Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-17 21:58:41.921 00:00:10.400 TCP 23.104.0.1:58828 -> 1.101.0.1:3000 11 1507 1 2025-10-17 21:59:06.305 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 21:59:05.919 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 21:59:02.088 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37638 10 6452 1 2025-10-17 21:59:42.361 00:00:10.365 TCP 23.104.0.1:50030 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:00:02.303 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43296 10 6452 1 2025-10-17 21:56:43.804 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 21:56:43.803 00:05:02.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 22:00:42.760 00:00:10.370 TCP 23.104.0.1:35896 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:01:02.515 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40826 10 6452 1 2025-10-17 22:01:43.179 00:00:10.363 TCP 23.104.0.1:57984 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:02:02.735 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51658 10 6452 1 2025-10-17 22:02:43.583 00:00:10.366 TCP 23.104.0.1:42458 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:03:02.953 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53888 10 6452 1 2025-10-17 22:03:43.986 00:00:10.324 TCP 23.104.0.1:36794 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:04:06.276 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:04:05.949 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 22:04:03.190 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33376 10 6452 1 2025-10-17 22:04:44.351 00:00:10.364 TCP 23.104.0.1:45786 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:05:03.398 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57468 10 6452 1 2025-10-17 22:05:44.751 00:00:10.379 TCP 23.104.0.1:48806 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:06:03.610 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:38952 10 6452 1 2025-10-17 22:02:43.803 00:05:02.614 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 22:02:43.805 00:05:02.609 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 22:06:45.167 00:00:10.329 TCP 23.104.0.1:50462 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:07:03.828 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:57342 10 6452 1 2025-10-17 22:07:45.533 00:00:10.362 TCP 23.104.0.1:43632 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:08:04.083 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57744 10 6452 1 2025-10-17 22:08:45.933 00:00:10.375 TCP 23.104.0.1:52946 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:09:06.062 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 22:09:06.403 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:09:04.289 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55348 10 6452 1 2025-10-17 22:09:46.348 00:00:10.360 TCP 23.104.0.1:34484 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:10:04.497 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43574 10 6452 1 2025-10-17 22:10:46.748 00:00:10.375 TCP 23.104.0.1:33516 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:11:04.714 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46920 10 6452 1 2025-10-17 22:11:47.162 00:00:10.358 TCP 23.104.0.1:36408 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:12:04.932 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:46748 10 6452 1 2025-10-17 22:08:43.808 00:05:02.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 22:08:43.810 00:05:02.605 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 22:12:47.556 00:00:10.361 TCP 23.104.0.1:40708 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:13:05.129 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39514 10 6452 1 2025-10-17 22:14:06.533 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 22:13:47.961 00:00:10.326 TCP 23.104.0.1:34128 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:14:06.456 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:14:05.345 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33270 10 6452 1 2025-10-17 22:14:48.323 00:00:10.370 TCP 23.104.0.1:52286 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:15:05.558 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49406 10 6452 1 2025-10-17 22:15:48.730 00:00:10.952 TCP 23.104.0.1:40538 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:16:05.776 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58688 10 6452 1 2025-10-17 22:16:49.721 00:00:10.378 TCP 23.104.0.1:56542 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:17:05.949 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:45748 10 6452 1 2025-10-17 22:17:50.138 00:00:10.366 TCP 23.104.0.1:32958 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:18:06.195 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:49714 10 6452 1 2025-10-17 22:14:43.808 00:05:02.610 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 22:14:43.812 00:05:02.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 22:18:50.541 00:00:10.365 TCP 23.104.0.1:49796 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:19:06.576 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 22:19:06.571 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:19:06.376 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46350 10 6452 1 2025-10-17 22:19:50.947 00:00:10.385 TCP 23.104.0.1:40674 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:20:06.587 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:59142 10 6452 1 2025-10-17 22:20:51.357 00:00:11.102 TCP 23.104.0.1:57874 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:21:06.767 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39078 10 6452 1 2025-10-17 22:21:52.495 00:00:10.364 TCP 23.104.0.1:34220 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:22:06.980 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:33290 10 6452 1 2025-10-17 22:22:52.897 00:00:10.372 TCP 23.104.0.1:35396 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:23:07.217 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49544 10 6452 1 2025-10-17 22:24:06.588 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 22:23:53.309 00:00:10.367 TCP 23.104.0.1:36716 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:24:06.771 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:24:07.434 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52230 10 6452 1 2025-10-17 22:20:43.813 00:05:02.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 22:20:43.812 00:05:02.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 22:24:53.714 00:00:10.366 TCP 23.104.0.1:35270 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:25:07.650 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57128 10 6452 1 2025-10-17 22:25:54.123 00:00:10.363 TCP 23.104.0.1:45432 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:26:07.823 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53066 10 6452 1 2025-10-17 22:26:54.525 00:00:10.361 TCP 23.104.0.1:49500 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:27:08.005 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53164 10 6452 1 2025-10-17 22:27:54.924 00:00:10.385 TCP 23.104.0.1:35066 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:28:08.216 00:00:10.742 TCP 1.101.0.1:3000 -> 22.102.0.1:60672 10 6452 1 2025-10-17 22:28:55.355 00:00:10.367 TCP 23.104.0.1:58062 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:29:06.722 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:29:06.769 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 22:29:08.996 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51602 10 6452 1 2025-10-17 22:29:55.765 00:00:10.336 TCP 23.104.0.1:36988 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:30:09.221 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34976 10 6452 1 2025-10-17 22:26:43.813 00:05:02.