Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-22 22:58:57.124 00:00:10.325 TCP 23.104.0.1:60988 -> 1.101.0.1:3000 11 1507 1 2025-10-22 22:59:11.110 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44724 10 6452 1 2025-10-22 22:55:46.099 00:05:02.895 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 22:59:57.488 00:00:10.367 TCP 23.104.0.1:52254 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:00:11.321 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48680 10 6452 1 2025-10-22 22:56:46.096 00:05:02.900 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 23:00:57.897 00:00:10.369 TCP 23.104.0.1:34242 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:01:11.553 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39070 10 6452 1 2025-10-22 23:01:31.772 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 23:01:31.878 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 23:01:58.304 00:00:10.914 TCP 23.104.0.1:53418 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:02:11.769 00:00:21.883 TCP 1.101.0.1:3000 -> 22.102.0.1:38148 10 6452 1 2025-10-22 23:02:59.248 00:00:10.415 TCP 23.104.0.1:59394 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:03:23.701 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35630 10 6452 1 2025-10-22 23:03:59.705 00:00:10.360 TCP 23.104.0.1:35692 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:04:23.920 00:00:10.216 TCP 1.101.0.1:3000 -> 22.102.0.1:50510 10 6452 1 2025-10-22 23:05:00.110 00:00:10.367 TCP 23.104.0.1:37346 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:05:24.170 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42530 10 6452 1 2025-10-22 23:01:46.101 00:05:02.898 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 23:06:00.523 00:00:10.363 TCP 23.104.0.1:50130 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:06:32.163 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 23:06:24.383 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53648 10 6452 1 2025-10-22 23:06:32.002 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 23:02:46.099 00:05:02.903 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 23:07:00.928 00:00:10.398 TCP 23.104.0.1:42032 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:07:24.594 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57918 10 6452 1 2025-10-22 23:08:01.360 00:00:10.364 TCP 23.104.0.1:55258 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:08:24.818 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:40400 10 6452 1 2025-10-22 23:09:01.765 00:00:10.380 TCP 23.104.0.1:59812 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:09:24.989 00:00:10.827 TCP 1.101.0.1:3000 -> 22.102.0.1:46208 10 6452 1 2025-10-22 23:10:02.191 00:00:10.360 TCP 23.104.0.1:59748 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:10:25.854 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41752 10 6452 1 2025-10-22 23:11:02.602 00:00:10.366 TCP 23.104.0.1:40086 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:11:31.668 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 23:11:31.889 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 23:11:26.079 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51256 10 6452 1 2025-10-22 23:07:46.101 00:05:02.929 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 23:12:03.009 00:00:10.776 TCP 23.104.0.1:35890 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:12:26.304 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36080 10 6452 1 2025-10-22 23:08:46.099 00:05:02.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 23:13:03.821 00:00:10.325 TCP 23.104.0.1:49400 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:13:26.514 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41912 10 6452 1 2025-10-22 23:14:04.182 00:00:10.361 TCP 23.104.0.1:36878 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:14:26.727 00:00:10.440 TCP 1.101.0.1:3000 -> 22.102.0.1:41168 10 6452 1 2025-10-22 23:15:04.585 00:00:10.373 TCP 23.104.0.1:45208 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:15:27.206 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:48268 10 6452 1 2025-10-22 23:16:04.995 00:00:10.361 TCP 23.104.0.1:53076 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:16:32.099 00:00:00.040 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 23:16:32.180 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 23:16:27.433 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:59174 10 6452 1 2025-10-22 23:17:05.389 00:00:10.378 TCP 23.104.0.1:44798 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:17:27.625 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35336 10 6452 1 2025-10-22 23:13:46.102 00:05:02.932 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 23:18:05.802 00:00:10.366 TCP 23.104.0.1:45844 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:18:27.800 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:32866 10 6452 1 2025-10-22 23:14:46.100 00:05:02.937 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 23:19:06.209 00:00:10.332 TCP 23.104.0.1:43550 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:19:28.031 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36928 10 6452 1 2025-10-22 23:20:06.573 00:00:10.580 TCP 23.104.0.1:35520 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:20:28.252 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41324 10 6452 1 2025-10-22 23:21:07.189 00:00:10.363 TCP 23.104.0.1:45372 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:21:32.326 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 23:21:32.273 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 23:21:28.475 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37406 10 6452 1 2025-10-22 23:22:07.591 00:00:10.372 TCP 23.104.0.1:54602 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:22:28.692 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:41656 10 6452 1 2025-10-22 23:23:08.003 00:00:10.365 TCP 23.104.0.1:55472 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:23:28.916 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53626 10 6452 1 2025-10-22 23:19:46.103 00:05:02.933 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 23:24:08.405 00:00:10.442 TCP 23.104.0.1:34916 -> 1.101.0.1:3000 15 1926 1 2025-10-22 23:24:29.127 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:47980 12 10375 1 2025-10-22 23:20:46.101 00:05:02.938 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 23:25:08.888 00:00:10.337 TCP 23.104.0.1:56840 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:25:29.381 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36914 10 6452 1 2025-10-22 23:26:09.261 00:00:10.509 TCP 23.104.0.1:47176 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:26:32.216 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 23:26:32.357 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 23:26:29.599 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50718 10 6452 1 2025-10-22 23:27:09.808 00:00:10.332 TCP 23.104.0.1:56228 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:27:29.825 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52180 10 6452 1 2025-10-22 23:28:10.180 00:00:10.364 TCP 23.104.0.1:49106 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:28:30.075 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44410 10 6452 1 2025-10-22 23:29:10.580 00:00:10.487 TCP 23.104.0.1:40120 