Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-13 21:59:24.368 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48236 10 6452 1 2025-09-13 21:59:28.615 00:00:10.370 TCP 23.104.0.1:56502 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:00:24.585 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42000 10 6452 1 2025-09-13 22:00:29.019 00:00:10.366 TCP 23.104.0.1:56802 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:56:28.069 00:06:00.825 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 22:01:24.798 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50612 10 6452 1 2025-09-13 22:01:29.428 00:00:10.363 TCP 23.104.0.1:41446 -> 1.101.0.1:3000 11 1507 1 2025-09-13 21:57:28.073 00:06:00.820 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 22:02:25.008 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52608 10 6452 1 2025-09-13 22:02:29.832 00:00:10.378 TCP 23.104.0.1:46448 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:02:44.463 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 22:02:44.538 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 22:03:25.223 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58496 10 6452 1 2025-09-13 22:03:30.250 00:00:10.366 TCP 23.104.0.1:51720 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:04:25.439 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:46200 10 6452 1 2025-09-13 22:04:30.655 00:00:10.364 TCP 23.104.0.1:39784 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:05:25.617 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41816 10 6452 1 2025-09-13 22:05:31.059 00:00:10.366 TCP 23.104.0.1:46440 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:06:25.829 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-09-13 22:06:31.460 00:00:10.359 TCP 23.104.0.1:50914 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:07:26.001 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:50916 10 6452 1 2025-09-13 22:07:44.438 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 22:07:44.263 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 22:07:31.857 00:00:10.376 TCP 23.104.0.1:55962 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:03:28.069 00:06:00.827 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 22:08:26.260 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51948 10 6452 1 2025-09-13 22:08:32.273 00:00:10.366 TCP 23.104.0.1:45294 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:04:28.073 00:06:00.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 22:09:26.477 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38188 10 6452 1 2025-09-13 22:09:32.679 00:00:10.388 TCP 23.104.0.1:39870 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:10:26.697 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39114 10 6452 1 2025-09-13 22:10:33.109 00:00:10.365 TCP 23.104.0.1:50312 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:11:26.904 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57306 10 6452 1 2025-09-13 22:11:33.513 00:00:10.413 TCP 23.104.0.1:50176 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:12:27.119 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35186 10 6452 1 2025-09-13 22:12:44.512 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 22:12:44.433 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 22:12:33.970 00:00:10.372 TCP 23.104.0.1:51614 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:13:27.332 00:00:10.529 TCP 1.101.0.1:3000 -> 22.102.0.1:59748 10 6452 1 2025-09-13 22:13:34.392 00:00:10.370 TCP 23.104.0.1:54640 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:14:27.901 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40406 10 6452 1 2025-09-13 22:14:34.803 00:00:10.343 TCP 23.104.0.1:39468 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:10:28.072 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 22:15:28.121 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34184 10 6452 1 2025-09-13 22:15:35.183 00:00:10.367 TCP 23.104.0.1:36474 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:11:28.075 00:06:00.824 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 22:16:28.331 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49058 10 6452 1 2025-09-13 22:16:35.587 00:00:10.371 TCP 23.104.0.1:38650 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:17:28.543 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43066 10 6452 1 2025-09-13 22:17:35.996 00:00:10.325 TCP 23.104.0.1:49748 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:17:44.796 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 22:17:44.939 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 22:18:28.754 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35318 10 6452 1 2025-09-13 22:18:36.357 00:00:10.363 TCP 23.104.0.1:44118 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:19:28.925 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:60310 10 6452 1 2025-09-13 22:19:36.756 00:00:10.382 TCP 23.104.0.1:51232 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:20:29.111 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50186 10 6452 1 2025-09-13 22:20:37.171 00:00:10.370 TCP 23.104.0.1:34456 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:21:29.328 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46044 10 6452 1 2025-09-13 22:21:37.579 00:00:10.369 TCP 23.104.0.1:46330 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:17:28.074 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 22:22:29.543 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36160 10 6452 1 2025-09-13 22:22:44.695 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 22:22:44.687 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 22:22:37.984 00:00:10.371 TCP 23.104.0.1:59466 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:18:28.076 00:06:00.825 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 22:23:29.754 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:39246 10 6452 1 2025-09-13 22:23:38.384 00:00:10.366 TCP 23.104.0.1:52084 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:24:29.971 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:51882 10 6452 1 2025-09-13 22:24:38.789 00:00:10.416 TCP 23.104.0.1:50310 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:25:30.154 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36928 10 6452 1 2025-09-13 22:25:39.246 00:00:10.363 TCP 23.104.0.1:58716 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:26:30.364 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39708 10 6452 1 2025-09-13 22:26:39.645 00:00:10.361 TCP 23.104.0.1:44578 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:27:30.574 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49392 10 6452 1 2025-09-13 22:27:44.722 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 22:27:44.803 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 22:27:40.061 00:00:10.361 TCP 23.104.0.1:60150 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:28:30.787 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59240 10 6452 1 2025-09-13 22:28:40.465 00:00:10.362 TCP 23.104.0.1:37814 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:24:28.075 00:06:00.832 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 22:29:31.002 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54052 10 6452 1 