Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-22 17:58:59.085 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35508 10 6452 1 2025-09-22 17:59:14.501 00:00:10.387 TCP 23.104.0.1:39208 -> 1.101.0.1:3000 11 1507 1 2025-09-22 17:59:59.306 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:60336 10 6452 1 2025-09-22 18:00:14.923 00:00:10.376 TCP 23.104.0.1:49764 -> 1.101.0.1:3000 11 1507 1 2025-09-22 17:56:32.094 00:05:01.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 18:00:59.476 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37868 10 6452 1 2025-09-22 18:01:15.341 00:00:10.372 TCP 23.104.0.1:45774 -> 1.101.0.1:3000 11 1507 1 2025-09-22 17:57:32.097 00:05:01.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 18:01:59.408 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 18:01:59.455 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 18:01:59.686 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46244 10 6452 1 2025-09-22 18:02:15.750 00:00:10.371 TCP 23.104.0.1:48348 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:02:59.899 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58352 10 6452 1 2025-09-22 18:03:16.165 00:00:10.364 TCP 23.104.0.1:33454 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:04:00.110 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47446 10 6452 1 2025-09-22 18:04:16.572 00:00:10.364 TCP 23.104.0.1:45302 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:05:00.326 00:00:10.431 TCP 1.101.0.1:3000 -> 22.102.0.1:43210 10 6452 1 2025-09-22 18:05:16.974 00:00:10.376 TCP 23.104.0.1:44810 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:06:00.798 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50158 10 6452 1 2025-09-22 18:06:17.373 00:00:10.363 TCP 23.104.0.1:32982 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:02:32.095 00:05:01.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 18:06:59.317 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 18:06:59.080 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 18:07:01.023 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45950 10 6452 1 2025-09-22 18:07:17.771 00:00:10.374 TCP 23.104.0.1:42696 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:03:32.097 00:05:01.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 18:08:01.237 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36236 10 6452 1 2025-09-22 18:08:18.184 00:00:10.364 TCP 23.104.0.1:55874 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:09:01.449 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37466 10 6452 1 2025-09-22 18:09:18.591 00:00:10.365 TCP 23.104.0.1:52222 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:10:01.627 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39892 10 6452 1 2025-09-22 18:10:18.993 00:00:10.376 TCP 23.104.0.1:55796 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:11:01.846 00:00:10.124 TCP 1.101.0.1:3000 -> 22.102.0.1:51644 10 6452 1 2025-09-22 18:11:19.409 00:00:10.325 TCP 23.104.0.1:44870 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:11:59.786 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 18:11:59.763 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 18:12:02.013 00:00:10.240 TCP 1.101.0.1:3000 -> 22.102.0.1:42034 11 6504 1 2025-09-22 18:12:19.775 00:00:10.370 TCP 23.104.0.1:48620 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:08:32.097 00:05:01.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 18:13:02.293 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:37536 10 6452 1 2025-09-22 18:13:20.187 00:00:10.364 TCP 23.104.0.1:55178 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:09:32.099 00:05:01.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 18:14:02.466 00:00:10.507 TCP 1.101.0.1:3000 -> 22.102.0.1:51224 10 6452 1 2025-09-22 18:14:20.589 00:00:10.364 TCP 23.104.0.1:43280 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:15:03.014 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55182 10 6452 1 2025-09-22 18:15:20.994 00:00:10.365 TCP 23.104.0.1:34178 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:16:03.187 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60996 10 6452 1 2025-09-22 18:16:21.403 00:00:10.481 TCP 23.104.0.1:56432 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:16:59.659 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 18:16:59.431 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 18:17:03.408 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42006 10 6452 1 2025-09-22 18:17:21.917 00:00:10.361 TCP 23.104.0.1:55888 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:18:03.620 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:41422 10 6452 1 2025-09-22 18:18:22.318 00:00:10.365 TCP 23.104.0.1:53642 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:14:32.099 00:05:01.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 18:19:03.833 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52440 10 6452 1 2025-09-22 18:15:32.103 00:05:01.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 18:19:22.721 00:00:10.374 TCP 23.104.0.1:39526 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:20:04.078 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54340 10 6452 1 2025-09-22 18:20:23.134 00:00:10.373 TCP 23.104.0.1:44278 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:21:04.288 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45678 10 6452 1 2025-09-22 18:21:23.544 00:00:10.362 TCP 23.104.0.1:34264 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:21:59.884 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 18:21:59.717 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 18:22:04.498 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38094 10 6452 1 2025-09-22 18:22:23.946 00:00:10.369 TCP 23.104.0.1:44640 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:23:04.670 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49274 10 6452 1 2025-09-22 18:23:24.353 00:00:10.375 TCP 23.104.0.1:33132 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:24:04.890 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57186 10 6452 1 2025-09-22 18:20:32.101 00:05:01.369 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 18:24:24.766 00:00:10.336 TCP 23.104.0.1:40350 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:25:05.114 00:00:10.661 TCP 1.101.0.1:3000 -> 22.102.0.1:40784 10 6452 1 2025-09-22 18:25:25.141 00:00:10.364 TCP 23.104.0.1:59660 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:21:32.103 00:05:01.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 18:26:05.813 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:58520 10 6452 1 2025-09-22 18:26:25.545 00:00:10.360 TCP 23.104.0.1:34450 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:27:00.055 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 18:27:00.099 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 18:27:05.993 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34896 10 6452 1 2025-09-22 18:27:25.951 00:00:10.367 TCP 23.104.0.1:50176 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:28:06.208 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50574 10 6452 1 2025-09-22 18:28:26.360 00:00:10.366 TCP 23.104.0.1:53388 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:29:06.428 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35340 10 6452 1 2025-09-22 18:29:26.764 00:00:10.376 TCP 23.104.0.1:37468 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:30:06.651 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34258 10 6452 1 2025-09-22 18:26:32.101 00:05:01.