Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 16:59:26.926 00:00:10.385 TCP 23.104.0.1:40146 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:59:34.880 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:35402 10 6452 1 2025-11-22 17:00:27.351 00:00:10.366 TCP 23.104.0.1:37760 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:00:35.083 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:51348 10 6452 1 2025-11-22 17:01:21.763 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 17:01:21.810 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 17:01:27.753 00:00:10.339 TCP 23.104.0.1:35844 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:01:35.330 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:43484 10 6452 1 2025-11-22 16:58:02.301 00:05:04.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 16:58:02.304 00:05:04.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 17:02:28.129 00:00:10.365 TCP 23.104.0.1:48830 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:02:35.560 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37266 10 6452 1 2025-11-22 17:03:28.532 00:00:10.490 TCP 23.104.0.1:46438 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:03:35.771 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36450 10 6452 1 2025-11-22 17:04:29.073 00:00:10.361 TCP 23.104.0.1:49396 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:04:35.995 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:56356 10 6452 1 2025-11-22 17:05:29.475 00:00:10.364 TCP 23.104.0.1:58768 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:05:36.178 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:37330 10 6452 1 2025-11-22 17:06:21.877 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 17:06:21.880 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 17:06:29.872 00:00:10.360 TCP 23.104.0.1:56532 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:06:36.384 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47378 10 6452 1 2025-11-22 17:07:30.273 00:00:10.368 TCP 23.104.0.1:53978 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:07:36.607 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60402 10 6452 1 2025-11-22 17:04:02.307 00:05:04.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 17:04:02.304 00:05:04.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 17:08:30.680 00:00:10.370 TCP 23.104.0.1:34952 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:08:36.780 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60260 10 6452 1 2025-11-22 17:09:31.097 00:00:10.363 TCP 23.104.0.1:47950 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:09:36.995 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44946 10 6452 1 2025-11-22 17:10:31.491 00:00:10.371 TCP 23.104.0.1:35162 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:10:37.207 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43774 10 6452 1 2025-11-22 17:11:22.485 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 17:11:22.289 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 17:11:31.900 00:00:10.371 TCP 23.104.0.1:41384 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:11:37.425 00:00:10.607 TCP 1.101.0.1:3000 -> 22.102.0.1:42356 10 6452 1 2025-11-22 17:12:32.308 00:00:10.369 TCP 23.104.0.1:36244 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:12:38.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40210 10 6452 1 2025-11-22 17:13:32.709 00:00:10.375 TCP 23.104.0.1:58744 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:13:38.298 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37434 10 6452 1 2025-11-22 17:10:02.305 00:05:04.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 17:10:02.307 00:05:04.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 17:14:33.123 00:00:10.363 TCP 23.104.0.1:45800 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:14:38.504 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55770 10 6452 1 2025-11-22 17:15:33.520 00:00:10.332 TCP 23.104.0.1:60984 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:15:38.728 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:46962 10 6452 1 2025-11-22 17:16:22.271 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 17:16:22.251 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 17:16:33.891 00:00:10.382 TCP 23.104.0.1:45962 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:16:38.908 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53548 10 6452 1 2025-11-22 17:17:34.313 00:00:10.363 TCP 23.104.0.1:60872 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:17:39.125 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42414 10 6452 1 2025-11-22 17:18:34.715 00:00:10.331 TCP 23.104.0.1:42966 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:18:39.336 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37242 10 6452 1 2025-11-22 17:19:35.115 00:00:10.367 TCP 23.104.0.1:46930 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:19:39.551 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39660 10 6452 1 2025-11-22 17:16:02.308 00:05:04.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 17:16:02.310 00:05:04.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 17:20:35.516 00:00:10.371 TCP 23.104.0.1:39070 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:20:39.763 00:00:10.697 TCP 1.101.0.1:3000 -> 22.102.0.1:51570 10 6452 1 2025-11-22 17:21:22.216 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 17:21:22.191 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 17:21:35.951 00:00:10.325 TCP 23.104.0.1:38880 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:21:40.495 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39920 10 6452 1 2025-11-22 17:22:36.318 00:00:10.372 TCP 23.104.0.1:39764 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:22:40.706 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45390 10 6452 1 2025-11-22 17:23:36.727 00:00:10.377 TCP 23.104.0.1:52348 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:23:40.953 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:45300 12 6556 1 2025-11-22 17:24:37.140 00:00:10.369 TCP 23.104.0.1:57992 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:24:41.181 00:00:10.320 TCP 1.101.0.1:3000 -> 22.102.0.1:39558 11 6504 1 2025-11-22 17:25:37.549 00:00:10.385 TCP 23.104.0.1:50306 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:25:41.546 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52756 10 6452 1 2025-11-22 17:22:02.309 00:05:04.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 17:22:02.311 00:05:04.116 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 17:26:22.216 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 17:26:22.183 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 17:26:37.986 00:00:10.369 TCP 23.104.0.1:45804 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:26:41.767 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43578 10 6452 1 2025-11-22 17:27:38.399 00:00:10.368 TCP 23.104.0.1:39744 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:27:41.979 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:53124 10 6452 1 2025-11-22 17:28:38.808 00:00:10.367 TCP 23.104.0.1:49508 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:28:42.223 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53860 10 6452 1 2025-11-22 17:29:39.221 00:00:10.324 TCP 23.104.0.1:54746 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:29:42.443 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44836 10 6452 1 2025-11-22 17:30:39.586 00:00:10.362 TCP 23.104.0.1:43528 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:30:42.660 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40576 10 6452 1 2025-11-22 17:31:22.509 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 17:31:22.377 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 17:31:39.989 00:00:10.365 TCP 23.104.0.1:38222 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:31:42.872 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60426 10 6452 1 2025-11-22 17:28:02.314 00:05:04.