Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 03:59:21.242 00:00:10.372 TCP 23.104.0.1:50178 -> 1.101.0.1:3000 11 1507 1 2025-11-22 03:59:36.590 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:59982 10 6452 1 2025-11-22 04:00:21.657 00:00:10.362 TCP 23.104.0.1:54448 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:00:36.766 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37956 10 6452 1 2025-11-22 04:01:06.271 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 04:01:06.239 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 04:01:22.069 00:00:10.367 TCP 23.104.0.1:59370 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:01:36.986 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:55314 10 6452 1 2025-11-22 03:58:02.037 00:05:04.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 03:58:02.034 00:05:04.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 04:02:22.470 00:00:10.370 TCP 23.104.0.1:33458 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:02:37.176 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41446 10 6452 1 2025-11-22 04:03:22.883 00:00:10.364 TCP 23.104.0.1:37838 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:03:37.386 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40080 10 6452 1 2025-11-22 04:04:23.286 00:00:10.533 TCP 23.104.0.1:41168 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:04:37.596 00:00:10.561 TCP 1.101.0.1:3000 -> 22.102.0.1:59046 10 6452 1 2025-11-22 04:05:23.861 00:00:10.375 TCP 23.104.0.1:56878 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:05:38.196 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43352 10 6452 1 2025-11-22 04:06:06.280 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 04:06:06.211 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 04:06:24.277 00:00:10.368 TCP 23.104.0.1:36748 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:06:38.415 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52340 10 6452 1 2025-11-22 04:07:24.682 00:00:10.369 TCP 23.104.0.1:39972 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:07:38.633 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57684 10 6452 1 2025-11-22 04:04:02.037 00:05:04.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 04:04:02.040 00:05:04.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 04:08:25.100 00:00:10.468 TCP 23.104.0.1:54042 -> 1.101.0.1:3000 15 1926 1 2025-11-22 04:08:38.857 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:35308 12 10369 1 2025-11-22 04:09:25.611 00:00:10.320 TCP 23.104.0.1:37718 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:09:39.125 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51080 10 6452 1 2025-11-22 04:10:25.969 00:00:10.323 TCP 23.104.0.1:36230 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:10:39.347 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36088 10 6452 1 2025-11-22 04:11:06.476 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 04:11:06.309 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 04:11:26.329 00:00:10.323 TCP 23.104.0.1:38076 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:11:39.561 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46804 10 6452 1 2025-11-22 04:12:26.691 00:00:10.329 TCP 23.104.0.1:38704 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:12:39.795 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60558 10 6452 1 2025-11-22 04:13:27.061 00:00:10.387 TCP 23.104.0.1:38264 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:13:40.021 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49264 10 6452 1 2025-11-22 04:10:02.057 00:05:04.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 04:10:02.055 00:05:04.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 04:14:27.487 00:00:10.367 TCP 23.104.0.1:49710 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:14:40.232 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54686 10 6452 1 2025-11-22 04:15:27.896 00:00:10.325 TCP 23.104.0.1:37676 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:15:40.447 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36520 10 6452 1 2025-11-22 04:16:06.327 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 04:16:06.591 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 04:16:28.259 00:00:10.369 TCP 23.104.0.1:48678 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:16:40.658 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36582 10 6452 1 2025-11-22 04:17:28.670 00:00:10.375 TCP 23.104.0.1:45046 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:17:40.880 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59894 10 6452 1 2025-11-22 04:18:41.107 00:00:24.804 TCP 1.101.0.1:3000 -> 22.102.0.1:35120 10 6452 1 2025-11-22 04:18:29.095 00:00:36.911 TCP 23.104.0.1:55040 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:16:02.048 00:05:04.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 04:19:56.098 00:00:10.324 TCP 23.104.0.1:60186 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:19:55.961 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38626 10 6452 1 2025-11-22 04:16:02.045 00:05:04.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 04:20:56.193 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:48170 10 6452 1 2025-11-22 04:21:06.722 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 04:21:06.666 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 04:20:56.462 00:00:10.325 TCP 23.104.0.1:46116 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:21:56.423 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51750 10 6452 1 2025-11-22 04:21:56.822 00:00:10.359 TCP 23.104.0.1:51110 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:22:56.647 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50060 10 6452 1 2025-11-22 04:22:57.219 00:00:10.322 TCP 23.104.0.1:46404 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:23:56.867 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:34106 12 10375 1 2025-11-22 04:23:57.586 00:00:10.438 TCP 23.104.0.1:47528 -> 1.101.0.1:3000 15 1926 1 2025-11-22 04:24:58.086 00:00:10.363 TCP 23.104.0.1:43502 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:24:57.118 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39358 10 6452 1 2025-11-22 04:26:06.920 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 04:22:02.049 00:05:04.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 04:25:58.488 00:00:10.603 TCP 23.104.0.1:41010 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:26:06.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 04:22:02.047 00:05:04.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 04:25:57.339 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50852 10 6452 1 2025-11-22 04:26:59.136 00:00:10.366 TCP 23.104.0.1:35840 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:26:57.558 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50374 10 6452 1 2025-11-22 04:27:57.776 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54814 10 6452 1 2025-11-22 04:27:59.544 00:00:10.366 TCP 23.104.0.1:50980 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:28:59.948 00:00:10.385 TCP 23.104.0.1:51316 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:28:57.997 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:37884 10 6452 1 2025-11-22 04:29:58.186 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36898 10 6452 1 2025-11-22 04:30:00.366 00:00:10.324 TCP 23.104.0.1:33330 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:31:06.734 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 04:31:06.788 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 04:30:58.400 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40508 10 6452 1 2025-11-22 04:31:00.728 00:00:10.365 TCP 23.104.0.1:54852 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:28:02.051 00:05:04.