Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-07 20:58:52.552 00:00:10.359 TCP 23.104.0.1:53844 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:59:16.105 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 20:59:16.012 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 20:59:40.867 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45796 10 6452 1 2025-10-07 20:59:52.961 00:00:10.329 TCP 23.104.0.1:44218 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:56:39.157 00:05:01.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 21:00:41.093 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:56744 10 6452 1 2025-10-07 21:00:53.327 00:00:10.325 TCP 23.104.0.1:46732 -> 1.101.0.1:3000 11 1507 1 2025-10-07 20:57:39.159 00:05:01.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 21:01:41.280 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54906 10 6452 1 2025-10-07 21:01:53.686 00:00:10.367 TCP 23.104.0.1:41568 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:02:41.493 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52102 10 6452 1 2025-10-07 21:02:54.107 00:00:10.367 TCP 23.104.0.1:58244 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:03:41.673 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33914 10 6452 1 2025-10-07 21:03:54.516 00:00:10.366 TCP 23.104.0.1:39664 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:04:16.131 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 21:04:16.109 00:00:00.037 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 21:04:41.887 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:54640 12 10369 1 2025-10-07 21:04:54.922 00:00:10.414 TCP 23.104.0.1:35392 -> 1.101.0.1:3000 15 1926 1 2025-10-07 21:05:42.137 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49354 10 6452 1 2025-10-07 21:05:55.374 00:00:10.366 TCP 23.104.0.1:57020 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:02:39.157 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 21:06:42.345 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37298 10 6452 1 2025-10-07 21:06:55.778 00:00:10.325 TCP 23.104.0.1:43010 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:03:39.161 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 21:07:42.558 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47262 10 6452 1 2025-10-07 21:07:56.141 00:00:10.375 TCP 23.104.0.1:44592 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:08:42.795 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34088 10 6452 1 2025-10-07 21:08:56.555 00:00:10.364 TCP 23.104.0.1:35854 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:09:16.455 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 21:09:16.515 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 21:09:43.013 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38360 10 6452 1 2025-10-07 21:09:56.972 00:00:10.327 TCP 23.104.0.1:33986 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:10:43.185 00:00:10.934 TCP 1.101.0.1:3000 -> 22.102.0.1:36108 10 6452 1 2025-10-07 21:10:57.349 00:00:10.366 TCP 23.104.0.1:55220 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:11:44.155 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42646 10 6452 1 2025-10-07 21:11:57.758 00:00:10.384 TCP 23.104.0.1:34476 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:08:39.159 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 21:12:44.330 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47700 12 6556 1 2025-10-07 21:12:58.176 00:00:10.329 TCP 23.104.0.1:38988 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:09:39.161 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 21:13:44.540 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60722 10 6452 1 2025-10-07 21:13:58.545 00:00:10.370 TCP 23.104.0.1:54434 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:14:16.238 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 21:14:16.346 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 21:14:44.752 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56196 10 6452 1 2025-10-07 21:14:58.956 00:00:10.362 TCP 23.104.0.1:33416 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:15:44.968 00:00:10.344 TCP 1.101.0.1:3000 -> 22.102.0.1:49024 10 6452 1 2025-10-07 21:15:59.357 00:00:10.363 TCP 23.104.0.1:54016 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:16:45.351 00:00:10.745 TCP 1.101.0.1:3000 -> 22.102.0.1:53652 10 6452 1 2025-10-07 21:16:59.756 00:00:10.390 TCP 23.104.0.1:54866 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:17:46.133 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:51244 10 6452 1 2025-10-07 21:18:00.185 00:00:10.365 TCP 23.104.0.1:37006 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:14:39.161 00:05:01.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 21:18:46.309 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51128 10 6452 1 2025-10-07 21:19:16.344 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 21:19:00.590 00:00:10.327 TCP 23.104.0.1:40196 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:19:16.562 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 21:15:39.164 00:05:01.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 21:19:46.520 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40488 10 6452 1 2025-10-07 21:20:00.955 00:00:10.370 TCP 23.104.0.1:52588 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:20:46.735 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:41406 10 6452 1 2025-10-07 21:21:01.360 00:00:10.373 TCP 23.104.0.1:33172 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:21:46.907 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58830 10 6452 1 2025-10-07 21:22:01.793 00:00:10.367 TCP 23.104.0.1:53896 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:22:47.122 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36874 10 6452 1 2025-10-07 21:23:02.199 00:00:10.370 TCP 23.104.0.1:42818 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:23:47.340 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36120 10 6452 1 2025-10-07 21:24:02.606 00:00:10.325 TCP 23.104.0.1:57154 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:24:16.585 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 21:24:16.600 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 21:20:39.162 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 21:24:47.553 00:00:10.320 TCP 1.101.0.1:3000 -> 22.102.0.1:44540 10 6452 1 2025-10-07 21:25:02.968 00:00:10.375 TCP 23.104.0.1:53090 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:21:39.166 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 21:25:47.906 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:36014 10 6452 1 2025-10-07 21:26:03.381 00:00:10.336 TCP 23.104.0.1:59438 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:26:48.136 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36868 10 6452 1 2025-10-07 21:27:03.754 00:00:10.379 TCP 23.104.0.1:57620 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:27:48.355 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41504 10 6452 1 2025-10-07 21:28:04.169 00:00:10.368 TCP 23.104.0.1:37648 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:28:48.530 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:39984 10 6452 1 2025-10-07 21:29:16.856 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 21:29:16.447 