Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-18 21:58:46.435 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60170 10 6452 1 2025-10-18 21:59:35.010 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 21:59:34.805 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 21:59:34.556 00:00:10.323 TCP 23.104.0.1:45022 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:59:46.650 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39120 10 6452 1 2025-10-18 21:56:44.340 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 22:00:34.916 00:00:10.378 TCP 23.104.0.1:51208 -> 1.101.0.1:3000 11 1507 1 2025-10-18 21:56:44.342 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 22:00:46.835 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59120 10 6452 1 2025-10-18 22:01:35.324 00:00:10.332 TCP 23.104.0.1:58998 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:01:47.069 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48608 10 6452 1 2025-10-18 22:02:35.688 00:00:10.445 TCP 23.104.0.1:38920 -> 1.101.0.1:3000 15 1926 1 2025-10-18 22:02:47.247 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:60770 12 10375 1 2025-10-18 22:03:36.169 00:00:10.365 TCP 23.104.0.1:42698 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:03:47.453 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:38994 10 6452 1 2025-10-18 22:04:35.023 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 22:04:34.940 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 22:04:36.576 00:00:10.368 TCP 23.104.0.1:58224 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:04:47.632 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48556 10 6452 1 2025-10-18 22:05:36.986 00:00:10.326 TCP 23.104.0.1:55838 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:05:47.853 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48122 10 6452 1 2025-10-18 22:02:44.340 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 22:06:37.351 00:00:10.371 TCP 23.104.0.1:48084 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:02:44.342 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 22:06:48.096 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55484 11 6492 1 2025-10-18 22:07:37.764 00:00:10.446 TCP 23.104.0.1:57858 -> 1.101.0.1:3000 15 1926 1 2025-10-18 22:07:48.271 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:47936 12 10375 1 2025-10-18 22:08:38.249 00:00:10.366 TCP 23.104.0.1:38626 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:08:48.474 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39060 10 6452 1 2025-10-18 22:09:35.157 00:00:00.012 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 22:09:35.172 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 22:09:38.661 00:00:10.367 TCP 23.104.0.1:50776 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:09:48.690 00:00:10.745 TCP 1.101.0.1:3000 -> 22.102.0.1:58612 10 6452 1 2025-10-18 22:10:39.090 00:00:10.365 TCP 23.104.0.1:45462 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:10:49.472 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49030 10 6452 1 2025-10-18 22:11:39.496 00:00:10.371 TCP 23.104.0.1:44736 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:11:49.685 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54292 10 6452 1 2025-10-18 22:08:44.343 00:05:02.569 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 22:12:39.913 00:00:10.365 TCP 23.104.0.1:44456 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:08:44.346 00:05:02.563 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 22:12:49.897 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:44304 10 6452 1 2025-10-18 22:13:40.314 00:00:10.326 TCP 23.104.0.1:43138 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:13:50.084 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47180 10 6452 1 2025-10-18 22:14:34.978 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 22:14:35.354 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 22:14:40.675 00:00:10.327 TCP 23.104.0.1:47134 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:14:50.297 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44216 10 6452 1 2025-10-18 22:15:41.056 00:00:10.369 TCP 23.104.0.1:44408 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:15:50.509 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36924 10 6452 1 2025-10-18 22:16:41.461 00:00:10.360 TCP 23.104.0.1:47130 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:16:50.734 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43686 10 6452 1 2025-10-18 22:17:41.861 00:00:10.367 TCP 23.104.0.1:46450 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:17:50.954 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43448 10 6452 1 2025-10-18 22:14:44.346 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 22:14:44.344 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 22:18:42.267 00:00:10.362 TCP 23.104.0.1:57814 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:18:51.186 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42440 10 6452 1 2025-10-18 22:19:35.811 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 22:19:35.577 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 22:19:42.670 00:00:10.319 TCP 23.104.0.1:50140 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:19:51.404 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43420 10 6452 1 2025-10-18 22:20:43.028 00:00:10.367 TCP 23.104.0.1:45844 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:20:51.620 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:53732 10 6452 1 2025-10-18 22:21:43.436 00:00:10.328 TCP 23.104.0.1:45574 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:21:51.848 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45462 10 6452 1 2025-10-18 22:22:43.805 00:00:10.413 TCP 23.104.0.1:40938 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:22:52.082 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35964 10 6452 1 2025-10-18 22:23:44.268 00:00:10.366 TCP 23.104.0.1:40108 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:23:52.296 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:39670 10 6452 1 2025-10-18 22:24:35.511 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 22:24:35.334 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 22:20:44.345 00:05:02.