Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 20:59:20.173 00:00:10.367 TCP 23.104.0.1:33252 -> 1.101.0.1:3000 11 1507 1 2025-11-23 20:59:36.689 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47938 10 6452 1 2025-11-23 21:00:20.580 00:00:10.364 TCP 23.104.0.1:55276 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:00:36.910 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36636 10 6452 1 2025-11-23 21:01:20.982 00:00:10.364 TCP 23.104.0.1:52256 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:01:55.358 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 21:01:37.124 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41186 10 6452 1 2025-11-23 21:01:55.687 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 20:58:02.792 00:05:04.284 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 20:58:02.789 00:05:04.289 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 21:02:21.382 00:00:10.367 TCP 23.104.0.1:33226 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:02:37.342 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52190 10 6452 1 2025-11-23 21:03:21.783 00:00:10.362 TCP 23.104.0.1:34568 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:03:37.565 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46986 10 6452 1 2025-11-23 21:04:22.186 00:00:10.363 TCP 23.104.0.1:56794 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:04:37.782 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44106 10 6452 1 2025-11-23 21:05:22.589 00:00:10.366 TCP 23.104.0.1:40504 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:05:38.001 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41218 10 6452 1 2025-11-23 21:06:22.989 00:00:11.035 TCP 23.104.0.1:47120 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:06:55.838 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 21:06:38.222 00:00:10.639 TCP 1.101.0.1:3000 -> 22.102.0.1:47836 10 6452 1 2025-11-23 21:06:55.788 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 21:07:24.096 00:00:10.362 TCP 23.104.0.1:38726 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:07:38.901 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:49128 10 6452 1 2025-11-23 21:04:02.794 00:05:04.284 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 21:04:02.797 00:05:04.280 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 21:08:24.495 00:00:10.366 TCP 23.104.0.1:40190 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:08:39.137 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52574 10 6452 1 2025-11-23 21:09:24.901 00:00:10.376 TCP 23.104.0.1:44764 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:09:39.357 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57380 10 6452 1 2025-11-23 21:10:25.324 00:00:10.364 TCP 23.104.0.1:58492 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:10:39.575 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56220 10 6452 1 2025-11-23 21:11:25.728 00:00:10.367 TCP 23.104.0.1:58440 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:11:39.820 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45728 10 6452 1 2025-11-23 21:11:55.817 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 21:11:55.673 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 21:12:26.134 00:00:10.325 TCP 23.104.0.1:58150 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:12:39.996 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54590 10 6452 1 2025-11-23 21:13:26.496 00:00:10.363 TCP 23.104.0.1:44586 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:13:40.216 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42060 10 6452 1 2025-11-23 21:10:02.799 00:05:04.279 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 21:10:02.797 00:05:04.285 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 21:14:26.897 00:00:10.340 TCP 23.104.0.1:56242 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:14:40.435 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56874 10 6452 1 2025-11-23 21:15:27.277 00:00:10.891 TCP 23.104.0.1:60576 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:15:40.657 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:36704 10 6452 1 2025-11-23 21:16:28.208 00:00:10.363 TCP 23.104.0.1:33148 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:16:55.969 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 21:16:40.902 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59178 10 6452 1 2025-11-23 21:16:55.839 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 21:17:28.610 00:00:10.364 TCP 23.104.0.1:33602 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:17:41.115 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:33140 10 6452 1 2025-11-23 21:18:29.014 00:00:10.366 TCP 23.104.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:18:41.340 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58428 10 6452 1 2025-11-23 21:19:29.418 00:00:10.325 TCP 23.104.0.1:41514 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:19:41.560 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53318 10 6452 1 2025-11-23 21:16:02.802 00:05:04.277 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 21:16:02.800 00:05:04.282 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 21:20:29.783 00:00:10.442 TCP 23.104.0.1:51008 -> 1.101.0.1:3000 15 1926 1 2025-11-23 21:20:41.782 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:34504 12 10369 1 2025-11-23 21:21:30.265 00:00:10.363 TCP 23.104.0.1:51704 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:21:56.052 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 21:21:42.034 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55656 10 6452 1 2025-11-23 21:21:55.978 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 21:22:30.666 00:00:10.328 TCP 23.104.0.1:53860 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:22:42.248 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54764 10 6452 1 2025-11-23 21:23:31.037 00:00:10.363 TCP 23.104.0.1:36046 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:23:42.472 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55496 10 6452 1 2025-11-23 21:24:31.438 00:00:10.322 TCP 23.104.0.1:41576 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:24:42.690 00:00:10.124 TCP 1.101.0.1:3000 -> 22.102.0.1:57316 10 6452 1 2025-11-23 21:25:31.799 00:00:10.364 TCP 23.104.0.1:56158 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:25:42.856 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54776 10 6452 1 2025-11-23 21:22:02.801 00:05:04.283 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 21:22:02.803 00:05:04.278 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 21:26:32.198 00:00:10.361 TCP 23.104.0.1:54158 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:26:43.078 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47784 10 6452 1 2025-11-23 21:26:56.013 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 21:26:55.861 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 21:27:32.595 00:00:10.362 TCP 23.104.0.1:54566 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:27:43.289 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39590 10 6452 1 2025-11-23 21:28:32.995 00:00:10.322 TCP 23.104.0.1:57398 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:28:43.460 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53024 10 6452 1 2025-11-23 21:29:33.355 00:00:10.364 TCP 