Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 20:59:07.953 00:00:10.364 TCP 23.104.0.1:60626 -> 1.101.0.1:3000 11 1507 1 2025-10-18 20:59:33.665 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 20:59:33.674 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 20:59:33.220 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48926 10 6452 1 2025-10-18 21:00:08.359 00:00:10.366 TCP 23.104.0.1:41450 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:00:33.435 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:41216 10 6452 1 2025-10-18 20:56:44.304 00:05:02.583 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 20:56:44.308 00:05:02.577 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 21:01:08.755 00:00:10.389 TCP 23.104.0.1:38332 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:01:33.650 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34962 10 6452 1 2025-10-18 21:02:09.181 00:00:10.963 TCP 23.104.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:02:33.869 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57996 10 6452 1 2025-10-18 21:03:10.179 00:00:10.364 TCP 23.104.0.1:36830 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:03:34.099 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46082 10 6452 1 2025-10-18 21:04:10.581 00:00:10.368 TCP 23.104.0.1:43762 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:04:33.759 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 21:04:33.956 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 21:04:34.318 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52930 10 6452 1 2025-10-18 21:05:10.985 00:00:10.367 TCP 23.104.0.1:58160 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:05:34.529 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58320 10 6452 1 2025-10-18 21:06:11.389 00:00:10.363 TCP 23.104.0.1:60542 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:06:34.739 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53164 10 6452 1 2025-10-18 21:02:44.307 00:05:02.580 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 21:02:44.307 00:05:02.584 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 21:07:11.786 00:00:10.371 TCP 23.104.0.1:57912 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:07:34.912 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:38582 10 6452 1 2025-10-18 21:08:12.195 00:00:10.364 TCP 23.104.0.1:55432 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:08:35.135 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33120 10 6452 1 2025-10-18 21:09:12.600 00:00:10.367 TCP 23.104.0.1:52638 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:09:33.935 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 21:09:34.049 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 21:09:35.358 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39666 10 6452 1 2025-10-18 21:10:13.010 00:00:10.360 TCP 23.104.0.1:50726 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:10:35.572 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:36950 10 6452 1 2025-10-18 21:11:13.407 00:00:10.368 TCP 23.104.0.1:42096 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:11:35.820 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58430 10 6452 1 2025-10-18 21:12:13.808 00:00:10.336 TCP 23.104.0.1:37876 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:12:36.042 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38982 10 6452 1 2025-10-18 21:08:44.309 00:05:02.583 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 21:08:44.306 00:05:02.588 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 21:13:14.179 00:00:10.366 TCP 23.104.0.1:50350 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:13:36.253 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:34102 10 6452 1 2025-10-18 21:14:14.581 00:00:10.362 TCP 23.104.0.1:44412 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:14:33.832 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 21:14:34.048 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 21:14:36.427 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47434 10 6452 1 2025-10-18 21:15:14.985 00:00:10.333 TCP 23.104.0.1:48166 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:15:36.658 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:58052 10 6452 1 2025-10-18 21:16:15.356 00:00:10.362 TCP 23.104.0.1:49830 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:16:36.896 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44798 10 6452 1 2025-10-18 21:17:15.758 00:00:10.726 TCP 23.104.0.1:38652 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:17:37.085 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52100 10 6452 1 2025-10-18 21:18:16.523 00:00:10.365 TCP 23.104.0.1:39160 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:14:44.329 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 21:18:37.259 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36042 10 6452 1 2025-10-18 21:14:44.328 00:05:02.567 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 21:19:16.923 00:00:10.399 TCP 23.104.0.1:55738 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:19:34.448 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 21:19:33.992 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 21:19:37.477 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44500 10 6452 1 2025-10-18 21:20:17.362 00:00:10.327 TCP 23.104.0.1:55054 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:20:37.684 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36796 10 6452 1 2025-10-18 21:21:17.741 00:00:10.367 TCP 23.104.0.1:60480 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:21:37.896 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37040 10 6452 1 2025-10-18 21:22:18.142 00:00:10.366 TCP 23.104.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:22:38.111 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33370 10 6452 1 2025-10-18 21:23:18.545 00:00:10.321 TCP 23.104.0.1:56048 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:23:38.326 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46090 10 6452 1 2025-10-18 21:24:18.905 00:00:10.375 TCP 23.104.0.1:35990 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:24:34.074 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 21:24:34.207 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 21:24:38.536 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36368 10 6452 1 2025-10-18 21:20:44.328 00:05:02.568 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 21:20:44.329 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 21:25:19.311 00:00:10.367 TCP 23.104.0.1:55462 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:25:38.747 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49110 10 6452 1 2025-10-18 21:26:19.712 00:00:10.385 TCP 23.104.0.1:55550 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:26:38.959 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48090 10 6452 1 2025-10-18 21:27:20.142 00:00:10.365 TCP 23.104.0.1:53630 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:27:39.188 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:47610 12 10375 1 2025-10-18 21:28:20.547 00:00:10.437 TCP 23.104.0.1:38690 -> 1.101.0.1:3000 15 1926 1 2025-10-18 21:28:39.434 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48050 10 6452 1 2025-10-18 21:29:21.027 00:00:10.364 TCP 23.104.0.1:60634 