Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-16 20:58:49.541 00:00:10.365 TCP 23.104.0.1:47374 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:59:41.199 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40880 10 6452 1 2025-11-16 20:59:49.944 00:00:10.376 TCP 23.104.0.1:37940 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:00:41.423 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41242 10 6452 1 2025-11-16 21:00:50.354 00:00:10.328 TCP 23.104.0.1:48262 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:01:41.642 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39760 10 6452 1 2025-11-16 21:01:50.723 00:00:10.555 TCP 23.104.0.1:33466 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:02:41.861 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:39778 10 6452 1 2025-11-16 21:02:51.321 00:00:10.362 TCP 23.104.0.1:33944 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:03:31.552 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 21:03:31.428 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 21:03:42.090 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42718 10 6452 1 2025-11-16 20:59:02.984 00:05:55.318 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 21:03:51.725 00:00:10.370 TCP 23.104.0.1:50060 -> 1.101.0.1:3000 11 1507 1 2025-11-16 20:59:58.303 00:05:04.680 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 21:04:42.261 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:40470 10 6452 1 2025-11-16 21:04:52.130 00:00:10.358 TCP 23.104.0.1:45656 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:05:42.489 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35540 10 6452 1 2025-11-16 21:05:52.528 00:00:10.368 TCP 23.104.0.1:46476 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:06:42.704 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49424 10 6452 1 2025-11-16 21:06:52.932 00:00:10.397 TCP 23.104.0.1:44400 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:07:42.915 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38122 10 6452 1 2025-11-16 21:07:53.380 00:00:10.364 TCP 23.104.0.1:51434 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:08:31.587 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 21:08:31.741 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 21:08:43.129 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:57568 10 6452 1 2025-11-16 21:08:53.785 00:00:10.374 TCP 23.104.0.1:57766 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:09:43.301 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35628 10 6452 1 2025-11-16 21:05:02.985 00:05:55.323 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 21:09:54.207 00:00:10.325 TCP 23.104.0.1:47970 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:05:58.304 00:05:04.681 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 21:10:43.480 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50848 10 6452 1 2025-11-16 21:10:54.572 00:00:10.338 TCP 23.104.0.1:46564 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:11:43.689 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39952 10 6452 1 2025-11-16 21:11:54.950 00:00:10.364 TCP 23.104.0.1:58592 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:12:43.901 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34122 10 6452 1 2025-11-16 21:12:55.355 00:00:10.372 TCP 23.104.0.1:40534 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:13:31.948 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 21:13:32.139 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 21:13:44.110 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53546 10 6452 1 2025-11-16 21:13:55.764 00:00:10.371 TCP 23.104.0.1:47572 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:14:44.282 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44542 10 6452 1 2025-11-16 21:14:56.175 00:00:10.970 TCP 23.104.0.1:44702 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:15:44.501 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33026 10 6452 1 2025-11-16 21:11:02.987 00:05:55.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 21:11:58.312 00:05:04.677 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 21:15:57.183 00:00:10.371 TCP 23.104.0.1:33008 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:16:44.721 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51558 10 6452 1 2025-11-16 21:16:57.591 00:00:10.361 TCP 23.104.0.1:42312 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:17:44.936 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:38030 10 6452 1 2025-11-16 21:17:57.994 00:00:10.369 TCP 23.104.0.1:39436 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:18:31.950 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 21:18:31.891 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 21:18:45.184 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56200 10 6452 1 2025-11-16 21:18:58.396 00:00:10.359 TCP 23.104.0.1:60312 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:19:45.409 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60620 10 6452 1 2025-11-16 21:19:58.796 00:00:10.368 TCP 23.104.0.1:47622 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:20:45.628 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55620 10 6452 1 2025-11-16 21:20:59.203 00:00:10.368 TCP 23.104.0.1:46230 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:21:45.850 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42046 10 6452 1 2025-11-16 21:17:02.991 00:05:55.322 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 21:17:58.313 00:05:04.677 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 21:21:59.613 00:00:10.369 TCP 23.104.0.1:55110 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:22:46.029 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48436 10 6452 1 2025-11-16 21:23:00.016 00:00:10.329 TCP 23.104.0.1:45694 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:23:32.105 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 21:23:32.069 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 21:23:46.241 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48894 10 6452 1 2025-11-16 21:24:00.376 00:00:10.361 TCP 23.104.0.1:44700 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:24:46.453 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47382 10 6452 1 2025-11-16 21:25:00.783 00:00:10.355 TCP 23.104.0.1:32808 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:25:46.664 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59254 10 6452 1 2025-11-16 21:26:01.177 00:00:10.367 TCP 23.104.0.1:37044 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:26:46.878 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58924 10 6452 1 2025-11-16 21:23:02.993 00:05:00.009 TCP 179.1.22.1:179 -> 179.1.22.22:39396 11 667 1 2025-11-16 21:27:01.583 00:00:10.359 TCP 23.104.0.1:49182 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:27:47.073 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46850 10 6452 1 2025-11-16 21:23:58.321 00:05:04.679 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 21:28:01.981 00:00:10.370 TCP 23.104.0.1:43622 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:28:32.427 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 21:28:32.600 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 21:28:47.289 00:00:18.150 TCP 1.101.0.1:3000 -> 22.102.0.1:50680 10 6452 1 2025-11-16 21:29:02.396 00:00:10.526 TCP 23.104.0.1:38868 