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 22:20:44.347 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 22:24:44.675 00:00:10.330 TCP 23.104.0.1:38090 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:24:52.475 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53674 12 6556 1 2025-10-18 22:25:45.062 00:00:11.022 TCP 23.104.0.1:58442 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:25:52.696 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54352 10 6452 1 2025-10-18 22:26:46.137 00:00:10.378 TCP 23.104.0.1:58804 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:26:52.910 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:49168 10 6452 1 2025-10-18 22:27:46.550 00:00:10.366 TCP 23.104.0.1:35342 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:27:53.136 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55816 10 6452 1 2025-10-18 22:28:46.955 00:00:10.332 TCP 23.104.0.1:59716 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:28:53.351 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57658 10 6452 1 2025-10-18 22:29:35.679 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 22:29:35.663 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 22:29:47.321 00:00:10.363 TCP 23.104.0.1:49624 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:29:53.570 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39142 10 6452 1 2025-10-18 22:26:44.347 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 22:26:44.349 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 22:30:47.716 00:00:10.375 TCP 23.104.0.1:43098 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:30:53.786 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48398 10 6452 1 2025-10-18 22:31:48.131 00:00:10.369 TCP 23.104.0.1:54422 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:31:54.016 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36042 10 6452 1 2025-10-18 22:32:48.535 00:00:10.371 TCP 23.104.0.1:55412 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:32:54.250 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54372 10 6452 1 2025-10-18 22:33:48.939 00:00:10.374 TCP 23.104.0.1:54128 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:33:54.460 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55304 10 6452 1 2025-10-18 22:34:35.687 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 22:34:35.820 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 22:34:49.348 00:00:10.366 TCP 23.104.0.1:49238 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:34:54.636 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:59594 10 6452 1 2025-10-18 22:35:49.750 00:00:10.363 TCP 23.104.0.1:38212 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:35:54.826 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35850 10 6452 1 2025-10-18 22:32:44.351 00:05:02.568 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 22:32:44.350 00:05:02.573 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 22:36:50.151 00:00:10.363 TCP 23.104.0.1:57212 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:36:55.060 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43322 10 6452 1 2025-10-18 22:37:50.556 00:00:10.327 TCP 23.104.0.1:35610 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:37:55.276 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48392 10 6452 1 2025-10-18 22:38:50.924 00:00:10.379 TCP 23.104.0.1:33490 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:38:55.484 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53206 10 6452 1 2025-10-18 22:39:35.673 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 22:39:35.739 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 22:39:51.338 00:00:10.380 TCP 23.104.0.1:54026 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:39:55.713 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54602 10 6452 1 2025-10-18 22:40:51.767 00:00:10.334 TCP 23.104.0.1:35480 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:40:55.926 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:60912 10 6452 1 2025-10-18 22:41:52.140 00:00:10.367 TCP 23.104.0.1:42648 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:41:56.124 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38494 10 6452 1 2025-10-18 22:38:44.352 00:05:02.565 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 22:38:44.350 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 22:42:56.301 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55018 10 6452 1 2025-10-18 22:42:52.545 00:00:10.368 TCP 23.104.0.1:60654 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:43:52.948 00:00:10.341 TCP 23.104.0.1:59464 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:43:56.538 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:58688 10 6452 1 2025-10-18 22:44:35.792 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 22:44:35.950 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 22:44:53.331 00:00:10.367 TCP 23.104.0.1:37774 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:44:56.787 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53112 10 6452 1 2025-10-18 22:45:53.737 00:00:10.373 TCP 23.104.0.1:43588 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:45:56.965 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:47718 10 6452 1 2025-10-18 22:46:54.147 00:00:10.367 TCP 23.104.0.1:49684 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:46:57.219 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34482 10 6452 1 2025-10-18 22:47:54.556 00:00:10.366 TCP 23.104.0.1:49928 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:47:57.431 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57728 10 6452 1 2025-10-18 22:44:44.354 00:05:02.564 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 22:44:44.350 00:05:02.570 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 22:48:54.959 00:00:10.375 TCP 23.104.0.1:40216 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:48:57.640 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44010 10 6452 1 2025-10-18 22:49:36.026 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 22:49:35.760 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 22:49:55.374 00:00:10.360 TCP 23.104.0.1:34342 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:49:57.854 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50932 10 6452 1 2025-10-18 22:50:55.774 00:00:10.370 TCP 23.104.0.1:40390 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:50:58.081 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42356 10 6452 1 2025-10-18 22:51:56.182 00:00:10.365 TCP 23.104.0.1:55658 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:51:58.296 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33452 10 6452 1 2025-10-18 22:52:56.583 00:00:10.371 TCP 23.104.0.1:33882 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:52:58.515 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:57806 10 6452 1 2025-10-18 22:53:56.989 00:00:10.368 TCP 23.104.0.1:34190 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:53:58.738 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60116 10 6452 1 2025-10-18 22:54:36.672 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-18 22:54:36.892 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-18 22:50:44.355 00:05:02.566 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-18 22:50:44.353 00:05:02.571 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-18 22:54:58.957 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:55966 10 6452 1 2025-10-18 22:54:57.391 00:00:10.363 TCP 23.104.0.1:57450 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:55:57.796 00:00:10.355 TCP 23.104.0.1:49438 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:55:59.154 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56984 10 6452 1 2025-10-18 22:56:58.183 00:00:10.326 TCP 23.104.0.1:49654 -> 1.101.0.1:3000 11 1507 1 2025-10-18 22:56:59.365 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:57224 10 6452 1 2025-10-18 22:57:59.585 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50456 10 6452 1 2025-10-18 22:57:58.542 00:00:10.363 TCP 23.104.0.1:33088 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 505669, total packets: 1576, avg bps: 1097, avg pps: 0, avg bpp: 320 Time window: 2025-10-18 21:56:44 - 2025-10-18 22:58:09 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0029s User: 0.0019s Wall: 0.0018s flows/second: 89956.8 Runtime: 0.0018s