Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-13 20:59:03.928 00:00:10.385 TCP 23.104.0.1:56680 -> 1.101.0.1:3000 11 1507 1 2025-11-13 20:59:24.691 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47814 10 6452 1 2025-11-13 21:00:04.352 00:00:10.362 TCP 23.104.0.1:57264 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:00:24.916 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41460 10 6452 1 2025-11-13 21:01:04.750 00:00:10.378 TCP 23.104.0.1:60998 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:01:25.142 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58808 10 6452 1 2025-11-13 21:02:05.049 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 21:02:05.179 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 21:02:05.162 00:00:10.362 TCP 23.104.0.1:58270 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:02:25.354 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:54560 10 6452 1 2025-11-13 21:03:05.560 00:00:10.325 TCP 23.104.0.1:37422 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:03:25.559 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:45562 10 6452 1 2025-11-13 20:59:56.718 00:05:04.210 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 20:59:56.721 00:05:04.205 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 21:04:05.926 00:00:10.348 TCP 23.104.0.1:38522 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:04:25.786 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42738 10 6452 1 2025-11-13 21:05:06.306 00:00:10.365 TCP 23.104.0.1:52110 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:05:26.008 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52502 10 6452 1 2025-11-13 21:06:06.712 00:00:10.370 TCP 23.104.0.1:37114 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:06:26.244 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45826 10 6452 1 2025-11-13 21:07:05.598 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 21:07:05.574 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 21:07:07.116 00:00:10.368 TCP 23.104.0.1:48674 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:07:26.471 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42732 10 6452 1 2025-11-13 21:08:07.522 00:00:10.367 TCP 23.104.0.1:57630 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:08:26.686 00:00:10.918 TCP 1.101.0.1:3000 -> 22.102.0.1:58206 10 6452 1 2025-11-13 21:09:07.924 00:00:10.350 TCP 23.104.0.1:54424 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:09:27.637 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38900 10 6452 1 2025-11-13 21:05:56.720 00:05:04.211 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 21:05:56.722 00:05:04.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 21:10:08.309 00:00:10.370 TCP 23.104.0.1:50518 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:10:27.854 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:54112 10 6452 1 2025-11-13 21:11:08.736 00:00:10.368 TCP 23.104.0.1:35220 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:11:28.098 00:00:10.463 TCP 1.101.0.1:3000 -> 22.102.0.1:40516 10 6452 1 2025-11-13 21:12:05.275 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 21:12:05.063 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 21:12:09.146 00:00:10.329 TCP 23.104.0.1:37650 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:12:28.598 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54506 10 6452 1 2025-11-13 21:13:09.509 00:00:10.370 TCP 23.104.0.1:45786 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:13:28.772 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47378 10 6452 1 2025-11-13 21:14:09.917 00:00:10.375 TCP 23.104.0.1:47128 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:14:29.002 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43754 10 6452 1 2025-11-13 21:15:10.334 00:00:10.371 TCP 23.104.0.1:35760 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:15:29.223 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39180 10 6452 1 2025-11-13 21:11:56.721 00:05:04.211 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 21:11:56.723 00:05:04.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 21:16:10.743 00:00:10.366 TCP 23.104.0.1:46110 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:16:29.443 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47266 10 6452 1 2025-11-13 21:17:05.361 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 21:17:05.198 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 21:17:11.149 00:00:10.319 TCP 23.104.0.1:45428 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:17:29.619 00:00:10.706 TCP 1.101.0.1:3000 -> 22.102.0.1:49634 10 6452 1 2025-11-13 21:18:11.507 00:00:10.362 TCP 23.104.0.1:54256 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:18:30.364 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59328 10 6452 1 2025-11-13 21:19:11.904 00:00:10.327 TCP 23.104.0.1:47524 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:19:30.579 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53966 10 6452 1 2025-11-13 21:20:12.277 00:00:10.365 TCP 23.104.0.1:59988 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:20:30.795 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:51382 12 6556 1 2025-11-13 21:21:12.680 00:00:10.483 TCP 23.104.0.1:58902 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:21:31.071 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58426 10 6452 1 2025-11-13 21:17:56.726 00:05:04.209 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 21:17:56.722 00:05:04.214 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 21:22:06.106 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 21:22:06.283 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 21:22:13.202 00:00:10.326 TCP 23.104.0.1:35458 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:22:31.281 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54132 10 6452 1 2025-11-13 21:23:13.568 00:00:10.324 TCP 23.104.0.1:43180 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:23:31.496 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42290 10 6452 1 2025-11-13 21:24:13.931 00:00:10.371 TCP 23.104.0.1:33194 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:24:31.717 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:50598 12 10375 1 2025-11-13 21:25:14.342 00:00:10.435 TCP 23.104.0.1:35626 -> 1.101.0.1:3000 15 1926 1 2025-11-13 21:25:31.960 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34118 10 6452 1 2025-11-13 21:26:14.820 00:00:10.366 TCP 23.104.0.1:56644 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:26:32.180 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58924 10 6452 1 2025-11-13 21:27:05.650 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 21:27:05.241 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 21:27:15.221 00:00:10.323 TCP 23.104.0.1:56204 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:27:32.401 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57836 10 6452 1 2025-11-13 21:23:56.723 00:05:04.214 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 21:23:56.726 00:05:04.