Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-12 21:58:51.404 00:00:10.369 TCP 23.104.0.1:39724 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:59:38.387 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33976 10 6452 1 2025-09-12 21:59:51.817 00:00:10.366 TCP 23.104.0.1:47862 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:00:38.601 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43638 10 6452 1 2025-09-12 22:00:52.223 00:00:10.365 TCP 23.104.0.1:35400 -> 1.101.0.1:3000 11 1507 1 2025-09-12 21:57:27.537 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 21:57:27.535 00:05:00.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 22:01:38.814 00:00:10.537 TCP 1.101.0.1:3000 -> 22.102.0.1:55268 10 6452 1 2025-09-12 22:01:52.622 00:00:10.856 TCP 23.104.0.1:51142 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:02:15.412 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 22:02:15.138 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 22:02:39.396 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36058 10 6452 1 2025-09-12 22:02:53.515 00:00:10.328 TCP 23.104.0.1:43828 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:03:39.610 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35486 10 6452 1 2025-09-12 22:03:53.882 00:00:10.377 TCP 23.104.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:04:39.821 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60494 10 6452 1 2025-09-12 22:04:54.305 00:00:10.371 TCP 23.104.0.1:34832 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:05:40.062 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39032 10 6452 1 2025-09-12 22:05:54.714 00:00:10.373 TCP 23.104.0.1:59776 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:06:40.277 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47290 10 6452 1 2025-09-12 22:06:55.132 00:00:10.373 TCP 23.104.0.1:42124 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:07:15.348 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 22:07:15.280 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 22:03:27.539 00:05:00.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 22:03:27.535 00:05:00.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 22:07:40.457 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:48450 10 6452 1 2025-09-12 22:07:55.543 00:00:10.366 TCP 23.104.0.1:34006 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:08:40.696 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:33096 12 10367 1 2025-09-12 22:08:55.946 00:00:10.404 TCP 23.104.0.1:40260 -> 1.101.0.1:3000 15 1926 1 2025-09-12 22:09:40.938 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:53494 10 6452 1 2025-09-12 22:09:56.386 00:00:10.761 TCP 23.104.0.1:45812 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:10:41.184 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58096 10 6452 1 2025-09-12 22:10:57.185 00:00:10.377 TCP 23.104.0.1:40226 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:11:41.403 00:00:10.405 TCP 1.101.0.1:3000 -> 22.102.0.1:59666 10 6452 1 2025-09-12 22:11:57.587 00:00:10.365 TCP 23.104.0.1:59688 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:12:15.488 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 22:12:15.543 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 22:12:41.848 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57588 10 6452 1 2025-09-12 22:12:57.988 00:00:10.368 TCP 23.104.0.1:47588 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:09:27.539 00:05:00.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 22:09:27.538 00:05:00.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 22:13:42.081 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47546 10 6452 1 2025-09-12 22:13:58.396 00:00:10.363 TCP 23.104.0.1:56652 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:14:42.312 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56942 10 6452 1 2025-09-12 22:14:58.797 00:00:10.367 TCP 23.104.0.1:58364 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:15:42.524 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60208 10 6452 1 2025-09-12 22:15:59.205 00:00:10.364 TCP 23.104.0.1:53464 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:16:42.741 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52676 10 6452 1 2025-09-12 22:16:59.608 00:00:10.365 TCP 23.104.0.1:44084 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:17:15.700 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 22:17:15.726 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 22:17:42.957 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47630 10 6452 1 2025-09-12 22:18:00.014 00:00:10.364 TCP 23.104.0.1:56364 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:18:43.201 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:46622 12 10365 1 2025-09-12 22:19:00.419 00:00:10.434 TCP 23.104.0.1:39828 -> 1.101.0.1:3000 15 1926 1 2025-09-12 22:15:27.541 00:05:00.896 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 22:15:27.538 00:05:00.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 22:19:43.445 00:00:10.657 TCP 1.101.0.1:3000 -> 22.102.0.1:43428 10 6452 1 2025-09-12 22:20:00.895 00:00:10.379 TCP 23.104.0.1:39998 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:20:44.135 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36204 10 6452 1 2025-09-12 22:21:01.310 00:00:10.370 TCP 23.104.0.1:42162 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:21:44.346 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60894 10 6452 1 2025-09-12 22:22:15.798 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 22:22:15.651 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 22:22:01.718 00:00:10.378 TCP 23.104.0.1:32946 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:22:44.565 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43416 10 6452 1 2025-09-12 22:23:02.133 00:00:10.368 TCP 23.104.0.1:49506 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:23:44.778 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50068 10 6452 1 2025-09-12 22:24:02.540 00:00:10.362 TCP 23.104.0.1:46238 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:24:44.998 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:43852 10 6452 1 2025-09-12 22:25:02.934 00:00:10.381 TCP 23.104.0.1:40452 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:21:27.540 00:05:00.902 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 22:21:27.543 00:05:00.897 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 22:25:45.193 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35770 10 6452 1 2025-09-12 22:26:03.362 00:00:10.328 TCP 23.104.0.1:51556 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:26:45.371 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44274 10 6452 1 2025-09-12 22:27:15.782 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 22:27:03.728 00:00:10.369 TCP 23.104.0.1:43106 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:27:16.006 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 22:27:45.583 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37586 10 6452 1 2025-09-12 22:28:04.140 00:00:10.375 TCP 23.104.0.1:39830 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:28:45.800 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35816 10 6452 1 2025-09-12 22:29:04.550 00:00:10.363 TCP 23.104.0.1:52064 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:29:46.016 00:00:10.422 TCP 1.101.0.1:3000 -> 22.102.0.1:59968 10 6452 1 2025-09-12 22:30:04.950 00:00:10.366 TCP 23.104.0.1:47292 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:30:46.475 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49248 10 6452 1 2025-09-12 22:31:05.367 00:00:10.361 TCP 23.104.0.1:32842 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:27:27.543 00:05:00.