Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-13 21:59:21.767 00:00:10.338 TCP 23.104.0.1:47304 -> 1.101.0.1:3000 11 1507 1 2025-08-13 21:59:26.733 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52862 10 6452 1 2025-08-13 21:56:10.885 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 22:00:22.141 00:00:10.367 TCP 23.104.0.1:40182 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:00:26.948 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38438 10 6452 1 2025-08-13 21:57:10.887 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 22:01:22.551 00:00:10.349 TCP 23.104.0.1:43164 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:01:27.179 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33442 10 6452 1 2025-08-13 22:02:22.947 00:00:10.362 TCP 23.104.0.1:59844 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:02:41.401 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 22:02:27.394 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:36614 10 6452 1 2025-08-13 22:02:41.174 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 22:03:23.350 00:00:10.326 TCP 23.104.0.1:45942 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:03:27.615 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33036 10 6452 1 2025-08-13 22:04:23.716 00:00:10.378 TCP 23.104.0.1:37678 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:04:27.789 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33808 10 6452 1 2025-08-13 22:05:24.131 00:00:10.365 TCP 23.104.0.1:59488 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:05:27.997 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41936 10 6452 1 2025-08-13 22:02:10.886 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 22:06:24.535 00:00:10.365 TCP 23.104.0.1:55244 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:06:28.231 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45866 10 6452 1 2025-08-13 22:03:10.889 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 22:07:24.943 00:00:10.376 TCP 23.104.0.1:58720 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:07:41.083 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 22:07:28.458 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35380 10 6452 1 2025-08-13 22:07:41.489 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 22:08:25.361 00:00:10.373 TCP 23.104.0.1:38126 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:08:28.669 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56362 10 6452 1 2025-08-13 22:09:25.769 00:00:10.368 TCP 23.104.0.1:49426 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:09:28.880 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 10 6452 1 2025-08-13 22:10:26.172 00:00:10.366 TCP 23.104.0.1:59940 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:10:29.117 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:46904 10 6452 1 2025-08-13 22:11:26.573 00:00:10.329 TCP 23.104.0.1:57534 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:11:29.359 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35650 10 6452 1 2025-08-13 22:08:10.887 00:05:00.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 22:12:29.572 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43474 10 6452 1 2025-08-13 22:12:41.517 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 22:12:41.622 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 22:12:26.941 00:00:10.332 TCP 23.104.0.1:53004 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:09:10.889 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 22:13:29.788 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39026 10 6452 1 2025-08-13 22:13:27.307 00:00:10.366 TCP 23.104.0.1:35254 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:14:30.004 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60740 10 6452 1 2025-08-13 22:14:27.709 00:00:10.325 TCP 23.104.0.1:45852 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:15:28.098 00:00:10.361 TCP 23.104.0.1:42544 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:15:30.216 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35280 10 6452 1 2025-08-13 22:16:28.503 00:00:10.327 TCP 23.104.0.1:53022 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:16:30.385 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39476 10 6452 1 2025-08-13 22:17:41.561 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 22:17:28.867 00:00:10.363 TCP 23.104.0.1:49578 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:17:41.644 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 22:17:30.604 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46596 10 6452 1 2025-08-13 22:14:10.887 00:05:00.808 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 22:18:30.833 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58828 10 6452 1 2025-08-13 22:18:29.271 00:00:10.369 TCP 23.104.0.1:50042 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:15:10.890 00:05:00.804 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 22:19:29.674 00:00:10.366 TCP 23.104.0.1:47272 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:19:31.069 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49296 10 6452 1 2025-08-13 22:20:31.291 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:34070 10 6452 1 2025-08-13 22:20:30.103 00:00:10.365 TCP 23.104.0.1:58250 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:21:31.477 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58004 10 6452 1 2025-08-13 22:21:30.503 00:00:10.365 TCP 23.104.0.1:47032 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:22:41.762 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 22:22:30.902 00:00:10.330 TCP 23.104.0.1:50332 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:22:31.691 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34440 10 6452 1 2025-08-13 22:22:41.688 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 22:23:31.269 00:00:10.426 TCP 23.104.0.1:39276 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:23:31.909 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50980 10 6452 1 2025-08-13 22:20:10.890 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 22:24:31.731 00:00:10.366 TCP 23.104.0.1:49554 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:24:32.123 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:33608 10 6452 1 2025-08-13 22:21:10.894 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 22:25:32.304 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35566 10 6452 1 2025-08-13 22:25:32.132 00:00:10.364 TCP 23.104.0.1:43256 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:26:32.535 00:00:10.362 TCP 23.104.0.1:41406 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:26:32.524 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54400 10 6452 1 2025-08-13 22:27:41.671 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 22:27:41.968 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 22:27:32.740 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57252 10 6452 1 2025-08-13 22:27:32.937 00:00:10.378 TCP 23.104.0.1:50196 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:28:32.954 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43702 12 6556 1 2025-08-13 22:28:33.357 00:00:10.366 TCP 23.104.0.1:42400 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:29:33.761 00:00:10.378 TCP 23.104.0.1:40582 