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 04:28:02.048 00:05:04.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 04:32:01.131 00:00:10.365 TCP 23.104.0.1:37162 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:31:58.614 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52742 10 6452 1 2025-11-22 04:32:58.795 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42618 10 6452 1 2025-11-22 04:33:01.535 00:00:10.365 TCP 23.104.0.1:55396 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:33:59.015 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60018 10 6452 1 2025-11-22 04:34:01.939 00:00:10.381 TCP 23.104.0.1:36524 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:34:59.238 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54208 10 6452 1 2025-11-22 04:35:02.359 00:00:10.324 TCP 23.104.0.1:45800 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:36:06.646 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 04:36:06.819 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 04:35:59.470 00:00:10.728 TCP 1.101.0.1:3000 -> 22.102.0.1:45156 11 6504 1 2025-11-22 04:36:02.722 00:00:10.374 TCP 23.104.0.1:48032 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:37:00.240 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48130 10 6452 1 2025-11-22 04:37:03.132 00:00:10.367 TCP 23.104.0.1:45590 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:34:02.049 00:05:04.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 04:34:02.051 00:05:04.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 04:38:00.451 00:00:10.546 TCP 1.101.0.1:3000 -> 22.102.0.1:57976 10 6452 1 2025-11-22 04:38:03.538 00:00:10.364 TCP 23.104.0.1:43452 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:39:01.047 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:48700 10 6452 1 2025-11-22 04:39:03.938 00:00:10.384 TCP 23.104.0.1:38070 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:40:01.252 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:37814 12 6544 1 2025-11-22 04:40:04.361 00:00:10.379 TCP 23.104.0.1:49164 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:41:06.903 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 04:41:06.965 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 04:41:01.475 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:42906 10 6452 1 2025-11-22 04:41:04.777 00:00:10.371 TCP 23.104.0.1:51012 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:42:01.776 00:00:13.378 TCP 1.101.0.1:3000 -> 22.102.0.1:33104 10 6452 1 2025-11-22 04:42:05.183 00:00:10.401 TCP 23.104.0.1:45846 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:43:05.646 00:00:10.361 TCP 23.104.0.1:36254 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:43:05.216 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53604 10 6452 1 2025-11-22 04:40:02.052 00:05:04.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 04:40:02.053 00:05:04.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 04:44:06.053 00:00:10.364 TCP 23.104.0.1:47388 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:44:05.397 00:00:10.294 TCP 1.101.0.1:3000 -> 22.102.0.1:46218 10 6452 1 2025-11-22 04:45:05.733 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53770 10 6452 1 2025-11-22 04:45:06.458 00:00:10.323 TCP 23.104.0.1:46994 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:46:07.008 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 04:46:07.156 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 04:46:05.959 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:45376 10 6452 1 2025-11-22 04:46:06.819 00:00:10.360 TCP 23.104.0.1:49910 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:47:06.155 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:34836 10 6452 1 2025-11-22 04:47:07.222 00:00:10.369 TCP 23.104.0.1:41756 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:48:06.356 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42638 10 6452 1 2025-11-22 04:48:07.635 00:00:10.368 TCP 23.104.0.1:47624 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:49:06.571 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:34044 10 6452 1 2025-11-22 04:49:08.087 00:00:10.360 TCP 23.104.0.1:45456 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:46:02.057 00:05:04.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 04:46:02.060 00:05:04.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 04:50:06.779 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51050 10 6452 1 2025-11-22 04:50:08.488 00:00:10.362 TCP 23.104.0.1:56800 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:51:07.006 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 04:51:07.262 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 04:51:08.887 00:00:10.378 TCP 23.104.0.1:56658 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:51:07.003 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50458 10 6452 1 2025-11-22 04:52:09.305 00:00:10.365 TCP 23.104.0.1:39522 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:52:07.223 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49364 10 6452 1 2025-11-22 04:53:09.711 00:00:12.789 TCP 23.104.0.1:41956 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:53:07.438 00:00:14.925 TCP 1.101.0.1:3000 -> 22.102.0.1:60110 10 6452 1 2025-11-22 04:54:12.536 00:00:10.362 TCP 23.104.0.1:38146 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:54:12.404 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40298 10 6452 1 2025-11-22 04:55:12.940 00:00:10.380 TCP 23.104.0.1:55848 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:55:12.618 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50420 10 6452 1 2025-11-22 04:52:02.061 00:05:04.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 04:56:08.534 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 04:56:08.305 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 04:52:02.059 00:05:04.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 04:56:12.833 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54500 10 6452 1 2025-11-22 04:56:13.355 00:00:10.363 TCP 23.104.0.1:47732 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:57:13.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39534 10 6452 1 2025-11-22 04:57:13.758 00:00:10.379 TCP 23.104.0.1:37656 -> 1.101.0.1:3000 11 1507 1 2025-11-22 04:58:13.297 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45250 10 6452 1 2025-11-22 04:58:14.176 00:00:10.323 TCP 23.104.0.1:56860 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499211, total packets: 1566, avg bps: 1102, avg pps: 0, avg bpp: 318 Time window: 2025-11-22 03:58:02 - 2025-11-22 04:58:24 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0031s User: 0.0010s Wall: 0.0016s flows/second: 101824.9 Runtime: 0.0016s