Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 20:59:05.601 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36146 10 6452 1 2025-10-19 20:59:20.134 00:00:10.378 TCP 23.104.0.1:49268 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:00:02.714 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 21:00:02.903 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 21:00:05.815 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55468 10 6452 1 2025-10-19 21:00:20.550 00:00:10.322 TCP 23.104.0.1:49538 -> 1.101.0.1:3000 11 1507 1 2025-10-19 20:56:44.749 00:05:02.646 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 20:56:44.746 00:05:02.651 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 21:01:05.993 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:40678 10 6452 1 2025-10-19 21:01:20.912 00:00:10.370 TCP 23.104.0.1:49124 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:02:06.174 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36952 10 6452 1 2025-10-19 21:02:21.318 00:00:10.367 TCP 23.104.0.1:44522 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:03:06.385 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44084 10 6452 1 2025-10-19 21:03:21.722 00:00:10.374 TCP 23.104.0.1:39178 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:04:06.595 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50180 10 6452 1 2025-10-19 21:04:22.137 00:00:10.367 TCP 23.104.0.1:54664 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:05:02.913 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 21:05:02.777 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 21:05:06.809 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50918 10 6452 1 2025-10-19 21:05:22.546 00:00:10.365 TCP 23.104.0.1:39262 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:06:07.029 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59596 10 6452 1 2025-10-19 21:06:22.950 00:00:10.369 TCP 23.104.0.1:56618 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:02:44.748 00:05:02.652 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 21:02:44.750 00:05:02.647 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 21:07:07.204 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33620 10 6452 1 2025-10-19 21:07:23.360 00:00:10.362 TCP 23.104.0.1:34514 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:08:07.424 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41254 10 6452 1 2025-10-19 21:08:23.759 00:00:10.325 TCP 23.104.0.1:51566 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:09:07.638 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44888 10 6452 1 2025-10-19 21:09:24.122 00:00:10.366 TCP 23.104.0.1:36370 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:10:03.026 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 21:10:02.985 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 21:10:07.852 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49226 10 6452 1 2025-10-19 21:10:24.529 00:00:10.366 TCP 23.104.0.1:43660 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:11:08.080 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48740 10 6452 1 2025-10-19 21:11:24.934 00:00:10.382 TCP 23.104.0.1:58842 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:12:08.261 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40342 10 6452 1 2025-10-19 21:12:25.347 00:00:10.367 TCP 23.104.0.1:50714 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:08:44.749 00:05:02.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 21:08:44.752 00:05:02.648 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 21:13:08.476 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54048 10 6452 1 2025-10-19 21:13:25.752 00:00:10.392 TCP 23.104.0.1:42160 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:14:08.645 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36938 10 6452 1 2025-10-19 21:14:26.183 00:00:10.366 TCP 23.104.0.1:39616 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:15:03.044 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 21:15:03.021 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 21:15:08.863 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:36534 10 6452 1 2025-10-19 21:15:26.589 00:00:10.367 TCP 23.104.0.1:39906 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:16:09.111 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59644 10 6452 1 2025-10-19 21:16:26.990 00:00:10.366 TCP 23.104.0.1:36708 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:17:09.322 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:53444 10 6452 1 2025-10-19 21:17:27.394 00:00:10.367 TCP 23.104.0.1:53110 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:18:09.566 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:45576 10 6452 1 2025-10-19 21:18:27.798 00:00:10.367 TCP 23.104.0.1:50646 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:14:44.752 00:05:02.650 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 21:14:44.749 00:05:02.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 21:19:09.753 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:59456 10 6452 1 2025-10-19 21:19:28.213 00:00:10.373 TCP 23.104.0.1:49104 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:20:03.025 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 21:20:03.143 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 21:20:09.932 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:34094 10 6452 1 2025-10-19 21:20:28.634 00:00:10.324 TCP 23.104.0.1:48682 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:21:10.123 00:00:10.567 TCP 1.101.0.1:3000 -> 22.102.0.1:40580 10 6452 1 2025-10-19 21:21:28.995 00:00:12.352 TCP 23.104.0.1:36436 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:22:10.730 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47064 10 6452 1 2025-10-19 21:22:31.397 00:00:10.354 TCP 23.104.0.1:50114 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:23:10.951 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:47386 12 6556 1 2025-10-19 21:23:31.790 00:00:10.368 TCP 23.104.0.1:39528 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:24:11.175 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:39904 10 6452 1 2025-10-19 21:24:32.197 00:00:10.375 TCP 23.104.0.1:37012 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:20:44.752 00:05:02.651 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 21:20:44.751 00:05:02.