Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-23 21:58:45.333 00:00:10.361 TCP 23.104.0.1:36490 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:58:49.776 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46952 10 6452 1 2025-11-23 21:59:45.733 00:00:10.382 TCP 23.104.0.1:44966 -> 1.101.0.1:3000 11 1507 1 2025-11-23 21:59:49.945 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:45862 10 6452 1 2025-11-23 22:00:46.149 00:00:10.356 TCP 23.104.0.1:46208 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:00:50.172 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49464 10 6452 1 2025-11-23 22:01:56.671 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 22:01:46.541 00:00:10.364 TCP 23.104.0.1:50676 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:01:56.739 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 22:01:50.391 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44740 10 6452 1 2025-11-23 21:58:02.812 00:05:04.283 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 21:58:02.815 00:05:04.278 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 22:02:46.942 00:00:10.481 TCP 23.104.0.1:49180 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:02:50.603 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45800 10 6452 1 2025-11-23 22:03:47.470 00:00:10.362 TCP 23.104.0.1:37832 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:03:50.813 00:00:10.341 TCP 1.101.0.1:3000 -> 22.102.0.1:45812 10 6452 1 2025-11-23 22:04:51.195 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50380 10 6452 1 2025-11-23 22:04:47.871 00:00:10.367 TCP 23.104.0.1:53044 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:05:48.283 00:00:10.364 TCP 23.104.0.1:47066 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:05:51.406 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42672 10 6452 1 2025-11-23 22:06:56.617 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 22:06:56.965 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 22:06:48.680 00:00:10.369 TCP 23.104.0.1:55374 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:06:51.619 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47006 10 6452 1 2025-11-23 22:07:49.106 00:00:10.364 TCP 23.104.0.1:49770 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:07:51.836 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38084 10 6452 1 2025-11-23 22:04:02.817 00:05:04.279 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 22:04:02.814 00:05:04.285 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 22:08:49.506 00:00:10.484 TCP 23.104.0.1:39882 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:08:52.082 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53430 10 6452 1 2025-11-23 22:09:50.031 00:00:10.366 TCP 23.104.0.1:55668 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:09:52.263 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49418 10 6452 1 2025-11-23 22:10:50.437 00:00:10.362 TCP 23.104.0.1:33650 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:10:52.479 00:00:10.454 TCP 1.101.0.1:3000 -> 22.102.0.1:53030 10 6452 1 2025-11-23 22:11:56.872 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 22:11:56.744 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 22:11:50.841 00:00:10.393 TCP 23.104.0.1:46674 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:11:52.969 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:59502 10 6452 1 2025-11-23 22:12:51.273 00:00:10.368 TCP 23.104.0.1:56184 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:12:53.207 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43496 10 6452 1 2025-11-23 22:13:53.415 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36158 10 6452 1 2025-11-23 22:13:51.683 00:00:10.360 TCP 23.104.0.1:57024 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:10:02.815 00:05:04.285 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 22:10:02.818 00:05:04.281 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 22:14:53.635 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47160 10 6452 1 2025-11-23 22:14:52.103 00:00:10.363 TCP 23.104.0.1:52916 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:15:52.503 00:00:10.362 TCP 23.104.0.1:35328 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:15:53.854 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:34228 10 6452 1 2025-11-23 22:16:57.007 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 22:16:57.346 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 22:16:54.090 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47030 10 6452 1 2025-11-23 22:16:52.904 00:00:10.326 TCP 23.104.0.1:33796 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:17:53.269 00:00:10.387 TCP 23.104.0.1:39184 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:17:54.303 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38742 10 6452 1 2025-11-23 22:18:53.693 00:00:10.370 TCP 23.104.0.1:56104 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:18:54.514 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54856 10 6452 1 2025-11-23 22:19:54.724 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53962 10 6452 1 2025-11-23 22:19:54.106 00:00:10.738 TCP 23.104.0.1:48104 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:16:02.818 00:05:04.281 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 22:16:02.817 00:05:04.286 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 22:20:54.883 00:00:10.389 TCP 23.104.0.1:41870 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:20:54.938 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:44308 10 6452 1 2025-11-23 22:21:57.276 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 22:21:57.107 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 22:21:55.184 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43740 10 6452 1 2025-11-23 22:21:55.314 00:00:10.365 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:22:55.720 00:00:10.383 TCP 23.104.0.1:41338 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:22:55.402 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39850 10 6452 1 2025-11-23 22:23:56.140 00:00:10.324 TCP 23.104.0.1:36280 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:23:55.622 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40400 10 6452 1 2025-11-23 22:24:55.829 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47140 10 6452 1 2025-11-23 22:24:56.503 00:00:10.367 TCP 23.104.0.1:53888 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:25:56.074 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57202 12 10375 1 2025-11-23 22:25:56.909 00:00:10.436 TCP 23.104.0.1:37548 -> 1.101.0.1:3000 15 1926 1 2025-11-23 22:22:02.820 00:05:04.281 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 22:22:02.818 00:05:04.285 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 22:26:57.290 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 22:26:57.129 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 22:26:56.318 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51584 10 6452 1 2025-11-23 22:26:57.387 00:00:10.363 TCP 23.104.0.1:43420 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:27:56.495 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43920 10 6452 1 2025-11-23 22:27:57.783 00:00:10.372 TCP 23.104.0.1:42598 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:28:56.706 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43806 10 6452 1 2025-11-23 22:28:58.191 