Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 21:58:52.414 00:00:10.327 TCP 23.104.0.1:54566 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:59:21.567 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42102 10 6452 1 2025-08-25 21:59:52.775 00:00:10.369 TCP 23.104.0.1:51754 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:00:21.773 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59720 10 6452 1 2025-08-25 22:00:53.186 00:00:10.365 TCP 23.104.0.1:50730 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:01:21.989 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:41342 12 10367 1 2025-08-25 22:01:53.583 00:00:10.391 TCP 23.104.0.1:33242 -> 1.101.0.1:3000 15 1926 1 2025-08-25 21:57:17.753 00:06:00.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 21:57:17.755 00:06:00.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 22:02:22.251 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36670 10 6452 1 2025-08-25 22:02:54.019 00:00:10.326 TCP 23.104.0.1:47088 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:03:28.214 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 22:03:27.967 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 22:03:22.470 00:00:12.311 TCP 1.101.0.1:3000 -> 22.102.0.1:48202 10 6452 1 2025-08-25 22:03:54.381 00:00:10.724 TCP 23.104.0.1:48856 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:04:24.824 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:60674 11 6504 1 2025-08-25 22:04:55.144 00:00:10.361 TCP 23.104.0.1:44244 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:05:25.102 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49008 10 6452 1 2025-08-25 22:05:55.544 00:00:10.362 TCP 23.104.0.1:49194 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:06:25.319 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35252 10 6452 1 2025-08-25 22:06:55.949 00:00:10.362 TCP 23.104.0.1:56908 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:07:25.546 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60726 10 6452 1 2025-08-25 22:07:56.350 00:00:10.360 TCP 23.104.0.1:45774 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:08:28.100 00:00:00.039 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 22:08:27.848 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 22:08:25.760 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36056 10 6452 1 2025-08-25 22:08:56.761 00:00:10.334 TCP 23.104.0.1:49726 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:04:17.756 00:06:00.102 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 22:04:17.754 00:06:00.107 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 22:09:25.976 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:47186 10 6452 1 2025-08-25 22:09:57.129 00:00:10.357 TCP 23.104.0.1:52118 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:10:26.223 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50042 10 6452 1 2025-08-25 22:10:57.524 00:00:10.359 TCP 23.104.0.1:34262 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:11:26.449 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44914 10 6452 1 2025-08-25 22:11:57.921 00:00:10.385 TCP 23.104.0.1:39756 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:12:26.668 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49796 10 6452 1 2025-08-25 22:12:58.347 00:00:10.367 TCP 23.104.0.1:46942 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:13:27.854 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 22:13:28.286 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 22:13:26.885 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60512 10 6452 1 2025-08-25 22:13:58.748 00:00:10.363 TCP 23.104.0.1:47204 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:14:27.103 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49738 10 6452 1 2025-08-25 22:14:59.150 00:00:10.376 TCP 23.104.0.1:40854 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:15:27.323 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53586 10 6452 1 2025-08-25 22:15:59.565 00:00:10.365 TCP 23.104.0.1:58956 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:11:17.756 00:06:00.109 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 22:11:17.758 00:06:00.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 22:16:27.550 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60910 10 6452 1 2025-08-25 22:16:59.969 00:00:10.324 TCP 23.104.0.1:56728 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:17:27.771 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35290 10 6452 1 2025-08-25 22:18:00.326 00:00:10.770 TCP 23.104.0.1:51088 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:18:28.176 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 22:18:28.197 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 22:18:27.984 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42378 10 6452 1 2025-08-25 22:19:01.136 00:00:10.322 TCP 23.104.0.1:39282 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:19:28.212 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55578 10 6452 1 2025-08-25 22:20:01.496 00:00:10.364 TCP 23.104.0.1:56974 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:20:28.384 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52820 10 6452 1 2025-08-25 22:21:01.902 00:00:10.375 TCP 23.104.0.1:59872 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:21:28.560 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-08-25 22:22:02.317 00:00:10.319 TCP 23.104.0.1:48276 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:22:28.771 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:56296 10 6452 1 2025-08-25 22:23:02.675 00:00:10.366 TCP 23.104.0.1:55930 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:18:17.762 00:06:00.101 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 22:18:17.760 00:06:00.106 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 22:23:28.971 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 22:23:28.982 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 22:23:28.940 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:52002 10 6452 1 2025-08-25 22:24:03.106 00:00:10.371 TCP 23.104.0.1:37474 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:24:29.138 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56166 10 6452 1 2025-08-25 22:25:03.517 00:00:10.368 TCP 23.104.0.1:33966 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:25:29.318 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59310 10 6452 1 2025-08-25 22:26:03.923 00:00:10.334 TCP 23.104.0.1:49080 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:26:29.534 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41096 10 6452 1 2025-08-25 22:27:04.295 00:00:10.359 TCP 23.104.0.1:39762 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:27:29.745 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47646 10 6452 1 2025-08-25 22:28:04.696 00:00:10.318 TCP 23.104.0.1:48794 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:28:28.532 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 22:28:28.376 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 22:28:29.961 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:52418 10 6452 1 2025-08-25 22:29:05.067 00:00:10.384 TCP 23.104.0.1:60726 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:29:30.146 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41038 10 6452 1 2025-08-25 22:30:05.498 