Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-22 15:59:02.587 00:00:10.321 TCP 23.104.0.1:47172 -> 1.101.0.1:3000 11 1507 1 2025-11-22 15:59:18.721 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6661 1 2025-11-22 16:00:02.945 00:00:10.382 TCP 23.104.0.1:49772 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:00:18.930 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:36314 10 6661 1 2025-11-22 16:01:03.364 00:00:10.364 TCP 23.104.0.1:58530 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:01:20.671 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 16:01:20.600 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 16:01:19.172 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33110 10 6661 1 2025-11-22 15:58:02.287 00:05:04.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 15:58:02.291 00:05:04.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 16:02:03.771 00:00:10.364 TCP 23.104.0.1:55344 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:02:19.397 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57524 10 6661 1 2025-11-22 16:03:04.175 00:00:10.328 TCP 23.104.0.1:44460 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:03:19.577 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45876 10 6661 1 2025-11-22 16:04:04.536 00:00:10.323 TCP 23.104.0.1:34528 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:04:19.800 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50338 10 6661 1 2025-11-22 16:05:04.895 00:00:10.379 TCP 23.104.0.1:50686 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:05:20.013 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44608 10 6661 1 2025-11-22 16:06:05.316 00:00:10.362 TCP 23.104.0.1:57044 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:06:20.432 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 16:06:20.682 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 16:06:20.231 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:35902 10 6661 1 2025-11-22 16:07:05.714 00:00:10.382 TCP 23.104.0.1:43536 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:07:20.431 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45586 10 6661 1 2025-11-22 16:04:02.291 00:05:04.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 16:04:02.290 00:05:04.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 16:08:06.143 00:00:10.369 TCP 23.104.0.1:54258 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:08:20.647 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56616 10 6661 1 2025-11-22 16:09:06.554 00:00:10.400 TCP 23.104.0.1:57456 -> 1.101.0.1:3000 15 1926 1 2025-11-22 16:09:20.874 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51144 12 10578 1 2025-11-22 16:10:06.990 00:00:10.367 TCP 23.104.0.1:33938 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:10:21.087 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38634 10 6661 1 2025-11-22 16:11:20.908 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 16:11:07.397 00:00:10.381 TCP 23.104.0.1:33844 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:11:20.823 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 16:11:21.313 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46162 10 6661 1 2025-11-22 16:12:07.812 00:00:10.367 TCP 23.104.0.1:35522 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:12:21.532 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41580 10 6661 1 2025-11-22 16:13:08.216 00:00:10.363 TCP 23.104.0.1:40688 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:13:21.743 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54414 10 6661 1 2025-11-22 16:10:02.291 00:05:04.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 16:10:02.293 00:05:04.108 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 16:14:08.615 00:00:10.370 TCP 23.104.0.1:51770 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:14:21.965 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52676 12 6765 1 2025-11-22 16:15:09.022 00:00:10.369 TCP 23.104.0.1:38630 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:15:22.182 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34802 10 6661 1 2025-11-22 16:16:20.713 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 16:16:20.850 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 16:16:09.428 00:00:10.325 TCP 23.104.0.1:59746 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:16:22.392 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45326 10 6661 1 2025-11-22 16:17:09.795 00:00:10.367 TCP 23.104.0.1:58866 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:17:22.607 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48332 10 6661 1 2025-11-22 16:18:10.199 00:00:10.368 TCP 23.104.0.1:60956 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:18:22.813 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:54278 10 6661 1 2025-11-22 16:19:10.595 00:00:10.365 TCP 23.104.0.1:53240 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:19:23.055 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35628 10 6661 1 2025-11-22 16:16:02.294 00:05:04.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 16:16:02.290 00:05:04.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 16:20:10.998 00:00:10.327 TCP 23.104.0.1:45464 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:20:23.269 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47278 10 6661 1 2025-11-22 16:21:20.861 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 16:21:11.365 00:00:10.362 TCP 23.104.0.1:48484 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:21:20.973 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 16:21:23.497 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57192 10 6661 1 2025-11-22 16:22:11.765 00:00:10.372 TCP 23.104.0.1:39212 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:22:23.717 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:44814 10 6661 1 2025-11-22 16:23:12.175 00:00:10.367 TCP 23.104.0.1:54038 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:23:23.889 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46840 10 6661 1 2025-11-22 16:24:12.592 00:00:10.367 TCP 23.104.0.1:43192 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:24:24.115 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49364 10 6661 1 2025-11-22 16:25:13.003 00:00:10.367 TCP 23.104.0.1:34898 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:25:24.336 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58324 10 6661 1 2025-11-22 16:22:02.295 00:05:04.109 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 16:22:02.293 00:05:04.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 16:26:21.040 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 16:26:21.414 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 16:26:13.439 00:00:10.365 TCP 23.104.0.1:45930 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:26:24.541 00:00:10.745 TCP 1.101.0.1:3000 -> 22.102.0.1:40216 10 6661 1 2025-11-22 16:27:13.843 00:00:10.350 TCP 23.104.0.1:58526 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:27:25.328 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47316 10 6661 1 2025-11-22 16:28:14.230 00:00:10.363 TCP 23.104.0.1:52448 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:28:25.536 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60264 10 6661 1 2025-11-22 16:29:14.625 00:00:10.443 TCP 23.104.0.1:35078 -> 1.101.0.1:3000 15 1926 1 2025-11-22 16:29:25.764 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:45152 12 10369 1 2025-11-22 16:30:15.107 00:00:10.326 TCP 23.104.0.1:45276 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:30:25.969 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:40250 10 6452 1 2025-11-22 16:31:21.096 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 16:31:20.871 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 16:31:15.467 00:00:10.327 TCP 23.104.0.1:41764 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:31:26.164 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:47436 10 6452 1 2025-11-22 16:28:02.293 00:05:04.