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:29:30.292 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54308 10 6452 1 2025-10-22 23:25:46.103 00:05:02.935 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 23:30:11.104 00:00:10.366 TCP 23.104.0.1:58450 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:30:30.465 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45580 10 6452 1 2025-10-22 23:26:46.101 00:05:02.939 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 23:31:11.506 00:00:10.364 TCP 23.104.0.1:50910 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:31:32.538 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 23:31:32.549 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 23:31:30.671 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57220 10 6452 1 2025-10-22 23:32:11.909 00:00:10.370 TCP 23.104.0.1:53718 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:32:30.885 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:34550 10 6452 1 2025-10-22 23:33:12.319 00:00:10.362 TCP 23.104.0.1:40698 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:33:31.111 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40458 10 6452 1 2025-10-22 23:34:12.716 00:00:10.373 TCP 23.104.0.1:57798 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:34:31.320 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60132 10 6452 1 2025-10-22 23:35:13.135 00:00:10.380 TCP 23.104.0.1:47608 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:35:31.543 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:40348 10 6452 1 2025-10-22 23:31:46.105 00:05:02.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 23:36:13.560 00:00:10.364 TCP 23.104.0.1:58952 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:36:32.656 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 23:36:32.505 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 23:36:31.764 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56060 10 6452 1 2025-10-22 23:32:46.102 00:05:02.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 23:37:13.962 00:00:10.323 TCP 23.104.0.1:37710 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:37:31.977 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39688 10 6452 1 2025-10-22 23:38:14.334 00:00:10.365 TCP 23.104.0.1:45530 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:38:32.212 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49922 10 6452 1 2025-10-22 23:39:14.739 00:00:10.444 TCP 23.104.0.1:37440 -> 1.101.0.1:3000 15 1926 1 2025-10-22 23:39:32.381 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:42314 12 10369 1 2025-10-22 23:40:15.219 00:00:18.147 TCP 23.104.0.1:41530 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:40:32.627 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57078 10 6452 1 2025-10-22 23:41:23.407 00:00:10.323 TCP 23.104.0.1:58400 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:41:32.456 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 23:41:32.806 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 23:41:32.853 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33744 10 6452 1 2025-10-22 23:37:46.105 00:05:02.937 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 23:42:23.772 00:00:10.369 TCP 23.104.0.1:49892 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:42:33.085 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33042 10 6452 1 2025-10-22 23:38:46.104 00:05:02.942 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 23:43:24.182 00:00:10.357 TCP 23.104.0.1:40116 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:43:33.301 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50876 10 6452 1 2025-10-22 23:44:24.578 00:00:10.365 TCP 23.104.0.1:39312 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:44:33.510 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51754 10 6452 1 2025-10-22 23:45:24.981 00:00:10.373 TCP 23.104.0.1:34674 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:45:33.721 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57688 10 6452 1 2025-10-22 23:46:32.499 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 23:46:25.391 00:00:10.368 TCP 23.104.0.1:53048 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:46:32.826 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 23:46:33.892 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:40748 10 6452 1 2025-10-22 23:47:25.800 00:00:10.375 TCP 23.104.0.1:60226 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:47:34.091 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36764 10 6452 1 2025-10-22 23:43:46.109 00:05:02.939 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 23:48:26.211 00:00:10.363 TCP 23.104.0.1:44922 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:48:34.311 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41786 10 6452 1 2025-10-22 23:44:46.106 00:05:02.943 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 23:49:26.617 00:00:10.360 TCP 23.104.0.1:46486 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:49:34.527 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45640 10 6452 1 2025-10-22 23:50:27.018 00:00:10.797 TCP 23.104.0.1:58330 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:50:34.740 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36546 10 6452 1 2025-10-22 23:51:32.834 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 23:51:32.657 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 23:51:27.849 00:00:10.386 TCP 23.104.0.1:39344 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:51:34.911 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38464 10 6452 1 2025-10-22 23:52:28.267 00:00:10.362 TCP 23.104.0.1:50380 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:52:35.124 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48078 10 6452 1 2025-10-22 23:53:28.670 00:00:10.331 TCP 23.104.0.1:37044 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:49:46.109 00:05:02.941 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-22 23:53:35.344 00:00:18.853 TCP 1.101.0.1:3000 -> 22.102.0.1:45352 10 6452 1 2025-10-22 23:54:29.036 00:00:10.370 TCP 23.104.0.1:57820 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:50:46.106 00:05:02.946 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-22 23:54:44.271 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53868 10 6452 1 2025-10-22 23:55:29.440 00:00:10.365 TCP 23.104.0.1:51452 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:55:44.489 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33182 10 6452 1 2025-10-22 23:56:32.859 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-22 23:56:32.662 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-22 23:56:29.841 00:00:10.389 TCP 23.104.0.1:33610 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:56:44.697 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58232 10 6452 1 2025-10-22 23:57:30.267 00:00:10.367 TCP 23.104.0.1:52834 -> 1.101.0.1:3000 11 1507 1 2025-10-22 23:57:44.909 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38098 12 6556 1 2025-10-22 23:58:30.675 00:00:10.339 TCP 23.104.0.1:59510 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500678, total packets: 1576, avg bps: 1061, avg pps: 0, avg bpp: 317 Time window: 2025-10-22 22:55:46 - 2025-10-22 23:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0031s Wall: 0.0033s flows/second: 48743.2 Runtime: 0.0034s