Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 20:58:52.988 00:00:10.376 TCP 23.104.0.1:42366 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:59:37.892 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37258 10 6452 1 2025-11-14 20:59:53.403 00:00:10.366 TCP 23.104.0.1:51934 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:00:38.112 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53668 10 6452 1 2025-11-14 21:00:53.803 00:00:10.417 TCP 23.104.0.1:44754 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:01:38.285 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33792 10 6452 1 2025-11-14 21:01:54.271 00:00:10.359 TCP 23.104.0.1:49846 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:02:33.692 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 21:02:33.673 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 21:02:38.497 00:00:10.309 TCP 1.101.0.1:3000 -> 22.102.0.1:44232 10 6452 1 2025-11-14 21:02:54.670 00:00:10.366 TCP 23.104.0.1:46892 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:03:38.845 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52848 10 6452 1 2025-11-14 21:03:55.091 00:00:10.360 TCP 23.104.0.1:33654 -> 1.101.0.1:3000 11 1507 1 2025-11-14 20:59:57.195 00:05:04.492 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 20:59:57.192 00:05:04.498 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 21:04:39.075 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60884 10 6452 1 2025-11-14 21:04:55.491 00:00:10.367 TCP 23.104.0.1:43214 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:05:39.285 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37860 10 6452 1 2025-11-14 21:05:55.895 00:00:10.369 TCP 23.104.0.1:42370 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:06:39.500 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38542 10 6452 1 2025-11-14 21:06:56.304 00:00:10.376 TCP 23.104.0.1:50864 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:07:34.390 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 21:07:34.426 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 21:07:39.719 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38024 10 6452 1 2025-11-14 21:07:56.714 00:00:10.911 TCP 23.104.0.1:32792 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:08:39.941 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:48162 10 6452 1 2025-11-14 21:08:57.664 00:00:10.359 TCP 23.104.0.1:36364 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:09:40.185 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38918 10 6452 1 2025-11-14 21:05:57.199 00:05:04.495 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 21:05:57.195 00:05:04.500 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 21:09:58.073 00:00:10.364 TCP 23.104.0.1:56814 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:10:40.417 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:35042 12 10375 1 2025-11-14 21:10:58.477 00:00:10.447 TCP 23.104.0.1:51792 -> 1.101.0.1:3000 15 1926 1 2025-11-14 21:11:40.652 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39518 10 6452 1 2025-11-14 21:11:58.959 00:00:10.365 TCP 23.104.0.1:43242 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:12:33.857 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 21:12:34.208 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 21:12:40.872 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:36792 10 6452 1 2025-11-14 21:12:59.361 00:00:10.365 TCP 23.104.0.1:50570 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:13:41.081 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52716 10 6452 1 2025-11-14 21:13:59.767 00:00:10.339 TCP 23.104.0.1:38288 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:14:41.294 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57504 10 6452 1 2025-11-14 21:15:00.144 00:00:10.359 TCP 23.104.0.1:52782 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:15:41.508 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32816 10 6452 1 2025-11-14 21:11:57.201 00:05:04.499 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 21:11:57.197 00:05:04.505 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 21:16:00.539 00:00:10.361 TCP 23.104.0.1:58480 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:16:41.718 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52290 10 6452 1 2025-11-14 21:17:00.936 00:00:10.385 TCP 23.104.0.1:53240 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:17:33.909 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 21:17:34.173 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 21:17:41.897 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36408 10 6452 1 2025-11-14 21:18:01.363 00:00:10.326 TCP 23.104.0.1:55084 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:18:42.114 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56232 10 6452 1 2025-11-14 21:19:01.728 00:00:10.370 TCP 23.104.0.1:41248 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:19:42.329 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40784 10 6452 1 2025-11-14 21:20:02.134 00:00:10.364 TCP 23.104.0.1:50316 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:20:42.503 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:48384 10 6452 1 2025-11-14 21:21:02.534 00:00:10.364 TCP 23.104.0.1:46514 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:21:42.693 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57430 10 6452 1 2025-11-14 21:17:57.199 00:05:04.504 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 21:17:57.201 00:05:04.499 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 21:22:02.935 00:00:10.374 TCP 23.104.0.1:45296 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:22:34.343 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 21:22:34.369 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 21:22:42.905 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:36942 10 6452 1 2025-11-14 21:23:03.347 00:00:10.377 TCP 23.104.0.1:44700 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:23:43.089 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:50282 10 6452 1 2025-11-14 21:24:03.761 00:00:10.378 TCP 23.104.0.1:33402 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:24:43.275 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48198 10 6452 1 2025-11-14 21:25:04.175 00:00:10.368 TCP 23.104.0.1:54658 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:25:43.486 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:45180 12 10375 1 2025-11-14 21:26:04.580 00:00:10.452 TCP 23.104.0.1:40000 -> 1.101.0.1:3000 15 1926 1 2025-11-14 21:26:43.735 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50826 10 6452 1 2025-11-14 21:27:05.096 00:00:10.840 TCP 23.104.0.1:46688 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:27:34.393 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 21:27:34.397 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 21:27:43.927 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39430 10 6452 1 2025-11-14 21:23:57.204 00:05:04.501 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 21:23:57.201 00:05:04.507 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 21:28:05.982 00:00:10.361 TCP 23.104.0.1:37256 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:28:44.154 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50458 10 6452 1 2025-11-14 21:29:06.385 00:00:10.363 TCP 23.104.0.1:53096 