Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-16 21:59:14.510 00:00:10.369 TCP 23.104.0.1:59368 -> 1.101.0.1:3000 11 1507 1 2025-10-16 21:59:12.347 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50560 10 6452 1 2025-10-16 22:00:14.914 00:00:10.366 TCP 23.104.0.1:45850 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:00:12.568 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43096 10 6452 1 2025-10-16 21:56:43.299 00:05:02.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 21:56:43.302 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 22:01:15.321 00:00:10.361 TCP 23.104.0.1:45710 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:01:12.788 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40764 10 6452 1 2025-10-16 22:02:13.015 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43332 10 6452 1 2025-10-16 22:02:15.720 00:00:10.383 TCP 23.104.0.1:49710 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:03:16.127 00:00:10.364 TCP 23.104.0.1:55634 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:03:13.233 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42970 10 6452 1 2025-10-16 22:03:37.193 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 22:03:37.323 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 22:04:16.528 00:00:10.362 TCP 23.104.0.1:45766 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:04:13.457 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59948 10 6452 1 2025-10-16 22:05:13.678 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50586 10 6452 1 2025-10-16 22:05:16.931 00:00:10.338 TCP 23.104.0.1:46864 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:06:13.893 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:36648 10 6452 1 2025-10-16 22:06:17.311 00:00:10.361 TCP 23.104.0.1:33406 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:02:43.304 00:05:02.597 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 22:02:43.301 00:05:02.602 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 22:07:14.088 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55884 10 6452 1 2025-10-16 22:07:17.713 00:00:10.366 TCP 23.104.0.1:47944 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:08:14.260 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39858 10 6452 1 2025-10-16 22:08:18.119 00:00:10.364 TCP 23.104.0.1:59172 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:08:37.546 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 22:08:37.512 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 22:09:14.479 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48516 10 6452 1 2025-10-16 22:09:18.519 00:00:10.325 TCP 23.104.0.1:52506 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:10:14.691 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36498 10 6452 1 2025-10-16 22:10:18.884 00:00:10.371 TCP 23.104.0.1:39398 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:11:14.910 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:36486 10 6452 1 2025-10-16 22:11:19.296 00:00:10.332 TCP 23.104.0.1:53134 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:12:15.148 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59626 10 6452 1 2025-10-16 22:12:19.675 00:00:10.372 TCP 23.104.0.1:45618 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:08:43.304 00:05:02.601 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 22:08:43.307 00:05:02.596 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 22:13:15.363 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37842 10 6452 1 2025-10-16 22:13:20.100 00:00:10.324 TCP 23.104.0.1:45742 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:13:37.554 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 22:13:37.622 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 22:14:15.581 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54742 10 6452 1 2025-10-16 22:14:20.464 00:00:10.366 TCP 23.104.0.1:54504 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:15:15.793 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55026 10 6452 1 2025-10-16 22:15:20.866 00:00:10.369 TCP 23.104.0.1:51066 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:16:16.012 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38422 10 6452 1 2025-10-16 22:16:21.269 00:00:10.375 TCP 23.104.0.1:47318 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:17:16.186 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57194 10 6452 1 2025-10-16 22:17:21.692 00:00:10.363 TCP 23.104.0.1:56500 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:18:16.356 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34576 10 6452 1 2025-10-16 22:18:22.111 00:00:10.364 TCP 23.104.0.1:52922 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:18:37.619 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 22:18:37.500 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 22:14:43.309 00:05:02.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 22:14:43.306 00:05:02.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 22:19:16.568 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51192 10 6452 1 2025-10-16 22:19:22.514 00:00:10.366 TCP 23.104.0.1:59030 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:20:16.776 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56438 10 6452 1 2025-10-16 22:20:22.918 00:00:10.331 TCP 23.104.0.1:39496 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:21:16.986 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:54448 10 6452 1 2025-10-16 22:21:23.288 00:00:10.368 TCP 23.104.0.1:42062 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:22:17.220 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41026 12 10375 1 2025-10-16 22:22:23.692 00:00:10.531 TCP 23.104.0.1:36774 -> 1.101.0.1:3000 15 1926 1 2025-10-16 22:23:17.424 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39704 10 6452 1 2025-10-16 22:23:24.266 00:00:10.369 TCP 23.104.0.1:44332 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:23:37.772 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 22:23:37.569 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 22:24:17.643 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45212 10 6452 1 2025-10-16 22:24:24.676 00:00:10.361 TCP 23.104.0.1:35628 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:20:43.311 00:05:02.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 22:20:43.309 00:05:02.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 22:25:17.848 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59050 10 6452 1 2025-10-16 22:25:25.102 00:00:10.324 TCP 23.104.0.1:46854 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:26:18.083 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42638 10 6452 1 2025-10-16 22:26:25.471 00:00:10.327 TCP 23.104.0.1:39616 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:27:18.294 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42476 10 6452 1 2025-10-16 22:27:25.837 00:00:10.387 TCP 23.104.0.1:33058 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:28:18.465 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40522 10 6452 1 2025-10-16 22:28:26.257 00:00:10.368 TCP 23.104.0.1:52232 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:28:37.880 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 22:28:37.793 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 22:29:18.685 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59220 10 6452 1 2025-10-16 22:29:26.662 00:00:10.321 TCP 23.104.0.1:39952 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:30:18.913 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:59876 10 6452 1 2025-10-16 22:30:27.020 00:00:10.324 TCP 23.104.0.1:35440 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:26:43.313 00:05:02.