Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-01 20:58:54.628 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57908 10 6452 1 2025-10-01 20:59:32.906 00:00:10.365 TCP 23.104.0.1:50562 -> 1.101.0.1:3000 11 1507 1 2025-10-01 20:59:54.804 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46316 10 6452 1 2025-10-01 20:56:36.294 00:05:01.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 21:00:33.320 00:00:10.364 TCP 23.104.0.1:34304 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:00:55.037 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58700 10 6452 1 2025-10-01 21:01:22.842 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 21:01:23.018 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 20:57:36.295 00:05:01.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 21:01:33.721 00:00:10.367 TCP 23.104.0.1:54972 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:01:55.251 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43622 10 6452 1 2025-10-01 21:02:34.127 00:00:10.436 TCP 23.104.0.1:37772 -> 1.101.0.1:3000 15 1926 1 2025-10-01 21:02:55.461 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:54500 12 10375 1 2025-10-01 21:03:34.600 00:00:10.364 TCP 23.104.0.1:52920 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:03:55.708 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:53844 10 6452 1 2025-10-01 21:04:35.005 00:00:10.362 TCP 23.104.0.1:43544 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:04:55.889 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49948 10 6452 1 2025-10-01 21:05:35.403 00:00:10.363 TCP 23.104.0.1:44192 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:05:56.114 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58134 10 6452 1 2025-10-01 21:06:23.208 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 21:06:23.296 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 21:02:36.293 00:05:01.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 21:06:35.805 00:00:10.333 TCP 23.104.0.1:40232 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:06:56.335 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33350 10 6452 1 2025-10-01 21:03:36.295 00:05:01.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 21:07:36.178 00:00:10.365 TCP 23.104.0.1:53450 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:07:56.556 00:00:10.331 TCP 1.101.0.1:3000 -> 22.102.0.1:48640 10 6452 1 2025-10-01 21:08:36.575 00:00:10.630 TCP 23.104.0.1:49566 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:08:56.927 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:60910 10 6452 1 2025-10-01 21:09:37.248 00:00:10.361 TCP 23.104.0.1:49422 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:09:57.153 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55762 10 6452 1 2025-10-01 21:10:37.649 00:00:10.363 TCP 23.104.0.1:36144 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:10:57.370 00:00:10.759 TCP 1.101.0.1:3000 -> 22.102.0.1:39704 10 6452 1 2025-10-01 21:11:23.104 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 21:11:22.974 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 21:11:38.051 00:00:10.364 TCP 23.104.0.1:37284 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:11:58.177 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46530 10 6452 1 2025-10-01 21:08:36.294 00:05:01.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 21:12:38.453 00:00:10.441 TCP 23.104.0.1:52304 -> 1.101.0.1:3000 15 1926 1 2025-10-01 21:12:58.398 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:35906 12 10375 1 2025-10-01 21:09:36.297 00:05:01.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 21:13:38.936 00:00:10.378 TCP 23.104.0.1:40640 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:13:58.644 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33710 10 6452 1 2025-10-01 21:14:39.350 00:00:10.370 TCP 23.104.0.1:37720 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:14:58.850 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46912 10 6452 1 2025-10-01 21:15:39.755 00:00:10.377 TCP 23.104.0.1:46280 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:15:59.030 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40540 10 6452 1 2025-10-01 21:16:23.229 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 21:16:23.300 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 21:16:40.172 00:00:10.366 TCP 23.104.0.1:51598 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:16:59.242 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36264 10 6452 1 2025-10-01 21:17:40.574 00:00:10.372 TCP 23.104.0.1:33124 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:17:59.422 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38454 10 6452 1 2025-10-01 21:14:36.295 00:05:01.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 21:18:40.996 00:00:10.365 TCP 23.104.0.1:60330 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:18:59.633 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37702 10 6452 1 2025-10-01 21:15:36.297 00:05:01.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 21:19:41.407 00:00:10.376 TCP 23.104.0.1:60342 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:19:59.853 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43248 10 6452 1 2025-10-01 21:20:41.821 00:00:10.375 TCP 23.104.0.1:49718 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:21:00.090 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50770 10 6452 1 2025-10-01 21:21:23.354 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 21:21:23.172 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 21:21:42.232 00:00:10.324 TCP 23.104.0.1:51910 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:22:00.306 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52388 10 6452 1 2025-10-01 21:22:42.590 00:00:10.323 TCP 23.104.0.1:60412 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:23:00.524 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33984 10 6452 1 2025-10-01 21:23:42.962 00:00:10.373 TCP 23.104.0.1:34398 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:24:00.745 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35464 10 6452 1 2025-10-01 21:20:36.295 00:05:01.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 21:24:43.371 00:00:10.364 TCP 23.104.0.1:59998 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:25:00.970 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:42512 10 6452 1 2025-10-01 21:21:36.297 00:05:01.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 21:25:43.770 00:00:10.371 TCP 23.104.0.1:51926 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:26:01.220 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:53942 10 6452 1 2025-10-01 21:26:23.605 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 21:26:23.540 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 21:26:44.176 00:00:10.362 TCP 23.104.0.1:36480 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:27:01.444 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44390 10 6452 1 2025-10-01 21:27:44.578 00:00:10.322 TCP 23.104.0.1:46124 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:28:01.654 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44676 10 6452 1 2025-10-01 21:28:44.939 00:00:10.372 TCP 23.104.0.1:55304 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:29:01.877 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58150 10 6452 1 2025-10-01 21:29:45.352 00:00:10.367 TCP 23.104.0.1:57712 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:30:02.101 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34674 10 6452 1 2025-10-01 21:26:36.295 00:05:01.