00:00:10.363 TCP 23.104.0.1:50850 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:25:17.762 00:06:00.110 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 22:25:17.764 00:06:00.105 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 22:30:30.319 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48782 10 6452 1 2025-08-25 22:31:05.903 00:00:10.367 TCP 23.104.0.1:55250 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:31:30.492 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40932 10 6452 1 2025-08-25 22:32:06.303 00:00:10.365 TCP 23.104.0.1:41034 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:32:30.662 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32874 10 6452 1 2025-08-25 22:33:06.705 00:00:10.360 TCP 23.104.0.1:50624 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:33:28.688 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 22:33:28.412 00:00:00.048 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 22:33:30.871 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38388 10 6452 1 2025-08-25 22:34:07.108 00:00:10.364 TCP 23.104.0.1:34432 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:34:31.098 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37756 10 6452 1 2025-08-25 22:35:07.513 00:00:10.362 TCP 23.104.0.1:57982 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:35:31.308 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41864 10 6452 1 2025-08-25 22:36:07.920 00:00:10.340 TCP 23.104.0.1:55914 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:36:31.524 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47808 10 6452 1 2025-08-25 22:32:17.764 00:06:00.118 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 22:32:17.766 00:06:00.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 22:37:08.310 00:00:10.367 TCP 23.104.0.1:43940 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:37:31.740 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55366 10 6452 1 2025-08-25 22:38:08.716 00:00:10.379 TCP 23.104.0.1:58058 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:38:28.866 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 22:38:29.071 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 22:38:31.955 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:60912 10 6452 1 2025-08-25 22:39:09.130 00:00:10.324 TCP 23.104.0.1:54718 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:39:32.147 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33874 10 6452 1 2025-08-25 22:40:09.492 00:00:10.367 TCP 23.104.0.1:44448 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:40:32.362 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48064 10 6452 1 2025-08-25 22:41:09.891 00:00:10.372 TCP 23.104.0.1:36104 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:41:32.578 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46780 10 6452 1 2025-08-25 22:42:10.309 00:00:10.326 TCP 23.104.0.1:40422 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:42:32.818 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56806 10 6452 1 2025-08-25 22:43:10.676 00:00:10.325 TCP 23.104.0.1:51876 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:43:29.108 00:00:00.036 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 22:43:28.919 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 22:43:32.988 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53836 10 6452 1 2025-08-25 22:44:11.049 00:00:10.367 TCP 23.104.0.1:54194 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:39:17.768 00:06:00.116 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 22:39:17.767 00:06:00.120 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 22:44:33.211 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33392 10 6452 1 2025-08-25 22:45:11.459 00:00:10.364 TCP 23.104.0.1:40008 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:45:33.385 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49676 10 6452 1 2025-08-25 22:46:11.860 00:00:10.374 TCP 23.104.0.1:57436 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:46:33.593 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47126 10 6452 1 2025-08-25 22:47:12.270 00:00:10.360 TCP 23.104.0.1:57862 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:47:33.811 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53956 10 6452 1 2025-08-25 22:48:12.672 00:00:10.361 TCP 23.104.0.1:44950 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:48:28.783 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 22:48:28.973 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 22:48:34.041 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:43324 10 6452 1 2025-08-25 22:49:13.107 00:00:10.331 TCP 23.104.0.1:57772 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:49:34.288 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56018 10 6452 1 2025-08-25 22:50:13.473 00:00:10.339 TCP 23.104.0.1:55576 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:50:34.506 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54452 10 6452 1 2025-08-25 22:46:17.767 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 22:46:17.770 00:06:00.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 22:51:13.852 00:00:10.380 TCP 23.104.0.1:56336 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:51:34.735 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38302 10 6452 1 2025-08-25 22:52:14.275 00:00:10.389 TCP 23.104.0.1:51450 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:52:34.954 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54054 10 6452 1 2025-08-25 22:53:14.710 00:00:10.323 TCP 23.104.0.1:36858 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:53:28.954 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 22:53:28.849 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 22:53:35.188 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47572 10 6452 1 2025-08-25 22:54:15.105 00:00:10.372 TCP 23.104.0.1:41062 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:54:35.397 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49088 10 6452 1 2025-08-25 22:55:15.525 00:00:10.364 TCP 23.104.0.1:40958 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:55:35.612 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44286 10 6452 1 2025-08-25 22:56:15.935 00:00:10.377 TCP 23.104.0.1:55216 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:56:35.824 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57380 10 6452 1 2025-08-25 22:57:16.349 00:00:10.356 TCP 23.104.0.1:51786 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:57:36.038 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35950 10 6452 1 2025-08-25 22:53:17.770 00:06:00.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 22:53:17.773 00:06:00.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 22:58:29.058 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 22:58:29.219 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 22:58:16.760 00:00:10.349 TCP 23.104.0.1:59580 -> 1.101.0.1:3000 11 1507 1 2025-08-25 22:58:36.206 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60108 10 6452 1 Summary: total flows: 162, total bytes: 503472, total packets: 1591, avg bps: 1082, avg pps: 0, avg bpp: 316 Time window: 2025-08-25 21:57:17 - 2025-08-25 22:59:17 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0039s User: 0.0010s Wall: 0.0024s flows/second: 66420.1 Runtime: 0.0025s