Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 21:59:19.176 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57520 10 6452 1 2025-10-04 21:59:37.399 00:00:10.322 TCP 23.104.0.1:51188 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:00:19.345 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53610 10 6452 1 2025-10-04 21:56:37.691 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 22:00:37.757 00:00:10.392 TCP 23.104.0.1:39382 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:01:19.561 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44662 10 6452 1 2025-10-04 21:57:37.694 00:05:01.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 22:01:38.187 00:00:10.324 TCP 23.104.0.1:41048 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:02:19.771 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57306 10 6452 1 2025-10-04 22:02:50.766 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 22:02:38.544 00:00:10.361 TCP 23.104.0.1:59074 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:02:50.777 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 22:03:19.990 00:00:10.221 TCP 1.101.0.1:3000 -> 22.102.0.1:47914 12 10375 1 2025-10-04 22:03:38.947 00:00:10.456 TCP 23.104.0.1:59800 -> 1.101.0.1:3000 15 1926 1 2025-10-04 22:04:20.259 00:00:10.541 TCP 1.101.0.1:3000 -> 22.102.0.1:60010 10 6452 1 2025-10-04 22:04:39.440 00:00:10.367 TCP 23.104.0.1:49030 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:05:20.837 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58630 10 6452 1 2025-10-04 22:05:39.841 00:00:10.346 TCP 23.104.0.1:38950 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:06:21.077 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51856 10 6452 1 2025-10-04 22:02:37.692 00:05:02.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 22:06:40.223 00:00:10.329 TCP 23.104.0.1:50954 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:07:21.305 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36320 10 6452 1 2025-10-04 22:03:37.695 00:05:01.998 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 22:07:50.912 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 22:07:40.589 00:00:10.326 TCP 23.104.0.1:43296 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:07:50.917 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 22:08:21.529 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60966 10 6452 1 2025-10-04 22:08:40.954 00:00:19.831 TCP 23.104.0.1:57742 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:09:21.740 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:40750 10 6452 1 2025-10-04 22:09:50.856 00:00:10.374 TCP 23.104.0.1:35050 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:10:22.034 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39120 10 6452 1 2025-10-04 22:10:51.263 00:00:10.376 TCP 23.104.0.1:54390 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:11:22.249 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53334 10 6452 1 2025-10-04 22:11:51.678 00:00:10.364 TCP 23.104.0.1:38648 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:12:22.423 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:49124 10 6452 1 2025-10-04 22:08:37.696 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 22:12:50.910 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 22:12:50.887 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 22:12:52.106 00:00:10.322 TCP 23.104.0.1:37840 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:13:22.597 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44422 10 6452 1 2025-10-04 22:09:37.698 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 22:13:52.465 00:00:11.255 TCP 23.104.0.1:45444 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:14:22.811 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36994 10 6452 1 2025-10-04 22:14:53.754 00:00:10.381 TCP 23.104.0.1:40460 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:15:23.026 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47464 10 6452 1 2025-10-04 22:15:54.177 00:00:10.363 TCP 23.104.0.1:47434 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:16:23.241 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35886 10 6452 1 2025-10-04 22:16:54.577 00:00:10.360 TCP 23.104.0.1:37526 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:17:23.464 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6452 1 2025-10-04 22:17:50.723 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 22:17:51.169 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 22:17:54.975 00:00:10.365 TCP 23.104.0.1:56296 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:18:23.695 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:46348 12 10375 1 2025-10-04 22:14:37.697 00:05:02.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 22:18:55.380 00:00:10.433 TCP 23.104.0.1:36568 -> 1.101.0.1:3000 15 1926 1 2025-10-04 22:19:23.961 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35470 10 6452 1 2025-10-04 22:15:37.700 00:05:01.997 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 22:19:55.856 00:00:10.336 TCP 23.104.0.1:35804 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:20:24.183 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36794 10 6452 1 2025-10-04 22:20:56.233 00:00:10.363 TCP 23.104.0.1:51296 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:21:24.393 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52066 10 6452 1 2025-10-04 22:21:56.639 00:00:10.368 TCP 23.104.0.1:33150 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:22:24.619 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53614 10 6452 1 2025-10-04 22:22:51.197 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 22:22:51.228 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 22:22:57.061 00:00:10.364 TCP 23.104.0.1:35196 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:23:24.833 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50530 10 6452 1 2025-10-04 22:23:57.469 00:00:10.363 TCP 23.104.0.1:52526 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:24:25.071 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57898 10 6452 1 2025-10-04 22:20:37.699 00:05:02.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 22:24:57.875 00:00:10.367 TCP 23.104.0.1:51260 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:25:25.280 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55516 10 6452 1 2025-10-04 22:21:37.702 00:05:01.