Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 13:59:08.053 00:00:10.364 TCP 23.104.0.1:41468 -> 1.101.0.1:3000 11 1507 1 2025-11-22 13:59:34.842 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46582 10 6452 1 2025-11-22 14:00:08.455 00:00:10.366 TCP 23.104.0.1:51790 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:00:35.072 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52868 10 6452 1 2025-11-22 14:01:18.278 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 14:01:08.862 00:00:10.371 TCP 23.104.0.1:49620 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:01:18.166 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 14:01:35.287 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40562 10 6452 1 2025-11-22 13:58:02.255 00:05:04.093 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 13:58:02.252 00:05:04.099 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 14:02:09.273 00:00:10.365 TCP 23.104.0.1:54486 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:02:35.502 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:56972 10 6452 1 2025-11-22 14:03:09.673 00:00:10.379 TCP 23.104.0.1:58676 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:03:35.682 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57546 10 6452 1 2025-11-22 14:04:10.134 00:00:10.367 TCP 23.104.0.1:49064 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:04:35.852 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52352 10 6452 1 2025-11-22 14:05:10.542 00:00:10.365 TCP 23.104.0.1:53072 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:05:36.081 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44990 10 6452 1 2025-11-22 14:06:18.253 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 14:06:10.946 00:00:10.374 TCP 23.104.0.1:40280 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:06:18.391 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 14:06:36.297 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47530 11 6492 1 2025-11-22 14:07:11.361 00:00:10.360 TCP 23.104.0.1:34970 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:07:36.507 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:40346 10 6452 1 2025-11-22 14:04:02.258 00:05:04.091 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 14:04:02.255 00:05:04.096 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 14:08:11.762 00:00:10.333 TCP 23.104.0.1:56258 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:08:36.718 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47162 10 6452 1 2025-11-22 14:09:12.133 00:00:10.445 TCP 23.104.0.1:39726 -> 1.101.0.1:3000 15 1926 1 2025-11-22 14:09:36.889 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:37870 12 10375 1 2025-11-22 14:10:12.614 00:00:10.364 TCP 23.104.0.1:54794 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:10:37.132 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37996 10 6452 1 2025-11-22 14:11:18.104 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 14:11:18.240 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 14:11:13.022 00:00:15.966 TCP 23.104.0.1:55692 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:11:37.346 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53514 10 6452 1 2025-11-22 14:12:19.030 00:00:10.363 TCP 23.104.0.1:46032 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:12:37.561 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55038 10 6452 1 2025-11-22 14:13:19.430 00:00:10.371 TCP 23.104.0.1:39624 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:13:37.739 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:57612 10 6452 1 2025-11-22 14:10:02.256 00:05:04.100 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 14:10:02.259 00:05:04.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 14:14:19.838 00:00:10.346 TCP 23.104.0.1:47898 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:14:37.933 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46258 10 6452 1 2025-11-22 14:15:20.224 00:00:10.368 TCP 23.104.0.1:43532 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:15:38.169 00:00:10.261 TCP 1.101.0.1:3000 -> 22.102.0.1:52334 10 6452 1 2025-11-22 14:16:18.638 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 14:16:18.559 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 14:16:20.629 00:00:10.366 TCP 23.104.0.1:40790 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:16:38.472 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38368 10 6452 1 2025-11-22 14:17:21.029 00:00:10.366 TCP 23.104.0.1:58210 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:17:38.687 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38088 10 6452 1 2025-11-22 14:18:21.434 00:00:10.364 TCP 23.104.0.1:47786 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:18:38.911 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33338 10 6452 1 2025-11-22 14:19:21.836 00:00:10.356 TCP 23.104.0.1:60474 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:19:39.136 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50990 10 6452 1 2025-11-22 14:16:02.257 00:05:04.104 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 14:16:02.260 00:05:04.098 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 14:20:22.222 00:00:10.766 TCP 23.104.0.1:45924 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:20:39.345 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52708 10 6452 1 2025-11-22 14:21:18.889 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 14:21:18.985 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 14:21:23.026 00:00:10.362 TCP 23.104.0.1:47762 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:21:39.563 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60074 10 6452 1 2025-11-22 14:22:23.427 00:00:10.369 TCP 23.104.0.1:49116 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:22:39.771 00:00:10.478 TCP 1.101.0.1:3000 -> 22.102.0.1:50650 10 6452 1 2025-11-22 14:23:23.830 00:00:10.353 TCP 23.104.0.1:43536 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:23:40.282 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34642 10 6452 1 2025-11-22 14:24:24.219 00:00:10.474 TCP 23.104.0.1:54908 -> 1.101.0.1:3000 17 2241 1 2025-11-22 14:24:40.501 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:39476 14 14292 1 2025-11-22 14:25:24.737 00:00:10.365 TCP 23.104.0.1:41370 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:25:40.778 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38326 10 6452 1 2025-11-22 14:22:02.262 00:05:04.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 14:22:02.264 00:05:04.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 14:26:18.732 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 14:26:18.734 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 14:26:25.141 00:00:10.384 TCP 23.104.0.1:44238 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:26:40.991 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59774 10 6452 1 2025-11-22 14:27:25.569 00:00:10.375 TCP 23.104.0.1:52824 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:27:41.214 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46926 10 6452 1 2025-11-22 14:28:25.982 00:00:10.369 TCP 23.104.0.1:47112 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:28:41.429 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48210 10 6452 1 2025-11-22 14:29:26.394 00:00:10.366 TCP 23.104.0.1:42150 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:29:41.646 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48612 10 6452 1 2025-11-22 14:30:26.800 00:00:10.372 TCP 23.104.0.1:55660 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:30:41.852 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34586 10 6452 1 2025-11-22 14:31:18.856 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 14:31:18.894 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 14:31:27.215 00:00:10.370 TCP 23.104.0.1:37482 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:31:42.086 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42426 10 6452 1 2025-11-22 14:28:02.265 00:05:04.