Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-21 21:59:00.764 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60912 10 7079 1 2025-11-21 21:59:04.389 00:00:10.364 TCP 23.104.0.1:34414 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:00:00.981 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60208 10 7079 1 2025-11-21 22:00:04.800 00:00:10.368 TCP 23.104.0.1:59406 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:00:59.120 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 22:00:58.856 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 22:01:01.222 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:44786 10 7079 1 2025-11-21 22:01:05.205 00:00:11.068 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-11-21 21:58:01.801 00:05:04.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 21:58:01.799 00:05:04.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 22:02:01.446 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33408 10 7079 1 2025-11-21 22:02:06.308 00:00:10.367 TCP 23.104.0.1:44292 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:03:01.673 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43960 10 7079 1 2025-11-21 22:03:06.717 00:00:10.367 TCP 23.104.0.1:46054 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:04:01.887 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37746 10 7079 1 2025-11-21 22:04:07.132 00:00:10.365 TCP 23.104.0.1:40500 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:05:02.081 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46238 10 7079 1 2025-11-21 22:05:07.536 00:00:10.367 TCP 23.104.0.1:50508 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:05:59.492 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 22:05:59.520 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 22:06:02.253 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41784 10 7079 1 2025-11-21 22:06:07.943 00:00:10.378 TCP 23.104.0.1:37340 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:07:02.469 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47606 10 7079 1 2025-11-21 22:07:08.359 00:00:10.365 TCP 23.104.0.1:53144 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:04:01.808 00:05:04.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 22:04:01.810 00:05:04.139 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 22:08:02.691 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39728 10 7079 1 2025-11-21 22:08:08.760 00:00:10.379 TCP 23.104.0.1:40958 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:09:02.910 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42632 10 7079 1 2025-11-21 22:09:09.175 00:00:10.367 TCP 23.104.0.1:35078 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:10:03.130 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47186 10 7079 1 2025-11-21 22:10:09.578 00:00:10.323 TCP 23.104.0.1:44142 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:10:59.245 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 22:10:59.229 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 22:11:03.348 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40848 10 7079 1 2025-11-21 22:11:09.939 00:00:10.375 TCP 23.104.0.1:43880 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:12:03.531 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47756 10 7079 1 2025-11-21 22:12:10.349 00:00:10.366 TCP 23.104.0.1:42630 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:13:03.754 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58314 10 7079 1 2025-11-21 22:13:10.755 00:00:10.371 TCP 23.104.0.1:55528 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:10:01.807 00:05:04.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 22:10:01.809 00:05:04.141 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 22:14:03.963 00:00:11.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39776 11 7131 1 2025-11-21 22:14:11.167 00:00:10.503 TCP 23.104.0.1:41686 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:15:05.134 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52044 10 7079 1 2025-11-21 22:15:11.716 00:00:10.373 TCP 23.104.0.1:52742 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:15:59.351 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 22:15:59.208 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 22:16:05.345 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45982 10 7079 1 2025-11-21 22:16:12.135 00:00:10.335 TCP 23.104.0.1:48342 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:17:05.558 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:35218 10 7079 1 2025-11-21 22:17:12.518 00:00:10.364 TCP 23.104.0.1:38252 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:18:05.731 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40042 10 7079 1 2025-11-21 22:18:12.919 00:00:10.393 TCP 23.104.0.1:55584 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:19:05.941 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:57992 10 7079 1 2025-11-21 22:19:13.351 00:00:10.371 TCP 23.104.0.1:49074 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:16:01.817 00:05:04.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 22:16:01.819 00:05:04.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 22:20:06.169 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52326 10 7079 1 2025-11-21 22:20:13.760 00:00:10.369 TCP 23.104.0.1:58458 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:20:59.580 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 22:20:59.972 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 22:21:06.393 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:37198 10 7079 1 2025-11-21 22:21:14.164 00:00:10.364 TCP 23.104.0.1:53742 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:22:06.605 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:47664 10 7079 1 2025-11-21 22:22:14.560 00:00:10.363 TCP 23.104.0.1:44324 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:23:06.790 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40482 10 7079 1 2025-11-21 22:23:14.962 00:00:10.383 TCP 23.104.0.1:40288 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:24:07.005 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48812 10 7079 1 2025-11-21 22:24:15.381 00:00:10.365 TCP 23.104.0.1:57762 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:25:07.184 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37570 10 7079 1 2025-11-21 22:25:15.788 00:00:10.365 TCP 23.104.0.1:57418 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:25:59.525 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 22:22:01.816 00:05:04.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 22:25:59.324 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 22:22:01.819 00:05:04.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 22:26:07.356 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:39388 10 7079 1 2025-11-21 22:26:16.189 00:00:10.671 TCP 23.104.0.1:37570 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:27:07.554 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53902 10 7079 1 2025-11-21 22:27:16.888 00:00:10.369 TCP 23.104.0.1:60606 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:28:07.775 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:42600 10 7079 1 2025-11-21 22:28:17.295 00:00:10.993 TCP 23.104.0.1:44996 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:29:07.948 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:38628 10 7079 1 2025-11-21 22:29:18.329 00:00:10.330 TCP 23.104.0.1:35750 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:30:08.190 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50174 10 7079 1 2025-11-21 22:30:18.699 00:00:11.590 TCP 23.104.0.1:40266 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:30:59.579 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 22:30:59.467 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 22:31:08.405 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:32978 10 7079 1 2025-11-21 22:31:20.337 00:00:10.360 TCP 23.104.0.1:40438 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:28:01.820 00:05:04.