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:29:33.190 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54384 10 6452 1 2025-08-13 22:26:10.891 00:05:00.807 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 22:30:34.178 00:00:10.441 TCP 23.104.0.1:38796 -> 1.101.0.1:3000 15 1926 1 2025-08-13 22:30:33.405 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:38782 12 10367 1 2025-08-13 22:27:10.894 00:05:00.802 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 22:31:34.666 00:00:10.377 TCP 23.104.0.1:55206 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:31:33.603 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55896 10 6452 1 2025-08-13 22:32:41.897 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 22:32:41.825 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 22:32:33.812 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54038 10 6452 1 2025-08-13 22:32:35.102 00:00:10.365 TCP 23.104.0.1:60646 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:33:34.036 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44402 10 6452 1 2025-08-13 22:33:35.509 00:00:10.325 TCP 23.104.0.1:35172 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:34:34.252 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48176 10 6452 1 2025-08-13 22:34:35.877 00:00:10.363 TCP 23.104.0.1:56394 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:35:34.466 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40364 10 6452 1 2025-08-13 22:35:36.286 00:00:10.368 TCP 23.104.0.1:59932 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:32:10.894 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 22:36:34.678 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57048 10 6452 1 2025-08-13 22:36:36.693 00:00:10.368 TCP 23.104.0.1:41850 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:33:10.895 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 22:37:41.958 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 22:37:42.177 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 22:37:34.900 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37706 10 6452 1 2025-08-13 22:37:37.109 00:00:10.367 TCP 23.104.0.1:54266 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:38:35.111 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40338 10 6452 1 2025-08-13 22:38:37.518 00:00:10.331 TCP 23.104.0.1:59188 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:39:35.286 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55466 10 6452 1 2025-08-13 22:39:37.888 00:00:10.385 TCP 23.104.0.1:35324 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:40:35.503 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52588 10 6452 1 2025-08-13 22:40:38.314 00:00:10.367 TCP 23.104.0.1:42334 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:41:35.716 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56748 10 6452 1 2025-08-13 22:41:38.719 00:00:10.368 TCP 23.104.0.1:56192 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:38:10.896 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 22:42:35.931 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:34858 10 6452 1 2025-08-13 22:42:42.199 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 22:42:42.352 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 22:42:39.130 00:00:10.366 TCP 23.104.0.1:39620 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:39:10.898 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 22:43:36.172 00:00:10.302 TCP 1.101.0.1:3000 -> 22.102.0.1:47732 10 6452 1 2025-08-13 22:43:39.536 00:00:10.366 TCP 23.104.0.1:34554 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:44:36.510 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35944 10 6452 1 2025-08-13 22:44:39.941 00:00:10.367 TCP 23.104.0.1:56676 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:45:36.725 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50344 10 6452 1 2025-08-13 22:45:40.344 00:00:10.370 TCP 23.104.0.1:52970 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:46:36.933 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:53616 10 6452 1 2025-08-13 22:46:40.752 00:00:10.362 TCP 23.104.0.1:46204 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:47:42.172 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 22:47:42.286 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 22:47:41.148 00:00:10.364 TCP 23.104.0.1:50650 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:47:37.170 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48624 10 6452 1 2025-08-13 22:44:10.897 00:05:00.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 22:48:41.555 00:00:10.363 TCP 23.104.0.1:36018 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:48:37.385 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35694 10 6452 1 2025-08-13 22:45:10.900 00:05:00.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 22:49:37.601 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52016 10 6452 1 2025-08-13 22:49:41.957 00:00:10.366 TCP 23.104.0.1:33090 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:50:37.811 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:47720 12 10367 1 2025-08-13 22:50:42.362 00:00:10.438 TCP 23.104.0.1:53050 -> 1.101.0.1:3000 15 1926 1 2025-08-13 22:51:38.087 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47880 10 6452 1 2025-08-13 22:51:42.838 00:00:10.388 TCP 23.104.0.1:45336 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:52:42.263 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 22:52:42.264 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 22:52:38.327 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38302 10 6452 1 2025-08-13 22:52:43.268 00:00:10.368 TCP 23.104.0.1:51324 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:53:38.541 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36774 10 6452 1 2025-08-13 22:53:43.675 00:00:10.362 TCP 23.104.0.1:47138 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:50:10.898 00:05:00.806 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-13 22:54:38.757 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49642 10 6452 1 2025-08-13 22:54:44.104 00:00:10.325 TCP 23.104.0.1:43216 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:51:10.900 00:05:00.801 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-13 22:55:38.939 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43634 10 6452 1 2025-08-13 22:55:44.471 00:00:10.366 TCP 23.104.0.1:57786 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:56:39.159 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52662 10 6452 1 2025-08-13 22:56:44.879 00:00:10.380 TCP 23.104.0.1:37488 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:57:42.639 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-13 22:57:42.684 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-13 22:57:39.375 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49844 10 6452 1 2025-08-13 22:57:45.324 00:00:10.364 TCP 23.104.0.1:57732 -> 1.101.0.1:3000 11 1507 1 2025-08-13 22:58:39.586 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39336 10 6452 1 Summary: total flows: 163, total bytes: 505613, total packets: 1575, avg bps: 1076, avg pps: 0, avg bpp: 321 Time window: 2025-08-13 21:56:10 - 2025-08-13 22:58:49 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0042s User: 0.0008s Wall: 0.0024s flows/second: 67797.7 Runtime: 0.0024s