Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-22 01:59:24.854 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:59394 10 6452 1 2025-09-22 01:59:40.909 00:00:10.372 TCP 23.104.0.1:38488 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:00:25.094 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39832 10 6452 1 2025-09-22 01:56:31.766 00:05:01.385 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 02:00:41.319 00:00:10.361 TCP 23.104.0.1:58836 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:01:25.300 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49684 10 6452 1 2025-09-22 01:57:31.769 00:05:01.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 02:01:39.927 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 02:01:40.202 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 02:01:41.717 00:00:10.376 TCP 23.104.0.1:41596 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:02:25.510 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47692 10 6452 1 2025-09-22 02:02:42.133 00:00:10.364 TCP 23.104.0.1:46724 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:03:25.722 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54608 10 6452 1 2025-09-22 02:03:42.535 00:00:10.364 TCP 23.104.0.1:53128 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:04:25.934 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:57124 10 6452 1 2025-09-22 02:04:42.936 00:00:10.382 TCP 23.104.0.1:43480 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:05:26.120 00:00:10.368 TCP 1.101.0.1:3000 -> 22.102.0.1:35916 10 6452 1 2025-09-22 02:05:43.356 00:00:10.363 TCP 23.104.0.1:39734 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:06:26.530 00:00:10.336 TCP 1.101.0.1:3000 -> 22.102.0.1:54438 10 6452 1 2025-09-22 02:02:31.767 00:05:01.390 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 02:06:40.190 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 02:06:40.279 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 02:06:43.762 00:00:10.373 TCP 23.104.0.1:54258 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:03:31.770 00:05:01.383 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 02:07:26.905 00:00:10.490 TCP 1.101.0.1:3000 -> 22.102.0.1:43830 10 6452 1 2025-09-22 02:07:44.176 00:00:10.324 TCP 23.104.0.1:40928 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:08:27.434 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56440 10 6452 1 2025-09-22 02:08:44.538 00:00:10.366 TCP 23.104.0.1:41706 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:09:27.649 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53820 10 6452 1 2025-09-22 02:09:44.942 00:00:10.364 TCP 23.104.0.1:48390 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:10:27.858 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57532 10 6452 1 2025-09-22 02:10:45.346 00:00:10.378 TCP 23.104.0.1:47798 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:11:40.027 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 02:11:28.088 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46196 10 6452 1 2025-09-22 02:11:40.115 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 02:11:45.762 00:00:10.380 TCP 23.104.0.1:57064 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:08:31.770 00:05:01.386 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 02:12:28.306 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41708 10 6452 1 2025-09-22 02:12:46.182 00:00:10.369 TCP 23.104.0.1:39510 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:09:31.771 00:05:01.382 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 02:13:28.515 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54424 10 6452 1 2025-09-22 02:13:46.580 00:00:10.369 TCP 23.104.0.1:37164 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:14:28.689 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:33578 10 6452 1 2025-09-22 02:14:46.993 00:00:10.331 TCP 23.104.0.1:45792 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:15:28.898 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46954 10 6452 1 2025-09-22 02:15:47.369 00:00:10.320 TCP 23.104.0.1:49306 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:16:40.220 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 02:16:29.115 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:54392 14 14280 1 2025-09-22 02:16:40.344 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 02:16:47.724 00:00:10.550 TCP 23.104.0.1:39966 -> 1.101.0.1:3000 17 2241 1 2025-09-22 02:17:29.381 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35298 10 6452 1 2025-09-22 02:17:48.317 00:00:10.369 TCP 23.104.0.1:37128 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:14:31.772 00:05:01.385 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 02:18:29.591 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37080 10 6452 1 2025-09-22 02:18:48.724 00:00:10.370 TCP 23.104.0.1:60270 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:15:31.774 00:05:01.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 02:19:29.774 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35722 10 6452 1 2025-09-22 02:19:49.133 00:00:10.365 TCP 23.104.0.1:44266 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:20:29.982 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:37632 10 6452 1 2025-09-22 02:20:49.541 00:00:10.368 TCP 23.104.0.1:54226 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:21:30.217 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43720 10 6452 1 2025-09-22 02:21:40.698 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 02:21:40.583 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 02:21:49.948 00:00:10.321 TCP 23.104.0.1:59128 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:22:30.427 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42842 10 6452 1 2025-09-22 02:22:50.311 00:00:10.368 TCP 23.104.0.1:33212 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:23:30.638 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39630 10 6452 1 2025-09-22 02:23:50.726 00:00:10.372 TCP 23.104.0.1:55462 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:20:31.772 00:05:01.386 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 02:24:30.819 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36374 10 6452 1 2025-09-22 02:24:51.139 00:00:10.360 TCP 23.104.0.1:41256 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:21:31.775 00:05:01.381 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 02:25:30.997 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33182 10 6452 1 2025-09-22 02:25:51.536 00:00:10.362 TCP 23.104.0.1:49494 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:26:40.261 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 02:26:31.226 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:50160 10 6452 1 2025-09-22 02:26:40.564 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 02:26:51.942 00:00:10.332 TCP 23.104.0.1:34758 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:27:31.398 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40614 10 6452 1 2025-09-22 02:27:52.309 00:00:10.937 TCP 23.104.0.1:34802 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:28:31.568 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51924 10 6452 1 2025-09-22 02:28:53.281 00:00:10.364 TCP 23.104.0.1:35380 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:29:31.783 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36452 