Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 12:58:45.610 00:00:10.363 TCP 23.104.0.1:48268 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:58:46.684 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52716 10 6452 1 2025-11-21 12:59:46.016 00:00:10.327 TCP 23.104.0.1:35444 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:59:46.902 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48548 10 6452 1 2025-11-21 13:00:48.628 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 13:00:48.697 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 13:00:46.395 00:00:10.344 TCP 23.104.0.1:38166 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:00:47.118 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41608 10 6452 1 2025-11-21 13:01:47.351 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41496 10 6452 1 2025-11-21 13:01:46.789 00:00:10.371 TCP 23.104.0.1:56690 -> 1.101.0.1:3000 11 1507 1 2025-11-21 12:58:01.602 00:05:04.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 12:58:01.600 00:05:04.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 13:02:47.571 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37160 10 6452 1 2025-11-21 13:02:47.195 00:00:10.364 TCP 23.104.0.1:54354 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:03:47.601 00:00:10.366 TCP 23.104.0.1:49192 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:03:47.800 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44054 10 6452 1 2025-11-21 13:04:48.024 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42890 10 6452 1 2025-11-21 13:04:48.005 00:00:10.984 TCP 23.104.0.1:52114 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:05:48.493 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 13:05:48.240 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 13:05:48.230 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51928 10 6452 1 2025-11-21 13:05:49.027 00:00:10.365 TCP 23.104.0.1:52854 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:06:48.443 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45768 10 6452 1 2025-11-21 13:06:49.438 00:00:10.379 TCP 23.104.0.1:54270 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:07:48.658 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37622 10 6452 1 2025-11-21 13:07:49.860 00:00:10.366 TCP 23.104.0.1:39922 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:04:01.604 00:05:04.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 13:04:01.601 00:05:04.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 13:08:50.263 00:00:10.361 TCP 23.104.0.1:50096 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:08:48.825 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57396 10 6452 1 2025-11-21 13:09:49.047 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47570 10 6452 1 2025-11-21 13:09:50.670 00:00:10.365 TCP 23.104.0.1:50982 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:10:48.268 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 13:10:48.315 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 13:10:51.114 00:00:10.321 TCP 23.104.0.1:57514 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:10:49.217 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34920 10 6452 1 2025-11-21 13:11:51.477 00:00:10.363 TCP 23.104.0.1:49280 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:11:49.389 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38978 10 6452 1 2025-11-21 13:12:49.614 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60356 10 6452 1 2025-11-21 13:12:51.881 00:00:10.389 TCP 23.104.0.1:45872 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:13:49.828 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53550 10 6452 1 2025-11-21 13:13:52.308 00:00:10.365 TCP 23.104.0.1:49220 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:10:01.605 00:05:04.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 13:10:01.604 00:05:04.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 13:14:50.002 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57086 10 6452 1 2025-11-21 13:14:52.716 00:00:10.382 TCP 23.104.0.1:35276 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:15:48.390 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 13:15:48.328 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 13:15:50.210 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36134 10 6452 1 2025-11-21 13:15:53.143 00:00:10.362 TCP 23.104.0.1:38216 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:16:50.424 00:00:10.916 TCP 1.101.0.1:3000 -> 22.102.0.1:43840 10 6452 1 2025-11-21 13:16:53.548 00:00:10.693 TCP 23.104.0.1:44512 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:17:51.373 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40336 10 6452 1 2025-11-21 13:17:54.278 00:00:10.362 TCP 23.104.0.1:58082 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:18:51.587 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58006 10 6452 1 2025-11-21 13:18:54.674 00:00:10.364 TCP 23.104.0.1:38260 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:16:01.608 00:05:04.164 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 13:19:55.104 00:00:10.370 TCP 23.104.0.1:45980 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:19:51.802 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53402 10 6452 1 2025-11-21 13:16:01.605 00:05:04.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 13:20:48.583 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 13:20:48.481 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 13:20:55.513 00:00:10.367 TCP 23.104.0.1:54692 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:20:51.980 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:51160 10 6452 1 2025-11-21 13:21:55.917 00:00:10.344 TCP 23.104.0.1:42244 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:21:52.167 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51340 10 6452 1 2025-11-21 13:22:52.342 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57816 10 6452 1 2025-11-21 13:22:56.298 00:00:10.368 TCP 23.104.0.1:33910 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:23:52.557 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47822 10 6452 1 2025-11-21 13:23:56.704 00:00:10.368 TCP 23.104.0.1:37350 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:24:52.786 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57460 10 6452 1 2025-11-21 13:24:57.112 00:00:10.367 TCP 23.104.0.1:42134 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:25:48.743 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 13:25:48.684 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 13:22:01.610 00:05:04.163 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 13:25:52.997 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49784 10 6452 1 2025-11-21 13:22:01.607 00:05:04.168 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 13:25:57.531 00:00:10.366 TCP 23.104.0.1:52426 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:26:53.224 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57562 10 6452 1 2025-11-21 13:26:57.935 00:00:10.384 TCP 23.104.0.1:58088 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:27:53.449 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:41082 10 6452 1 2025-11-21 13:27:58.361 00:00:10.365 TCP 23.104.0.1:56718 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:28:53.658 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35708 10 6452 1 2025-11-21 13:28:58.767 00:00:10.377 TCP 23.104.0.1:56490 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:29:53.891 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39334 10 6452 1 2025-11-21 13:29:59.181 00:00:10.365 TCP 23.104.0.1:48270 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:30:48.761 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 13:30:48.786 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 13:30:54.112 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60020 10 6452 1 2025-11-21 13:30:59.588 00:00:10.373 TCP 23.104.0.1:33094 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:28:01.607 00:05:04.179 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 13:31:54.323 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42914 10 6452 1 2025-11-21 13:28:01.611 00:05:04.