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 21:30:45.758 00:00:10.381 TCP 23.104.0.1:34182 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:31:02.271 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:40584 10 6452 1 2025-10-01 21:31:23.308 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 21:31:23.495 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 21:27:36.298 00:05:01.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 21:31:46.174 00:00:10.364 TCP 23.104.0.1:35954 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:32:02.443 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59364 10 6452 1 2025-10-01 21:32:46.579 00:00:10.366 TCP 23.104.0.1:37916 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:33:02.660 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:37854 10 6452 1 2025-10-01 21:33:46.985 00:00:10.361 TCP 23.104.0.1:35308 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:34:02.834 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52112 10 6452 1 2025-10-01 21:34:47.387 00:00:10.364 TCP 23.104.0.1:51416 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:35:03.074 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42422 10 6452 1 2025-10-01 21:35:47.789 00:00:10.368 TCP 23.104.0.1:41732 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:36:03.305 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39140 10 6452 1 2025-10-01 21:36:23.697 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 21:36:23.746 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 21:32:36.297 00:05:01.795 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 21:36:48.193 00:00:10.369 TCP 23.104.0.1:37748 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:37:03.521 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43082 10 6452 1 2025-10-01 21:33:36.301 00:05:01.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 21:37:48.599 00:00:10.322 TCP 23.104.0.1:33610 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:38:03.732 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:57266 10 6452 1 2025-10-01 21:38:48.962 00:00:10.372 TCP 23.104.0.1:42246 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:39:03.940 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:43666 10 6452 1 2025-10-01 21:39:49.374 00:00:10.314 TCP 23.104.0.1:56268 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:40:04.173 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33218 10 6452 1 2025-10-01 21:40:49.728 00:00:10.367 TCP 23.104.0.1:46670 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:41:04.388 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54092 10 6452 1 2025-10-01 21:41:23.603 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 21:41:23.483 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 21:41:50.134 00:00:10.362 TCP 23.104.0.1:51398 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:42:04.601 00:00:10.910 TCP 1.101.0.1:3000 -> 22.102.0.1:46738 10 6452 1 2025-10-01 21:38:36.299 00:05:01.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 21:42:50.532 00:00:10.323 TCP 23.104.0.1:57878 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:43:05.548 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52012 10 6452 1 2025-10-01 21:39:36.302 00:05:01.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 21:43:50.896 00:00:10.704 TCP 23.104.0.1:35478 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:44:05.765 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51840 10 6452 1 2025-10-01 21:44:51.639 00:00:10.323 TCP 23.104.0.1:60724 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:45:05.982 00:00:10.149 TCP 1.101.0.1:3000 -> 22.102.0.1:58410 10 6452 1 2025-10-01 21:45:52.007 00:00:10.537 TCP 23.104.0.1:41014 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:46:06.170 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38150 10 6452 1 2025-10-01 21:46:23.769 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 21:46:23.644 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 21:46:52.579 00:00:10.365 TCP 23.104.0.1:60744 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:47:06.341 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47546 10 6452 1 2025-10-01 21:47:52.986 00:00:10.370 TCP 23.104.0.1:33560 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:48:06.558 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35846 10 6452 1 2025-10-01 21:44:36.299 00:05:01.794 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 21:48:53.395 00:00:10.368 TCP 23.104.0.1:55404 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:49:06.769 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:53712 10 6452 1 2025-10-01 21:45:36.304 00:05:01.788 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 21:49:53.802 00:00:10.370 TCP 23.104.0.1:58346 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:50:06.938 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:54944 10 6452 1 2025-10-01 21:50:54.213 00:00:10.326 TCP 23.104.0.1:52418 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:51:07.180 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52252 10 6452 1 2025-10-01 21:51:23.907 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 21:51:23.914 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 21:51:54.576 00:00:10.365 TCP 23.104.0.1:45976 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:52:07.392 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51574 10 6452 1 2025-10-01 21:52:54.980 00:00:10.368 TCP 23.104.0.1:45886 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:53:07.615 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43744 10 6452 1 2025-10-01 21:53:55.388 00:00:10.675 TCP 23.104.0.1:55636 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:54:07.826 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48222 10 6452 1 2025-10-01 21:50:36.304 00:05:01.797 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-01 21:54:56.111 00:00:10.360 TCP 23.104.0.1:49216 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:55:07.996 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54848 10 6452 1 2025-10-01 21:51:36.306 00:05:01.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-01 21:55:56.510 00:00:10.363 TCP 23.104.0.1:55268 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:56:23.943 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-01 21:56:08.217 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60360 10 6452 1 2025-10-01 21:56:24.016 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-01 21:56:56.913 00:00:10.360 TCP 23.104.0.1:57498 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:57:08.429 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39906 10 6452 1 2025-10-01 21:57:57.314 00:00:10.364 TCP 23.104.0.1:39352 -> 1.101.0.1:3000 11 1507 1 2025-10-01 21:58:08.645 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53356 10 6452 1 Summary: total flows: 163, total bytes: 505525, total packets: 1573, avg bps: 1092, avg pps: 0, avg bpp: 321 Time window: 2025-10-01 20:56:36 - 2025-10-01 21:58:18 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0038s User: 0.0000s Wall: 0.0030s flows/second: 53832.4 Runtime: 0.0030s