10 6452 1 2025-09-22 02:29:53.698 00:00:10.368 TCP 23.104.0.1:35048 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:26:31.773 00:05:01.387 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 02:30:31.991 00:00:10.519 TCP 1.101.0.1:3000 -> 22.102.0.1:42736 10 6452 1 2025-09-22 02:30:54.112 00:00:10.319 TCP 23.104.0.1:48104 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:27:31.776 00:05:01.381 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 02:31:40.945 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 02:31:40.624 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 02:31:32.550 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58478 10 6452 1 2025-09-22 02:31:54.469 00:00:10.328 TCP 23.104.0.1:57300 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:32:32.761 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49214 10 6452 1 2025-09-22 02:32:54.833 00:00:10.399 TCP 23.104.0.1:56550 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:33:32.972 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:53650 10 6452 1 2025-09-22 02:33:55.269 00:00:10.368 TCP 23.104.0.1:56522 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:34:33.204 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45110 10 6452 1 2025-09-22 02:34:55.677 00:00:10.365 TCP 23.104.0.1:60440 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:35:33.420 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33096 10 6452 1 2025-09-22 02:35:56.099 00:00:10.368 TCP 23.104.0.1:59852 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:36:40.851 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 02:32:31.774 00:05:01.385 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 02:36:40.665 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 02:36:33.633 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:36164 10 6452 1 2025-09-22 02:36:56.506 00:00:10.363 TCP 23.104.0.1:49020 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:33:31.778 00:05:01.380 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 02:37:33.806 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57292 10 6452 1 2025-09-22 02:37:56.906 00:00:10.366 TCP 23.104.0.1:42014 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:38:34.033 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36236 10 6452 1 2025-09-22 02:38:57.311 00:00:10.361 TCP 23.104.0.1:42616 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:39:34.248 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46828 10 6452 1 2025-09-22 02:39:57.717 00:00:10.326 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:40:34.423 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44402 10 6452 1 2025-09-22 02:40:58.105 00:00:10.365 TCP 23.104.0.1:59954 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:41:40.922 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 02:41:40.952 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 02:41:34.646 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40360 10 6452 1 2025-09-22 02:41:58.511 00:00:10.375 TCP 23.104.0.1:49768 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:38:31.778 00:05:01.383 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 02:42:34.857 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:58408 10 6452 1 2025-09-22 02:42:58.920 00:00:10.375 TCP 23.104.0.1:57322 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:39:31.781 00:05:01.379 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 02:43:35.039 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:32778 10 6452 1 2025-09-22 02:43:59.332 00:00:10.368 TCP 23.104.0.1:37342 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:44:35.250 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53206 10 6452 1 2025-09-22 02:44:59.736 00:00:10.368 TCP 23.104.0.1:50520 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:45:35.462 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58740 10 6452 1 2025-09-22 02:46:00.141 00:00:10.360 TCP 23.104.0.1:58204 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:46:41.092 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 02:46:40.917 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 02:46:35.677 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:58694 10 6452 1 2025-09-22 02:47:00.542 00:00:10.365 TCP 23.104.0.1:35236 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:47:35.849 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:55048 10 6452 1 2025-09-22 02:48:00.951 00:00:10.370 TCP 23.104.0.1:51476 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:44:31.780 00:05:01.383 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 02:48:36.090 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41286 10 6452 1 2025-09-22 02:49:01.359 00:00:10.377 TCP 23.104.0.1:40348 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:45:31.782 00:05:01.377 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 02:49:36.306 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52332 10 6452 1 2025-09-22 02:50:01.773 00:00:10.368 TCP 23.104.0.1:45378 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:50:36.476 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51438 10 6452 1 2025-09-22 02:51:02.179 00:00:10.365 TCP 23.104.0.1:50428 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:51:41.095 00:00:00.045 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 02:51:41.031 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 02:51:36.648 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56928 10 6452 1 2025-09-22 02:52:02.589 00:00:10.366 TCP 23.104.0.1:42254 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:52:36.859 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48332 10 6452 1 2025-09-22 02:53:02.992 00:00:10.328 TCP 23.104.0.1:34094 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:53:37.086 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38118 10 6452 1 2025-09-22 02:54:03.359 00:00:10.322 TCP 23.104.0.1:54102 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:50:31.783 00:05:01.381 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 02:54:37.315 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35776 10 6452 1 2025-09-22 02:55:03.725 00:00:10.366 TCP 23.104.0.1:51558 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:51:31.784 00:05:01.377 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 02:55:37.534 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54550 10 6452 1 2025-09-22 02:56:04.129 00:00:10.365 TCP 23.104.0.1:57174 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:56:41.504 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 02:56:41.557 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 02:56:37.745 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40136 12 10365 1 2025-09-22 02:57:04.534 00:00:10.445 TCP 23.104.0.1:35436 -> 1.101.0.1:3000 15 1926 1 2025-09-22 02:57:37.957 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49426 10 6452 1 2025-09-22 02:58:05.020 00:00:10.322 TCP 23.104.0.1:58198 -> 1.101.0.1:3000 11 1507 1 2025-09-22 02:58:38.184 00:00:10.437 TCP 1.101.0.1:3000 -> 22.102.0.1:37442 10 6452 1 Summary: total flows: 163, total bytes: 509735, total packets: 1577, avg bps: 1091, avg pps: 0, avg bpp: 323 Time window: 2025-09-22 01:56:31 - 2025-09-22 02:58:48 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0021s User: 0.0031s Wall: 0.0024s flows/second: 66556.8 Runtime: 0.0025s