Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-11 20:58:43.646 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34926 10 6452 1 2025-10-11 20:59:02.095 00:00:10.362 TCP 23.104.0.1:34992 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:59:43.872 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:51994 10 6452 1 2025-10-11 21:00:02.499 00:00:10.366 TCP 23.104.0.1:55958 -> 1.101.0.1:3000 11 1507 1 2025-10-11 20:56:40.904 00:05:02.403 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 20:56:40.903 00:05:02.407 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 21:00:44.114 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:47598 12 10375 1 2025-10-11 21:01:11.493 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 21:01:11.390 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 21:01:02.904 00:00:10.445 TCP 23.104.0.1:58188 -> 1.101.0.1:3000 15 1926 1 2025-10-11 21:01:44.357 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41758 10 6452 1 2025-10-11 21:02:03.391 00:00:10.325 TCP 23.104.0.1:38634 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:02:44.570 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38750 10 6452 1 2025-10-11 21:03:03.755 00:00:10.369 TCP 23.104.0.1:55658 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:03:44.780 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38558 10 6452 1 2025-10-11 21:04:04.163 00:00:10.367 TCP 23.104.0.1:57844 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:04:44.953 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:59430 10 6452 1 2025-10-11 21:05:04.577 00:00:10.367 TCP 23.104.0.1:47764 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:05:45.143 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33244 10 6452 1 2025-10-11 21:06:11.903 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 21:06:11.840 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 21:06:04.981 00:00:10.362 TCP 23.104.0.1:37532 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:02:40.907 00:05:02.409 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 21:02:40.905 00:05:02.414 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 21:06:45.357 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32814 10 6452 1 2025-10-11 21:07:05.393 00:00:10.319 TCP 23.104.0.1:55776 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:07:45.570 00:00:25.016 TCP 1.101.0.1:3000 -> 22.102.0.1:45298 10 6452 1 2025-10-11 21:08:05.752 00:00:11.368 TCP 23.104.0.1:34246 -> 1.101.0.1:3000 13 1611 1 2025-10-11 21:09:00.628 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55282 10 6452 1 2025-10-11 21:09:07.209 00:00:10.320 TCP 23.104.0.1:55312 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:10:00.862 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:55666 10 6452 1 2025-10-11 21:10:07.566 00:00:10.365 TCP 23.104.0.1:48510 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:11:01.101 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:43988 12 10369 1 2025-10-11 21:11:11.893 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 21:11:11.694 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 21:11:07.974 00:00:10.401 TCP 23.104.0.1:41302 -> 1.101.0.1:3000 15 1926 1 2025-10-11 21:12:01.298 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49166 10 6452 1 2025-10-11 21:12:08.416 00:00:10.321 TCP 23.104.0.1:43180 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:08:40.909 00:05:02.411 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 21:08:40.911 00:05:02.406 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 21:13:01.519 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:53056 10 6452 1 2025-10-11 21:13:08.775 00:00:10.323 TCP 23.104.0.1:41358 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:14:01.739 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:38662 10 6452 1 2025-10-11 21:14:09.137 00:00:10.364 TCP 23.104.0.1:44384 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:15:01.926 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:55718 10 6452 1 2025-10-11 21:15:09.541 00:00:10.319 TCP 23.104.0.1:52140 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:16:11.859 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 21:16:11.958 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 21:16:02.180 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:56114 10 6452 1 2025-10-11 21:16:09.899 00:00:10.366 TCP 23.104.0.1:38040 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:17:02.359 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37118 10 6452 1 2025-10-11 21:17:10.310 00:00:10.364 TCP 23.104.0.1:54878 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:18:02.536 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45268 10 6452 1 2025-10-11 21:18:10.709 00:00:10.325 TCP 23.104.0.1:58664 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:14:40.914 00:05:02.407 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 21:14:40.911 00:05:02.413 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 21:19:02.751 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:58114 10 6452 1 2025-10-11 21:19:11.100 00:00:10.363 TCP 23.104.0.1:34042 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:20:02.917 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39918 10 6452 1 2025-10-11 21:20:11.506 00:00:10.322 TCP 23.104.0.1:59034 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:21:12.063 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 21:21:12.056 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 21:21:03.128 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33976 10 6452 1 2025-10-11 21:21:11.863 00:00:10.330 TCP 23.104.0.1:43496 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:22:03.346 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45872 10 6452 1 2025-10-11 21:22:12.230 00:00:10.361 TCP 23.104.0.1:55852 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:23:03.550 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52772 10 6452 1 2025-10-11 21:23:12.631 00:00:10.322 TCP 23.104.0.1:34842 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:24:03.774 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37798 10 6452 1 2025-10-11 21:24:12.998 00:00:10.434 TCP 23.104.0.1:34374 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:20:40.911 00:05:02.413 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 21:20:40.913 00:05:02.408 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 21:25:04.004 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40560 10 6452 1 2025-10-11 21:25:13.469 00:00:10.321 TCP 23.104.0.1:42052 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:26:11.894 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 21:26:11.834 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 21:26:04.221 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:52380 12 10375 1 2025-10-11 21:26:13.830 00:00:10.449 TCP 23.104.0.1:58416 -> 1.101.0.1:3000 15 1926 1 2025-10-11 21:27:04.462 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:54500 10 6452 1 2025-10-11 21:27:14.319 00:00:10.380 TCP 23.104.0.1:47392 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:28:04.640 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40306 10 6452 1 2025-10-11 21:28:14.739 00:00:10.369 TCP 23.104.0.1:44798 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:29:04.859 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36808 10 6452 1 2025-10-11 21:29:15.145 00:00:10.397 TCP 23.104.0.1:56038 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:30:05.088 00:00:11.364 TCP 1.101.0.1:3000 -> 22.102.0.1:41838 10 6452 1 2025-10-11 21:30:15.577 00:00:10.369 TCP 23.104.0.1:34090 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:26:40.916 00:05:02.