Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-15 21:59:21.510 00:00:10.329 TCP 23.104.0.1:55672 -> 1.101.0.1:3000 11 1507 1 2025-11-15 21:59:37.885 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:32790 10 6452 1 2025-11-15 22:00:21.879 00:00:10.378 TCP 23.104.0.1:32984 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:00:38.107 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60502 10 6452 1 2025-11-15 22:01:22.287 00:00:10.415 TCP 23.104.0.1:41192 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:01:38.280 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49764 10 6452 1 2025-11-15 22:02:22.743 00:00:10.361 TCP 23.104.0.1:55104 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:02:38.494 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41212 10 6452 1 2025-11-15 22:03:03.782 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 22:03:04.388 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 22:03:23.142 00:00:12.778 TCP 23.104.0.1:57836 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:03:38.712 00:00:12.051 TCP 1.101.0.1:3000 -> 22.102.0.1:35640 10 6452 1 2025-11-15 21:59:57.657 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 21:59:57.658 00:05:04.733 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 22:04:25.963 00:00:10.365 TCP 23.104.0.1:52792 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:04:40.802 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40866 10 6452 1 2025-11-15 22:05:26.361 00:00:10.364 TCP 23.104.0.1:44542 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:05:41.034 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39682 10 6452 1 2025-11-15 22:06:26.765 00:00:10.378 TCP 23.104.0.1:59952 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:06:41.259 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49548 10 6452 1 2025-11-15 22:07:27.188 00:00:10.362 TCP 23.104.0.1:51894 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:07:41.483 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60262 10 6452 1 2025-11-15 22:08:04.109 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 22:08:04.065 00:00:00.044 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 22:08:27.613 00:00:10.367 TCP 23.104.0.1:58202 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:08:41.696 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44256 10 6452 1 2025-11-15 22:09:28.018 00:00:10.366 TCP 23.104.0.1:35584 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:09:41.901 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49650 10 6452 1 2025-11-15 22:05:57.656 00:05:04.738 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 22:05:57.659 00:05:04.732 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 22:10:28.423 00:00:10.318 TCP 23.104.0.1:41398 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:10:42.115 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38956 10 6452 1 2025-11-15 22:11:28.781 00:00:10.401 TCP 23.104.0.1:36634 -> 1.101.0.1:3000 15 1926 1 2025-11-15 22:11:42.339 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:37526 12 10369 1 2025-11-15 22:12:29.224 00:00:10.377 TCP 23.104.0.1:52630 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:12:42.583 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41680 10 6452 1 2025-11-15 22:13:04.144 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 22:13:04.260 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 22:13:29.642 00:00:10.365 TCP 23.104.0.1:34330 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:13:42.797 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53854 10 6452 1 2025-11-15 22:14:30.048 00:00:10.368 TCP 23.104.0.1:33406 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:14:43.032 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34896 10 6452 1 2025-11-15 22:15:30.456 00:00:10.366 TCP 23.104.0.1:52588 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:15:43.208 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:60788 10 6452 1 2025-11-15 22:11:57.660 00:05:04.735 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 22:11:57.658 00:05:04.740 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 22:16:30.873 00:00:10.363 TCP 23.104.0.1:44746 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:16:43.394 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:48170 10 6452 1 2025-11-15 22:17:31.283 00:00:10.362 TCP 23.104.0.1:59640 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:17:43.577 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36360 10 6452 1 2025-11-15 22:18:04.177 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 22:18:04.225 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 22:18:31.682 00:00:10.324 TCP 23.104.0.1:39794 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:18:43.792 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46540 10 6452 1 2025-11-15 22:19:32.055 00:00:10.375 TCP 23.104.0.1:37070 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:19:44.010 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:36988 10 6452 1 2025-11-15 22:20:32.459 00:00:10.368 TCP 23.104.0.1:51956 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:20:44.245 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51946 10 6452 1 2025-11-15 22:21:32.864 00:00:10.441 TCP 23.104.0.1:58886 -> 1.101.0.1:3000 15 1926 1 2025-11-15 22:21:44.465 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47462 12 10584 1 2025-11-15 22:17:57.663 00:05:04.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 22:17:57.661 00:05:04.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 22:22:33.352 00:00:10.375 TCP 23.104.0.1:36066 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:22:44.700 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60034 10 6661 1 2025-11-15 22:23:04.383 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 22:23:04.466 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 22:23:33.767 00:00:10.369 TCP 23.104.0.1:35256 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:23:44.921 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60098 10 6661 1 2025-11-15 22:24:34.173 00:00:10.358 TCP 23.104.0.1:57420 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:24:45.121 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49794 10 6661 1 2025-11-15 22:25:34.573 00:00:10.483 TCP 23.104.0.1:39250 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:25:45.331 00:00:10.460 TCP 1.101.0.1:3000 -> 22.102.0.1:52490 10 6661 1 2025-11-15 22:26:35.100 00:00:10.440 TCP 23.104.0.1:57766 -> 1.101.0.1:3000 15 1926 1 2025-11-15 22:26:45.830 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:59776 12 10578 1 2025-11-15 22:27:35.580 00:00:10.328 TCP 23.104.0.1:42690 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:27:46.089 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59016 10 6661 1 2025-11-15 22:28:04.363 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 22:23:57.665 00:05:04.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 22:28:04.548 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 22:23:57.664 00:05:04.