Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-26 20:58:58.284 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 20:58:58.315 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 20:59:25.474 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33838 10 6452 1 2025-09-26 20:59:40.686 00:00:10.363 TCP 23.104.0.1:57752 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:00:25.688 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40206 10 6452 1 2025-09-26 20:56:34.043 00:05:01.535 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 21:00:41.104 00:00:10.747 TCP 23.104.0.1:33060 -> 1.101.0.1:3000 11 1507 1 2025-09-26 20:57:34.048 00:05:01.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 21:01:25.903 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48044 10 6452 1 2025-09-26 21:01:41.885 00:00:10.382 TCP 23.104.0.1:49464 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:02:26.121 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55370 10 6452 1 2025-09-26 21:02:42.302 00:00:10.368 TCP 23.104.0.1:47176 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:03:26.333 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41146 10 6452 1 2025-09-26 21:03:42.707 00:00:10.388 TCP 23.104.0.1:40748 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:03:58.684 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 21:03:58.616 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 21:04:26.554 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:47522 10 6452 1 2025-09-26 21:04:43.144 00:00:10.381 TCP 23.104.0.1:46496 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:05:26.777 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48814 10 6452 1 2025-09-26 21:05:43.569 00:00:10.327 TCP 23.104.0.1:43510 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:02:34.046 00:05:01.535 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 21:06:26.996 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:55736 10 6452 1 2025-09-26 21:06:43.930 00:00:10.344 TCP 23.104.0.1:44084 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:03:34.051 00:05:01.530 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 21:07:27.187 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:55276 10 6452 1 2025-09-26 21:07:44.316 00:00:10.370 TCP 23.104.0.1:51040 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:08:27.404 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53970 10 6452 1 2025-09-26 21:08:44.727 00:00:10.836 TCP 23.104.0.1:45474 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:08:58.593 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 21:08:58.647 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 21:09:27.589 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38552 10 6452 1 2025-09-26 21:09:45.600 00:00:10.325 TCP 23.104.0.1:35596 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:10:27.795 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:48394 10 6452 1 2025-09-26 21:10:45.966 00:00:10.633 TCP 23.104.0.1:34544 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:11:27.957 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:51380 12 6556 1 2025-09-26 21:11:46.637 00:00:10.367 TCP 23.104.0.1:35134 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:08:34.051 00:05:01.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 21:12:28.182 00:00:10.324 TCP 1.101.0.1:3000 -> 22.102.0.1:47274 10 6452 1 2025-09-26 21:12:47.054 00:00:10.366 TCP 23.104.0.1:60126 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:09:34.053 00:05:01.531 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 21:13:28.543 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40648 10 6452 1 2025-09-26 21:13:58.772 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 21:13:58.945 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 21:13:47.463 00:00:10.365 TCP 23.104.0.1:54714 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:14:28.717 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35576 10 6452 1 2025-09-26 21:14:47.866 00:00:10.365 TCP 23.104.0.1:60674 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:15:28.939 00:00:10.215 TCP 1.101.0.1:3000 -> 22.102.0.1:47778 10 6452 1 2025-09-26 21:15:48.271 00:00:10.363 TCP 23.104.0.1:44294 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:16:29.192 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:34888 10 6452 1 2025-09-26 21:16:48.669 00:00:10.392 TCP 23.104.0.1:39886 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:17:29.380 00:00:10.809 TCP 1.101.0.1:3000 -> 22.102.0.1:44294 10 6452 1 2025-09-26 21:17:49.106 00:00:10.368 TCP 23.104.0.1:57706 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:14:34.052 00:05:01.534 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 21:18:30.225 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36332 10 6452 1 2025-09-26 21:18:58.463 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 21:18:58.840 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 21:18:49.511 00:00:10.322 TCP 23.104.0.1:59778 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:15:34.054 00:05:01.529 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 21:19:30.398 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37100 10 6452 1 2025-09-26 21:19:49.873 00:00:10.406 TCP 23.104.0.1:53964 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:20:30.611 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55720 10 6452 1 2025-09-26 21:20:50.320 00:00:10.369 TCP 23.104.0.1:50644 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:21:30.835 00:00:10.225 TCP 1.101.0.1:3000 -> 22.102.0.1:36202 12 10365 1 2025-09-26 21:21:50.726 00:00:10.443 TCP 23.104.0.1:35620 -> 1.101.0.1:3000 15 1926 1 2025-09-26 21:22:31.100 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48150 10 6452 1 2025-09-26 21:22:51.206 00:00:10.328 TCP 23.104.0.1:34158 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:23:31.310 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54570 10 6452 1 2025-09-26 21:23:58.911 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 21:23:51.567 00:00:10.322 TCP 23.104.0.1:58436 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:23:58.654 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 21:20:34.052 00:05:01.537 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 21:24:31.524 00:00:10.227 TCP 1.101.0.1:3000 -> 22.102.0.1:40098 11 6504 1 2025-09-26 21:24:51.932 00:00:10.377 TCP 23.104.0.1:59294 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:21:34.055 00:05:01.531 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 21:25:31.796 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53326 10 6452 1 2025-09-26 21:25:52.345 00:00:10.364 TCP 23.104.0.1:44338 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:26:32.040 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51356 10 6452 1 2025-09-26 21:26:52.753 00:00:10.379 TCP 23.104.0.1:42644 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:27:32.257 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35662 10 6452 1 2025-09-26 21:27:53.169 00:00:10.362 TCP 23.104.0.1:41660 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:28:32.464 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34398 10 6452 1 2025-09-26 21:28:59.225 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 21:28:58.853 