Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-10 20:58:57.461 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:56952 12 10367 1 2025-08-10 20:55:09.314 00:05:00.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 20:59:23.586 00:00:10.395 TCP 23.104.0.1:36198 -> 1.101.0.1:3000 15 1926 1 2025-08-10 20:59:57.699 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:33516 10 6452 1 2025-08-10 21:00:24.019 00:00:10.364 TCP 23.104.0.1:55850 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:00:57.929 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:53748 10 6452 1 2025-08-10 20:57:09.317 00:05:00.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 21:01:13.396 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 21:01:13.587 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 21:01:24.419 00:00:10.329 TCP 23.104.0.1:38034 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:01:58.108 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41688 10 6452 1 2025-08-10 21:02:24.787 00:00:10.372 TCP 23.104.0.1:42786 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:02:58.331 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:44550 10 6452 1 2025-08-10 21:03:25.203 00:00:10.330 TCP 23.104.0.1:42418 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:03:58.506 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:36184 10 6452 1 2025-08-10 21:04:25.571 00:00:10.361 TCP 23.104.0.1:34246 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:04:58.723 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58012 10 6452 1 2025-08-10 21:01:09.316 00:05:00.780 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 21:05:25.966 00:00:10.379 TCP 23.104.0.1:48348 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:05:58.939 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:47716 10 6452 1 2025-08-10 21:06:13.771 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 21:06:13.674 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 21:06:26.388 00:00:10.368 TCP 23.104.0.1:60006 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:03:09.318 00:05:00.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 21:06:59.177 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49894 10 6452 1 2025-08-10 21:07:26.797 00:00:10.365 TCP 23.104.0.1:39000 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:07:59.398 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:60726 10 6452 1 2025-08-10 21:08:27.201 00:00:10.366 TCP 23.104.0.1:43586 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:08:59.573 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59576 10 6452 1 2025-08-10 21:09:27.605 00:00:10.366 TCP 23.104.0.1:39680 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:09:59.788 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60276 10 6452 1 2025-08-10 21:10:28.017 00:00:10.362 TCP 23.104.0.1:42012 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:11:00.003 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39012 10 6452 1 2025-08-10 21:07:09.316 00:05:00.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 21:11:13.988 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 21:11:13.854 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 21:11:28.420 00:00:10.367 TCP 23.104.0.1:39198 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:12:00.216 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33846 10 6452 1 2025-08-10 21:12:28.821 00:00:10.367 TCP 23.104.0.1:56948 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:09:09.319 00:05:00.780 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 21:13:00.430 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45950 10 6452 1 2025-08-10 21:13:29.227 00:00:10.366 TCP 23.104.0.1:38452 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:14:00.645 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57582 10 6452 1 2025-08-10 21:14:29.633 00:00:10.364 TCP 23.104.0.1:60818 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:15:00.873 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:33102 10 6452 1 2025-08-10 21:15:30.046 00:00:10.324 TCP 23.104.0.1:54408 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:16:13.878 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 21:16:01.108 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37054 10 6452 1 2025-08-10 21:16:13.874 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 21:16:30.409 00:00:10.362 TCP 23.104.0.1:42772 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:17:01.321 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51404 10 6452 1 2025-08-10 21:13:09.317 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 21:17:30.805 00:00:10.331 TCP 23.104.0.1:42014 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:18:01.492 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44616 10 6452 1 2025-08-10 21:18:31.177 00:00:10.366 TCP 23.104.0.1:52552 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:15:09.322 00:05:00.777 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 21:19:01.710 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38310 10 6452 1 2025-08-10 21:19:31.581 00:00:10.365 TCP 23.104.0.1:40072 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:20:01.885 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:54616 10 6452 1 2025-08-10 21:20:31.989 00:00:10.370 TCP 23.104.0.1:34030 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:21:13.994 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 21:21:02.113 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52708 10 6452 1 2025-08-10 21:21:13.683 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 21:21:32.398 00:00:10.365 TCP 23.104.0.1:47884 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:22:02.327 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39880 10 6452 1 2025-08-10 21:22:32.798 00:00:10.370 TCP 23.104.0.1:59914 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:19:09.319 00:05:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 21:23:02.538 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49738 10 6452 1 2025-08-10 21:23:33.210 00:00:10.371 TCP 23.104.0.1:59530 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:24:02.710 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33042 10 6452 1 2025-08-10 21:24:33.620 00:00:10.325 TCP 23.104.0.1:37428 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:21:09.325 00:05:00.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 21:25:02.924 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33130 10 6452 1 2025-08-10 21:25:33.984 00:00:10.371 TCP 23.104.0.1:36700 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:26:14.228 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 21:26:03.134 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53758 10 6452 1 2025-08-10 21:26:14.004 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 21:26:34.394 00:00:10.366 TCP 23.104.0.1:41898 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:27:03.346 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:58170 10 6452 1 2025-08-10 21:27:34.802 00:00:10.366 TCP 23.104.0.1:35128 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:28:03.533 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59372 10 6452 1 2025-08-10 21:28:35.207 00:00:10.372 TCP 23.104.0.1:39646 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:25:09.323 00:05:00.