Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-20 23:58:45.947 00:00:10.334 TCP 23.104.0.1:41130 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:59:12.105 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:39168 10 6452 1 2025-11-20 23:59:46.317 00:00:10.367 TCP 23.104.0.1:49612 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:00:12.276 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41290 10 6452 1 2025-11-21 00:00:32.491 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 00:00:32.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 00:00:46.721 00:00:10.339 TCP 23.104.0.1:46972 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:01:12.500 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44090 10 6452 1 2025-11-21 00:01:47.099 00:00:10.325 TCP 23.104.0.1:54298 -> 1.101.0.1:3000 11 1507 1 2025-11-20 23:58:01.218 00:05:04.286 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-20 23:58:01.221 00:05:04.281 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 00:02:12.712 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37454 10 6452 1 2025-11-21 00:02:47.459 00:00:10.366 TCP 23.104.0.1:58640 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:03:12.931 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:56062 10 6452 1 2025-11-21 00:03:47.863 00:00:10.327 TCP 23.104.0.1:53176 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:04:13.160 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56260 10 6452 1 2025-11-21 00:04:48.230 00:00:10.956 TCP 23.104.0.1:35742 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:05:13.371 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38432 10 6452 1 2025-11-21 00:05:32.597 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 00:05:32.447 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 00:05:49.227 00:00:10.360 TCP 23.104.0.1:44440 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:06:13.586 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56820 10 6452 1 2025-11-21 00:06:49.629 00:00:10.363 TCP 23.104.0.1:60316 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:07:13.798 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41736 10 6452 1 2025-11-21 00:07:50.033 00:00:10.404 TCP 23.104.0.1:55342 -> 1.101.0.1:3000 15 1926 1 2025-11-21 00:04:01.222 00:05:04.282 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 00:04:01.220 00:05:04.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 00:08:14.016 00:00:10.600 TCP 1.101.0.1:3000 -> 22.102.0.1:47884 12 10375 1 2025-11-21 00:08:50.475 00:00:10.320 TCP 23.104.0.1:53856 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:09:14.657 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:46396 10 6452 1 2025-11-21 00:09:50.836 00:00:10.384 TCP 23.104.0.1:42166 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:10:14.888 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43344 10 6452 1 2025-11-21 00:10:32.512 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 00:10:32.624 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 00:10:51.260 00:00:10.361 TCP 23.104.0.1:56244 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:11:15.112 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44114 10 6452 1 2025-11-21 00:11:51.670 00:00:10.395 TCP 23.104.0.1:51190 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:12:15.323 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45426 10 6452 1 2025-11-21 00:12:52.112 00:00:10.369 TCP 23.104.0.1:53038 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:13:15.535 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48810 10 6452 1 2025-11-21 00:13:52.521 00:00:10.344 TCP 23.104.0.1:38238 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:10:01.222 00:05:04.283 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 00:10:01.221 00:05:04.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 00:14:15.748 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43632 10 6452 1 2025-11-21 00:14:52.885 00:00:10.347 TCP 23.104.0.1:46746 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:15:15.955 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44790 10 6452 1 2025-11-21 00:15:32.678 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 00:15:32.891 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 00:15:53.265 00:00:10.438 TCP 23.104.0.1:40992 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:16:16.181 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41908 10 6452 1 2025-11-21 00:16:53.747 00:00:10.363 TCP 23.104.0.1:50434 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:17:16.397 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56382 10 6452 1 2025-11-21 00:17:54.145 00:00:10.397 TCP 23.104.0.1:37286 -> 1.101.0.1:3000 15 1926 1 2025-11-21 00:18:16.610 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:43844 12 10375 1 2025-11-21 00:18:54.582 00:00:10.369 TCP 23.104.0.1:36374 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:19:16.849 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54788 10 6452 1 2025-11-21 00:16:01.222 00:05:04.288 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 00:19:54.987 00:00:10.376 TCP 23.104.0.1:46054 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:16:01.224 00:05:04.283 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 00:20:32.880 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 00:20:17.075 00:00:10.294 TCP 1.101.0.1:3000 -> 22.102.0.1:52676 10 6452 1 2025-11-21 00:20:32.769 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 00:20:55.399 00:00:10.324 TCP 23.104.0.1:33988 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:21:17.410 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58748 10 6452 1 2025-11-21 00:21:55.774 00:00:10.369 TCP 23.104.0.1:44738 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:22:17.625 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43768 10 6452 1 2025-11-21 00:22:56.186 00:00:10.365 TCP 23.104.0.1:45164 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:23:17.837 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50762 10 6452 1 2025-11-21 00:23:56.589 00:00:10.365 TCP 23.104.0.1:40130 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:24:18.009 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:54108 10 6452 1 2025-11-21 00:24:56.992 00:00:11.366 TCP 23.104.0.1:41612 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:25:18.188 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58510 10 6452 1 2025-11-21 00:25:32.903 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 00:25:32.740 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 00:22:01.226 00:05:04.283 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 00:22:01.224 00:05:04.288 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 00:25:58.404 00:00:10.371 TCP 23.104.0.1:41952 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:26:18.405 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34406 10 6452 1 2025-11-21 00:26:58.814 00:00:10.330 TCP 23.104.0.1:47428 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:27:18.617 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52130 10 6452 1 2025-11-21 00:27:59.183 00:00:10.327 TCP 23.104.0.1:49096 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:28:18.832 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41484 10 6452 1 2025-11-21 00:28:59.550 00:00:10.360 TCP 23.104.0.1:35718 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:29:19.074 00:00:10.259 