Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-04 20:59:04.280 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:35440 10 6452 1 2025-10-04 20:59:12.350 00:00:10.626 TCP 23.104.0.1:48050 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:00:04.497 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60558 10 6452 1 2025-10-04 21:00:13.029 00:00:10.332 TCP 23.104.0.1:50578 -> 1.101.0.1:3000 11 1507 1 2025-10-04 20:56:37.676 00:05:02.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 21:01:04.721 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:35350 10 6452 1 2025-10-04 21:01:13.392 00:00:10.363 TCP 23.104.0.1:45192 -> 1.101.0.1:3000 11 1507 1 2025-10-04 20:57:37.679 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 21:02:04.890 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58348 10 6452 1 2025-10-04 21:02:13.797 00:00:10.365 TCP 23.104.0.1:60058 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:02:49.868 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 21:02:49.846 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 21:03:05.109 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43986 10 6452 1 2025-10-04 21:03:14.202 00:00:10.416 TCP 23.104.0.1:56226 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:04:05.319 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:50368 10 6452 1 2025-10-04 21:04:14.664 00:00:10.372 TCP 23.104.0.1:54614 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:05:05.493 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56998 10 6452 1 2025-10-04 21:05:15.100 00:00:10.363 TCP 23.104.0.1:37748 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:06:05.707 00:00:10.848 TCP 1.101.0.1:3000 -> 22.102.0.1:48188 10 6452 1 2025-10-04 21:06:15.498 00:00:10.369 TCP 23.104.0.1:53534 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:02:37.676 00:05:02.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 21:07:06.595 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:54132 10 6452 1 2025-10-04 21:07:15.903 00:00:10.369 TCP 23.104.0.1:36216 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:03:37.680 00:05:01.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 21:07:49.644 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 21:07:49.735 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 21:08:06.808 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:34046 10 6452 1 2025-10-04 21:08:16.311 00:00:10.326 TCP 23.104.0.1:37466 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:09:06.979 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:32946 10 6452 1 2025-10-04 21:09:16.680 00:00:10.383 TCP 23.104.0.1:33798 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:10:07.210 00:00:11.088 TCP 1.101.0.1:3000 -> 22.102.0.1:53130 10 6452 1 2025-10-04 21:10:17.106 00:00:10.368 TCP 23.104.0.1:37642 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:11:08.339 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47512 10 6452 1 2025-10-04 21:11:17.521 00:00:10.370 TCP 23.104.0.1:52168 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:12:08.550 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49786 10 6452 1 2025-10-04 21:12:17.919 00:00:10.333 TCP 23.104.0.1:43838 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:08:37.678 00:05:02.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 21:12:49.782 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 21:12:49.841 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 21:13:08.760 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:51232 12 10369 1 2025-10-04 21:13:18.290 00:00:10.400 TCP 23.104.0.1:41320 -> 1.101.0.1:3000 15 1926 1 2025-10-04 21:09:37.682 00:05:01.998 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 21:14:09.002 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36430 10 6452 1 2025-10-04 21:14:18.728 00:00:10.370 TCP 23.104.0.1:46182 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:15:09.218 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55870 10 6452 1 2025-10-04 21:15:19.133 00:00:10.363 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:16:09.437 00:00:10.228 TCP 1.101.0.1:3000 -> 22.102.0.1:50584 12 6544 1 2025-10-04 21:16:19.534 00:00:10.364 TCP 23.104.0.1:58246 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:17:09.651 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39894 10 6452 1 2025-10-04 21:17:19.946 00:00:10.371 TCP 23.104.0.1:56802 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:17:49.815 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 21:17:49.879 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 21:18:09.864 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45322 10 6452 1 2025-10-04 21:18:20.355 00:00:10.368 TCP 23.104.0.1:55516 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:14:37.679 00:05:02.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 21:19:10.084 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59852 10 6452 1 2025-10-04 21:19:20.759 00:00:10.332 TCP 23.104.0.1:51916 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:15:37.683 00:05:01.998 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 21:20:10.301 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:35124 10 6452 1 2025-10-04 21:20:21.131 00:00:10.370 TCP 23.104.0.1:56142 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:21:10.518 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54916 10 6452 1 2025-10-04 21:21:21.539 00:00:10.365 TCP 23.104.0.1:36520 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:22:10.731 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49628 10 6452 1 2025-10-04 21:22:21.939 00:00:10.788 TCP 23.104.0.1:52116 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:22:49.688 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 21:22:50.008 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 21:23:10.942 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:38886 10 6452 1 2025-10-04 21:23:22.763 00:00:10.377 TCP 23.104.0.1:39776 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:24:11.136 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58328 10 6452 1 2025-10-04 21:24:23.177 00:00:10.358 TCP 23.104.0.1:55628 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:20:37.683 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 21:25:11.311 00:00:10.269 TCP 1.101.0.1:3000 -> 22.102.0.1:36568 10 6452 1 2025-10-04 21:25:23.573 00:00:10.364 TCP 23.104.0.1:60754 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:21:37.686 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 21:26:11.618 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58922 10 6452 1 2025-10-04 21:26:23.976 00:00:10.365 TCP 23.104.0.1:54944 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:27:11.827 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37508 10 6452 1 2025-10-04 21:27:24.381 00:00:10.370 TCP 23.104.0.1:47604 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:27:49.882 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 21:27:49.974 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 21:28:12.069 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:55958 10 6452 1 2025-10-04 21:28:24.791 00:00:10.323 TCP 23.104.0.1:46226 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:29:12.272 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50890 10 6452 1 2025-10-04 21:29:25.152 00:00:10.364 TCP 