Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-17 21:59:01.465 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 21:58:50.420 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43630 10 6452 1 2025-11-17 21:59:01.766 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 21:59:01.908 00:00:10.362 TCP 23.104.0.1:46196 -> 1.101.0.1:3000 11 1507 1 2025-11-17 21:59:50.635 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51220 10 6452 1 2025-11-17 22:00:02.310 00:00:10.365 TCP 23.104.0.1:36188 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:00:50.808 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:39724 10 6452 1 2025-11-17 22:01:02.714 00:00:10.331 TCP 23.104.0.1:37246 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:01:51.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54008 10 6452 1 2025-11-17 22:02:03.107 00:00:10.374 TCP 23.104.0.1:37170 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:02:51.289 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45194 10 6452 1 2025-11-17 21:58:58.942 00:05:04.877 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 22:03:03.524 00:00:10.365 TCP 23.104.0.1:46274 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:03:51.498 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58368 10 6452 1 2025-11-17 22:04:01.554 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 21:59:58.945 00:05:04.872 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 22:04:02.048 00:00:00.036 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 22:04:03.929 00:00:10.370 TCP 23.104.0.1:34026 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:04:51.715 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50654 10 6452 1 2025-11-17 22:05:04.335 00:00:10.364 TCP 23.104.0.1:50614 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:05:51.925 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:58930 10 6452 1 2025-11-17 22:06:04.749 00:00:10.385 TCP 23.104.0.1:40056 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:06:52.157 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49674 10 6452 1 2025-11-17 22:07:05.170 00:00:10.361 TCP 23.104.0.1:59992 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:07:52.372 00:00:11.238 TCP 1.101.0.1:3000 -> 22.102.0.1:52716 10 6452 1 2025-11-17 22:08:05.566 00:00:10.364 TCP 23.104.0.1:40776 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:09:02.359 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 22:04:58.943 00:05:04.878 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 22:08:53.654 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53540 10 6452 1 2025-11-17 22:09:02.380 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 22:09:05.967 00:00:10.364 TCP 23.104.0.1:33498 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:09:53.874 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56124 10 6452 1 2025-11-17 22:05:58.947 00:05:04.873 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 22:10:06.370 00:00:10.366 TCP 23.104.0.1:40540 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:10:54.113 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:50908 10 6452 1 2025-11-17 22:11:06.782 00:00:10.368 TCP 23.104.0.1:49660 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:11:54.275 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:55588 10 6452 1 2025-11-17 22:12:07.189 00:00:10.367 TCP 23.104.0.1:54630 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:12:54.499 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54658 10 6452 1 2025-11-17 22:13:07.607 00:00:10.367 TCP 23.104.0.1:45774 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:14:02.028 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 22:13:54.725 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54022 10 6452 1 2025-11-17 22:14:02.002 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 22:14:08.020 00:00:10.366 TCP 23.104.0.1:59358 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:10:58.946 00:05:04.876 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 22:14:54.891 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54286 10 6452 1 2025-11-17 22:15:08.433 00:00:10.368 TCP 23.104.0.1:43462 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:15:55.107 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59654 10 6452 1 2025-11-17 22:11:58.948 00:05:04.871 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 22:16:08.835 00:00:10.351 TCP 23.104.0.1:49180 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:16:55.286 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35716 10 6452 1 2025-11-17 22:17:09.220 00:00:10.369 TCP 23.104.0.1:40886 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:17:55.457 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52714 10 6452 1 2025-11-17 22:18:09.623 00:00:10.365 TCP 23.104.0.1:48312 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:19:01.817 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 22:18:55.666 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:48688 10 6452 1 2025-11-17 22:19:02.179 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 22:19:10.027 00:00:10.365 TCP 23.104.0.1:58092 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:19:55.872 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:37040 10 6452 1 2025-11-17 22:20:10.430 00:00:10.364 TCP 23.104.0.1:54156 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:20:56.103 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35546 10 6452 1 2025-11-17 22:16:58.946 00:05:04.877 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 22:21:10.832 00:00:10.388 TCP 23.104.0.1:40288 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:17:58.948 00:05:04.872 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 22:21:56.320 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56336 10 6452 1 2025-11-17 22:22:11.263 00:00:10.374 TCP 23.104.0.1:43856 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:22:56.539 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:52880 10 6452 1 2025-11-17 22:23:11.685 00:00:10.363 TCP 23.104.0.1:37484 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:24:01.960 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 22:24:01.811 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 22:23:56.743 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49076 10 6452 1 2025-11-17 22:24:12.104 00:00:10.362 TCP 23.104.0.1:53876 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:24:56.911 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42784 10 6452 1 2025-11-17 22:25:12.506 00:00:10.364 TCP 23.104.0.1:57682 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:25:57.124 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50338 10 6452 1 2025-11-17 22:26:12.909 00:00:10.324 TCP 23.104.0.1:38442 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:22:58.949 00:05:04.877 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 22:26:57.338 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42600 10 6452 1 2025-11-17 22:27:13.272 00:00:10.320 TCP 23.104.0.1:50698 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:23:58.951 00:05:04.872 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 22:27:57.551 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:50324 10 6452 1 2025-11-17 22:28:13.631 00:00:10.360 TCP 23.104.0.1:53586 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:29:02.178 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 22:29:02.204 