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:29:55.478 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:44936 10 6452 1 2025-11-16 21:30:02.968 00:00:10.382 TCP 23.104.0.1:45774 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:30:55.703 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:39746 10 6452 1 2025-11-16 21:31:03.385 00:00:10.327 TCP 23.104.0.1:36698 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:31:55.891 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45308 10 6452 1 2025-11-16 21:32:03.748 00:00:10.364 TCP 23.104.0.1:43554 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:32:56.114 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51154 10 6452 1 2025-11-16 21:28:58.321 00:05:04.684 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 21:33:04.145 00:00:10.373 TCP 23.104.0.1:46764 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:33:32.278 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 21:33:32.286 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 21:33:56.327 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45096 10 6452 1 2025-11-16 21:29:58.323 00:05:04.678 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 21:34:04.555 00:00:10.381 TCP 23.104.0.1:36752 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:34:56.555 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:33960 10 6452 1 2025-11-16 21:35:04.958 00:00:10.366 TCP 23.104.0.1:57400 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:35:56.743 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41190 10 6452 1 2025-11-16 21:36:05.361 00:00:10.377 TCP 23.104.0.1:58152 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:36:56.955 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54686 10 6452 1 2025-11-16 21:37:05.777 00:00:10.371 TCP 23.104.0.1:38124 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:37:57.183 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54072 10 6452 1 2025-11-16 21:38:06.183 00:00:10.368 TCP 23.104.0.1:39654 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:38:32.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 21:38:32.367 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 21:34:58.323 00:05:04.699 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 21:38:57.394 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39732 10 6452 1 2025-11-16 21:39:06.591 00:00:10.361 TCP 23.104.0.1:43918 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:35:58.324 00:05:04.703 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 21:39:57.598 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49282 10 6452 1 2025-11-16 21:40:06.994 00:00:10.321 TCP 23.104.0.1:40820 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:40:57.810 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39460 10 6452 1 2025-11-16 21:41:07.355 00:00:10.362 TCP 23.104.0.1:40948 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:41:58.036 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45230 10 6452 1 2025-11-16 21:42:07.756 00:00:10.331 TCP 23.104.0.1:51258 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:42:58.251 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58374 10 6452 1 2025-11-16 21:43:08.164 00:00:10.368 TCP 23.104.0.1:39810 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:43:32.473 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 21:43:32.491 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 21:43:58.465 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42750 10 6452 1 2025-11-16 21:44:08.575 00:00:10.366 TCP 23.104.0.1:54512 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:40:58.325 00:05:04.712 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 21:44:58.679 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:55190 10 6452 1 2025-11-16 21:45:08.979 00:00:10.495 TCP 23.104.0.1:35418 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:41:58.326 00:05:04.706 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 21:45:58.930 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:49030 10 6452 1 2025-11-16 21:46:09.511 00:00:10.367 TCP 23.104.0.1:45850 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:46:59.133 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42958 12 6556 1 2025-11-16 21:47:09.918 00:00:10.367 TCP 23.104.0.1:35654 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:47:59.349 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59610 10 6452 1 2025-11-16 21:48:10.324 00:00:10.325 TCP 23.104.0.1:57910 -> 1.101.0.1:3000 12 1559 1 2025-11-16 21:48:33.053 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 21:48:33.058 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 21:48:59.564 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51338 10 6452 1 2025-11-16 21:49:10.688 00:00:10.377 TCP 23.104.0.1:38720 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:49:59.778 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44804 10 6452 1 2025-11-16 21:50:11.107 00:00:10.366 TCP 23.104.0.1:57918 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:46:58.328 00:05:04.718 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 21:50:59.990 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60280 10 6452 1 2025-11-16 21:51:11.512 00:00:10.369 TCP 23.104.0.1:43530 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:47:58.330 00:05:04.713 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 21:52:00.212 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48980 10 6452 1 2025-11-16 21:52:11.920 00:00:10.386 TCP 23.104.0.1:50850 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:53:00.430 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:58214 10 6452 1 2025-11-16 21:53:12.339 00:00:10.368 TCP 23.104.0.1:36310 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:53:32.536 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-16 21:53:32.596 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 21:54:00.606 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53498 10 6452 1 2025-11-16 21:54:12.747 00:00:10.322 TCP 23.104.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:55:00.818 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39088 10 6452 1 2025-11-16 21:55:13.110 00:00:10.362 TCP 23.104.0.1:47862 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:56:01.033 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:45588 10 6452 1 2025-11-16 21:56:13.521 00:00:10.329 TCP 23.104.0.1:41802 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:52:58.329 00:05:04.717 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-16 21:57:01.202 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47434 10 6452 1 2025-11-16 21:57:13.903 00:00:10.372 TCP 23.104.0.1:35092 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:53:58.332 00:05:04.712 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-16 21:58:01.424 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:51660 10 6452 1 2025-11-16 21:58:14.318 00:00:10.373 TCP 23.104.0.1:48180 -> 1.101.0.1:3000 11 1507 1 2025-11-16 21:58:32.711 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-16 21:58:32.599 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 163, total bytes: 491981, total packets: 1564, avg bps: 1089, avg pps: 0, avg bpp: 314 Time window: 2025-11-16 20:58:49 - 2025-11-16 21:59:03 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0015s Wall: 0.0021s flows/second: 76022.6 Runtime: 0.0022s