Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 21:59:10.109 00:00:10.640 TCP 23.104.0.1:53372 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:59:15.255 00:00:11.114 TCP 1.101.0.1:3000 -> 22.102.0.1:51568 10 6452 1 2025-09-15 22:00:10.783 00:00:10.363 TCP 23.104.0.1:43392 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:00:16.407 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42526 10 6452 1 2025-09-15 21:56:28.901 00:05:01.078 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 22:01:11.183 00:00:10.362 TCP 23.104.0.1:53186 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:01:16.635 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50524 10 6452 1 2025-09-15 21:57:28.904 00:05:01.073 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 22:02:11.584 00:00:10.364 TCP 23.104.0.1:53332 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:02:16.802 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51486 10 6452 1 2025-09-15 22:03:11.987 00:00:10.366 TCP 23.104.0.1:33900 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:03:17.029 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43728 10 6452 1 2025-09-15 22:03:41.854 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 22:03:42.029 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 22:04:12.391 00:00:10.365 TCP 23.104.0.1:54112 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:04:17.244 00:00:10.542 TCP 1.101.0.1:3000 -> 22.102.0.1:48670 10 6452 1 2025-09-15 22:05:12.796 00:00:10.361 TCP 23.104.0.1:42714 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:05:17.825 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:42148 10 6452 1 2025-09-15 22:06:13.198 00:00:10.367 TCP 23.104.0.1:60736 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:06:18.005 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56848 12 6556 1 2025-09-15 22:02:28.902 00:05:01.078 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 22:07:13.684 00:00:10.372 TCP 23.104.0.1:59198 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:07:18.220 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38124 10 6452 1 2025-09-15 22:03:28.905 00:05:01.073 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 22:08:14.108 00:00:10.372 TCP 23.104.0.1:58080 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:08:18.436 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38248 10 6452 1 2025-09-15 22:08:41.881 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 22:08:42.078 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 22:09:14.514 00:00:10.325 TCP 23.104.0.1:46084 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:09:18.645 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36580 10 6452 1 2025-09-15 22:10:14.877 00:00:10.419 TCP 23.104.0.1:56874 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:10:18.867 00:00:10.887 TCP 1.101.0.1:3000 -> 22.102.0.1:58516 10 6452 1 2025-09-15 22:11:15.326 00:00:10.364 TCP 23.104.0.1:39822 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:11:19.793 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51328 10 6452 1 2025-09-15 22:12:15.734 00:00:10.367 TCP 23.104.0.1:47088 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:12:20.008 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37988 10 6452 1 2025-09-15 22:08:28.903 00:05:01.080 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 22:13:16.142 00:00:10.364 TCP 23.104.0.1:36566 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:13:20.224 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43740 10 6452 1 2025-09-15 22:09:28.913 00:05:01.068 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 22:13:42.452 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 22:13:42.197 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 22:14:16.544 00:00:10.373 TCP 23.104.0.1:51448 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:14:20.439 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:43716 10 6452 1 2025-09-15 22:15:20.613 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37186 10 6452 1 2025-09-15 22:15:16.956 00:00:10.364 TCP 23.104.0.1:47634 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:16:17.358 00:00:10.465 TCP 23.104.0.1:33792 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:16:20.825 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36746 10 6452 1 2025-09-15 22:17:20.997 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42260 10 6452 1 2025-09-15 22:17:17.866 00:00:10.371 TCP 23.104.0.1:58912 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:18:18.276 00:00:10.320 TCP 23.104.0.1:44812 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:18:21.216 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53910 10 6452 1 2025-09-15 22:14:28.904 00:05:01.079 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 22:18:42.633 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 22:18:42.676 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 22:19:18.635 00:00:10.366 TCP 23.104.0.1:56224 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:15:28.909 00:05:01.071 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 22:19:21.428 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34390 10 6452 1 2025-09-15 22:20:19.059 00:00:10.366 TCP 23.104.0.1:51498 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:20:21.637 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:43428 10 6452 1 2025-09-15 22:21:21.805 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36852 10 6452 1 2025-09-15 22:21:19.461 00:00:10.746 TCP 23.104.0.1:41570 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:22:20.241 00:00:10.363 TCP 23.104.0.1:47100 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:22:22.033 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45978 10 6452 1 2025-09-15 22:23:20.642 00:00:10.335 TCP 23.104.0.1:39838 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:23:22.249 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45342 10 6452 1 2025-09-15 22:23:42.607 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 22:23:42.295 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 22:20:28.905 00:05:01.081 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 22:24:21.018 00:00:10.324 TCP 23.104.0.1:52474 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:24:22.464 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47720 10 6452 1 2025-09-15 22:21:28.907 00:05:01.077 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 22:25:21.378 00:00:10.367 TCP 23.104.0.1:41836 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:25:22.681 00:00:10.678 TCP 1.101.0.1:3000 -> 22.102.0.1:52508 10 6452 1 2025-09-15 22:26:23.414 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50476 10 6452 1 2025-09-15 22:26:21.782 00:00:10.371 TCP 23.104.0.1:40822 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:27:22.193 00:00:10.375 TCP 23.104.0.1:39936 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:27:23.638 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53480 10 6452 1 2025-09-15 22:28:22.605 00:00:10.369 TCP 23.104.0.1:45586 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:28:23.865 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:49504 10 6452 1 2025-09-15 22:28:42.644 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 22:28:42.587 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 22:29:23.006 00:00:10.444 TCP 23.104.0.1:46630 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:29:24.117 