Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-14 21:58:50.306 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42678 10 6452 1 2025-11-14 21:59:19.360 00:00:10.360 TCP 23.104.0.1:34782 -> 1.101.0.1:3000 11 1507 1 2025-11-14 21:59:50.515 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33914 10 6452 1 2025-11-14 22:00:19.760 00:00:10.382 TCP 23.104.0.1:41382 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:00:50.727 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:41378 10 6452 1 2025-11-14 22:01:20.177 00:00:10.365 TCP 23.104.0.1:35382 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:01:50.935 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:49702 10 6452 1 2025-11-14 22:02:20.576 00:00:10.427 TCP 23.104.0.1:56046 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:02:35.234 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 22:02:35.227 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 22:02:51.170 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52214 10 6452 1 2025-11-14 22:03:21.052 00:00:10.447 TCP 23.104.0.1:47558 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:03:51.399 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38480 10 6452 1 2025-11-14 21:59:57.209 00:05:04.507 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 21:59:57.207 00:05:04.512 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 22:04:21.508 00:00:10.362 TCP 23.104.0.1:43242 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:04:51.607 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39156 10 6452 1 2025-11-14 22:05:21.911 00:00:10.368 TCP 23.104.0.1:34424 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:05:51.824 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47558 10 6452 1 2025-11-14 22:06:22.325 00:00:10.365 TCP 23.104.0.1:46730 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:06:52.059 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47486 10 6452 1 2025-11-14 22:07:35.358 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 22:07:35.371 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 22:07:22.731 00:00:10.367 TCP 23.104.0.1:51004 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:07:52.226 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43290 10 6452 1 2025-11-14 22:08:23.139 00:00:10.369 TCP 23.104.0.1:57920 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:08:52.445 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46932 10 6452 1 2025-11-14 22:09:23.556 00:00:10.358 TCP 23.104.0.1:58054 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:05:57.208 00:05:04.512 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 22:09:52.655 00:00:10.415 TCP 1.101.0.1:3000 -> 22.102.0.1:36934 10 6452 1 2025-11-14 22:05:57.210 00:05:04.507 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 22:10:23.954 00:00:10.368 TCP 23.104.0.1:57576 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:10:53.103 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53226 10 6452 1 2025-11-14 22:11:24.356 00:00:10.368 TCP 23.104.0.1:33590 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:11:53.324 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60668 10 6452 1 2025-11-14 22:12:35.430 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 22:12:24.759 00:00:10.378 TCP 23.104.0.1:39798 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:12:35.279 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 22:12:53.548 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51270 10 6452 1 2025-11-14 22:13:25.180 00:00:10.368 TCP 23.104.0.1:46166 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:13:53.770 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35714 10 6452 1 2025-11-14 22:14:25.581 00:00:10.370 TCP 23.104.0.1:55926 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:14:53.944 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36386 10 6452 1 2025-11-14 22:15:25.989 00:00:10.372 TCP 23.104.0.1:59800 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:11:57.212 00:05:04.507 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 22:11:57.209 00:05:04.512 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 22:15:54.176 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44814 10 6452 1 2025-11-14 22:16:26.394 00:00:10.373 TCP 23.104.0.1:33656 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:16:54.396 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44650 12 6556 1 2025-11-14 22:17:35.357 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 22:17:35.363 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 22:17:26.805 00:00:10.364 TCP 23.104.0.1:43762 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:17:54.612 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:59776 10 6452 1 2025-11-14 22:18:27.203 00:00:10.364 TCP 23.104.0.1:57686 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:18:54.865 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50446 10 6452 1 2025-11-14 22:19:27.605 00:00:10.326 TCP 23.104.0.1:49374 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:19:55.091 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50160 10 6452 1 2025-11-14 22:20:27.973 00:00:10.377 TCP 23.104.0.1:56864 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:20:55.308 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50762 10 6452 1 2025-11-14 22:21:28.408 00:00:10.366 TCP 23.104.0.1:57482 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:17:57.212 00:05:04.508 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 22:21:55.481 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52882 10 6452 1 2025-11-14 22:17:57.210 00:05:04.513 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 22:22:35.452 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 22:22:35.472 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 22:22:28.812 00:00:10.343 TCP 23.104.0.1:41678 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:22:55.691 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58036 10 6452 1 2025-11-14 22:23:29.195 00:00:10.370 TCP 23.104.0.1:40214 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:23:55.905 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:49868 10 6452 1 2025-11-14 22:24:29.604 00:00:10.361 TCP 23.104.0.1:40920 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:24:56.090 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51228 10 6452 1 2025-11-14 22:25:30.026 00:00:10.366 TCP 23.104.0.1:44330 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:25:56.267 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48812 10 6452 1 2025-11-14 22:26:30.427 00:00:10.364 TCP 23.104.0.1:39068 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:26:56.484 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:52260 10 6452 1 2025-11-14 22:27:35.762 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 22:27:35.591 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 22:27:30.830 00:00:10.391 TCP 23.104.0.1:43450 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:23:57.211 00:05:04.513 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 22:23:57.214 00:05:04.508 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 22:27:56.692 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47932 12 6556 1 2025-11-14 22:28:31.260 00:00:10.363 TCP 23.104.0.1:58740 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:28:56.914 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49020 