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 17:28:02.311 00:05:04.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 17:32:40.405 00:00:10.366 TCP 23.104.0.1:51808 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:32:43.088 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:33912 10 6452 1 2025-11-22 17:33:40.807 00:00:10.891 TCP 23.104.0.1:38298 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:33:43.294 00:00:10.694 TCP 1.101.0.1:3000 -> 22.102.0.1:36114 10 6452 1 2025-11-22 17:34:44.042 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:33930 12 10375 1 2025-11-22 17:34:41.747 00:00:10.442 TCP 23.104.0.1:46712 -> 1.101.0.1:3000 15 1926 1 2025-11-22 17:35:44.285 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:44272 10 6452 1 2025-11-22 17:35:42.225 00:00:10.363 TCP 23.104.0.1:45898 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:36:22.311 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 17:36:22.478 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 17:36:42.627 00:00:10.320 TCP 23.104.0.1:46440 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:36:44.466 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43634 10 6452 1 2025-11-22 17:37:44.675 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44190 10 6452 1 2025-11-22 17:37:42.990 00:00:10.370 TCP 23.104.0.1:40562 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:34:02.311 00:05:04.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 17:34:02.315 00:05:04.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 17:38:44.846 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53316 10 6452 1 2025-11-22 17:38:43.396 00:00:10.367 TCP 23.104.0.1:45998 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:39:43.810 00:00:10.364 TCP 23.104.0.1:40336 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:39:45.085 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49532 10 6452 1 2025-11-22 17:40:45.311 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41306 10 6452 1 2025-11-22 17:40:44.211 00:00:10.364 TCP 23.104.0.1:51580 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:41:22.510 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 17:41:22.493 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 17:41:44.617 00:00:10.377 TCP 23.104.0.1:60148 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:41:45.542 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37022 10 6452 1 2025-11-22 17:42:45.758 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:56078 10 6452 1 2025-11-22 17:42:45.028 00:00:10.420 TCP 23.104.0.1:46780 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:43:45.487 00:00:10.324 TCP 23.104.0.1:53212 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:43:46.011 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44592 10 6452 1 2025-11-22 17:40:02.316 00:05:04.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 17:40:02.319 00:05:04.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 17:44:46.228 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37002 10 6452 1 2025-11-22 17:44:45.848 00:00:10.381 TCP 23.104.0.1:52436 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:45:46.451 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59618 10 6452 1 2025-11-22 17:45:46.269 00:00:10.366 TCP 23.104.0.1:33402 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:46:23.174 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 17:46:23.188 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 17:46:46.672 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36532 10 6452 1 2025-11-22 17:46:46.674 00:00:10.365 TCP 23.104.0.1:41236 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:47:47.105 00:00:10.370 TCP 23.104.0.1:34628 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:47:46.891 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:59486 10 6452 1 2025-11-22 17:48:47.516 00:00:10.366 TCP 23.104.0.1:59284 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:48:47.081 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49032 10 6452 1 2025-11-22 17:49:47.921 00:00:10.343 TCP 23.104.0.1:58900 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:46:02.319 00:05:04.116 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 17:49:47.299 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39980 10 6452 1 2025-11-22 17:46:02.317 00:05:04.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 17:50:48.307 00:00:10.365 TCP 23.104.0.1:41466 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:50:47.468 00:00:10.364 TCP 1.101.0.1:3000 -> 22.102.0.1:43834 10 6452 1 2025-11-22 17:51:22.639 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 17:51:22.614 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 17:51:48.713 00:00:10.382 TCP 23.104.0.1:53112 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:51:47.875 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52522 10 6452 1 2025-11-22 17:52:48.106 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:33506 10 6452 1 2025-11-22 17:52:49.133 00:00:10.363 TCP 23.104.0.1:49214 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:53:48.365 00:00:11.267 TCP 1.101.0.1:3000 -> 22.102.0.1:34848 10 6452 1 2025-11-22 17:53:49.540 00:00:10.337 TCP 23.104.0.1:56438 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:54:49.920 00:00:10.367 TCP 23.104.0.1:60314 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:54:49.676 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51660 10 6452 1 2025-11-22 17:55:49.892 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47642 10 6452 1 2025-11-22 17:55:50.334 00:00:10.374 TCP 23.104.0.1:49380 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:52:02.328 00:05:04.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 17:52:02.325 00:05:04.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 17:56:22.847 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 17:56:22.991 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 17:56:50.114 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37130 10 6452 1 2025-11-22 17:56:50.746 00:00:10.365 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:57:50.342 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39580 10 6452 1 2025-11-22 17:57:51.149 00:00:10.362 TCP 23.104.0.1:40586 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494887, total packets: 1560, avg bps: 1099, avg pps: 0, avg bpp: 317 Time window: 2025-11-22 16:58:02 - 2025-11-22 17:58:01 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0047s User: 0.0019s Wall: 0.0028s flows/second: 57248.1 Runtime: 0.0028s