Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-21 11:59:35.111 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58668 10 6452 1 2025-10-21 11:55:45.440 00:05:02.810 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-21 11:59:41.008 00:00:10.322 TCP 23.104.0.1:53920 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:00:35.322 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49028 10 6452 1 2025-10-21 11:56:45.437 00:05:02.815 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-21 12:00:49.756 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-21 12:00:49.607 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-21 12:00:41.368 00:00:10.322 TCP 23.104.0.1:52266 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:01:35.536 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52160 10 6452 1 2025-10-21 12:01:41.729 00:00:10.368 TCP 23.104.0.1:51850 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:02:35.748 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54032 10 6452 1 2025-10-21 12:02:42.132 00:00:10.365 TCP 23.104.0.1:46450 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:03:35.960 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:38222 10 6452 1 2025-10-21 12:03:42.539 00:00:10.362 TCP 23.104.0.1:35740 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:04:36.192 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43664 10 6452 1 2025-10-21 12:04:42.941 00:00:10.336 TCP 23.104.0.1:34378 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:05:49.719 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-21 12:01:45.443 00:05:02.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-21 12:05:36.401 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56538 10 6452 1 2025-10-21 12:05:49.859 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-21 12:05:43.317 00:00:10.376 TCP 23.104.0.1:37970 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:06:36.612 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38138 10 6452 1 2025-10-21 12:02:45.440 00:05:02.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-21 12:06:43.724 00:00:10.374 TCP 23.104.0.1:41850 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:07:36.841 00:00:10.413 TCP 1.101.0.1:3000 -> 22.102.0.1:53584 10 6452 1 2025-10-21 12:07:44.134 00:00:10.365 TCP 23.104.0.1:47394 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:08:37.333 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46408 10 6452 1 2025-10-21 12:08:44.537 00:00:10.361 TCP 23.104.0.1:39718 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:09:37.498 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46290 10 6452 1 2025-10-21 12:09:44.937 00:00:10.332 TCP 23.104.0.1:57406 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:10:49.674 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-21 12:10:49.684 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-21 12:10:37.721 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43168 10 6452 1 2025-10-21 12:10:45.311 00:00:10.342 TCP 23.104.0.1:35264 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:11:37.935 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:38132 10 6452 1 2025-10-21 12:07:45.445 00:05:02.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-21 12:11:45.697 00:00:10.364 TCP 23.104.0.1:41088 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:12:38.183 00:00:10.728 TCP 1.101.0.1:3000 -> 22.102.0.1:41810 10 6452 1 2025-10-21 12:08:45.443 00:05:02.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-21 12:12:46.116 00:00:10.367 TCP 23.104.0.1:44684 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:13:38.948 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:47718 10 6452 1 2025-10-21 12:13:46.524 00:00:10.340 TCP 23.104.0.1:33752 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:14:39.140 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51946 10 6452 1 2025-10-21 12:14:46.907 00:00:10.367 TCP 23.104.0.1:53452 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:15:49.996 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-21 12:15:39.349 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37078 10 6452 1 2025-10-21 12:15:50.238 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-21 12:15:47.317 00:00:10.376 TCP 23.104.0.1:55964 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:16:39.573 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34576 10 6452 1 2025-10-21 12:16:47.730 00:00:10.371 TCP 23.104.0.1:45988 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:17:39.786 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49860 10 6452 1 2025-10-21 12:13:45.445 00:05:02.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-21 12:17:48.134 00:00:10.361 TCP 23.104.0.1:40498 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:18:39.998 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56490 10 6452 1 2025-10-21 12:14:45.442 00:05:02.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-21 12:18:48.533 00:00:10.385 TCP 23.104.0.1:59712 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:19:40.212 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47524 10 6452 1 2025-10-21 12:19:48.961 00:00:10.370 TCP 23.104.0.1:34184 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:20:50.214 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-21 12:20:40.423 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:35466 10 6452 1 2025-10-21 12:20:50.064 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-21 12:20:49.363 00:00:10.366 TCP 23.104.0.1:49632 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:21:40.603 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34718 10 6452 1 2025-10-21 12:21:49.768 00:00:10.376 TCP 23.104.0.1:58468 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:22:40.825 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:56026 10 6452 1 2025-10-21 12:22:50.181 00:00:10.364 TCP 23.104.0.1:51136 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:23:41.075 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:41026 12 10375 1 2025-10-21 12:19:45.445 00:05:02.807 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-21 12:23:50.579 00:00:10.405 TCP 23.104.0.1:34626 -> 1.101.0.1:3000 15 1926 1 2025-10-21 12:20:45.442 00:05:02.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-21 12:24:41.319 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42106 10 6452 1 2025-10-21 12:24:51.021 00:00:10.358 TCP 23.104.0.1:34368 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:25:50.179 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-21 12:25:41.529 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44414 10 6452 1 2025-10-21 12:25:50.220 00:00:00.019 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-21 12:25:51.419 00:00:10.361 TCP 23.104.0.1:49154 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:26:41.741 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57394 10 6452 1 2025-10-21 12:26:51.821 00:00:10.322 TCP 23.104.0.1:54676 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:27:41.911 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41392 10 6452 1 2025-10-21 12:27:52.179 00:00:10.365 TCP 23.104.0.1:42348 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:28:42.131 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52202 12 10375 1 2025-10-21 12:28:52.581 00:00:10.450 TCP 23.104.0.1:53954 -> 1.101.0.1:3000 15 1926 1 2025-10-21 