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 21:29:03.708 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47392 10 6452 1 2025-08-10 21:29:35.622 00:00:10.366 TCP 23.104.0.1:43162 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:30:03.882 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38154 10 6452 1 2025-08-10 21:30:36.024 00:00:10.364 TCP 23.104.0.1:55366 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:31:14.217 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 21:31:04.096 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57844 10 6452 1 2025-08-10 21:27:09.337 00:05:00.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 21:31:13.864 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 21:31:36.425 00:00:10.366 TCP 23.104.0.1:45274 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:32:04.308 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:53126 11 6492 1 2025-08-10 21:32:36.828 00:00:10.348 TCP 23.104.0.1:47800 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:33:04.543 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:49038 10 6452 1 2025-08-10 21:33:37.225 00:00:10.372 TCP 23.104.0.1:50978 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:34:04.763 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:60706 12 10365 1 2025-08-10 21:34:37.651 00:00:10.446 TCP 23.104.0.1:35896 -> 1.101.0.1:3000 15 1926 1 2025-08-10 21:31:09.335 00:05:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 21:35:05.015 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42974 10 6452 1 2025-08-10 21:35:38.137 00:00:10.369 TCP 23.104.0.1:38824 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:36:14.071 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 21:36:14.281 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 21:36:05.236 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60948 10 6452 1 2025-08-10 21:36:38.543 00:00:10.367 TCP 23.104.0.1:59916 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:33:09.338 00:05:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 21:37:05.449 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57066 10 6452 1 2025-08-10 21:37:38.951 00:00:10.397 TCP 23.104.0.1:32996 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:38:05.660 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47616 10 6452 1 2025-08-10 21:38:39.397 00:00:10.363 TCP 23.104.0.1:50716 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:39:05.874 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52962 10 6452 1 2025-08-10 21:39:39.797 00:00:10.334 TCP 23.104.0.1:34040 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:40:06.090 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39454 10 6452 1 2025-08-10 21:40:40.167 00:00:10.324 TCP 23.104.0.1:57194 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:37:09.335 00:05:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 21:41:14.529 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 21:41:14.321 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 21:41:06.313 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:34244 10 6452 1 2025-08-10 21:41:40.531 00:00:10.363 TCP 23.104.0.1:41812 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:42:06.525 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42982 10 6452 1 2025-08-10 21:42:40.932 00:00:10.387 TCP 23.104.0.1:41276 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:39:09.338 00:05:00.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 21:43:06.740 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45274 10 6452 1 2025-08-10 21:43:41.353 00:00:10.365 TCP 23.104.0.1:44900 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:44:06.945 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:37106 10 6452 1 2025-08-10 21:44:41.756 00:00:10.327 TCP 23.104.0.1:33678 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:45:07.177 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41820 10 6452 1 2025-08-10 21:45:42.123 00:00:10.497 TCP 23.104.0.1:41866 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:46:14.429 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 21:46:14.298 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 21:46:07.394 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49544 10 6452 1 2025-08-10 21:46:42.662 00:00:10.359 TCP 23.104.0.1:41228 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:43:09.336 00:05:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 21:47:07.602 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37010 10 6452 1 2025-08-10 21:47:43.091 00:00:10.324 TCP 23.104.0.1:50610 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:48:07.815 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51436 10 6452 1 2025-08-10 21:48:43.456 00:00:10.322 TCP 23.104.0.1:59204 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:45:09.340 00:05:00.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 21:49:08.039 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59822 10 6452 1 2025-08-10 21:49:43.821 00:00:10.361 TCP 23.104.0.1:52528 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:50:08.257 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41314 10 6452 1 2025-08-10 21:50:44.224 00:00:10.361 TCP 23.104.0.1:39246 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:51:14.620 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 21:51:14.520 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 21:51:08.469 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55368 10 6452 1 2025-08-10 21:51:44.628 00:00:10.367 TCP 23.104.0.1:50086 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:52:08.677 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:48308 10 6452 1 2025-08-10 21:52:45.034 00:00:10.364 TCP 23.104.0.1:40236 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:49:09.338 00:05:00.773 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-10 21:53:08.846 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47676 10 6452 1 2025-08-10 21:53:45.435 00:00:10.585 TCP 23.104.0.1:32844 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:54:09.077 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:41716 10 6452 1 2025-08-10 21:54:46.073 00:00:10.369 TCP 23.104.0.1:41714 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:51:09.342 00:05:00.768 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-10 21:55:09.281 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60818 10 6452 1 2025-08-10 21:55:46.480 00:00:10.378 TCP 23.104.0.1:54426 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:56:14.770 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-10 21:56:14.612 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-10 21:56:09.491 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54344 10 6452 1 2025-08-10 21:56:46.894 00:00:10.332 TCP 23.104.0.1:57842 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:57:09.676 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52730 10 6452 1 2025-08-10 21:57:47.265 00:00:10.369 TCP 23.104.0.1:42328 -> 1.101.0.1:3000 11 1507 1 2025-08-10 21:58:09.909 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41588 10 6452 1 Summary: total flows: 163, total bytes: 505547, total packets: 1574, avg bps: 1066, avg pps: 0, avg bpp: 321 Time window: 2025-08-10 20:55:09 - 2025-08-10 21:58:20 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0020s User: 0.0020s Wall: 0.0022s flows/second: 74231.4 Runtime: 0.0022s