Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-30 15:58:54.731 00:00:17.701 TCP 1.101.0.1:3000 -> 22.102.0.1:44446 10 6452 1 2025-09-30 15:58:58.767 00:00:13.830 TCP 23.104.0.1:48938 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:00:02.659 00:00:10.364 TCP 23.104.0.1:59474 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:00:02.476 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50108 10 6452 1 2025-09-30 15:56:35.754 00:05:01.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 16:00:48.105 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 16:00:48.323 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 16:01:02.696 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47038 10 6452 1 2025-09-30 16:01:03.096 00:00:10.367 TCP 23.104.0.1:55580 -> 1.101.0.1:3000 11 1507 1 2025-09-30 15:57:35.758 00:05:01.687 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 16:02:03.496 00:00:10.365 TCP 23.104.0.1:43522 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:02:02.905 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35282 10 6452 1 2025-09-30 16:03:03.905 00:00:10.440 TCP 23.104.0.1:44988 -> 1.101.0.1:3000 15 1926 1 2025-09-30 16:03:03.119 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:53934 13 13949 1 2025-09-30 16:04:03.322 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:42140 10 6452 1 2025-09-30 16:04:04.383 00:00:10.360 TCP 23.104.0.1:36522 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:05:03.492 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36464 10 6452 1 2025-09-30 16:05:04.781 00:00:10.367 TCP 23.104.0.1:41398 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:05:48.037 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 16:05:48.146 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 16:06:03.711 00:00:10.726 TCP 1.101.0.1:3000 -> 22.102.0.1:59440 10 6452 1 2025-09-30 16:06:05.190 00:00:10.374 TCP 23.104.0.1:33128 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:02:35.754 00:05:01.693 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 16:07:05.599 00:00:10.329 TCP 23.104.0.1:37644 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:07:04.479 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47512 10 6452 1 2025-09-30 16:03:35.758 00:05:01.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 16:08:05.965 00:00:10.372 TCP 23.104.0.1:59878 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:08:04.687 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47942 10 6452 1 2025-09-30 16:09:04.855 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:38998 10 6452 1 2025-09-30 16:09:06.373 00:00:10.321 TCP 23.104.0.1:47930 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:10:05.098 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:41536 10 6452 1 2025-09-30 16:10:06.734 00:00:10.371 TCP 23.104.0.1:46006 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:10:48.280 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 16:10:47.837 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 16:11:05.318 00:00:24.270 TCP 1.101.0.1:3000 -> 22.102.0.1:54764 11 6504 1 2025-09-30 16:11:07.142 00:00:22.602 TCP 23.104.0.1:38614 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:12:19.795 00:00:10.441 TCP 23.104.0.1:46442 -> 1.101.0.1:3000 15 1926 1 2025-09-30 16:12:19.622 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:46392 12 10375 1 2025-09-30 16:08:35.757 00:05:01.692 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 16:13:20.277 00:00:10.368 TCP 23.104.0.1:37406 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:13:19.875 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48684 10 6452 1 2025-09-30 16:09:35.759 00:05:01.686 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 16:14:20.682 00:00:10.368 TCP 23.104.0.1:40908 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:14:20.100 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46286 10 6452 1 2025-09-30 16:15:21.100 00:00:10.325 TCP 23.104.0.1:36540 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:15:20.336 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45712 10 6452 1 2025-09-30 16:15:48.155 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 16:15:48.113 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 16:16:20.555 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53692 10 6452 1 2025-09-30 16:16:21.465 00:00:10.363 TCP 23.104.0.1:36272 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:17:20.776 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:36058 12 10375 1 2025-09-30 16:17:21.866 00:00:10.398 TCP 23.104.0.1:43624 -> 1.101.0.1:3000 15 1926 1 2025-09-30 16:18:21.025 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36226 10 6452 1 2025-09-30 16:18:22.303 00:00:10.374 TCP 23.104.0.1:52414 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:14:35.757 00:05:01.691 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 16:19:21.244 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44632 10 6452 1 2025-09-30 16:19:22.710 00:00:10.371 TCP 23.104.0.1:34604 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:15:35.760 00:05:01.686 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 16:20:21.456 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51072 10 6452 1 2025-09-30 16:20:23.120 00:00:10.953 TCP 23.104.0.1:37436 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:20:48.408 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 16:20:48.428 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 16:21:21.668 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49638 10 6452 1 2025-09-30 16:21:24.117 00:00:11.057 TCP 23.104.0.1:58192 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:22:21.888 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43966 10 6452 1 2025-09-30 16:22:25.212 00:00:10.477 TCP 23.104.0.1:40224 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:23:22.073 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50024 10 6452 1 2025-09-30 16:23:25.731 00:00:10.640 TCP 23.104.0.1:53138 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:24:22.301 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33240 10 6452 1 2025-09-30 16:24:26.410 00:00:10.324 TCP 23.104.0.1:55044 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:20:35.759 00:05:01.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 16:25:22.523 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52782 10 6452 1 2025-09-30 16:25:26.773 00:00:10.369 TCP 23.104.0.1:56046 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:21:35.763 00:05:01.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 16:25:48.389 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 16:25:48.473 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 16:26:22.737 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55624 10 6452 1 2025-09-30 16:26:27.177 00:00:10.367 TCP 23.104.0.1:38018 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:27:22.946 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:34450 10 6452 1 2025-09-30 16:27:27.582 00:00:10.366 TCP 23.104.0.1:58568 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:28:23.188 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:50310 10 6452 1 2025-09-30 16:28:27.985 00:00:10.373 TCP 23.104.0.1:46598 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:29:23.364 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34214 10 6452 1 2025-09-30 16:29:28.406 00:00:10.356 TCP 23.104.0.1:45208 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:30:23.578 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37694 10 6452 1 2025-09-30 16:26:35.762 00:05:01.