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 22:27:27.546 00:05:00.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 22:31:46.683 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42208 10 6452 1 2025-09-12 22:32:05.767 00:00:10.372 TCP 23.104.0.1:56522 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:32:16.203 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 22:32:15.988 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 22:32:46.896 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34690 10 6452 1 2025-09-12 22:33:06.178 00:00:10.364 TCP 23.104.0.1:55182 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:33:47.120 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:35488 10 6452 1 2025-09-12 22:34:06.580 00:00:10.364 TCP 23.104.0.1:51166 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:34:47.354 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35494 10 6452 1 2025-09-12 22:35:06.983 00:00:10.372 TCP 23.104.0.1:53972 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:35:47.578 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:47632 10 6452 1 2025-09-12 22:36:07.391 00:00:10.372 TCP 23.104.0.1:41870 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:36:47.817 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58104 10 6452 1 2025-09-12 22:37:16.011 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 22:37:15.873 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 22:33:27.544 00:05:00.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 22:37:07.796 00:00:20.344 TCP 23.104.0.1:44338 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:33:27.547 00:05:00.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 22:37:48.051 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50478 10 6452 1 2025-09-12 22:38:18.196 00:00:10.370 TCP 23.104.0.1:53726 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:38:48.260 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39186 10 6452 1 2025-09-12 22:39:18.603 00:00:10.361 TCP 23.104.0.1:47336 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:39:48.473 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56574 10 6452 1 2025-09-12 22:40:19.007 00:00:10.360 TCP 23.104.0.1:57492 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:40:48.650 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35514 10 6452 1 2025-09-12 22:41:19.403 00:00:10.320 TCP 23.104.0.1:46794 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:41:48.863 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37098 10 6452 1 2025-09-12 22:42:16.239 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 22:42:16.038 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 22:42:19.765 00:00:10.366 TCP 23.104.0.1:35684 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:42:49.104 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52634 10 6452 1 2025-09-12 22:39:27.550 00:05:00.894 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 22:43:20.171 00:00:10.365 TCP 23.104.0.1:53218 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:39:27.548 00:05:00.899 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 22:43:49.323 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53760 10 6452 1 2025-09-12 22:44:20.575 00:00:10.368 TCP 23.104.0.1:43038 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:44:49.538 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36608 10 6452 1 2025-09-12 22:45:20.978 00:00:10.372 TCP 23.104.0.1:59328 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:45:49.751 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58490 10 6452 1 2025-09-12 22:46:21.382 00:00:10.364 TCP 23.104.0.1:41984 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:46:49.962 00:00:10.229 TCP 1.101.0.1:3000 -> 22.102.0.1:36378 12 6556 1 2025-09-12 22:47:16.297 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 22:47:16.461 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 22:47:21.798 00:00:10.359 TCP 23.104.0.1:60610 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:47:50.229 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55312 10 6452 1 2025-09-12 22:48:22.199 00:00:10.360 TCP 23.104.0.1:36464 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:48:50.474 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60730 10 6452 1 2025-09-12 22:45:27.551 00:05:00.897 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 22:45:27.555 00:05:00.891 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 22:49:22.601 00:00:10.368 TCP 23.104.0.1:54036 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:49:50.687 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55094 10 6452 1 2025-09-12 22:50:23.010 00:00:10.359 TCP 23.104.0.1:41248 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:50:50.907 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46736 10 6452 1 2025-09-12 22:51:23.410 00:00:10.362 TCP 23.104.0.1:48732 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:51:51.119 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59124 10 6452 1 2025-09-12 22:52:16.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 22:52:16.207 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 22:52:23.814 00:00:10.324 TCP 23.104.0.1:44922 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:52:51.296 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35398 10 6452 1 2025-09-12 22:53:24.177 00:00:10.370 TCP 23.104.0.1:57134 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:53:51.472 00:00:10.589 TCP 1.101.0.1:3000 -> 22.102.0.1:44042 10 6452 1 2025-09-12 22:54:24.582 00:00:10.368 TCP 23.104.0.1:35744 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:54:52.099 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54020 10 6452 1 2025-09-12 22:51:27.551 00:05:00.898 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-12 22:51:27.553 00:05:00.893 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-12 22:55:24.986 00:00:10.369 TCP 23.104.0.1:55098 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:55:52.309 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45712 10 6452 1 2025-09-12 22:56:25.391 00:00:10.363 TCP 23.104.0.1:33572 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:56:52.522 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:52632 10 6452 1 2025-09-12 22:57:16.520 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-12 22:57:16.489 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-12 22:57:25.795 00:00:10.367 TCP 23.104.0.1:39024 -> 1.101.0.1:3000 11 1507 1 2025-09-12 22:57:52.735 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49184 10 6452 1 2025-09-12 22:58:26.203 00:00:10.464 TCP 23.104.0.1:53170 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 163, total bytes: 501085, total packets: 1580, avg bps: 1092, avg pps: 0, avg bpp: 317 Time window: 2025-09-12 21:57:27 - 2025-09-12 22:58:36 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0034s User: 0.0017s Wall: 0.0026s flows/second: 63156.7 Runtime: 0.0026s