Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 06:58:45.512 00:00:10.324 TCP 23.104.0.1:36846 -> 1.101.0.1:3000 11 1507 1 2025-11-21 06:59:09.815 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33532 10 6452 1 2025-11-21 06:59:45.877 00:00:10.385 TCP 23.104.0.1:43300 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:00:10.064 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46280 10 6452 1 2025-11-21 07:00:40.779 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 07:00:40.876 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 07:00:46.301 00:00:10.324 TCP 23.104.0.1:60514 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:01:10.278 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43962 10 6452 1 2025-11-21 07:01:46.663 00:00:10.366 TCP 23.104.0.1:55190 -> 1.101.0.1:3000 11 1507 1 2025-11-21 06:58:01.439 00:05:04.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 06:58:01.436 00:05:04.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 07:02:10.451 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:53168 13 6608 1 2025-11-21 07:02:47.091 00:00:10.330 TCP 23.104.0.1:41644 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:03:10.735 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49052 10 6452 1 2025-11-21 07:03:47.460 00:00:10.361 TCP 23.104.0.1:57160 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:04:10.960 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50494 10 6452 1 2025-11-21 07:04:47.861 00:00:10.386 TCP 23.104.0.1:41258 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:05:11.183 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:42382 10 6452 1 2025-11-21 07:05:40.932 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 07:05:40.922 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 07:05:48.285 00:00:10.389 TCP 23.104.0.1:33418 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:06:11.423 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35416 10 6452 1 2025-11-21 07:06:48.718 00:00:10.372 TCP 23.104.0.1:52140 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:07:11.636 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58800 10 6452 1 2025-11-21 07:07:49.132 00:00:10.360 TCP 23.104.0.1:41626 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:04:01.440 00:05:04.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 07:04:01.442 00:05:04.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 07:08:11.854 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42392 10 6452 1 2025-11-21 07:08:49.535 00:00:10.368 TCP 23.104.0.1:52384 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:09:12.082 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38980 10 6452 1 2025-11-21 07:09:49.945 00:00:10.379 TCP 23.104.0.1:50172 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:10:12.300 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:42162 10 6452 1 2025-11-21 07:10:41.100 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 07:10:41.039 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 07:10:50.365 00:00:10.369 TCP 23.104.0.1:53450 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:11:12.471 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58844 10 6452 1 2025-11-21 07:11:50.781 00:00:10.324 TCP 23.104.0.1:39984 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:12:12.647 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59518 10 6452 1 2025-11-21 07:12:51.149 00:00:10.366 TCP 23.104.0.1:52568 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:13:12.860 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39872 10 6452 1 2025-11-21 07:10:01.444 00:05:04.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 07:13:51.554 00:00:11.604 TCP 23.104.0.1:52782 -> 1.101.0.1:3000 13 1611 1 2025-11-21 07:10:01.441 00:05:04.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 07:14:13.040 00:00:10.413 TCP 1.101.0.1:3000 -> 22.102.0.1:51524 11 6492 1 2025-11-21 07:14:53.197 00:00:10.364 TCP 23.104.0.1:42534 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:15:13.492 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32994 10 6452 1 2025-11-21 07:15:41.280 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 07:15:41.353 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 07:15:53.600 00:00:10.363 TCP 23.104.0.1:54688 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:16:13.707 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52392 10 6452 1 2025-11-21 07:16:54.002 00:00:10.359 TCP 23.104.0.1:41344 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:17:13.926 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:52784 10 6452 1 2025-11-21 07:17:54.396 00:00:10.364 TCP 23.104.0.1:38516 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:18:14.125 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60386 10 6452 1 2025-11-21 07:18:54.799 00:00:10.371 TCP 23.104.0.1:58988 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:19:14.351 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:37232 10 6452 1 2025-11-21 07:16:01.445 00:05:04.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 07:19:55.206 00:00:10.364 TCP 23.104.0.1:49386 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:16:01.443 00:05:04.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 07:20:14.535 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56792 10 6452 1 2025-11-21 07:20:41.351 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 07:20:41.165 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 07:20:55.612 00:00:10.362 TCP 23.104.0.1:32926 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:21:14.709 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38026 10 6452 1 2025-11-21 07:21:56.011 00:00:10.366 TCP 23.104.0.1:58192 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:22:14.932 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:44374 10 6452 1 2025-11-21 07:22:56.416 00:00:10.366 TCP 23.104.0.1:44008 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:23:15.167 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49868 10 6452 1 2025-11-21 07:23:56.820 00:00:10.327 TCP 23.104.0.1:45388 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:24:15.400 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37928 10 6452 1 2025-11-21 07:24:57.190 00:00:10.369 TCP 23.104.0.1:35054 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:25:15.616 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34410 10 6452 1 2025-11-21 07:25:41.555 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 07:25:41.437 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 07:22:01.446 00:05:04.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 07:22:01.443 00:05:04.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 07:25:57.601 00:00:10.327 TCP 23.104.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:26:15.837 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:59330 12 6556 1 2025-11-21 07:26:57.964 00:00:10.358 TCP 23.104.0.1:45872 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:27:16.078 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55350 10 6452 1 2025-11-21 07:27:58.366 00:00:10.444 TCP 23.104.0.1:55676 -> 1.101.0.1:3000 15 1926 1 2025-11-21 07:28:16.299 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:51814 12 10369 1 2025-11-21 07:28:58.855 00:00:10.379 TCP 23.104.0.1:47078 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:29:16.497 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34778 10 6452 1 2025-11-21 07:29:59.273 00:00:10.363 TCP 23.104.0.1:34808 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:30:16.708 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33822 10 6452 1 2025-11-21 07:30:41.527 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 07:30:41.344 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 07:30:59.679 00:00:10.373 TCP 23.104.0.1:35612 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:31:16.919 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38996 10 6452 1 2025-11-21 07:28:01.450 00:05:04.