Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-27 21:55:01.968 00:05:00.254 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-27 21:58:52.585 00:00:10.363 TCP 23.104.0.1:57728 -> 1.101.0.1:3000 11 1507 1 2025-07-27 21:59:30.405 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-27 21:59:30.382 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-27 21:59:26.527 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:53088 10 6452 1 2025-07-27 21:59:52.986 00:00:10.324 TCP 23.104.0.1:33796 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:00:26.702 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50668 10 6452 1 2025-07-27 22:00:53.346 00:00:10.363 TCP 23.104.0.1:45264 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:01:26.917 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43638 10 6452 1 2025-07-27 22:01:53.751 00:00:10.321 TCP 23.104.0.1:40944 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:02:27.132 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44814 10 6452 1 2025-07-27 22:02:54.111 00:00:10.362 TCP 23.104.0.1:47588 -> 1.101.0.1:3000 11 1507 1 2025-07-27 21:59:01.967 00:05:00.260 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-27 22:03:27.298 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60550 10 6452 1 2025-07-27 22:03:54.512 00:00:10.363 TCP 23.104.0.1:33114 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:04:30.334 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-27 22:04:30.569 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-27 22:04:27.507 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48222 10 6452 1 2025-07-27 22:04:54.915 00:00:10.374 TCP 23.104.0.1:50738 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:01:01.969 00:05:00.256 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-27 22:05:27.720 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46696 10 6452 1 2025-07-27 22:05:55.318 00:00:10.331 TCP 23.104.0.1:59898 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:06:27.927 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:40564 10 6452 1 2025-07-27 22:06:55.687 00:00:10.369 TCP 23.104.0.1:39058 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:07:28.123 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:57622 10 6452 1 2025-07-27 22:07:56.105 00:00:10.368 TCP 23.104.0.1:45762 -> 1.101.0.1:3000 12 1559 1 2025-07-27 22:08:28.327 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:53930 10 6452 1 2025-07-27 22:08:56.506 00:00:10.367 TCP 23.104.0.1:47526 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:05:01.968 00:05:00.261 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-27 22:09:31.200 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-27 22:09:30.885 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-27 22:09:28.536 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:35842 10 6452 1 2025-07-27 22:09:56.911 00:00:10.372 TCP 23.104.0.1:49308 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:10:28.702 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58934 10 6452 1 2025-07-27 22:07:01.971 00:05:00.255 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-27 22:10:57.349 00:00:10.367 TCP 23.104.0.1:44506 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:11:28.919 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45998 10 6452 1 2025-07-27 22:11:57.752 00:00:10.363 TCP 23.104.0.1:50980 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:12:29.135 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57528 10 6452 1 2025-07-27 22:12:58.146 00:00:10.367 TCP 23.104.0.1:45576 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:13:29.364 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:34518 12 10365 1 2025-07-27 22:13:58.551 00:00:10.399 TCP 23.104.0.1:37510 -> 1.101.0.1:3000 15 1926 1 2025-07-27 22:14:30.624 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-27 22:14:30.614 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-27 22:14:29.613 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55828 10 6452 1 2025-07-27 22:11:01.969 00:05:00.259 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-27 22:14:58.990 00:00:10.367 TCP 23.104.0.1:43956 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:15:29.792 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45370 10 6452 1 2025-07-27 22:15:59.395 00:00:10.365 TCP 23.104.0.1:52600 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:16:30.016 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48398 10 6452 1 2025-07-27 22:13:01.973 00:05:00.254 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-27 22:16:59.799 00:00:10.369 TCP 23.104.0.1:59264 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:17:30.227 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51532 10 6452 1 2025-07-27 22:18:00.210 00:00:10.369 TCP 23.104.0.1:35312 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:18:30.452 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:51786 10 6452 1 2025-07-27 22:19:00.621 00:00:10.365 TCP 23.104.0.1:47388 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:19:30.775 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-27 22:19:30.824 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-27 22:19:30.626 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39644 10 6452 1 2025-07-27 22:20:01.026 00:00:10.358 TCP 23.104.0.1:38228 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:20:30.833 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59926 10 6452 1 2025-07-27 22:17:01.970 00:05:00.259 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-27 22:21:01.422 00:00:10.364 TCP 23.104.0.1:54760 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:21:31.070 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56210 10 6452 1 2025-07-27 22:22:01.826 00:00:10.353 TCP 23.104.0.1:52532 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:22:31.279 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:43266 10 6452 1 2025-07-27 22:19:01.974 00:05:00.254 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-27 22:23:02.224 00:00:10.321 TCP 23.104.0.1:46048 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:23:31.517 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42712 10 6452 1 2025-07-27 22:24:02.586 00:00:10.367 TCP 23.104.0.1:38336 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:24:31.034 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-27 22:24:30.927 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-27 22:24:31.734 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36916 10 6452 1 2025-07-27 22:25:02.990 00:00:10.367 TCP 23.104.0.1:54110 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:25:31.960 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:44056 10 6452 1 2025-07-27 22:26:03.397 00:00:10.363 TCP 23.104.0.1:45250 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:26:32.206 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44162 10 6452 1 2025-07-27 22:23:01.971 00:05:00.259 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-27 22:27:03.800 00:00:10.366 TCP 23.104.0.1:45622 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:27:32.420 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49342 10 6452 1 2025-07-27 22:28:04.217 00:00:10.364 TCP 23.104.0.1:60084 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:28:32.628 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51014 10 6452 1 2025-07-27 22:25:01.974 00:05:00.255 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-27 22:29:04.621 00:00:10.368 TCP 23.104.0.1:46276 