12:25:45.446 00:05:02.808 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-21 12:29:42.368 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47146 10 6452 1 2025-10-21 12:29:53.101 00:00:10.367 TCP 23.104.0.1:55476 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:30:50.334 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-21 12:30:50.156 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-21 12:26:45.443 00:05:02.813 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-21 12:30:42.581 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39496 10 6452 1 2025-10-21 12:30:53.504 00:00:10.364 TCP 23.104.0.1:56740 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:31:42.830 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:54220 10 6452 1 2025-10-21 12:31:53.910 00:00:10.366 TCP 23.104.0.1:39980 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:32:43.085 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59060 10 6452 1 2025-10-21 12:32:54.327 00:00:10.326 TCP 23.104.0.1:48898 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:33:43.303 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52614 10 6452 1 2025-10-21 12:33:54.695 00:00:10.361 TCP 23.104.0.1:59848 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:34:43.519 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57746 10 6452 1 2025-10-21 12:34:55.105 00:00:10.361 TCP 23.104.0.1:50408 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:35:50.742 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-21 12:31:45.447 00:05:02.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-21 12:35:50.796 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-21 12:35:43.731 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43428 10 6452 1 2025-10-21 12:35:55.507 00:00:10.366 TCP 23.104.0.1:37052 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:32:45.445 00:05:02.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-21 12:36:43.962 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:57216 10 6452 1 2025-10-21 12:36:55.913 00:00:10.362 TCP 23.104.0.1:39270 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:37:44.192 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59494 10 6452 1 2025-10-21 12:37:56.314 00:00:10.328 TCP 23.104.0.1:60880 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:38:44.364 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39494 10 6452 1 2025-10-21 12:38:56.683 00:00:10.367 TCP 23.104.0.1:42008 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:39:44.577 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57402 10 6452 1 2025-10-21 12:39:57.103 00:00:10.361 TCP 23.104.0.1:50298 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:40:50.750 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-21 12:40:50.491 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-21 12:40:44.790 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36398 10 6452 1 2025-10-21 12:40:57.501 00:00:10.361 TCP 23.104.0.1:44204 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:37:45.449 00:05:02.812 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-21 12:41:45.007 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34234 10 6452 1 2025-10-21 12:41:57.898 00:00:10.338 TCP 23.104.0.1:48484 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:38:45.447 00:05:02.817 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-21 12:42:45.223 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57734 10 6452 1 2025-10-21 12:42:58.278 00:00:10.367 TCP 23.104.0.1:46106 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:43:45.396 00:00:10.482 TCP 1.101.0.1:3000 -> 22.102.0.1:42360 10 6452 1 2025-10-21 12:43:58.687 00:00:10.364 TCP 23.104.0.1:42452 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:44:45.921 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40576 10 6452 1 2025-10-21 12:44:59.108 00:00:10.325 TCP 23.104.0.1:47278 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:45:50.637 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-21 12:45:50.455 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-21 12:45:46.135 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56684 10 6452 1 2025-10-21 12:45:59.472 00:00:10.325 TCP 23.104.0.1:48154 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:46:46.357 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36182 10 6452 1 2025-10-21 12:46:59.849 00:00:10.379 TCP 23.104.0.1:33508 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:43:45.451 00:05:02.815 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-21 12:47:46.563 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37778 10 6452 1 2025-10-21 12:48:00.272 00:00:10.360 TCP 23.104.0.1:32946 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:44:45.447 00:05:02.820 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-21 12:48:46.773 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42356 10 6452 1 2025-10-21 12:49:00.674 00:00:10.329 TCP 23.104.0.1:39048 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:49:46.987 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51606 10 6452 1 2025-10-21 12:50:01.034 00:00:10.330 TCP 23.104.0.1:49556 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:50:50.725 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-21 12:50:50.667 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-21 12:50:47.212 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57900 10 6452 1 2025-10-21 12:51:01.406 00:00:10.361 TCP 23.104.0.1:59644 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:51:47.429 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:51454 10 6452 1 2025-10-21 12:52:01.814 00:00:10.367 TCP 23.104.0.1:43488 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:52:47.606 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51798 10 6452 1 2025-10-21 12:53:02.219 00:00:10.360 TCP 23.104.0.1:38362 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:49:45.452 00:05:02.814 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-21 12:53:47.821 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39916 10 6452 1 2025-10-21 12:54:02.622 00:00:10.364 TCP 23.104.0.1:39156 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:50:45.449 00:05:02.819 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-21 12:54:48.039 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46568 10 6452 1 2025-10-21 12:55:03.026 00:00:10.323 TCP 23.104.0.1:56372 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:55:50.705 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-21 12:55:50.850 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-21 12:55:48.249 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-10-21 12:56:03.389 00:00:10.366 TCP 23.104.0.1:36594 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:56:48.466 00:00:10.347 TCP 1.101.0.1:3000 -> 22.102.0.1:57192 9 6412 1 2025-10-21 12:57:03.793 00:00:10.366 TCP 23.104.0.1:51124 -> 1.101.0.1:3000 11 1507 1 2025-10-21 12:57:48.862 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55026 10 6452 1 2025-10-21 12:58:04.200 00:00:10.360 TCP 23.104.0.1:59478 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 499033, total packets: 1562, avg bps: 1064, avg pps: 0, avg bpp: 319 Time window: 2025-10-21 11:55:45 - 2025-10-21 12:58:14 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0031s User: 0.0021s Wall: 0.0021s flows/second: 76959.7 Runtime: 0.0021s