Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-18 21:58:42.559 00:00:10.364 TCP 23.104.0.1:58512 -> 1.101.0.1:3000 11 1507 1 2025-08-18 21:59:05.992 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45340 10 6452 1 2025-08-18 21:55:13.226 00:05:00.962 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 21:59:42.962 00:00:10.326 TCP 23.104.0.1:43778 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:00:05.663 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 22:00:05.693 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 21:56:13.228 00:05:00.947 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 22:00:06.221 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36100 10 6452 1 2025-08-18 22:00:43.327 00:00:10.364 TCP 23.104.0.1:33344 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:01:06.441 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49112 10 6452 1 2025-08-18 22:01:43.728 00:00:10.372 TCP 23.104.0.1:57100 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:02:06.656 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45658 10 6452 1 2025-08-18 22:02:44.142 00:00:10.364 TCP 23.104.0.1:38402 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:03:06.830 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54824 10 6452 1 2025-08-18 22:03:44.544 00:00:10.367 TCP 23.104.0.1:50400 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:04:07.010 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46706 10 6452 1 2025-08-18 22:04:44.949 00:00:10.375 TCP 23.104.0.1:35642 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:05:05.696 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 22:05:05.566 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 22:01:13.230 00:05:00.951 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 22:05:07.237 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41686 10 6452 1 2025-08-18 22:05:45.363 00:00:10.362 TCP 23.104.0.1:36978 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:02:13.232 00:05:00.946 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 22:06:07.455 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46550 10 6452 1 2025-08-18 22:06:45.768 00:00:10.364 TCP 23.104.0.1:57684 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:07:07.672 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53860 10 6452 1 2025-08-18 22:07:46.171 00:00:10.371 TCP 23.104.0.1:32776 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:08:07.883 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53462 10 6452 1 2025-08-18 22:08:46.584 00:00:10.324 TCP 23.104.0.1:40192 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:09:08.102 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34564 10 6452 1 2025-08-18 22:09:46.944 00:00:10.374 TCP 23.104.0.1:55936 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:10:06.174 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 22:10:06.159 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 22:10:08.276 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55804 10 6452 1 2025-08-18 22:10:47.360 00:00:10.359 TCP 23.104.0.1:39830 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:07:13.231 00:05:00.950 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 22:11:08.495 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36806 10 6452 1 2025-08-18 22:11:47.770 00:00:10.376 TCP 23.104.0.1:58040 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:08:13.235 00:05:00.944 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 22:12:08.705 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40202 10 6452 1 2025-08-18 22:12:48.193 00:00:10.365 TCP 23.104.0.1:38856 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:13:08.919 00:00:10.224 TCP 1.101.0.1:3000 -> 22.102.0.1:50336 10 6452 1 2025-08-18 22:13:48.597 00:00:10.425 TCP 23.104.0.1:40906 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:14:09.183 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49870 10 6452 1 2025-08-18 22:14:49.092 00:00:10.367 TCP 23.104.0.1:59564 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:15:06.111 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 22:15:06.035 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 22:15:09.399 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60082 10 6452 1 2025-08-18 22:15:49.495 00:00:10.365 TCP 23.104.0.1:57974 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:16:09.609 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42470 10 6452 1 2025-08-18 22:16:49.899 00:00:10.363 TCP 23.104.0.1:59718 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:13:13.234 00:05:00.950 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 22:17:09.821 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55312 10 6452 1 2025-08-18 22:17:50.303 00:00:10.367 TCP 23.104.0.1:50562 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:14:13.235 00:05:00.944 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 22:18:10.046 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49996 10 6452 1 2025-08-18 22:18:50.708 00:00:10.381 TCP 23.104.0.1:51126 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:19:10.259 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59454 10 6452 1 2025-08-18 22:19:51.136 00:00:10.377 TCP 23.104.0.1:47168 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:20:06.127 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 22:20:06.203 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 22:20:10.472 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44414 12 6556 1 2025-08-18 22:20:51.548 00:00:10.545 TCP 23.104.0.1:46860 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:21:10.687 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41320 10 6452 1 2025-08-18 22:21:52.140 00:00:10.369 TCP 23.104.0.1:42652 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:22:10.910 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39348 10 6452 1 2025-08-18 22:22:52.548 00:00:10.323 TCP 23.104.0.1:35638 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:19:13.234 00:05:00.949 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 22:23:11.123 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55780 10 6452 1 2025-08-18 22:23:52.921 00:00:10.786 TCP 23.104.0.1:42200 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:20:13.238 00:05:00.944 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 22:24:11.347 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:51394 10 6452 1 2025-08-18 22:24:53.750 00:00:10.372 TCP 23.104.0.1:36586 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:25:06.238 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 22:25:06.203 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 22:25:11.554 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48298 10 6452 1 2025-08-18 22:25:54.159 00:00:10.325 TCP 23.104.0.1:39816 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:26:11.767 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55416 10 6452 1 2025-08-18 22:26:54.521 00:00:10.322 TCP 23.104.0.1:56456 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:27:11.980 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:38368 10 6452 1 2025-08-18 22:27:54.884 00:00:10.345 TCP 23.104.