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:29:34.382 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 21:29:34.548 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 21:29:39.652 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34718 10 6452 1 2025-10-18 21:30:21.426 00:00:10.366 TCP 23.104.0.1:34140 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:26:44.327 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 21:26:44.330 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 21:30:39.868 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48366 10 6452 1 2025-10-18 21:31:21.830 00:00:10.351 TCP 23.104.0.1:56606 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:31:40.097 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48988 10 6452 1 2025-10-18 21:32:22.220 00:00:10.364 TCP 23.104.0.1:49510 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:32:40.312 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39480 10 6452 1 2025-10-18 21:33:22.624 00:00:10.371 TCP 23.104.0.1:34878 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:33:40.486 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:41082 10 6452 1 2025-10-18 21:34:34.397 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 21:34:34.450 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 21:34:23.029 00:00:10.371 TCP 23.104.0.1:49790 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:34:40.688 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39690 10 6452 1 2025-10-18 21:35:23.436 00:00:10.369 TCP 23.104.0.1:45954 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:35:40.901 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:47556 10 6452 1 2025-10-18 21:36:23.842 00:00:10.389 TCP 23.104.0.1:34950 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:36:41.084 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59118 10 6452 1 2025-10-18 21:32:44.328 00:05:02.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 21:32:44.331 00:05:02.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 21:37:24.265 00:00:10.362 TCP 23.104.0.1:49532 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:37:41.295 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49760 10 6452 1 2025-10-18 21:38:24.667 00:00:10.325 TCP 23.104.0.1:53894 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:38:41.469 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45948 10 6452 1 2025-10-18 21:39:34.789 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 21:39:25.031 00:00:10.418 TCP 23.104.0.1:45170 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:39:34.730 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 21:39:41.686 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48436 10 6452 1 2025-10-18 21:40:25.487 00:00:10.367 TCP 23.104.0.1:47166 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:40:41.904 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60092 10 6452 1 2025-10-18 21:41:25.887 00:00:10.374 TCP 23.104.0.1:49550 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:41:42.125 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53250 10 6452 1 2025-10-18 21:42:26.303 00:00:10.360 TCP 23.104.0.1:37228 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:38:44.331 00:05:02.567 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 21:38:44.330 00:05:02.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 21:42:42.373 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44908 10 6452 1 2025-10-18 21:43:26.705 00:00:10.363 TCP 23.104.0.1:46072 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:43:42.583 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57912 10 6452 1 2025-10-18 21:44:34.703 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 21:44:34.516 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 21:44:27.107 00:00:10.325 TCP 23.104.0.1:55956 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:44:42.797 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39000 10 6452 1 2025-10-18 21:45:27.467 00:00:10.368 TCP 23.104.0.1:34670 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:45:42.966 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:52634 11 6775 1 2025-10-18 21:46:27.868 00:00:11.064 TCP 23.104.0.1:50890 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:46:43.196 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:42814 10 6452 1 2025-10-18 21:47:28.973 00:00:10.341 TCP 23.104.0.1:56010 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:47:43.390 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58142 10 6452 1 2025-10-18 21:48:29.347 00:00:10.370 TCP 23.104.0.1:60620 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:44:44.337 00:05:02.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 21:44:44.334 00:05:02.572 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 21:48:43.602 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57848 10 6452 1 2025-10-18 21:49:34.806 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 21:49:34.738 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 21:49:29.754 00:00:10.429 TCP 23.104.0.1:33994 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:49:43.823 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60124 10 6452 1 2025-10-18 21:50:30.216 00:00:10.329 TCP 23.104.0.1:34290 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:50:44.040 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:45288 10 6452 1 2025-10-18 21:51:30.584 00:00:10.364 TCP 23.104.0.1:51300 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:51:44.210 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:40876 10 6452 1 2025-10-18 21:52:30.989 00:00:10.369 TCP 23.104.0.1:58420 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:52:44.431 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:38622 12 10369 1 2025-10-18 21:53:31.399 00:00:10.474 TCP 23.104.0.1:50098 -> 1.101.0.1:3000 15 1926 1 2025-10-18 21:53:44.675 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39340 10 6452 1 2025-10-18 21:54:34.904 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 21:54:34.954 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 21:54:31.914 00:00:10.331 TCP 23.104.0.1:45996 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:50:44.337 00:05:02.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 21:50:44.340 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 21:54:44.885 00:00:10.334 TCP 1.101.0.1:3000 -> 22.102.0.1:32966 10 6452 1 2025-10-18 21:55:32.274 00:00:10.374 TCP 23.104.0.1:45660 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:55:45.254 00:00:10.667 TCP 1.101.0.1:3000 -> 22.102.0.1:57892 10 6452 1 2025-10-18 21:56:32.688 00:00:10.368 TCP 23.104.0.1:35236 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:56:45.958 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49862 12 6556 1 2025-10-18 21:57:33.104 00:00:10.903 TCP 23.104.0.1:55880 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:57:46.191 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:36356 12 10369 1 2025-10-18 21:58:34.060 00:00:10.456 TCP 23.104.0.1:34430 -> 1.101.0.1:3000 15 1926 1 Summary: total flows: 163, total bytes: 505337, total packets: 1583, avg bps: 1086, avg pps: 0, avg bpp: 319 Time window: 2025-10-18 20:56:44 - 2025-10-18 21:58:44 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0023s User: 0.0023s Wall: 0.0023s flows/second: 70257.1 Runtime: 0.0023s