Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-29 22:58:53.961 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35372 10 6452 1 2025-09-29 22:59:11.907 00:00:10.367 TCP 23.104.0.1:34674 -> 1.101.0.1:3000 11 1507 1 2025-09-29 22:59:54.182 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:56992 10 6452 1 2025-09-29 23:00:12.310 00:00:10.371 TCP 23.104.0.1:45850 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:00:27.591 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 23:00:27.651 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 22:56:35.444 00:05:01.664 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 23:00:54.389 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57472 10 6452 1 2025-09-29 23:01:12.713 00:00:10.434 TCP 23.104.0.1:40708 -> 1.101.0.1:3000 11 1507 1 2025-09-29 22:57:35.445 00:05:01.659 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 23:01:54.601 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50156 10 6452 1 2025-09-29 23:02:13.190 00:00:10.365 TCP 23.104.0.1:37244 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:02:54.832 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47788 10 6452 1 2025-09-29 23:03:13.587 00:00:10.364 TCP 23.104.0.1:37334 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:03:55.067 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38880 10 6452 1 2025-09-29 23:04:13.993 00:00:10.333 TCP 23.104.0.1:40838 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:04:55.290 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32976 10 6452 1 2025-09-29 23:05:14.383 00:00:10.372 TCP 23.104.0.1:54428 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:05:27.638 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 23:05:27.586 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 23:05:55.501 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43274 10 6452 1 2025-09-29 23:06:14.793 00:00:11.151 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:02:35.444 00:05:01.666 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 23:06:55.723 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:34818 10 6452 1 2025-09-29 23:07:15.980 00:00:10.398 TCP 23.104.0.1:42690 -> 1.101.0.1:3000 15 1926 1 2025-09-29 23:03:35.447 00:05:01.661 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 23:07:55.913 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:55284 12 10375 1 2025-09-29 23:08:16.418 00:00:10.325 TCP 23.104.0.1:36622 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:08:56.157 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41130 10 6452 1 2025-09-29 23:09:16.781 00:00:10.374 TCP 23.104.0.1:33158 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:09:56.371 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54410 10 6452 1 2025-09-29 23:10:28.017 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 23:10:17.198 00:00:10.329 TCP 23.104.0.1:53826 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:10:27.841 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 23:10:56.592 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44924 10 6452 1 2025-09-29 23:11:17.563 00:00:10.360 TCP 23.104.0.1:46428 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:11:56.835 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49904 10 6452 1 2025-09-29 23:12:17.963 00:00:10.368 TCP 23.104.0.1:48554 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:08:35.448 00:05:01.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 23:12:57.077 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:43260 10 6452 1 2025-09-29 23:13:18.368 00:00:10.364 TCP 23.104.0.1:34518 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:09:35.449 00:05:01.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 23:13:57.298 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58432 10 6452 1 2025-09-29 23:14:18.768 00:00:10.340 TCP 23.104.0.1:45188 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:14:57.525 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:54260 10 6452 1 2025-09-29 23:15:27.777 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 23:15:27.624 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 23:15:19.144 00:00:10.362 TCP 23.104.0.1:49880 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:15:57.706 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58012 10 6452 1 2025-09-29 23:16:19.549 00:00:10.362 TCP 23.104.0.1:49102 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:16:57.926 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:58326 10 6452 1 2025-09-29 23:17:19.950 00:00:10.362 TCP 23.104.0.1:50366 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:17:58.122 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58808 10 6452 1 2025-09-29 23:18:20.346 00:00:10.362 TCP 23.104.0.1:48106 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:14:35.447 00:05:01.670 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 23:18:58.343 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45098 10 6452 1 2025-09-29 23:19:20.751 00:00:10.327 TCP 23.104.0.1:60258 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:15:35.450 00:05:01.664 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 23:19:58.567 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51322 10 6452 1 2025-09-29 23:20:28.236 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 23:20:28.091 00:00:00.051 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 23:20:21.116 00:00:10.365 TCP 23.104.0.1:50686 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:20:58.791 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39296 10 6452 1 2025-09-29 23:21:21.522 00:00:10.358 TCP 23.104.0.1:45668 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:21:59.026 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:38670 10 6452 1 2025-09-29 23:22:21.918 00:00:10.388 TCP 23.104.0.1:58410 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:22:59.278 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40414 10 6452 1 2025-09-29 23:23:22.340 00:00:10.366 TCP 23.104.0.1:54608 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:23:59.497 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:54738 10 6452 1 2025-09-29 23:24:22.745 00:00:10.363 TCP 23.104.0.1:43520 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:20:35.449 00:05:01.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 23:24:59.706 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49570 10 6452 1 2025-09-29 23:25:27.832 00:00:00.013 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 23:25:27.936 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 23:25:23.147 00:00:10.364 TCP 23.104.0.1:56816 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:21:35.453 00:05:01.662 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 23:25:59.874 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40528 10 6452 1 2025-09-29 23:26:23.551 00:00:10.330 TCP 23.104.0.1:53784 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:27:00.100 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:40360 10 6452 1 2025-09-29 23:27:23.923 00:00:10.379 TCP 23.104.0.1:43790 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:28:00.324 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35956 10 6452 1 2025-09-29 23:28:24.346 00:00:10.324 TCP 23.104.0.1:55406 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:29:00.534 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43794 10 6452 1 2025-09-29 23:29:24.713 00:00:10.380 TCP 23.104.0.1:54426 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:30:00.748 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59670 10 6452 1 2025-09-29 23:30:28.102 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 23:30:28.121 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 23:30:25.138 00:00:10.377 TCP 23.104.0.1:34730 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:26:35.451 00:05:01.