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 22:26:43.312 00:05:02.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 22:31:19.100 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36512 10 6452 1 2025-10-16 22:31:27.383 00:00:10.360 TCP 23.104.0.1:58474 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:32:19.309 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46922 10 6452 1 2025-10-16 22:32:27.782 00:00:10.985 TCP 23.104.0.1:33866 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:33:19.524 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:60710 10 6452 1 2025-10-16 22:33:37.764 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 22:33:37.911 00:00:00.052 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 22:33:28.809 00:00:10.333 TCP 23.104.0.1:59632 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:34:19.705 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54312 10 6452 1 2025-10-16 22:34:29.182 00:00:10.341 TCP 23.104.0.1:54936 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:35:19.919 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55610 10 6452 1 2025-10-16 22:35:29.559 00:00:10.365 TCP 23.104.0.1:35988 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:36:20.131 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33356 10 6452 1 2025-10-16 22:36:29.964 00:00:10.365 TCP 23.104.0.1:58802 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:32:43.314 00:05:02.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 22:32:43.312 00:05:02.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 22:37:20.342 00:00:10.325 TCP 1.101.0.1:3000 -> 22.102.0.1:52228 10 6452 1 2025-10-16 22:37:30.369 00:00:10.361 TCP 23.104.0.1:53014 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:38:20.705 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47586 10 6452 1 2025-10-16 22:38:38.684 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 22:38:30.767 00:00:10.328 TCP 23.104.0.1:55224 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:38:38.729 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 22:39:20.877 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:33044 10 6452 1 2025-10-16 22:39:31.135 00:00:10.358 TCP 23.104.0.1:37504 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:40:21.108 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43010 10 6452 1 2025-10-16 22:40:31.529 00:00:10.367 TCP 23.104.0.1:53554 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:41:21.322 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56116 10 6452 1 2025-10-16 22:41:31.933 00:00:10.378 TCP 23.104.0.1:57566 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:42:21.537 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36144 12 6556 1 2025-10-16 22:42:32.349 00:00:10.363 TCP 23.104.0.1:36694 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:38:43.319 00:05:02.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 22:38:43.316 00:05:02.606 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 22:43:21.756 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47444 10 6452 1 2025-10-16 22:43:38.193 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 22:43:38.238 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 22:43:32.747 00:00:10.415 TCP 23.104.0.1:57968 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:44:21.933 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54828 10 6452 1 2025-10-16 22:44:33.202 00:00:10.324 TCP 23.104.0.1:53788 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:45:22.171 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43526 10 6452 1 2025-10-16 22:45:33.564 00:00:10.329 TCP 23.104.0.1:53742 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:46:22.391 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55330 10 6452 1 2025-10-16 22:46:33.929 00:00:10.372 TCP 23.104.0.1:56640 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:47:22.602 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41958 10 6452 1 2025-10-16 22:47:34.343 00:00:10.366 TCP 23.104.0.1:48310 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:48:22.814 00:00:10.276 TCP 1.101.0.1:3000 -> 22.102.0.1:38242 10 6452 1 2025-10-16 22:48:38.233 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 22:48:38.295 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 22:44:43.320 00:05:02.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 22:48:34.745 00:00:10.364 TCP 23.104.0.1:43898 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:44:43.317 00:05:02.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 22:49:23.128 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60626 10 6452 1 2025-10-16 22:49:35.147 00:00:10.361 TCP 23.104.0.1:36474 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:50:23.339 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54026 10 6452 1 2025-10-16 22:50:35.546 00:00:10.364 TCP 23.104.0.1:45008 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:51:23.515 00:00:10.360 TCP 1.101.0.1:3000 -> 22.102.0.1:38174 10 6452 1 2025-10-16 22:51:35.949 00:00:10.371 TCP 23.104.0.1:51346 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:52:23.912 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:57018 10 6452 1 2025-10-16 22:52:36.364 00:00:11.112 TCP 23.104.0.1:49298 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:53:24.152 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56188 10 6452 1 2025-10-16 22:53:38.175 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 22:53:38.283 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 22:53:37.511 00:00:10.382 TCP 23.104.0.1:46172 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:54:24.368 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58956 10 6452 1 2025-10-16 22:50:43.319 00:05:02.607 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-16 22:50:43.323 00:05:02.601 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-16 22:54:37.929 00:00:10.377 TCP 23.104.0.1:49524 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:55:24.601 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38474 10 6452 1 2025-10-16 22:55:38.344 00:00:10.363 TCP 23.104.0.1:36214 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:56:24.814 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34664 10 6452 1 2025-10-16 22:56:38.747 00:00:10.329 TCP 23.104.0.1:60850 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:57:25.035 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39184 10 6452 1 2025-10-16 22:57:39.111 00:00:10.365 TCP 23.104.0.1:57330 -> 1.101.0.1:3000 11 1507 1 2025-10-16 22:58:25.252 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42206 10 6452 1 2025-10-16 22:58:38.460 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-16 22:58:38.347 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-16 22:58:39.514 00:00:10.533 TCP 23.104.0.1:39294 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502794, total packets: 1580, avg bps: 1079, avg pps: 0, avg bpp: 318 Time window: 2025-10-16 21:56:43 - 2025-10-16 22:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0031s User: 0.0020s Wall: 0.0016s flows/second: 103407.4 Runtime: 0.0016s