Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 18:58:43.184 00:00:10.345 TCP 23.104.0.1:40420 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:59:15.683 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58358 10 6452 1 2025-11-21 18:59:43.583 00:00:10.365 TCP 23.104.0.1:55728 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:00:15.906 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51474 10 6452 1 2025-11-21 19:00:56.247 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 19:00:43.988 00:00:10.371 TCP 23.104.0.1:56676 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:00:56.299 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 19:01:16.126 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47290 10 6452 1 2025-11-21 19:01:44.394 00:00:10.367 TCP 23.104.0.1:46222 -> 1.101.0.1:3000 11 1507 1 2025-11-21 18:58:01.751 00:05:04.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 18:58:01.747 00:05:04.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 19:02:16.343 00:00:10.825 TCP 1.101.0.1:3000 -> 22.102.0.1:52330 10 6452 1 2025-11-21 19:02:44.800 00:00:10.441 TCP 23.104.0.1:48618 -> 1.101.0.1:3000 15 1926 1 2025-11-21 19:03:17.208 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:45664 12 10369 1 2025-11-21 19:03:45.280 00:00:10.363 TCP 23.104.0.1:59500 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:04:17.441 00:00:10.825 TCP 1.101.0.1:3000 -> 22.102.0.1:57078 10 6452 1 2025-11-21 19:04:45.682 00:00:10.363 TCP 23.104.0.1:42304 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:05:18.308 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:52686 10 6452 1 2025-11-21 19:05:55.551 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 19:05:55.475 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 19:05:46.108 00:00:11.139 TCP 23.104.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:06:18.527 00:00:10.833 TCP 1.101.0.1:3000 -> 22.102.0.1:44506 10 6452 1 2025-11-21 19:06:47.283 00:00:10.329 TCP 23.104.0.1:50898 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:07:19.403 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39180 10 6452 1 2025-11-21 19:07:47.655 00:00:10.367 TCP 23.104.0.1:48392 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:04:01.750 00:05:04.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 19:04:01.753 00:05:04.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 19:08:19.621 00:00:10.263 TCP 1.101.0.1:3000 -> 22.102.0.1:41312 10 6452 1 2025-11-21 19:08:48.064 00:00:10.363 TCP 23.104.0.1:38586 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:09:19.926 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34444 10 6452 1 2025-11-21 19:09:48.466 00:00:10.362 TCP 23.104.0.1:49198 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:10:20.135 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41214 10 6452 1 2025-11-21 19:10:55.584 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 19:10:55.545 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 19:10:48.865 00:00:10.373 TCP 23.104.0.1:33342 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:11:20.361 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57444 10 6452 1 2025-11-21 19:11:49.277 00:00:10.368 TCP 23.104.0.1:58826 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:12:20.577 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47020 10 6452 1 2025-11-21 19:12:49.687 00:00:10.326 TCP 23.104.0.1:57450 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:13:20.795 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47800 10 6452 1 2025-11-21 19:13:50.054 00:00:10.374 TCP 23.104.0.1:59582 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:10:01.752 00:05:04.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 19:10:01.751 00:05:04.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 19:14:21.028 00:00:10.223 TCP 1.101.0.1:3000 -> 22.102.0.1:44720 10 6452 1 2025-11-21 19:14:50.473 00:00:10.366 TCP 23.104.0.1:54350 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:15:21.297 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49060 10 6452 1 2025-11-21 19:15:55.620 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 19:15:55.500 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 19:15:50.881 00:00:10.396 TCP 23.104.0.1:48184 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:16:21.516 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:53220 10 6452 1 2025-11-21 19:16:51.348 00:00:10.521 TCP 23.104.0.1:53270 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:17:21.745 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41442 10 6452 1 2025-11-21 19:17:51.917 00:00:10.369 TCP 23.104.0.1:43164 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:18:21.964 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:56540 10 6452 1 2025-11-21 19:18:52.326 00:00:10.369 TCP 23.104.0.1:53982 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:19:22.211 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34034 10 6452 1 2025-11-21 19:16:01.749 00:05:04.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 19:19:52.734 00:00:10.370 TCP 23.104.0.1:45900 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:16:01.753 00:05:04.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 19:20:22.419 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43570 10 6452 1 2025-11-21 19:20:55.701 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 19:20:55.932 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 19:20:53.146 00:00:10.366 TCP 23.104.0.1:46008 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:21:22.641 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:46720 10 6452 1 2025-11-21 19:21:53.547 00:00:10.363 TCP 23.104.0.1:46942 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:22:22.821 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54382 10 6452 1 2025-11-21 19:22:53.951 00:00:10.361 TCP 23.104.0.1:52308 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:23:23.001 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34300 10 6452 1 2025-11-21 19:23:54.350 00:00:10.365 TCP 23.104.0.1:56552 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:24:23.227 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:59052 10 6452 1 2025-11-21 19:24:54.753 00:00:10.335 TCP 23.104.0.1:55004 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:25:23.413 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32858 10 6452 1 2025-11-21 19:25:56.003 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 19:25:55.798 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 19:22:01.754 00:05:04.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 19:25:55.132 00:00:10.364 TCP 23.104.0.1:47754 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:22:01.750 00:05:04.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 19:26:23.627 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41100 10 6452 1 2025-11-21 19:26:55.538 00:00:10.365 TCP 23.104.0.1:58672 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:27:23.842 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52454 10 6452 1 2025-11-21 19:27:55.937 00:00:10.376 TCP 23.104.0.1:47482 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:28:24.082 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34786 10 6452 1 2025-11-21 19:28:56.355 00:00:10.328 TCP 23.104.0.1:35616 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:29:24.300 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35390 10 6452 1 2025-11-21 19:29:56.728 00:00:10.376 TCP 23.104.0.1:40128 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:30:24.520 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50660 10 6452 1 2025-11-21 19:30:55.701 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 19:30:55.990 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 19:30:57.150 00:00:10.368 TCP 23.104.0.1:56574 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:31:24.736 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41020 10 6452 1 2025-11-21 19:28:01.753 00:05:04.