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 22:28:35.945 00:00:10.372 TCP 23.104.0.1:42012 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:28:46.317 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53506 10 6661 1 2025-11-15 22:29:36.355 00:00:10.363 TCP 23.104.0.1:50720 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:29:46.493 00:00:10.657 TCP 1.101.0.1:3000 -> 22.102.0.1:41012 10 6661 1 2025-11-15 22:30:36.758 00:00:10.376 TCP 23.104.0.1:51152 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:30:47.190 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41234 10 6661 1 2025-11-15 22:31:37.170 00:00:10.327 TCP 23.104.0.1:36410 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:31:47.424 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44044 10 6661 1 2025-11-15 22:32:37.539 00:00:10.369 TCP 23.104.0.1:41552 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:32:47.638 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59618 10 6661 1 2025-11-15 22:33:04.809 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 22:33:04.890 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 22:33:37.948 00:00:10.366 TCP 23.104.0.1:33288 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:33:47.857 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:54656 10 6661 1 2025-11-15 22:29:57.666 00:05:04.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 22:29:57.667 00:05:04.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 22:34:38.352 00:00:10.327 TCP 23.104.0.1:34848 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:34:48.094 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50484 10 6661 1 2025-11-15 22:35:38.721 00:00:10.378 TCP 23.104.0.1:60440 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:35:48.309 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39308 10 6661 1 2025-11-15 22:36:39.149 00:00:10.367 TCP 23.104.0.1:51302 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:36:48.521 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42080 10 6661 1 2025-11-15 22:37:39.561 00:00:10.386 TCP 23.104.0.1:40704 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:37:48.740 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:52040 10 6661 1 2025-11-15 22:38:04.629 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 22:38:04.676 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 22:38:39.989 00:00:10.375 TCP 23.104.0.1:48932 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:38:48.918 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39144 10 6661 1 2025-11-15 22:39:40.406 00:00:10.364 TCP 23.104.0.1:47144 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:39:49.161 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:38512 10 6661 1 2025-11-15 22:35:57.669 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 22:35:57.667 00:05:04.734 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 22:40:40.812 00:00:10.362 TCP 23.104.0.1:56740 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:40:49.381 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47790 10 6661 1 2025-11-15 22:41:41.215 00:00:10.363 TCP 23.104.0.1:48350 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:41:49.612 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:42212 10 6661 1 2025-11-15 22:42:41.622 00:00:10.320 TCP 23.104.0.1:60194 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:42:49.859 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:35270 10 6661 1 2025-11-15 22:43:04.888 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 22:43:04.928 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 22:43:41.981 00:00:10.365 TCP 23.104.0.1:53704 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:43:50.091 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:50988 10 6661 1 2025-11-15 22:44:42.386 00:00:10.362 TCP 23.104.0.1:60808 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:44:50.297 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:32922 10 6661 1 2025-11-15 22:45:42.784 00:00:10.364 TCP 23.104.0.1:37150 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:45:50.546 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59906 10 6661 1 2025-11-15 22:41:57.669 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 22:41:57.668 00:05:04.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 22:46:43.188 00:00:10.375 TCP 23.104.0.1:59722 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:46:50.719 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50038 10 6661 1 2025-11-15 22:47:43.600 00:00:10.321 TCP 23.104.0.1:51018 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:47:50.926 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59188 10 6661 1 2025-11-15 22:48:04.716 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 22:48:04.967 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 22:48:43.958 00:00:10.365 TCP 23.104.0.1:46416 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:48:51.149 00:00:11.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33842 10 6661 1 2025-11-15 22:49:44.364 00:00:10.327 TCP 23.104.0.1:53176 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:49:52.361 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51982 10 6661 1 2025-11-15 22:50:44.730 00:00:10.369 TCP 23.104.0.1:56476 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:50:52.534 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42650 10 6661 1 2025-11-15 22:51:45.134 00:00:10.440 TCP 23.104.0.1:56626 -> 1.101.0.1:3000 15 1926 1 2025-11-15 22:47:57.672 00:05:04.730 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 22:47:57.669 00:05:04.735 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-15 22:51:52.745 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:33706 12 10584 1 2025-11-15 22:52:45.614 00:00:10.362 TCP 23.104.0.1:58310 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:53:05.042 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 22:52:52.987 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:34716 10 6661 1 2025-11-15 22:53:05.205 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 22:53:46.017 00:00:10.362 TCP 23.104.0.1:56322 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:53:53.168 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59680 10 6661 1 2025-11-15 22:54:46.427 00:00:10.329 TCP 23.104.0.1:46734 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:54:53.385 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48602 10 6661 1 2025-11-15 22:55:46.794 00:00:11.148 TCP 23.104.0.1:60144 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:55:53.602 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50948 10 6661 1 2025-11-15 22:56:48.018 00:00:10.363 TCP 23.104.0.1:44284 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:56:53.814 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47698 10 6661 1 2025-11-15 22:57:48.425 00:00:10.339 TCP 23.104.0.1:32886 -> 1.101.0.1:3000 11 1507 1 2025-11-15 22:58:04.904 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-15 22:53:57.673 00:05:04.731 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-15 22:57:54.041 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38480 10 6661 1 2025-11-15 22:58:05.186 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-15 22:53:57.670 00:05:04.736 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 Summary: total flows: 162, total bytes: 515478, total packets: 1575, avg bps: 1151, avg pps: 0, avg bpp: 327 Time window: 2025-11-15 21:59:21 - 2025-11-15 22:59:02 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0054s User: 0.0000s Wall: 0.0019s flows/second: 86075.2 Runtime: 0.0019s