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44552 10 6452 1 2025-09-15 22:30:23.492 00:00:10.375 TCP 23.104.0.1:36244 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:26:28.906 00:05:01.082 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 22:30:24.333 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40126 10 6452 1 2025-09-15 22:31:24.555 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37754 10 6452 1 2025-09-15 22:27:28.908 00:05:01.077 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 22:31:23.900 00:00:10.368 TCP 23.104.0.1:58904 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:32:24.766 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51042 10 6452 1 2025-09-15 22:32:24.311 00:00:10.365 TCP 23.104.0.1:39886 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:33:24.720 00:00:10.389 TCP 23.104.0.1:53116 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:33:24.991 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:36372 10 6452 1 2025-09-15 22:33:42.646 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 22:33:43.025 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 22:34:25.141 00:00:10.362 TCP 23.104.0.1:34236 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:34:25.235 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53940 10 6452 1 2025-09-15 22:35:25.447 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:52458 12 10365 1 2025-09-15 22:35:25.547 00:00:10.434 TCP 23.104.0.1:33268 -> 1.101.0.1:3000 15 1926 1 2025-09-15 22:32:28.908 00:05:01.081 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 22:36:26.026 00:00:10.364 TCP 23.104.0.1:40620 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:36:25.681 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37758 12 6556 1 2025-09-15 22:33:28.911 00:05:01.075 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 22:37:25.893 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60658 10 6452 1 2025-09-15 22:37:26.433 00:00:10.368 TCP 23.104.0.1:55376 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:38:26.110 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51682 10 6452 1 2025-09-15 22:38:26.839 00:00:10.391 TCP 23.104.0.1:43656 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:38:43.035 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 22:38:43.283 00:00:00.013 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 22:39:26.319 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48834 10 6452 1 2025-09-15 22:39:27.264 00:00:10.367 TCP 23.104.0.1:49412 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:40:26.536 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43514 10 6452 1 2025-09-15 22:40:27.670 00:00:10.371 TCP 23.104.0.1:40842 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:41:26.750 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49306 10 6452 1 2025-09-15 22:41:28.100 00:00:10.321 TCP 23.104.0.1:39658 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:38:28.909 00:05:01.081 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 22:42:26.965 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52312 10 6452 1 2025-09-15 22:42:28.466 00:00:10.363 TCP 23.104.0.1:33332 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:39:28.911 00:05:01.076 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 22:43:28.866 00:00:10.372 TCP 23.104.0.1:43758 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:43:27.184 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48154 11 6492 1 2025-09-15 22:43:42.794 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 22:43:42.933 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 22:44:27.399 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41850 10 6452 1 2025-09-15 22:44:29.274 00:00:10.323 TCP 23.104.0.1:58564 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:45:29.635 00:00:10.369 TCP 23.104.0.1:37776 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:45:27.627 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51160 10 6452 1 2025-09-15 22:46:27.860 00:00:10.593 TCP 1.101.0.1:3000 -> 22.102.0.1:49094 10 6452 1 2025-09-15 22:46:30.060 00:00:10.372 TCP 23.104.0.1:52348 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:47:30.473 00:00:10.368 TCP 23.104.0.1:58408 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:47:28.495 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:33646 10 6452 1 2025-09-15 22:44:28.911 00:05:01.084 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 22:48:28.735 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:51516 10 6452 1 2025-09-15 22:48:30.876 00:00:10.329 TCP 23.104.0.1:38914 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:48:42.905 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 22:48:42.997 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 22:45:28.914 00:05:01.078 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 22:49:31.250 00:00:10.386 TCP 23.104.0.1:55774 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:49:28.971 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:41310 10 6452 1 2025-09-15 22:50:29.169 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37410 10 6452 1 2025-09-15 22:50:31.687 00:00:10.330 TCP 23.104.0.1:33896 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:51:29.394 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33484 10 6452 1 2025-09-15 22:51:32.057 00:00:10.369 TCP 23.104.0.1:32960 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:52:29.627 00:00:10.435 TCP 1.101.0.1:3000 -> 22.102.0.1:55542 10 6452 1 2025-09-15 22:52:32.457 00:00:10.371 TCP 23.104.0.1:41134 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:53:30.101 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60708 10 6452 1 2025-09-15 22:53:43.106 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 22:53:32.860 00:00:10.334 TCP 23.104.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:53:43.210 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 22:50:28.913 00:05:01.082 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 22:54:30.313 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44092 10 6452 1 2025-09-15 22:54:33.234 00:00:10.421 TCP 23.104.0.1:55438 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:51:28.914 00:05:01.080 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 22:55:30.536 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47376 10 6452 1 2025-09-15 22:55:33.696 00:00:10.324 TCP 23.104.0.1:41308 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:56:30.751 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36562 10 6452 1 2025-09-15 22:56:34.087 00:00:10.364 TCP 23.104.0.1:47896 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:57:30.960 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36736 12 6556 1 2025-09-15 22:57:34.492 00:00:10.399 TCP 23.104.0.1:36214 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:58:31.191 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35216 10 6452 1 2025-09-15 22:58:43.411 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 22:58:34.924 00:00:10.384 TCP 23.104.0.1:44606 -> 1.101.0.1:3000 11 1507 1 2025-09-15 22:58:43.269 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 164, total bytes: 503032, total packets: 1585, avg bps: 1077, avg pps: 0, avg bpp: 317 Time window: 2025-09-15 21:56:28 - 2025-09-15 22:58:45 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0038s User: 0.0000s Wall: 0.0015s flows/second: 111035.7 Runtime: 0.0015s