23.104.0.1:38124 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:30:12.492 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58660 10 6452 1 2025-10-04 21:30:25.551 00:00:10.325 TCP 23.104.0.1:33168 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:26:37.684 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 21:31:12.657 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37650 10 6452 1 2025-10-04 21:31:25.915 00:00:10.392 TCP 23.104.0.1:45684 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:27:37.687 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 21:32:12.866 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39074 10 6452 1 2025-10-04 21:32:26.347 00:00:10.323 TCP 23.104.0.1:55640 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:32:50.079 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 21:32:49.956 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 21:33:13.093 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56608 10 6452 1 2025-10-04 21:33:26.711 00:00:10.360 TCP 23.104.0.1:46668 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:34:13.304 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57118 10 6452 1 2025-10-04 21:34:27.107 00:00:10.363 TCP 23.104.0.1:49110 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:35:13.524 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49536 10 6452 1 2025-10-04 21:35:27.508 00:00:10.360 TCP 23.104.0.1:48356 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:36:13.740 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:57118 10 6452 1 2025-10-04 21:36:27.907 00:00:10.362 TCP 23.104.0.1:60344 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:32:37.685 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 21:37:13.946 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:39266 10 6452 1 2025-10-04 21:37:28.307 00:00:10.365 TCP 23.104.0.1:41540 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:33:37.688 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 21:37:50.410 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 21:37:50.296 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 21:38:14.182 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33824 10 6452 1 2025-10-04 21:38:28.708 00:00:10.444 TCP 23.104.0.1:45860 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:39:14.402 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36392 10 6452 1 2025-10-04 21:39:29.186 00:00:10.363 TCP 23.104.0.1:54556 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:40:14.627 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46696 10 6452 1 2025-10-04 21:40:29.591 00:00:10.325 TCP 23.104.0.1:36898 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:41:14.846 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42720 10 6452 1 2025-10-04 21:41:29.961 00:00:10.323 TCP 23.104.0.1:36364 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:42:15.085 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54718 10 6452 1 2025-10-04 21:42:30.326 00:00:10.364 TCP 23.104.0.1:42866 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:38:37.686 00:05:02.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 21:42:50.473 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 21:42:50.324 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 21:43:15.306 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:41548 10 6452 1 2025-10-04 21:39:37.690 00:05:01.995 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 21:43:30.731 00:00:10.371 TCP 23.104.0.1:51776 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:44:15.485 00:00:10.427 TCP 1.101.0.1:3000 -> 22.102.0.1:37322 10 6452 1 2025-10-04 21:44:31.134 00:00:10.381 TCP 23.104.0.1:58022 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:45:15.953 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:60482 10 6452 1 2025-10-04 21:45:31.552 00:00:10.362 TCP 23.104.0.1:54750 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:46:16.146 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51140 10 6452 1 2025-10-04 21:46:31.949 00:00:10.365 TCP 23.104.0.1:53894 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:47:16.360 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60282 10 6452 1 2025-10-04 21:47:50.429 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 21:47:32.354 00:00:10.374 TCP 23.104.0.1:35922 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:47:50.157 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 21:48:16.575 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48950 10 6452 1 2025-10-04 21:44:37.687 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 21:48:32.766 00:00:10.379 TCP 23.104.0.1:57224 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:49:16.788 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:33530 10 6452 1 2025-10-04 21:45:37.689 00:05:01.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 21:49:33.188 00:00:10.372 TCP 23.104.0.1:39066 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:50:16.993 00:00:10.495 TCP 1.101.0.1:3000 -> 22.102.0.1:40598 10 6452 1 2025-10-04 21:50:33.603 00:00:10.363 TCP 23.104.0.1:59164 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:51:17.532 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55766 10 6452 1 2025-10-04 21:51:34.009 00:00:10.597 TCP 23.104.0.1:53524 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:52:17.740 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37716 10 6452 1 2025-10-04 21:52:34.636 00:00:10.377 TCP 23.104.0.1:56366 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:52:50.185 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 21:52:50.632 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 21:53:17.950 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40710 10 6452 1 2025-10-04 21:53:35.054 00:00:10.323 TCP 23.104.0.1:41698 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:54:18.178 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:45620 10 6452 1 2025-10-04 21:50:37.689 00:05:02.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-04 21:54:35.415 00:00:10.325 TCP 23.104.0.1:60550 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:55:18.352 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50402 10 6452 1 2025-10-04 21:51:37.691 00:05:01.996 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-04 21:55:35.779 00:00:10.367 TCP 23.104.0.1:33588 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:56:18.566 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46846 10 6452 1 2025-10-04 21:56:36.184 00:00:10.365 TCP 23.104.0.1:46008 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:57:18.777 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36978 10 6452 1 2025-10-04 21:57:50.796 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-04 21:57:36.589 00:00:10.369 TCP 23.104.0.1:40074 -> 1.101.0.1:3000 11 1507 1 2025-10-04 21:57:50.770 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-04 21:58:18.988 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:41576 10 6452 1 2025-10-04 21:58:36.994 00:00:10.367 TCP 23.104.0.1:39420 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 502776, total packets: 1580, avg bps: 1078, avg pps: 0, avg bpp: 318 Time window: 2025-10-04 20:56:37 - 2025-10-04 21:58:47 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0040s User: 0.0013s Wall: 0.0025s flows/second: 64618.7 Runtime: 0.0026s