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 14:28:02.263 00:05:04.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 14:32:27.624 00:00:10.365 TCP 23.104.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:32:42.304 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:39526 10 6452 1 2025-11-22 14:33:28.029 00:00:10.362 TCP 23.104.0.1:44716 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:33:42.475 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52038 10 6452 1 2025-11-22 14:34:28.427 00:00:10.397 TCP 23.104.0.1:50452 -> 1.101.0.1:3000 15 1926 1 2025-11-22 14:34:42.694 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48474 12 10584 1 2025-11-22 14:35:28.860 00:00:10.372 TCP 23.104.0.1:44168 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:35:42.933 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:47710 10 6661 1 2025-11-22 14:36:18.980 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 14:36:18.848 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 14:36:29.271 00:00:10.367 TCP 23.104.0.1:33054 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:36:43.179 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54532 10 6661 1 2025-11-22 14:37:29.673 00:00:10.367 TCP 23.104.0.1:53196 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:37:43.349 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56508 10 6661 1 2025-11-22 14:34:02.266 00:05:04.099 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 14:34:02.264 00:05:04.105 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 14:38:30.099 00:00:10.362 TCP 23.104.0.1:56490 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:38:43.570 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51070 10 6661 1 2025-11-22 14:39:30.499 00:00:10.383 TCP 23.104.0.1:36500 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:39:43.790 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:57738 10 6661 1 2025-11-22 14:40:30.916 00:00:10.329 TCP 23.104.0.1:59616 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:40:43.970 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:43790 10 6661 1 2025-11-22 14:41:18.833 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 14:41:18.997 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 14:41:31.282 00:00:10.367 TCP 23.104.0.1:48964 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:41:44.197 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54208 10 6661 1 2025-11-22 14:42:31.687 00:00:10.368 TCP 23.104.0.1:56410 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:42:44.428 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47882 10 6661 1 2025-11-22 14:43:32.101 00:00:10.365 TCP 23.104.0.1:33866 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:43:44.652 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53830 12 6765 1 2025-11-22 14:40:02.269 00:05:04.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 14:40:02.268 00:05:04.102 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 14:44:32.502 00:00:10.612 TCP 23.104.0.1:43854 -> 1.101.0.1:3000 16 1978 1 2025-11-22 14:44:44.882 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:54312 12 10584 1 2025-11-22 14:45:33.154 00:00:10.364 TCP 23.104.0.1:36864 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:45:45.127 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46408 11 6701 1 2025-11-22 14:46:18.965 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 14:46:19.131 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 14:46:33.554 00:00:10.375 TCP 23.104.0.1:60268 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:46:45.345 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:47798 10 6661 1 2025-11-22 14:47:33.966 00:00:10.369 TCP 23.104.0.1:55062 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:47:45.547 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:36000 10 6661 1 2025-11-22 14:48:34.371 00:00:10.362 TCP 23.104.0.1:44434 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:48:45.711 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44296 10 6661 1 2025-11-22 14:49:34.767 00:00:10.335 TCP 23.104.0.1:37258 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:49:45.924 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:55354 10 6661 1 2025-11-22 14:46:02.272 00:05:04.097 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 14:46:02.269 00:05:04.103 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 14:50:35.132 00:00:10.368 TCP 23.104.0.1:57612 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:50:46.123 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53330 10 6661 1 2025-11-22 14:51:19.144 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 14:51:18.992 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 14:51:35.537 00:00:10.365 TCP 23.104.0.1:50248 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:51:46.333 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35360 10 6661 1 2025-11-22 14:52:35.943 00:00:10.382 TCP 23.104.0.1:60810 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:52:46.546 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50114 10 6661 1 2025-11-22 14:53:36.369 00:00:10.321 TCP 23.104.0.1:58036 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:53:46.759 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38312 10 6661 1 2025-11-22 14:54:36.728 00:00:10.374 TCP 23.104.0.1:60850 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:54:46.969 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:48796 10 6661 1 2025-11-22 14:55:37.140 00:00:10.366 TCP 23.104.0.1:52796 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:55:47.190 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51354 10 6661 1 2025-11-22 14:52:02.271 00:05:04.101 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 14:52:02.274 00:05:04.096 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 14:56:19.177 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 14:56:19.298 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 14:56:37.550 00:00:10.367 TCP 23.104.0.1:48252 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:56:47.409 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47944 10 6661 1 2025-11-22 14:57:37.957 00:00:10.319 TCP 23.104.0.1:60566 -> 1.101.0.1:3000 11 1507 1 2025-11-22 14:57:47.622 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45572 10 6661 1 2025-11-22 14:58:38.320 00:00:10.362 TCP 23.104.0.1:45620 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 518748, total packets: 1595, avg bps: 1138, avg pps: 0, avg bpp: 325 Time window: 2025-11-22 13:58:02 - 2025-11-22 14:58:48 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0035s User: 0.0012s Wall: 0.0021s flows/second: 76166.6 Runtime: 0.0022s