:05:04.153 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 01:37:56.443 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46362 10 6452 1 2025-11-22 01:34:01.918 00:05:04.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 01:38:15.722 00:00:10.378 TCP 23.104.0.1:37918 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:38:56.672 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59912 10 6452 1 2025-11-22 01:39:16.140 00:00:11.135 TCP 23.104.0.1:41328 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:39:56.900 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37402 10 6452 1 2025-11-22 01:40:17.307 00:00:10.360 TCP 23.104.0.1:36280 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:41:03.382 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 01:41:03.210 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 01:40:57.117 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33452 10 6452 1 2025-11-22 01:41:17.706 00:00:10.368 TCP 23.104.0.1:59988 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:41:57.338 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:51312 10 6452 1 2025-11-22 01:42:18.109 00:00:10.372 TCP 23.104.0.1:58808 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:42:57.569 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57874 10 6452 1 2025-11-22 01:43:18.520 00:00:10.455 TCP 23.104.0.1:49928 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:40:01.922 00:05:04.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 01:40:01.918 00:05:04.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 01:43:57.775 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41708 10 6452 1 2025-11-22 01:44:19.016 00:00:10.368 TCP 23.104.0.1:47900 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:44:57.996 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38076 10 6452 1 2025-11-22 01:45:19.425 00:00:10.371 TCP 23.104.0.1:60352 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:46:03.466 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 01:46:03.390 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 01:45:58.225 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:39520 10 6452 1 2025-11-22 01:46:19.830 00:00:10.851 TCP 23.104.0.1:60954 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:46:58.487 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44048 10 6452 1 2025-11-22 01:47:20.721 00:00:10.371 TCP 23.104.0.1:33020 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:47:58.707 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47744 10 6452 1 2025-11-22 01:48:21.134 00:00:10.364 TCP 23.104.0.1:51558 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:48:58.920 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57506 10 6452 1 2025-11-22 01:49:21.538 00:00:10.366 TCP 23.104.0.1:37936 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:46:01.926 00:05:04.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 01:46:01.922 00:05:04.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 01:49:59.130 00:00:10.697 TCP 1.101.0.1:3000 -> 22.102.0.1:52736 10 6452 1 2025-11-22 01:50:21.942 00:00:10.384 TCP 23.104.0.1:60412 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:51:03.516 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 01:51:03.536 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 01:50:59.865 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37388 10 6452 1 2025-11-22 01:51:22.365 00:00:10.834 TCP 23.104.0.1:55846 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:52:00.084 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47656 10 6452 1 2025-11-22 01:52:23.229 00:00:10.359 TCP 23.104.0.1:38396 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:53:00.300 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:34140 10 6452 1 2025-11-22 01:53:23.632 00:00:10.362 TCP 23.104.0.1:47416 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:54:00.496 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44090 10 6452 1 2025-11-22 01:54:24.034 00:00:10.378 TCP 23.104.0.1:51642 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:55:00.704 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:57332 10 6452 1 2025-11-22 01:55:24.450 00:00:10.364 TCP 23.104.0.1:39224 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:56:04.022 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 01:52:01.932 00:05:04.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 01:56:04.013 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 01:52:01.928 00:05:04.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 01:56:00.949 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33704 10 6452 1 2025-11-22 01:56:24.850 00:00:11.043 TCP 23.104.0.1:33312 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:57:01.186 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55246 10 6452 1 2025-11-22 01:57:25.930 00:00:10.391 TCP 23.104.0.1:42806 -> 1.101.0.1:3000 11 1507 1 2025-11-22 01:58:01.415 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51508 10 6452 1 2025-11-22 01:58:26.356 00:00:10.360 TCP 23.104.0.1:36520 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1096, avg pps: 0, avg bpp: 317 Time window: 2025-11-22 00:58:01 - 2025-11-22 01:58:36 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0061s User: 0.0009s Wall: 0.0028s flows/second: 57930.4 Runtime: 0.0028s