Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-21 13:58:56.554 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55512 10 6438 1 2025-07-21 13:59:25.917 00:00:10.384 TCP 23.104.0.1:39034 -> 1.101.0.1:3000 11 1507 1 2025-07-21 13:59:56.766 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46104 10 6438 1 2025-07-21 14:00:26.342 00:00:10.363 TCP 23.104.0.1:41222 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:00:56.978 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:60064 10 6438 1 2025-07-21 14:01:27.567 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 14:01:27.617 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 14:01:26.747 00:00:10.329 TCP 23.104.0.1:50108 -> 1.101.0.1:3000 11 1507 1 2025-07-21 13:57:58.986 00:05:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 13:57:58.989 00:05:00.170 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 14:01:57.211 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47530 10 6438 1 2025-07-21 14:02:27.118 00:00:10.325 TCP 23.104.0.1:55554 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:02:57.420 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39886 10 6438 1 2025-07-21 14:03:27.481 00:00:10.365 TCP 23.104.0.1:55400 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:03:57.629 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:35198 10 6438 1 2025-07-21 14:04:27.883 00:00:10.383 TCP 23.104.0.1:47662 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:04:57.836 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46460 10 6438 1 2025-07-21 14:05:28.304 00:00:10.323 TCP 23.104.0.1:39410 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:05:58.068 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54742 10 6438 1 2025-07-21 14:06:27.518 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 14:06:27.509 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 14:06:28.663 00:00:10.372 TCP 23.104.0.1:47674 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:06:58.291 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:37416 10 6438 1 2025-07-21 14:07:29.094 00:00:10.364 TCP 23.104.0.1:40044 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:03:58.987 00:05:00.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 14:03:58.990 00:05:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 14:07:58.466 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59020 10 6438 1 2025-07-21 14:08:29.496 00:00:10.380 TCP 23.104.0.1:34752 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:08:58.679 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:36982 10 6438 1 2025-07-21 14:09:29.908 00:00:10.365 TCP 23.104.0.1:53668 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:09:58.910 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59048 10 6438 1 2025-07-21 14:10:30.311 00:00:10.327 TCP 23.104.0.1:58878 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:10:59.122 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36794 10 6438 1 2025-07-21 14:11:27.858 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 14:11:27.907 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 14:11:30.674 00:00:10.373 TCP 23.104.0.1:50218 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:11:59.337 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46744 10 6438 1 2025-07-21 14:12:31.106 00:00:10.363 TCP 23.104.0.1:35620 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:12:59.588 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:35060 10 6438 1 2025-07-21 14:13:31.513 00:00:10.367 TCP 23.104.0.1:42368 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:09:58.991 00:05:00.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 14:09:58.989 00:05:00.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 14:13:59.767 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53886 10 6438 1 2025-07-21 14:14:31.926 00:00:10.396 TCP 23.104.0.1:39090 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:14:59.984 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:49906 10 6438 1 2025-07-21 14:15:32.362 00:00:10.372 TCP 23.104.0.1:40990 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:16:00.168 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39604 10 6438 1 2025-07-21 14:16:27.916 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 14:16:27.838 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 14:16:32.774 00:00:10.366 TCP 23.104.0.1:56662 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:17:00.383 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54034 10 6438 1 2025-07-21 14:17:33.175 00:00:10.366 TCP 23.104.0.1:36790 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:18:00.602 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58234 10 6438 1 2025-07-21 14:18:33.581 00:00:10.367 TCP 23.104.0.1:34508 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:19:00.813 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53308 10 6438 1 2025-07-21 14:19:33.988 00:00:10.335 TCP 23.104.0.1:52810 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:15:58.989 00:05:00.177 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 14:15:58.993 00:05:00.172 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 14:20:00.992 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47460 12 6542 1 2025-07-21 14:20:34.362 00:00:10.368 TCP 23.104.0.1:38752 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:21:01.215 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:34884 10 6438 1 2025-07-21 14:21:28.038 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 14:21:27.961 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 14:21:34.778 00:00:10.367 TCP 23.104.0.1:33568 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:22:01.379 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36434 10 6438 1 2025-07-21 14:22:35.181 00:00:10.384 TCP 23.104.0.1:44646 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:23:01.590 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44494 10 6438 1 2025-07-21 14:23:35.600 00:00:10.369 TCP 23.104.0.1:55670 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:24:01.806 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59890 10 6438 1 2025-07-21 14:24:36.010 00:00:10.383 TCP 23.104.0.1:56598 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:25:02.023 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45188 10 6438 1 2025-07-21 14:25:36.431 00:00:10.326 TCP 23.104.0.1:40066 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:21:58.991 00:05:00.178 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 14:21:58.994 00:05:00.173 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 14:26:02.233 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49298 10 6438 1 2025-07-21 14:26:28.110 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 14:26:28.036 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 14:26:36.796 00:00:10.368 TCP 23.104.0.1:34976 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:27:02.404 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58226 10 6438 1 2025-07-21 14:27:37.201 00:00:10.365 TCP 23.104.0.1:32964 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:28:02.617 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46102 10 6438 1 2025-07-21 14:28:37.601 00:00:10.325 TCP 23.104.0.1:41110 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:29:02.785 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46448 10 6438 1 2025-07-21 14:29:37.969 00:00:10.369 TCP 23.104.0.1:51006 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:30:03.004 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50284 10 6438 1 2025-07-21 14:30:38.375 00:00:10.365 TCP 23.104.0.1:54488 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:31:03.226 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58230 10 6438 1 2025-07-21 14:31:27.879 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 14:31:27.969 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 14:31:38.781 00:00:10.366 TCP 23.104.0.1:60924 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:27:58.994 00:05:00.