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 22:26:43.816 00:05:02.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 22:30:56.149 00:00:10.366 TCP 23.104.0.1:39704 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:31:09.437 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48464 10 6452 1 2025-10-17 22:31:56.554 00:00:10.329 TCP 23.104.0.1:55424 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:32:09.650 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54438 10 6452 1 2025-10-17 22:32:56.927 00:00:10.398 TCP 23.104.0.1:53036 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:33:09.874 00:00:10.532 TCP 1.101.0.1:3000 -> 22.102.0.1:44494 10 6452 1 2025-10-17 22:34:06.791 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 22:34:06.952 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:33:57.360 00:00:10.375 TCP 23.104.0.1:43556 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:34:10.445 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38022 10 6452 1 2025-10-17 22:34:57.772 00:00:10.371 TCP 23.104.0.1:47166 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:35:10.655 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60938 10 6452 1 2025-10-17 22:35:58.180 00:00:10.368 TCP 23.104.0.1:41808 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:36:10.868 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57856 10 6452 1 2025-10-17 22:32:43.813 00:05:02.608 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 22:32:43.817 00:05:02.603 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 22:36:58.582 00:00:11.266 TCP 23.104.0.1:57792 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:37:11.095 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33486 10 6452 1 2025-10-17 22:37:59.887 00:00:10.377 TCP 23.104.0.1:57072 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:38:11.306 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55896 10 6452 1 2025-10-17 22:39:00.300 00:00:10.333 TCP 23.104.0.1:51714 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:39:07.100 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:39:07.061 00:00:00.047 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 22:39:11.514 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39336 10 6452 1 2025-10-17 22:40:00.675 00:00:10.899 TCP 23.104.0.1:41404 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:40:11.730 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:44994 10 6452 1 2025-10-17 22:41:01.611 00:00:10.335 TCP 23.104.0.1:52562 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:41:11.899 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56650 10 6452 1 2025-10-17 22:42:01.983 00:00:10.322 TCP 23.104.0.1:59484 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:42:12.120 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35486 10 6452 1 2025-10-17 22:38:43.817 00:05:02.604 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 22:38:43.814 00:05:02.609 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 22:43:02.343 00:00:10.370 TCP 23.104.0.1:42818 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:43:12.297 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55852 10 6452 1 2025-10-17 22:44:07.014 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:44:07.157 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 22:44:02.755 00:00:10.382 TCP 23.104.0.1:38626 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:44:12.506 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:52332 10 6452 1 2025-10-17 22:45:03.178 00:00:10.366 TCP 23.104.0.1:34056 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:45:12.683 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44140 10 6452 1 2025-10-17 22:46:03.587 00:00:10.363 TCP 23.104.0.1:36308 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:46:12.896 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40530 10 6452 1 2025-10-17 22:47:03.986 00:00:10.324 TCP 23.104.0.1:56780 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:47:13.109 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:57636 10 6452 1 2025-10-17 22:48:04.351 00:00:10.362 TCP 23.104.0.1:41104 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:48:13.287 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57702 10 6452 1 2025-10-17 22:44:43.816 00:05:02.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 22:44:43.818 00:05:02.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 22:49:08.067 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:49:08.208 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 22:49:04.751 00:00:10.318 TCP 23.104.0.1:46406 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:49:13.500 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57542 10 6452 1 2025-10-17 22:50:05.115 00:00:10.365 TCP 23.104.0.1:39712 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:50:13.711 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47208 10 6452 1 2025-10-17 22:51:05.526 00:00:10.323 TCP 23.104.0.1:58396 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:51:13.936 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54974 10 6452 1 2025-10-17 22:52:05.886 00:00:10.373 TCP 23.104.0.1:55254 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:52:14.170 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50004 10 6452 1 2025-10-17 22:53:06.298 00:00:10.375 TCP 23.104.0.1:59436 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:53:14.345 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58768 10 6452 1 2025-10-17 22:54:07.049 00:00:00.049 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-17 22:54:07.052 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-17 22:54:06.714 00:00:10.328 TCP 23.104.0.1:58490 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:54:14.564 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41578 10 6452 1 2025-10-17 22:50:43.819 00:05:02.608 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-17 22:50:43.817 00:05:02.613 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-17 22:55:07.106 00:00:10.369 TCP 23.104.0.1:47450 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:55:14.778 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37512 10 6452 1 2025-10-17 22:56:07.514 00:00:10.364 TCP 23.104.0.1:42076 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:56:14.990 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53168 10 6452 1 2025-10-17 22:57:07.919 00:00:10.366 TCP 23.104.0.1:38702 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:57:15.205 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34184 10 6452 1 2025-10-17 22:58:08.322 00:00:10.393 TCP 23.104.0.1:52428 -> 1.101.0.1:3000 11 1507 1 2025-10-17 22:58:15.416 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:34516 10 6452 1 Summary: total flows: 164, total bytes: 498348, total packets: 1572, avg bps: 1076, avg pps: 0, avg bpp: 317 Time window: 2025-10-17 21:56:43 - 2025-10-17 22:58:25 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0033s User: 0.0016s Wall: 0.0084s flows/second: 19610.2 Runtime: 0.0084s