00:00:10.373 TCP 23.104.0.1:52480 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:29:58.610 00:00:10.365 TCP 23.104.0.1:42804 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:29:56.920 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39400 10 6452 1 2025-11-23 22:30:59.014 00:00:10.323 TCP 23.104.0.1:44838 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:30:57.134 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45834 10 6452 1 2025-11-23 22:31:57.287 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 22:31:57.364 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 22:31:59.376 00:00:10.323 TCP 23.104.0.1:43200 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:28:02.821 00:05:04.282 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 22:28:02.820 00:05:04.287 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 22:31:57.350 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34846 10 6452 1 2025-11-23 22:32:57.563 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:43296 10 6452 1 2025-11-23 22:32:59.752 00:00:10.393 TCP 23.104.0.1:51994 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:33:57.728 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60544 10 6452 1 2025-11-23 22:34:00.186 00:00:10.361 TCP 23.104.0.1:48728 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:34:57.941 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:43442 10 6452 1 2025-11-23 22:35:00.586 00:00:10.362 TCP 23.104.0.1:34090 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:36:00.990 00:00:10.438 TCP 23.104.0.1:47288 -> 1.101.0.1:3000 15 1926 1 2025-11-23 22:35:58.182 00:00:10.213 TCP 1.101.0.1:3000 -> 22.102.0.1:47460 12 10369 1 2025-11-23 22:36:57.519 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 22:36:57.337 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 22:36:58.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56544 10 6452 1 2025-11-23 22:37:01.468 00:00:10.365 TCP 23.104.0.1:37846 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:34:02.820 00:05:04.289 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 22:37:58.649 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41426 10 6452 1 2025-11-23 22:34:02.822 00:05:04.284 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 22:38:01.869 00:00:10.996 TCP 23.104.0.1:39704 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:38:58.868 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41746 10 6452 1 2025-11-23 22:39:02.903 00:00:10.367 TCP 23.104.0.1:34856 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:39:59.087 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50098 10 6452 1 2025-11-23 22:40:03.309 00:00:10.390 TCP 23.104.0.1:33430 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:40:59.266 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37550 10 6452 1 2025-11-23 22:41:03.734 00:00:10.323 TCP 23.104.0.1:33606 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:41:57.662 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 22:41:57.306 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 22:41:59.503 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38384 10 6452 1 2025-11-23 22:42:04.106 00:00:10.363 TCP 23.104.0.1:50744 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:42:59.717 00:00:10.784 TCP 1.101.0.1:3000 -> 22.102.0.1:35468 10 6452 1 2025-11-23 22:43:04.508 00:00:10.366 TCP 23.104.0.1:39792 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:40:02.824 00:05:04.285 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 22:44:00.540 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39816 10 6452 1 2025-11-23 22:40:02.822 00:05:04.290 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 22:44:04.911 00:00:10.365 TCP 23.104.0.1:58822 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:45:00.750 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51682 10 6452 1 2025-11-23 22:45:05.316 00:00:10.367 TCP 23.104.0.1:41496 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:46:00.967 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58446 10 6452 1 2025-11-23 22:46:05.724 00:00:10.371 TCP 23.104.0.1:49512 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:46:57.747 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 22:46:57.532 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 22:47:01.201 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36920 10 6452 1 2025-11-23 22:47:06.127 00:00:10.371 TCP 23.104.0.1:55848 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:48:01.411 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41246 10 6452 1 2025-11-23 22:48:06.535 00:00:10.327 TCP 23.104.0.1:43040 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:49:01.625 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47352 10 6452 1 2025-11-23 22:49:06.901 00:00:10.367 TCP 23.104.0.1:37190 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:46:02.825 00:05:04.285 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 22:46:02.822 00:05:04.289 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 22:50:01.838 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53380 10 6452 1 2025-11-23 22:50:07.303 00:00:10.368 TCP 23.104.0.1:53064 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:51:02.073 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60532 10 6452 1 2025-11-23 22:51:07.713 00:00:10.328 TCP 23.104.0.1:40120 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:51:57.670 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 22:51:57.866 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 22:52:02.279 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44138 10 6452 1 2025-11-23 22:52:08.100 00:00:10.364 TCP 23.104.0.1:47594 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:53:02.492 00:00:10.528 TCP 1.101.0.1:3000 -> 22.102.0.1:46682 11 6504 1 2025-11-23 22:53:08.500 00:00:10.327 TCP 23.104.0.1:32968 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:54:03.073 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36806 10 6452 1 2025-11-23 22:54:08.866 00:00:10.372 TCP 23.104.0.1:56398 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:55:03.297 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48724 10 6452 1 2025-11-23 22:55:09.275 00:00:10.514 TCP 23.104.0.1:40266 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:52:02.826 00:05:04.286 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-23 22:52:02.824 00:05:04.291 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-23 22:56:03.518 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:51326 10 6452 1 2025-11-23 22:56:09.823 00:00:10.365 TCP 23.104.0.1:35722 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:56:57.752 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-23 22:56:57.642 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-23 22:57:03.742 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52770 10 6452 1 2025-11-23 22:57:10.229 00:00:10.366 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-11-23 22:58:03.959 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35164 12 6556 1 2025-11-23 22:58:10.634 00:00:10.362 TCP 23.104.0.1:42080 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507182, total packets: 1587, avg bps: 1121, avg pps: 0, avg bpp: 319 Time window: 2025-11-23 21:58:02 - 2025-11-23 22:58:20 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0037s User: 0.0024s Wall: 0.0025s flows/second: 65995.0 Runtime: 0.0025s