Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 20:58:57.030 00:00:10.364 TCP 23.104.0.1:44248 -> 1.101.0.1:3000 11 1507 1 2025-11-15 20:59:23.073 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53576 10 6452 1 2025-11-15 20:59:57.429 00:00:10.384 TCP 23.104.0.1:52374 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:00:23.282 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46874 10 6452 1 2025-11-15 21:00:57.851 00:00:10.377 TCP 23.104.0.1:54344 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:01:23.489 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:49218 12 10369 1 2025-11-15 21:01:58.264 00:00:10.447 TCP 23.104.0.1:52618 -> 1.101.0.1:3000 15 1926 1 2025-11-15 21:02:23.725 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36146 10 6452 1 2025-11-15 21:03:02.833 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 21:03:02.949 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 21:02:58.749 00:00:10.388 TCP 23.104.0.1:50418 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:03:23.944 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:33802 10 6452 1 2025-11-15 20:59:57.641 00:05:04.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 20:59:57.644 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 21:03:59.176 00:00:10.368 TCP 23.104.0.1:60590 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:04:24.147 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34606 10 6452 1 2025-11-15 21:04:59.584 00:00:10.363 TCP 23.104.0.1:42976 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:05:24.360 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41806 10 6452 1 2025-11-15 21:05:59.987 00:00:10.367 TCP 23.104.0.1:34526 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:06:24.578 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55900 10 6452 1 2025-11-15 21:07:00.396 00:00:10.331 TCP 23.104.0.1:60234 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:07:24.802 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38240 10 6452 1 2025-11-15 21:08:03.011 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 21:08:03.273 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 21:08:00.779 00:00:10.322 TCP 23.104.0.1:53598 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:08:25.016 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44978 10 6452 1 2025-11-15 21:09:01.142 00:00:10.467 TCP 23.104.0.1:55700 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:09:25.227 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47422 10 6452 1 2025-11-15 21:05:57.648 00:05:04.729 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 21:05:57.651 00:05:04.724 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 21:10:01.648 00:00:10.361 TCP 23.104.0.1:41554 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:10:25.438 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59134 10 6452 1 2025-11-15 21:11:02.057 00:00:10.362 TCP 23.104.0.1:41648 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:11:25.656 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33812 10 6452 1 2025-11-15 21:12:02.456 00:00:10.369 TCP 23.104.0.1:35320 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:12:25.870 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:55976 10 6452 1 2025-11-15 21:13:03.024 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 21:13:03.028 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 21:13:02.867 00:00:10.368 TCP 23.104.0.1:42470 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:13:26.109 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33780 10 6452 1 2025-11-15 21:14:03.272 00:00:10.361 TCP 23.104.0.1:44096 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:14:26.350 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43506 10 6452 1 2025-11-15 21:15:03.676 00:00:10.368 TCP 23.104.0.1:50114 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:15:26.560 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44090 10 6452 1 2025-11-15 21:11:57.645 00:05:04.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 21:11:57.643 00:05:04.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 21:16:04.106 00:00:10.324 TCP 23.104.0.1:55116 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:16:26.775 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39108 10 6452 1 2025-11-15 21:17:04.468 00:00:10.366 TCP 23.104.0.1:45020 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:17:26.987 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:55342 10 6452 1 2025-11-15 21:18:03.465 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 21:18:03.402 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 21:18:04.872 00:00:10.364 TCP 23.104.0.1:56820 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:18:27.179 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36456 10 6452 1 2025-11-15 21:19:05.284 00:00:10.361 TCP 23.104.0.1:42266 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:19:27.390 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47596 10 6452 1 2025-11-15 21:20:05.686 00:00:10.364 TCP 23.104.0.1:34368 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:20:27.600 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45366 10 6452 1 2025-11-15 21:21:06.105 00:00:10.442 TCP 23.104.0.1:46452 -> 1.101.0.1:3000 15 1926 1 2025-11-15 21:21:27.817 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35970 12 10375 1 2025-11-15 21:17:57.643 00:05:04.744 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 21:17:57.647 00:05:04.739 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 21:22:06.589 00:00:10.373 TCP 23.104.0.1:45174 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:22:28.082 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59344 10 6452 1 2025-11-15 21:23:03.311 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 21:23:03.065 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 21:23:07.004 00:00:10.365 TCP 23.104.0.1:40298 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:23:28.255 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:55080 11 6504 1 2025-11-15 21:24:07.409 00:00:10.325 TCP 23.104.0.1:41318 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:24:28.523 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60940 10 6452 1 2025-11-15 21:25:07.773 00:00:10.372 TCP 23.104.0.1:58704 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:25:28.735 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59018 10 6452 1 2025-11-15 21:26:08.187 00:00:10.365 TCP 23.104.0.1:40998 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:26:28.905 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39898 10 6452 1 2025-11-15 21:27:08.589 00:00:10.362 TCP 23.104.0.1:51142 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:27:29.120 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60428 10 6452 1 2025-11-15 21:28:03.045 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 21:23:57.646 00:05:04.740 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 21:28:03.349 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 21:23:57.644 00:05:04.745 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 21:28:08.990 00:00:10.368 TCP 23.104.0.1:38604 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:28:29.337 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:45524 11 6504 1 2025-11-15 21:29:09.397 00:00:10.361 TCP 23.104.0.1:47610 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:29:29.605 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40506 10 6452 1 2025-11-15 21:30:09.805 00:00:10.372 TCP 23.104.0.1:39054 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:30:29.823 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43874 10 6452 1 2025-11-15 21:31:10.212 00:00:10.365 TCP 23.104.0.1:47438 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:31:30.041 00:00:11.