Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-24 21:59:04.593 00:00:10.362 TCP 23.104.0.1:34268 -> 1.101.0.1:3000 11 1507 1 2025-11-24 21:59:31.393 00:00:10.784 TCP 1.101.0.1:3000 -> 22.102.0.1:39006 10 6452 1 2025-11-24 22:00:04.991 00:00:10.365 TCP 23.104.0.1:48738 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:00:32.212 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34736 10 6452 1 2025-11-24 22:01:05.391 00:00:10.573 TCP 23.104.0.1:42886 -> 1.101.0.1:3000 15 1926 1 2025-11-24 22:01:32.438 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:37846 12 10375 1 2025-11-24 21:57:07.565 00:05:55.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 21:57:07.565 00:05:55.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 22:02:06.007 00:00:10.367 TCP 23.104.0.1:33860 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:02:25.576 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 22:02:25.545 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 22:02:32.708 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40234 10 6452 1 2025-11-24 22:03:06.411 00:00:10.389 TCP 23.104.0.1:46474 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:03:32.929 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48142 10 6452 1 2025-11-24 22:04:06.828 00:00:10.417 TCP 23.104.0.1:37720 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:04:33.164 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34266 10 6452 1 2025-11-24 22:05:07.281 00:00:10.341 TCP 23.104.0.1:42566 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:05:33.376 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60122 10 6452 1 2025-11-24 22:06:07.663 00:00:10.442 TCP 23.104.0.1:45674 -> 1.101.0.1:3000 15 1926 1 2025-11-24 22:06:33.552 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:55084 12 10584 1 2025-11-24 22:07:08.145 00:00:10.372 TCP 23.104.0.1:39226 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:07:25.544 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 22:07:25.687 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 22:07:33.796 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58078 10 6661 1 2025-11-24 22:03:07.568 00:05:55.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 22:03:07.565 00:05:55.770 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 22:08:08.554 00:00:10.370 TCP 23.104.0.1:54976 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:08:34.028 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60668 10 6661 1 2025-11-24 22:09:08.964 00:00:10.369 TCP 23.104.0.1:48468 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:09:34.195 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48898 10 6661 1 2025-11-24 22:10:09.371 00:00:10.770 TCP 23.104.0.1:55362 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:10:34.417 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58572 10 6661 1 2025-11-24 22:11:10.186 00:00:10.371 TCP 23.104.0.1:52038 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:11:34.643 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50978 10 6661 1 2025-11-24 22:12:10.597 00:00:10.326 TCP 23.104.0.1:34446 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:12:25.879 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 22:12:25.906 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 22:12:34.891 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59232 10 6661 1 2025-11-24 22:13:10.962 00:00:10.363 TCP 23.104.0.1:43848 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:13:35.112 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58108 10 6661 1 2025-11-24 22:09:07.571 00:05:55.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 22:09:07.568 00:05:55.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 22:14:11.366 00:00:10.359 TCP 23.104.0.1:48330 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:14:35.330 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36056 10 6661 1 2025-11-24 22:15:11.762 00:00:10.436 TCP 23.104.0.1:44356 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:15:35.546 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60604 10 6661 1 2025-11-24 22:16:12.239 00:00:10.446 TCP 23.104.0.1:42686 -> 1.101.0.1:3000 15 1926 1 2025-11-24 22:16:35.759 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:52734 12 10793 1 2025-11-24 22:17:25.921 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 22:17:26.067 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 22:17:12.731 00:00:10.365 TCP 23.104.0.1:35804 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:17:36.002 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60856 10 6870 1 2025-11-24 22:18:13.134 00:00:10.335 TCP 23.104.0.1:35686 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:18:36.225 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43946 10 6870 1 2025-11-24 22:19:13.506 00:00:10.368 TCP 23.104.0.1:40148 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:19:36.436 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36342 10 6870 1 2025-11-24 22:15:07.569 00:05:55.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 22:15:07.572 00:05:55.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 22:20:13.913 00:00:10.363 TCP 23.104.0.1:55518 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:20:36.606 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33802 10 6870 1 2025-11-24 22:21:14.313 00:00:10.357 TCP 23.104.0.1:60378 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:21:36.821 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33304 10 6870 1 2025-11-24 22:22:26.156 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 22:22:14.705 00:00:10.330 TCP 23.104.0.1:54658 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:22:25.754 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 22:22:36.989 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45274 10 6870 1 2025-11-24 22:23:15.101 00:00:10.381 TCP 23.104.0.1:40320 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:23:37.211 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52790 10 6870 1 2025-11-24 22:24:15.518 00:00:10.367 TCP 23.104.0.1:40274 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:24:37.423 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:48370 10 6870 1 2025-11-24 22:25:15.919 00:00:10.389 TCP 23.104.0.1:36694 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:25:37.632 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40024 10 6870 1 2025-11-24 22:21:07.570 00:05:55.769 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 22:21:07.572 00:05:55.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 22:26:16.344 00:00:10.362 TCP 23.104.0.1:58322 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:26:37.850 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46040 10 6870 1 2025-11-24 22:27:26.203 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 22:27:26.104 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 22:27:16.756 00:00:10.339 TCP 23.104.0.1:54072 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:27:38.086 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36964 10 6870 1 2025-11-24 22:28:17.134 00:00:10.369 TCP 23.104.0.1:47688 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:28:38.321 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43616 10 6870 1 2025-11-24 22:29:17.540 00:00:10.366 TCP 23.104.0.1:46806 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:29:38.493 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58566 10 6870 1 2025-11-24 22:30:17.943 00:00:10.369 TCP 23.104.0.1:43504 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:30:38.664 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36234 10 6870 1 2025-11-24 22:31:18.354 00:00:10.368 TCP 23.104.0.1:34310 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:31:38.882 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33888 10 6870 1 2025-11-24 22:27:07.576 00:05:55.