23.104.0.1:58734 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:29:43.673 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33304 10 6452 1 2025-11-23 21:30:33.758 00:00:10.374 TCP 23.104.0.1:38306 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:30:43.842 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52846 10 6452 1 2025-11-23 21:31:34.172 00:00:10.362 TCP 23.104.0.1:36420 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:31:56.388 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 21:31:56.308 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 21:31:44.085 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45642 10 6452 1 2025-11-23 21:28:02.804 00:05:04.281 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 21:28:02.807 00:05:04.277 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 21:32:34.576 00:00:10.413 TCP 23.104.0.1:53386 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:32:44.301 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51246 10 6452 1 2025-11-23 21:33:35.037 00:00:10.363 TCP 23.104.0.1:55046 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:33:44.528 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35340 10 6452 1 2025-11-23 21:34:35.439 00:00:10.367 TCP 23.104.0.1:54972 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:34:44.740 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33622 10 6452 1 2025-11-23 21:35:35.847 00:00:10.386 TCP 23.104.0.1:42054 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:35:44.952 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:55800 10 6452 1 2025-11-23 21:36:36.273 00:00:10.365 TCP 23.104.0.1:40350 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:36:45.141 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57714 10 6452 1 2025-11-23 21:36:55.994 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 21:36:56.240 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 21:37:36.675 00:00:10.372 TCP 23.104.0.1:56762 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:37:45.363 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37204 10 6452 1 2025-11-23 21:34:02.811 00:05:04.277 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 21:34:02.808 00:05:04.282 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 21:38:37.103 00:00:10.687 TCP 23.104.0.1:43396 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:38:45.588 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48304 10 6452 1 2025-11-23 21:39:37.830 00:00:10.348 TCP 23.104.0.1:37626 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:39:45.809 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34822 10 6452 1 2025-11-23 21:40:38.216 00:00:10.368 TCP 23.104.0.1:33958 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:40:46.037 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41694 10 6452 1 2025-11-23 21:41:38.623 00:00:10.330 TCP 23.104.0.1:38620 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:41:46.263 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34412 10 6452 1 2025-11-23 21:41:56.311 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 21:41:56.091 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 21:42:38.997 00:00:10.366 TCP 23.104.0.1:58416 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:42:46.479 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59306 10 6452 1 2025-11-23 21:43:39.402 00:00:10.372 TCP 23.104.0.1:47668 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:43:46.653 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44722 10 6452 1 2025-11-23 21:40:02.808 00:05:04.283 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 21:40:02.812 00:05:04.277 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 21:44:39.809 00:00:10.333 TCP 23.104.0.1:56120 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:44:46.860 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46338 10 6452 1 2025-11-23 21:45:40.179 00:00:10.363 TCP 23.104.0.1:52698 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:45:47.086 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33880 10 6452 1 2025-11-23 21:46:40.582 00:00:10.364 TCP 23.104.0.1:37018 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:46:56.385 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 21:46:56.255 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 21:46:47.297 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44372 10 6452 1 2025-11-23 21:47:40.985 00:00:10.320 TCP 23.104.0.1:56630 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:47:47.468 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42362 10 6452 1 2025-11-23 21:48:41.345 00:00:10.361 TCP 23.104.0.1:55530 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:48:47.643 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45538 10 6452 1 2025-11-23 21:49:41.745 00:00:10.369 TCP 23.104.0.1:35574 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:49:47.860 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59134 10 6452 1 2025-11-23 21:46:02.813 00:05:04.278 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 21:46:02.811 00:05:04.283 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 21:50:42.153 00:00:10.369 TCP 23.104.0.1:33596 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:50:48.094 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38896 10 6452 1 2025-11-23 21:51:56.490 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 21:51:42.557 00:00:10.361 TCP 23.104.0.1:47452 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:51:56.493 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 21:51:48.268 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40802 10 6452 1 2025-11-23 21:52:42.956 00:00:10.361 TCP 23.104.0.1:38078 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:52:48.482 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34584 10 6452 1 2025-11-23 21:53:43.363 00:00:10.318 TCP 23.104.0.1:39710 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:53:48.693 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34986 10 6452 1 2025-11-23 21:54:43.722 00:00:10.373 TCP 23.104.0.1:48460 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:54:48.906 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40406 10 6452 1 2025-11-23 21:55:44.136 00:00:10.367 TCP 23.104.0.1:44758 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:55:49.130 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52810 10 6452 1 2025-11-23 21:52:02.814 00:05:04.278 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 21:52:02.812 00:05:04.282 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 21:56:44.548 00:00:10.365 TCP 23.104.0.1:34574 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:56:56.749 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 21:56:56.618 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 21:56:49.348 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58888 10 6452 1 2025-11-23 21:57:44.957 00:00:10.329 TCP 23.104.0.1:34308 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:57:49.561 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35412 10 6452 1 Summary: total flows: 162, total bytes: 494725, total packets: 1557, avg bps: 1100, avg pps: 0, avg bpp: 317 Time window: 2025-11-23 20:58:02 - 2025-11-23 21:57:59 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0034s User: 0.0017s Wall: 0.0029s flows/second: 55350.1 Runtime: 0.0029s