Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-23 15:59:14.761 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47924 10 6452 1 2025-10-23 15:59:36.525 00:00:10.363 TCP 23.104.0.1:37804 -> 1.101.0.1:3000 11 1507 1 2025-10-23 15:55:46.390 00:05:02.987 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 16:00:14.982 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:43168 10 6452 1 2025-10-23 16:00:36.933 00:00:10.378 TCP 23.104.0.1:41304 -> 1.101.0.1:3000 11 1507 1 2025-10-23 15:56:46.388 00:05:02.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 16:01:15.216 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42570 10 6452 1 2025-10-23 16:01:37.345 00:00:10.414 TCP 23.104.0.1:53600 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:01:52.415 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 16:01:52.292 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 16:02:15.441 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43434 10 6452 1 2025-10-23 16:02:37.798 00:00:10.367 TCP 23.104.0.1:39048 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:03:15.658 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:35592 10 6452 1 2025-10-23 16:03:38.205 00:00:10.364 TCP 23.104.0.1:36910 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:04:15.832 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38638 10 6452 1 2025-10-23 16:04:38.607 00:00:10.364 TCP 23.104.0.1:42348 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:05:16.002 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:57640 10 6452 1 2025-10-23 16:01:46.392 00:05:02.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 16:05:39.006 00:00:10.364 TCP 23.104.0.1:41056 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:06:16.174 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39846 10 6452 1 2025-10-23 16:02:46.391 00:05:02.990 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 16:06:39.407 00:00:10.365 TCP 23.104.0.1:54592 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:06:52.324 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 16:06:52.357 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 16:07:16.381 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40394 10 6452 1 2025-10-23 16:07:39.815 00:00:10.366 TCP 23.104.0.1:33998 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:08:16.597 00:00:18.576 TCP 1.101.0.1:3000 -> 22.102.0.1:38786 10 6452 1 2025-10-23 16:08:40.220 00:00:10.324 TCP 23.104.0.1:37080 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:09:25.212 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:48012 10 6452 1 2025-10-23 16:09:40.580 00:00:10.364 TCP 23.104.0.1:57834 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:10:25.387 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37336 10 6452 1 2025-10-23 16:10:40.982 00:00:10.324 TCP 23.104.0.1:59052 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:11:25.553 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34784 10 6452 1 2025-10-23 16:11:41.345 00:00:10.362 TCP 23.104.0.1:51626 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:07:46.393 00:05:02.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 16:11:52.465 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 16:11:52.496 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 16:12:25.758 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:32854 10 6452 1 2025-10-23 16:08:46.391 00:05:02.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 16:12:41.754 00:00:10.396 TCP 23.104.0.1:46554 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:13:25.939 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:58464 10 6452 1 2025-10-23 16:13:42.217 00:00:10.369 TCP 23.104.0.1:56040 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:14:26.175 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55196 10 6452 1 2025-10-23 16:14:42.625 00:00:10.369 TCP 23.104.0.1:43458 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:15:26.387 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46622 10 6452 1 2025-10-23 16:15:43.036 00:00:10.369 TCP 23.104.0.1:44202 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:16:26.593 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51028 10 6452 1 2025-10-23 16:16:52.431 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 16:16:52.576 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 16:16:43.444 00:00:10.370 TCP 23.104.0.1:48678 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:17:26.806 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35028 10 6452 1 2025-10-23 16:13:46.394 00:05:02.987 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 16:17:43.853 00:00:10.380 TCP 23.104.0.1:52296 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:18:27.032 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:55372 10 6452 1 2025-10-23 16:14:46.392 00:05:02.991 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 16:18:44.269 00:00:10.366 TCP 23.104.0.1:59038 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:19:27.215 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47576 10 6452 1 2025-10-23 16:19:44.671 00:00:10.363 TCP 23.104.0.1:41330 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:20:27.435 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36824 10 6452 1 2025-10-23 16:20:45.102 00:00:10.365 TCP 23.104.0.1:36094 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:21:27.644 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38056 10 6452 1 2025-10-23 16:21:52.685 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 16:21:52.489 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 16:21:45.500 00:00:10.328 TCP 23.104.0.1:53254 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:22:27.864 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:48212 10 6452 1 2025-10-23 16:22:45.863 00:00:10.379 TCP 23.104.0.1:42172 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:23:28.090 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:51024 10 6452 1 2025-10-23 16:19:46.395 00:05:02.986 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 16:23:46.278 00:00:10.359 TCP 23.104.0.1:59740 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:24:28.307 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50334 10 6452 1 2025-10-23 16:20:46.395 00:05:02.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 16:24:46.674 00:00:10.460 TCP 23.104.0.1:57972 -> 1.101.0.1:3000 15 1926 1 2025-10-23 16:25:28.516 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:59950 12 10375 1 2025-10-23 16:25:47.174 00:00:10.366 TCP 23.104.0.1:47680 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:26:28.755 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56666 10 6452 1 2025-10-23 16:26:52.533 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 16:26:52.480 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 16:26:47.578 00:00:10.363 TCP 23.104.0.1:60162 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:27:28.968 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:47390 10 6452 1 2025-10-23 16:27:47.982 00:00:10.367 TCP 23.104.0.1:36968 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:28:29.195 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43194 10 6452 1 2025-10-23 16:28:48.384 00:00:10.326 TCP 23.104.0.1:40184 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:29:29.406 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46272 10 6452 1 2025-10-23 16:25:46.397 00:05:02.988 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 16:29:48.751 00:00:10.382 TCP 23.104.0.1:49574 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:30:29.616 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41726 10 6452 1 2025-10-23 16:26:46.395 00:05:02.