Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-31 13:58:56.013 00:00:10.437 TCP 23.104.0.1:44854 -> 1.101.0.1:3000 15 1926 1 2025-10-31 13:59:35.277 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42062 10 6452 1 2025-10-31 13:54:53.547 00:05:56.635 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 13:54:53.549 00:05:56.630 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 13:59:56.495 00:00:10.365 TCP 23.104.0.1:43784 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:00:41.533 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 14:00:41.904 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 14:00:35.495 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39398 10 6452 1 2025-10-31 14:00:56.903 00:00:10.332 TCP 23.104.0.1:33358 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:01:35.711 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:56344 10 6452 1 2025-10-31 14:01:57.269 00:00:10.369 TCP 23.104.0.1:59714 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:02:35.887 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:41824 10 6452 1 2025-10-31 14:02:57.676 00:00:10.366 TCP 23.104.0.1:60088 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:03:36.119 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58154 10 6452 1 2025-10-31 14:03:58.110 00:00:10.366 TCP 23.104.0.1:47602 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:04:36.342 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34666 10 6452 1 2025-10-31 14:04:58.517 00:00:10.324 TCP 23.104.0.1:55430 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:05:41.232 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 14:05:41.026 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 14:05:36.554 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60946 10 6452 1 2025-10-31 14:00:53.552 00:05:56.629 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 14:00:53.549 00:05:56.635 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 14:05:58.878 00:00:10.387 TCP 23.104.0.1:44226 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:06:36.769 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55032 10 6452 1 2025-10-31 14:06:59.304 00:00:10.363 TCP 23.104.0.1:49318 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:07:36.938 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:45680 10 6452 1 2025-10-31 14:07:59.704 00:00:10.322 TCP 23.104.0.1:35738 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:08:37.175 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44244 10 6452 1 2025-10-31 14:09:00.092 00:00:10.362 TCP 23.104.0.1:44974 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:09:37.387 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36822 10 6452 1 2025-10-31 14:10:00.494 00:00:10.367 TCP 23.104.0.1:56810 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:10:41.241 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 14:10:41.422 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 14:10:37.600 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57422 10 6452 1 2025-10-31 14:11:00.902 00:00:10.365 TCP 23.104.0.1:40054 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:11:37.804 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58800 10 6452 1 2025-10-31 14:06:53.553 00:05:56.639 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 14:06:53.551 00:05:56.644 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 14:12:01.303 00:00:10.797 TCP 23.104.0.1:38278 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:12:38.026 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60054 10 6452 1 2025-10-31 14:13:02.139 00:00:10.370 TCP 23.104.0.1:32866 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:13:38.240 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33158 10 6452 1 2025-10-31 14:14:02.543 00:00:10.367 TCP 23.104.0.1:38654 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:14:38.451 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58784 10 6452 1 2025-10-31 14:15:02.948 00:00:10.375 TCP 23.104.0.1:52276 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:15:41.622 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 14:15:41.328 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 14:15:38.666 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52962 10 6452 1 2025-10-31 14:16:03.361 00:00:10.323 TCP 23.104.0.1:47474 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:16:38.876 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35818 10 6452 1 2025-10-31 14:17:03.723 00:00:10.376 TCP 23.104.0.1:39440 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:12:53.553 00:05:56.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 14:17:39.097 00:00:12.615 TCP 1.101.0.1:3000 -> 22.102.0.1:33386 10 6452 1 2025-10-31 14:12:53.555 00:05:56.637 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 14:18:04.134 00:00:10.363 TCP 23.104.0.1:45912 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:18:41.750 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58956 10 6452 1 2025-10-31 14:19:04.553 00:00:10.370 TCP 23.104.0.1:38728 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:19:41.970 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:49342 10 6452 1 2025-10-31 14:20:04.962 00:00:10.329 TCP 23.104.0.1:35104 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:20:41.544 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 14:20:41.677 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 14:20:42.149 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:60432 10 6452 1 2025-10-31 14:21:05.334 00:00:10.365 TCP 23.104.0.1:50056 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:21:42.315 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41588 10 6452 1 2025-10-31 14:22:05.748 00:00:10.367 TCP 23.104.0.1:51874 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:22:42.530 00:00:10.532 TCP 1.101.0.1:3000 -> 22.102.0.1:60646 10 6452 1 2025-10-31 14:23:06.156 00:00:10.364 TCP 23.104.0.1:52372 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:18:53.556 00:05:56.636 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 14:18:53.553 00:05:56.641 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 14:23:43.095 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50238 10 6452 1 2025-10-31 14:24:06.560 00:00:10.369 TCP 23.104.0.1:36332 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:24:43.312 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:47330 10 6452 1 2025-10-31 14:25:06.965 00:00:10.372 TCP 23.104.0.1:51666 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:25:41.906 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 14:25:42.063 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 14:25:43.546 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49814 10 6452 1 2025-10-31 14:26:07.377 00:00:10.362 TCP 23.104.0.1:51696 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:26:43.768 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52250 10 6452 1 2025-10-31 14:27:07.782 00:00:10.366 TCP 23.104.0.1:37976 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:27:43.986 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:56244 11 6492 1 2025-10-31 14:28:08.188 00:00:10.329 TCP 23.104.0.1:60722 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:28:44.253 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37834 10 6452 1 2025-10-31 14:29:08.552 00:00:10.360 TCP 23.104.0.1:38746 