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 21:26:40.913 00:05:02.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 21:31:12.315 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 21:31:06.490 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47366 10 6452 1 2025-10-11 21:31:12.326 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 21:31:15.979 00:00:10.370 TCP 23.104.0.1:38986 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:32:06.706 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50104 10 6452 1 2025-10-11 21:32:16.391 00:00:10.375 TCP 23.104.0.1:49346 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:33:06.927 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35276 10 6452 1 2025-10-11 21:33:16.813 00:00:10.374 TCP 23.104.0.1:34290 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:34:07.171 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50668 10 6452 1 2025-10-11 21:34:17.228 00:00:10.362 TCP 23.104.0.1:41578 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:35:07.383 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56256 10 6452 1 2025-10-11 21:35:17.625 00:00:10.367 TCP 23.104.0.1:49238 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:36:12.366 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 21:36:12.202 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 21:36:07.606 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35640 10 6452 1 2025-10-11 21:36:18.032 00:00:10.364 TCP 23.104.0.1:43180 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:32:40.916 00:05:02.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 21:32:40.919 00:05:02.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 21:37:07.821 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:42454 10 6452 1 2025-10-11 21:37:18.433 00:00:10.363 TCP 23.104.0.1:48052 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:38:08.037 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39192 10 6452 1 2025-10-11 21:38:18.836 00:00:10.391 TCP 23.104.0.1:35226 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:39:08.250 00:00:10.651 TCP 1.101.0.1:3000 -> 22.102.0.1:44032 10 6452 1 2025-10-11 21:39:19.266 00:00:10.366 TCP 23.104.0.1:53814 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:40:08.941 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:54054 12 6556 1 2025-10-11 21:40:19.669 00:00:10.366 TCP 23.104.0.1:58344 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:41:12.531 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 21:41:12.484 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 21:41:09.187 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60936 10 6452 1 2025-10-11 21:41:20.105 00:00:10.360 TCP 23.104.0.1:42380 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:42:09.402 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39562 10 6452 1 2025-10-11 21:42:20.508 00:00:10.364 TCP 23.104.0.1:33176 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:38:40.918 00:05:02.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 21:38:40.920 00:05:02.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 21:43:09.622 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:43292 10 6452 1 2025-10-11 21:43:20.908 00:00:10.365 TCP 23.104.0.1:59022 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:44:09.844 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56110 10 6452 1 2025-10-11 21:44:21.309 00:00:10.952 TCP 23.104.0.1:40636 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:45:10.077 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36404 10 6452 1 2025-10-11 21:45:22.298 00:00:10.367 TCP 23.104.0.1:55254 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:46:12.483 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 21:46:12.569 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 21:46:10.294 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45128 10 6452 1 2025-10-11 21:46:22.698 00:00:10.367 TCP 23.104.0.1:54240 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:47:10.517 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57172 10 6452 1 2025-10-11 21:47:23.109 00:00:15.206 TCP 23.104.0.1:59714 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:48:10.751 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:60642 10 6452 1 2025-10-11 21:48:28.352 00:00:10.361 TCP 23.104.0.1:42518 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:44:40.918 00:05:02.416 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 21:44:40.920 00:05:02.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 21:49:10.960 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:44786 12 6556 1 2025-10-11 21:49:28.754 00:00:10.381 TCP 23.104.0.1:58946 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:50:11.197 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:36536 10 6452 1 2025-10-11 21:50:29.165 00:00:10.389 TCP 23.104.0.1:57480 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:51:12.936 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 21:51:13.258 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 21:51:11.445 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53642 10 6452 1 2025-10-11 21:51:29.590 00:00:10.366 TCP 23.104.0.1:35010 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:52:11.662 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:60864 10 6452 1 2025-10-11 21:52:29.996 00:00:10.364 TCP 23.104.0.1:59854 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:53:11.836 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52342 10 6452 1 2025-10-11 21:53:30.398 00:00:10.364 TCP 23.104.0.1:54600 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:54:12.078 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49466 10 6452 1 2025-10-11 21:54:30.799 00:00:10.363 TCP 23.104.0.1:53214 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:50:40.922 00:05:02.415 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-11 21:50:40.925 00:05:02.410 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-11 21:55:12.294 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45440 10 6452 1 2025-10-11 21:55:31.205 00:00:10.363 TCP 23.104.0.1:47580 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:56:12.669 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-11 21:56:12.739 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-11 21:56:12.510 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46062 10 6452 1 2025-10-11 21:56:31.606 00:00:10.331 TCP 23.104.0.1:55658 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:57:12.718 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33324 10 6452 1 2025-10-11 21:57:31.979 00:00:10.367 TCP 23.104.0.1:55716 -> 1.101.0.1:3000 11 1507 1 2025-10-11 21:58:12.931 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:45676 10 6452 1 2025-10-11 21:58:32.384 00:00:10.364 TCP 23.104.0.1:52284 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 511680, total packets: 1596, avg bps: 1099, avg pps: 0, avg bpp: 320 Time window: 2025-10-11 20:56:40 - 2025-10-11 21:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0051s User: 0.0008s Wall: 0.0029s flows/second: 57003.9 Runtime: 0.0029s