Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-10 20:59:07.922 00:00:10.386 TCP 23.104.0.1:50880 -> 1.101.0.1:3000 11 1507 1 2025-09-10 20:59:34.483 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59508 10 6452 1 2025-09-10 21:00:08.349 00:00:10.363 TCP 23.104.0.1:50884 -> 1.101.0.1:3000 11 1507 1 2025-09-10 20:56:26.497 00:05:00.838 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 21:00:34.695 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56730 10 6452 1 2025-09-10 21:01:16.421 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 21:01:16.773 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 21:01:08.753 00:00:10.377 TCP 23.104.0.1:56492 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:01:34.914 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36312 10 6452 1 2025-09-10 21:02:09.170 00:00:10.327 TCP 23.104.0.1:34084 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:02:35.133 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37612 10 6452 1 2025-09-10 21:03:09.537 00:00:10.362 TCP 23.104.0.1:44668 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:03:35.361 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56650 10 6452 1 2025-09-10 21:04:09.939 00:00:10.370 TCP 23.104.0.1:44428 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:00:26.500 00:05:00.832 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 21:04:35.586 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52238 10 6452 1 2025-09-10 21:05:10.354 00:00:10.364 TCP 23.104.0.1:58412 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:05:35.812 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37058 10 6452 1 2025-09-10 21:06:16.605 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 21:06:16.613 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 21:06:10.763 00:00:10.383 TCP 23.104.0.1:48432 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:02:26.500 00:05:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 21:06:36.059 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47524 10 6452 1 2025-09-10 21:07:11.181 00:00:10.362 TCP 23.104.0.1:51614 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:07:36.277 00:00:10.234 TCP 1.101.0.1:3000 -> 22.102.0.1:57256 11 6504 1 2025-09-10 21:08:11.583 00:00:10.325 TCP 23.104.0.1:48288 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:08:36.551 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33638 10 6452 1 2025-09-10 21:09:11.945 00:00:10.467 TCP 23.104.0.1:52482 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:09:36.770 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47546 10 6452 1 2025-09-10 21:10:12.447 00:00:10.371 TCP 23.104.0.1:44526 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:06:26.503 00:05:00.830 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 21:10:36.988 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:38650 10 6452 1 2025-09-10 21:11:16.689 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 21:11:16.825 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 21:11:12.850 00:00:10.387 TCP 23.104.0.1:34302 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:11:37.226 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32960 10 6452 1 2025-09-10 21:12:13.278 00:00:10.363 TCP 23.104.0.1:51344 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:08:26.500 00:05:00.836 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 21:12:37.445 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56218 10 6452 1 2025-09-10 21:13:13.690 00:00:10.374 TCP 23.104.0.1:34490 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:13:37.620 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41436 10 6452 1 2025-09-10 21:14:14.107 00:00:10.511 TCP 23.104.0.1:56076 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:14:37.832 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52630 10 6452 1 2025-09-10 21:15:14.653 00:00:10.369 TCP 23.104.0.1:41750 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:15:38.078 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49728 10 6452 1 2025-09-10 21:16:16.635 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 21:16:16.806 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 21:16:15.061 00:00:10.707 TCP 23.104.0.1:58796 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:12:26.507 00:05:00.827 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 21:16:38.256 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54526 10 6452 1 2025-09-10 21:17:15.806 00:00:10.366 TCP 23.104.0.1:47824 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:17:38.472 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47750 10 6452 1 2025-09-10 21:18:16.211 00:00:10.369 TCP 23.104.0.1:37352 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:14:26.504 00:05:00.833 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 21:18:38.683 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35996 10 6452 1 2025-09-10 21:19:16.619 00:00:10.329 TCP 23.104.0.1:53514 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:19:38.919 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51994 10 6452 1 2025-09-10 21:20:16.984 00:00:10.363 TCP 23.104.0.1:40998 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:20:39.140 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37990 10 6452 1 2025-09-10 21:21:16.750 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 21:21:16.969 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 21:21:17.388 00:00:10.364 TCP 23.104.0.1:38838 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:21:39.352 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46504 10 6452 1 2025-09-10 21:18:26.507 00:05:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 21:22:17.792 00:00:10.370 TCP 23.104.0.1:39438 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:22:39.575 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:41004 10 6452 1 2025-09-10 21:23:18.199 00:00:10.366 TCP 23.104.0.1:53484 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:23:39.805 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50012 10 6452 1 2025-09-10 21:20:26.505 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 21:24:18.603 00:00:10.416 TCP 23.104.0.1:49084 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:24:40.031 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50362 10 6452 1 2025-09-10 21:25:19.063 00:00:10.365 TCP 23.104.0.1:55624 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:25:40.200 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51598 10 6452 1 2025-09-10 21:26:16.951 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 21:26:17.084 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 21:26:19.470 00:00:10.367 TCP 23.104.0.1:57942 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:26:40.368 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33508 10 6452 1 2025-09-10 21:27:19.882 00:00:10.389 TCP 23.104.0.1:60460 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:27:40.576 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:42770 10 6452 1 2025-09-10 21:28:20.310 00:00:10.369 TCP 23.104.0.1:44300 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:24:26.509 00:05:00.828 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 21:28:40.784 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43102 10 6452 1 2025-09-10 21:29:20.717 00:00:10.375 TCP 