Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-21 10:58:53.504 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:37578 10 6452 1 2025-08-21 10:59:40.972 00:00:10.377 TCP 23.104.0.1:32974 -> 1.101.0.1:3000 11 1507 1 2025-08-21 10:59:53.722 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58622 10 6452 1 2025-08-21 11:00:41.395 00:00:10.370 TCP 23.104.0.1:33584 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:00:53.933 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:57108 10 6452 1 2025-08-21 11:01:18.993 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 10:57:14.565 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 11:01:19.277 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 11:01:41.798 00:00:10.365 TCP 23.104.0.1:43270 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:01:54.171 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:47028 10 6452 1 2025-08-21 11:02:42.207 00:00:10.372 TCP 23.104.0.1:53900 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:02:54.347 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:45844 10 6452 1 2025-08-21 11:03:42.615 00:00:10.370 TCP 23.104.0.1:37406 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:03:54.531 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:51244 10 6452 1 2025-08-21 11:00:14.569 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 11:04:43.025 00:00:10.322 TCP 23.104.0.1:59266 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:04:54.795 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:36024 10 6452 1 2025-08-21 11:05:43.387 00:00:10.324 TCP 23.104.0.1:52978 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:05:55.031 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:50730 10 6452 1 2025-08-21 11:06:19.367 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 11:06:19.425 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 11:06:43.746 00:00:10.365 TCP 23.104.0.1:38604 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:06:55.219 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46412 10 6452 1 2025-08-21 11:03:14.571 00:05:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 11:07:44.148 00:00:10.333 TCP 23.104.0.1:47480 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:07:55.430 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48386 10 6452 1 2025-08-21 11:08:44.521 00:00:10.364 TCP 23.104.0.1:40400 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:08:55.605 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52018 10 6452 1 2025-08-21 11:09:44.930 00:00:10.387 TCP 23.104.0.1:42924 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:09:55.817 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50504 10 6452 1 2025-08-21 11:06:14.568 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 11:10:45.351 00:00:10.373 TCP 23.104.0.1:43798 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:10:56.073 00:00:10.327 TCP 1.101.0.1:3000 -> 22.102.0.1:51376 10 6452 1 2025-08-21 11:11:19.280 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 11:11:19.382 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 11:11:45.762 00:00:10.381 TCP 23.104.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:11:56.447 00:00:10.214 TCP 1.101.0.1:3000 -> 22.102.0.1:37728 10 6452 1 2025-08-21 11:12:46.180 00:00:10.369 TCP 23.104.0.1:41586 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:12:56.708 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41592 10 6452 1 2025-08-21 11:09:14.572 00:05:00.846 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 11:13:46.584 00:00:10.365 TCP 23.104.0.1:36224 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:13:56.930 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:59636 10 6452 1 2025-08-21 11:14:46.987 00:00:10.360 TCP 23.104.0.1:38940 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:14:57.165 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37260 10 6452 1 2025-08-21 11:15:47.387 00:00:10.716 TCP 23.104.0.1:45102 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:15:57.335 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36126 10 6452 1 2025-08-21 11:12:14.570 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 11:16:19.434 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 11:16:19.367 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 11:16:48.142 00:00:10.364 TCP 23.104.0.1:48950 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:16:57.547 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:59738 10 6452 1 2025-08-21 11:17:48.543 00:00:10.378 TCP 23.104.0.1:34670 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:17:57.719 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59718 10 6452 1 2025-08-21 11:18:48.970 00:00:10.331 TCP 23.104.0.1:40380 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:18:57.934 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:35976 10 6452 1 2025-08-21 11:15:14.572 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 11:19:49.342 00:00:10.366 TCP 23.104.0.1:41768 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:19:58.174 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:41910 10 6452 1 2025-08-21 11:20:49.753 00:00:10.334 TCP 23.104.0.1:56510 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:20:58.357 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:60146 10 6452 1 2025-08-21 11:21:19.691 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 11:21:19.622 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 11:21:50.124 00:00:10.362 TCP 23.104.0.1:41858 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:21:58.526 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43532 10 6452 1 2025-08-21 11:18:14.572 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 11:22:50.534 00:00:10.697 TCP 23.104.0.1:50098 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:22:58.742 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:52722 10 6452 1 2025-08-21 11:23:51.275 00:00:10.368 TCP 23.104.0.1:59926 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:23:58.910 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35234 10 6452 1 2025-08-21 11:24:51.680 00:00:10.371 TCP 23.104.0.1:50612 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:24:59.126 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:54150 10 6452 1 2025-08-21 11:21:14.576 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 11:25:52.103 00:00:10.364 TCP 23.104.0.1:48024 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:25:59.358 00:00:10.293 TCP 1.101.0.1:3000 -> 22.102.0.1:34954 10 6452 1 2025-08-21 11:26:20.002 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 11:26:20.124 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 11:26:52.504 00:00:10.326 TCP 23.104.0.1:40160 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:26:59.687 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:40340 10 6452 1 2025-08-21 11:27:52.868 00:00:10.367 TCP 23.104.0.1:59082 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:27:59.936 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:47650 10 6452 1 2025-08-21 11:24:14.574 00:05:00.850 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 11:28:53.273 00:00:10.364 TCP 23.104.0.1:33742 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:29:00.139 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37808 10 6452 1 2025-08-21 