Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 22:58:57.188 00:00:10.324 TCP 23.104.0.1:37772 -> 1.101.0.1:3000 11 1507 1 2025-11-22 22:59:14.629 00:00:15.006 TCP 1.101.0.1:3000 -> 22.102.0.1:40396 10 6452 1 2025-11-22 22:59:57.551 00:00:10.332 TCP 23.104.0.1:56232 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:00:19.695 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35322 10 6452 1 2025-11-22 23:00:57.928 00:00:10.393 TCP 23.104.0.1:41746 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:01:29.335 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:01:29.274 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 23:01:19.906 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47636 10 6452 1 2025-11-22 22:58:02.417 00:05:04.129 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 23:01:58.364 00:00:10.336 TCP 23.104.0.1:37368 -> 1.101.0.1:3000 11 1507 1 2025-11-22 22:58:02.415 00:05:04.134 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 23:02:20.124 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41328 10 6452 1 2025-11-22 23:02:58.743 00:00:10.325 TCP 23.104.0.1:59352 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:03:20.341 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51464 10 6452 1 2025-11-22 23:03:59.107 00:00:10.363 TCP 23.104.0.1:51036 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:04:20.564 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:33352 10 6452 1 2025-11-22 23:04:59.510 00:00:10.362 TCP 23.104.0.1:45876 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:05:20.739 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48166 10 6452 1 2025-11-22 23:05:59.912 00:00:10.367 TCP 23.104.0.1:54650 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:06:20.952 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41074 12 6556 1 2025-11-22 23:06:28.966 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 23:06:29.590 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:07:00.316 00:00:10.324 TCP 23.104.0.1:35226 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:07:21.187 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50688 10 6452 1 2025-11-22 23:04:02.416 00:05:04.137 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 23:04:02.418 00:05:04.132 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 23:08:00.673 00:00:10.324 TCP 23.104.0.1:53368 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:08:21.399 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53130 10 6452 1 2025-11-22 23:09:01.062 00:00:10.325 TCP 23.104.0.1:50368 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:09:21.621 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46150 10 6452 1 2025-11-22 23:10:01.424 00:00:10.364 TCP 23.104.0.1:58342 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:10:21.841 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39634 10 6452 1 2025-11-22 23:11:01.826 00:00:10.362 TCP 23.104.0.1:37406 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:11:28.957 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 23:11:29.047 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:11:22.035 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36830 10 6452 1 2025-11-22 23:12:02.229 00:00:10.374 TCP 23.104.0.1:33590 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:12:22.247 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43302 10 6452 1 2025-11-22 23:13:02.642 00:00:10.365 TCP 23.104.0.1:57990 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:13:22.420 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44136 10 6452 1 2025-11-22 23:10:02.419 00:05:04.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 23:10:02.417 00:05:04.139 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 23:14:03.054 00:00:10.371 TCP 23.104.0.1:42012 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:14:22.639 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54460 10 6452 1 2025-11-22 23:15:03.464 00:00:10.361 TCP 23.104.0.1:32928 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:15:22.864 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:39066 10 6452 1 2025-11-22 23:16:03.865 00:00:10.381 TCP 23.104.0.1:49750 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:16:29.430 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 23:16:29.443 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:16:23.095 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:45952 10 6452 1 2025-11-22 23:17:04.283 00:00:10.369 TCP 23.104.0.1:51098 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:17:23.299 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44652 10 6452 1 2025-11-22 23:18:04.686 00:00:10.323 TCP 23.104.0.1:44520 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:18:23.513 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37008 10 6452 1 2025-11-22 23:19:05.050 00:00:10.362 TCP 23.104.0.1:52194 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:19:23.730 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:50882 10 6452 1 2025-11-22 23:16:02.421 00:05:04.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 23:16:02.419 00:05:04.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 23:20:05.467 00:00:10.367 TCP 23.104.0.1:41732 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:20:23.937 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:57248 10 6452 1 2025-11-22 23:21:05.879 00:00:10.397 TCP 23.104.0.1:50640 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:21:29.408 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:21:29.345 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 23:21:24.181 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55588 10 6452 1 2025-11-22 23:22:06.313 00:00:10.368 TCP 23.104.0.1:54804 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:22:24.393 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58650 10 6452 1 2025-11-22 23:23:06.714 00:00:10.377 TCP 23.104.0.1:59592 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:23:24.609 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51060 10 6452 1 2025-11-22 23:24:07.130 00:00:10.583 TCP 23.104.0.1:58846 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:24:24.828 00:00:17.763 TCP 1.101.0.1:3000 -> 22.102.0.1:56404 10 6452 1 2025-11-22 23:25:07.761 00:00:10.373 TCP 23.104.0.1:35022 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:25:32.631 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42832 10 6452 1 2025-11-22 23:22:02.425 00:05:04.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 23:22:02.422 00:05:04.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 23:26:08.171 00:00:10.437 TCP 23.104.0.1:48124 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:26:29.483 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 23:26:29.526 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:26:32.846 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36330 10 6452 1 2025-11-22 23:27:08.638 00:00:10.324 TCP 23.104.0.1:35850 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:27:33.083 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:45806 10 6452 1 2025-11-22 23:28:09.001 00:00:10.323 TCP 23.104.0.1:60446 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:28:33.251 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42290 10 6452 1 2025-11-22 23:29:09.364 00:00:10.361 TCP 23.104.0.1:59876 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:29:33.470 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44584 10 6452 1 2025-11-22 23:30:09.763 00:00:10.375 TCP 23.104.0.1:50286 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:30:33.696 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57900 10 6452 1 2025-11-22 23:31:10.175 00:00:10.326 TCP 23.104.0.1:48102 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:31:29.428 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 23:31:29.637 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:31:33.917 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38222 10 6452 1 2025-11-22 23:28:02.426 00:05:04.