Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 20:58:52.151 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:54508 10 6452 1 2025-08-12 20:59:18.574 00:00:10.363 TCP 23.104.0.1:32790 -> 1.101.0.1:3000 11 1507 1 2025-08-12 20:59:52.317 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34788 10 6452 1 2025-08-12 20:56:10.316 00:05:00.854 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 21:00:18.974 00:00:10.369 TCP 23.104.0.1:50460 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:00:52.531 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55464 10 6452 1 2025-08-12 20:57:10.320 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 21:01:19.385 00:00:10.355 TCP 23.104.0.1:45784 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:01:52.746 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39300 10 6452 1 2025-08-12 21:02:10.988 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 21:02:11.226 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 21:02:19.777 00:00:10.369 TCP 23.104.0.1:37338 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:02:52.958 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:52188 12 6556 1 2025-08-12 21:03:20.181 00:00:10.362 TCP 23.104.0.1:53760 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:03:53.185 00:00:10.562 TCP 1.101.0.1:3000 -> 22.102.0.1:47432 10 6452 1 2025-08-12 21:04:20.583 00:00:10.367 TCP 23.104.0.1:40330 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:04:53.789 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48408 10 6452 1 2025-08-12 21:05:20.987 00:00:10.360 TCP 23.104.0.1:45918 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:05:54.008 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50524 10 6452 1 2025-08-12 21:02:10.317 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 21:06:21.389 00:00:10.325 TCP 23.104.0.1:57136 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:07:11.463 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 21:03:10.319 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 21:06:54.230 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58398 10 6452 1 2025-08-12 21:07:11.462 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 21:07:21.760 00:00:10.335 TCP 23.104.0.1:33670 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:07:54.458 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:49822 10 6452 1 2025-08-12 21:08:22.135 00:00:10.364 TCP 23.104.0.1:59114 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:08:54.720 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:36696 10 6452 1 2025-08-12 21:09:22.537 00:00:10.360 TCP 23.104.0.1:56964 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:09:54.939 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:35174 10 6452 1 2025-08-12 21:10:22.936 00:00:10.388 TCP 23.104.0.1:57726 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:10:55.198 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41764 10 6452 1 2025-08-12 21:11:23.358 00:00:10.357 TCP 23.104.0.1:37678 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:11:55.409 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43126 10 6452 1 2025-08-12 21:12:11.847 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 21:08:10.317 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 21:12:11.364 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 21:12:23.757 00:00:10.377 TCP 23.104.0.1:33124 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:12:55.628 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58104 10 6452 1 2025-08-12 21:09:10.320 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 21:13:24.179 00:00:10.325 TCP 23.104.0.1:47490 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:13:55.841 00:00:10.310 TCP 1.101.0.1:3000 -> 22.102.0.1:34690 10 6452 1 2025-08-12 21:14:24.541 00:00:10.326 TCP 23.104.0.1:34516 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:14:56.187 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:48782 10 6452 1 2025-08-12 21:15:24.906 00:00:10.468 TCP 23.104.0.1:32790 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:15:56.351 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36564 10 6452 1 2025-08-12 21:16:25.410 00:00:10.365 TCP 23.104.0.1:44654 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:16:56.519 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45482 10 6452 1 2025-08-12 21:17:11.582 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 21:17:11.524 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 21:17:25.812 00:00:10.331 TCP 23.104.0.1:33004 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:17:56.733 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2025-08-12 21:14:10.319 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 21:18:26.178 00:00:10.320 TCP 23.104.0.1:46988 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:18:56.959 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:39248 10 6452 1 2025-08-12 21:15:10.322 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 21:19:26.536 00:00:10.366 TCP 23.104.0.1:39554 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:19:57.154 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:47494 10 6452 1 2025-08-12 21:20:26.938 00:00:10.367 TCP 23.104.0.1:34546 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:20:57.353 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49002 10 6452 1 2025-08-12 21:21:27.344 00:00:10.362 TCP 23.104.0.1:56588 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:22:11.686 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 21:21:57.568 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51926 10 6452 1 2025-08-12 21:22:11.680 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 21:22:27.749 00:00:10.398 TCP 23.104.0.1:51114 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:22:57.783 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42804 10 6452 1 2025-08-12 21:23:28.186 00:00:10.370 TCP 23.104.0.1:43464 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:23:58.006 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:43224 10 6452 1 2025-08-12 21:20:10.323 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 21:24:28.588 00:00:10.368 TCP 23.104.0.1:35756 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:24:58.191 00:00:10.226 TCP 1.101.0.1:3000 -> 22.102.0.1:53824 14 10471 1 2025-08-12 21:21:10.326 00:05:00.850 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 21:25:29.003 00:00:10.405 TCP 23.104.0.1:58652 -> 1.101.0.1:3000 15 1926 1 2025-08-12 21:25:58.464 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:42280 10 6452 1 2025-08-12 21:26:29.446 00:00:10.364 TCP 23.104.0.1:41806 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:27:11.787 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 21:26:58.681 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50128 10 6452 1 2025-08-12 21:27:11.832 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 21:27:29.850 00:00:10.382 TCP 23.104.0.1:48832 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:27:58.902 00:00:10.613 TCP 1.101.0.1:3000 -> 22.102.0.1:34882 10 6452 1 2025-08-12 21:28:30.267 00:00:10.369 TCP 23.104.0.1:36980 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:28:59.551 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:36698 10 6452 1 