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 21:28:15.584 00:00:10.321 TCP 23.104.0.1:37710 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:28:32.615 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53058 10 6452 1 2025-11-13 21:29:15.944 00:00:10.382 TCP 23.104.0.1:52428 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:29:32.834 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:48510 10 6452 1 2025-11-13 21:30:16.376 00:00:10.373 TCP 23.104.0.1:58034 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:30:33.041 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57916 10 6452 1 2025-11-13 21:31:16.788 00:00:10.368 TCP 23.104.0.1:49124 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:31:33.256 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56070 10 6452 1 2025-11-13 21:32:05.670 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 21:32:05.627 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 21:32:17.198 00:00:10.325 TCP 23.104.0.1:48658 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:32:33.466 00:00:10.290 TCP 1.101.0.1:3000 -> 22.102.0.1:58360 10 6452 1 2025-11-13 21:33:17.561 00:00:10.369 TCP 23.104.0.1:59902 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:33:33.792 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57532 10 6452 1 2025-11-13 21:29:56.725 00:05:04.215 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 21:29:56.727 00:05:04.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 21:34:17.975 00:00:10.338 TCP 23.104.0.1:45200 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:34:34.020 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:32822 10 6452 1 2025-11-13 21:35:18.352 00:00:10.364 TCP 23.104.0.1:43648 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:35:34.265 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46492 10 6452 1 2025-11-13 21:36:18.754 00:00:10.385 TCP 23.104.0.1:49770 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:36:34.489 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32860 10 6452 1 2025-11-13 21:37:05.646 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 21:37:05.720 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 21:37:19.181 00:00:10.366 TCP 23.104.0.1:54068 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:37:34.711 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44132 10 6452 1 2025-11-13 21:38:19.589 00:00:10.334 TCP 23.104.0.1:42998 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:38:34.888 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45170 10 6452 1 2025-11-13 21:39:19.956 00:00:10.363 TCP 23.104.0.1:43000 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:39:35.113 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53866 10 6452 1 2025-11-13 21:35:56.729 00:05:04.225 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 21:35:56.726 00:05:04.230 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 21:40:20.362 00:00:10.374 TCP 23.104.0.1:40402 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:40:35.334 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58852 10 6452 1 2025-11-13 21:41:20.771 00:00:10.372 TCP 23.104.0.1:43004 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:41:35.555 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:59040 10 6452 1 2025-11-13 21:42:05.764 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 21:42:05.959 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 21:42:21.183 00:00:10.323 TCP 23.104.0.1:50508 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:42:35.789 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33260 10 6452 1 2025-11-13 21:43:21.547 00:00:10.368 TCP 23.104.0.1:46930 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:43:36.010 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56912 10 6452 1 2025-11-13 21:44:21.951 00:00:10.364 TCP 23.104.0.1:38836 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:44:36.231 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52416 10 6452 1 2025-11-13 21:45:22.350 00:00:10.363 TCP 23.104.0.1:50200 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:45:36.460 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49622 10 6452 1 2025-11-13 21:41:56.728 00:05:04.213 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 21:41:56.732 00:05:04.208 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 21:46:22.756 00:00:10.341 TCP 23.104.0.1:40596 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:46:36.676 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50816 10 6452 1 2025-11-13 21:47:05.850 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 21:47:06.049 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 21:47:23.137 00:00:10.374 TCP 23.104.0.1:46246 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:47:36.883 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59966 10 6452 1 2025-11-13 21:48:23.556 00:00:10.361 TCP 23.104.0.1:45082 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:48:37.106 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33458 10 6452 1 2025-11-13 21:49:23.955 00:00:10.371 TCP 23.104.0.1:49408 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:49:37.322 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33382 10 6452 1 2025-11-13 21:50:24.366 00:00:10.377 TCP 23.104.0.1:42002 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:50:37.536 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:38976 11 6504 1 2025-11-13 21:51:24.781 00:00:10.367 TCP 23.104.0.1:48590 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:51:37.802 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35656 10 6452 1 2025-11-13 21:47:56.733 00:05:04.208 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 21:47:56.730 00:05:04.213 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 21:52:05.967 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 21:52:05.864 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 21:52:25.184 00:00:10.366 TCP 23.104.0.1:38424 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:52:38.041 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47660 10 6452 1 2025-11-13 21:53:25.589 00:00:10.324 TCP 23.104.0.1:49762 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:53:38.220 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41516 10 6452 1 2025-11-13 21:54:25.951 00:00:10.366 TCP 23.104.0.1:32886 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:54:38.430 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58378 10 6452 1 2025-11-13 21:55:26.357 00:00:10.416 TCP 23.104.0.1:34260 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:55:38.597 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42188 10 6452 1 2025-11-13 21:56:26.812 00:00:10.365 TCP 23.104.0.1:35942 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:56:38.811 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57922 10 6452 1 2025-11-13 21:57:06.334 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-13 21:57:06.286 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-13 21:57:27.212 00:00:10.324 TCP 23.104.0.1:43036 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:57:38.987 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57528 10 6452 1 2025-11-13 21:53:56.735 00:05:04.230 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-13 21:53:56.733 00:05:04.236 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-13 21:58:27.571 00:00:10.375 TCP 23.104.0.1:43664 -> 1.101.0.1:3000 11 1507 1 2025-11-13 21:58:39.204 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58632 10 6452 1 Summary: total flows: 164, total bytes: 502846, total packets: 1581, avg bps: 1118, avg pps: 0, avg bpp: 318 Time window: 2025-11-13 20:59:03 - 2025-11-13 21:59:00 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0055s User: 0.0011s Wall: 0.0023s flows/second: 72598.0 Runtime: 0.0023s