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 18:30:27.184 00:00:10.363 TCP 23.104.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:31:06.861 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:56226 10 6452 1 2025-09-22 18:27:32.103 00:05:01.366 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 18:31:27.585 00:00:10.367 TCP 23.104.0.1:44202 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:32:00.019 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 18:32:00.234 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 18:32:07.095 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58074 10 6452 1 2025-09-22 18:32:27.995 00:00:10.325 TCP 23.104.0.1:37024 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:33:07.308 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35410 10 6452 1 2025-09-22 18:33:28.355 00:00:10.370 TCP 23.104.0.1:38730 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:34:07.525 00:00:10.312 TCP 1.101.0.1:3000 -> 22.102.0.1:41052 10 6452 1 2025-09-22 18:34:28.768 00:00:10.331 TCP 23.104.0.1:34330 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:35:07.877 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47066 10 6452 1 2025-09-22 18:35:29.135 00:00:10.361 TCP 23.104.0.1:37128 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:36:08.104 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57390 10 6452 1 2025-09-22 18:32:32.102 00:05:01.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 18:36:29.535 00:00:10.365 TCP 23.104.0.1:51830 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:37:00.451 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 18:37:00.462 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 18:37:08.279 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57094 10 6452 1 2025-09-22 18:33:32.105 00:05:01.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 18:37:29.942 00:00:10.370 TCP 23.104.0.1:57178 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:38:08.490 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43200 10 6452 1 2025-09-22 18:38:30.354 00:00:10.369 TCP 23.104.0.1:33162 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:39:08.703 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:33560 10 6452 1 2025-09-22 18:39:30.765 00:00:10.365 TCP 23.104.0.1:40574 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:40:08.915 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:54926 10 6452 1 2025-09-22 18:40:31.173 00:00:10.363 TCP 23.104.0.1:52710 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:41:09.111 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40258 10 6452 1 2025-09-22 18:41:31.573 00:00:10.323 TCP 23.104.0.1:55240 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:42:00.039 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 18:42:00.184 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 18:42:09.323 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58288 10 6452 1 2025-09-22 18:38:32.103 00:05:01.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 18:42:31.936 00:00:10.365 TCP 23.104.0.1:48342 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:43:09.542 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:47314 10 6452 1 2025-09-22 18:39:32.108 00:05:01.364 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 18:43:32.341 00:00:10.367 TCP 23.104.0.1:55836 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:44:09.730 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46068 10 6452 1 2025-09-22 18:44:32.747 00:00:10.364 TCP 23.104.0.1:46232 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:45:09.950 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:37392 10 6452 1 2025-09-22 18:45:33.147 00:00:10.365 TCP 23.104.0.1:43990 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:46:10.142 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:45660 12 10365 1 2025-09-22 18:46:33.550 00:00:10.435 TCP 23.104.0.1:53588 -> 1.101.0.1:3000 15 1926 1 2025-09-22 18:47:00.348 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 18:47:00.388 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 18:47:10.380 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40062 10 6452 1 2025-09-22 18:47:34.025 00:00:10.364 TCP 23.104.0.1:35810 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:48:10.549 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34336 10 6452 1 2025-09-22 18:44:32.104 00:05:01.370 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 18:48:34.432 00:00:10.360 TCP 23.104.0.1:53160 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:49:10.718 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51132 10 6452 1 2025-09-22 18:45:32.106 00:05:01.365 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 18:49:34.831 00:00:10.377 TCP 23.104.0.1:56532 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:50:10.930 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40408 10 6452 1 2025-09-22 18:50:35.242 00:00:10.330 TCP 23.104.0.1:60724 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:51:11.161 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:54976 10 6452 1 2025-09-22 18:51:35.608 00:00:10.333 TCP 23.104.0.1:56316 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:52:00.202 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 18:52:00.278 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 18:52:11.326 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49954 10 6452 1 2025-09-22 18:52:35.978 00:00:10.387 TCP 23.104.0.1:33412 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:53:11.540 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34222 10 6452 1 2025-09-22 18:53:36.407 00:00:10.805 TCP 23.104.0.1:45750 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:54:11.751 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55298 10 6452 1 2025-09-22 18:50:32.105 00:05:01.371 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-22 18:54:37.260 00:00:10.364 TCP 23.104.0.1:42252 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:55:11.959 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58964 10 6452 1 2025-09-22 18:51:32.107 00:05:01.367 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-22 18:55:37.664 00:00:10.366 TCP 23.104.0.1:55294 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:56:12.179 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54462 10 6452 1 2025-09-22 18:56:38.096 00:00:10.369 TCP 23.104.0.1:34464 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:57:00.431 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-22 18:57:00.466 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-22 18:57:12.350 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51272 10 6452 1 2025-09-22 18:57:38.501 00:00:10.366 TCP 23.104.0.1:55862 -> 1.101.0.1:3000 11 1507 1 2025-09-22 18:58:12.566 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33920 10 6452 1 2025-09-22 18:58:38.901 00:00:10.368 TCP 23.104.0.1:56682 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502732, total packets: 1579, avg bps: 1076, avg pps: 0, avg bpp: 318 Time window: 2025-09-22 17:56:32 - 2025-09-22 18:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0053s User: 0.0000s Wall: 0.0026s flows/second: 64059.0 Runtime: 0.0026s