2025-08-12 21:29:30.660 00:00:10.364 TCP 23.104.0.1:33076 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:29:59.723 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50734 10 6452 1 2025-08-12 21:26:10.326 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 21:30:31.087 00:00:10.321 TCP 23.104.0.1:55614 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:30:59.945 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:55106 10 6452 1 2025-08-12 21:27:10.328 00:05:00.851 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 21:31:31.446 00:00:10.365 TCP 23.104.0.1:55502 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:32:11.553 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 21:32:00.189 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54146 10 6452 1 2025-08-12 21:32:11.907 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 21:32:31.856 00:00:10.426 TCP 23.104.0.1:51354 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:33:00.401 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:54680 10 6452 1 2025-08-12 21:33:32.324 00:00:10.368 TCP 23.104.0.1:49856 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:34:00.572 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40882 10 6452 1 2025-08-12 21:34:32.727 00:00:10.376 TCP 23.104.0.1:35736 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:35:00.787 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:58612 10 6452 1 2025-08-12 21:35:33.138 00:00:10.323 TCP 23.104.0.1:50498 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:36:01.031 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53218 10 6452 1 2025-08-12 21:32:10.328 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 21:36:33.501 00:00:10.361 TCP 23.104.0.1:59850 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:37:11.861 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 21:33:10.335 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 21:37:01.202 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33206 10 6452 1 2025-08-12 21:37:11.605 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 21:37:33.899 00:00:10.384 TCP 23.104.0.1:44560 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:38:01.416 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34994 10 6452 1 2025-08-12 21:38:34.324 00:00:10.325 TCP 23.104.0.1:33946 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:39:01.630 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:37308 10 6452 1 2025-08-12 21:39:34.688 00:00:10.366 TCP 23.104.0.1:42674 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:40:01.799 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:55194 10 6452 1 2025-08-12 21:40:35.119 00:00:10.325 TCP 23.104.0.1:48678 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:41:01.975 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53106 10 6452 1 2025-08-12 21:41:35.481 00:00:10.369 TCP 23.104.0.1:54926 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:42:11.846 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 21:42:02.213 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39626 10 6452 1 2025-08-12 21:42:12.288 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 21:38:10.336 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 21:42:35.887 00:00:10.379 TCP 23.104.0.1:36348 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:39:10.339 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 21:43:02.428 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57718 10 6452 1 2025-08-12 21:43:36.307 00:00:10.321 TCP 23.104.0.1:39094 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:44:02.606 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52096 10 6452 1 2025-08-12 21:44:36.675 00:00:10.374 TCP 23.104.0.1:37766 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:45:02.833 00:00:10.236 TCP 1.101.0.1:3000 -> 22.102.0.1:38496 10 6452 1 2025-08-12 21:45:37.102 00:00:10.367 TCP 23.104.0.1:53256 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:46:03.124 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33144 10 6452 1 2025-08-12 21:46:37.508 00:00:10.364 TCP 23.104.0.1:51872 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:47:11.898 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 21:47:03.350 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48182 10 6452 1 2025-08-12 21:47:11.982 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 21:47:37.929 00:00:10.407 TCP 23.104.0.1:49560 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:44:10.340 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 21:48:03.575 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:55082 10 6452 1 2025-08-12 21:48:38.373 00:00:10.320 TCP 23.104.0.1:45358 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:45:10.341 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 21:49:03.804 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36186 10 6452 1 2025-08-12 21:49:38.737 00:00:10.365 TCP 23.104.0.1:52406 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:50:04.039 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59690 10 6452 1 2025-08-12 21:50:39.140 00:00:10.367 TCP 23.104.0.1:33152 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:51:04.258 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49458 10 6452 1 2025-08-12 21:51:39.547 00:00:10.365 TCP 23.104.0.1:57896 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:52:12.241 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 21:52:12.281 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 21:52:04.476 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58004 10 6452 1 2025-08-12 21:52:39.952 00:00:10.368 TCP 23.104.0.1:51038 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:53:04.689 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46434 10 6452 1 2025-08-12 21:53:40.356 00:00:10.325 TCP 23.104.0.1:41704 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:50:10.339 00:05:00.852 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 21:54:04.916 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:34384 10 6452 1 2025-08-12 21:54:40.726 00:00:10.447 TCP 23.104.0.1:56114 -> 1.101.0.1:3000 15 1926 1 2025-08-12 21:51:10.342 00:05:00.847 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 21:55:05.109 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:47864 12 10367 1 2025-08-12 21:55:41.212 00:00:10.328 TCP 23.104.0.1:36118 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:56:05.355 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:45288 10 6452 1 2025-08-12 21:56:41.581 00:00:10.326 TCP 23.104.0.1:58168 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:57:12.117 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 21:57:05.591 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47516 10 6452 1 2025-08-12 21:57:12.399 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 21:57:41.944 00:00:10.367 TCP 23.104.0.1:47018 -> 1.101.0.1:3000 11 1507 1 2025-08-12 21:58:05.805 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42104 10 6452 1 Summary: total flows: 163, total bytes: 505717, total packets: 1577, avg bps: 1085, avg pps: 0, avg bpp: 320 Time window: 2025-08-12 20:56:10 - 2025-08-12 21:58:15 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0019s User: 0.0028s Wall: 0.0021s flows/second: 76842.9 Runtime: 0.0021s