Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-03 21:59:11.910 00:00:10.371 TCP 23.104.0.1:60302 -> 1.101.0.1:3000 11 1507 1 2025-08-03 21:59:37.439 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57972 10 6452 1 2025-08-03 22:00:12.314 00:00:10.366 TCP 23.104.0.1:54906 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:00:37.610 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45754 10 6452 1 2025-08-03 22:01:12.732 00:00:10.376 TCP 23.104.0.1:49418 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:01:37.828 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53958 10 6452 1 2025-08-03 21:58:05.915 00:05:00.216 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 22:02:13.145 00:00:10.374 TCP 23.104.0.1:60708 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:02:38.067 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53756 10 6452 1 2025-08-03 22:02:52.568 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 22:02:52.733 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 21:59:05.919 00:05:00.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 22:03:13.566 00:00:10.363 TCP 23.104.0.1:57678 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:03:38.281 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:46734 10 6452 1 2025-08-03 22:04:13.965 00:00:10.373 TCP 23.104.0.1:53998 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:04:38.471 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60232 10 6452 1 2025-08-03 22:05:14.379 00:00:10.378 TCP 23.104.0.1:37874 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:05:38.685 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48400 10 6452 1 2025-08-03 22:06:14.784 00:00:10.366 TCP 23.104.0.1:55602 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:06:38.896 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:43706 10 6452 1 2025-08-03 22:07:15.188 00:00:10.369 TCP 23.104.0.1:37084 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:07:39.122 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43882 10 6452 1 2025-08-03 22:07:53.089 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 22:07:53.142 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 22:04:05.916 00:05:00.218 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 22:08:15.595 00:00:10.366 TCP 23.104.0.1:36618 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:08:39.342 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40658 10 6452 1 2025-08-03 22:05:05.919 00:05:00.213 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 22:09:16.003 00:00:10.360 TCP 23.104.0.1:58216 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:09:39.557 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41634 10 6452 1 2025-08-03 22:10:16.400 00:00:10.371 TCP 23.104.0.1:58546 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:10:39.773 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46850 10 6452 1 2025-08-03 22:11:16.806 00:00:10.364 TCP 23.104.0.1:41752 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:11:39.987 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:37600 10 6452 1 2025-08-03 22:12:17.209 00:00:10.368 TCP 23.104.0.1:56794 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:12:40.183 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40376 10 6452 1 2025-08-03 22:12:52.834 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 22:12:52.647 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 22:13:17.611 00:00:10.361 TCP 23.104.0.1:42986 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:13:40.400 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:60258 14 10469 1 2025-08-03 22:10:05.918 00:05:00.218 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 22:14:18.013 00:00:10.440 TCP 23.104.0.1:57608 -> 1.101.0.1:3000 15 1926 1 2025-08-03 22:14:40.640 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38934 10 6452 1 2025-08-03 22:11:05.920 00:05:00.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 22:15:18.492 00:00:10.329 TCP 23.104.0.1:47658 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:15:40.848 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:34460 10 6452 1 2025-08-03 22:16:18.856 00:00:10.374 TCP 23.104.0.1:52020 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:16:41.031 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36980 10 6452 1 2025-08-03 22:17:19.267 00:00:10.372 TCP 23.104.0.1:33726 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:17:41.203 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57410 10 6452 1 2025-08-03 22:17:52.810 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 22:17:52.943 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 22:18:19.677 00:00:10.366 TCP 23.104.0.1:43546 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:18:41.418 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58544 10 6452 1 2025-08-03 22:19:20.107 00:00:10.361 TCP 23.104.0.1:51880 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:19:41.636 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48768 10 6452 1 2025-08-03 22:16:05.918 00:05:00.222 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 22:20:20.508 00:00:10.361 TCP 23.104.0.1:59712 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:20:41.846 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44876 10 6452 1 2025-08-03 22:17:05.921 00:05:00.217 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 22:21:20.910 00:00:10.364 TCP 23.104.0.1:53490 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:21:42.081 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59410 10 6452 1 2025-08-03 22:22:21.316 00:00:10.321 TCP 23.104.0.1:52106 -> 1.101.0.1:3000 12 1559 1 2025-08-03 22:22:42.304 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45214 10 6452 1 2025-08-03 22:22:52.880 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 22:22:53.073 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 22:23:21.675 00:00:10.371 TCP 23.104.0.1:43568 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:23:42.525 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45132 10 6452 1 2025-08-03 22:24:22.099 00:00:10.368 TCP 23.104.0.1:38744 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:24:42.736 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33672 10 6452 1 2025-08-03 22:25:22.502 00:00:10.368 TCP 23.104.0.1:36026 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:25:42.963 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41758 12 6556 1 2025-08-03 22:22:05.922 00:05:00.221 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 22:26:22.906 00:00:10.331 TCP 23.104.0.1:49318 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:26:43.195 00:00:10.443 TCP 1.101.0.1:3000 -> 22.102.0.1:44560 10 6452 1 2025-08-03 22:23:05.926 00:05:00.215 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 22:27:23.271 00:00:10.370 TCP 23.104.0.1:41304 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:27:43.678 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49664 10 6452 1 2025-08-03 22:27:53.190 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 22:27:53.378 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 22:28:23.677 00:00:10.531 TCP 23.104.0.1:46342 -> 1.101.0.1:3000 17 2241 1 2025-08-03 22:28:43.888 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:58936 14 14282 1 2025-08-03 22:29:24.245 00:00:10.383 TCP 23.104.0.1:57390 