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 16:28:02.296 00:05:04.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 16:32:15.833 00:00:10.606 TCP 23.104.0.1:51260 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:32:26.426 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:37876 11 6504 1 2025-11-22 16:33:16.475 00:00:10.363 TCP 23.104.0.1:43684 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:33:26.706 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59662 10 6452 1 2025-11-22 16:34:16.874 00:00:10.366 TCP 23.104.0.1:33052 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:34:26.920 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:37502 10 6452 1 2025-11-22 16:35:17.278 00:00:10.363 TCP 23.104.0.1:42242 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:35:27.121 00:00:10.358 TCP 1.101.0.1:3000 -> 22.102.0.1:37978 10 6452 1 2025-11-22 16:36:21.376 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 16:36:21.023 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 16:36:17.685 00:00:10.366 TCP 23.104.0.1:36014 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:36:27.514 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39820 10 6452 1 2025-11-22 16:37:18.107 00:00:10.370 TCP 23.104.0.1:56130 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:37:27.723 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49938 10 6452 1 2025-11-22 16:34:02.297 00:05:04.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 16:34:02.293 00:05:04.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 16:38:18.517 00:00:10.368 TCP 23.104.0.1:32982 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:38:27.932 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42816 10 6452 1 2025-11-22 16:39:18.916 00:00:10.365 TCP 23.104.0.1:35740 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:39:28.168 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44534 10 6452 1 2025-11-22 16:40:19.311 00:00:10.325 TCP 23.104.0.1:54264 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:40:28.382 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45706 10 6452 1 2025-11-22 16:41:21.541 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 16:41:21.408 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 16:41:19.687 00:00:10.380 TCP 23.104.0.1:53256 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:41:28.597 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47438 10 6452 1 2025-11-22 16:42:20.106 00:00:10.326 TCP 23.104.0.1:40630 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:42:28.813 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:38824 10 6452 1 2025-11-22 16:43:20.474 00:00:10.323 TCP 23.104.0.1:39334 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:43:28.985 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:45444 10 6452 1 2025-11-22 16:40:02.298 00:05:04.111 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 16:40:02.297 00:05:04.115 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 16:44:20.834 00:00:10.341 TCP 23.104.0.1:45058 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:44:29.218 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50816 10 6452 1 2025-11-22 16:45:21.211 00:00:10.363 TCP 23.104.0.1:52376 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:45:29.442 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47120 10 6452 1 2025-11-22 16:46:21.251 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 16:46:21.407 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 16:46:21.608 00:00:10.360 TCP 23.104.0.1:59482 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:46:29.669 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55450 10 6452 1 2025-11-22 16:47:22.009 00:00:10.324 TCP 23.104.0.1:35856 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:47:29.897 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57000 10 6452 1 2025-11-22 16:48:22.375 00:00:10.365 TCP 23.104.0.1:44590 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:48:30.123 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43942 10 6452 1 2025-11-22 16:49:22.778 00:00:10.373 TCP 23.104.0.1:39576 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:49:30.336 00:00:11.552 TCP 1.101.0.1:3000 -> 22.102.0.1:53772 10 6452 1 2025-11-22 16:46:02.300 00:05:04.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 16:46:02.296 00:05:04.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 16:50:23.190 00:00:10.366 TCP 23.104.0.1:37584 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:50:31.929 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:47076 10 6452 1 2025-11-22 16:51:21.343 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 16:51:21.620 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 16:51:23.599 00:00:10.369 TCP 23.104.0.1:46282 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:51:32.168 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57730 10 6452 1 2025-11-22 16:52:24.009 00:00:10.325 TCP 23.104.0.1:37234 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:52:32.383 00:00:11.084 TCP 1.101.0.1:3000 -> 22.102.0.1:60796 10 6452 1 2025-11-22 16:53:24.370 00:00:10.371 TCP 23.104.0.1:40712 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:53:33.507 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60498 10 6452 1 2025-11-22 16:54:24.779 00:00:10.364 TCP 23.104.0.1:55538 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:54:33.717 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40032 10 6452 1 2025-11-22 16:55:25.179 00:00:10.400 TCP 23.104.0.1:44132 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:55:33.930 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:56412 10 6452 1 2025-11-22 16:52:02.301 00:05:04.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-22 16:52:02.299 00:05:04.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-22 16:56:21.859 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-22 16:56:21.764 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-22 16:56:25.629 00:00:10.410 TCP 23.104.0.1:43344 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:56:34.121 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42490 10 6452 1 2025-11-22 16:57:26.109 00:00:10.374 TCP 23.104.0.1:32982 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:57:34.337 00:00:10.283 TCP 1.101.0.1:3000 -> 22.102.0.1:42592 10 6452 1 2025-11-22 16:58:26.522 00:00:10.374 TCP 23.104.0.1:42404 -> 1.101.0.1:3000 11 1507 1 2025-11-22 16:58:34.662 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38570 10 6452 1 Summary: total flows: 164, total bytes: 513446, total packets: 1587, avg bps: 1127, avg pps: 0, avg bpp: 323 Time window: 2025-11-22 15:58:02 - 2025-11-22 16:58:44 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0035s User: 0.0018s Wall: 0.0015s flows/second: 108684.8 Runtime: 0.0015s