Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-02 21:59:20.102 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37220 10 6452 1 2025-08-02 21:59:26.774 00:00:10.369 TCP 23.104.0.1:48594 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:00:20.317 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42114 10 6452 1 2025-08-02 22:00:27.183 00:00:10.366 TCP 23.104.0.1:46302 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:01:20.535 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:60706 10 6452 1 2025-08-02 22:01:27.585 00:00:10.365 TCP 23.104.0.1:56904 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:02:23.873 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 22:02:23.722 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 22:02:20.714 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35084 10 6452 1 2025-08-02 22:02:27.988 00:00:10.324 TCP 23.104.0.1:56314 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:03:20.940 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:39406 10 6452 1 2025-08-02 22:03:28.352 00:00:10.369 TCP 23.104.0.1:34152 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:04:21.174 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47856 10 6452 1 2025-08-02 22:04:28.759 00:00:10.381 TCP 23.104.0.1:38340 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:00:05.444 00:06:00.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 22:00:05.443 00:06:00.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 22:05:21.385 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41532 10 6452 1 2025-08-02 22:05:29.183 00:00:10.377 TCP 23.104.0.1:47700 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:06:21.595 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56216 10 6452 1 2025-08-02 22:06:29.602 00:00:10.362 TCP 23.104.0.1:47638 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:07:23.566 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 22:07:23.774 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 22:07:21.807 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35772 10 6452 1 2025-08-02 22:07:30.004 00:00:10.326 TCP 23.104.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:08:22.027 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:53178 12 10367 1 2025-08-02 22:08:30.372 00:00:10.446 TCP 23.104.0.1:60344 -> 1.101.0.1:3000 15 1926 1 2025-08-02 22:09:22.265 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43960 10 6452 1 2025-08-02 22:09:30.852 00:00:10.389 TCP 23.104.0.1:34728 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:10:22.478 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56534 10 6452 1 2025-08-02 22:10:31.272 00:00:10.365 TCP 23.104.0.1:60864 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:11:22.695 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53444 10 6452 1 2025-08-02 22:11:31.678 00:00:10.373 TCP 23.104.0.1:48916 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:07:05.447 00:06:00.104 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 22:07:05.443 00:06:00.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 22:12:24.007 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 22:12:23.790 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 22:12:22.909 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52200 10 6452 1 2025-08-02 22:12:32.108 00:00:10.367 TCP 23.104.0.1:48946 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:13:23.126 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:32924 10 6452 1 2025-08-02 22:13:32.516 00:00:10.328 TCP 23.104.0.1:50882 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:14:23.351 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44504 10 6452 1 2025-08-02 22:14:32.886 00:00:10.381 TCP 23.104.0.1:39478 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:15:23.566 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44310 10 6452 1 2025-08-02 22:15:33.299 00:00:10.365 TCP 23.104.0.1:46968 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:16:23.778 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59844 10 6452 1 2025-08-02 22:16:33.700 00:00:10.366 TCP 23.104.0.1:58102 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:17:23.820 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 22:17:23.687 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 22:17:23.994 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43672 10 6452 1 2025-08-02 22:17:34.108 00:00:10.334 TCP 23.104.0.1:34890 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:18:24.215 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43086 10 6452 1 2025-08-02 22:18:34.482 00:00:10.360 TCP 23.104.0.1:56408 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:14:05.446 00:06:00.113 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 22:14:05.447 00:06:00.107 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 22:19:24.425 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52592 10 6452 1 2025-08-02 22:19:34.897 00:00:10.348 TCP 23.104.0.1:59398 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:20:24.638 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59630 10 6452 1 2025-08-02 22:20:35.287 00:00:10.366 TCP 23.104.0.1:39418 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:21:24.842 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59908 10 6452 1 2025-08-02 22:21:35.699 00:00:10.367 TCP 23.104.0.1:35372 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:22:24.194 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 22:22:24.041 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 22:22:25.084 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55532 10 6452 1 2025-08-02 22:22:36.116 00:00:10.364 TCP 23.104.0.1:44232 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:23:25.299 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:50950 10 6452 1 2025-08-02 22:23:36.525 00:00:10.363 TCP 23.104.0.1:56032 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:24:25.491 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33696 10 6452 1 2025-08-02 22:24:36.928 00:00:10.388 TCP 23.104.0.1:54770 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:25:25.701 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53440 10 6452 1 2025-08-02 22:25:37.354 00:00:10.365 TCP 23.104.0.1:40892 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:21:05.448 00:06:00.110 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 22:21:05.447 00:06:00.114 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 22:26:25.916 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57576 10 6452 1 2025-08-02 22:26:37.758 00:00:10.387 TCP 23.104.0.1:40110 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:27:23.993 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 22:27:24.168 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 22:27:26.129 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39940 10 6452 1 2025-08-02 22:27:38.207 00:00:10.362 TCP 23.104.0.1:38292 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:28:26.344 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46466 10 6452 1 2025-08-02 22:28:38.604 00:00:10.322 TCP 23.104.0.1:52006 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:29:26.520 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35444 10 6452 1 2025-08-02 22:29:38.968 00:00:10.379 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:30:26.691 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:58910 10 6452 1 2025-08-02 22:30:39.389 00:00:10.361 TCP 23.104.0.1:54404 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:31:26.863 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60162 10 6452 1 2025-08-02 22:31:39.788 00:00:10.368 TCP 23.104.0.1:38600 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:32:24.201 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 22:32:24.445 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 22:32:27.086 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42524 10 6452 1 2025-08-02 22:32:40.194 00:00:10.364 TCP 23.104.0.1:38074 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:28:05.446 00:06:00.