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:28:12.214 00:00:10.589 TCP 1.101.0.1:3000 -> 22.102.0.1:40304 10 6452 1 2025-08-18 22:28:55.272 00:00:10.362 TCP 23.104.0.1:56838 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:25:13.235 00:05:00.950 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 22:29:12.845 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56176 10 6452 1 2025-08-18 22:29:55.673 00:00:10.381 TCP 23.104.0.1:40776 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:30:06.339 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 22:30:06.621 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 22:26:13.239 00:05:00.945 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 22:30:13.014 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51144 10 6452 1 2025-08-18 22:30:56.108 00:00:10.371 TCP 23.104.0.1:44430 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:31:13.188 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59328 10 6452 1 2025-08-18 22:31:56.525 00:00:10.378 TCP 23.104.0.1:47976 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:32:13.363 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48526 10 6452 1 2025-08-18 22:32:56.941 00:00:10.371 TCP 23.104.0.1:53422 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:33:13.581 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50560 10 6452 1 2025-08-18 22:33:57.352 00:00:10.326 TCP 23.104.0.1:60486 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:34:13.801 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57644 10 6452 1 2025-08-18 22:35:06.385 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 22:35:06.074 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 22:34:57.732 00:00:10.380 TCP 23.104.0.1:46282 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:31:13.235 00:05:00.954 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 22:35:14.025 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49958 10 6452 1 2025-08-18 22:35:58.148 00:00:10.366 TCP 23.104.0.1:49048 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:32:13.238 00:05:00.947 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 22:36:14.241 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:34092 10 6452 1 2025-08-18 22:36:58.551 00:00:10.364 TCP 23.104.0.1:35076 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:37:14.430 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58080 10 6452 1 2025-08-18 22:37:58.955 00:00:10.327 TCP 23.104.0.1:51328 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:38:14.646 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36688 10 6452 1 2025-08-18 22:38:59.319 00:00:10.471 TCP 23.104.0.1:47556 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:39:14.856 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56074 10 6452 1 2025-08-18 22:40:06.434 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 22:40:06.594 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 22:39:59.831 00:00:10.387 TCP 23.104.0.1:34860 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:40:15.087 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:55090 10 6452 1 2025-08-18 22:41:00.256 00:00:10.365 TCP 23.104.0.1:40490 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:37:13.237 00:05:00.951 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 22:41:15.291 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:57354 10 6452 1 2025-08-18 22:42:00.661 00:00:10.375 TCP 23.104.0.1:53400 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:38:13.240 00:05:00.946 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 22:42:15.509 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37224 10 6452 1 2025-08-18 22:43:01.101 00:00:10.364 TCP 23.104.0.1:48080 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:43:15.720 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59756 10 6452 1 2025-08-18 22:44:01.503 00:00:10.368 TCP 23.104.0.1:33110 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:44:15.927 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56080 10 6452 1 2025-08-18 22:45:06.702 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 22:45:06.521 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 22:45:01.911 00:00:10.362 TCP 23.104.0.1:42844 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:45:16.163 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54034 10 6452 1 2025-08-18 22:46:02.309 00:00:10.381 TCP 23.104.0.1:54008 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:46:16.378 00:00:10.776 TCP 1.101.0.1:3000 -> 22.102.0.1:58926 10 6452 1 2025-08-18 22:47:02.721 00:00:10.374 TCP 23.104.0.1:54676 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:43:13.239 00:05:00.952 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 22:47:17.202 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60162 10 6452 1 2025-08-18 22:48:03.143 00:00:10.364 TCP 23.104.0.1:58600 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:44:13.242 00:05:00.947 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 22:48:17.415 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37030 10 6452 1 2025-08-18 22:49:03.546 00:00:10.374 TCP 23.104.0.1:38612 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:49:17.627 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42790 10 6452 1 2025-08-18 22:50:06.787 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 22:50:06.729 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 22:50:03.959 00:00:10.366 TCP 23.104.0.1:58834 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:50:17.837 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43772 10 6452 1 2025-08-18 22:51:04.366 00:00:10.368 TCP 23.104.0.1:47702 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:51:18.079 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34042 10 6452 1 2025-08-18 22:52:04.773 00:00:10.373 TCP 23.104.0.1:38376 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:52:18.295 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43390 10 6452 1 2025-08-18 22:53:05.195 00:00:10.368 TCP 23.104.0.1:49376 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:49:13.240 00:05:00.952 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 22:53:18.509 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45758 10 6452 1 2025-08-18 22:50:13.243 00:05:00.947 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 22:54:05.603 00:00:10.364 TCP 23.104.0.1:59042 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:54:18.722 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57020 10 6452 1 2025-08-18 22:55:06.734 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 22:55:06.663 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 22:55:06.005 00:00:10.382 TCP 23.104.0.1:45846 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:55:18.934 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36888 12 10367 1 2025-08-18 22:56:06.434 00:00:10.399 TCP 23.104.0.1:35032 -> 1.101.0.1:3000 15 1926 1 2025-08-18 22:56:19.160 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59820 10 6452 1 2025-08-18 22:57:06.876 00:00:10.379 TCP 23.104.0.1:54432 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:57:19.377 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52962 10 6452 1 2025-08-18 22:58:07.293 00:00:10.331 TCP 23.104.0.1:50394 -> 1.101.0.1:3000 11 1507 1 2025-08-18 22:58:19.593 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54402 10 6452 1 Summary: total flows: 164, total bytes: 502786, total packets: 1580, avg bps: 1059, avg pps: 0, avg bpp: 318 Time window: 2025-08-18 21:55:13 - 2025-08-18 22:58:29 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0009s Wall: 0.0020s flows/second: 80040.2 Runtime: 0.0021s