Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-10-27 14:58:59.891 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:50774 10 6452 1 2025-10-27 14:59:23.143 00:00:10.387 TCP 23.104.0.1:44586 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:55:48.186 00:05:03.296 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 15:00:00.109 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45492 10 6452 1 2025-10-27 15:00:23.566 00:00:10.367 TCP 23.104.0.1:41194 -> 1.101.0.1:3000 11 1507 1 2025-10-27 14:56:48.184 00:05:03.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 15:01:00.328 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60448 10 6452 1 2025-10-27 15:01:23.972 00:00:10.365 TCP 23.104.0.1:45582 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:02:00.551 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53562 10 6452 1 2025-10-27 15:02:24.377 00:00:10.364 TCP 23.104.0.1:50384 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:03:00.773 00:00:10.812 TCP 1.101.0.1:3000 -> 22.102.0.1:57846 10 6452 1 2025-10-27 15:03:24.777 00:00:10.376 TCP 23.104.0.1:41088 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:03:47.115 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 15:03:47.224 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 15:04:01.627 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43892 10 6452 1 2025-10-27 15:04:25.207 00:00:10.361 TCP 23.104.0.1:33342 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:05:01.847 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55758 10 6452 1 2025-10-27 15:05:25.607 00:00:10.367 TCP 23.104.0.1:58622 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:01:48.187 00:05:03.296 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 15:06:02.086 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33394 10 6452 1 2025-10-27 15:06:26.016 00:00:10.371 TCP 23.104.0.1:47354 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:02:48.185 00:05:03.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 15:07:02.302 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45688 10 6452 1 2025-10-27 15:07:26.433 00:00:10.364 TCP 23.104.0.1:56240 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:08:02.518 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58398 10 6452 1 2025-10-27 15:08:26.837 00:00:10.395 TCP 23.104.0.1:35934 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:08:47.041 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 15:08:47.018 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 15:09:02.737 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50626 10 6452 1 2025-10-27 15:09:27.271 00:00:10.329 TCP 23.104.0.1:39792 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:10:02.956 00:00:18.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50390 12 6556 1 2025-10-27 15:10:27.638 00:00:10.366 TCP 23.104.0.1:50266 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:11:11.192 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:58024 10 6452 1 2025-10-27 15:11:28.052 00:00:10.363 TCP 23.104.0.1:41690 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:07:48.188 00:05:03.301 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 15:12:11.419 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41616 10 6452 1 2025-10-27 15:12:28.454 00:00:10.365 TCP 23.104.0.1:50842 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:08:48.186 00:05:03.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 15:13:11.638 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52646 10 6452 1 2025-10-27 15:13:28.858 00:00:10.373 TCP 23.104.0.1:47928 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:13:47.400 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 15:13:47.343 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 15:14:11.854 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53764 10 6452 1 2025-10-27 15:14:29.270 00:00:10.368 TCP 23.104.0.1:54156 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:15:12.083 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53378 10 6452 1 2025-10-27 15:15:29.670 00:00:10.364 TCP 23.104.0.1:60158 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:16:12.303 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:59580 10 6452 1 2025-10-27 15:16:30.105 00:00:10.368 TCP 23.104.0.1:47862 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:17:12.527 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34256 10 6452 1 2025-10-27 15:17:30.511 00:00:10.363 TCP 23.104.0.1:33834 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:13:48.193 00:05:03.299 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 15:18:12.735 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47176 10 6452 1 2025-10-27 15:18:30.915 00:00:10.322 TCP 23.104.0.1:37530 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:18:47.330 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 15:18:47.304 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 15:14:48.191 00:05:03.303 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 15:19:12.946 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52484 10 6452 1 2025-10-27 15:19:31.271 00:00:10.366 TCP 23.104.0.1:48878 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:20:13.172 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45692 10 6452 1 2025-10-27 15:20:31.676 00:00:10.326 TCP 23.104.0.1:53120 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:21:13.389 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43902 10 6452 1 2025-10-27 15:21:32.047 00:00:10.374 TCP 23.104.0.1:47334 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:22:13.599 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59834 10 6452 1 2025-10-27 15:22:32.459 00:00:10.324 TCP 23.104.0.1:41024 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:23:13.808 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38130 10 6452 1 2025-10-27 15:23:32.822 00:00:10.365 TCP 23.104.0.1:44556 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:23:47.382 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 15:23:47.291 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 15:19:48.194 00:05:03.299 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 15:24:14.026 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:39618 10 6452 1 2025-10-27 15:24:33.225 00:00:10.377 TCP 23.104.0.1:48684 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:20:48.192 00:05:03.305 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 15:25:14.232 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55396 10 6452 1 2025-10-27 15:25:33.652 00:00:10.367 TCP 23.104.0.1:38254 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:26:14.449 00:00:19.383 TCP 1.101.0.1:3000 -> 22.102.0.1:39598 10 6452 1 2025-10-27 15:26:34.061 00:00:10.370 TCP 23.104.0.1:54238 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:27:23.866 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51026 10 6452 1 2025-10-27 15:27:34.471 00:00:10.346 TCP 23.104.0.1:39494 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:28:24.089 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:39380 10 6452 1 2025-10-27 15:28:34.860 00:00:10.375 TCP 23.104.0.1:52588 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:28:47.408 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 15:28:47.337 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 15:29:24.322 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:48196 