Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-01 20:58:47.623 00:00:10.380 TCP 23.104.0.1:40898 -> 1.101.0.1:3000 11 1507 1 2025-12-01 20:55:06.350 00:05:04.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 20:55:06.348 00:05:04.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 20:59:03.004 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55252 10 6452 1 2025-12-01 20:59:48.091 00:00:10.363 TCP 23.104.0.1:52432 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:00:03.235 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47466 10 6452 1 2025-12-01 21:00:46.876 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 21:00:46.807 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 21:00:48.495 00:00:10.327 TCP 23.104.0.1:37558 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:01:03.451 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59436 10 6452 1 2025-12-01 21:01:48.861 00:00:10.370 TCP 23.104.0.1:54556 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:02:03.669 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54716 10 6452 1 2025-12-01 21:02:49.279 00:00:10.367 TCP 23.104.0.1:57368 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:03:03.886 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54006 10 6452 1 2025-12-01 21:03:49.688 00:00:10.381 TCP 23.104.0.1:51316 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:04:04.107 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46816 10 6452 1 2025-12-01 21:04:50.115 00:00:10.369 TCP 23.104.0.1:42884 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:01:06.353 00:05:04.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 21:01:06.351 00:05:04.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 21:05:04.328 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41600 10 6452 1 2025-12-01 21:05:46.794 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 21:05:46.503 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 21:05:50.516 00:00:10.323 TCP 23.104.0.1:51282 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:06:04.540 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60444 10 6452 1 2025-12-01 21:06:50.877 00:00:10.367 TCP 23.104.0.1:58618 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:07:04.764 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53842 10 6452 1 2025-12-01 21:07:51.298 00:00:10.365 TCP 23.104.0.1:39948 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:08:04.978 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35266 10 6452 1 2025-12-01 21:08:51.702 00:00:10.370 TCP 23.104.0.1:39032 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:09:05.204 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34150 10 6452 1 2025-12-01 21:09:52.111 00:00:10.366 TCP 23.104.0.1:37068 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:10:05.420 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35518 10 6452 1 2025-12-01 21:10:46.931 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 21:10:46.950 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 21:10:52.517 00:00:10.363 TCP 23.104.0.1:54606 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:07:06.355 00:05:04.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 21:11:05.642 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57826 10 6452 1 2025-12-01 21:07:06.355 00:05:04.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 21:11:52.916 00:00:10.398 TCP 23.104.0.1:37906 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:12:05.863 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50108 10 6452 1 2025-12-01 21:12:53.353 00:00:10.439 TCP 23.104.0.1:55378 -> 1.101.0.1:3000 15 1926 1 2025-12-01 21:13:06.093 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:34468 12 10375 1 2025-12-01 21:13:53.830 00:00:10.389 TCP 23.104.0.1:37082 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:14:06.291 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57698 10 6452 1 2025-12-01 21:14:54.259 00:00:10.367 TCP 23.104.0.1:44654 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:15:06.465 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45910 10 6452 1 2025-12-01 21:15:46.870 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 21:15:46.707 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 21:15:54.665 00:00:10.322 TCP 23.104.0.1:39426 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:16:06.708 00:00:10.754 TCP 1.101.0.1:3000 -> 22.102.0.1:47038 10 6452 1 2025-12-01 21:16:55.027 00:00:10.319 TCP 23.104.0.1:38394 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:13:06.362 00:05:04.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 21:13:06.359 00:05:04.798 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 21:17:07.501 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41506 10 6452 1 2025-12-01 21:17:55.386 00:00:10.377 TCP 23.104.0.1:32852 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:18:07.715 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35950 10 6452 1 2025-12-01 21:18:55.802 00:00:10.373 TCP 23.104.0.1:45448 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:19:07.926 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:48716 10 6452 1 2025-12-01 21:19:56.211 00:00:10.366 TCP 23.104.0.1:56292 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:20:08.171 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43552 10 6452 1 2025-12-01 21:20:46.932 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 21:20:47.115 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 21:20:56.615 00:00:10.321 TCP 23.104.0.1:58808 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:21:08.397 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53332 10 6452 1 2025-12-01 21:21:56.973 00:00:11.501 TCP 23.104.0.1:52176 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:22:08.616 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59384 10 6452 1 2025-12-01 21:19:06.364 00:05:04.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 21:22:58.509 00:00:10.363 TCP 23.104.0.1:51796 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:19:06.362 00:05:04.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 21:23:08.830 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52114 10 6452 1 2025-12-01 21:23:58.912 00:00:10.366 TCP 23.104.0.1:34394 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:24:09.080 00:00:10.365 TCP 1.101.0.1:3000 -> 22.102.0.1:38316 10 6452 1 2025-12-01 21:24:59.317 00:00:10.381 TCP 23.104.0.1:41696 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:25:09.486 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39022 10 6452 1 2025-12-01 21:25:47.203 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 21:25:47.257 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 21:25:59.729 00:00:10.367 TCP 23.104.0.1:48726 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:26:09.717 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55062 10 6452 1 2025-12-01 21:27:00.137 00:00:10.372 TCP 23.104.0.1:43520 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:27:09.928 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:55132 10 6452 1 2025-12-01 21:28:00.542 00:00:10.361 TCP 23.104.0.1:54446 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:28:10.162 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52108 10 6452 1 2025-12-01 21:25:06.363 00:05:04.