Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-19 21:58:45.974 00:00:10.367 TCP 23.104.0.1:58844 -> 1.101.0.1:3000 11 1507 1 2025-10-19 21:59:19.385 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:33802 10 6452 1 2025-10-19 21:59:46.379 00:00:10.370 TCP 23.104.0.1:53904 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:00:03.941 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 22:00:03.899 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 22:00:19.609 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38362 10 6452 1 2025-10-19 21:56:44.765 00:05:02.644 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 21:56:44.762 00:05:02.649 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 22:00:46.786 00:00:10.326 TCP 23.104.0.1:40742 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:01:19.846 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55650 10 6452 1 2025-10-19 22:01:47.146 00:00:10.364 TCP 23.104.0.1:42836 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:02:20.086 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57976 10 6452 1 2025-10-19 22:02:47.548 00:00:10.362 TCP 23.104.0.1:34084 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:03:20.300 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:35608 10 6452 1 2025-10-19 22:03:47.947 00:00:10.374 TCP 23.104.0.1:41896 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:04:20.490 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59830 10 6452 1 2025-10-19 22:04:48.358 00:00:10.365 TCP 23.104.0.1:32986 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:05:03.744 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 22:05:04.297 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 22:05:20.705 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33776 10 6452 1 2025-10-19 22:05:48.761 00:00:10.371 TCP 23.104.0.1:39406 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:06:20.919 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51186 10 6452 1 2025-10-19 22:02:44.767 00:05:02.645 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 22:02:44.764 00:05:02.651 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 22:06:49.167 00:00:10.325 TCP 23.104.0.1:57800 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:07:21.131 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38688 10 6452 1 2025-10-19 22:07:49.532 00:00:10.377 TCP 23.104.0.1:34370 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:08:21.344 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56264 10 6452 1 2025-10-19 22:08:49.945 00:00:10.367 TCP 23.104.0.1:60814 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:09:21.553 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36734 10 6452 1 2025-10-19 22:09:50.350 00:00:10.365 TCP 23.104.0.1:45778 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:10:04.382 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 22:10:04.279 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 22:10:21.775 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49408 12 6556 1 2025-10-19 22:10:50.754 00:00:10.339 TCP 23.104.0.1:41794 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:11:21.992 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:50296 10 6452 1 2025-10-19 22:11:51.126 00:00:10.363 TCP 23.104.0.1:37930 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:12:22.234 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55426 10 6452 1 2025-10-19 22:08:44.764 00:05:02.651 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 22:08:44.766 00:05:02.646 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 22:12:51.527 00:00:10.373 TCP 23.104.0.1:56672 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:13:22.409 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47242 10 6452 1 2025-10-19 22:13:51.935 00:00:10.379 TCP 23.104.0.1:34474 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:14:22.624 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48528 10 6452 1 2025-10-19 22:14:52.352 00:00:10.364 TCP 23.104.0.1:57270 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:15:04.175 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 22:15:04.201 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 22:15:22.842 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:59008 10 6452 1 2025-10-19 22:15:52.753 00:00:10.336 TCP 23.104.0.1:49192 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:16:23.076 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55904 10 6452 1 2025-10-19 22:16:53.127 00:00:10.359 TCP 23.104.0.1:41690 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:17:23.298 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:36050 10 6452 1 2025-10-19 22:17:53.527 00:00:10.334 TCP 23.104.0.1:60392 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:18:23.539 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55126 10 6452 1 2025-10-19 22:14:44.767 00:05:02.650 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 22:14:44.770 00:05:02.645 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 22:18:53.926 00:00:10.640 TCP 23.104.0.1:57994 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:19:23.750 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33468 10 6452 1 2025-10-19 22:20:04.509 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 22:19:54.610 00:00:10.414 TCP 23.104.0.1:46844 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:20:04.384 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 22:20:23.965 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54850 10 6452 1 2025-10-19 22:20:55.093 00:00:10.365 TCP 23.104.0.1:41406 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:21:24.195 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52206 10 6452 1 2025-10-19 22:21:55.499 00:00:10.367 TCP 23.104.0.1:34322 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:22:24.413 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47884 10 6452 1 2025-10-19 22:22:55.902 00:00:10.367 TCP 23.104.0.1:51362 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:23:24.624 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57942 10 6452 1 2025-10-19 22:23:56.311 00:00:10.325 TCP 23.104.0.1:43488 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:24:24.840 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:44330 10 6452 1 2025-10-19 22:20:44.768 00:05:02.653 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 22:20:44.771 00:05:02.648 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 22:25:03.775 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 22:25:03.751 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 22:24:56.673 00:00:10.376 TCP 23.104.0.1:42278 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:25:25.078 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:39808 10 6452 1 2025-10-19 22:25:57.104 00:00:10.367 TCP 23.104.0.1:44064 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:26:25.263 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35568 10 6452 1 2025-10-19 22:26:57.506 00:00:10.366 TCP 23.104.0.1:60654 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:27:25.477 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39058 10 6452 1 2025-10-19 22:27:57.911 00:00:10.366 TCP 23.104.0.1:57418 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:28:25.685 00:00:10.406 TCP 1.101.0.1:3000 -> 22.102.0.1:58972 10 6452 1 2025-10-19 22:28:58.311 00:00:10.361 TCP 23.104.0.1:40156 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:29:26.131 