Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-18 21:59:14.672 00:00:10.368 TCP 23.104.0.1:35834 -> 1.101.0.1:3000 11 1507 1 2025-09-18 21:59:22.139 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56252 10 6452 1 2025-09-18 22:00:08.797 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 22:00:08.635 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:00:15.108 00:00:10.324 TCP 23.104.0.1:37858 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:00:22.352 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58640 10 6452 1 2025-09-18 21:56:30.311 00:05:01.229 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 22:01:15.474 00:00:10.321 TCP 23.104.0.1:39538 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:01:22.562 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58278 10 6452 1 2025-09-18 21:57:30.315 00:05:01.223 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 22:02:15.839 00:00:10.388 TCP 23.104.0.1:39892 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:02:22.782 00:00:11.066 TCP 1.101.0.1:3000 -> 22.102.0.1:49172 10 6452 1 2025-09-18 22:03:16.268 00:00:10.359 TCP 23.104.0.1:35242 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:03:23.886 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48380 10 6452 1 2025-09-18 22:04:16.664 00:00:10.364 TCP 23.104.0.1:46556 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:04:24.083 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50764 10 6452 1 2025-09-18 22:05:08.947 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 22:05:08.793 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:05:17.090 00:00:10.324 TCP 23.104.0.1:60916 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:05:24.300 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59242 10 6452 1 2025-09-18 22:06:17.451 00:00:10.367 TCP 23.104.0.1:38648 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:02:30.317 00:05:01.225 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 22:06:24.524 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51450 10 6452 1 2025-09-18 22:07:17.881 00:00:10.382 TCP 23.104.0.1:37838 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:03:30.318 00:05:01.220 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 22:07:24.732 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33742 10 6452 1 2025-09-18 22:08:18.312 00:00:10.328 TCP 23.104.0.1:55074 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:08:24.965 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:50036 10 6452 1 2025-09-18 22:09:18.681 00:00:10.366 TCP 23.104.0.1:47028 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:09:25.200 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:48008 10 6452 1 2025-09-18 22:10:08.903 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 22:10:08.828 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:10:19.101 00:00:10.370 TCP 23.104.0.1:53156 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:10:25.416 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51032 10 6452 1 2025-09-18 22:11:19.507 00:00:10.561 TCP 23.104.0.1:36394 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:11:25.629 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42906 10 6452 1 2025-09-18 22:12:20.111 00:00:10.361 TCP 23.104.0.1:55150 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:12:25.851 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33236 10 6452 1 2025-09-18 22:08:30.317 00:05:01.225 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 22:09:30.320 00:05:01.220 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 22:13:20.511 00:00:10.362 TCP 23.104.0.1:39838 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:13:26.033 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:45096 10 6452 1 2025-09-18 22:14:20.910 00:00:10.370 TCP 23.104.0.1:58998 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:14:26.203 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45650 10 6452 1 2025-09-18 22:15:08.727 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:15:09.056 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 22:15:21.326 00:00:10.331 TCP 23.104.0.1:57272 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:15:26.426 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53960 10 6452 1 2025-09-18 22:16:21.694 00:00:10.327 TCP 23.104.0.1:45404 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:16:26.636 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35790 10 6452 1 2025-09-18 22:17:22.086 00:00:10.361 TCP 23.104.0.1:40034 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:17:26.848 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41872 10 6452 1 2025-09-18 22:14:30.318 00:05:01.225 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 22:18:22.487 00:00:10.950 TCP 23.104.0.1:42918 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:18:27.080 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41774 10 6452 1 2025-09-18 22:19:23.477 00:00:10.370 TCP 23.104.0.1:48574 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:15:30.320 00:05:01.221 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 22:19:27.300 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49740 10 6452 1 2025-09-18 22:20:08.789 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 22:20:08.686 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:20:23.885 00:00:10.373 TCP 23.104.0.1:53526 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:20:27.511 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45262 10 6452 1 2025-09-18 22:21:24.295 00:00:10.369 TCP 23.104.0.1:46182 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:21:27.727 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56788 10 6452 1 2025-09-18 22:22:24.700 00:00:10.371 TCP 23.104.0.1:60930 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:22:27.901 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35202 10 6452 1 2025-09-18 22:23:25.109 00:00:10.938 TCP 23.104.0.1:51032 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:23:28.118 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33372 10 6452 1 2025-09-18 22:20:30.319 00:05:01.226 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 22:24:26.109 00:00:10.404 TCP 23.104.0.1:56778 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:24:28.330 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46828 10 6452 1 2025-09-18 22:25:08.966 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 22:25:09.214 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:21:30.322 00:05:01.221 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 22:25:26.551 00:00:10.362 TCP 23.104.0.1:34042 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:25:28.542 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55306 10 6452 1 2025-09-18 22:26:28.759 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40466 10 6452 1 2025-09-18 22:26:26.951 00:00:10.376 TCP 23.104.0.1:35662 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:27:27.359 00:00:10.362 TCP 23.104.0.1:50938 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:27:28.965 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:46424 10 6452 1 2025-09-18 22:28:29.200 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48578 10 6452 1 2025-09-18 22:28:27.759 00:00:10.370 TCP 23.104.0.1:36904 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:29:28.162 00:00:10.326 TCP 23.104.0.1:34464 