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 13:32:00.010 00:00:10.366 TCP 23.104.0.1:58724 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:32:54.541 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39822 10 6452 1 2025-11-21 13:33:00.423 00:00:10.376 TCP 23.104.0.1:46618 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:33:54.716 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33772 10 6452 1 2025-11-21 13:34:00.836 00:00:10.390 TCP 23.104.0.1:56942 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:34:54.927 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57476 10 6452 1 2025-11-21 13:35:01.269 00:00:10.361 TCP 23.104.0.1:54282 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:35:48.902 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 13:35:48.838 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 13:35:55.167 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58826 10 6452 1 2025-11-21 13:36:01.670 00:00:10.373 TCP 23.104.0.1:54846 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:36:55.382 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52564 10 6452 1 2025-11-21 13:37:02.108 00:00:10.369 TCP 23.104.0.1:42170 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:37:55.553 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41718 10 6452 1 2025-11-21 13:34:01.613 00:05:04.179 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 13:34:01.615 00:05:04.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 13:38:02.513 00:00:10.370 TCP 23.104.0.1:35202 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:38:55.763 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37762 10 6452 1 2025-11-21 13:39:02.920 00:00:10.376 TCP 23.104.0.1:48382 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:39:55.978 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:55572 10 6452 1 2025-11-21 13:40:03.332 00:00:10.365 TCP 23.104.0.1:35478 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:40:48.999 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 13:40:48.716 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 13:40:56.213 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59010 10 6452 1 2025-11-21 13:41:03.734 00:00:10.371 TCP 23.104.0.1:38180 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:41:56.430 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50010 10 6452 1 2025-11-21 13:42:04.140 00:00:10.323 TCP 23.104.0.1:55812 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:42:56.644 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52476 10 6452 1 2025-11-21 13:43:04.502 00:00:10.367 TCP 23.104.0.1:38714 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:40:01.616 00:05:04.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 13:40:01.615 00:05:04.183 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 13:43:56.856 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40174 10 6452 1 2025-11-21 13:44:04.908 00:00:10.367 TCP 23.104.0.1:53812 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:44:57.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45168 10 6452 1 2025-11-21 13:45:05.315 00:00:10.325 TCP 23.104.0.1:43972 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:45:48.970 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 13:45:48.687 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 13:45:57.294 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46170 10 6452 1 2025-11-21 13:46:05.683 00:00:10.330 TCP 23.104.0.1:48298 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:46:57.506 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42802 10 6452 1 2025-11-21 13:47:06.071 00:00:10.361 TCP 23.104.0.1:59220 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:47:57.721 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46138 10 6452 1 2025-11-21 13:48:06.475 00:00:10.370 TCP 23.104.0.1:58774 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:48:57.933 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:39978 10 6452 1 2025-11-21 13:49:06.881 00:00:10.324 TCP 23.104.0.1:43790 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:46:01.618 00:05:04.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 13:46:01.615 00:05:04.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 13:49:58.115 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41500 10 6452 1 2025-11-21 13:50:07.251 00:00:10.369 TCP 23.104.0.1:44440 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:50:49.052 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 13:50:48.943 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 13:50:58.333 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44116 10 6452 1 2025-11-21 13:51:07.658 00:00:10.368 TCP 23.104.0.1:50122 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:51:58.566 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:36894 10 6452 1 2025-11-21 13:52:08.080 00:00:10.363 TCP 23.104.0.1:60308 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:52:58.738 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34472 10 6452 1 2025-11-21 13:53:08.483 00:00:10.368 TCP 23.104.0.1:57072 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:53:58.960 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40914 10 6452 1 2025-11-21 13:54:08.886 00:00:10.372 TCP 23.104.0.1:51834 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:54:59.184 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52248 10 6452 1 2025-11-21 13:55:09.304 00:00:15.160 TCP 23.104.0.1:50866 -> 1.101.0.1:3000 13 1611 1 2025-11-21 13:55:49.227 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 13:55:49.251 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 13:52:01.618 00:05:04.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 13:52:01.616 00:05:04.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 13:55:59.397 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46056 10 6452 1 2025-11-21 13:56:14.507 00:00:10.366 TCP 23.104.0.1:34822 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:56:59.606 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60430 10 6452 1 2025-11-21 13:57:14.912 00:00:10.360 TCP 23.104.0.1:52818 -> 1.101.0.1:3000 11 1507 1 2025-11-21 13:57:59.824 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:36622 10 6452 1 2025-11-21 13:58:15.312 00:00:10.325 TCP 23.104.0.1:43166 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1100, avg pps: 0, avg bpp: 316 Time window: 2025-11-21 12:58:01 - 2025-11-21 13:58:25 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0041s User: 0.0016s Wall: 0.0027s flows/second: 61329.0 Runtime: 0.0027s