Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 21:58:57.720 00:00:10.371 TCP 23.104.0.1:42242 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:59:08.859 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:37062 10 6452 1 2025-10-01 21:59:58.142 00:00:10.322 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:00:09.081 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38540 10 6452 1 2025-10-01 21:56:36.305 00:05:01.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 22:00:58.502 00:00:10.364 TCP 23.104.0.1:49380 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:01:09.304 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39468 10 6452 1 2025-10-01 22:01:24.139 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 22:01:23.898 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 21:57:36.307 00:05:01.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 22:01:58.906 00:00:10.359 TCP 23.104.0.1:48626 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:02:09.543 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46646 10 6452 1 2025-10-01 22:02:59.309 00:00:10.362 TCP 23.104.0.1:43982 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:03:09.757 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38484 10 6452 1 2025-10-01 22:03:59.710 00:00:10.383 TCP 23.104.0.1:45070 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:04:09.979 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:40350 10 6452 1 2025-10-01 22:05:00.129 00:00:10.418 TCP 23.104.0.1:41350 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:05:10.206 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42934 10 6452 1 2025-10-01 22:06:00.587 00:00:10.362 TCP 23.104.0.1:44098 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:06:10.422 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52610 10 6452 1 2025-10-01 22:06:24.281 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 22:06:24.220 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:02:36.305 00:05:01.796 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 22:07:00.994 00:00:10.374 TCP 23.104.0.1:48682 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:07:10.639 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51932 10 6452 1 2025-10-01 22:03:36.308 00:05:01.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 22:08:01.406 00:00:10.364 TCP 23.104.0.1:53136 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:08:10.815 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41682 10 6452 1 2025-10-01 22:09:01.808 00:00:10.368 TCP 23.104.0.1:39576 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:09:11.035 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55030 10 6452 1 2025-10-01 22:10:02.214 00:00:10.364 TCP 23.104.0.1:55384 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:10:11.248 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39604 10 6452 1 2025-10-01 22:11:02.615 00:00:10.365 TCP 23.104.0.1:41902 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:11:24.420 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:11:24.514 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 22:11:11.459 00:00:19.622 TCP 1.101.0.1:3000 -> 22.102.0.1:40690 10 6452 1 2025-10-01 22:12:03.022 00:00:10.362 TCP 23.104.0.1:54316 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:12:21.128 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59264 10 6452 1 2025-10-01 22:08:36.307 00:05:01.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 22:13:03.426 00:00:10.321 TCP 23.104.0.1:48918 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:13:21.351 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42864 10 6452 1 2025-10-01 22:09:36.310 00:05:01.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 22:14:03.785 00:00:10.364 TCP 23.104.0.1:47044 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:14:21.532 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37624 10 6452 1 2025-10-01 22:15:04.187 00:00:10.359 TCP 23.104.0.1:48906 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:15:21.746 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56710 10 6452 1 2025-10-01 22:16:04.586 00:00:10.328 TCP 23.104.0.1:50970 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:16:24.440 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 22:16:24.327 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:16:21.963 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:42146 10 6452 1 2025-10-01 22:17:04.952 00:00:10.371 TCP 23.104.0.1:47808 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:17:22.193 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53200 10 6452 1 2025-10-01 22:18:05.358 00:00:10.374 TCP 23.104.0.1:46478 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:18:22.405 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:51468 10 6452 1 2025-10-01 22:14:36.308 00:05:01.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 22:19:05.768 00:00:10.336 TCP 23.104.0.1:54844 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:19:22.594 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42278 10 6452 1 2025-10-01 22:15:36.311 00:05:01.790 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 22:20:06.146 00:00:10.380 TCP 23.104.0.1:50570 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:20:22.807 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56566 10 6452 1 2025-10-01 22:21:06.566 00:00:10.725 TCP 23.104.0.1:60134 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:21:24.533 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:21:24.381 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 22:21:23.032 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53136 10 6452 1 2025-10-01 22:22:07.326 00:00:10.358 TCP 23.104.0.1:56614 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:22:23.246 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47102 10 6452 1 2025-10-01 22:23:07.729 00:00:10.373 TCP 23.104.0.1:42278 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:23:23.421 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34126 10 6452 1 2025-10-01 22:24:08.138 00:00:10.365 TCP 23.104.0.1:44742 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:24:23.641 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50230 10 6452 1 2025-10-01 22:20:36.312 00:05:01.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 22:25:08.541 00:00:10.318 TCP 23.104.0.1:44904 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:25:23.854 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37458 10 6452 1 2025-10-01 22:21:36.313 00:05:01.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 22:26:08.894 00:00:10.376 TCP 23.104.0.1:54878 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:26:24.722 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:26:24.811 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 22:26:24.084 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54786 10 6452 1 2025-10-01 22:27:09.307 00:00:10.320 TCP 23.104.0.1:36822 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:27:24.300 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:57350 10 6452 1 2025-10-01 22:28:09.674 00:00:10.368 TCP 23.104.0.1:40918 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:28:24.509 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56964 11 6504 1 2025-10-01 22:29:10.104 00:00:10.327 TCP 23.104.0.1:34686 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:29:24.741 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:44672 10 6452 1 2025-10-01 22:30:10.467 00:00:10.323 TCP 23.104.0.1:38782 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:30:24.920 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56562 10 6452 1 2025-10-01 22:26:36.313 00:05:01.