10 6452 1 2025-11-14 22:29:31.664 00:00:10.366 TCP 23.104.0.1:57118 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:29:57.123 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58634 10 6452 1 2025-11-14 22:30:32.101 00:00:10.320 TCP 23.104.0.1:48604 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:30:57.292 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56196 10 6452 1 2025-11-14 22:31:32.463 00:00:10.351 TCP 23.104.0.1:35852 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:31:57.505 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38398 10 6452 1 2025-11-14 22:32:36.073 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 22:32:35.876 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 22:32:32.860 00:00:10.382 TCP 23.104.0.1:39276 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:32:57.721 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55674 10 6452 1 2025-11-14 22:33:33.281 00:00:10.364 TCP 23.104.0.1:59970 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:29:57.214 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 22:29:57.211 00:05:04.514 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 22:33:57.935 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:35198 10 6452 1 2025-11-14 22:34:33.685 00:00:10.370 TCP 23.104.0.1:55026 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:34:58.124 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58460 10 6452 1 2025-11-14 22:35:34.105 00:00:10.328 TCP 23.104.0.1:57960 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:35:58.295 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40424 10 6452 1 2025-11-14 22:36:34.484 00:00:10.366 TCP 23.104.0.1:58930 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:36:58.507 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44698 10 6452 1 2025-11-14 22:37:35.874 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 22:37:35.859 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 22:37:34.888 00:00:10.383 TCP 23.104.0.1:41378 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:37:58.723 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51138 10 6452 1 2025-11-14 22:38:35.318 00:00:10.321 TCP 23.104.0.1:36428 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:38:58.936 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:32888 10 6452 1 2025-11-14 22:39:35.677 00:00:10.382 TCP 23.104.0.1:40530 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:35:57.215 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 22:35:57.213 00:05:04.514 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 22:39:59.167 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33428 10 6452 1 2025-11-14 22:40:36.100 00:00:10.370 TCP 23.104.0.1:37548 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:40:59.376 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39444 10 6452 1 2025-11-14 22:41:36.503 00:00:10.370 TCP 23.104.0.1:50742 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:41:59.590 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55386 10 6452 1 2025-11-14 22:42:35.970 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 22:42:36.001 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 22:42:36.911 00:00:10.321 TCP 23.104.0.1:36420 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:42:59.803 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42988 10 6452 1 2025-11-14 22:43:37.272 00:00:10.322 TCP 23.104.0.1:59404 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:44:00.055 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55816 10 6452 1 2025-11-14 22:44:37.635 00:00:10.367 TCP 23.104.0.1:46114 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:45:00.270 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38474 10 6452 1 2025-11-14 22:45:38.049 00:00:10.436 TCP 23.104.0.1:58018 -> 1.101.0.1:3000 15 1926 1 2025-11-14 22:41:57.218 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 22:41:57.216 00:05:04.514 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 22:46:00.494 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:37808 12 10375 1 2025-11-14 22:46:38.527 00:00:10.326 TCP 23.104.0.1:55868 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:47:00.735 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49872 10 6452 1 2025-11-14 22:47:36.738 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 22:47:36.683 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 22:47:38.891 00:00:10.387 TCP 23.104.0.1:47344 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:48:00.902 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52988 10 6452 1 2025-11-14 22:48:39.327 00:00:10.371 TCP 23.104.0.1:34024 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:49:01.118 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35270 10 6452 1 2025-11-14 22:49:39.734 00:00:10.370 TCP 23.104.0.1:36158 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:50:01.364 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43050 10 6452 1 2025-11-14 22:50:40.145 00:00:10.321 TCP 23.104.0.1:45380 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:51:01.576 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51428 10 6452 1 2025-11-14 22:51:40.501 00:00:10.364 TCP 23.104.0.1:57096 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:47:57.216 00:05:04.514 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 22:47:57.218 00:05:04.509 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 22:52:01.784 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:42890 10 6452 1 2025-11-14 22:52:35.884 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 22:52:36.028 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 22:52:40.906 00:00:10.331 TCP 23.104.0.1:51450 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:53:01.958 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52560 10 6452 1 2025-11-14 22:53:41.273 00:00:10.363 TCP 23.104.0.1:43444 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:54:02.183 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46724 10 6452 1 2025-11-14 22:54:41.678 00:00:10.378 TCP 23.104.0.1:57882 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:55:02.395 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:38838 10 6452 1 2025-11-14 22:55:42.136 00:00:10.357 TCP 23.104.0.1:57680 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:56:02.611 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41134 10 6452 1 2025-11-14 22:56:42.531 00:00:10.583 TCP 23.104.0.1:48864 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:57:02.825 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55614 10 6452 1 2025-11-14 22:57:36.000 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-14 22:57:36.266 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-14 22:57:43.154 00:00:10.319 TCP 23.104.0.1:34088 -> 1.101.0.1:3000 11 1507 1 2025-11-14 22:53:57.218 00:05:04.514 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-14 22:53:57.220 00:05:04.508 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-14 22:58:03.057 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:52538 10 6452 1 Summary: total flows: 163, total bytes: 501391, total packets: 1571, avg bps: 1110, avg pps: 0, avg bpp: 319 Time window: 2025-11-14 21:58:50 - 2025-11-14 22:59:01 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0046s User: 0.0018s Wall: 0.0019s flows/second: 85512.4 Runtime: 0.0019s