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 22:28:57.735 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43350 10 6452 1 2025-11-17 22:29:14.031 00:00:10.365 TCP 23.104.0.1:44440 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:29:57.950 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:39028 12 6556 1 2025-11-17 22:30:14.434 00:00:10.367 TCP 23.104.0.1:56960 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:30:58.190 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37876 10 6452 1 2025-11-17 22:31:14.832 00:00:10.382 TCP 23.104.0.1:35724 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:31:58.403 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42694 10 6452 1 2025-11-17 22:32:15.250 00:00:10.386 TCP 23.104.0.1:33294 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:28:58.953 00:05:04.874 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 22:32:58.622 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57430 10 6452 1 2025-11-17 22:33:15.674 00:00:10.370 TCP 23.104.0.1:41646 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:29:58.953 00:05:04.871 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 22:34:02.162 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 22:34:02.233 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 22:33:58.825 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46098 10 6452 1 2025-11-17 22:34:16.106 00:00:10.364 TCP 23.104.0.1:43096 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:34:59.044 00:00:10.312 TCP 1.101.0.1:3000 -> 22.102.0.1:44554 10 6452 1 2025-11-17 22:35:16.507 00:00:10.373 TCP 23.104.0.1:44906 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:35:59.406 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53026 10 6452 1 2025-11-17 22:36:16.914 00:00:10.373 TCP 23.104.0.1:37520 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:36:59.619 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33544 10 6452 1 2025-11-17 22:37:17.322 00:00:10.363 TCP 23.104.0.1:58164 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:37:59.834 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44246 10 6452 1 2025-11-17 22:38:17.723 00:00:10.379 TCP 23.104.0.1:34508 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:39:02.495 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 22:39:02.532 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 22:34:58.958 00:05:04.872 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 22:39:00.075 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:37270 10 6452 1 2025-11-17 22:39:18.141 00:00:10.371 TCP 23.104.0.1:45892 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:35:58.959 00:05:04.866 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 22:40:00.289 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:60028 10 6452 1 2025-11-17 22:40:18.552 00:00:10.323 TCP 23.104.0.1:36296 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:41:00.470 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50024 10 6452 1 2025-11-17 22:41:18.920 00:00:10.323 TCP 23.104.0.1:40752 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:42:00.685 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52582 10 6452 1 2025-11-17 22:42:19.282 00:00:10.368 TCP 23.104.0.1:43070 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:43:00.900 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:57476 10 6452 1 2025-11-17 22:43:19.685 00:00:10.380 TCP 23.104.0.1:39064 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:44:02.509 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 22:44:02.580 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 22:44:01.084 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45866 10 6452 1 2025-11-17 22:44:20.119 00:00:10.365 TCP 23.104.0.1:40668 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:40:58.956 00:05:04.873 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 22:45:01.298 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40298 10 6452 1 2025-11-17 22:45:20.520 00:00:10.330 TCP 23.104.0.1:36500 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:41:58.960 00:05:04.870 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 22:46:01.511 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37254 10 6452 1 2025-11-17 22:46:20.887 00:00:10.373 TCP 23.104.0.1:55124 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:47:01.727 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58052 10 6452 1 2025-11-17 22:47:21.297 00:00:10.370 TCP 23.104.0.1:51584 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:48:01.949 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46408 10 6452 1 2025-11-17 22:48:21.706 00:00:10.366 TCP 23.104.0.1:57564 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:49:02.671 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 22:49:02.530 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 22:49:02.176 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:49982 10 6452 1 2025-11-17 22:49:22.107 00:00:10.365 TCP 23.104.0.1:46908 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:50:02.351 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36378 10 6452 1 2025-11-17 22:50:22.517 00:00:10.322 TCP 23.104.0.1:45734 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:46:58.960 00:05:04.877 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 22:51:02.560 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36310 10 6452 1 2025-11-17 22:51:22.879 00:00:10.396 TCP 23.104.0.1:51442 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:47:58.961 00:05:04.873 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 22:52:02.774 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42086 10 6452 1 2025-11-17 22:52:23.310 00:00:10.365 TCP 23.104.0.1:60040 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:53:02.987 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54658 10 6452 1 2025-11-17 22:53:23.714 00:00:10.363 TCP 23.104.0.1:56358 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:54:02.474 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-17 22:54:02.828 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-17 22:54:03.231 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47438 10 6452 1 2025-11-17 22:54:24.111 00:00:10.366 TCP 23.104.0.1:44442 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:55:03.442 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:44244 10 6452 1 2025-11-17 22:55:24.517 00:00:10.370 TCP 23.104.0.1:36726 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:56:03.620 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55462 10 6452 1 2025-11-17 22:56:24.924 00:00:10.386 TCP 23.104.0.1:48950 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:52:58.963 00:05:04.874 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-17 22:57:03.854 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41734 10 6452 1 2025-11-17 22:57:25.353 00:00:10.365 TCP 23.104.0.1:53738 -> 1.101.0.1:3000 11 1507 1 2025-11-17 22:53:58.964 00:05:04.869 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-17 22:58:04.084 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47420 10 6452 1 2025-11-17 22:58:25.755 00:00:10.384 TCP 23.104.0.1:33104 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498452, total packets: 1574, avg bps: 1103, avg pps: 0, avg bpp: 316 Time window: 2025-11-17 21:58:50 - 2025-11-17 22:59:03 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0059s User: 0.0010s Wall: 0.0032s flows/second: 50870.1 Runtime: 0.0032s