Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-26 20:58:52.644 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53152 10 6452 1 2025-10-26 20:58:58.299 00:00:10.799 TCP 23.104.0.1:40886 -> 1.101.0.1:3000 11 1507 1 2025-10-26 20:55:47.843 00:05:03.237 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 20:59:52.853 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:54496 10 6452 1 2025-10-26 20:59:59.132 00:00:10.381 TCP 23.104.0.1:38208 -> 1.101.0.1:3000 11 1507 1 2025-10-26 20:56:47.840 00:05:03.242 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 21:00:53.085 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:49610 12 10369 1 2025-10-26 21:00:59.552 00:00:10.441 TCP 23.104.0.1:49810 -> 1.101.0.1:3000 15 1926 1 2025-10-26 21:01:53.330 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50768 10 6452 1 2025-10-26 21:02:00.027 00:00:10.361 TCP 23.104.0.1:54342 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:02:53.546 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34282 10 6452 1 2025-10-26 21:03:00.426 00:00:10.323 TCP 23.104.0.1:60880 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:03:25.123 00:00:00.027 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 21:03:25.375 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 21:03:53.760 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44140 10 6452 1 2025-10-26 21:04:00.791 00:00:10.368 TCP 23.104.0.1:48140 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:04:53.988 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:54900 10 6452 1 2025-10-26 21:05:01.200 00:00:10.375 TCP 23.104.0.1:57292 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:01:47.853 00:05:03.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 21:05:54.218 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45738 10 6452 1 2025-10-26 21:06:01.613 00:00:10.327 TCP 23.104.0.1:50250 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:02:47.851 00:05:03.234 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 21:06:54.441 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43544 10 6452 1 2025-10-26 21:07:01.975 00:00:10.369 TCP 23.104.0.1:56686 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:07:54.656 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45810 10 6452 1 2025-10-26 21:08:02.387 00:00:10.366 TCP 23.104.0.1:43250 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:08:25.419 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 21:08:25.423 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 21:08:54.878 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:35650 10 6452 1 2025-10-26 21:09:02.792 00:00:10.382 TCP 23.104.0.1:40210 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:09:55.105 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52208 10 6452 1 2025-10-26 21:10:03.215 00:00:10.366 TCP 23.104.0.1:38230 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:10:55.326 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36012 10 6452 1 2025-10-26 21:11:03.623 00:00:10.359 TCP 23.104.0.1:33430 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:07:47.854 00:05:03.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 21:11:55.537 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34152 10 6452 1 2025-10-26 21:12:04.021 00:00:10.363 TCP 23.104.0.1:54222 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:08:47.851 00:05:03.234 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 21:12:55.750 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46414 10 6452 1 2025-10-26 21:13:04.426 00:00:10.357 TCP 23.104.0.1:56750 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:13:25.707 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 21:13:25.235 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 21:13:55.975 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:60988 13 6608 1 2025-10-26 21:14:04.821 00:00:10.366 TCP 23.104.0.1:43150 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:14:56.180 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46370 10 6452 1 2025-10-26 21:15:05.229 00:00:10.320 TCP 23.104.0.1:57678 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:15:56.390 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45332 10 6452 1 2025-10-26 21:16:05.585 00:00:10.328 TCP 23.104.0.1:33130 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:16:56.604 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52122 10 6452 1 2025-10-26 21:17:05.952 00:00:10.370 TCP 23.104.0.1:43424 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:13:47.855 00:05:03.229 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 21:17:56.782 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:36236 10 6452 1 2025-10-26 21:18:06.363 00:00:10.368 TCP 23.104.0.1:58130 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:18:25.573 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 21:18:25.565 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 21:14:47.853 00:05:03.234 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 21:18:56.974 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46960 10 6452 1 2025-10-26 21:19:06.764 00:00:10.378 TCP 23.104.0.1:58528 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:19:57.204 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33012 10 6452 1 2025-10-26 21:20:07.181 00:00:10.361 TCP 23.104.0.1:55318 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:20:57.375 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33770 10 6452 1 2025-10-26 21:21:07.579 00:00:10.361 TCP 23.104.0.1:60160 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:21:57.588 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37486 10 6452 1 2025-10-26 21:22:07.981 00:00:10.380 TCP 23.104.0.1:59050 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:22:57.758 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:36436 10 6452 1 2025-10-26 21:23:08.408 00:00:10.361 TCP 23.104.0.1:48402 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:23:25.683 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 21:23:25.632 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 21:19:47.857 00:05:03.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 21:23:57.921 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39968 10 6452 1 2025-10-26 21:24:08.812 00:00:10.332 TCP 23.104.0.1:47242 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:20:47.855 00:05:03.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 21:24:58.134 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40086 10 6452 1 2025-10-26 21:25:09.182 00:00:10.361 TCP 23.104.0.1:41036 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:25:58.348 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43984 10 6452 1 2025-10-26 21:26:09.584 00:00:10.363 TCP 23.104.0.1:39958 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:26:58.558 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47268 10 6452 1 2025-10-26 21:27:09.985 00:00:10.364 TCP 23.104.0.1:47984 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:27:58.773 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41294 10 6452 1 2025-10-26 21:28:10.390 00:00:10.366 TCP 23.104.0.1:38928 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:28:26.939 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 21:28:26.962 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 21:28:58.984 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:60242 10 6452 1 2025-10-26 21:29:10.800 00:00:10.364 TCP 23.104.0.1:46966 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:25:47.857 00:05:03.