Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 10:58:55.260 00:00:10.361 TCP 23.104.0.1:47594 -> 1.101.0.1:3000 11 1507 1 2025-11-21 10:59:19.506 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51374 10 6452 1 2025-11-21 10:59:55.660 00:00:10.368 TCP 23.104.0.1:46146 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:00:19.722 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41458 10 6452 1 2025-11-21 11:00:45.663 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 11:00:45.751 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 11:00:56.091 00:00:10.361 TCP 23.104.0.1:56642 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:01:19.932 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39908 10 6452 1 2025-11-21 10:58:01.561 00:05:04.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 10:58:01.565 00:05:04.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 11:01:56.493 00:00:10.367 TCP 23.104.0.1:42270 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:02:20.147 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40260 10 6452 1 2025-11-21 11:02:56.902 00:00:10.373 TCP 23.104.0.1:51210 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:03:20.363 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59160 10 6452 1 2025-11-21 11:03:57.314 00:00:10.363 TCP 23.104.0.1:38232 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:04:20.575 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33958 10 6452 1 2025-11-21 11:04:57.717 00:00:10.325 TCP 23.104.0.1:54096 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:05:20.788 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42010 10 6452 1 2025-11-21 11:05:46.233 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 11:05:46.008 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 11:05:58.100 00:00:10.365 TCP 23.104.0.1:58078 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:06:21.011 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37542 10 6452 1 2025-11-21 11:06:58.504 00:00:10.373 TCP 23.104.0.1:44674 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:07:21.224 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:54538 10 6452 1 2025-11-21 11:04:01.568 00:05:04.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 11:04:01.566 00:05:04.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 11:07:58.915 00:00:10.364 TCP 23.104.0.1:53176 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:08:21.473 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52890 10 6452 1 2025-11-21 11:08:59.317 00:00:10.318 TCP 23.104.0.1:47306 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:09:21.694 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47996 10 6452 1 2025-11-21 11:09:59.680 00:00:10.370 TCP 23.104.0.1:37424 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:10:21.867 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57354 10 6452 1 2025-11-21 11:10:45.668 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 11:10:45.808 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 11:11:00.103 00:00:10.323 TCP 23.104.0.1:43430 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:11:22.102 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50152 10 6452 1 2025-11-21 11:12:00.463 00:00:10.365 TCP 23.104.0.1:57112 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:12:22.315 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50998 10 6452 1 2025-11-21 11:13:00.864 00:00:10.327 TCP 23.104.0.1:37294 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:13:22.486 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38018 10 6452 1 2025-11-21 11:10:01.569 00:05:04.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 11:10:01.567 00:05:04.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 11:14:01.227 00:00:10.362 TCP 23.104.0.1:56038 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:14:22.698 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:51606 10 6452 1 2025-11-21 11:15:01.629 00:00:10.327 TCP 23.104.0.1:43688 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:15:22.866 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40582 11 6504 1 2025-11-21 11:15:45.891 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 11:15:46.064 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 11:16:01.995 00:00:10.364 TCP 23.104.0.1:48542 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:16:23.107 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47214 10 6452 1 2025-11-21 11:17:02.401 00:00:10.411 TCP 23.104.0.1:41416 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:17:23.324 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56736 10 6452 1 2025-11-21 11:18:02.853 00:00:10.374 TCP 23.104.0.1:43474 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:18:23.534 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51534 10 6452 1 2025-11-21 11:19:03.274 00:00:10.328 TCP 23.104.0.1:49724 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:19:23.754 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59352 10 6452 1 2025-11-21 11:16:01.569 00:05:04.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 11:16:01.567 00:05:04.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 11:20:03.634 00:00:10.362 TCP 23.104.0.1:36470 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:20:23.965 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33808 10 6452 1 2025-11-21 11:20:46.090 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 11:20:45.856 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 11:21:04.037 00:00:10.366 TCP 23.104.0.1:33972 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:21:24.200 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56310 10 6452 1 2025-11-21 11:22:04.444 00:00:10.363 TCP 23.104.0.1:51336 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:22:24.416 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44404 10 6452 1 2025-11-21 11:23:04.847 00:00:10.376 TCP 23.104.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:23:24.629 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51622 10 6452 1 2025-11-21 11:24:05.265 00:00:10.360 TCP 23.104.0.1:44078 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:24:24.843 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55124 10 6452 1 2025-11-21 11:25:05.663 00:00:10.367 TCP 23.104.0.1:56280 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:25:25.078 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56654 10 6452 1 2025-11-21 11:25:46.304 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 11:25:46.150 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 11:22:01.568 00:05:04.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 11:22:01.570 00:05:04.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 11:26:06.093 00:00:10.378 TCP 23.104.0.1:47646 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:26:25.287 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48124 10 6452 1 2025-11-21 11:27:06.509 00:00:10.326 TCP 23.104.0.1:33654 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:27:25.461 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43334 10 6452 1 2025-11-21 11:28:06.874 00:00:10.324 TCP 23.104.0.1:33368 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:28:25.631 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36042 10 6452 1 2025-11-21 11:29:07.232 00:00:10.362 TCP 23.104.0.1:49258 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:29:25.842 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39522 10 6452 1 2025-11-21 11:30:07.630 00:00:10.365 TCP 23.104.0.1:34588 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:30:26.075 00:00:10.663 TCP 1.101.0.1:3000 -> 22.102.0.1:39810 10 6452 1 2025-11-21 11:30:46.170 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 11:30:46.391 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 11:31:08.033 00:00:10.364 TCP 23.104.0.1:55310 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:31:26.776 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34204 10 6452 1 2025-11-21 11:28:01.570 00:05:04.