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 23:31:00.962 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36562 10 6452 1 2025-09-29 23:31:25.573 00:00:10.373 TCP 23.104.0.1:40024 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:27:35.454 00:05:01.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 23:32:01.184 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41620 10 6452 1 2025-09-29 23:32:25.982 00:00:10.366 TCP 23.104.0.1:53348 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:33:01.398 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43862 10 6452 1 2025-09-29 23:33:26.387 00:00:10.653 TCP 23.104.0.1:50688 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:34:01.606 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55316 10 6452 1 2025-09-29 23:34:27.111 00:00:10.366 TCP 23.104.0.1:56156 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:35:01.818 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47238 10 6452 1 2025-09-29 23:35:27.998 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 23:35:28.167 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 23:35:27.517 00:00:10.553 TCP 23.104.0.1:33662 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:36:02.068 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35956 10 6452 1 2025-09-29 23:36:28.105 00:00:10.363 TCP 23.104.0.1:46886 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:32:35.454 00:05:01.666 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 23:37:02.283 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33644 10 6452 1 2025-09-29 23:33:35.456 00:05:01.663 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 23:37:28.504 00:00:10.369 TCP 23.104.0.1:42898 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:38:02.504 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:56364 10 6452 1 2025-09-29 23:38:28.909 00:00:10.371 TCP 23.104.0.1:39158 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:39:02.685 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41344 10 6452 1 2025-09-29 23:39:29.314 00:00:10.367 TCP 23.104.0.1:47860 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:40:02.902 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43068 10 6452 1 2025-09-29 23:40:28.188 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 23:40:28.545 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 23:40:29.717 00:00:10.371 TCP 23.104.0.1:48236 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:41:03.121 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56168 10 6452 1 2025-09-29 23:41:30.126 00:00:10.366 TCP 23.104.0.1:48618 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:42:03.333 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42230 10 6452 1 2025-09-29 23:38:35.454 00:05:01.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 23:42:30.529 00:00:10.978 TCP 23.104.0.1:52750 -> 1.101.0.1:3000 15 1926 1 2025-09-29 23:43:03.545 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:33704 12 10375 1 2025-09-29 23:43:31.547 00:00:10.362 TCP 23.104.0.1:57588 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:39:35.459 00:05:01.661 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 23:44:03.741 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48222 10 6452 1 2025-09-29 23:44:31.945 00:00:10.367 TCP 23.104.0.1:33396 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:45:03.916 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57898 10 6452 1 2025-09-29 23:45:28.628 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 23:45:28.601 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 23:45:32.353 00:00:10.375 TCP 23.104.0.1:52114 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:46:04.132 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57206 10 6452 1 2025-09-29 23:46:32.768 00:00:10.371 TCP 23.104.0.1:42482 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:47:04.304 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35728 10 6452 1 2025-09-29 23:47:33.179 00:00:10.367 TCP 23.104.0.1:55740 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:48:04.543 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33106 10 6452 1 2025-09-29 23:44:35.456 00:05:01.667 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 23:48:33.587 00:00:10.321 TCP 23.104.0.1:37538 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:49:04.752 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58068 10 6452 1 2025-09-29 23:45:35.459 00:05:01.662 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 23:49:33.949 00:00:10.365 TCP 23.104.0.1:49050 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:50:04.962 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51352 12 6556 1 2025-09-29 23:50:28.449 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 23:50:28.194 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 23:50:34.352 00:00:10.367 TCP 23.104.0.1:46034 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:51:05.187 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54330 10 6452 1 2025-09-29 23:51:34.757 00:00:10.379 TCP 23.104.0.1:55998 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:52:05.397 00:00:10.691 TCP 1.101.0.1:3000 -> 22.102.0.1:35328 10 6452 1 2025-09-29 23:52:35.178 00:00:10.361 TCP 23.104.0.1:52856 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:53:06.129 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59304 10 6452 1 2025-09-29 23:53:35.576 00:00:10.361 TCP 23.104.0.1:48218 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:54:06.342 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57164 10 6452 1 2025-09-29 23:50:35.458 00:05:01.668 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-29 23:54:35.992 00:00:10.822 TCP 23.104.0.1:43918 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:55:06.553 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47848 10 6452 1 2025-09-29 23:55:28.568 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-29 23:55:28.745 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-29 23:51:35.461 00:05:01.662 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-29 23:55:36.855 00:00:10.334 TCP 23.104.0.1:54910 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:56:06.725 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60644 10 6452 1 2025-09-29 23:56:37.227 00:00:10.328 TCP 23.104.0.1:53226 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:57:06.935 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:47650 10 6452 1 2025-09-29 23:57:37.588 00:00:10.367 TCP 23.104.0.1:55888 -> 1.101.0.1:3000 11 1507 1 2025-09-29 23:58:07.168 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47332 10 6452 1 2025-09-29 23:58:37.993 00:00:10.367 TCP 23.104.0.1:35806 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507136, total packets: 1586, avg bps: 1086, avg pps: 0, avg bpp: 319 Time window: 2025-09-29 22:56:35 - 2025-09-29 23:58:48 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0015s Wall: 0.0029s flows/second: 56609.8 Runtime: 0.0029s