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 21:25:03.292 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 21:25:03.328 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 21:25:11.398 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47276 10 6452 1 2025-10-19 21:25:32.607 00:00:10.366 TCP 23.104.0.1:60452 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:26:11.624 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57848 10 6452 1 2025-10-19 21:26:33.014 00:00:10.364 TCP 23.104.0.1:36656 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:27:11.863 00:00:10.219 TCP 1.101.0.1:3000 -> 22.102.0.1:35378 10 6452 1 2025-10-19 21:27:33.412 00:00:10.366 TCP 23.104.0.1:51230 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:28:12.131 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34764 10 6452 1 2025-10-19 21:28:33.816 00:00:10.364 TCP 23.104.0.1:35370 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:29:12.343 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53932 10 6452 1 2025-10-19 21:29:34.220 00:00:10.367 TCP 23.104.0.1:48658 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:30:03.372 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 21:30:03.308 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 21:30:12.548 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42400 10 6452 1 2025-10-19 21:30:34.626 00:00:10.364 TCP 23.104.0.1:42612 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:26:44.756 00:05:02.649 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 21:26:44.753 00:05:02.654 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 21:31:12.773 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50782 10 6452 1 2025-10-19 21:31:35.030 00:00:10.374 TCP 23.104.0.1:60618 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:32:12.985 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:53862 10 6452 1 2025-10-19 21:32:35.448 00:00:10.363 TCP 23.104.0.1:38630 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:33:13.212 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:55526 10 6452 1 2025-10-19 21:33:35.849 00:00:10.386 TCP 23.104.0.1:37690 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:34:13.386 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56136 10 6452 1 2025-10-19 21:34:36.272 00:00:10.368 TCP 23.104.0.1:41056 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:35:03.399 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 21:35:04.173 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 21:35:13.557 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54440 10 6452 1 2025-10-19 21:35:36.681 00:00:10.325 TCP 23.104.0.1:33628 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:36:13.768 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50400 10 6452 1 2025-10-19 21:32:44.753 00:05:02.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 21:32:44.756 00:05:02.650 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 21:36:37.062 00:00:10.324 TCP 23.104.0.1:49638 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:37:13.943 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:35284 10 6452 1 2025-10-19 21:37:37.432 00:00:10.343 TCP 23.104.0.1:46764 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:38:14.174 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55060 10 6452 1 2025-10-19 21:38:37.821 00:00:10.366 TCP 23.104.0.1:33718 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:39:14.390 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60464 10 6452 1 2025-10-19 21:39:38.226 00:00:10.361 TCP 23.104.0.1:35308 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:40:04.349 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 21:40:04.476 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 21:40:14.601 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41448 10 6452 1 2025-10-19 21:40:38.624 00:00:10.368 TCP 23.104.0.1:43710 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:41:14.810 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54742 10 6452 1 2025-10-19 21:41:39.030 00:00:10.366 TCP 23.104.0.1:50504 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:42:15.030 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56114 10 6452 1 2025-10-19 21:38:44.757 00:05:02.650 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 21:42:39.434 00:00:10.364 TCP 23.104.0.1:44492 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:38:44.755 00:05:02.655 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 21:43:15.259 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:39140 12 10369 1 2025-10-19 21:43:39.840 00:00:10.514 TCP 23.104.0.1:56306 -> 1.101.0.1:3000 15 1926 1 2025-10-19 21:44:15.516 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:39030 10 6452 1 2025-10-19 21:44:40.394 00:00:10.362 TCP 23.104.0.1:51112 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:45:03.389 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 21:45:03.776 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 21:45:15.696 00:00:10.862 TCP 1.101.0.1:3000 -> 22.102.0.1:51680 10 6452 1 2025-10-19 21:45:40.795 00:00:10.373 TCP 23.104.0.1:49168 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:46:16.595 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51020 10 6452 1 2025-10-19 21:46:41.209 00:00:10.365 TCP 23.104.0.1:39532 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:47:16.809 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:60968 10 6452 1 2025-10-19 21:47:41.614 00:00:10.364 TCP 23.104.0.1:52734 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:48:16.981 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:46812 10 6452 1 2025-10-19 21:44:44.760 00:05:02.647 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 21:44:44.757 00:05:02.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 21:48:42.017 00:00:10.325 TCP 23.104.0.1:38752 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:49:17.222 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59758 10 6452 1 2025-10-19 21:49:42.383 00:00:10.358 TCP 23.104.0.1:57864 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:50:03.779 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 21:50:03.758 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 21:50:17.438 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58136 10 6452 1 2025-10-19 21:50:42.792 00:00:10.333 TCP 23.104.0.1:35906 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:51:17.656 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48444 10 6452 1 2025-10-19 21:51:43.161 00:00:10.321 TCP 23.104.0.1:57780 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:52:17.834 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48844 10 6452 1 2025-10-19 21:52:43.522 00:00:10.367 TCP 23.104.0.1:46636 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:53:18.073 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55184 10 6452 1 2025-10-19 21:53:43.929 00:00:10.395 TCP 23.104.0.1:36856 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:54:18.281 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34518 10 6452 1 2025-10-19 21:50:44.760 00:05:02.649 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 21:50:44.757 00:05:02.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 21:54:44.379 00:00:10.368 TCP 23.104.0.1:52326 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:55:03.838 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 21:55:03.876 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 21:55:18.494 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51290 10 6452 1 2025-10-19 21:55:44.791 00:00:10.335 TCP 23.104.0.1:53186 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:56:18.708 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35472 10 6452 1 2025-10-19 21:56:45.164 00:00:10.368 TCP 23.104.0.1:46312 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:57:18.928 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:57342 10 6452 1 2025-10-19 21:57:45.572 00:00:10.366 TCP 23.104.0.1:42528 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:58:19.161 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58422 10 6452 1 Summary: total flows: 163, total bytes: 501281, total packets: 1569, avg bps: 1082, avg pps: 0, avg bpp: 319 Time window: 2025-10-19 20:56:44 - 2025-10-19 21:58:29 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0019s User: 0.0028s Wall: 0.0021s flows/second: 76782.5 Runtime: 0.0021s