Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-02 21:58:50.504 00:00:10.370 TCP 23.104.0.1:36044 -> 1.101.0.1:3000 11 1507 1 2025-12-02 21:55:06.822 00:05:04.801 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 21:55:06.824 00:05:04.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 21:59:03.073 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44934 10 6452 1 2025-12-02 21:59:50.912 00:00:10.365 TCP 23.104.0.1:45008 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:00:03.286 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43412 10 6452 1 2025-12-02 22:00:51.314 00:00:10.367 TCP 23.104.0.1:42188 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:01:16.797 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 22:01:03.494 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53768 10 6452 1 2025-12-02 22:01:16.748 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 22:01:51.719 00:00:10.379 TCP 23.104.0.1:37406 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:02:03.709 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47168 10 6452 1 2025-12-02 22:02:52.129 00:00:10.329 TCP 23.104.0.1:47034 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:03:03.882 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:44918 10 6452 1 2025-12-02 22:03:52.518 00:00:10.364 TCP 23.104.0.1:35016 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:04:04.108 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57720 10 6452 1 2025-12-02 22:04:52.919 00:00:10.391 TCP 23.104.0.1:47484 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:05:04.317 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55342 10 6452 1 2025-12-02 22:01:06.822 00:05:04.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 22:01:06.825 00:05:04.800 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 22:05:53.345 00:00:10.371 TCP 23.104.0.1:59930 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:06:04.531 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55294 10 6452 1 2025-12-02 22:06:16.914 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 22:06:16.732 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 22:06:53.749 00:00:10.916 TCP 23.104.0.1:44932 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:07:04.739 00:00:12.048 TCP 1.101.0.1:3000 -> 22.102.0.1:59802 10 6452 1 2025-12-02 22:07:54.709 00:00:10.455 TCP 23.104.0.1:50428 -> 1.101.0.1:3000 15 1926 1 2025-12-02 22:08:06.823 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:43198 12 10375 1 2025-12-02 22:08:55.206 00:00:10.327 TCP 23.104.0.1:58802 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:09:07.026 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48422 10 6452 1 2025-12-02 22:09:55.567 00:00:10.323 TCP 23.104.0.1:35404 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:10:07.238 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:54380 10 6452 1 2025-12-02 22:10:55.930 00:00:10.612 TCP 23.104.0.1:50296 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:11:16.792 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 22:07:06.826 00:05:04.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 22:11:16.802 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 22:07:06.825 00:05:04.804 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 22:11:07.413 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52826 10 6452 1 2025-12-02 22:11:56.583 00:00:10.366 TCP 23.104.0.1:46592 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:12:07.625 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39148 10 6452 1 2025-12-02 22:12:56.986 00:00:10.372 TCP 23.104.0.1:35122 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:13:07.837 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47430 10 6452 1 2025-12-02 22:13:57.397 00:00:10.366 TCP 23.104.0.1:34886 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:14:08.080 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43084 10 6452 1 2025-12-02 22:14:57.800 00:00:10.370 TCP 23.104.0.1:36360 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:15:08.311 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50228 10 6452 1 2025-12-02 22:15:58.208 00:00:10.363 TCP 23.104.0.1:32820 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:16:16.874 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 22:16:16.936 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 22:16:08.518 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49246 10 6452 1 2025-12-02 22:16:58.608 00:00:10.367 TCP 23.104.0.1:52864 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:13:06.830 00:05:04.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 22:13:06.827 00:05:04.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 22:17:08.694 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57598 10 6452 1 2025-12-02 22:17:59.016 00:00:10.362 TCP 23.104.0.1:44666 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:18:08.910 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41490 10 6452 1 2025-12-02 22:18:59.414 00:00:10.338 TCP 23.104.0.1:52828 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:19:09.135 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43580 10 6452 1 2025-12-02 22:19:59.792 00:00:10.362 TCP 23.104.0.1:51020 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:20:09.351 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:58962 10 6452 1 2025-12-02 22:21:00.190 00:00:10.366 TCP 23.104.0.1:40558 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:21:17.022 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 22:21:17.160 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 22:21:09.587 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38812 10 6452 1 2025-12-02 22:22:00.602 00:00:10.362 TCP 23.104.0.1:50840 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:22:09.761 00:00:10.615 TCP 1.101.0.1:3000 -> 22.102.0.1:40110 10 6452 1 2025-12-02 22:19:06.831 00:05:04.799 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 22:23:01.010 00:00:10.361 TCP 23.104.0.1:44726 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:19:06.828 00:05:04.805 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 22:23:10.417 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43312 10 6452 1 2025-12-02 22:24:01.409 00:00:10.323 TCP 23.104.0.1:48914 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:24:10.595 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:52024 10 6452 1 2025-12-02 22:25:01.773 00:00:10.373 TCP 23.104.0.1:52882 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:25:10.766 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:32972 10 6452 1 2025-12-02 22:26:10.976 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:45594 10 6452 1 2025-12-02 22:26:17.224 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 22:26:02.181 00:00:10.955 TCP 23.104.0.1:53332 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:26:16.998 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 22:27:03.170 00:00:10.372 TCP 23.104.0.1:47870 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:27:11.173 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51864 10 6452 1 2025-12-02 22:28:03.606 00:00:10.368 TCP 23.104.0.1:46156 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:28:11.386 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38538 10 6452 1 2025-12-02 22:25:06.829 00:05:04.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 22:29:04.008 00:00:10.364 TCP 23.104.0.1:33196 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:25:06.832 00:05:04.