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 21:29:00.944 00:00:10.342 TCP 23.104.0.1:59540 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:25:06.363 00:05:04.799 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 21:29:10.385 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54112 10 6452 1 2025-12-01 21:30:01.326 00:00:10.390 TCP 23.104.0.1:45626 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:30:10.594 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60028 10 6452 1 2025-12-01 21:30:46.923 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 21:30:47.345 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 21:31:01.763 00:00:10.381 TCP 23.104.0.1:36230 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:31:10.804 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55782 10 6452 1 2025-12-01 21:32:02.189 00:00:10.367 TCP 23.104.0.1:55954 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:32:11.023 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59996 10 6452 1 2025-12-01 21:33:02.589 00:00:10.370 TCP 23.104.0.1:45686 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:33:11.233 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45208 10 6452 1 2025-12-01 21:34:03.001 00:00:10.368 TCP 23.104.0.1:50050 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:34:11.444 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59772 10 6452 1 2025-12-01 21:31:06.369 00:05:04.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 21:31:06.366 00:05:04.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 21:35:03.406 00:00:10.328 TCP 23.104.0.1:56958 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:35:11.660 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45110 10 6452 1 2025-12-01 21:35:47.337 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 21:35:47.392 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 21:36:03.770 00:00:10.326 TCP 23.104.0.1:59082 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:36:11.878 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33080 10 6452 1 2025-12-01 21:37:04.134 00:00:10.374 TCP 23.104.0.1:56838 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:37:12.097 00:00:10.320 TCP 1.101.0.1:3000 -> 22.102.0.1:39554 10 6452 1 2025-12-01 21:38:04.546 00:00:10.361 TCP 23.104.0.1:43606 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:38:12.464 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42146 10 6452 1 2025-12-01 21:39:04.946 00:00:10.328 TCP 23.104.0.1:36374 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:39:12.686 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:54158 10 6452 1 2025-12-01 21:40:05.310 00:00:10.385 TCP 23.104.0.1:56246 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:40:12.913 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50542 10 6452 1 2025-12-01 21:40:47.627 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 21:40:47.717 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 21:37:06.370 00:05:04.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 21:37:06.373 00:05:04.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 21:41:05.706 00:00:10.345 TCP 23.104.0.1:37302 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:41:13.125 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42414 10 6452 1 2025-12-01 21:42:06.105 00:00:10.995 TCP 23.104.0.1:47294 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:42:13.342 00:00:10.723 TCP 1.101.0.1:3000 -> 22.102.0.1:41620 10 6452 1 2025-12-01 21:43:07.143 00:00:10.365 TCP 23.104.0.1:57548 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:43:14.110 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52414 10 6452 1 2025-12-01 21:44:07.548 00:00:10.360 TCP 23.104.0.1:39066 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:44:14.328 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57008 10 6452 1 2025-12-01 21:45:07.952 00:00:10.365 TCP 23.104.0.1:59778 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:45:14.551 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42060 10 6452 1 2025-12-01 21:45:47.441 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 21:45:47.367 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 21:46:08.355 00:00:10.367 TCP 23.104.0.1:42498 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:46:14.776 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60090 10 6452 1 2025-12-01 21:43:06.370 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 21:43:06.374 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 21:47:08.770 00:00:11.140 TCP 23.104.0.1:42960 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:47:14.994 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:48972 11 6504 1 2025-12-01 21:48:09.950 00:00:10.366 TCP 23.104.0.1:43584 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:48:15.267 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37730 10 6452 1 2025-12-01 21:49:10.359 00:00:10.365 TCP 23.104.0.1:51572 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:49:15.513 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43890 10 6452 1 2025-12-01 21:50:10.759 00:00:10.374 TCP 23.104.0.1:47000 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:50:15.733 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57758 10 6452 1 2025-12-01 21:50:47.560 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 21:50:47.721 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 21:51:11.174 00:00:10.328 TCP 23.104.0.1:60836 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:51:15.953 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:45212 12 6556 1 2025-12-01 21:52:11.543 00:00:10.359 TCP 23.104.0.1:44012 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:52:16.180 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46574 10 6452 1 2025-12-01 21:49:06.373 00:05:04.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-01 21:49:06.373 00:05:04.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-01 21:53:11.938 00:00:10.378 TCP 23.104.0.1:49816 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:53:16.393 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44370 10 6452 1 2025-12-01 21:54:12.359 00:00:10.364 TCP 23.104.0.1:49706 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:54:16.617 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52010 10 6452 1 2025-12-01 21:55:12.764 00:00:10.331 TCP 23.104.0.1:36782 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:55:16.839 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48320 10 6452 1 2025-12-01 21:55:47.792 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-01 21:55:47.633 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-01 21:56:13.133 00:00:10.374 TCP 23.104.0.1:43862 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:56:17.080 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45916 10 6452 1 2025-12-01 21:57:13.548 00:00:10.362 TCP 23.104.0.1:49448 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:57:17.300 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44884 10 6452 1 2025-12-01 21:58:13.947 00:00:10.362 TCP 23.104.0.1:37854 -> 1.101.0.1:3000 11 1507 1 2025-12-01 21:58:17.522 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60068 10 6452 1 Summary: total flows: 164, total bytes: 502846, total packets: 1581, avg bps: 1058, avg pps: 0, avg bpp: 318 Time window: 2025-12-01 20:55:06 - 2025-12-01 21:58:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0030s User: 0.0023s Wall: 0.0021s flows/second: 78202.1 Runtime: 0.0021s