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56606 10 6452 1 2025-11-15 21:32:10.614 00:00:10.364 TCP 23.104.0.1:36138 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:32:31.209 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42436 10 6452 1 2025-11-15 21:33:03.644 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 21:33:03.415 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 21:33:11.013 00:00:10.358 TCP 23.104.0.1:52722 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:33:31.429 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:58218 10 6452 1 2025-11-15 21:29:57.647 00:05:04.740 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 21:29:57.644 00:05:04.745 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 21:34:11.405 00:00:10.322 TCP 23.104.0.1:51002 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:34:31.670 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36828 10 6452 1 2025-11-15 21:35:11.767 00:00:10.370 TCP 23.104.0.1:46888 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:35:31.886 00:00:10.608 TCP 1.101.0.1:3000 -> 22.102.0.1:58646 10 6452 1 2025-11-15 21:36:12.175 00:00:10.367 TCP 23.104.0.1:33472 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:36:32.534 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41106 10 6452 1 2025-11-15 21:37:12.582 00:00:10.338 TCP 23.104.0.1:40130 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:37:32.705 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37212 10 6452 1 2025-11-15 21:38:03.672 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 21:38:03.710 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 21:38:12.958 00:00:10.366 TCP 23.104.0.1:37670 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:38:32.915 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40952 10 6452 1 2025-11-15 21:39:13.365 00:00:10.365 TCP 23.104.0.1:49670 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:39:33.132 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60998 10 6452 1 2025-11-15 21:35:57.652 00:05:04.735 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 21:35:57.649 00:05:04.740 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 21:40:13.760 00:00:10.378 TCP 23.104.0.1:49290 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:40:33.347 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54622 10 6452 1 2025-11-15 21:41:14.175 00:00:10.381 TCP 23.104.0.1:36030 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:41:33.569 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57466 10 6452 1 2025-11-15 21:42:14.594 00:00:10.327 TCP 23.104.0.1:51104 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:42:33.787 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57900 10 6452 1 2025-11-15 21:43:03.646 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 21:43:03.624 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 21:43:14.956 00:00:10.325 TCP 23.104.0.1:56658 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:43:33.994 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45668 10 6452 1 2025-11-15 21:44:15.320 00:00:10.366 TCP 23.104.0.1:37712 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:44:34.220 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:45278 10 6452 1 2025-11-15 21:45:15.725 00:00:10.388 TCP 23.104.0.1:54252 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:45:34.390 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40194 10 6452 1 2025-11-15 21:41:57.654 00:05:04.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 21:41:57.651 00:05:04.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 21:46:16.150 00:00:10.365 TCP 23.104.0.1:37106 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:46:34.598 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35936 10 6452 1 2025-11-15 21:47:16.553 00:00:10.363 TCP 23.104.0.1:55012 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:47:34.817 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57340 10 6452 1 2025-11-15 21:48:03.591 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 21:48:03.704 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 21:48:16.956 00:00:10.369 TCP 23.104.0.1:47294 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:48:35.053 00:00:10.761 TCP 1.101.0.1:3000 -> 22.102.0.1:45588 10 6452 1 2025-11-15 21:49:17.367 00:00:10.378 TCP 23.104.0.1:55946 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:49:35.853 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52568 10 6452 1 2025-11-15 21:50:17.774 00:00:10.366 TCP 23.104.0.1:42508 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:50:36.082 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38542 10 6452 1 2025-11-15 21:51:18.177 00:00:10.435 TCP 23.104.0.1:47942 -> 1.101.0.1:3000 15 1926 1 2025-11-15 21:51:36.251 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:46472 12 10375 1 2025-11-15 21:47:57.656 00:05:04.734 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 21:47:57.654 00:05:04.739 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 21:52:18.655 00:00:10.364 TCP 23.104.0.1:34794 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:52:36.489 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38230 10 6452 1 2025-11-15 21:53:03.877 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 21:53:03.712 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 21:53:19.068 00:00:10.388 TCP 23.104.0.1:52114 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:53:36.702 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44536 10 6452 1 2025-11-15 21:54:19.470 00:00:10.368 TCP 23.104.0.1:37698 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:54:36.870 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:52406 10 6452 1 2025-11-15 21:55:19.880 00:00:10.383 TCP 23.104.0.1:53312 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:55:37.068 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58870 10 6452 1 2025-11-15 21:56:20.299 00:00:10.368 TCP 23.104.0.1:57014 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:56:37.282 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54296 10 6452 1 2025-11-15 21:57:20.705 00:00:10.370 TCP 23.104.0.1:34746 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:57:37.456 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54020 10 6452 1 2025-11-15 21:58:04.018 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 21:53:57.658 00:05:04.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 21:58:03.974 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 21:53:57.656 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 21:58:21.112 00:00:10.361 TCP 23.104.0.1:51912 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:58:37.672 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57646 10 6452 1 Summary: total flows: 164, total bytes: 511472, total packets: 1592, avg bps: 1134, avg pps: 0, avg bpp: 321 Time window: 2025-11-15 20:58:57 - 2025-11-15 21:59:02 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0024s Wall: 0.0016s flows/second: 102057.2 Runtime: 0.0016s