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:29:44.130 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56326 10 6452 1 2025-08-03 22:30:24.665 00:00:10.362 TCP 23.104.0.1:60120 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:30:44.342 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55584 10 6452 1 2025-08-03 22:31:25.078 00:00:10.372 TCP 23.104.0.1:52594 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:31:44.520 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:39686 10 6452 1 2025-08-03 22:28:05.926 00:05:00.218 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 22:32:25.487 00:00:10.363 TCP 23.104.0.1:37294 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:32:53.413 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 22:32:44.689 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51138 10 6452 1 2025-08-03 22:32:53.406 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 22:29:05.928 00:05:00.214 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 22:33:25.888 00:00:10.366 TCP 23.104.0.1:39462 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:33:44.870 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:50662 10 6452 1 2025-08-03 22:34:26.291 00:00:10.330 TCP 23.104.0.1:56340 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:34:45.074 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54894 10 6452 1 2025-08-03 22:35:26.661 00:00:10.366 TCP 23.104.0.1:46142 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:35:45.283 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36524 10 6452 1 2025-08-03 22:36:27.087 00:00:10.365 TCP 23.104.0.1:39354 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:36:45.494 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44592 10 6452 1 2025-08-03 22:37:27.499 00:00:10.364 TCP 23.104.0.1:50416 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:37:45.663 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:59590 10 6452 1 2025-08-03 22:37:53.225 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 22:37:53.206 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 22:34:05.927 00:05:00.219 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 22:38:27.904 00:00:10.446 TCP 23.104.0.1:37480 -> 1.101.0.1:3000 15 1926 1 2025-08-03 22:38:45.903 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:43794 12 10365 1 2025-08-03 22:35:05.932 00:05:00.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 22:39:28.386 00:00:10.366 TCP 23.104.0.1:44112 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:39:46.148 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43812 10 6452 1 2025-08-03 22:40:28.793 00:00:10.364 TCP 23.104.0.1:55018 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:40:46.367 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42088 10 6452 1 2025-08-03 22:41:29.196 00:00:10.359 TCP 23.104.0.1:54954 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:41:46.578 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:39312 10 6452 1 2025-08-03 22:42:29.595 00:00:10.381 TCP 23.104.0.1:56180 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:42:53.231 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 22:42:53.657 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 22:42:46.804 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33460 10 6452 1 2025-08-03 22:43:30.013 00:00:10.356 TCP 23.104.0.1:32936 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:43:47.038 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:39250 10 6452 1 2025-08-03 22:40:05.931 00:05:00.217 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 22:44:30.415 00:00:10.368 TCP 23.104.0.1:33380 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:44:47.208 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51758 10 6452 1 2025-08-03 22:41:05.932 00:05:00.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 22:45:30.818 00:00:10.361 TCP 23.104.0.1:35150 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:45:47.421 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47806 10 6452 1 2025-08-03 22:46:31.225 00:00:10.370 TCP 23.104.0.1:39198 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:46:47.632 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50134 10 6452 1 2025-08-03 22:47:31.630 00:00:10.362 TCP 23.104.0.1:57170 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:47:53.563 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 22:47:53.545 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 22:47:47.843 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48686 10 6452 1 2025-08-03 22:48:32.025 00:00:10.365 TCP 23.104.0.1:55838 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:48:48.074 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33640 10 6452 1 2025-08-03 22:49:32.429 00:00:10.366 TCP 23.104.0.1:41820 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:49:48.283 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:32912 10 6452 1 2025-08-03 22:46:05.933 00:05:00.215 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 22:50:32.833 00:00:10.399 TCP 23.104.0.1:39784 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:50:48.493 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40210 10 6452 1 2025-08-03 22:47:05.936 00:05:00.210 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 22:51:33.259 00:00:10.368 TCP 23.104.0.1:59830 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:51:48.706 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58106 10 6452 1 2025-08-03 22:52:33.665 00:00:10.369 TCP 23.104.0.1:41792 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:52:53.674 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 22:52:53.596 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 22:52:48.917 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46010 10 6452 1 2025-08-03 22:53:34.100 00:00:10.417 TCP 23.104.0.1:41564 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:53:49.138 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60490 10 6452 1 2025-08-03 22:54:34.559 00:00:10.365 TCP 23.104.0.1:45112 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:54:49.350 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55312 10 6452 1 2025-08-03 22:55:34.965 00:00:10.391 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:55:49.557 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54996 10 6452 1 2025-08-03 22:52:05.934 00:05:00.217 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-03 22:56:35.415 00:00:10.330 TCP 23.104.0.1:45080 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:56:49.767 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60220 10 6452 1 2025-08-03 22:53:05.935 00:05:00.211 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-03 22:57:35.782 00:00:10.322 TCP 23.104.0.1:48060 -> 1.101.0.1:3000 11 1507 1 2025-08-03 22:57:53.821 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-03 22:57:53.707 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-03 22:57:49.983 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:53290 10 6452 1 2025-08-03 22:58:36.140 00:00:10.366 TCP 23.104.0.1:33598 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 509384, total packets: 1589, avg bps: 1119, avg pps: 0, avg bpp: 320 Time window: 2025-08-03 21:58:05 - 2025-08-03 22:58:46 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0020s Wall: 0.0021s flows/second: 75997.3 Runtime: 0.0022s