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 22:29:11.595 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55494 10 6452 1 2025-12-02 22:30:04.413 00:00:10.367 TCP 23.104.0.1:55726 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:30:11.805 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53958 10 6452 1 2025-12-02 22:31:04.819 00:00:10.328 TCP 23.104.0.1:42758 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:31:17.207 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 22:31:17.211 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 22:31:11.988 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:45590 10 6452 1 2025-12-02 22:32:05.182 00:00:10.363 TCP 23.104.0.1:48324 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:32:12.225 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37992 10 6452 1 2025-12-02 22:33:05.583 00:00:10.366 TCP 23.104.0.1:60012 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:33:12.398 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43930 10 6452 1 2025-12-02 22:34:05.987 00:00:10.367 TCP 23.104.0.1:44526 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:34:12.615 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56668 10 6452 1 2025-12-02 22:31:06.833 00:05:04.798 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 22:31:06.830 00:05:04.803 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 22:35:06.393 00:00:10.369 TCP 23.104.0.1:49008 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:35:12.832 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52002 10 6452 1 2025-12-02 22:36:17.418 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 22:36:06.801 00:00:10.360 TCP 23.104.0.1:45658 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:36:17.370 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 22:36:13.075 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38200 10 6452 1 2025-12-02 22:37:07.206 00:00:10.364 TCP 23.104.0.1:36186 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:37:13.254 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:52282 10 6452 1 2025-12-02 22:38:07.608 00:00:10.365 TCP 23.104.0.1:57824 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:38:13.421 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50624 10 6452 1 2025-12-02 22:39:08.015 00:00:10.374 TCP 23.104.0.1:38024 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:39:13.633 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46956 10 6452 1 2025-12-02 22:40:08.432 00:00:10.845 TCP 23.104.0.1:48760 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:40:13.846 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57260 10 6452 1 2025-12-02 22:37:06.832 00:05:04.802 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 22:37:06.834 00:05:04.797 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 22:41:17.460 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 22:41:17.368 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 22:41:09.319 00:00:10.366 TCP 23.104.0.1:58690 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:41:14.036 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59076 10 6452 1 2025-12-02 22:42:09.726 00:00:10.323 TCP 23.104.0.1:47726 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:42:14.244 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35304 10 6452 1 2025-12-02 22:43:10.103 00:00:10.365 TCP 23.104.0.1:54070 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:43:14.457 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37436 10 6452 1 2025-12-02 22:44:10.509 00:00:10.328 TCP 23.104.0.1:55278 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:44:14.670 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:35350 10 6452 1 2025-12-02 22:45:10.877 00:00:10.362 TCP 23.104.0.1:54902 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:45:14.841 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38874 10 6452 1 2025-12-02 22:46:17.547 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 22:46:17.645 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 22:46:11.280 00:00:11.027 TCP 23.104.0.1:33302 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:46:15.074 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52306 10 6452 1 2025-12-02 22:43:06.837 00:05:04.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 22:43:06.834 00:05:04.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 22:47:12.348 00:00:10.365 TCP 23.104.0.1:56768 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:47:15.291 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45772 10 6452 1 2025-12-02 22:48:15.465 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44092 10 6452 1 2025-12-02 22:48:12.750 00:00:10.378 TCP 23.104.0.1:43804 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:49:15.671 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:51320 10 6452 1 2025-12-02 22:49:13.167 00:00:10.324 TCP 23.104.0.1:43198 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:50:15.851 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52804 10 6452 1 2025-12-02 22:50:13.531 00:00:10.367 TCP 23.104.0.1:34504 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:51:17.689 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 22:51:16.081 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:34780 10 6452 1 2025-12-02 22:51:17.694 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 22:51:13.939 00:00:10.377 TCP 23.104.0.1:36820 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:52:16.251 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33838 10 6452 1 2025-12-02 22:52:14.352 00:00:10.366 TCP 23.104.0.1:45970 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:49:06.835 00:05:04.800 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-02 22:49:06.838 00:05:04.795 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-02 22:53:16.464 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34818 10 6452 1 2025-12-02 22:53:14.755 00:00:10.382 TCP 23.104.0.1:54482 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:54:15.177 00:00:10.364 TCP 23.104.0.1:51478 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:54:16.674 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46028 10 6452 1 2025-12-02 22:55:15.581 00:00:10.372 TCP 23.104.0.1:47450 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:55:16.888 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57546 10 6452 1 2025-12-02 22:56:18.232 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-02 22:56:17.795 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-02 22:56:16.000 00:00:10.377 TCP 23.104.0.1:40918 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:56:17.109 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52582 10 6452 1 2025-12-02 22:57:16.414 00:00:10.350 TCP 23.104.0.1:46776 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:57:17.355 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55826 10 6452 1 2025-12-02 22:58:16.802 00:00:10.337 TCP 23.104.0.1:57144 -> 1.101.0.1:3000 11 1507 1 2025-12-02 22:58:17.567 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55534 10 6452 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1058, avg pps: 0, avg bpp: 318 Time window: 2025-12-02 21:55:06 - 2025-12-02 22:58:27 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0022s Wall: 0.0022s flows/second: 75267.1 Runtime: 0.0022s