Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-25 20:54:17.707 00:06:00.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 20:59:07.741 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40490 10 6452 1 2025-08-25 20:54:17.706 00:06:00.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 20:59:27.678 00:00:10.323 TCP 23.104.0.1:42018 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:00:07.956 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52286 10 6452 1 2025-08-25 21:00:28.045 00:00:10.361 TCP 23.104.0.1:57792 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:01:08.185 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54580 10 6452 1 2025-08-25 21:01:28.447 00:00:10.321 TCP 23.104.0.1:46572 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:02:08.402 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:58842 10 6452 1 2025-08-25 21:02:28.806 00:00:10.368 TCP 23.104.0.1:42098 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:03:08.573 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42010 10 6452 1 2025-08-25 21:03:26.705 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 21:03:26.759 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 21:03:29.212 00:00:10.366 TCP 23.104.0.1:48348 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:04:08.793 00:00:10.480 TCP 1.101.0.1:3000 -> 22.102.0.1:60984 10 6452 1 2025-08-25 21:04:29.623 00:00:10.371 TCP 23.104.0.1:40668 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:05:09.326 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52558 10 6452 1 2025-08-25 21:05:30.025 00:00:10.363 TCP 23.104.0.1:53202 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:06:09.543 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34674 10 6452 1 2025-08-25 21:01:17.708 00:06:00.119 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 21:01:17.711 00:06:00.115 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 21:06:30.427 00:00:10.441 TCP 23.104.0.1:46268 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:07:09.760 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36888 10 6452 1 2025-08-25 21:07:30.903 00:00:10.321 TCP 23.104.0.1:34398 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:08:09.974 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:59086 10 6452 1 2025-08-25 21:08:26.959 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 21:08:27.028 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 21:08:31.269 00:00:10.366 TCP 23.104.0.1:47470 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:09:10.164 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53142 10 6452 1 2025-08-25 21:09:31.672 00:00:10.364 TCP 23.104.0.1:47694 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:10:10.384 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:51868 10 6452 1 2025-08-25 21:10:32.106 00:00:10.328 TCP 23.104.0.1:34424 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:11:10.594 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49208 10 6452 1 2025-08-25 21:11:32.475 00:00:10.362 TCP 23.104.0.1:50792 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:12:10.810 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50706 10 6452 1 2025-08-25 21:12:32.871 00:00:10.368 TCP 23.104.0.1:37248 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:08:17.711 00:06:00.114 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 21:13:11.032 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:58596 10 6452 1 2025-08-25 21:08:17.708 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 21:13:26.948 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 21:13:26.975 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 21:13:33.277 00:00:10.366 TCP 23.104.0.1:38228 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:14:11.256 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:47366 10 6452 1 2025-08-25 21:14:33.684 00:00:10.417 TCP 23.104.0.1:38150 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:15:11.434 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51404 10 6452 1 2025-08-25 21:15:34.141 00:00:10.369 TCP 23.104.0.1:60680 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:16:11.646 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39238 10 6452 1 2025-08-25 21:16:34.567 00:00:10.370 TCP 23.104.0.1:57860 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:17:11.857 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:38710 10 6452 1 2025-08-25 21:17:34.972 00:00:10.369 TCP 23.104.0.1:59402 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:18:12.096 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41318 10 6452 1 2025-08-25 21:18:26.983 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 21:18:27.274 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 21:18:35.381 00:00:10.369 TCP 23.104.0.1:59722 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:19:12.321 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46224 10 6452 1 2025-08-25 21:19:35.788 00:00:10.323 TCP 23.104.0.1:38890 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:15:17.709 00:06:00.121 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 21:15:17.713 00:06:00.116 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 21:20:12.545 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:40182 10 6452 1 2025-08-25 21:20:36.143 00:00:10.367 TCP 23.104.0.1:40668 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:21:12.777 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50134 10 6452 1 2025-08-25 21:21:36.555 00:00:10.326 TCP 23.104.0.1:45896 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:22:13.000 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42922 10 6452 1 2025-08-25 21:22:36.913 00:00:10.366 TCP 23.104.0.1:54202 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:23:27.302 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 21:23:13.236 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46672 10 6452 1 2025-08-25 21:23:27.026 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 21:23:37.315 00:00:10.365 TCP 23.104.0.1:34832 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:24:13.457 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:60846 10 6452 1 2025-08-25 21:24:37.716 00:00:10.374 TCP 23.104.0.1:46790 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:25:13.675 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52242 10 6452 1 2025-08-25 21:25:38.130 00:00:10.363 TCP 23.104.0.1:34840 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:26:13.901 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33650 10 6452 1 2025-08-25 21:26:38.528 00:00:10.443 TCP 23.104.0.1:35894 -> 1.101.0.1:3000 15 1926 1 2025-08-25 21:22:17.716 00:06:00.