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 22:27:07.573 00:05:55.767 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 22:32:26.244 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 22:32:26.291 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 22:32:18.760 00:00:10.388 TCP 23.104.0.1:40718 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:32:39.076 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34570 10 6870 1 2025-11-24 22:33:19.182 00:00:10.325 TCP 23.104.0.1:57050 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:33:39.295 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57820 10 6870 1 2025-11-24 22:34:19.544 00:00:10.321 TCP 23.104.0.1:48536 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:34:39.517 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42234 10 6870 1 2025-11-24 22:35:19.904 00:00:10.368 TCP 23.104.0.1:55814 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:35:39.732 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:33578 10 6870 1 2025-11-24 22:36:20.312 00:00:10.365 TCP 23.104.0.1:48486 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:36:39.901 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49194 10 6870 1 2025-11-24 22:37:26.272 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 22:37:26.172 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 22:37:20.733 00:00:10.374 TCP 23.104.0.1:55388 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:37:40.126 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47322 10 6870 1 2025-11-24 22:33:07.580 00:05:55.760 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 22:33:07.578 00:05:55.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 22:38:21.146 00:00:10.367 TCP 23.104.0.1:40572 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:38:40.354 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47656 10 6870 1 2025-11-24 22:39:21.566 00:00:10.367 TCP 23.104.0.1:55750 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:39:40.575 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39932 10 6870 1 2025-11-24 22:40:21.977 00:00:10.369 TCP 23.104.0.1:59826 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:40:40.795 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42514 10 6870 1 2025-11-24 22:41:22.393 00:00:10.360 TCP 23.104.0.1:55312 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:41:41.037 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48688 10 6870 1 2025-11-24 22:42:26.425 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 22:42:26.471 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 22:42:22.794 00:00:10.364 TCP 23.104.0.1:59826 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:42:41.252 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37176 10 6870 1 2025-11-24 22:43:23.204 00:00:10.363 TCP 23.104.0.1:50822 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:43:41.467 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37620 10 6870 1 2025-11-24 22:39:07.577 00:05:55.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 22:39:07.580 00:05:55.759 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 22:44:23.608 00:00:10.367 TCP 23.104.0.1:40690 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:44:41.695 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38082 10 6870 1 2025-11-24 22:45:24.017 00:00:10.368 TCP 23.104.0.1:49684 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:45:41.923 00:00:10.235 TCP 1.101.0.1:3000 -> 22.102.0.1:59330 12 10787 1 2025-11-24 22:46:24.427 00:00:10.437 TCP 23.104.0.1:33848 -> 1.101.0.1:3000 15 1926 1 2025-11-24 22:46:42.190 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38490 10 6870 1 2025-11-24 22:47:26.355 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 22:47:26.479 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 22:47:24.905 00:00:10.367 TCP 23.104.0.1:53206 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:47:42.401 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52026 10 6870 1 2025-11-24 22:48:25.310 00:00:10.371 TCP 23.104.0.1:57804 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:48:42.610 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44752 10 6870 1 2025-11-24 22:49:25.718 00:00:11.047 TCP 23.104.0.1:44656 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:49:42.824 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51060 10 6870 1 2025-11-24 22:45:07.582 00:05:55.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 22:45:07.586 00:05:55.755 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 22:50:26.804 00:00:10.370 TCP 23.104.0.1:56838 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:50:43.055 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50996 10 6870 1 2025-11-24 22:51:27.212 00:00:10.362 TCP 23.104.0.1:36432 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:51:43.270 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38382 10 6870 1 2025-11-24 22:52:26.418 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 22:52:26.712 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 22:52:27.615 00:00:10.370 TCP 23.104.0.1:41902 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:52:43.486 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:59808 10 6870 1 2025-11-24 22:53:28.026 00:00:10.362 TCP 23.104.0.1:34508 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:53:43.678 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49176 10 6870 1 2025-11-24 22:54:28.429 00:00:10.326 TCP 23.104.0.1:34704 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:54:43.896 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:40568 10 6870 1 2025-11-24 22:55:28.793 00:00:10.367 TCP 23.104.0.1:40822 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:55:44.090 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57010 10 6870 1 2025-11-24 22:51:07.586 00:05:55.756 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-24 22:51:07.584 00:05:55.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-24 22:56:29.198 00:00:10.327 TCP 23.104.0.1:32860 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:56:44.299 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54542 10 6870 1 2025-11-24 22:57:26.728 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-24 22:57:26.648 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-24 22:57:29.568 00:00:10.367 TCP 23.104.0.1:57306 -> 1.101.0.1:3000 11 1507 1 2025-11-24 22:57:44.517 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58548 10 6870 1 2025-11-24 22:58:29.972 00:00:10.367 TCP 23.104.0.1:45460 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 528904, total packets: 1586, avg bps: 1145, avg pps: 0, avg bpp: 333 Time window: 2025-11-24 21:57:07 - 2025-11-24 22:58:40 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0030s User: 0.0030s Wall: 0.0021s flows/second: 76817.0 Runtime: 0.0021s