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:29:44.371 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48572 10 6452 1 2025-11-14 21:30:06.791 00:00:10.370 TCP 23.104.0.1:34128 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:30:44.591 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35536 10 6452 1 2025-11-14 21:31:07.207 00:00:10.370 TCP 23.104.0.1:36804 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:31:44.760 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40168 10 6452 1 2025-11-14 21:32:07.618 00:00:10.366 TCP 23.104.0.1:42516 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:32:34.608 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 21:32:34.537 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 21:32:44.970 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58710 10 6452 1 2025-11-14 21:33:08.058 00:00:10.337 TCP 23.104.0.1:40404 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:33:45.195 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:58760 10 6452 1 2025-11-14 21:29:57.203 00:05:04.506 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 21:29:57.206 00:05:04.500 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 21:34:08.438 00:00:10.369 TCP 23.104.0.1:58136 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:34:45.372 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35182 10 6452 1 2025-11-14 21:35:08.843 00:00:10.378 TCP 23.104.0.1:36362 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:35:45.593 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53264 10 6452 1 2025-11-14 21:36:09.257 00:00:10.371 TCP 23.104.0.1:35734 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:36:45.804 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:39952 10 6452 1 2025-11-14 21:37:09.665 00:00:10.363 TCP 23.104.0.1:43790 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:37:34.637 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 21:37:34.705 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 21:37:45.975 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:41082 10 6452 1 2025-11-14 21:38:10.093 00:00:10.366 TCP 23.104.0.1:47378 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:38:46.173 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33622 10 6452 1 2025-11-14 21:39:10.502 00:00:10.366 TCP 23.104.0.1:51690 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:39:46.408 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42464 10 6452 1 2025-11-14 21:35:57.204 00:05:04.506 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 21:35:57.208 00:05:04.500 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 21:40:10.905 00:00:10.368 TCP 23.104.0.1:47326 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:40:46.625 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43186 10 6452 1 2025-11-14 21:41:11.310 00:00:10.367 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:41:46.792 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48726 10 6452 1 2025-11-14 21:42:11.715 00:00:10.374 TCP 23.104.0.1:50248 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:42:34.793 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 21:42:34.653 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 21:42:47.007 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37854 10 6452 1 2025-11-14 21:43:12.127 00:00:10.364 TCP 23.104.0.1:49424 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:43:47.227 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49460 10 6452 1 2025-11-14 21:44:12.532 00:00:10.368 TCP 23.104.0.1:36006 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:44:47.438 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:34556 10 6452 1 2025-11-14 21:45:12.943 00:00:10.345 TCP 23.104.0.1:34526 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:45:47.673 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44784 10 6452 1 2025-11-14 21:41:57.204 00:05:04.508 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 21:41:57.208 00:05:04.502 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 21:46:13.326 00:00:10.360 TCP 23.104.0.1:51768 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:46:47.879 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56312 10 6452 1 2025-11-14 21:47:13.727 00:00:10.368 TCP 23.104.0.1:38456 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:47:34.852 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 21:47:35.033 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 21:47:48.101 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55112 10 6452 1 2025-11-14 21:48:14.135 00:00:10.363 TCP 23.104.0.1:51826 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:48:48.270 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:41238 10 6452 1 2025-11-14 21:49:14.537 00:00:10.326 TCP 23.104.0.1:54102 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:49:48.484 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46852 10 6452 1 2025-11-14 21:50:14.900 00:00:10.370 TCP 23.104.0.1:54564 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:50:48.652 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55448 10 6452 1 2025-11-14 21:51:15.307 00:00:10.367 TCP 23.104.0.1:58972 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:51:48.868 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44592 10 6452 1 2025-11-14 21:47:57.208 00:05:04.504 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 21:47:57.205 00:05:04.508 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 21:52:15.713 00:00:10.361 TCP 23.104.0.1:35476 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:52:34.664 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 21:52:35.062 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 21:52:49.088 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58740 10 6452 1 2025-11-14 21:53:16.116 00:00:10.325 TCP 23.104.0.1:42734 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:53:49.302 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54220 10 6452 1 2025-11-14 21:54:16.479 00:00:10.377 TCP 23.104.0.1:39308 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:54:49.472 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55502 10 6452 1 2025-11-14 21:55:16.885 00:00:10.390 TCP 23.104.0.1:40546 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:55:49.686 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47534 10 6452 1 2025-11-14 21:56:17.315 00:00:10.366 TCP 23.104.0.1:38316 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:56:49.863 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60540 10 6452 1 2025-11-14 21:57:17.728 00:00:11.233 TCP 23.104.0.1:46516 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:57:35.051 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 21:57:35.036 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 21:53:57.209 00:05:04.504 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 21:57:50.086 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35980 10 6452 1 2025-11-14 21:53:57.207 00:05:04.508 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 21:58:19.004 00:00:10.323 TCP 23.104.0.1:45874 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500580, total packets: 1574, avg bps: 1109, avg pps: 0, avg bpp: 318 Time window: 2025-11-14 20:58:52 - 2025-11-14 21:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0028s Wall: 0.0024s flows/second: 67583.2 Runtime: 0.0024s