Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 20:59:17.313 00:00:10.360 TCP 23.104.0.1:34448 -> 1.101.0.1:3000 11 1507 1 2025-10-14 20:59:28.006 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42110 10 6452 1 2025-10-14 21:00:17.715 00:00:10.373 TCP 23.104.0.1:40190 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:00:28.185 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:41650 10 6452 1 2025-10-14 20:56:42.342 00:05:02.430 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 20:56:42.345 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 21:01:18.133 00:00:10.363 TCP 23.104.0.1:41730 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:01:28.356 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36368 10 6452 1 2025-10-14 21:02:18.540 00:00:10.363 TCP 23.104.0.1:57194 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:02:38.075 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 21:02:28.524 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36594 10 6452 1 2025-10-14 21:02:38.458 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 21:03:18.942 00:00:10.375 TCP 23.104.0.1:56588 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:03:28.736 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:54192 10 6452 1 2025-10-14 21:04:19.360 00:00:10.323 TCP 23.104.0.1:43012 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:04:28.942 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:40664 10 6452 1 2025-10-14 21:05:19.722 00:00:10.369 TCP 23.104.0.1:40868 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:05:29.177 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37934 10 6452 1 2025-10-14 21:06:20.132 00:00:10.364 TCP 23.104.0.1:55786 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:06:29.399 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45438 10 6452 1 2025-10-14 21:02:42.346 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 21:02:42.343 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 21:07:20.537 00:00:10.374 TCP 23.104.0.1:48502 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:07:38.550 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 21:07:38.499 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 21:07:29.612 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40462 10 6452 1 2025-10-14 21:08:20.939 00:00:10.344 TCP 23.104.0.1:36902 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:08:29.824 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46762 10 6452 1 2025-10-14 21:09:21.313 00:00:10.369 TCP 23.104.0.1:50106 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:09:30.041 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51520 10 6452 1 2025-10-14 21:10:21.721 00:00:10.365 TCP 23.104.0.1:50984 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:10:30.224 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34818 10 6452 1 2025-10-14 21:11:22.121 00:00:10.366 TCP 23.104.0.1:40332 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:11:30.435 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50004 10 6452 1 2025-10-14 21:12:22.525 00:00:10.365 TCP 23.104.0.1:57380 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:12:38.721 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 21:12:38.662 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 21:12:30.651 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:57600 10 6452 1 2025-10-14 21:08:42.347 00:05:02.429 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 21:08:42.349 00:05:02.424 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 21:13:22.926 00:00:10.344 TCP 23.104.0.1:34740 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:13:30.827 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52626 10 6452 1 2025-10-14 21:14:23.313 00:00:10.322 TCP 23.104.0.1:38114 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:14:31.050 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55696 10 6452 1 2025-10-14 21:15:23.670 00:00:10.382 TCP 23.104.0.1:42254 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:15:31.274 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44010 10 6452 1 2025-10-14 21:16:24.106 00:00:10.363 TCP 23.104.0.1:55554 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:16:31.483 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33050 10 6452 1 2025-10-14 21:17:24.511 00:00:10.367 TCP 23.104.0.1:48668 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:17:38.348 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 21:17:38.659 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 21:17:31.697 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55506 10 6452 1 2025-10-14 21:18:24.918 00:00:10.381 TCP 23.104.0.1:46216 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:14:42.350 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 21:18:31.913 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38498 10 6452 1 2025-10-14 21:14:42.353 00:05:02.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 21:19:25.334 00:00:10.373 TCP 23.104.0.1:35776 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:19:32.125 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38066 10 6452 1 2025-10-14 21:20:25.748 00:00:10.362 TCP 23.104.0.1:36394 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:20:32.338 00:00:10.825 TCP 1.101.0.1:3000 -> 22.102.0.1:51856 10 6452 1 2025-10-14 21:21:26.151 00:00:10.364 TCP 23.104.0.1:54702 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:21:33.203 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57210 10 6452 1 2025-10-14 21:22:26.552 00:00:10.365 TCP 23.104.0.1:36706 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:22:38.753 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 21:22:38.760 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 21:22:33.417 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43992 10 6452 1 2025-10-14 21:23:26.955 00:00:10.367 TCP 23.104.0.1:42804 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:23:33.636 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33872 10 6452 1 2025-10-14 21:24:27.366 00:00:10.361 TCP 23.104.0.1:38772 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:20:42.353 00:05:02.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 21:24:33.862 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55550 10 6452 1 2025-10-14 21:20:42.350 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 21:25:27.770 00:00:10.372 TCP 23.104.0.1:34598 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:25:34.069 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55244 10 6452 1 2025-10-14 21:26:28.178 00:00:10.369 TCP 23.104.0.1:56018 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:26:34.290 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39920 10 6452 1 2025-10-14 21:27:38.633 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 21:27:39.018 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 21:27:28.582 00:00:11.022 TCP 23.104.0.1:38198 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:27:34.504 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:38176 10 6452 1 2025-10-14 21:28:29.649 00:00:10.366 TCP 23.104.0.1:51922 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:28:34.687 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44006 10 6452 1 2025-10-14 21:29:30.063 00:00:10.358 