2025-09-13 22:29:40.871 00:00:10.371 TCP 23.104.0.1:36854 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:25:28.077 00:06:00.829 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 22:30:31.248 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52650 10 6452 1 2025-09-13 22:30:41.276 00:00:10.364 TCP 23.104.0.1:40834 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:31:31.462 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:46208 10 6452 1 2025-09-13 22:31:41.677 00:00:10.364 TCP 23.104.0.1:34774 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:32:31.664 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:44046 10 6452 1 2025-09-13 22:32:44.967 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 22:32:44.968 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 22:32:42.110 00:00:10.374 TCP 23.104.0.1:59314 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:33:31.905 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41538 10 6452 1 2025-09-13 22:33:42.525 00:00:10.414 TCP 23.104.0.1:46270 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:34:32.120 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44396 10 6452 1 2025-09-13 22:34:42.980 00:00:10.366 TCP 23.104.0.1:37476 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:35:32.288 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39658 10 6452 1 2025-09-13 22:35:43.378 00:00:10.369 TCP 23.104.0.1:55858 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:31:28.080 00:06:00.829 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 22:36:32.502 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42002 10 6452 1 2025-09-13 22:36:43.779 00:00:10.368 TCP 23.104.0.1:37878 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:32:28.083 00:06:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 22:37:45.016 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 22:37:45.142 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 22:37:32.710 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:36986 10 6452 1 2025-09-13 22:37:44.185 00:00:10.360 TCP 23.104.0.1:54828 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:38:32.986 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:46036 10 6452 1 2025-09-13 22:38:44.587 00:00:10.326 TCP 23.104.0.1:56202 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:39:33.215 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45896 10 6452 1 2025-09-13 22:39:44.950 00:00:10.369 TCP 23.104.0.1:37156 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:40:33.437 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52316 10 6452 1 2025-09-13 22:40:45.367 00:00:10.389 TCP 23.104.0.1:34728 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:41:33.645 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48604 10 6452 1 2025-09-13 22:41:45.799 00:00:10.365 TCP 23.104.0.1:51372 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:42:33.860 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58660 10 6452 1 2025-09-13 22:42:44.999 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 22:42:44.866 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 22:42:46.207 00:00:10.440 TCP 23.104.0.1:46630 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:38:28.081 00:06:00.830 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 22:43:34.039 00:00:10.605 TCP 1.101.0.1:3000 -> 22.102.0.1:56688 10 6452 1 2025-09-13 22:43:46.687 00:00:10.441 TCP 23.104.0.1:49794 -> 1.101.0.1:3000 15 1926 1 2025-09-13 22:39:28.086 00:06:00.822 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 22:44:34.683 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51032 12 10367 1 2025-09-13 22:44:47.170 00:00:10.360 TCP 23.104.0.1:50172 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:45:34.886 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54490 10 6452 1 2025-09-13 22:45:47.566 00:00:10.368 TCP 23.104.0.1:57542 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:46:35.124 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38590 10 6452 1 2025-09-13 22:46:47.972 00:00:10.367 TCP 23.104.0.1:43112 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:47:45.199 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 22:47:35.332 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55652 10 6452 1 2025-09-13 22:47:45.136 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 22:47:48.378 00:00:10.365 TCP 23.104.0.1:38450 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:48:35.545 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33182 10 6452 1 2025-09-13 22:48:48.784 00:00:10.364 TCP 23.104.0.1:40736 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:49:35.761 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:35244 10 6452 1 2025-09-13 22:49:49.186 00:00:10.366 TCP 23.104.0.1:52152 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:45:28.086 00:06:00.828 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 22:50:35.940 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:42250 10 6452 1 2025-09-13 22:50:49.586 00:00:10.362 TCP 23.104.0.1:44122 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:46:28.088 00:06:00.823 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 22:51:36.178 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57252 10 6452 1 2025-09-13 22:51:49.990 00:00:10.356 TCP 23.104.0.1:44640 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:52:45.368 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 22:52:45.509 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 22:52:36.391 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55666 10 6452 1 2025-09-13 22:52:50.384 00:00:10.364 TCP 23.104.0.1:46338 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:53:36.605 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48848 10 6452 1 2025-09-13 22:53:50.784 00:00:10.369 TCP 23.104.0.1:45912 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:54:36.818 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55972 10 6452 1 2025-09-13 22:54:51.185 00:00:10.366 TCP 23.104.0.1:33930 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:55:37.043 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56154 10 6452 1 2025-09-13 22:55:51.589 00:00:10.364 TCP 23.104.0.1:39996 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:56:37.208 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54768 10 6452 1 2025-09-13 22:56:51.990 00:00:10.380 TCP 23.104.0.1:43378 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:52:28.090 00:06:00.826 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-13 22:57:45.366 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-13 22:57:45.593 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-13 22:57:37.429 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51156 10 6452 1 2025-09-13 22:57:52.395 00:00:10.372 TCP 23.104.0.1:52848 -> 1.101.0.1:3000 11 1507 1 2025-09-13 22:53:28.092 00:06:00.821 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-13 22:58:37.649 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42106 10 6452 1 Summary: total flows: 161, total bytes: 501913, total packets: 1579, avg bps: 1062, avg pps: 0, avg bpp: 317 Time window: 2025-09-13 21:56:28 - 2025-09-13 22:59:28 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0021s User: 0.0031s Wall: 0.0027s flows/second: 59276.9 Runtime: 0.0027s