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 16:30:28.800 00:00:10.324 TCP 23.104.0.1:33790 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:30:48.739 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 16:30:48.680 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 16:31:23.793 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37092 10 6452 1 2025-09-30 16:27:35.766 00:05:01.689 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 16:31:29.168 00:00:10.367 TCP 23.104.0.1:40604 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:32:24.007 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48038 10 6452 1 2025-09-30 16:32:29.577 00:00:10.377 TCP 23.104.0.1:54778 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:33:24.228 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49920 10 6452 1 2025-09-30 16:33:29.991 00:00:10.399 TCP 23.104.0.1:47788 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:34:24.393 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46252 10 6452 1 2025-09-30 16:34:30.425 00:00:10.371 TCP 23.104.0.1:54294 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:35:24.604 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33982 10 6452 1 2025-09-30 16:35:30.834 00:00:10.377 TCP 23.104.0.1:51318 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:35:48.423 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 16:35:48.419 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 16:36:24.811 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45342 10 6452 1 2025-09-30 16:36:31.253 00:00:10.366 TCP 23.104.0.1:42532 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:32:35.764 00:05:01.694 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 16:37:25.047 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45340 10 6452 1 2025-09-30 16:33:35.766 00:05:01.688 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 16:37:31.668 00:00:10.362 TCP 23.104.0.1:33526 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:38:25.263 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44734 10 6452 1 2025-09-30 16:38:32.095 00:00:10.331 TCP 23.104.0.1:51110 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:39:25.484 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46366 10 6452 1 2025-09-30 16:39:32.478 00:00:10.366 TCP 23.104.0.1:39106 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:40:25.697 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55780 10 6452 1 2025-09-30 16:40:32.883 00:00:10.381 TCP 23.104.0.1:47526 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:40:48.700 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 16:40:48.739 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 16:41:25.910 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53620 10 6452 1 2025-09-30 16:41:33.305 00:00:10.362 TCP 23.104.0.1:53906 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:42:26.123 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55556 10 6452 1 2025-09-30 16:38:35.767 00:05:01.691 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 16:42:33.709 00:00:10.381 TCP 23.104.0.1:47456 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:43:26.337 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51544 10 6452 1 2025-09-30 16:39:35.769 00:05:01.686 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 16:43:34.131 00:00:10.454 TCP 23.104.0.1:45640 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:44:26.556 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40300 10 6452 1 2025-09-30 16:44:34.624 00:00:10.364 TCP 23.104.0.1:43024 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:45:26.772 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54650 10 6452 1 2025-09-30 16:45:35.029 00:00:10.363 TCP 23.104.0.1:33140 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:45:48.915 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 16:45:48.834 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 16:46:26.996 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36902 10 6452 1 2025-09-30 16:46:35.430 00:00:10.368 TCP 23.104.0.1:33388 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:47:27.221 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41892 10 6452 1 2025-09-30 16:47:35.833 00:00:10.393 TCP 23.104.0.1:44784 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:48:27.430 00:00:10.764 TCP 1.101.0.1:3000 -> 22.102.0.1:42646 10 6452 1 2025-09-30 16:44:35.768 00:05:01.705 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 16:48:36.261 00:00:10.362 TCP 23.104.0.1:48646 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:49:28.235 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:34800 10 6452 1 2025-09-30 16:45:35.771 00:05:01.700 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 16:49:36.662 00:00:10.364 TCP 23.104.0.1:60260 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:50:28.456 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36768 10 6452 1 2025-09-30 16:50:48.800 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 16:50:37.092 00:00:10.367 TCP 23.104.0.1:34236 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:50:48.848 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 16:51:28.663 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42658 10 6452 1 2025-09-30 16:51:37.494 00:00:10.363 TCP 23.104.0.1:59912 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:52:28.888 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35550 10 6452 1 2025-09-30 16:52:37.895 00:00:10.325 TCP 23.104.0.1:50374 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:53:29.107 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56246 10 6452 1 2025-09-30 16:53:38.260 00:00:10.382 TCP 23.104.0.1:47076 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:54:29.286 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37404 10 6452 1 2025-09-30 16:50:35.771 00:05:01.704 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-30 16:54:38.682 00:00:10.371 TCP 23.104.0.1:33786 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:55:29.502 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:59218 10 6452 1 2025-09-30 16:51:35.775 00:05:01.699 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-30 16:55:48.921 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-30 16:55:39.105 00:00:10.321 TCP 23.104.0.1:35666 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:55:49.107 00:00:00.029 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-30 16:56:29.667 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:57128 10 6452 1 2025-09-30 16:56:39.467 00:00:10.339 TCP 23.104.0.1:49168 -> 1.101.0.1:3000 11 1507 1 2025-09-30 16:57:29.834 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:47106 12 10369 1 2025-09-30 16:57:39.849 00:00:10.455 TCP 23.104.0.1:47820 -> 1.101.0.1:3000 15 1926 1 2025-09-30 16:58:30.100 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53712 10 6452 1 2025-09-30 16:58:40.345 00:00:10.325 TCP 23.104.0.1:40366 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 519336, total packets: 1598, avg bps: 1112, avg pps: 0, avg bpp: 324 Time window: 2025-09-30 15:56:35 - 2025-09-30 16:58:50 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0027s User: 0.0027s Wall: 0.0021s flows/second: 79457.8 Runtime: 0.0021s