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:24:53.559 00:05:56.646 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 14:24:53.562 00:05:56.641 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 14:29:44.466 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42726 10 6452 1 2025-10-31 14:30:08.953 00:00:10.362 TCP 23.104.0.1:51278 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:30:41.710 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 14:30:41.801 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 14:30:44.688 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47750 10 6452 1 2025-10-31 14:31:09.354 00:00:10.361 TCP 23.104.0.1:60760 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:31:44.907 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34486 10 6452 1 2025-10-31 14:32:09.754 00:00:10.325 TCP 23.104.0.1:34944 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:32:45.124 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43826 10 6452 1 2025-10-31 14:33:10.121 00:00:10.323 TCP 23.104.0.1:33338 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:33:45.347 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:52808 12 10369 1 2025-10-31 14:34:10.478 00:00:10.398 TCP 23.104.0.1:43838 -> 1.101.0.1:3000 15 1926 1 2025-10-31 14:34:45.589 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49372 10 6452 1 2025-10-31 14:35:10.916 00:00:10.357 TCP 23.104.0.1:53924 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:35:41.689 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 14:35:41.844 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 14:30:53.561 00:05:56.647 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 14:30:53.564 00:05:56.642 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 14:35:45.814 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60854 10 6452 1 2025-10-31 14:36:11.314 00:00:10.325 TCP 23.104.0.1:55528 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:36:46.043 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49886 10 6452 1 2025-10-31 14:37:11.677 00:00:10.366 TCP 23.104.0.1:34750 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:37:46.254 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38780 10 6452 1 2025-10-31 14:38:12.097 00:00:10.365 TCP 23.104.0.1:42954 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:38:46.465 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54704 10 6452 1 2025-10-31 14:39:12.500 00:00:10.366 TCP 23.104.0.1:52884 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:39:46.636 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40046 10 6452 1 2025-10-31 14:40:12.900 00:00:10.374 TCP 23.104.0.1:49890 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:40:41.779 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 14:40:41.753 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 14:40:46.852 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58778 10 6452 1 2025-10-31 14:41:13.315 00:00:12.409 TCP 23.104.0.1:37918 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:36:53.575 00:05:56.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 14:36:53.577 00:05:56.629 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 14:41:47.081 00:00:11.074 TCP 1.101.0.1:3000 -> 22.102.0.1:35612 10 6452 1 2025-10-31 14:42:15.783 00:00:10.322 TCP 23.104.0.1:55574 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:42:48.199 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33498 10 6452 1 2025-10-31 14:43:16.142 00:00:10.370 TCP 23.104.0.1:33708 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:43:48.411 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49640 10 6452 1 2025-10-31 14:44:16.546 00:00:10.816 TCP 23.104.0.1:40246 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:44:48.624 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35300 10 6452 1 2025-10-31 14:45:17.396 00:00:10.323 TCP 23.104.0.1:58670 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:45:41.962 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 14:45:42.189 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 14:45:48.836 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:41898 10 6452 1 2025-10-31 14:46:17.756 00:00:10.634 TCP 23.104.0.1:39440 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:46:49.081 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46672 10 6452 1 2025-10-31 14:47:18.428 00:00:10.368 TCP 23.104.0.1:47474 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:42:53.579 00:05:56.632 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 14:42:53.581 00:05:56.627 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 14:47:49.319 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37778 10 6452 1 2025-10-31 14:48:18.842 00:00:10.381 TCP 23.104.0.1:33004 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:48:49.492 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59716 10 6452 1 2025-10-31 14:49:19.266 00:00:10.361 TCP 23.104.0.1:48406 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:49:49.715 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43022 10 6452 1 2025-10-31 14:50:19.664 00:00:10.367 TCP 23.104.0.1:41820 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:50:42.311 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 14:50:42.128 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 14:50:49.926 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:55274 10 6452 1 2025-10-31 14:51:20.092 00:00:10.363 TCP 23.104.0.1:58444 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:51:50.122 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36294 10 6452 1 2025-10-31 14:52:20.492 00:00:10.376 TCP 23.104.0.1:49638 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:52:50.336 00:00:10.324 TCP 1.101.0.1:3000 -> 22.102.0.1:35022 10 6452 1 2025-10-31 14:53:20.903 00:00:10.370 TCP 23.104.0.1:51006 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:48:53.582 00:05:56.629 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-31 14:48:53.580 00:05:56.634 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-31 14:53:50.697 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33026 10 6452 1 2025-10-31 14:54:21.309 00:00:10.364 TCP 23.104.0.1:34204 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:54:50.913 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45838 10 6452 1 2025-10-31 14:55:21.714 00:00:10.389 TCP 23.104.0.1:35058 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:55:42.597 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-31 14:55:42.520 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-31 14:55:51.132 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:56382 10 6452 1 2025-10-31 14:56:22.144 00:00:11.854 TCP 23.104.0.1:59452 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:56:51.322 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46378 10 6452 1 2025-10-31 14:57:24.035 00:00:10.361 TCP 23.104.0.1:49556 -> 1.101.0.1:3000 11 1507 1 2025-10-31 14:57:51.539 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58114 10 6452 1 2025-10-31 14:58:24.437 00:00:10.365 TCP 23.104.0.1:34474 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 496691, total packets: 1573, avg bps: 1039, avg pps: 0, avg bpp: 315 Time window: 2025-10-31 13:54:53 - 2025-10-31 14:58:34 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0034s User: 0.0009s Wall: 0.0013s flows/second: 124712.1 Runtime: 0.0013s