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 21:29:04.574 00:00:10.823 TCP 23.104.0.1:44704 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:29:48.755 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:55658 10 6452 1 2025-10-07 21:30:05.435 00:00:10.371 TCP 23.104.0.1:47104 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:26:39.165 00:05:01.998 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 21:30:48.929 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:46008 10 6452 1 2025-10-07 21:31:05.842 00:00:10.398 TCP 23.104.0.1:36114 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:27:39.167 00:05:01.992 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 21:31:49.171 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58652 10 6452 1 2025-10-07 21:32:06.278 00:00:10.330 TCP 23.104.0.1:33818 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:32:49.379 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53632 10 6452 1 2025-10-07 21:33:06.645 00:00:10.323 TCP 23.104.0.1:36010 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:33:49.554 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34016 10 6452 1 2025-10-07 21:34:17.047 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 21:34:07.006 00:00:10.322 TCP 23.104.0.1:43858 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:34:16.977 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 21:34:49.730 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54030 10 6452 1 2025-10-07 21:35:07.365 00:00:10.367 TCP 23.104.0.1:37914 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:35:49.946 00:00:10.461 TCP 1.101.0.1:3000 -> 22.102.0.1:58326 10 6452 1 2025-10-07 21:36:07.769 00:00:10.369 TCP 23.104.0.1:45788 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:32:39.168 00:05:01.994 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 21:36:50.441 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46614 10 6452 1 2025-10-07 21:37:08.175 00:00:10.358 TCP 23.104.0.1:45974 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:33:39.169 00:05:01.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 21:37:50.617 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47270 10 6452 1 2025-10-07 21:38:08.577 00:00:10.362 TCP 23.104.0.1:50346 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:38:50.832 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57664 10 6452 1 2025-10-07 21:39:16.961 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 21:39:16.965 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 21:39:08.980 00:00:10.376 TCP 23.104.0.1:36424 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:39:51.078 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:37528 10 6452 1 2025-10-07 21:40:09.399 00:00:10.380 TCP 23.104.0.1:55618 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:40:51.289 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46820 10 6452 1 2025-10-07 21:41:09.816 00:00:10.367 TCP 23.104.0.1:45240 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:41:51.459 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34094 10 6452 1 2025-10-07 21:42:10.224 00:00:10.331 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:38:39.170 00:05:01.995 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 21:42:51.625 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55304 10 6452 1 2025-10-07 21:43:10.592 00:00:10.367 TCP 23.104.0.1:47086 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:39:39.171 00:05:01.990 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 21:43:51.845 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:42616 10 6452 1 2025-10-07 21:44:16.820 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 21:44:11.000 00:00:10.326 TCP 23.104.0.1:38852 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:44:17.036 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 21:44:52.093 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43962 10 6452 1 2025-10-07 21:45:11.364 00:00:10.366 TCP 23.104.0.1:50314 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:45:52.303 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58596 10 6452 1 2025-10-07 21:46:11.769 00:00:10.327 TCP 23.104.0.1:51144 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:46:52.516 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44032 10 6452 1 2025-10-07 21:47:12.147 00:00:10.361 TCP 23.104.0.1:50864 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:47:52.732 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53904 10 6452 1 2025-10-07 21:48:12.549 00:00:10.363 TCP 23.104.0.1:58426 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:44:39.169 00:05:01.997 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 21:48:52.940 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:43372 10 6452 1 2025-10-07 21:49:16.930 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 21:49:16.940 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 21:49:12.951 00:00:10.384 TCP 23.104.0.1:44074 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:45:39.172 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 21:49:53.133 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:48412 12 10375 1 2025-10-07 21:50:13.405 00:00:10.438 TCP 23.104.0.1:49782 -> 1.101.0.1:3000 15 1926 1 2025-10-07 21:50:53.383 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:51108 10 6452 1 2025-10-07 21:51:13.884 00:00:10.384 TCP 23.104.0.1:33408 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:51:53.562 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34196 10 6452 1 2025-10-07 21:52:14.307 00:00:10.366 TCP 23.104.0.1:35302 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:52:53.739 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53684 10 6452 1 2025-10-07 21:53:14.713 00:00:10.378 TCP 23.104.0.1:42206 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:53:53.949 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:43264 10 6452 1 2025-10-07 21:54:16.988 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-07 21:54:17.073 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-07 21:54:15.127 00:00:10.370 TCP 23.104.0.1:40490 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:50:39.171 00:05:01.996 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-07 21:54:54.171 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47962 10 6452 1 2025-10-07 21:55:15.534 00:00:10.368 TCP 23.104.0.1:49514 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:51:39.174 00:05:01.991 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-07 21:55:54.383 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43076 10 6452 1 2025-10-07 21:56:15.949 00:00:10.372 TCP 23.104.0.1:38740 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:56:54.555 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46606 10 6452 1 2025-10-07 21:57:16.360 00:00:10.359 TCP 23.104.0.1:48156 -> 1.101.0.1:3000 11 1507 1 2025-10-07 21:57:54.766 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55210 10 6452 1 2025-10-07 21:58:16.764 00:00:10.426 TCP 23.104.0.1:44320 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 500678, total packets: 1576, avg bps: 1080, avg pps: 0, avg bpp: 317 Time window: 2025-10-07 20:56:39 - 2025-10-07 21:58:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0049s User: 0.0010s Wall: 0.0021s flows/second: 78438.7 Runtime: 0.0021s