Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-14 21:58:42.747 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57804 10 6452 1 2025-10-14 21:58:41.535 00:00:10.716 TCP 23.104.0.1:33288 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:59:42.916 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:35552 10 6452 1 2025-10-14 21:59:42.290 00:00:10.365 TCP 23.104.0.1:52516 -> 1.101.0.1:3000 11 1507 1 2025-10-14 21:56:42.361 00:05:02.435 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 21:56:42.363 00:05:02.430 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 22:00:43.098 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37824 10 6452 1 2025-10-14 22:00:42.688 00:00:10.361 TCP 23.104.0.1:42336 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:01:43.105 00:00:10.326 TCP 23.104.0.1:53090 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:01:43.306 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34770 10 6452 1 2025-10-14 22:02:39.472 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 22:02:39.619 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 22:02:43.466 00:00:10.361 TCP 23.104.0.1:59660 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:02:43.516 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55854 10 6452 1 2025-10-14 22:03:43.735 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42662 10 6452 1 2025-10-14 22:03:43.861 00:00:10.958 TCP 23.104.0.1:42952 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:04:44.853 00:00:10.374 TCP 23.104.0.1:52216 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:04:43.947 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:33790 10 6452 1 2025-10-14 22:05:45.265 00:00:10.323 TCP 23.104.0.1:56734 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:05:44.125 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57382 10 6452 1 2025-10-14 22:02:42.363 00:05:02.434 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 22:02:42.367 00:05:02.429 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 22:06:44.342 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:56582 10 6452 1 2025-10-14 22:06:45.628 00:00:10.365 TCP 23.104.0.1:41524 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:07:39.602 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 22:07:39.690 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 22:07:46.034 00:00:10.361 TCP 23.104.0.1:50372 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:07:44.565 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54300 10 6452 1 2025-10-14 22:08:46.436 00:00:10.362 TCP 23.104.0.1:57400 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:08:44.773 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51338 10 6452 1 2025-10-14 22:09:44.985 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:43954 10 6452 1 2025-10-14 22:09:46.837 00:00:10.341 TCP 23.104.0.1:39110 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:10:45.214 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57380 10 6452 1 2025-10-14 22:10:47.211 00:00:10.359 TCP 23.104.0.1:41414 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:11:45.424 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42110 10 6452 1 2025-10-14 22:11:47.606 00:00:10.365 TCP 23.104.0.1:52896 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:12:39.682 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 22:12:40.028 00:00:00.029 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 22:08:42.366 00:05:02.429 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 22:08:42.363 00:05:02.434 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 22:12:45.636 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37018 10 6452 1 2025-10-14 22:12:48.010 00:00:10.319 TCP 23.104.0.1:60948 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:13:45.848 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57512 11 6492 1 2025-10-14 22:13:48.367 00:00:10.323 TCP 23.104.0.1:56592 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:14:46.079 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49390 10 6452 1 2025-10-14 22:14:48.735 00:00:10.368 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:15:46.300 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:54150 10 6452 1 2025-10-14 22:15:49.139 00:00:10.369 TCP 23.104.0.1:55648 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:16:46.494 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49706 10 6452 1 2025-10-14 22:16:49.549 00:00:10.367 TCP 23.104.0.1:33950 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:17:39.806 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 22:17:39.863 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 22:17:46.714 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:51988 10 6452 1 2025-10-14 22:17:49.955 00:00:10.330 TCP 23.104.0.1:40226 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:14:42.367 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 22:14:42.365 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 22:18:46.880 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:58644 10 6452 1 2025-10-14 22:18:50.322 00:00:10.362 TCP 23.104.0.1:53976 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:19:47.119 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52998 10 6452 1 2025-10-14 22:19:50.720 00:00:10.373 TCP 23.104.0.1:47794 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:20:51.136 00:00:10.366 TCP 23.104.0.1:37932 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:20:47.331 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35262 10 6452 1 2025-10-14 22:21:51.543 00:00:10.375 TCP 23.104.0.1:34402 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:21:47.539 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:47898 10 6452 1 2025-10-14 22:22:39.918 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 22:22:40.011 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 22:22:47.709 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60002 10 6452 1 2025-10-14 22:22:51.989 00:00:10.368 TCP 23.104.0.1:50446 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:23:47.919 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43692 10 6452 1 2025-10-14 22:23:52.391 00:00:10.367 TCP 23.104.0.1:54796 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:20:42.370 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 22:20:42.368 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 22:24:48.129 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57300 10 6452 1 2025-10-14 22:24:52.792 00:00:10.348 TCP 23.104.0.1:54000 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:25:48.340 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54838 10 6452 1 2025-10-14 22:25:53.183 00:00:10.323 TCP 23.104.0.1:53774 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:26:48.511 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56792 10 6452 1 2025-10-14 22:26:53.549 00:00:10.366 TCP 23.104.0.1:52272 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:27:40.132 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 22:27:40.047 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 22:27:48.725 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58832 10 6452 1 2025-10-14 22:27:53.949 00:00:10.369 TCP 23.104.0.1:39824 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:28:48.940 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:52196 10 