Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 20:59:01.081 00:00:10.327 TCP 23.104.0.1:38462 -> 1.101.0.1:3000 11 1507 1 2025-11-20 20:59:22.067 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36610 10 6452 1 2025-11-20 21:00:01.446 00:00:22.582 TCP 23.104.0.1:58154 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:00:28.931 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:00:28.842 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 21:00:22.294 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34506 10 6452 1 2025-11-20 21:01:14.105 00:00:10.323 TCP 23.104.0.1:46736 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:01:22.517 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55494 10 6452 1 2025-11-20 20:58:01.121 00:05:04.320 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 20:58:01.118 00:05:04.326 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 21:02:14.468 00:00:10.322 TCP 23.104.0.1:51284 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:02:22.748 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48920 10 6452 1 2025-11-20 21:03:14.826 00:00:10.351 TCP 23.104.0.1:36946 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:03:22.966 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:46848 10 6452 1 2025-11-20 21:04:15.216 00:00:10.363 TCP 23.104.0.1:59330 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:04:23.153 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39592 10 6452 1 2025-11-20 21:05:15.619 00:00:10.361 TCP 23.104.0.1:41678 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:05:28.876 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:05:28.816 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 21:05:23.321 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57318 10 6452 1 2025-11-20 21:06:16.017 00:00:10.377 TCP 23.104.0.1:56848 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:06:23.543 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51672 10 6452 1 2025-11-20 21:07:16.428 00:00:10.358 TCP 23.104.0.1:39974 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:07:23.755 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53582 10 6452 1 2025-11-20 21:04:01.121 00:05:04.320 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 21:04:01.119 00:05:04.325 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 21:08:16.821 00:00:10.364 TCP 23.104.0.1:44102 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:08:23.970 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:48670 10 6452 1 2025-11-20 21:09:17.224 00:00:10.364 TCP 23.104.0.1:59958 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:09:24.215 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54388 10 6452 1 2025-11-20 21:10:29.301 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:10:17.625 00:00:10.367 TCP 23.104.0.1:42372 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:10:29.369 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 21:10:24.435 00:00:10.609 TCP 1.101.0.1:3000 -> 22.102.0.1:45644 10 6452 1 2025-11-20 21:11:18.032 00:00:10.319 TCP 23.104.0.1:47184 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:11:25.088 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59404 10 6452 1 2025-11-20 21:12:18.394 00:00:10.360 TCP 23.104.0.1:45644 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:12:25.298 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60806 10 6452 1 2025-11-20 21:13:18.796 00:00:10.341 TCP 23.104.0.1:47350 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:13:25.466 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34036 10 6452 1 2025-11-20 21:10:01.124 00:05:04.318 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 21:10:01.122 00:05:04.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 21:14:19.173 00:00:10.325 TCP 23.104.0.1:39972 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:14:25.692 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54096 10 6452 1 2025-11-20 21:15:29.178 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:15:19.540 00:00:10.358 TCP 23.104.0.1:46260 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:15:29.115 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 21:15:25.908 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49762 10 6452 1 2025-11-20 21:16:19.938 00:00:10.339 TCP 23.104.0.1:55154 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:16:26.131 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56314 10 6452 1 2025-11-20 21:17:20.307 00:00:10.366 TCP 23.104.0.1:34988 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:17:26.344 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:44478 10 6452 1 2025-11-20 21:18:20.714 00:00:10.374 TCP 23.104.0.1:44914 -> 1.101.0.1:3000 12 1559 1 2025-11-20 21:18:26.622 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46516 10 6452 1 2025-11-20 21:19:21.129 00:00:10.367 TCP 23.104.0.1:37118 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:19:26.845 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59906 10 6452 1 2025-11-20 21:16:01.123 00:05:04.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 21:16:01.126 00:05:04.319 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 21:20:29.226 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:20:21.538 00:00:10.400 TCP 23.104.0.1:55084 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:20:29.357 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 21:20:27.077 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43946 10 6452 1 2025-11-20 21:21:21.990 00:00:10.365 TCP 23.104.0.1:36096 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:21:27.298 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40696 10 6452 1 2025-11-20 21:22:22.395 00:00:10.326 TCP 23.104.0.1:53748 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:22:27.519 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42314 10 6452 1 2025-11-20 21:23:22.763 00:00:10.381 TCP 23.104.0.1:56776 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:23:27.731 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36676 10 6452 1 2025-11-20 21:24:23.186 00:00:10.368 TCP 23.104.0.1:43670 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:24:27.955 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56502 10 6452 1 2025-11-20 21:25:29.618 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 21:25:29.185 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:25:23.597 00:00:10.328 TCP 23.104.0.1:50414 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:25:28.200 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43470 10 6452 1 2025-11-20 21:22:01.124 00:05:04.