Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 17:58:51.553 00:00:10.360 TCP 23.104.0.1:56156 -> 1.101.0.1:3000 11 1507 1 2025-11-22 17:58:50.512 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54494 10 6452 1 2025-11-22 17:59:50.735 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60596 10 6452 1 2025-11-22 17:59:51.955 00:00:10.366 TCP 23.104.0.1:45152 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:00:50.960 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39984 12 6556 1 2025-11-22 18:00:52.365 00:00:10.636 TCP 23.104.0.1:36758 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:01:23.006 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:01:22.923 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 18:01:51.188 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37482 10 6452 1 2025-11-22 17:58:02.327 00:05:04.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 17:58:02.330 00:05:04.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 18:01:53.065 00:00:10.367 TCP 23.104.0.1:57216 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:02:51.398 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58710 10 6452 1 2025-11-22 18:02:53.471 00:00:10.365 TCP 23.104.0.1:35438 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:03:51.617 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33232 10 6452 1 2025-11-22 18:03:53.876 00:00:10.325 TCP 23.104.0.1:43414 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:04:54.238 00:00:10.368 TCP 23.104.0.1:39938 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:04:51.836 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47342 10 6452 1 2025-11-22 18:05:54.651 00:00:10.368 TCP 23.104.0.1:37740 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:05:52.083 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49782 10 6452 1 2025-11-22 18:06:23.282 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 18:06:23.187 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:06:52.317 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58338 10 6452 1 2025-11-22 18:06:55.069 00:00:10.376 TCP 23.104.0.1:53976 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:07:52.534 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:56646 10 6452 1 2025-11-22 18:04:02.330 00:05:04.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 18:04:02.332 00:05:04.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 18:07:55.488 00:00:10.361 TCP 23.104.0.1:36726 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:08:55.894 00:00:10.381 TCP 23.104.0.1:44948 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:08:52.760 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41618 10 6452 1 2025-11-22 18:09:52.972 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:40946 10 6452 1 2025-11-22 18:09:56.329 00:00:10.361 TCP 23.104.0.1:38962 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:10:53.226 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47992 10 6452 1 2025-11-22 18:10:56.726 00:00:10.326 TCP 23.104.0.1:37566 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:11:23.196 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:11:22.868 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 18:11:53.448 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37618 10 6452 1 2025-11-22 18:11:57.105 00:00:10.358 TCP 23.104.0.1:50918 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:12:53.632 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55608 10 6452 1 2025-11-22 18:12:57.508 00:00:10.368 TCP 23.104.0.1:43414 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:13:53.845 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55238 10 6452 1 2025-11-22 18:10:02.335 00:05:04.103 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 18:13:57.916 00:00:10.361 TCP 23.104.0.1:52912 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:10:02.333 00:05:04.108 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 18:14:54.083 00:00:10.688 TCP 1.101.0.1:3000 -> 22.102.0.1:60948 10 6452 1 2025-11-22 18:14:58.315 00:00:10.368 TCP 23.104.0.1:49902 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:15:54.812 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58306 10 6452 1 2025-11-22 18:15:58.720 00:00:10.373 TCP 23.104.0.1:48384 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:16:23.373 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 18:16:23.424 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:16:55.033 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44838 10 6452 1 2025-11-22 18:16:59.130 00:00:10.326 TCP 23.104.0.1:34402 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:17:55.246 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51516 10 6452 1 2025-11-22 18:17:59.497 00:00:10.367 TCP 23.104.0.1:35248 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:18:55.468 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:35044 10 6452 1 2025-11-22 18:18:59.904 00:00:10.372 TCP 23.104.0.1:58688 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:16:02.335 00:05:04.106 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 18:19:55.644 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36712 12 10375 1 2025-11-22 18:16:02.333 00:05:04.111 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 18:20:00.311 00:00:10.438 TCP 23.104.0.1:40246 -> 1.101.0.1:3000 15 1926 1 2025-11-22 18:20:55.885 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36026 10 6452 1 2025-11-22 18:21:00.787 00:00:10.368 TCP 23.104.0.1:38364 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:21:23.370 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 18:21:23.310 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:21:56.108 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58652 10 6452 1 2025-11-22 18:22:01.190 00:00:10.364 TCP 23.104.0.1:47664 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:22:56.281 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51620 10 6452 1 2025-11-22 18:23:01.595 00:00:10.372 TCP 23.104.0.1:44836 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:23:56.508 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47966 10 6452 1 2025-11-22 18:24:02.008 00:00:10.364 TCP 23.104.0.1:45472 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:24:56.730 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53816 10 6452 1 2025-11-22 18:25:02.409 00:00:10.368 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:22:02.336 00:05:04.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 18:25:56.946 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:33634 10 6452 1 2025-11-22 18:22:02.334 00:05:04.112 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 18:26:02.817 00:00:10.329 TCP 23.104.0.1:57790 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:26:23.723 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 18:26:23.711 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:26:57.179 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59430 10 6452 1 2025-11-22 18:27:03.196 00:00:10.366 TCP 23.104.0.1:56226 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:27:57.403 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:36064 10 6452 1 2025-11-22 18:28:03.602 00:00:10.363 TCP 23.104.0.1:55144 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:28:57.590 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50212 10 6452 1 2025-11-22 18:29:04.001 00:00:10.338 TCP 23.104.0.1:40848 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:29:57.798 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50248 10 6452 1 2025-11-22 18:30:04.372 00:00:10.368 TCP 23.104.0.1:44916 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:30:58.008 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51796 10 6452 1 2025-11-22 18:31:04.785 00:00:10.376 TCP 23.104.0.1:43450 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:31:23.421 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:31:23.553 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 18:28:02.336 00:05:04.