11:29:53.671 00:00:10.367 TCP 23.104.0.1:39876 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:30:00.351 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:34280 10 6452 1 2025-08-21 11:30:54.105 00:00:10.435 TCP 23.104.0.1:33922 -> 1.101.0.1:3000 15 1926 1 2025-08-21 11:31:00.575 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53166 12 10365 1 2025-08-21 11:27:14.575 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 11:31:19.968 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 11:31:19.758 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 11:31:54.576 00:00:10.358 TCP 23.104.0.1:49084 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:32:00.785 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34410 10 6452 1 2025-08-21 11:32:54.975 00:00:10.371 TCP 23.104.0.1:39630 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:33:00.998 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41848 10 6452 1 2025-08-21 11:33:55.394 00:00:10.362 TCP 23.104.0.1:45318 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:34:01.214 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53970 10 6452 1 2025-08-21 11:30:14.574 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 11:34:55.800 00:00:10.366 TCP 23.104.0.1:55756 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:35:01.429 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38412 10 6452 1 2025-08-21 11:35:56.201 00:00:10.325 TCP 23.104.0.1:48754 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:36:01.651 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58764 10 6452 1 2025-08-21 11:36:19.919 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 11:36:19.975 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 11:36:56.562 00:00:10.359 TCP 23.104.0.1:36948 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:37:01.868 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:42496 10 6452 1 2025-08-21 11:33:14.577 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 11:37:56.959 00:00:10.327 TCP 23.104.0.1:54592 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:38:02.111 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:53056 10 6452 1 2025-08-21 11:38:57.323 00:00:10.370 TCP 23.104.0.1:46832 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:39:02.355 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52892 10 6452 1 2025-08-21 11:39:57.727 00:00:10.621 TCP 23.104.0.1:60664 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:40:02.577 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56224 10 6452 1 2025-08-21 11:36:14.576 00:05:00.849 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 11:40:58.381 00:00:10.362 TCP 23.104.0.1:48250 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:41:02.753 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40498 10 6452 1 2025-08-21 11:41:20.194 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 11:41:19.889 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 11:41:58.782 00:00:10.367 TCP 23.104.0.1:32818 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:42:02.969 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:36170 10 6452 1 2025-08-21 11:42:59.186 00:00:10.327 TCP 23.104.0.1:50238 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:39:14.579 00:05:00.844 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 11:43:03.206 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50694 10 6452 1 2025-08-21 11:43:59.562 00:00:10.415 TCP 23.104.0.1:60680 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:44:03.435 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:47392 10 6452 1 2025-08-21 11:45:00.017 00:00:10.366 TCP 23.104.0.1:45940 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:45:03.608 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39952 10 6452 1 2025-08-21 11:46:00.421 00:00:10.372 TCP 23.104.0.1:36280 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:46:03.822 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:48072 10 6452 1 2025-08-21 11:42:14.578 00:05:00.851 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 11:46:20.218 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 11:46:20.016 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 11:47:00.830 00:00:10.393 TCP 23.104.0.1:35846 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:47:04.002 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47058 10 6452 1 2025-08-21 11:48:01.266 00:00:10.363 TCP 23.104.0.1:50016 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:48:04.223 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44920 10 6452 1 2025-08-21 11:49:01.670 00:00:10.338 TCP 23.104.0.1:40632 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:45:14.580 00:05:00.848 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 11:49:04.442 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60322 10 6452 1 2025-08-21 11:50:04.656 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53876 10 6452 1 2025-08-21 11:50:02.086 00:00:10.366 TCP 23.104.0.1:50866 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:51:04.899 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57700 10 6452 1 2025-08-21 11:51:02.496 00:00:10.367 TCP 23.104.0.1:43688 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:51:20.334 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 11:51:20.345 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 11:52:02.898 00:00:10.337 TCP 23.104.0.1:41406 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:52:05.117 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:51932 10 6452 1 2025-08-21 11:48:14.580 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 11:53:03.274 00:00:10.362 TCP 23.104.0.1:44296 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:53:05.336 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:38022 10 6452 1 2025-08-21 11:54:05.559 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51840 10 6452 1 2025-08-21 11:54:03.674 00:00:10.374 TCP 23.104.0.1:53848 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:55:05.772 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53780 10 6452 1 2025-08-21 11:55:04.108 00:00:10.366 TCP 23.104.0.1:50602 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:51:14.584 00:05:00.845 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-21 11:56:05.982 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:56930 10 6452 1 2025-08-21 11:56:04.512 00:00:10.364 TCP 23.104.0.1:59528 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:56:20.307 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-21 11:56:20.468 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-21 11:57:04.920 00:00:10.370 TCP 23.104.0.1:49496 -> 1.101.0.1:3000 11 1507 1 2025-08-21 11:57:06.227 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42090 10 6452 1 2025-08-21 11:54:14.580 00:05:00.853 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-21 11:58:06.449 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59014 10 6452 1 2025-08-21 11:58:05.331 00:00:10.361 TCP 23.104.0.1:37204 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 163, total bytes: 501173, total packets: 1567, avg bps: 1077, avg pps: 0, avg bpp: 319 Time window: 2025-08-21 10:57:14 - 2025-08-21 11:59:15 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0035s User: 0.0012s Wall: 0.0023s flows/second: 72026.1 Runtime: 0.0023s