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:29:31.146 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-27 22:29:31.210 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-27 22:29:32.841 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35938 10 6452 1 2025-07-27 22:30:05.020 00:00:10.364 TCP 23.104.0.1:36402 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:30:33.014 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33444 10 6452 1 2025-07-27 22:31:05.419 00:00:10.325 TCP 23.104.0.1:55906 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:31:33.227 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33722 10 6452 1 2025-07-27 22:32:05.786 00:00:10.389 TCP 23.104.0.1:37720 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:32:33.437 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34090 10 6452 1 2025-07-27 22:29:01.972 00:05:00.260 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-27 22:33:06.214 00:00:10.365 TCP 23.104.0.1:59728 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:33:33.652 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:55548 10 6452 1 2025-07-27 22:34:06.615 00:00:10.360 TCP 23.104.0.1:34256 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:34:31.112 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-27 22:34:30.829 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-27 22:34:33.860 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:42148 10 6452 1 2025-07-27 22:31:01.975 00:05:00.255 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-27 22:35:07.015 00:00:10.364 TCP 23.104.0.1:37064 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:35:34.035 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:35818 10 6452 1 2025-07-27 22:36:07.418 00:00:10.368 TCP 23.104.0.1:36610 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:36:34.244 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52994 10 6452 1 2025-07-27 22:37:07.822 00:00:10.449 TCP 23.104.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:37:34.462 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36672 10 6452 1 2025-07-27 22:38:08.311 00:00:10.326 TCP 23.104.0.1:48924 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:38:34.673 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49034 10 6452 1 2025-07-27 22:35:01.973 00:05:00.262 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-27 22:39:08.676 00:00:10.359 TCP 23.104.0.1:57004 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:39:31.255 00:00:00.002 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-27 22:39:31.246 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-27 22:39:34.894 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50476 10 6452 1 2025-07-27 22:40:09.102 00:00:10.362 TCP 23.104.0.1:50110 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:40:35.108 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56696 10 6452 1 2025-07-27 22:37:01.977 00:05:00.256 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-27 22:41:09.504 00:00:10.361 TCP 23.104.0.1:57726 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:41:35.320 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43538 10 6452 1 2025-07-27 22:42:09.902 00:00:10.331 TCP 23.104.0.1:56972 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:42:35.538 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48416 10 6452 1 2025-07-27 22:43:10.282 00:00:10.369 TCP 23.104.0.1:50600 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:43:35.750 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42538 12 6556 1 2025-07-27 22:44:10.685 00:00:10.369 TCP 23.104.0.1:55012 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:44:31.390 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-27 22:44:31.229 00:00:00.035 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-27 22:44:35.967 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52806 10 6452 1 2025-07-27 22:41:01.975 00:05:00.262 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-27 22:45:11.108 00:00:10.326 TCP 23.104.0.1:54072 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:45:36.193 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49564 10 6452 1 2025-07-27 22:46:11.476 00:00:10.321 TCP 23.104.0.1:41408 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:46:36.407 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:50582 10 6452 1 2025-07-27 22:43:01.977 00:05:00.256 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-27 22:47:11.835 00:00:10.393 TCP 23.104.0.1:41518 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:47:36.618 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55280 10 6452 1 2025-07-27 22:48:12.269 00:00:10.330 TCP 23.104.0.1:35636 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:48:36.830 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40312 10 6452 1 2025-07-27 22:49:12.638 00:00:10.366 TCP 23.104.0.1:38128 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:49:31.330 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-27 22:49:31.495 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-27 22:49:37.068 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50136 10 6452 1 2025-07-27 22:50:13.064 00:00:10.371 TCP 23.104.0.1:41388 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:50:37.283 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35030 10 6452 1 2025-07-27 22:47:01.976 00:05:00.262 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-27 22:51:13.471 00:00:10.325 TCP 23.104.0.1:47884 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:51:37.512 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:40910 10 6452 1 2025-07-27 22:52:13.837 00:00:10.389 TCP 23.104.0.1:58536 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:52:37.713 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46228 10 6452 1 2025-07-27 22:49:01.978 00:05:00.257 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-27 22:53:14.264 00:00:10.369 TCP 23.104.0.1:50306 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:53:37.926 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33358 10 6452 1 2025-07-27 22:54:14.669 00:00:10.366 TCP 23.104.0.1:57412 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:54:31.485 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-27 22:54:31.618 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-27 22:54:38.149 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57240 10 6452 1 2025-07-27 22:55:15.108 00:00:10.363 TCP 23.104.0.1:43424 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:55:38.358 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48470 10 6452 1 2025-07-27 22:56:15.513 00:00:10.372 TCP 23.104.0.1:44432 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:56:38.567 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48024 10 6452 1 2025-07-27 22:53:01.977 00:05:00.261 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-27 22:57:15.928 00:00:10.402 TCP 23.104.0.1:40278 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:57:38.784 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:51942 10 6452 1 2025-07-27 22:58:16.365 00:00:10.360 TCP 23.104.0.1:46990 -> 1.101.0.1:3000 11 1507 1 2025-07-27 22:58:38.987 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49028 10 6452 1 Summary: total flows: 164, total bytes: 502836, total packets: 1581, avg bps: 1051, avg pps: 0, avg bpp: 318 Time window: 2025-07-27 21:55:01 - 2025-07-27 22:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0039s User: 0.0010s Wall: 0.0029s flows/second: 56764.0 Runtime: 0.0029s