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 22:31:10.832 00:00:10.381 TCP 23.104.0.1:57394 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:31:25.017 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 22:31:25.084 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:31:25.127 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38176 10 6452 1 2025-10-01 22:27:36.316 00:05:01.809 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 22:32:11.254 00:00:10.366 TCP 23.104.0.1:40638 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:32:25.346 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:41204 10 6452 1 2025-10-01 22:33:11.665 00:00:10.364 TCP 23.104.0.1:41692 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:33:25.574 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48030 10 6452 1 2025-10-01 22:34:12.095 00:00:10.361 TCP 23.104.0.1:47494 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:34:25.789 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41778 10 6452 1 2025-10-01 22:35:12.494 00:00:10.365 TCP 23.104.0.1:39900 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:35:26.028 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33596 10 6452 1 2025-10-01 22:36:24.685 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 22:36:12.899 00:00:10.369 TCP 23.104.0.1:48220 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:36:25.060 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:36:26.241 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:32860 10 6452 1 2025-10-01 22:32:36.314 00:05:01.814 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 22:37:13.308 00:00:10.325 TCP 23.104.0.1:45716 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:37:26.466 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:37954 10 6452 1 2025-10-01 22:33:36.317 00:05:01.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 22:38:13.673 00:00:10.368 TCP 23.104.0.1:33538 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:38:26.696 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:36862 10 6452 1 2025-10-01 22:39:14.107 00:00:10.317 TCP 23.104.0.1:46736 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:39:26.877 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37572 10 6452 1 2025-10-01 22:40:14.468 00:00:10.324 TCP 23.104.0.1:57890 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:40:27.104 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39052 10 6452 1 2025-10-01 22:41:25.036 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 22:41:24.974 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:41:14.830 00:00:10.391 TCP 23.104.0.1:54906 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:41:27.316 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42172 10 6452 1 2025-10-01 22:42:15.264 00:00:10.366 TCP 23.104.0.1:33702 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:42:27.522 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43956 10 6452 1 2025-10-01 22:38:36.314 00:05:01.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 22:43:15.676 00:00:10.374 TCP 23.104.0.1:48846 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:39:36.317 00:05:01.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 22:43:27.693 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53330 10 6452 1 2025-10-01 22:44:16.102 00:00:10.364 TCP 23.104.0.1:38710 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:44:27.904 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36508 10 6452 1 2025-10-01 22:45:16.507 00:00:10.369 TCP 23.104.0.1:34920 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:45:28.126 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60972 10 6452 1 2025-10-01 22:46:25.245 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 22:46:24.963 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:46:16.924 00:00:10.390 TCP 23.104.0.1:37238 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:46:28.337 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59216 10 6452 1 2025-10-01 22:47:17.350 00:00:10.358 TCP 23.104.0.1:60728 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:47:28.542 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48274 10 6452 1 2025-10-01 22:48:17.749 00:00:10.362 TCP 23.104.0.1:37676 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:48:28.752 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37244 10 6452 1 2025-10-01 22:44:36.318 00:05:01.812 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 22:49:18.151 00:00:10.870 TCP 23.104.0.1:58358 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:49:28.973 00:00:11.354 TCP 1.101.0.1:3000 -> 22.102.0.1:48590 10 6452 1 2025-10-01 22:45:36.320 00:05:01.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 22:50:19.086 00:00:10.320 TCP 23.104.0.1:57230 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:50:30.367 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56638 10 6452 1 2025-10-01 22:51:25.249 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 22:51:25.179 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:51:19.441 00:00:10.327 TCP 23.104.0.1:51274 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:51:30.541 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40632 10 6452 1 2025-10-01 22:52:19.810 00:00:10.363 TCP 23.104.0.1:57514 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:52:30.717 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43348 10 6452 1 2025-10-01 22:53:20.215 00:00:10.363 TCP 23.104.0.1:58714 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:53:30.894 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52644 10 6452 1 2025-10-01 22:54:20.631 00:00:10.367 TCP 23.104.0.1:35720 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:54:31.114 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:60310 10 6452 1 2025-10-01 22:50:36.320 00:05:01.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 22:55:21.036 00:00:10.366 TCP 23.104.0.1:33716 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:51:36.321 00:05:01.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 22:55:31.289 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52998 10 6452 1 2025-10-01 22:56:26.039 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 22:56:26.049 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 22:56:21.442 00:00:10.363 TCP 23.104.0.1:42122 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:56:31.521 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40880 10 6452 1 2025-10-01 22:57:21.844 00:00:10.391 TCP 23.104.0.1:51900 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:57:31.737 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51470 10 6452 1 2025-10-01 22:58:22.272 00:00:10.321 TCP 23.104.0.1:55412 -> 1.101.0.1:3000 11 1507 1 2025-10-01 22:58:31.945 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:33650 12 6556 1 Summary: total flows: 164, total bytes: 498504, total packets: 1575, avg bps: 1070, avg pps: 0, avg bpp: 316 Time window: 2025-10-01 21:56:36 - 2025-10-01 22:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0044s User: 0.0011s Wall: 0.0020s flows/second: 81918.0 Runtime: 0.0020s