23.104.0.1:34866 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:29:41.002 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48094 10 6452 1 2025-09-10 21:30:21.132 00:00:10.368 TCP 23.104.0.1:46436 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:26:26.507 00:05:00.834 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 21:30:41.177 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49266 10 6452 1 2025-09-10 21:31:16.883 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 21:31:16.826 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 21:31:21.541 00:00:10.453 TCP 23.104.0.1:35342 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:31:41.399 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35540 10 6452 1 2025-09-10 21:32:22.062 00:00:10.694 TCP 23.104.0.1:49754 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:32:41.612 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60116 10 6452 1 2025-09-10 21:33:22.799 00:00:10.442 TCP 23.104.0.1:51816 -> 1.101.0.1:3000 15 1926 1 2025-09-10 21:33:41.824 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:48266 12 10367 1 2025-09-10 21:30:26.510 00:05:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 21:34:23.282 00:00:10.367 TCP 23.104.0.1:39534 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:34:42.082 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40208 10 6452 1 2025-09-10 21:35:23.687 00:00:10.365 TCP 23.104.0.1:46408 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:35:42.304 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59046 10 6452 1 2025-09-10 21:36:17.249 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 21:36:17.175 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 21:32:26.515 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 21:36:24.097 00:00:10.358 TCP 23.104.0.1:38516 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:36:42.521 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39804 10 6452 1 2025-09-10 21:37:24.492 00:00:10.363 TCP 23.104.0.1:33056 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:37:42.741 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43798 10 6452 1 2025-09-10 21:38:24.896 00:00:10.372 TCP 23.104.0.1:49510 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:38:42.957 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:34554 10 6452 1 2025-09-10 21:39:25.304 00:00:10.320 TCP 23.104.0.1:48306 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:39:43.148 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47394 10 6452 1 2025-09-10 21:36:26.517 00:05:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 21:40:25.669 00:00:10.363 TCP 23.104.0.1:53880 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:40:43.360 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33756 10 6452 1 2025-09-10 21:41:17.166 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 21:41:17.336 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 21:41:26.098 00:00:10.322 TCP 23.104.0.1:40502 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:41:43.569 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49068 10 6452 1 2025-09-10 21:38:26.515 00:05:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 21:42:26.457 00:00:10.367 TCP 23.104.0.1:56374 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:42:43.791 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40120 10 6452 1 2025-09-10 21:43:26.862 00:00:10.367 TCP 23.104.0.1:44222 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:43:44.000 00:00:10.452 TCP 1.101.0.1:3000 -> 22.102.0.1:58660 10 6452 1 2025-09-10 21:44:27.265 00:00:10.366 TCP 23.104.0.1:52492 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:44:44.497 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48132 10 6452 1 2025-09-10 21:45:27.669 00:00:10.326 TCP 23.104.0.1:49418 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:45:44.711 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33056 10 6452 1 2025-09-10 21:46:17.413 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 21:46:17.351 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 21:42:26.519 00:05:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 21:46:28.031 00:00:10.365 TCP 23.104.0.1:41558 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:46:44.931 00:00:19.356 TCP 1.101.0.1:3000 -> 22.102.0.1:49490 10 6452 1 2025-09-10 21:47:28.434 00:00:10.333 TCP 23.104.0.1:59786 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:47:54.359 00:00:10.433 TCP 1.101.0.1:3000 -> 22.102.0.1:54870 10 6452 1 2025-09-10 21:44:26.517 00:05:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 21:48:28.805 00:00:10.387 TCP 23.104.0.1:41596 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:48:54.826 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:46478 10 6452 1 2025-09-10 21:49:29.255 00:00:10.332 TCP 23.104.0.1:51750 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:49:55.008 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54756 10 6452 1 2025-09-10 21:50:29.632 00:00:10.329 TCP 23.104.0.1:38142 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:50:55.190 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57814 10 6452 1 2025-09-10 21:51:17.516 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 21:51:17.421 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 21:51:29.997 00:00:10.368 TCP 23.104.0.1:49292 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:51:55.402 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:52018 10 6452 1 2025-09-10 21:48:26.524 00:05:00.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 21:52:30.401 00:00:10.319 TCP 23.104.0.1:59520 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:52:55.609 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 10 6452 1 2025-09-10 21:53:30.761 00:00:10.380 TCP 23.104.0.1:51586 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:53:55.779 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44202 10 6452 1 2025-09-10 21:50:26.521 00:05:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-10 21:54:31.178 00:00:10.366 TCP 23.104.0.1:41678 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:54:55.993 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41562 10 6452 1 2025-09-10 21:55:31.582 00:00:10.363 TCP 23.104.0.1:41966 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:55:56.222 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37228 10 6452 1 2025-09-10 21:56:17.406 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-10 21:56:17.633 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-10 21:56:31.984 00:00:10.374 TCP 23.104.0.1:38992 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:56:56.433 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38640 10 6452 1 2025-09-10 21:57:32.399 00:00:10.322 TCP 23.104.0.1:54290 -> 1.101.0.1:3000 11 1507 1 2025-09-10 21:57:56.654 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51186 10 6452 1 2025-09-10 21:54:26.525 00:05:00.819 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-10 21:58:32.760 00:00:10.375 TCP 23.104.0.1:43694 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496282, total packets: 1569, avg bps: 1050, avg pps: 0, avg bpp: 316 Time window: 2025-09-10 20:56:26 - 2025-09-10 21:59:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0039s User: 0.0008s Wall: 0.0026s flows/second: 62739.4 Runtime: 0.0026s