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 11:28:01.573 00:05:04.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 11:32:08.434 00:00:10.366 TCP 23.104.0.1:44060 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:32:26.981 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:53368 10 6452 1 2025-11-21 11:33:08.839 00:00:10.435 TCP 23.104.0.1:45392 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:33:27.212 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52224 10 6452 1 2025-11-21 11:34:09.315 00:00:10.318 TCP 23.104.0.1:49788 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:34:27.428 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:36722 10 6452 1 2025-11-21 11:35:09.671 00:00:10.786 TCP 23.104.0.1:52116 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:35:27.673 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:37016 10 6452 1 2025-11-21 11:35:46.290 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 11:35:46.309 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 11:36:10.489 00:00:10.366 TCP 23.104.0.1:55642 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:36:27.907 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35038 10 6452 1 2025-11-21 11:37:10.895 00:00:10.366 TCP 23.104.0.1:52792 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:37:28.127 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40388 10 6452 1 2025-11-21 11:34:01.573 00:05:04.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 11:34:01.571 00:05:04.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 11:38:11.297 00:00:10.842 TCP 23.104.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:38:28.302 00:00:10.357 TCP 1.101.0.1:3000 -> 22.102.0.1:32892 10 6452 1 2025-11-21 11:39:12.178 00:00:10.365 TCP 23.104.0.1:48642 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:39:28.699 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38454 10 6452 1 2025-11-21 11:40:12.583 00:00:10.362 TCP 23.104.0.1:43120 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:40:28.923 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49642 10 6452 1 2025-11-21 11:40:46.586 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 11:40:46.453 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 11:41:12.997 00:00:10.389 TCP 23.104.0.1:52032 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:41:29.140 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42298 10 6452 1 2025-11-21 11:42:13.428 00:00:10.370 TCP 23.104.0.1:33030 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:42:29.353 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52730 10 6452 1 2025-11-21 11:43:13.832 00:00:10.403 TCP 23.104.0.1:44740 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:43:29.569 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37646 10 6452 1 2025-11-21 11:40:01.575 00:05:04.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 11:40:01.572 00:05:04.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 11:44:14.273 00:00:10.364 TCP 23.104.0.1:60590 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:44:29.784 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42844 10 6452 1 2025-11-21 11:45:14.671 00:00:10.364 TCP 23.104.0.1:35568 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:45:29.997 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48528 10 6452 1 2025-11-21 11:45:46.579 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 11:45:46.668 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 11:46:15.091 00:00:10.366 TCP 23.104.0.1:40546 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:46:30.223 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59554 10 6452 1 2025-11-21 11:47:15.499 00:00:10.364 TCP 23.104.0.1:58584 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:47:30.436 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47108 10 6452 1 2025-11-21 11:48:15.904 00:00:10.367 TCP 23.104.0.1:43802 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:48:30.649 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48244 10 6452 1 2025-11-21 11:49:16.311 00:00:10.708 TCP 23.104.0.1:54574 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:49:30.862 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51662 10 6452 1 2025-11-21 11:46:01.576 00:05:04.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 11:46:01.574 00:05:04.153 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 11:50:17.068 00:00:10.327 TCP 23.104.0.1:54806 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:50:31.091 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:54038 10 6452 1 2025-11-21 11:50:46.626 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 11:50:46.760 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 11:51:17.431 00:00:10.365 TCP 23.104.0.1:45190 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:51:31.287 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60714 10 6452 1 2025-11-21 11:52:17.832 00:00:10.384 TCP 23.104.0.1:51014 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:52:31.500 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60184 10 6452 1 2025-11-21 11:53:18.256 00:00:10.325 TCP 23.104.0.1:60552 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:53:31.717 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57384 10 6452 1 2025-11-21 11:54:18.624 00:00:10.362 TCP 23.104.0.1:37006 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:54:31.954 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43962 12 6556 1 2025-11-21 11:55:19.021 00:00:10.371 TCP 23.104.0.1:44360 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:55:46.775 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 11:55:32.187 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33840 10 6452 1 2025-11-21 11:55:46.803 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 11:52:01.578 00:05:04.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 11:52:01.576 00:05:04.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 11:56:19.432 00:00:10.728 TCP 23.104.0.1:51604 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:56:32.399 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42526 10 6452 1 2025-11-21 11:57:20.198 00:00:10.361 TCP 23.104.0.1:36802 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:57:32.610 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49624 10 6452 1 2025-11-21 11:58:20.595 00:00:10.323 TCP 23.104.0.1:59348 -> 1.101.0.1:3000 11 1507 1 2025-11-21 11:58:32.818 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60092 10 6452 1 Summary: total flows: 164, total bytes: 498504, total packets: 1575, avg bps: 1095, avg pps: 0, avg bpp: 316 Time window: 2025-11-21 10:58:01 - 2025-11-21 11:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0043s User: 0.0011s Wall: 0.0028s flows/second: 57562.0 Runtime: 0.0029s