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 22:28:01.819 00:05:04.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 22:32:08.652 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56926 10 7079 1 2025-11-21 22:32:20.740 00:00:10.322 TCP 23.104.0.1:40042 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:33:08.864 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:49706 10 7079 1 2025-11-21 22:33:21.112 00:00:10.371 TCP 23.104.0.1:54442 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:34:09.061 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54782 10 7079 1 2025-11-21 22:34:21.522 00:00:10.358 TCP 23.104.0.1:38420 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:35:09.276 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57944 10 7079 1 2025-11-21 22:35:21.928 00:00:10.384 TCP 23.104.0.1:33730 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:35:59.829 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 22:35:59.888 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 22:36:09.490 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40178 10 7079 1 2025-11-21 22:36:22.352 00:00:10.366 TCP 23.104.0.1:58958 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:37:09.704 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:56768 10 7079 1 2025-11-21 22:37:22.757 00:00:10.837 TCP 23.104.0.1:39686 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:34:01.821 00:05:04.137 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 22:34:01.819 00:05:04.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 22:38:09.872 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43746 10 7079 1 2025-11-21 22:38:23.634 00:00:10.362 TCP 23.104.0.1:55554 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:39:10.093 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46366 10 7079 1 2025-11-21 22:39:24.049 00:00:10.364 TCP 23.104.0.1:39068 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:40:10.309 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48470 10 7079 1 2025-11-21 22:40:24.456 00:00:10.361 TCP 23.104.0.1:53334 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:40:59.809 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 22:40:59.718 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 22:41:10.534 00:00:10.815 TCP 1.101.0.1:3000 -> 22.102.0.1:34488 10 7079 1 2025-11-21 22:41:24.849 00:00:10.335 TCP 23.104.0.1:41720 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:42:11.390 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56504 10 7079 1 2025-11-21 22:42:25.223 00:00:10.364 TCP 23.104.0.1:37668 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:43:11.606 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57392 10 7079 1 2025-11-21 22:43:25.640 00:00:10.370 TCP 23.104.0.1:40328 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:40:01.826 00:05:04.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 22:40:01.823 00:05:04.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 22:44:11.823 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49412 10 7079 1 2025-11-21 22:44:26.055 00:00:10.373 TCP 23.104.0.1:40116 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:45:12.065 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47090 10 7079 1 2025-11-21 22:45:26.480 00:00:10.360 TCP 23.104.0.1:40552 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:46:00.164 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 22:46:00.448 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 22:46:12.236 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39888 10 7079 1 2025-11-21 22:46:26.880 00:00:10.391 TCP 23.104.0.1:42102 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:47:12.452 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58084 10 7079 1 2025-11-21 22:47:27.307 00:00:10.366 TCP 23.104.0.1:34812 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:48:12.623 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36938 10 7079 1 2025-11-21 22:48:27.714 00:00:10.337 TCP 23.104.0.1:47114 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:49:12.835 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42716 10 7079 1 2025-11-21 22:49:28.105 00:00:10.359 TCP 23.104.0.1:40006 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:46:01.825 00:05:04.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 22:46:01.827 00:05:04.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 22:50:13.074 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51048 10 7079 1 2025-11-21 22:50:28.502 00:00:10.329 TCP 23.104.0.1:49788 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:50:59.954 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 22:51:00.032 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 22:51:13.296 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47188 10 7079 1 2025-11-21 22:51:28.871 00:00:10.366 TCP 23.104.0.1:46318 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:52:13.513 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55660 10 7079 1 2025-11-21 22:52:29.280 00:00:10.334 TCP 23.104.0.1:45312 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:53:13.724 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57302 10 7079 1 2025-11-21 22:53:29.650 00:00:10.371 TCP 23.104.0.1:33494 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:54:13.943 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:33598 10 7079 1 2025-11-21 22:54:30.064 00:00:10.594 TCP 23.104.0.1:43778 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:55:14.177 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35876 10 7079 1 2025-11-21 22:55:30.696 00:00:10.363 TCP 23.104.0.1:54466 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:55:59.990 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-21 22:56:00.033 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-21 22:52:01.831 00:05:04.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-21 22:52:01.828 00:05:04.138 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-21 22:56:14.391 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54320 10 7079 1 2025-11-21 22:56:31.122 00:00:10.367 TCP 23.104.0.1:56690 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:57:14.608 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34426 10 7079 1 2025-11-21 22:57:31.528 00:00:10.370 TCP 23.104.0.1:39464 -> 1.101.0.1:3000 11 1507 1 2025-11-21 22:58:14.832 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49542 10 7079 1 2025-11-21 22:58:31.937 00:00:10.375 TCP 23.104.0.1:55254 -> 1.101.0.1:3000 12 1559 1 Summary: total flows: 164, total bytes: 536072, total packets: 1574, avg bps: 1178, avg pps: 0, avg bpp: 340 Time window: 2025-11-21 21:58:01 - 2025-11-21 22:58:42 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0027s Wall: 0.0035s flows/second: 46898.9 Runtime: 0.0035s