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 18:28:02.334 00:05:04.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 18:31:58.240 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:41070 10 6452 1 2025-11-22 18:32:05.198 00:00:10.365 TCP 23.104.0.1:32866 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:32:58.413 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42862 10 6452 1 2025-11-22 18:33:05.598 00:00:10.415 TCP 23.104.0.1:39842 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:33:58.629 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58292 10 6452 1 2025-11-22 18:34:06.057 00:00:10.371 TCP 23.104.0.1:45642 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:34:58.845 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60600 10 6452 1 2025-11-22 18:35:06.486 00:00:10.367 TCP 23.104.0.1:57380 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:35:59.018 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42808 10 6452 1 2025-11-22 18:36:06.893 00:00:10.336 TCP 23.104.0.1:38644 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:36:23.843 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 18:36:23.769 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:36:59.228 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54688 10 6452 1 2025-11-22 18:37:07.268 00:00:10.327 TCP 23.104.0.1:52910 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:37:59.440 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58680 10 6452 1 2025-11-22 18:34:02.335 00:05:04.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 18:34:02.339 00:05:04.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 18:38:07.634 00:00:10.330 TCP 23.104.0.1:41610 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:38:59.655 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44404 10 6452 1 2025-11-22 18:39:08.006 00:00:10.366 TCP 23.104.0.1:49018 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:39:59.867 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44700 10 6452 1 2025-11-22 18:40:08.418 00:00:10.370 TCP 23.104.0.1:49616 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:41:00.086 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38146 10 6452 1 2025-11-22 18:41:08.825 00:00:10.325 TCP 23.104.0.1:51498 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:41:23.779 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 18:41:23.893 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:42:00.296 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40140 10 6452 1 2025-11-22 18:42:09.191 00:00:10.368 TCP 23.104.0.1:45462 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:43:00.466 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53340 10 6452 1 2025-11-22 18:43:09.598 00:00:10.364 TCP 23.104.0.1:54622 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:40:02.339 00:05:04.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 18:40:02.338 00:05:04.116 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 18:44:00.638 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52440 10 6452 1 2025-11-22 18:44:10.006 00:00:10.337 TCP 23.104.0.1:45400 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:45:00.847 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35454 10 6452 1 2025-11-22 18:45:10.383 00:00:10.372 TCP 23.104.0.1:57732 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:46:01.087 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48210 10 6452 1 2025-11-22 18:46:10.792 00:00:10.370 TCP 23.104.0.1:42320 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:46:24.220 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 18:46:24.082 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:47:01.303 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35674 10 6452 1 2025-11-22 18:47:11.205 00:00:10.438 TCP 23.104.0.1:44274 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:48:01.476 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35800 10 6452 1 2025-11-22 18:48:11.681 00:00:10.326 TCP 23.104.0.1:53764 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:49:01.690 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36056 10 6452 1 2025-11-22 18:49:12.048 00:00:10.325 TCP 23.104.0.1:51748 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:46:02.344 00:05:04.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 18:46:02.342 00:05:04.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 18:50:01.862 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49748 10 6452 1 2025-11-22 18:50:12.412 00:00:10.362 TCP 23.104.0.1:42540 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:51:02.093 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49428 10 6452 1 2025-11-22 18:51:23.961 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 18:51:12.814 00:00:10.368 TCP 23.104.0.1:49692 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:51:24.027 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:52:02.277 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38462 10 6452 1 2025-11-22 18:52:13.221 00:00:10.363 TCP 23.104.0.1:57920 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:53:02.487 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:41394 10 6452 1 2025-11-22 18:53:13.622 00:00:10.371 TCP 23.104.0.1:50586 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:54:02.658 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50450 10 6452 1 2025-11-22 18:54:14.026 00:00:10.367 TCP 23.104.0.1:49884 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:55:02.874 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49516 10 6452 1 2025-11-22 18:55:14.432 00:00:10.365 TCP 23.104.0.1:38624 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:52:02.345 00:05:04.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 18:52:02.342 00:05:04.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 18:56:03.100 00:00:11.664 TCP 1.101.0.1:3000 -> 22.102.0.1:44858 10 6452 1 2025-11-22 18:56:14.834 00:00:10.373 TCP 23.104.0.1:34708 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:56:24.049 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 18:56:24.052 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 18:57:04.804 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52520 10 6452 1 2025-11-22 18:57:15.244 00:00:10.365 TCP 23.104.0.1:52176 -> 1.101.0.1:3000 11 1507 1 2025-11-22 18:58:05.035 00:00:10.347 TCP 1.101.0.1:3000 -> 22.102.0.1:58948 10 6452 1 2025-11-22 18:58:15.648 00:00:10.326 TCP 23.104.0.1:48410 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502794, total packets: 1580, avg bps: 1110, avg pps: 0, avg bpp: 318 Time window: 2025-11-22 17:58:02 - 2025-11-22 18:58:25 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0034s User: 0.0017s Wall: 0.0018s flows/second: 90259.3 Runtime: 0.0018s