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 23:28:02.424 00:05:04.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 23:32:10.541 00:00:10.363 TCP 23.104.0.1:56480 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:32:34.131 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34598 10 6452 1 2025-11-22 23:33:10.944 00:00:10.370 TCP 23.104.0.1:60878 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:33:34.359 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59684 10 6452 1 2025-11-22 23:34:11.355 00:00:10.322 TCP 23.104.0.1:41002 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:34:34.579 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58336 10 6452 1 2025-11-22 23:35:11.717 00:00:10.368 TCP 23.104.0.1:59512 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:35:34.802 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:48238 10 6452 1 2025-11-22 23:36:12.145 00:00:10.368 TCP 23.104.0.1:41214 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:36:29.668 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 23:36:29.747 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:36:34.976 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47484 10 6452 1 2025-11-22 23:37:12.549 00:00:10.369 TCP 23.104.0.1:33988 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:37:35.196 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35496 10 6452 1 2025-11-22 23:34:02.422 00:05:04.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 23:34:02.426 00:05:04.136 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 23:38:12.956 00:00:10.323 TCP 23.104.0.1:40368 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:38:35.416 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58492 10 6452 1 2025-11-22 23:39:13.321 00:00:10.360 TCP 23.104.0.1:59194 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:39:35.595 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56962 10 6452 1 2025-11-22 23:40:13.722 00:00:10.325 TCP 23.104.0.1:53498 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:40:35.812 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33436 10 6452 1 2025-11-22 23:41:14.105 00:00:10.359 TCP 23.104.0.1:51722 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:41:29.862 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:41:29.785 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 23:41:36.030 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57728 10 6452 1 2025-11-22 23:42:14.502 00:00:10.364 TCP 23.104.0.1:43382 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:42:36.256 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33414 10 6452 1 2025-11-22 23:43:14.904 00:00:10.368 TCP 23.104.0.1:50978 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:43:36.495 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54006 10 6452 1 2025-11-22 23:40:02.427 00:05:04.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 23:40:02.425 00:05:04.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 23:44:15.311 00:00:10.358 TCP 23.104.0.1:57632 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:44:36.737 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57412 10 6452 1 2025-11-22 23:45:15.705 00:00:10.364 TCP 23.104.0.1:59678 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:45:36.919 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38368 10 6452 1 2025-11-22 23:46:16.105 00:00:10.370 TCP 23.104.0.1:41148 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:46:29.988 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:46:29.939 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 23:46:37.134 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52778 10 6452 1 2025-11-22 23:47:16.510 00:00:10.362 TCP 23.104.0.1:39908 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:47:37.357 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41256 10 6452 1 2025-11-22 23:48:16.912 00:00:10.569 TCP 23.104.0.1:59012 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:48:37.572 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44696 10 6452 1 2025-11-22 23:49:17.523 00:00:10.365 TCP 23.104.0.1:54784 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:49:37.790 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:58500 10 6452 1 2025-11-22 23:46:02.429 00:05:04.138 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 23:46:02.425 00:05:04.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 23:50:17.925 00:00:10.387 TCP 23.104.0.1:45858 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:50:38.045 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38728 10 6452 1 2025-11-22 23:51:18.348 00:00:10.382 TCP 23.104.0.1:55488 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:51:30.018 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:51:30.026 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 23:51:38.260 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42016 10 6452 1 2025-11-22 23:52:18.781 00:00:10.374 TCP 23.104.0.1:43502 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:52:38.470 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37514 10 6452 1 2025-11-22 23:53:19.208 00:00:10.332 TCP 23.104.0.1:47958 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:53:38.682 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37602 10 6452 1 2025-11-22 23:54:19.592 00:00:10.326 TCP 23.104.0.1:50576 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:54:38.895 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49602 10 6452 1 2025-11-22 23:55:19.959 00:00:10.320 TCP 23.104.0.1:39906 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:55:39.118 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:48026 10 6452 1 2025-11-22 23:52:02.428 00:05:04.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 23:52:02.426 00:05:04.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 23:56:30.011 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 23:56:30.038 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 23:56:20.323 00:00:10.322 TCP 23.104.0.1:35700 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:56:39.325 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:56552 10 6452 1 2025-11-22 23:57:20.682 00:00:10.363 TCP 23.104.0.1:49122 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:57:39.501 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49576 10 6452 1 2025-11-22 23:58:21.104 00:00:10.321 TCP 23.104.0.1:45046 -> 1.101.0.1:3000 11 1507 1 2025-11-22 23:58:39.713 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56376 10 6452 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1093, avg pps: 0, avg bpp: 316 Time window: 2025-11-22 22:58:02 - 2025-11-22 23:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0042s User: 0.0010s Wall: 0.0027s flows/second: 59767.6 Runtime: 0.0028s