Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-30 21:58:49.925 00:00:10.345 TCP 23.104.0.1:50280 -> 1.101.0.1:3000 11 1507 1 2025-10-30 21:59:15.973 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:38516 10 6452 1 2025-10-30 21:55:49.740 00:05:03.459 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 21:55:49.741 00:05:03.453 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 21:59:50.313 00:00:10.371 TCP 23.104.0.1:41930 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:00:21.987 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 22:00:21.717 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 22:00:16.175 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41536 10 6452 1 2025-10-30 22:00:50.716 00:00:10.322 TCP 23.104.0.1:55518 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:01:16.387 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55520 10 6452 1 2025-10-30 22:01:51.104 00:00:10.361 TCP 23.104.0.1:54212 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:02:16.603 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60706 10 6452 1 2025-10-30 22:02:51.505 00:00:10.365 TCP 23.104.0.1:60006 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:03:16.815 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:40896 12 10375 1 2025-10-30 22:03:51.915 00:00:10.437 TCP 23.104.0.1:46322 -> 1.101.0.1:3000 15 1926 1 2025-10-30 22:04:17.082 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60012 10 6452 1 2025-10-30 22:04:52.387 00:00:10.362 TCP 23.104.0.1:59340 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:05:21.965 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 22:05:22.005 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 22:05:17.289 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56776 10 6452 1 2025-10-30 22:01:49.744 00:05:03.453 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 22:01:49.742 00:05:03.458 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 22:05:52.788 00:00:10.365 TCP 23.104.0.1:37262 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:06:17.513 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45440 10 6452 1 2025-10-30 22:06:53.191 00:00:10.360 TCP 23.104.0.1:43626 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:07:17.730 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:60234 10 6452 1 2025-10-30 22:07:53.591 00:00:10.361 TCP 23.104.0.1:56682 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:08:17.938 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:57526 10 6452 1 2025-10-30 22:08:53.991 00:00:10.679 TCP 23.104.0.1:60714 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:09:18.165 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41488 10 6452 1 2025-10-30 22:09:54.707 00:00:10.366 TCP 23.104.0.1:52344 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:10:22.032 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 22:10:22.206 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 22:10:18.384 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51442 10 6452 1 2025-10-30 22:10:55.117 00:00:10.367 TCP 23.104.0.1:34322 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:11:18.602 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43854 10 6452 1 2025-10-30 22:07:49.744 00:05:03.457 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 22:07:49.748 00:05:03.452 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 22:11:55.527 00:00:10.361 TCP 23.104.0.1:59146 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:12:18.839 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52442 10 6452 1 2025-10-30 22:12:55.927 00:00:10.381 TCP 23.104.0.1:51598 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:13:19.028 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54892 10 6452 1 2025-10-30 22:13:56.347 00:00:10.358 TCP 23.104.0.1:44648 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:14:19.247 00:00:10.398 TCP 1.101.0.1:3000 -> 22.102.0.1:41934 10 6452 1 2025-10-30 22:14:56.746 00:00:10.364 TCP 23.104.0.1:53486 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:15:21.945 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 22:15:22.324 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 22:15:19.682 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48832 10 6452 1 2025-10-30 22:15:57.150 00:00:10.367 TCP 23.104.0.1:52764 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:16:19.905 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34152 10 6452 1 2025-10-30 22:16:57.560 00:00:10.367 TCP 23.104.0.1:38496 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:17:20.123 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47700 10 6452 1 2025-10-30 22:13:49.749 00:05:03.454 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 22:13:49.746 00:05:03.459 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 22:17:57.967 00:00:10.385 TCP 23.104.0.1:44672 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:18:20.346 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55514 10 6452 1 2025-10-30 22:18:58.392 00:00:10.372 TCP 23.104.0.1:46696 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:19:20.560 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48154 10 6452 1 2025-10-30 22:19:58.800 00:00:10.369 TCP 23.104.0.1:54502 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:20:22.072 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 22:20:22.354 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 22:20:20.778 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:43322 10 6452 1 2025-10-30 22:20:59.209 00:00:10.322 TCP 23.104.0.1:54534 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:21:20.952 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54484 10 6452 1 2025-10-30 22:21:59.569 00:00:10.365 TCP 23.104.0.1:53868 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:22:21.186 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39526 10 6452 1 2025-10-30 22:22:59.971 00:00:10.381 TCP 23.104.0.1:38862 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:23:21.397 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45888 10 6452 1 2025-10-30 22:19:49.746 00:05:03.459 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 22:19:49.748 00:05:03.454 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 22:24:00.389 00:00:10.364 TCP 23.104.0.1:50700 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:24:21.615 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59204 10 6452 1 2025-10-30 22:25:00.790 00:00:10.342 TCP 23.104.0.1:39692 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:25:22.311 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 22:25:22.592 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 22:25:21.832 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38630 10 6452 1 2025-10-30 22:26:01.168 00:00:10.365 TCP 23.104.0.1:35524 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:26:22.085 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40312 10 6452 1 2025-10-30 22:27:01.572 00:00:10.380 TCP 23.104.0.1:49910 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:27:22.298 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39120 10 6452 1 2025-10-30 22:28:01.990 00:00:10.368 TCP 23.104.0.1:51324 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:28:22.518 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41880 10 6452 1 2025-10-30 22:29:02.399 00:00:10.368 TCP 23.104.0.1:55222 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:29:22.728 