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 14:27:58.992 00:05:00.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 14:32:03.440 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34990 10 6438 1 2025-07-21 14:32:39.184 00:00:10.365 TCP 23.104.0.1:42574 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:33:03.648 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55342 10 6438 1 2025-07-21 14:33:39.587 00:00:10.364 TCP 23.104.0.1:51454 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:34:03.861 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44430 10 6438 1 2025-07-21 14:34:39.989 00:00:10.325 TCP 23.104.0.1:35146 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:35:04.082 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:47010 10 6438 1 2025-07-21 14:35:40.353 00:00:10.320 TCP 23.104.0.1:32884 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:36:04.253 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45622 10 6438 1 2025-07-21 14:36:28.095 00:00:00.047 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 14:36:28.193 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 14:36:40.720 00:00:10.374 TCP 23.104.0.1:45570 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:37:04.469 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33100 10 6438 1 2025-07-21 14:37:41.146 00:00:10.367 TCP 23.104.0.1:57462 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:33:58.995 00:05:00.175 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 14:33:58.994 00:05:00.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 14:38:04.699 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:57534 10 6438 1 2025-07-21 14:38:41.556 00:00:10.363 TCP 23.104.0.1:58738 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:39:04.883 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45240 10 6438 1 2025-07-21 14:39:41.952 00:00:10.370 TCP 23.104.0.1:49466 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:40:05.106 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47988 10 6438 1 2025-07-21 14:40:42.356 00:00:10.322 TCP 23.104.0.1:35106 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:41:05.321 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36076 10 6438 1 2025-07-21 14:41:28.429 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 14:41:28.503 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 14:41:42.713 00:00:10.375 TCP 23.104.0.1:44640 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:42:05.543 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54934 10 6438 1 2025-07-21 14:42:43.127 00:00:10.365 TCP 23.104.0.1:57468 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:43:05.764 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48666 10 6438 1 2025-07-21 14:43:43.532 00:00:10.362 TCP 23.104.0.1:45976 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:39:58.993 00:05:00.181 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-21 14:39:58.997 00:05:00.175 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-21 14:44:05.967 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39028 10 6438 1 2025-07-21 14:44:43.927 00:00:10.383 TCP 23.104.0.1:56378 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:45:06.190 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43606 10 6438 1 2025-07-21 14:45:44.346 00:00:10.422 TCP 23.104.0.1:52808 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:46:06.397 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39960 10 6438 1 2025-07-21 14:46:28.341 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 14:46:28.468 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 14:46:44.804 00:00:10.336 TCP 23.104.0.1:45914 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:47:06.612 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:45442 10 6438 1 2025-07-21 14:47:45.178 00:00:10.377 TCP 23.104.0.1:33622 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:48:06.827 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45804 10 6438 1 2025-07-21 14:48:45.584 00:00:10.369 TCP 23.104.0.1:36938 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:49:07.071 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46882 10 6438 1 2025-07-21 14:49:46.004 00:00:10.371 TCP 23.104.0.1:34590 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:50:07.297 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42114 10 6438 1 2025-07-21 14:50:46.414 00:00:10.369 TCP 23.104.0.1:36084 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:45:59.003 00:06:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-21 14:45:59.000 00:06:00.175 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-21 14:51:07.519 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:33226 10 6438 1 2025-07-21 14:51:28.408 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 14:51:28.566 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 14:51:46.821 00:00:10.367 TCP 23.104.0.1:44810 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:52:07.706 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42012 10 6438 1 2025-07-21 14:52:47.223 00:00:10.363 TCP 23.104.0.1:33728 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:53:07.922 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47998 10 6438 1 2025-07-21 14:53:47.622 00:00:10.321 TCP 23.104.0.1:48926 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:54:08.151 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56318 10 6438 1 2025-07-21 14:54:47.985 00:00:10.325 TCP 23.104.0.1:46798 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:55:08.368 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47606 10 6438 1 2025-07-21 14:55:48.348 00:00:10.379 TCP 23.104.0.1:54830 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:56:08.589 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33610 10 6438 1 2025-07-21 14:56:28.455 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-21 14:56:28.389 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-21 14:56:48.783 00:00:10.367 TCP 23.104.0.1:52126 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:57:08.764 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41360 10 6438 1 2025-07-21 14:57:49.189 00:00:10.362 TCP 23.104.0.1:54094 -> 1.101.0.1:3000 11 1507 1 2025-07-21 14:52:59.001 00:06:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-21 14:52:59.005 00:06:00.167 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-21 14:58:08.979 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:56482 10 6438 1 Summary: total flows: 163, total bytes: 496597, total packets: 1571, avg bps: 1085, avg pps: 0, avg bpp: 316 Time window: 2025-07-21 13:57:58 - 2025-07-21 14:58:59 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0033s User: 0.0011s Wall: 0.0035s flows/second: 46032.3 Runtime: 0.0036s