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 21:29:59.212 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57204 10 6452 1 2025-10-26 21:30:11.201 00:00:10.364 TCP 23.104.0.1:41592 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:26:47.856 00:05:03.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 21:30:59.429 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:48864 12 10375 1 2025-10-26 21:31:11.600 00:00:10.495 TCP 23.104.0.1:60756 -> 1.101.0.1:3000 15 1926 1 2025-10-26 21:31:59.637 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60542 10 6452 1 2025-10-26 21:32:12.137 00:00:10.361 TCP 23.104.0.1:34156 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:32:59.855 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44992 10 6452 1 2025-10-26 21:33:25.995 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 21:33:26.004 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 21:33:12.538 00:00:10.365 TCP 23.104.0.1:59294 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:34:00.080 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53632 10 6452 1 2025-10-26 21:34:12.945 00:00:10.376 TCP 23.104.0.1:46648 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:35:00.292 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47508 10 6452 1 2025-10-26 21:35:13.360 00:00:10.365 TCP 23.104.0.1:52200 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:31:47.860 00:05:03.236 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 21:36:00.507 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60670 10 6452 1 2025-10-26 21:36:13.762 00:00:10.378 TCP 23.104.0.1:50288 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:32:47.858 00:05:03.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 21:37:00.718 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46774 10 6452 1 2025-10-26 21:37:14.177 00:00:10.366 TCP 23.104.0.1:38218 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:38:00.894 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52246 10 6452 1 2025-10-26 21:38:25.889 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 21:38:25.979 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 21:38:14.581 00:00:10.363 TCP 23.104.0.1:39124 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:39:01.115 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39868 10 6452 1 2025-10-26 21:39:14.985 00:00:10.376 TCP 23.104.0.1:44920 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:40:01.337 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38134 10 6452 1 2025-10-26 21:40:15.401 00:00:10.362 TCP 23.104.0.1:45272 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:41:01.556 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56318 10 6452 1 2025-10-26 21:41:15.798 00:00:10.369 TCP 23.104.0.1:55990 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:37:47.863 00:05:03.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 21:42:01.774 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49122 10 6452 1 2025-10-26 21:42:16.209 00:00:10.507 TCP 23.104.0.1:34218 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:38:47.861 00:05:03.232 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 21:43:01.991 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:39832 10 6452 1 2025-10-26 21:43:26.295 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 21:43:25.823 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 21:43:16.753 00:00:10.361 TCP 23.104.0.1:57070 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:44:02.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33618 10 6452 1 2025-10-26 21:44:17.149 00:00:10.363 TCP 23.104.0.1:37534 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:45:02.393 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42058 10 6452 1 2025-10-26 21:45:17.555 00:00:10.368 TCP 23.104.0.1:40692 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:46:02.610 00:00:10.292 TCP 1.101.0.1:3000 -> 22.102.0.1:56706 10 6452 1 2025-10-26 21:46:17.959 00:00:10.365 TCP 23.104.0.1:54046 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:47:02.975 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:46970 10 6452 1 2025-10-26 21:47:18.362 00:00:10.365 TCP 23.104.0.1:56466 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:43:47.865 00:05:03.227 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 21:48:03.215 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52844 10 6452 1 2025-10-26 21:48:26.369 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 21:48:26.404 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 21:48:18.767 00:00:10.374 TCP 23.104.0.1:57312 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:44:47.863 00:05:03.233 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 21:49:03.425 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46538 10 6452 1 2025-10-26 21:49:19.184 00:00:10.363 TCP 23.104.0.1:51434 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:50:03.644 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51336 10 6452 1 2025-10-26 21:50:19.588 00:00:10.371 TCP 23.104.0.1:54058 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:51:03.856 00:00:10.125 TCP 1.101.0.1:3000 -> 22.102.0.1:42640 10 6452 1 2025-10-26 21:51:20.009 00:00:10.366 TCP 23.104.0.1:51240 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:52:04.032 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 10 6452 1 2025-10-26 21:52:20.426 00:00:10.364 TCP 23.104.0.1:34930 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:53:04.256 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51288 10 6452 1 2025-10-26 21:53:26.343 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 21:53:26.737 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 21:53:20.827 00:00:10.340 TCP 23.104.0.1:50324 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:49:47.868 00:05:03.243 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-26 21:54:04.479 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38498 10 6452 1 2025-10-26 21:54:21.218 00:00:10.323 TCP 23.104.0.1:47776 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:50:47.865 00:05:03.248 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-26 21:55:04.695 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42658 10 6452 1 2025-10-26 21:55:21.581 00:00:10.320 TCP 23.104.0.1:58096 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:56:04.919 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53736 10 6452 1 2025-10-26 21:56:21.942 00:00:10.368 TCP 23.104.0.1:42450 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:57:05.127 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35848 10 6452 1 2025-10-26 21:57:22.354 00:00:10.367 TCP 23.104.0.1:54300 -> 1.101.0.1:3000 11 1507 1 2025-10-26 21:58:05.341 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37348 10 6452 1 2025-10-26 21:58:26.422 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-26 21:58:26.242 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-26 21:58:22.761 00:00:13.479 TCP 23.104.0.1:60724 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 507182, total packets: 1587, avg bps: 1076, avg pps: 0, avg bpp: 319 Time window: 2025-10-26 20:55:47 - 2025-10-26 21:58:36 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0049s User: 0.0025s Wall: 0.0040s flows/second: 40673.2 Runtime: 0.0041s