Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 09:59:01.101 00:00:10.382 TCP 23.104.0.1:48170 -> 1.101.0.1:3000 11 1507 1 2025-11-22 09:59:00.406 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57102 10 6452 1 2025-11-22 10:00:01.545 00:00:10.362 TCP 23.104.0.1:39682 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:00:00.621 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43482 10 6452 1 2025-11-22 10:01:00.834 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:39622 10 6452 1 2025-11-22 10:01:13.265 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 10:01:01.941 00:00:10.377 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:01:13.492 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 09:58:02.174 00:05:04.098 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 09:58:02.178 00:05:04.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 10:02:01.069 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60330 10 6452 1 2025-11-22 10:02:02.361 00:00:10.369 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:03:01.238 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54160 10 6452 1 2025-11-22 10:03:02.766 00:00:10.377 TCP 23.104.0.1:47512 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:04:01.455 00:00:10.649 TCP 1.101.0.1:3000 -> 22.102.0.1:49524 10 6452 1 2025-11-22 10:04:03.182 00:00:10.365 TCP 23.104.0.1:38482 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:05:03.584 00:00:10.396 TCP 23.104.0.1:47440 -> 1.101.0.1:3000 15 1926 1 2025-11-22 10:05:02.144 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:37732 12 10369 1 2025-11-22 10:06:13.677 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 10:06:04.019 00:00:10.362 TCP 23.104.0.1:35864 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:06:02.388 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36244 10 6452 1 2025-11-22 10:06:13.612 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 10:07:04.417 00:00:10.368 TCP 23.104.0.1:59600 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:07:02.605 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60352 10 6452 1 2025-11-22 10:04:02.177 00:05:04.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 10:04:02.179 00:05:04.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 10:08:04.829 00:00:17.338 TCP 23.104.0.1:39200 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:08:02.811 00:00:19.264 TCP 1.101.0.1:3000 -> 22.102.0.1:48030 10 6452 1 2025-11-22 10:09:12.125 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50296 10 6452 1 2025-11-22 10:09:12.209 00:00:10.322 TCP 23.104.0.1:39634 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:10:12.572 00:00:10.365 TCP 23.104.0.1:59986 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:10:12.355 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40280 10 6452 1 2025-11-22 10:11:13.610 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 10:11:13.396 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 10:11:12.976 00:00:10.327 TCP 23.104.0.1:44956 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:11:12.563 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57284 10 6452 1 2025-11-22 10:12:12.777 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35212 10 6452 1 2025-11-22 10:12:13.345 00:00:10.362 TCP 23.104.0.1:56928 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:13:13.746 00:00:10.365 TCP 23.104.0.1:37818 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:13:12.990 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52744 10 6452 1 2025-11-22 10:10:02.178 00:05:04.097 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 10:10:02.180 00:05:04.092 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 10:14:13.211 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50266 10 6452 1 2025-11-22 10:14:14.148 00:00:10.329 TCP 23.104.0.1:47306 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:15:13.428 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45926 10 6452 1 2025-11-22 10:15:14.520 00:00:10.372 TCP 23.104.0.1:42294 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:16:13.621 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 10:16:13.630 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 10:16:14.929 00:00:10.385 TCP 23.104.0.1:40148 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:16:13.598 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37068 10 6452 1 2025-11-22 10:17:15.354 00:00:10.363 TCP 23.104.0.1:40204 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:17:13.817 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45022 10 6452 1 2025-11-22 10:18:15.761 00:00:10.369 TCP 23.104.0.1:47714 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:18:14.068 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39828 10 6452 1 2025-11-22 10:19:14.286 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42304 10 6452 1 2025-11-22 10:19:16.171 00:00:10.368 TCP 23.104.0.1:44574 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:16:02.184 00:05:04.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 10:16:02.181 00:05:04.095 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 10:20:16.575 00:00:10.324 TCP 23.104.0.1:52988 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:20:14.502 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42166 10 6452 1 2025-11-22 10:21:14.055 00:00:00.046 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 10:21:13.750 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 10:21:14.720 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57700 10 6452 1 2025-11-22 10:21:16.938 00:00:10.378 TCP 23.104.0.1:58964 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:22:14.945 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:56120 10 6452 1 2025-11-22 10:22:17.363 00:00:10.958 TCP 23.104.0.1:42726 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:23:15.175 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47612 10 6452 1 2025-11-22 10:23:18.370 00:00:10.390 TCP 23.104.0.1:54902 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:24:15.350 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46898 10 6452 1 2025-11-22 10:24:18.838 00:00:10.349 TCP 23.104.0.1:52280 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:25:15.557 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48474 10 6452 1 2025-11-22 10:25:19.218 00:00:10.366 TCP 23.104.0.1:36980 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:22:02.187 00:05:04.089 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 10:22:02.184 00:05:04.094 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 10:26:13.682 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 10:26:13.886 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 10:26:15.729 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49596 10 6452 1 2025-11-22 10:26:19.622 00:00:10.368 TCP 23.104.0.1:47602 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:27:15.938 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:57626 11 6504 1 2025-11-22 10:27:20.031 00:00:10.492 TCP 23.104.0.1:58650 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:28:16.180 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42424 10 6452 1 2025-11-22 10:28:20.565 00:00:10.366 TCP 23.104.0.1:41654 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:29:16.395 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60860 10 6452 1 2025-11-22 