10 6452 1 2025-10-27 15:29:35.274 00:00:10.366 TCP 23.104.0.1:44182 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:25:48.195 00:05:03.300 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 15:30:24.504 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37178 10 6452 1 2025-10-27 15:30:35.682 00:00:10.369 TCP 23.104.0.1:57380 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:26:48.192 00:05:03.306 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 15:31:24.718 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47450 10 6452 1 2025-10-27 15:31:36.107 00:00:10.922 TCP 23.104.0.1:39384 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:32:24.897 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:48138 10 6452 1 2025-10-27 15:32:37.094 00:00:10.367 TCP 23.104.0.1:48748 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:33:25.085 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50580 10 6452 1 2025-10-27 15:33:47.668 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 15:33:37.499 00:00:10.318 TCP 23.104.0.1:51362 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:33:47.780 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 15:34:25.299 00:00:10.454 TCP 1.101.0.1:3000 -> 22.102.0.1:55092 10 6452 1 2025-10-27 15:34:37.860 00:00:10.364 TCP 23.104.0.1:48630 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:35:25.790 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32864 10 6452 1 2025-10-27 15:31:48.197 00:05:03.300 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 15:35:38.268 00:00:10.365 TCP 23.104.0.1:39812 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:36:26.011 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50418 10 6452 1 2025-10-27 15:36:38.686 00:00:10.371 TCP 23.104.0.1:44762 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:32:48.194 00:05:03.305 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 15:37:26.230 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:49196 10 6452 1 2025-10-27 15:37:39.105 00:00:10.320 TCP 23.104.0.1:32970 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:38:26.454 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:51702 10 6452 1 2025-10-27 15:38:47.732 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 15:38:39.469 00:00:10.365 TCP 23.104.0.1:45752 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:38:47.614 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 15:39:26.674 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48932 10 6452 1 2025-10-27 15:39:39.876 00:00:10.364 TCP 23.104.0.1:40586 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:40:26.855 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47998 10 6452 1 2025-10-27 15:40:40.285 00:00:10.324 TCP 23.104.0.1:37652 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:41:27.091 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57648 10 6452 1 2025-10-27 15:41:40.647 00:00:10.365 TCP 23.104.0.1:50992 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:37:48.202 00:05:03.295 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 15:42:27.301 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37528 10 6452 1 2025-10-27 15:42:41.061 00:00:10.370 TCP 23.104.0.1:45180 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:38:48.199 00:05:03.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 15:43:27.523 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47788 10 6452 1 2025-10-27 15:43:47.740 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 15:43:41.465 00:00:10.328 TCP 23.104.0.1:46600 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:43:47.811 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 15:44:27.737 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46824 10 6452 1 2025-10-27 15:44:41.834 00:00:10.389 TCP 23.104.0.1:38332 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:45:27.957 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:48974 13 6608 1 2025-10-27 15:45:42.258 00:00:10.369 TCP 23.104.0.1:45338 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:46:28.238 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45482 10 6452 1 2025-10-27 15:46:42.661 00:00:10.374 TCP 23.104.0.1:60990 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:47:28.453 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57492 10 6452 1 2025-10-27 15:43:48.203 00:05:03.295 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 15:47:43.097 00:00:10.363 TCP 23.104.0.1:46092 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:48:28.669 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54814 10 6452 1 2025-10-27 15:48:47.820 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 15:48:47.851 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 15:44:48.201 00:05:03.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 15:48:43.499 00:00:10.363 TCP 23.104.0.1:60420 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:49:28.879 00:00:17.479 TCP 1.101.0.1:3000 -> 22.102.0.1:45112 10 6452 1 2025-10-27 15:49:43.900 00:00:10.373 TCP 23.104.0.1:39400 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:50:36.398 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34060 10 6452 1 2025-10-27 15:50:44.311 00:00:10.326 TCP 23.104.0.1:41410 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:51:36.622 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:37438 10 6452 1 2025-10-27 15:51:44.677 00:00:10.333 TCP 23.104.0.1:43872 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:52:36.856 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47564 10 6452 1 2025-10-27 15:52:45.099 00:00:10.367 TCP 23.104.0.1:55572 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:53:37.080 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40044 10 6452 1 2025-10-27 15:53:48.021 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 15:53:47.760 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-10-27 15:53:45.504 00:00:10.389 TCP 23.104.0.1:44956 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:49:48.205 00:05:03.296 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-10-27 15:54:37.292 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33820 10 6452 1 2025-10-27 15:50:48.202 00:05:03.301 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-10-27 15:54:45.931 00:00:10.372 TCP 23.104.0.1:33246 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:55:37.516 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56312 10 6452 1 2025-10-27 15:55:46.337 00:00:10.379 TCP 23.104.0.1:36222 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:56:37.713 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36022 10 6452 1 2025-10-27 15:56:46.759 00:00:10.382 TCP 23.104.0.1:39480 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:57:37.881 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:42558 10 6452 1 2025-10-27 15:57:47.174 00:00:10.367 TCP 23.104.0.1:51206 -> 1.101.0.1:3000 11 1507 1 2025-10-27 15:58:48.031 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-10-27 15:58:38.107 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56758 10 6452 1 2025-10-27 15:58:47.900 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 163, total bytes: 497101, total packets: 1566, avg bps: 1052, avg pps: 0, avg bpp: 317 Time window: 2025-10-27 14:55:48 - 2025-10-27 15:58:48 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0048s User: 0.0010s Wall: 0.0022s flows/second: 74840.9 Runtime: 0.0022s