TCP 23.104.0.1:34226 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:29:34.901 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50570 10 6452 1 2025-10-14 21:30:35.121 00:00:10.339 TCP 1.101.0.1:3000 -> 22.102.0.1:51758 10 6452 1 2025-10-14 21:26:42.352 00:05:02.426 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 21:30:30.461 00:00:10.364 TCP 23.104.0.1:55020 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:26:42.355 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 21:31:30.874 00:00:10.338 TCP 23.104.0.1:43726 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:31:35.500 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42104 9 6412 1 2025-10-14 21:32:38.964 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 21:32:38.831 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 21:32:31.244 00:00:10.365 TCP 23.104.0.1:56822 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:32:35.718 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50016 10 6452 1 2025-10-14 21:33:31.649 00:00:10.361 TCP 23.104.0.1:42946 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:33:35.933 00:00:11.018 TCP 1.101.0.1:3000 -> 22.102.0.1:40218 10 6452 1 2025-10-14 21:34:32.056 00:00:10.321 TCP 23.104.0.1:47614 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:34:36.991 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38984 10 6452 1 2025-10-14 21:35:32.424 00:00:10.363 TCP 23.104.0.1:41298 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:35:37.218 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38428 10 6452 1 2025-10-14 21:32:42.353 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 21:36:32.823 00:00:10.365 TCP 23.104.0.1:46198 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:32:42.355 00:05:02.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 21:36:37.430 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56516 10 6452 1 2025-10-14 21:37:39.015 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 21:37:39.053 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 21:37:33.236 00:00:10.366 TCP 23.104.0.1:55652 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:37:37.647 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:54702 10 6452 1 2025-10-14 21:38:33.645 00:00:10.367 TCP 23.104.0.1:33714 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:38:37.829 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47422 10 6452 1 2025-10-14 21:39:34.057 00:00:10.365 TCP 23.104.0.1:41518 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:39:38.068 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:47600 10 6452 1 2025-10-14 21:40:34.464 00:00:10.320 TCP 23.104.0.1:52344 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:40:38.244 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36842 10 6452 1 2025-10-14 21:41:34.822 00:00:10.323 TCP 23.104.0.1:55274 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:41:38.456 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43442 10 6452 1 2025-10-14 21:42:38.938 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 21:42:39.159 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 21:38:42.354 00:05:02.428 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 21:42:35.185 00:00:10.324 TCP 23.104.0.1:41224 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:38:42.357 00:05:02.423 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 21:42:38.669 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35982 10 6452 1 2025-10-14 21:43:35.550 00:00:10.365 TCP 23.104.0.1:36812 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:43:38.884 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:60556 10 6452 1 2025-10-14 21:44:35.952 00:00:10.331 TCP 23.104.0.1:43684 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:44:39.078 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41336 10 6452 1 2025-10-14 21:45:36.324 00:00:10.342 TCP 23.104.0.1:57004 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:45:39.293 00:00:10.860 TCP 1.101.0.1:3000 -> 22.102.0.1:48426 10 6452 1 2025-10-14 21:46:40.196 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33250 10 6452 1 2025-10-14 21:46:36.699 00:00:10.492 TCP 23.104.0.1:44524 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:47:39.027 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 21:47:39.234 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 21:47:40.408 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54932 10 6452 1 2025-10-14 21:47:37.235 00:00:10.369 TCP 23.104.0.1:39302 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:44:42.359 00:05:02.421 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 21:44:42.356 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 21:48:37.643 00:00:10.327 TCP 23.104.0.1:39012 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:48:40.579 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42934 10 6452 1 2025-10-14 21:49:40.795 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33310 10 6452 1 2025-10-14 21:49:38.015 00:00:10.362 TCP 23.104.0.1:49608 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:50:41.013 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46982 10 6452 1 2025-10-14 21:50:38.413 00:00:10.374 TCP 23.104.0.1:49746 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:51:41.245 00:00:10.239 TCP 1.101.0.1:3000 -> 22.102.0.1:35684 10 6452 1 2025-10-14 21:51:38.833 00:00:10.386 TCP 23.104.0.1:38868 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:52:40.055 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 21:52:39.816 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 21:52:41.532 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51664 10 6452 1 2025-10-14 21:52:39.252 00:00:10.366 TCP 23.104.0.1:40282 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:53:41.744 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56654 10 6452 1 2025-10-14 21:53:39.661 00:00:10.331 TCP 23.104.0.1:54588 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:50:42.362 00:05:02.422 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 21:50:42.359 00:05:02.427 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 21:54:40.032 00:00:10.323 TCP 23.104.0.1:34492 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:54:41.965 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:51904 10 6452 1 2025-10-14 21:55:40.392 00:00:10.332 TCP 23.104.0.1:42126 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:55:42.151 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54848 10 6452 1 2025-10-14 21:56:40.759 00:00:10.334 TCP 23.104.0.1:37612 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:56:42.359 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55856 10 6452 1 2025-10-14 21:57:39.386 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 21:57:39.614 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 21:57:41.130 00:00:10.368 TCP 23.104.0.1:46318 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:57:42.535 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52152 10 6452 1 Summary: total flows: 162, total bytes: 490349, total packets: 1550, avg bps: 1068, avg pps: 0, avg bpp: 316 Time window: 2025-10-14 20:56:42 - 2025-10-14 21:57:52 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0033s User: 0.0025s Wall: 0.0027s flows/second: 59317.1 Runtime: 0.0027s