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 07:28:01.448 00:05:04.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 07:32:00.114 00:00:10.375 TCP 23.104.0.1:51544 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:32:17.134 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42748 10 6452 1 2025-11-21 07:33:00.530 00:00:10.321 TCP 23.104.0.1:43122 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:33:17.356 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:35020 10 6452 1 2025-11-21 07:34:00.897 00:00:10.326 TCP 23.104.0.1:55400 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:34:17.534 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58314 10 6452 1 2025-11-21 07:35:01.262 00:00:10.354 TCP 23.104.0.1:41788 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:35:17.748 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46920 10 6452 1 2025-11-21 07:35:41.655 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 07:35:41.485 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 07:36:01.654 00:00:10.369 TCP 23.104.0.1:54208 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:36:17.955 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56366 10 6452 1 2025-11-21 07:37:02.085 00:00:10.362 TCP 23.104.0.1:57254 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:37:18.181 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:57048 10 6452 1 2025-11-21 07:34:01.449 00:05:04.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 07:34:01.452 00:05:04.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 07:38:02.490 00:00:10.445 TCP 23.104.0.1:47464 -> 1.101.0.1:3000 15 1926 1 2025-11-21 07:38:18.370 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:35158 12 10375 1 2025-11-21 07:39:02.978 00:00:10.368 TCP 23.104.0.1:45730 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:39:18.611 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35422 10 6452 1 2025-11-21 07:40:03.380 00:00:10.366 TCP 23.104.0.1:42426 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:40:18.821 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51284 10 6452 1 2025-11-21 07:40:43.199 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 07:40:42.703 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 07:41:03.780 00:00:10.365 TCP 23.104.0.1:41758 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:41:18.991 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48998 10 6452 1 2025-11-21 07:42:04.185 00:00:10.322 TCP 23.104.0.1:34570 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:42:19.217 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:58142 10 6452 1 2025-11-21 07:43:04.540 00:00:10.359 TCP 23.104.0.1:49162 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:43:19.405 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49474 10 6452 1 2025-11-21 07:40:01.454 00:05:04.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 07:40:01.451 00:05:04.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 07:44:04.940 00:00:19.022 TCP 23.104.0.1:34426 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:44:19.613 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40340 10 6452 1 2025-11-21 07:45:14.002 00:00:10.358 TCP 23.104.0.1:54476 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:45:19.789 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52668 10 6452 1 2025-11-21 07:45:41.656 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 07:45:41.559 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 07:46:14.405 00:00:10.362 TCP 23.104.0.1:40794 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:46:20.013 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32874 10 6452 1 2025-11-21 07:47:14.805 00:00:10.366 TCP 23.104.0.1:39418 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:47:20.238 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56080 10 6452 1 2025-11-21 07:48:15.210 00:00:10.365 TCP 23.104.0.1:59276 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:48:20.455 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43244 10 6452 1 2025-11-21 07:49:15.616 00:00:10.369 TCP 23.104.0.1:55054 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:49:20.667 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36798 10 6452 1 2025-11-21 07:46:01.452 00:05:04.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 07:46:01.456 00:05:04.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 07:50:16.018 00:00:10.360 TCP 23.104.0.1:41408 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:50:20.886 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47548 10 6452 1 2025-11-21 07:50:41.966 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 07:50:42.045 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 07:51:16.417 00:00:10.328 TCP 23.104.0.1:42988 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:51:21.089 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42826 10 6452 1 2025-11-21 07:52:16.780 00:00:10.368 TCP 23.104.0.1:53236 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:52:21.304 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51582 10 6452 1 2025-11-21 07:53:17.187 00:00:10.369 TCP 23.104.0.1:39460 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:53:21.516 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42348 10 6452 1 2025-11-21 07:54:17.588 00:00:10.368 TCP 23.104.0.1:42982 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:54:21.731 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58152 10 6452 1 2025-11-21 07:55:17.995 00:00:10.360 TCP 23.104.0.1:49126 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:55:21.945 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:43500 10 6452 1 2025-11-21 07:55:42.018 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 07:55:42.085 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 07:52:01.465 00:05:04.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 07:52:01.462 00:05:04.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 07:56:18.396 00:00:10.323 TCP 23.104.0.1:33256 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:56:22.141 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56016 10 6452 1 2025-11-21 07:57:18.763 00:00:10.366 TCP 23.104.0.1:50052 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:57:22.355 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53420 10 6452 1 2025-11-21 07:58:19.167 00:00:10.358 TCP 23.104.0.1:51076 -> 1.101.0.1:3000 11 1507 1 2025-11-21 07:58:22.527 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55622 10 6452 1 Summary: total flows: 164, total bytes: 507430, total packets: 1592, avg bps: 1117, avg pps: 0, avg bpp: 318 Time window: 2025-11-21 06:58:01 - 2025-11-21 07:58:32 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0051s User: 0.0010s Wall: 0.0020s flows/second: 80792.3 Runtime: 0.0021s