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 16:30:49.170 00:00:10.322 TCP 23.104.0.1:34722 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:31:29.839 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53056 10 6452 1 2025-10-23 16:31:53.199 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 16:31:53.304 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 16:31:49.530 00:00:10.365 TCP 23.104.0.1:59626 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:32:30.073 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:48938 10 6452 1 2025-10-23 16:32:49.934 00:00:10.388 TCP 23.104.0.1:51726 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:33:30.252 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34230 10 6452 1 2025-10-23 16:33:50.360 00:00:10.372 TCP 23.104.0.1:52662 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:34:30.478 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47932 10 6452 1 2025-10-23 16:34:50.781 00:00:10.520 TCP 23.104.0.1:51694 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:35:30.694 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36812 10 6452 1 2025-10-23 16:31:46.402 00:05:02.981 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 16:35:51.355 00:00:10.369 TCP 23.104.0.1:44928 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:36:30.921 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50354 10 6452 1 2025-10-23 16:32:46.399 00:05:02.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 16:36:52.948 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 16:36:52.939 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 16:36:51.761 00:00:10.375 TCP 23.104.0.1:49750 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:37:31.131 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44338 10 6452 1 2025-10-23 16:37:52.174 00:00:10.321 TCP 23.104.0.1:53074 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:38:31.348 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:42110 10 6452 1 2025-10-23 16:38:52.532 00:00:10.367 TCP 23.104.0.1:47384 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:39:31.540 00:00:10.408 TCP 1.101.0.1:3000 -> 22.102.0.1:43620 10 6452 1 2025-10-23 16:39:52.935 00:00:14.105 TCP 23.104.0.1:39756 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:40:31.993 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33498 10 6452 1 2025-10-23 16:40:57.103 00:00:10.366 TCP 23.104.0.1:36988 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:41:32.212 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40578 10 6452 1 2025-10-23 16:37:46.405 00:05:02.982 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 16:41:52.907 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 16:41:53.045 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 16:41:57.513 00:00:10.362 TCP 23.104.0.1:58468 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:42:32.385 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:51044 10 6452 1 2025-10-23 16:38:46.402 00:05:02.987 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 16:42:57.914 00:00:10.329 TCP 23.104.0.1:49556 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:43:32.631 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44030 10 6452 1 2025-10-23 16:43:58.286 00:00:10.360 TCP 23.104.0.1:47522 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:44:32.848 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44112 10 6452 1 2025-10-23 16:44:58.681 00:00:10.365 TCP 23.104.0.1:51514 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:45:33.086 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50536 10 6452 1 2025-10-23 16:45:59.105 00:00:10.485 TCP 23.104.0.1:33926 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:46:33.303 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46808 10 6452 1 2025-10-23 16:46:53.105 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 16:46:53.284 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 16:46:59.624 00:00:10.366 TCP 23.104.0.1:48600 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:47:33.516 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:53084 10 6452 1 2025-10-23 16:43:46.406 00:05:02.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 16:48:00.027 00:00:10.322 TCP 23.104.0.1:50928 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:48:33.686 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50206 10 6452 1 2025-10-23 16:44:46.404 00:05:02.989 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 16:49:00.386 00:00:10.321 TCP 23.104.0.1:44398 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:49:33.900 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40998 10 6452 1 2025-10-23 16:50:00.744 00:00:10.369 TCP 23.104.0.1:52236 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:50:34.114 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37814 10 6452 1 2025-10-23 16:51:01.152 00:00:10.365 TCP 23.104.0.1:54342 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:51:34.326 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52520 10 6452 1 2025-10-23 16:51:53.319 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 16:51:52.929 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 16:52:01.555 00:00:10.331 TCP 23.104.0.1:59648 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:52:34.536 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44734 10 6452 1 2025-10-23 16:53:01.929 00:00:10.394 TCP 23.104.0.1:46740 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:53:34.753 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:57552 10 6452 1 2025-10-23 16:49:46.406 00:05:02.984 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-23 16:54:02.373 00:00:10.367 TCP 23.104.0.1:49218 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:54:34.945 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:46764 10 6452 1 2025-10-23 16:50:46.404 00:05:02.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-23 16:55:02.779 00:00:10.327 TCP 23.104.0.1:52820 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:55:35.143 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58142 10 6452 1 2025-10-23 16:56:03.147 00:00:10.361 TCP 23.104.0.1:45430 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:56:35.321 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35616 10 6452 1 2025-10-23 16:56:54.289 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-23 16:56:54.594 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-23 16:57:03.543 00:00:10.365 TCP 23.104.0.1:39654 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:57:35.546 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40084 10 6452 1 2025-10-23 16:58:03.945 00:00:10.368 TCP 23.104.0.1:44138 -> 1.101.0.1:3000 11 1507 1 2025-10-23 16:58:35.764 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46322 10 6452 1 Summary: total flows: 163, total bytes: 501183, total packets: 1567, avg bps: 1060, avg pps: 0, avg bpp: 319 Time window: 2025-10-23 15:55:46 - 2025-10-23 16:58:45 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0051s User: 0.0010s Wall: 0.0022s flows/second: 75778.3 Runtime: 0.0022s