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 21:22:17.715 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 21:27:14.119 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:59018 12 10367 1 2025-08-25 21:27:39.015 00:00:10.333 TCP 23.104.0.1:48564 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:28:14.368 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45646 10 6452 1 2025-08-25 21:28:27.479 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 21:28:27.287 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 21:28:39.411 00:00:10.370 TCP 23.104.0.1:57736 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:29:14.582 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51584 10 6452 1 2025-08-25 21:29:39.815 00:00:10.334 TCP 23.104.0.1:49404 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:30:14.810 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37708 10 6452 1 2025-08-25 21:30:40.185 00:00:10.365 TCP 23.104.0.1:36482 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:31:15.051 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:33408 10 6452 1 2025-08-25 21:31:40.584 00:00:10.361 TCP 23.104.0.1:58192 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:32:15.282 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:56430 10 6452 1 2025-08-25 21:32:40.982 00:00:10.369 TCP 23.104.0.1:45598 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:33:15.492 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55570 10 6452 1 2025-08-25 21:33:27.376 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 21:33:27.389 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 21:33:41.391 00:00:10.377 TCP 23.104.0.1:42026 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:29:17.718 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 21:29:17.716 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 21:34:15.705 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38116 10 6452 1 2025-08-25 21:34:41.808 00:00:10.340 TCP 23.104.0.1:36492 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:35:15.916 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46514 10 6452 1 2025-08-25 21:35:42.187 00:00:10.370 TCP 23.104.0.1:49010 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:36:16.131 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58862 10 6452 1 2025-08-25 21:36:42.589 00:00:10.367 TCP 23.104.0.1:58764 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:37:16.351 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39122 10 6452 1 2025-08-25 21:37:42.997 00:00:10.723 TCP 23.104.0.1:48638 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:38:16.560 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49756 10 6452 1 2025-08-25 21:38:27.923 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 21:38:27.810 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 21:38:43.757 00:00:10.377 TCP 23.104.0.1:48782 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:39:16.737 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49264 10 6452 1 2025-08-25 21:39:44.182 00:00:10.885 TCP 23.104.0.1:51570 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:40:16.907 00:00:10.481 TCP 1.101.0.1:3000 -> 22.102.0.1:37212 10 6452 1 2025-08-25 21:40:45.111 00:00:10.365 TCP 23.104.0.1:51480 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:36:17.726 00:06:00.123 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 21:36:17.724 00:06:00.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 21:41:17.427 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:53248 10 6452 1 2025-08-25 21:41:45.518 00:00:10.363 TCP 23.104.0.1:38556 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:42:17.656 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:41602 10 6452 1 2025-08-25 21:42:45.926 00:00:10.346 TCP 23.104.0.1:59306 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:43:27.489 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 21:43:27.706 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 21:43:17.835 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:42160 10 6452 1 2025-08-25 21:43:46.311 00:00:10.362 TCP 23.104.0.1:48664 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:44:18.068 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44192 10 6452 1 2025-08-25 21:44:46.709 00:00:10.366 TCP 23.104.0.1:48962 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:45:18.279 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:32924 10 6452 1 2025-08-25 21:45:47.112 00:00:10.370 TCP 23.104.0.1:44664 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:46:18.486 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57600 10 6452 1 2025-08-25 21:46:47.529 00:00:10.380 TCP 23.104.0.1:52114 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:47:18.705 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34676 10 6452 1 2025-08-25 21:47:47.949 00:00:10.369 TCP 23.104.0.1:38242 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:43:17.742 00:06:00.113 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 21:43:17.740 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 21:48:18.914 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39722 10 6452 1 2025-08-25 21:48:27.803 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 21:48:27.522 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 21:48:48.358 00:00:10.366 TCP 23.104.0.1:47756 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:49:19.133 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51808 10 6452 1 2025-08-25 21:49:48.761 00:00:10.375 TCP 23.104.0.1:35506 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:50:19.344 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33304 10 6452 1 2025-08-25 21:50:49.167 00:00:10.369 TCP 23.104.0.1:40244 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:51:19.516 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58800 10 6452 1 2025-08-25 21:51:49.577 00:00:10.368 TCP 23.104.0.1:50680 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:52:19.690 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44114 10 6452 1 2025-08-25 21:52:49.982 00:00:10.378 TCP 23.104.0.1:36858 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:53:28.143 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-25 21:53:19.909 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39452 10 6452 1 2025-08-25 21:53:28.098 00:00:00.043 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 21:53:50.399 00:00:10.372 TCP 23.104.0.1:55466 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:54:20.123 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51270 10 6452 1 2025-08-25 21:54:50.812 00:00:10.366 TCP 23.104.0.1:54418 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:50:17.744 00:06:00.112 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-25 21:50:17.741 00:06:00.117 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-25 21:55:20.348 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:36320 10 6452 1 2025-08-25 21:55:51.223 00:00:10.368 TCP 23.104.0.1:37444 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:56:20.561 00:00:10.574 TCP 1.101.0.1:3000 -> 22.102.0.1:38874 10 6452 1 2025-08-25 21:56:51.627 00:00:10.341 TCP 23.104.0.1:49214 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:57:21.181 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38120 10 6452 1 2025-08-25 21:57:52.015 00:00:10.366 TCP 23.104.0.1:35340 -> 1.101.0.1:3000 11 1507 1 2025-08-25 21:58:28.056 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-25 21:58:21.392 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:60860 11 6492 1 2025-08-25 21:58:27.890 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 Summary: total flows: 161, total bytes: 501953, total packets: 1580, avg bps: 1041, avg pps: 0, avg bpp: 317 Time window: 2025-08-25 20:54:17 - 2025-08-25 21:58:31 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0009s User: 0.0026s Wall: 0.0016s flows/second: 102284.6 Runtime: 0.0016s