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 22:28:05.450 00:06:00.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 22:33:27.294 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50138 10 6452 1 2025-08-02 22:33:40.599 00:00:10.369 TCP 23.104.0.1:58008 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:34:27.508 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45990 10 6452 1 2025-08-02 22:34:41.011 00:00:10.366 TCP 23.104.0.1:34320 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:35:27.679 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56092 10 6452 1 2025-08-02 22:35:41.432 00:00:10.370 TCP 23.104.0.1:41972 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:36:27.891 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:44882 10 6452 1 2025-08-02 22:36:41.839 00:00:10.381 TCP 23.104.0.1:57692 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:37:24.230 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 22:37:24.546 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 22:37:28.086 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57390 10 6452 1 2025-08-02 22:37:42.263 00:00:10.324 TCP 23.104.0.1:43436 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:38:28.318 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55616 10 6452 1 2025-08-02 22:38:42.635 00:00:10.365 TCP 23.104.0.1:59222 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:39:28.537 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60864 10 6452 1 2025-08-02 22:39:43.036 00:00:10.366 TCP 23.104.0.1:33632 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:35:05.447 00:06:00.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 22:35:05.451 00:06:00.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 22:40:28.752 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39998 10 6452 1 2025-08-02 22:40:43.439 00:00:10.364 TCP 23.104.0.1:60968 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:41:28.964 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:51012 10 6452 1 2025-08-02 22:41:43.841 00:00:10.406 TCP 23.104.0.1:48822 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:42:24.732 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 22:42:24.757 00:00:00.010 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 22:42:29.142 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48746 10 6452 1 2025-08-02 22:42:44.286 00:00:10.324 TCP 23.104.0.1:42768 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:43:29.353 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:56958 10 6452 1 2025-08-02 22:43:44.654 00:00:10.363 TCP 23.104.0.1:54968 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:44:29.521 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54910 10 6452 1 2025-08-02 22:44:45.082 00:00:10.363 TCP 23.104.0.1:43788 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:45:29.730 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54874 10 6452 1 2025-08-02 22:45:45.488 00:00:10.373 TCP 23.104.0.1:60460 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:46:29.946 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:60744 10 6452 1 2025-08-02 22:46:45.899 00:00:10.371 TCP 23.104.0.1:48576 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:42:05.454 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 22:42:05.451 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 22:47:24.574 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 22:47:24.510 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 22:47:30.143 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49024 10 6452 1 2025-08-02 22:47:46.305 00:00:10.366 TCP 23.104.0.1:48816 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:48:30.361 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36696 10 6452 1 2025-08-02 22:48:46.706 00:00:10.381 TCP 23.104.0.1:33810 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:49:30.571 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36972 10 6452 1 2025-08-02 22:49:47.128 00:00:10.364 TCP 23.104.0.1:39830 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:50:30.743 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33286 10 6452 1 2025-08-02 22:50:47.530 00:00:10.376 TCP 23.104.0.1:55560 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:51:30.952 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52282 10 6452 1 2025-08-02 22:51:47.946 00:00:10.382 TCP 23.104.0.1:36602 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:52:24.769 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 22:52:24.735 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 22:52:31.187 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48054 10 6452 1 2025-08-02 22:52:48.374 00:00:10.331 TCP 23.104.0.1:54912 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:53:31.397 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47946 10 6452 1 2025-08-02 22:53:48.756 00:00:10.389 TCP 23.104.0.1:59928 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:49:05.463 00:06:00.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-02 22:49:05.466 00:06:00.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-02 22:54:31.609 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51036 10 6452 1 2025-08-02 22:54:49.188 00:00:10.369 TCP 23.104.0.1:38484 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:55:31.822 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55612 10 6452 1 2025-08-02 22:55:49.589 00:00:10.364 TCP 23.104.0.1:52482 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:56:32.040 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59054 10 6452 1 2025-08-02 22:56:49.997 00:00:10.365 TCP 23.104.0.1:44076 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:57:25.029 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-02 22:57:25.343 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-02 22:57:32.250 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33752 10 6452 1 2025-08-02 22:57:50.400 00:00:10.376 TCP 23.104.0.1:38314 -> 1.101.0.1:3000 11 1507 1 2025-08-02 22:58:32.460 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47324 10 6452 1 Summary: total flows: 159, total bytes: 500191, total packets: 1551, avg bps: 1123, avg pps: 0, avg bpp: 322 Time window: 2025-08-02 21:59:20 - 2025-08-02 22:58:42 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0036s User: 0.0007s Wall: 0.0025s flows/second: 63194.8 Runtime: 0.0025s