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:42902 10 6452 1 2025-10-30 22:25:49.749 00:05:03.454 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 22:25:49.747 00:05:03.459 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 22:30:02.807 00:00:10.338 TCP 23.104.0.1:37956 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:30:23.595 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 22:30:23.387 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 22:30:22.912 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49186 10 6452 1 2025-10-30 22:31:03.185 00:00:10.367 TCP 23.104.0.1:42854 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:31:23.129 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35282 10 6452 1 2025-10-30 22:32:03.592 00:00:21.852 TCP 23.104.0.1:45476 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:32:23.307 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:60910 10 6452 1 2025-10-30 22:33:15.485 00:00:10.361 TCP 23.104.0.1:38028 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:33:23.604 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:44956 10 6452 1 2025-10-30 22:34:15.888 00:00:10.363 TCP 23.104.0.1:38136 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:34:23.828 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56842 10 6452 1 2025-10-30 22:35:22.644 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 22:35:16.290 00:00:10.364 TCP 23.104.0.1:36158 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:35:22.728 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 22:35:24.003 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57330 10 6452 1 2025-10-30 22:31:49.750 00:05:03.463 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 22:31:49.747 00:05:03.468 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 22:36:16.690 00:00:10.366 TCP 23.104.0.1:39372 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:36:24.212 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46234 10 6452 1 2025-10-30 22:37:17.103 00:00:10.365 TCP 23.104.0.1:48990 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:37:24.436 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:51038 10 6452 1 2025-10-30 22:38:17.511 00:00:10.361 TCP 23.104.0.1:47980 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:38:24.667 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59238 10 6452 1 2025-10-30 22:39:17.915 00:00:11.183 TCP 23.104.0.1:40896 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:39:24.884 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55232 10 6452 1 2025-10-30 22:40:22.711 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 22:40:22.681 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 22:40:19.139 00:00:10.367 TCP 23.104.0.1:38406 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:40:25.119 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45576 10 6452 1 2025-10-30 22:41:19.545 00:00:10.356 TCP 23.104.0.1:58420 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:41:25.332 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51158 10 6452 1 2025-10-30 22:37:49.748 00:05:03.472 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 22:37:49.751 00:05:03.467 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 22:42:19.941 00:00:10.370 TCP 23.104.0.1:48866 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:42:25.509 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55114 10 6452 1 2025-10-30 22:43:20.349 00:00:10.363 TCP 23.104.0.1:34856 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:43:25.683 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57806 10 6452 1 2025-10-30 22:44:20.753 00:00:10.393 TCP 23.104.0.1:34420 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:44:25.892 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35642 10 6452 1 2025-10-30 22:45:22.786 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 22:45:22.655 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 22:45:21.185 00:00:10.367 TCP 23.104.0.1:52792 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:45:26.107 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:56948 10 6452 1 2025-10-30 22:46:21.582 00:00:10.363 TCP 23.104.0.1:52724 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:46:26.336 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39118 10 6452 1 2025-10-30 22:47:21.985 00:00:10.368 TCP 23.104.0.1:54902 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:47:26.556 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50454 10 6452 1 2025-10-30 22:43:49.749 00:05:03.473 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 22:43:49.750 00:05:03.468 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 22:48:22.393 00:00:10.361 TCP 23.104.0.1:41414 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:48:26.772 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56046 10 6452 1 2025-10-30 22:49:22.794 00:00:10.367 TCP 23.104.0.1:58310 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:49:26.946 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53078 10 6452 1 2025-10-30 22:50:22.903 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 22:50:23.003 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 22:50:23.199 00:00:10.360 TCP 23.104.0.1:33686 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:50:27.170 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33336 10 6452 1 2025-10-30 22:51:23.600 00:00:10.361 TCP 23.104.0.1:55596 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:51:27.385 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60500 10 6452 1 2025-10-30 22:52:23.999 00:00:10.333 TCP 23.104.0.1:41516 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:52:27.605 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37336 10 6452 1 2025-10-30 22:53:24.369 00:00:10.369 TCP 23.104.0.1:40396 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:53:27.820 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43168 10 6452 1 2025-10-30 22:49:49.752 00:05:03.472 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-30 22:49:49.753 00:05:03.467 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-30 22:54:24.784 00:00:10.350 TCP 23.104.0.1:58406 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:54:28.058 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40910 10 6452 1 2025-10-30 22:55:22.831 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-30 22:55:23.156 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-30 22:55:25.174 00:00:10.364 TCP 23.104.0.1:56842 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:55:28.272 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39402 10 6452 1 2025-10-30 22:56:25.578 00:00:10.368 TCP 23.104.0.1:55552 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:56:28.446 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34518 10 6452 1 2025-10-30 22:57:25.985 00:00:10.369 TCP 23.104.0.1:37876 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:57:28.671 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54870 10 6452 1 2025-10-30 22:58:26.391 00:00:10.367 TCP 23.104.0.1:39140 -> 1.101.0.1:3000 11 1507 1 2025-10-30 22:58:28.889 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57020 10 6452 1 Summary: total flows: 164, total bytes: 502690, total packets: 1578, avg bps: 1066, avg pps: 0, avg bpp: 318 Time window: 2025-10-30 21:55:49 - 2025-10-30 22:58:39 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0016s Wall: 0.0022s flows/second: 75965.3 Runtime: 0.0022s