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:52310 10 6452 1 2025-10-19 22:30:04.536 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 22:30:04.677 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 22:29:58.714 00:00:10.320 TCP 23.104.0.1:39558 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:30:26.314 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49372 10 6452 1 2025-10-19 22:26:44.775 00:05:02.646 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 22:26:44.774 00:05:02.651 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 22:30:59.101 00:00:10.362 TCP 23.104.0.1:49200 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:31:26.550 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53846 10 6452 1 2025-10-19 22:31:59.502 00:00:10.328 TCP 23.104.0.1:55158 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:32:26.771 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54092 10 6452 1 2025-10-19 22:32:59.866 00:00:10.383 TCP 23.104.0.1:45390 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:33:26.998 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60792 10 6452 1 2025-10-19 22:34:00.285 00:00:10.368 TCP 23.104.0.1:47972 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:34:27.227 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56532 10 6452 1 2025-10-19 22:35:04.917 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 22:35:04.980 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 22:35:00.689 00:00:10.373 TCP 23.104.0.1:53944 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:35:27.451 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37098 10 6452 1 2025-10-19 22:36:01.128 00:00:10.339 TCP 23.104.0.1:45134 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:36:27.667 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36114 10 6452 1 2025-10-19 22:32:44.774 00:05:02.650 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 22:32:44.777 00:05:02.645 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 22:37:01.502 00:00:10.365 TCP 23.104.0.1:54800 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:37:27.884 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:35506 10 6452 1 2025-10-19 22:38:01.908 00:00:10.450 TCP 23.104.0.1:54846 -> 1.101.0.1:3000 15 1926 1 2025-10-19 22:38:28.115 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:45138 12 10375 1 2025-10-19 22:39:02.391 00:00:10.363 TCP 23.104.0.1:44222 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:39:28.365 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52722 10 6452 1 2025-10-19 22:40:04.646 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 22:40:04.575 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 22:40:02.793 00:00:10.356 TCP 23.104.0.1:58844 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:40:28.535 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39100 10 6452 1 2025-10-19 22:41:03.183 00:00:10.365 TCP 23.104.0.1:55364 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:41:28.754 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42966 10 6452 1 2025-10-19 22:42:03.586 00:00:10.370 TCP 23.104.0.1:51832 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:42:28.976 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:46786 10 6452 1 2025-10-19 22:38:44.777 00:05:02.650 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 22:38:44.779 00:05:02.645 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 22:43:03.992 00:00:10.369 TCP 23.104.0.1:43068 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:43:29.158 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:41108 10 6452 1 2025-10-19 22:44:04.400 00:00:10.432 TCP 23.104.0.1:40914 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:44:29.384 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51896 10 6452 1 2025-10-19 22:45:04.683 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 22:45:04.639 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 22:45:04.871 00:00:10.366 TCP 23.104.0.1:33498 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:45:29.604 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42202 10 6452 1 2025-10-19 22:46:05.276 00:00:10.365 TCP 23.104.0.1:56734 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:46:29.812 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39886 10 6452 1 2025-10-19 22:47:05.680 00:00:10.330 TCP 23.104.0.1:39420 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:47:30.036 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40300 10 6452 1 2025-10-19 22:48:06.065 00:00:10.368 TCP 23.104.0.1:58488 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:48:30.205 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55542 10 6452 1 2025-10-19 22:44:44.781 00:05:02.647 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 22:44:44.782 00:05:02.643 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 22:49:06.465 00:00:10.369 TCP 23.104.0.1:39856 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:49:30.419 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44122 10 6452 1 2025-10-19 22:50:04.906 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 22:50:04.880 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 22:50:06.877 00:00:10.356 TCP 23.104.0.1:46354 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:50:30.589 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53884 10 6452 1 2025-10-19 22:51:07.271 00:00:10.362 TCP 23.104.0.1:44364 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:51:30.801 00:00:10.945 TCP 1.101.0.1:3000 -> 22.102.0.1:42426 10 6452 1 2025-10-19 22:52:07.670 00:00:10.394 TCP 23.104.0.1:36896 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:52:31.786 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58330 10 6452 1 2025-10-19 22:53:08.110 00:00:10.374 TCP 23.104.0.1:44842 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:53:32.003 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41500 10 6452 1 2025-10-19 22:54:08.518 00:00:10.321 TCP 23.104.0.1:56100 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:54:32.177 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48364 10 6452 1 2025-10-19 22:50:44.789 00:05:02.642 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-19 22:50:44.785 00:05:02.648 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-19 22:55:04.673 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-19 22:55:05.013 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-19 22:55:08.876 00:00:10.395 TCP 23.104.0.1:46202 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:55:32.397 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43188 10 6452 1 2025-10-19 22:56:09.318 00:00:10.370 TCP 23.104.0.1:43240 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:56:32.612 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40512 10 6452 1 2025-10-19 22:57:09.726 00:00:10.363 TCP 23.104.0.1:40256 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:57:32.826 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58032 10 6452 1 2025-10-19 22:58:10.128 00:00:10.365 TCP 23.104.0.1:46120 -> 1.101.0.1:3000 11 1507 1 2025-10-19 22:58:33.072 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42376 10 6452 1 Summary: total flows: 164, total bytes: 502794, total packets: 1580, avg bps: 1081, avg pps: 0, avg bpp: 318 Time window: 2025-10-19 21:56:44 - 2025-10-19 22:58:43 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0027s Wall: 0.0024s flows/second: 68738.5 Runtime: 0.0024s