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 22:25:58.280 00:00:10.364 TCP 23.104.0.1:43342 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:26:25.492 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58206 10 6452 1 2025-10-04 22:26:58.679 00:00:10.379 TCP 23.104.0.1:41160 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:27:25.706 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34486 10 6452 1 2025-10-04 22:27:51.439 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 22:27:51.252 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 22:27:59.107 00:00:10.363 TCP 23.104.0.1:37670 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:28:25.874 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35766 10 6452 1 2025-10-04 22:28:59.505 00:00:10.366 TCP 23.104.0.1:59464 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:29:26.094 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39148 10 6452 1 2025-10-04 22:29:59.907 00:00:10.367 TCP 23.104.0.1:59030 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:30:26.300 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:53314 10 6452 1 2025-10-04 22:26:37.702 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 22:31:00.314 00:00:10.369 TCP 23.104.0.1:51742 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:31:26.469 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47160 10 6452 1 2025-10-04 22:27:37.703 00:05:01.997 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 22:32:00.721 00:00:10.326 TCP 23.104.0.1:36152 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:32:26.649 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47342 10 6452 1 2025-10-04 22:32:51.067 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 22:32:51.450 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 22:33:01.098 00:00:10.330 TCP 23.104.0.1:47914 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:33:26.864 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:48362 10 6452 1 2025-10-04 22:34:01.464 00:00:10.325 TCP 23.104.0.1:40198 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:34:27.110 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43354 10 6452 1 2025-10-04 22:35:01.829 00:00:10.382 TCP 23.104.0.1:41550 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:35:27.338 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40322 10 6452 1 2025-10-04 22:36:02.250 00:00:10.323 TCP 23.104.0.1:34384 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:36:27.578 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35296 10 6452 1 2025-10-04 22:32:37.703 00:05:02.004 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 22:37:02.608 00:00:10.370 TCP 23.104.0.1:36730 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:37:27.791 00:00:10.697 TCP 1.101.0.1:3000 -> 22.102.0.1:57274 10 6452 1 2025-10-04 22:33:37.705 00:05:01.999 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 22:37:51.451 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 22:37:51.450 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 22:38:03.020 00:00:10.344 TCP 23.104.0.1:55174 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:38:28.534 00:00:10.312 TCP 1.101.0.1:3000 -> 22.102.0.1:46612 10 6452 1 2025-10-04 22:39:03.425 00:00:10.361 TCP 23.104.0.1:50084 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:39:28.881 00:00:10.270 TCP 1.101.0.1:3000 -> 22.102.0.1:40860 10 6452 1 2025-10-04 22:40:03.829 00:00:10.384 TCP 23.104.0.1:52334 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:40:29.192 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52926 10 6452 1 2025-10-04 22:41:04.253 00:00:10.366 TCP 23.104.0.1:50292 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:41:29.404 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51178 10 6452 1 2025-10-04 22:42:04.657 00:00:10.367 TCP 23.104.0.1:49644 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:42:29.619 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59686 10 6452 1 2025-10-04 22:38:37.704 00:05:02.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 22:42:51.752 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 22:42:51.449 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 22:43:05.090 00:00:10.327 TCP 23.104.0.1:36010 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:43:29.834 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:54488 10 6452 1 2025-10-04 22:39:37.706 00:05:01.998 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 22:44:05.453 00:00:10.320 TCP 23.104.0.1:54614 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:44:30.013 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34180 10 6452 1 2025-10-04 22:45:05.813 00:00:10.365 TCP 23.104.0.1:35788 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:45:30.228 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42914 10 6452 1 2025-10-04 22:46:06.217 00:00:10.383 TCP 23.104.0.1:53154 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:46:30.440 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53088 10 6452 1 2025-10-04 22:47:06.627 00:00:10.361 TCP 23.104.0.1:57712 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:47:30.653 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34768 10 6452 1 2025-10-04 22:47:51.714 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 22:47:51.788 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 22:48:07.030 00:00:10.366 TCP 23.104.0.1:56664 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:44:37.705 00:05:02.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 22:48:30.869 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:41322 10 6452 1 2025-10-04 22:49:07.434 00:00:10.364 TCP 23.104.0.1:59492 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:45:37.707 00:05:01.998 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 22:49:31.095 00:00:10.274 TCP 1.101.0.1:3000 -> 22.102.0.1:44290 10 6452 1 2025-10-04 22:50:07.839 00:00:10.386 TCP 23.104.0.1:37418 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:50:31.410 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59158 10 6452 1 2025-10-04 22:51:08.266 00:00:10.368 TCP 23.104.0.1:37222 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:51:31.580 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36010 10 6452 1 2025-10-04 22:52:08.671 00:00:10.327 TCP 23.104.0.1:45206 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:52:31.802 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54052 10 6452 1 2025-10-04 22:52:51.622 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 22:52:51.870 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 22:53:09.047 00:00:10.368 TCP 23.104.0.1:51260 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:53:32.021 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54730 10 6452 1 2025-10-04 22:54:09.447 00:00:10.364 TCP 23.104.0.1:47464 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:50:37.705 00:05:02.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 22:54:32.246 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33782 10 6452 1 2025-10-04 22:55:09.852 00:00:10.338 TCP 23.104.0.1:42516 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:51:37.709 00:05:01.998 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 22:55:32.449 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43190 10 6452 1 2025-10-04 22:56:10.235 00:00:10.339 TCP 23.104.0.1:58884 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:56:32.621 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42284 10 6452 1 2025-10-04 22:57:10.617 00:00:10.365 TCP 23.104.0.1:58356 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:57:32.834 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54658 10 6452 1 2025-10-04 22:57:51.935 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 22:57:51.922 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 22:58:11.022 00:00:10.369 TCP 23.104.0.1:39266 -> 1.101.0.1:3000 11 1507 1 2025-10-04 22:58:33.088 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45408 10 6452 1 Summary: total flows: 163, total bytes: 505525, total packets: 1573, avg bps: 1085, avg pps: 0, avg bpp: 321 Time window: 2025-10-04 21:56:37 - 2025-10-04 22:58:43 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0022s User: 0.0033s Wall: 0.0025s flows/second: 64815.3 Runtime: 0.0025s