6452 1 2025-10-14 22:28:54.352 00:00:10.371 TCP 23.104.0.1:57332 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:29:49.127 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50886 10 6452 1 2025-10-14 22:29:54.762 00:00:10.379 TCP 23.104.0.1:40348 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:26:42.370 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 22:26:42.367 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 22:30:49.343 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56972 10 6452 1 2025-10-14 22:30:55.179 00:00:10.328 TCP 23.104.0.1:49204 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:31:49.557 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:41986 10 6452 1 2025-10-14 22:31:55.544 00:00:10.362 TCP 23.104.0.1:49564 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:32:40.170 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 22:32:40.153 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 22:32:49.727 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38474 10 6452 1 2025-10-14 22:32:55.945 00:00:10.367 TCP 23.104.0.1:46328 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:33:49.936 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:43944 10 6452 1 2025-10-14 22:33:56.354 00:00:10.322 TCP 23.104.0.1:56036 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:34:50.170 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51380 10 6452 1 2025-10-14 22:34:56.724 00:00:10.424 TCP 23.104.0.1:53064 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:35:50.391 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45980 10 6452 1 2025-10-14 22:35:57.193 00:00:10.362 TCP 23.104.0.1:56870 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:32:42.373 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 22:32:42.370 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 22:36:50.601 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48084 10 6452 1 2025-10-14 22:36:57.588 00:00:10.360 TCP 23.104.0.1:45756 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:37:40.101 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 22:37:40.104 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 22:37:50.815 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49900 10 6452 1 2025-10-14 22:37:57.985 00:00:10.368 TCP 23.104.0.1:53292 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:38:50.984 00:00:10.262 TCP 1.101.0.1:3000 -> 22.102.0.1:42978 12 6556 1 2025-10-14 22:38:58.393 00:00:10.366 TCP 23.104.0.1:47112 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:39:51.285 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37330 10 6452 1 2025-10-14 22:39:58.799 00:00:10.940 TCP 23.104.0.1:53792 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:40:51.495 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37572 10 6452 1 2025-10-14 22:40:59.781 00:00:10.374 TCP 23.104.0.1:53210 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:41:51.708 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51956 10 6452 1 2025-10-14 22:42:00.196 00:00:10.366 TCP 23.104.0.1:46128 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:42:40.372 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 22:42:40.048 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 22:38:42.370 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 22:38:42.374 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 22:42:51.922 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:50078 10 6452 1 2025-10-14 22:43:00.602 00:00:10.325 TCP 23.104.0.1:37428 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:43:52.127 00:00:10.385 TCP 1.101.0.1:3000 -> 22.102.0.1:37062 10 6452 1 2025-10-14 22:44:00.965 00:00:10.385 TCP 23.104.0.1:37050 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:44:52.554 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49656 10 6452 1 2025-10-14 22:45:01.388 00:00:10.367 TCP 23.104.0.1:40234 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:45:52.766 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38088 10 6452 1 2025-10-14 22:46:01.786 00:00:10.381 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:46:52.981 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54542 10 6452 1 2025-10-14 22:47:02.196 00:00:10.368 TCP 23.104.0.1:35054 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:47:40.374 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 22:47:40.382 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 22:47:53.201 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33442 10 6452 1 2025-10-14 22:48:02.602 00:00:10.414 TCP 23.104.0.1:50244 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:44:42.371 00:05:02.440 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 22:44:42.374 00:05:02.435 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 22:48:53.375 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40612 10 6452 1 2025-10-14 22:49:03.006 00:00:10.386 TCP 23.104.0.1:44032 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:49:53.593 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56766 10 6452 1 2025-10-14 22:50:03.411 00:00:10.367 TCP 23.104.0.1:57444 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:50:53.760 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37654 10 6452 1 2025-10-14 22:51:03.812 00:00:10.367 TCP 23.104.0.1:57382 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:51:53.936 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:49192 10 6452 1 2025-10-14 22:52:04.217 00:00:10.370 TCP 23.104.0.1:32854 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:52:40.658 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 22:52:40.502 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 22:52:54.171 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44668 10 6452 1 2025-10-14 22:53:04.648 00:00:10.329 TCP 23.104.0.1:51336 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:53:54.341 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58808 10 6452 1 2025-10-14 22:54:05.022 00:00:10.364 TCP 23.104.0.1:36792 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:50:42.374 00:05:02.436 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-14 22:50:42.373 00:05:02.441 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-14 22:54:54.554 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:39630 10 6452 1 2025-10-14 22:55:05.426 00:00:10.372 TCP 23.104.0.1:33226 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:55:54.724 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35788 10 6452 1 2025-10-14 22:56:05.833 00:00:10.339 TCP 23.104.0.1:55998 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:56:54.900 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36276 10 6452 1 2025-10-14 22:57:06.211 00:00:10.370 TCP 23.104.0.1:33474 -> 1.101.0.1:3000 11 1507 1 2025-10-14 22:57:40.508 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-14 22:57:40.873 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-14 22:57:55.109 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35924 10 6452 1 2025-10-14 22:58:06.620 00:00:10.365 TCP 23.104.0.1:53558 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 498492, total packets: 1575, avg bps: 1079, avg pps: 0, avg bpp: 316 Time window: 2025-10-14 21:56:42 - 2025-10-14 22:58:16 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0048s User: 0.0010s Wall: 0.0027s flows/second: 61466.0 Runtime: 0.0027s