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 21:22:01.128 00:05:04.319 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 21:26:23.968 00:00:10.379 TCP 23.104.0.1:56354 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:26:28.418 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33150 10 6452 1 2025-11-20 21:27:24.385 00:00:10.367 TCP 23.104.0.1:59186 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:27:28.628 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:57126 10 6452 1 2025-11-20 21:28:24.789 00:00:10.339 TCP 23.104.0.1:43066 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:28:28.870 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40218 10 6452 1 2025-11-20 21:29:25.163 00:00:10.364 TCP 23.104.0.1:47074 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:29:29.072 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55176 10 6452 1 2025-11-20 21:30:29.567 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:30:29.500 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 21:30:25.565 00:00:10.360 TCP 23.104.0.1:35142 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:30:29.288 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46664 10 6452 1 2025-11-20 21:31:25.977 00:00:10.364 TCP 23.104.0.1:37780 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:31:29.500 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:40286 10 6452 1 2025-11-20 21:28:01.129 00:05:04.320 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 21:28:01.132 00:05:04.315 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 21:32:26.380 00:00:10.372 TCP 23.104.0.1:59090 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:32:29.669 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51146 10 6452 1 2025-11-20 21:33:29.844 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42968 10 6452 1 2025-11-20 21:33:26.788 00:00:10.373 TCP 23.104.0.1:60104 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:34:27.196 00:00:10.331 TCP 23.104.0.1:47598 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:34:30.035 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53310 10 6452 1 2025-11-20 21:35:29.627 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:35:29.553 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 21:35:27.562 00:00:10.324 TCP 23.104.0.1:53800 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:35:30.247 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51204 10 6452 1 2025-11-20 21:36:27.924 00:00:10.469 TCP 23.104.0.1:35402 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:36:30.466 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47520 10 6452 1 2025-11-20 21:37:28.431 00:00:10.360 TCP 23.104.0.1:40552 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:37:30.678 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58900 10 6452 1 2025-11-20 21:34:01.138 00:05:04.310 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 21:34:01.135 00:05:04.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 21:38:30.891 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:60912 10 6452 1 2025-11-20 21:38:28.834 00:00:10.349 TCP 23.104.0.1:33182 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:39:29.215 00:00:10.365 TCP 23.104.0.1:38772 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:39:31.081 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51178 10 6452 1 2025-11-20 21:40:29.727 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 21:40:29.775 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:40:31.252 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44322 10 6452 1 2025-11-20 21:40:29.615 00:00:10.361 TCP 23.104.0.1:35268 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:41:30.016 00:00:10.363 TCP 23.104.0.1:40446 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:41:31.469 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53226 10 6452 1 2025-11-20 21:42:30.423 00:00:10.369 TCP 23.104.0.1:42868 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:42:31.647 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52736 10 6452 1 2025-11-20 21:43:30.829 00:00:10.404 TCP 23.104.0.1:47776 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:43:31.865 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53060 11 6492 1 2025-11-20 21:40:01.137 00:05:04.315 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 21:40:01.139 00:05:04.310 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 21:44:31.272 00:00:10.364 TCP 23.104.0.1:52500 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:44:32.088 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34922 10 6452 1 2025-11-20 21:45:29.941 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 21:45:30.023 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:45:31.678 00:00:10.377 TCP 23.104.0.1:36330 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:45:32.319 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55154 10 6452 1 2025-11-20 21:46:32.107 00:00:10.370 TCP 23.104.0.1:52034 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:46:32.544 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52320 10 6452 1 2025-11-20 21:47:32.510 00:00:10.364 TCP 23.104.0.1:38326 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:47:32.760 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54888 10 6452 1 2025-11-20 21:48:32.984 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:55924 10 6452 1 2025-11-20 21:48:32.915 00:00:10.344 TCP 23.104.0.1:56546 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:49:33.301 00:00:10.324 TCP 23.104.0.1:55168 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:49:33.236 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33172 10 6452 1 2025-11-20 21:46:01.141 00:05:04.314 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 21:46:01.144 00:05:04.309 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 21:50:29.722 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:50:29.785 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 21:50:33.666 00:00:10.329 TCP 23.104.0.1:49728 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:50:33.454 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36796 10 6452 1 2025-11-20 21:51:34.048 00:00:10.367 TCP 23.104.0.1:34476 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:51:33.672 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53160 10 6452 1 2025-11-20 21:52:34.450 00:00:10.322 TCP 23.104.0.1:46346 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:52:33.891 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54446 10 6452 1 2025-11-20 21:53:34.827 00:00:10.320 TCP 23.104.0.1:34480 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:53:34.108 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50476 10 6452 1 2025-11-20 21:54:34.333 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39548 10 6452 1 2025-11-20 21:54:35.187 00:00:10.363 TCP 23.104.0.1:43744 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:55:29.870 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-20 21:55:30.018 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-20 21:55:35.592 00:00:10.361 TCP 23.104.0.1:37502 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:55:34.551 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36224 10 6452 1 2025-11-20 21:52:01.148 00:05:04.306 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-20 21:52:01.146 00:05:04.311 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 21:56:34.778 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48756 10 6452 1 2025-11-20 21:56:35.998 00:00:10.357 TCP 23.104.0.1:42800 -> 1.101.0.1:3000 11 1507 1 2025-11-20 21:57:34.997 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:48092 12 10375 1 2025-11-20 21:57:36.395 00:00:10.442 TCP 23.104.0.1:49886 -> 1.101.0.1:3000 15 1926 1 2025-11-20 21:58:35.242 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:60610 10 6452 1 2025-11-20 21:58:36.882 00:00:10.915 TCP 23.104.0.1:58276 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502782, total packets: 1580, avg bps: 1102, avg pps: 0, avg bpp: 318 Time window: 2025-11-20 20:58:01 - 2025-11-20 21:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0046s User: 0.0009s Wall: 0.0024s flows/second: 69083.6 Runtime: 0.0024s