TCP 1.101.0.1:3000 -> 22.102.0.1:49784 10 6452 1 2025-11-21 00:29:59.947 00:00:10.365 TCP 23.104.0.1:45422 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:30:19.376 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39518 10 6452 1 2025-11-21 00:30:32.993 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 00:30:33.102 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 00:31:00.352 00:00:10.323 TCP 23.104.0.1:54474 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:31:19.597 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34284 10 6452 1 2025-11-21 00:28:01.225 00:05:04.288 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 00:28:01.229 00:05:04.282 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 00:32:00.709 00:00:10.389 TCP 23.104.0.1:50456 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:32:19.840 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49198 10 6452 1 2025-11-21 00:33:01.132 00:00:10.367 TCP 23.104.0.1:33866 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:33:20.032 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55764 10 6452 1 2025-11-21 00:34:01.537 00:00:10.365 TCP 23.104.0.1:60584 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:34:20.198 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:59112 10 6452 1 2025-11-21 00:35:01.939 00:00:10.371 TCP 23.104.0.1:45932 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:35:20.364 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33382 10 6452 1 2025-11-21 00:35:33.052 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 00:35:32.973 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 00:36:02.348 00:00:10.362 TCP 23.104.0.1:48918 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:36:20.583 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35194 10 6452 1 2025-11-21 00:37:02.747 00:00:10.396 TCP 23.104.0.1:45410 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:37:20.755 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49412 10 6452 1 2025-11-21 00:34:01.233 00:05:04.282 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 00:34:01.236 00:05:04.277 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 00:38:03.184 00:00:10.367 TCP 23.104.0.1:51888 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:38:20.928 00:00:12.264 TCP 1.101.0.1:3000 -> 22.102.0.1:52814 10 6452 1 2025-11-21 00:39:03.593 00:00:10.366 TCP 23.104.0.1:59318 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:39:23.235 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35862 10 6452 1 2025-11-21 00:40:03.995 00:00:10.367 TCP 23.104.0.1:51674 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:40:33.555 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 00:40:23.455 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57046 10 6452 1 2025-11-21 00:40:33.319 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 00:41:04.401 00:00:10.367 TCP 23.104.0.1:38264 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:41:23.662 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33562 10 6452 1 2025-11-21 00:42:04.808 00:00:10.373 TCP 23.104.0.1:39174 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:42:23.833 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33186 10 6452 1 2025-11-21 00:43:05.215 00:00:10.403 TCP 23.104.0.1:40998 -> 1.101.0.1:3000 15 1926 1 2025-11-21 00:43:24.063 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:34292 12 10369 1 2025-11-21 00:40:01.236 00:05:04.283 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 00:40:01.233 00:05:04.288 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 00:44:05.659 00:00:10.369 TCP 23.104.0.1:36720 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:44:24.302 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33418 10 6452 1 2025-11-21 00:45:06.097 00:00:10.374 TCP 23.104.0.1:34532 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:45:33.413 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 00:45:33.223 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 00:45:24.514 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33062 10 6452 1 2025-11-21 00:46:06.515 00:00:10.366 TCP 23.104.0.1:39370 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:46:24.696 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39662 10 6452 1 2025-11-21 00:47:06.915 00:00:10.363 TCP 23.104.0.1:33118 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:47:24.905 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55054 10 6452 1 2025-11-21 00:48:07.318 00:00:10.331 TCP 23.104.0.1:45028 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:48:25.120 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34438 10 6452 1 2025-11-21 00:49:07.692 00:00:10.367 TCP 23.104.0.1:54866 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:49:25.342 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37770 10 6452 1 2025-11-21 00:46:01.235 00:05:04.285 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 00:46:01.234 00:05:04.290 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 00:50:08.103 00:00:10.361 TCP 23.104.0.1:46520 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:50:33.423 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 00:50:25.566 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40378 10 6452 1 2025-11-21 00:50:33.226 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 00:51:08.511 00:00:10.326 TCP 23.104.0.1:43306 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:51:25.780 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59262 10 6452 1 2025-11-21 00:52:08.881 00:00:10.388 TCP 23.104.0.1:57046 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:52:25.993 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56518 10 6452 1 2025-11-21 00:53:09.304 00:00:10.420 TCP 23.104.0.1:54270 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:53:26.217 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:52892 10 6452 1 2025-11-21 00:54:09.760 00:00:10.372 TCP 23.104.0.1:57938 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:54:26.394 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:52028 10 6452 1 2025-11-21 00:55:10.187 00:00:10.365 TCP 23.104.0.1:53248 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:55:33.261 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 00:55:26.573 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49714 10 6452 1 2025-11-21 00:55:33.571 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 00:52:01.236 00:05:04.289 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 00:52:01.234 00:05:04.294 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 00:56:10.591 00:00:10.361 TCP 23.104.0.1:51330 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:56:26.798 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54506 10 6452 1 2025-11-21 00:57:10.989 00:00:10.363 TCP 23.104.0.1:41886 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:57:27.028 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51430 10 6452 1 2025-11-21 00:58:11.398 00:00:10.363 TCP 23.104.0.1:47732 -> 1.101.0.1:3000 11 1507 1 2025-11-21 00:58:27.240 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:43008 10 6452 1 Summary: total flows: 164, total bytes: 511368, total packets: 1590, avg bps: 1125, avg pps: 0, avg bpp: 321 Time window: 2025-11-20 23:58:01 - 2025-11-21 00:58:37 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0055s User: 0.0000s Wall: 0.0026s flows/second: 63591.2 Runtime: 0.0026s