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:29:29.409 00:00:10.533 TCP 1.101.0.1:3000 -> 22.102.0.1:47992 10 6452 1 2025-09-18 22:30:09.188 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 22:30:08.965 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:26:30.322 00:05:01.225 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 22:30:29.981 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47452 10 6452 1 2025-09-18 22:30:28.527 00:00:10.365 TCP 23.104.0.1:60950 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:27:30.325 00:05:01.220 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 22:31:28.929 00:00:10.388 TCP 23.104.0.1:58178 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:31:30.206 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56648 10 6452 1 2025-09-18 22:32:30.416 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52996 10 6452 1 2025-09-18 22:32:29.355 00:00:10.364 TCP 23.104.0.1:47450 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:33:30.632 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56810 10 6452 1 2025-09-18 22:33:29.758 00:00:10.382 TCP 23.104.0.1:46146 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:34:30.852 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38652 10 6452 1 2025-09-18 22:34:30.180 00:00:10.413 TCP 23.104.0.1:36844 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:35:09.291 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 22:35:09.047 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:35:30.631 00:00:10.375 TCP 23.104.0.1:48478 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:35:31.088 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59460 10 6452 1 2025-09-18 22:32:30.323 00:05:01.228 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 22:36:31.303 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49892 10 6452 1 2025-09-18 22:36:31.049 00:00:10.365 TCP 23.104.0.1:37200 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:33:30.326 00:05:01.223 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 22:37:31.521 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54118 10 6452 1 2025-09-18 22:37:31.454 00:00:10.368 TCP 23.104.0.1:47682 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:38:31.693 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55818 10 6452 1 2025-09-18 22:38:31.860 00:00:10.323 TCP 23.104.0.1:35902 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:39:32.223 00:00:10.370 TCP 23.104.0.1:57072 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:39:31.910 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:51526 10 6452 1 2025-09-18 22:40:09.337 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 22:40:09.650 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:40:32.635 00:00:10.361 TCP 23.104.0.1:50672 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:40:32.107 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:47382 10 6452 1 2025-09-18 22:41:32.280 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58488 10 6452 1 2025-09-18 22:41:33.033 00:00:10.349 TCP 23.104.0.1:43708 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:38:30.326 00:05:01.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 22:42:33.421 00:00:10.367 TCP 23.104.0.1:40868 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:42:32.510 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44332 10 6452 1 2025-09-18 22:39:30.327 00:05:01.222 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 22:43:32.727 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37598 10 6452 1 2025-09-18 22:43:33.821 00:00:10.394 TCP 23.104.0.1:58102 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:44:34.254 00:00:10.362 TCP 23.104.0.1:43814 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:44:32.943 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:49906 10 6452 1 2025-09-18 22:45:10.018 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:45:10.163 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 22:45:34.663 00:00:10.364 TCP 23.104.0.1:48940 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:45:33.170 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40056 10 6452 1 2025-09-18 22:46:35.075 00:00:10.362 TCP 23.104.0.1:53432 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:46:33.384 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53588 10 6452 1 2025-09-18 22:47:35.478 00:00:10.362 TCP 23.104.0.1:40576 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:47:33.594 00:00:10.642 TCP 1.101.0.1:3000 -> 22.102.0.1:37270 10 6452 1 2025-09-18 22:44:30.327 00:05:01.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 22:48:34.274 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42550 10 6452 1 2025-09-18 22:48:35.876 00:00:10.369 TCP 23.104.0.1:38008 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:45:30.328 00:05:01.223 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 22:49:36.280 00:00:10.323 TCP 23.104.0.1:51562 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:49:34.445 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47574 10 6452 1 2025-09-18 22:50:09.691 00:00:00.009 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:50:09.602 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 22:50:34.668 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54254 10 6452 1 2025-09-18 22:50:36.650 00:00:10.329 TCP 23.104.0.1:43748 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:51:34.880 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60476 10 6452 1 2025-09-18 22:51:37.018 00:00:10.370 TCP 23.104.0.1:49240 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:52:35.109 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52578 10 6452 1 2025-09-18 22:52:37.423 00:00:10.334 TCP 23.104.0.1:54968 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:53:35.277 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46748 10 6452 1 2025-09-18 22:53:37.794 00:00:10.337 TCP 23.104.0.1:44736 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:50:30.327 00:05:01.229 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-18 22:54:35.497 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55826 10 6452 1 2025-09-18 22:54:38.168 00:00:10.324 TCP 23.104.0.1:43330 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:55:09.820 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-18 22:55:09.708 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-18 22:51:30.329 00:05:01.224 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-18 22:55:35.714 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42106 10 6452 1 2025-09-18 22:55:38.533 00:00:10.322 TCP 23.104.0.1:41374 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:56:35.888 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39800 10 6452 1 2025-09-18 22:56:38.890 00:00:10.373 TCP 23.104.0.1:60478 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:57:36.108 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52786 10 6452 1 2025-09-18 22:57:39.303 00:00:10.365 TCP 23.104.0.1:49648 -> 1.101.0.1:3000 11 1507 1 2025-09-18 22:58:36.318 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58644 10 6452 1 2025-09-18 22:58:39.703 00:00:10.363 TCP 23.104.0.1:40308 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1066, avg pps: 0, avg bpp: 317 Time window: 2025-09-18 21:56:30 - 2025-09-18 22:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0021s Wall: 0.0021s flows/second: 78775.3 Runtime: 0.0021s