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 19:28:01.753 00:05:04.149 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 19:31:57.556 00:00:10.365 TCP 23.104.0.1:41812 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:32:24.958 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37012 10 6452 1 2025-11-21 19:32:57.956 00:00:10.365 TCP 23.104.0.1:49994 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:33:25.187 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48044 10 6452 1 2025-11-21 19:33:58.359 00:00:10.368 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:34:25.406 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:48418 10 6452 1 2025-11-21 19:34:58.765 00:00:10.328 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:35:25.668 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51658 10 6452 1 2025-11-21 19:35:55.655 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 19:35:55.944 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 19:35:59.137 00:00:10.345 TCP 23.104.0.1:43648 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:36:25.879 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45168 10 6452 1 2025-11-21 19:36:59.527 00:00:10.328 TCP 23.104.0.1:45328 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:37:26.139 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53870 10 6452 1 2025-11-21 19:34:01.758 00:05:04.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 19:34:01.755 00:05:04.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 19:37:59.893 00:00:10.380 TCP 23.104.0.1:37660 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:38:26.315 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33978 10 6452 1 2025-11-21 19:39:00.309 00:00:10.364 TCP 23.104.0.1:41942 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:39:26.527 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40394 10 6452 1 2025-11-21 19:40:00.707 00:00:10.387 TCP 23.104.0.1:48690 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:40:26.739 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60054 10 6452 1 2025-11-21 19:40:56.262 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 19:40:56.199 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 19:41:01.138 00:00:10.361 TCP 23.104.0.1:55048 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:41:26.954 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:51392 10 6452 1 2025-11-21 19:42:01.541 00:00:10.366 TCP 23.104.0.1:37740 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:42:27.187 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33890 10 6452 1 2025-11-21 19:43:01.945 00:00:10.792 TCP 23.104.0.1:36820 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:43:27.403 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41778 10 6452 1 2025-11-21 19:40:01.756 00:05:04.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 19:40:01.758 00:05:04.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 19:44:02.778 00:00:10.366 TCP 23.104.0.1:36438 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:44:27.622 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36798 10 6452 1 2025-11-21 19:45:03.182 00:00:10.364 TCP 23.104.0.1:57252 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:45:27.846 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40612 10 6452 1 2025-11-21 19:45:56.334 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 19:45:56.252 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 19:46:03.587 00:00:10.371 TCP 23.104.0.1:39880 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:46:28.089 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43090 10 6452 1 2025-11-21 19:47:03.998 00:00:10.366 TCP 23.104.0.1:43012 -> 1.101.0.1:3000 12 1559 1 2025-11-21 19:47:28.317 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38076 10 6452 1 2025-11-21 19:48:04.404 00:00:10.366 TCP 23.104.0.1:50212 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:48:28.523 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57566 10 6452 1 2025-11-21 19:49:04.810 00:00:10.367 TCP 23.104.0.1:50480 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:49:28.758 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37772 10 6452 1 2025-11-21 19:46:01.767 00:05:04.140 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 19:46:01.759 00:05:04.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 19:50:05.216 00:00:10.364 TCP 23.104.0.1:43846 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:50:28.967 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56804 10 6452 1 2025-11-21 19:50:56.187 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 19:50:56.114 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 19:51:05.618 00:00:10.321 TCP 23.104.0.1:52090 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:51:29.187 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35860 10 6452 1 2025-11-21 19:52:05.989 00:00:10.371 TCP 23.104.0.1:60822 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:52:29.396 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52106 10 6452 1 2025-11-21 19:53:06.398 00:00:10.369 TCP 23.104.0.1:60098 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:53:29.605 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41226 10 6452 1 2025-11-21 19:54:06.805 00:00:10.334 TCP 23.104.0.1:52242 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:54:29.817 00:00:10.304 TCP 1.101.0.1:3000 -> 22.102.0.1:54652 10 6452 1 2025-11-21 19:55:07.177 00:00:10.370 TCP 23.104.0.1:35216 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:55:30.162 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:44626 10 6452 1 2025-11-21 19:55:56.550 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 19:55:56.426 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 19:52:01.763 00:05:04.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 19:52:01.766 00:05:04.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 19:56:07.582 00:00:10.367 TCP 23.104.0.1:57388 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:56:30.371 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58784 10 6452 1 2025-11-21 19:57:07.989 00:00:10.366 TCP 23.104.0.1:55370 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:57:30.588 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59608 10 6452 1 2025-11-21 19:58:08.394 00:00:10.370 TCP 23.104.0.1:36628 -> 1.101.0.1:3000 11 1507 1 2025-11-21 19:58:30.802 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:51112 10 6452 1 Summary: total flows: 164, total bytes: 502736, total packets: 1579, avg bps: 1105, avg pps: 0, avg bpp: 318 Time window: 2025-11-21 18:58:01 - 2025-11-21 19:58:40 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0018s Wall: 0.0026s flows/second: 63049.1 Runtime: 0.0026s