10:29:20.969 00:00:10.374 TCP 23.104.0.1:42944 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:30:16.608 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49064 10 6452 1 2025-11-22 10:30:21.372 00:00:10.364 TCP 23.104.0.1:49588 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:31:13.820 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 10:31:14.003 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 10:31:16.827 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52654 12 6556 1 2025-11-22 10:31:21.781 00:00:10.373 TCP 23.104.0.1:54258 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:28:02.194 00:05:04.084 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 10:28:02.190 00:05:04.089 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 10:32:17.050 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41736 10 6452 1 2025-11-22 10:32:22.189 00:00:15.575 TCP 23.104.0.1:41820 -> 1.101.0.1:3000 13 1611 1 2025-11-22 10:33:17.223 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49728 10 6452 1 2025-11-22 10:33:27.813 00:00:10.372 TCP 23.104.0.1:49808 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:34:17.445 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33722 10 6452 1 2025-11-22 10:34:28.222 00:00:10.356 TCP 23.104.0.1:55270 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:35:17.661 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58018 10 6452 1 2025-11-22 10:35:28.617 00:00:10.320 TCP 23.104.0.1:46350 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:36:14.325 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 10:36:14.103 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 10:36:17.879 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37924 10 6452 1 2025-11-22 10:36:28.979 00:00:12.657 TCP 23.104.0.1:37326 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:37:18.107 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42650 10 6452 1 2025-11-22 10:37:31.671 00:00:10.370 TCP 23.104.0.1:47262 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:34:02.199 00:05:04.086 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 10:34:02.197 00:05:04.090 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 10:38:18.315 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57140 10 6452 1 2025-11-22 10:38:32.101 00:00:10.366 TCP 23.104.0.1:38904 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:39:18.526 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33686 10 6452 1 2025-11-22 10:39:32.504 00:00:10.366 TCP 23.104.0.1:41632 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:40:18.742 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46096 10 6452 1 2025-11-22 10:40:32.906 00:00:10.328 TCP 23.104.0.1:42684 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:41:14.877 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 10:41:14.490 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 10:41:18.958 00:00:10.426 TCP 1.101.0.1:3000 -> 22.102.0.1:38522 10 6452 1 2025-11-22 10:41:33.272 00:00:10.321 TCP 23.104.0.1:36812 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:42:19.425 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38150 10 6452 1 2025-11-22 10:42:33.629 00:00:10.373 TCP 23.104.0.1:60120 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:43:19.645 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55826 10 6452 1 2025-11-22 10:43:34.057 00:00:10.362 TCP 23.104.0.1:36784 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:40:02.195 00:05:04.094 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 10:40:02.198 00:05:04.088 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 10:44:19.821 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:38608 10 6452 1 2025-11-22 10:44:34.455 00:00:10.364 TCP 23.104.0.1:56306 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:45:20.081 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53510 10 6452 1 2025-11-22 10:45:34.859 00:00:10.909 TCP 23.104.0.1:49410 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:46:14.472 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 10:46:14.314 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 10:46:20.313 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:40778 10 6452 1 2025-11-22 10:46:35.806 00:00:10.367 TCP 23.104.0.1:56252 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:47:20.547 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58260 10 6452 1 2025-11-22 10:47:36.210 00:00:10.368 TCP 23.104.0.1:35036 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:48:20.766 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37314 10 6452 1 2025-11-22 10:48:36.615 00:00:10.362 TCP 23.104.0.1:47006 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:49:20.997 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54692 10 6452 1 2025-11-22 10:49:37.017 00:00:10.320 TCP 23.104.0.1:42868 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:46:02.196 00:05:04.094 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 10:46:02.200 00:05:04.089 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 10:50:21.210 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34322 10 6452 1 2025-11-22 10:50:37.381 00:00:10.413 TCP 23.104.0.1:40384 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:51:14.390 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 10:51:14.288 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 10:51:21.386 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40910 10 6452 1 2025-11-22 10:51:37.835 00:00:10.442 TCP 23.104.0.1:53600 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:52:21.596 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58578 10 6452 1 2025-11-22 10:52:38.318 00:00:10.360 TCP 23.104.0.1:36778 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:53:21.764 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48066 10 6452 1 2025-11-22 10:53:38.716 00:00:10.372 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:54:21.981 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:57122 10 6452 1 2025-11-22 10:54:39.127 00:00:10.369 TCP 23.104.0.1:55026 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:55:22.232 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37216 10 6452 1 2025-11-22 10:55:39.537 00:00:10.392 TCP 23.104.0.1:53482 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:52:02.197 00:05:04.093 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 10:52:02.200 00:05:04.088 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 10:56:14.326 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 10:56:14.362 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 10:56:22.448 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53038 10 6452 1 2025-11-22 10:56:39.975 00:00:10.373 TCP 23.104.0.1:54362 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:57:22.667 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59336 10 6452 1 2025-11-22 10:57:40.388 00:00:10.365 TCP 23.104.0.1:41530 -> 1.101.0.1:3000 11 1507 1 2025-11-22 10:58:22.881 00:00:10.633 TCP 1.101.0.1:3000 -> 22.102.0.1:46694 10 6452 1 2025-11-22 10:58:40.798 00:00:10.365 TCP 23.104.0.1:38738 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502944, total packets: 1583, avg bps: 1102, avg pps: 0, avg bpp: 317 Time window: 2025-11-22 09:58:02 - 2025-11-22 10:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0027s Wall: 0.0027s flows/second: 61769.6 Runtime: 0.0027s