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 21:28:53.565 00:00:10.360 TCP 23.104.0.1:43096 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:29:32.677 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52828 10 6452 1 2025-09-26 21:29:53.967 00:00:10.326 TCP 23.104.0.1:46458 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:26:34.054 00:05:01.534 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 21:30:32.912 00:00:10.315 TCP 1.101.0.1:3000 -> 22.102.0.1:48944 10 6452 1 2025-09-26 21:30:54.329 00:00:10.319 TCP 23.104.0.1:37060 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:27:34.060 00:05:01.527 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 21:31:33.270 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59016 10 6452 1 2025-09-26 21:31:54.682 00:00:10.366 TCP 23.104.0.1:37510 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:32:33.482 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33488 10 6452 1 2025-09-26 21:32:55.108 00:00:10.376 TCP 23.104.0.1:56696 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:33:33.659 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:38624 10 6452 1 2025-09-26 21:33:58.952 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 21:33:58.820 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 21:33:55.525 00:00:10.366 TCP 23.104.0.1:55456 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:34:33.835 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58122 10 6452 1 2025-09-26 21:34:55.928 00:00:10.430 TCP 23.104.0.1:54206 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:35:34.071 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51036 10 6452 1 2025-09-26 21:35:56.398 00:00:10.364 TCP 23.104.0.1:41876 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:32:34.057 00:05:01.534 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 21:36:34.294 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53668 10 6452 1 2025-09-26 21:36:56.806 00:00:10.329 TCP 23.104.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:33:34.060 00:05:01.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 21:37:34.497 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38818 10 6452 1 2025-09-26 21:37:57.177 00:00:10.322 TCP 23.104.0.1:39572 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:38:34.714 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46192 10 6452 1 2025-09-26 21:38:59.235 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 21:38:58.911 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 21:38:57.536 00:00:10.369 TCP 23.104.0.1:59312 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:39:34.939 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:39084 10 6452 1 2025-09-26 21:39:57.943 00:00:10.370 TCP 23.104.0.1:44968 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:40:35.186 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:54426 10 6452 1 2025-09-26 21:40:58.351 00:00:10.359 TCP 23.104.0.1:56418 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:41:35.372 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:34062 10 6452 1 2025-09-26 21:41:58.748 00:00:10.391 TCP 23.104.0.1:53838 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:38:34.059 00:05:01.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 21:42:35.590 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34560 10 6452 1 2025-09-26 21:42:59.183 00:00:10.363 TCP 23.104.0.1:56504 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:39:34.059 00:05:01.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 21:43:35.807 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46228 10 6452 1 2025-09-26 21:43:59.065 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 21:43:59.164 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 21:43:59.591 00:00:10.327 TCP 23.104.0.1:50372 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:44:36.037 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49578 10 6452 1 2025-09-26 21:44:59.958 00:00:10.327 TCP 23.104.0.1:40438 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:45:36.262 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49158 10 6452 1 2025-09-26 21:46:00.322 00:00:10.366 TCP 23.104.0.1:35474 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:46:36.483 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46554 10 6452 1 2025-09-26 21:47:00.724 00:00:10.371 TCP 23.104.0.1:34258 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:47:36.695 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:56892 10 6452 1 2025-09-26 21:48:01.139 00:00:10.413 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:44:34.059 00:05:01.533 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 21:48:36.880 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59946 10 6452 1 2025-09-26 21:48:59.380 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 21:48:59.441 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 21:49:01.590 00:00:10.325 TCP 23.104.0.1:43120 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:45:34.063 00:05:01.528 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 21:49:37.104 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:55076 10 6452 1 2025-09-26 21:50:01.959 00:00:10.361 TCP 23.104.0.1:32902 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:50:37.353 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41180 10 6452 1 2025-09-26 21:51:02.360 00:00:10.363 TCP 23.104.0.1:52330 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:51:37.574 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47804 10 6452 1 2025-09-26 21:52:02.755 00:00:10.382 TCP 23.104.0.1:40928 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:52:37.801 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47108 10 6452 1 2025-09-26 21:53:03.180 00:00:10.367 TCP 23.104.0.1:36444 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:53:38.029 00:00:13.994 TCP 1.101.0.1:3000 -> 22.102.0.1:51320 10 6452 1 2025-09-26 21:53:59.511 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-26 21:53:59.685 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-26 21:54:03.581 00:00:10.889 TCP 23.104.0.1:58886 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:50:34.067 00:05:01.530 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-26 21:54:42.083 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40256 10 6452 1 2025-09-26 21:55:04.509 00:00:10.365 TCP 23.104.0.1:50002 -> 1.101.0.1:3000 12 1559 1 2025-09-26 21:51:34.070 00:05:01.525 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-26 21:55:42.302 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:59400 10 6452 1 2025-09-26 21:56:04.913 00:00:10.324 TCP 23.104.0.1:52114 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:56:42.484 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60884 10 6452 1 2025-09-26 21:57:05.275 00:00:10.373 TCP 23.104.0.1:41358 -> 1.101.0.1:3000 11 1507 1 2025-09-26 21:57:42.698 00:00:11.334 TCP 1.101.0.1:3000 -> 22.102.0.1:43278 10 6452 1 2025-09-26 21:58:05.683 00:00:10.370 TCP 23.104.0.1:60444 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 494929, total packets: 1561, avg bps: 1069, avg pps: 0, avg bpp: 317 Time window: 2025-09-26 20:56:34 - 2025-09-26 21:58:16 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0024s User: 0.0024s Wall: 0.0024s flows/second: 67415.1 Runtime: 0.0024s