Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-27 20:58:44.189 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55370 10 6452 1 2025-08-27 20:59:24.670 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 20:59:24.463 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 20:59:26.755 00:00:10.329 TCP 23.104.0.1:48076 -> 1.101.0.1:3000 11 1507 1 2025-08-27 20:59:44.400 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:60158 10 6452 1 2025-08-27 20:55:19.136 00:06:00.206 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 21:00:27.121 00:00:10.325 TCP 23.104.0.1:36556 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:00:44.623 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51778 10 6452 1 2025-08-27 20:56:19.141 00:06:00.200 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 21:01:27.485 00:00:10.366 TCP 23.104.0.1:47926 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:01:44.842 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50370 10 6452 1 2025-08-27 21:02:27.888 00:00:10.376 TCP 23.104.0.1:48956 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:02:45.075 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41596 10 6452 1 2025-08-27 21:03:28.304 00:00:10.419 TCP 23.104.0.1:57352 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:03:45.287 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:40170 10 6452 1 2025-08-27 21:04:24.924 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 21:04:24.711 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 21:04:28.756 00:00:10.386 TCP 23.104.0.1:45958 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:04:45.478 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41540 10 6452 1 2025-08-27 21:05:29.183 00:00:10.375 TCP 23.104.0.1:59326 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:05:45.693 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:37346 10 6452 1 2025-08-27 21:06:29.594 00:00:10.413 TCP 23.104.0.1:46446 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:06:45.863 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49864 10 6452 1 2025-08-27 21:02:19.144 00:06:00.209 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 21:07:30.058 00:00:10.369 TCP 23.104.0.1:47592 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:07:46.067 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38880 10 6452 1 2025-08-27 21:03:19.147 00:06:00.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 21:08:30.460 00:00:10.367 TCP 23.104.0.1:45116 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:08:46.274 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34536 10 6452 1 2025-08-27 21:09:25.203 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 21:09:25.057 00:00:00.037 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 21:09:30.864 00:00:10.369 TCP 23.104.0.1:36744 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:09:46.446 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41858 10 6452 1 2025-08-27 21:10:31.273 00:00:10.364 TCP 23.104.0.1:36308 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:10:46.672 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55862 10 6452 1 2025-08-27 21:11:31.669 00:00:10.324 TCP 23.104.0.1:39154 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:11:46.893 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:34220 10 6452 1 2025-08-27 21:12:32.030 00:00:10.363 TCP 23.104.0.1:57522 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:12:47.118 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41414 10 6452 1 2025-08-27 21:13:32.432 00:00:10.369 TCP 23.104.0.1:38822 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:13:47.337 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:47352 10 6452 1 2025-08-27 21:09:19.146 00:06:00.209 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 21:14:25.139 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 21:14:25.259 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 21:14:32.842 00:00:10.339 TCP 23.104.0.1:59552 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:14:47.565 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37938 10 6452 1 2025-08-27 21:10:19.149 00:06:00.204 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 21:15:33.216 00:00:10.364 TCP 23.104.0.1:56240 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:15:47.783 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35186 10 6452 1 2025-08-27 21:16:33.618 00:00:10.362 TCP 23.104.0.1:35878 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:16:47.998 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:57442 10 6452 1 2025-08-27 21:17:34.019 00:00:10.367 TCP 23.104.0.1:54464 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:17:48.184 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54548 10 6452 1 2025-08-27 21:18:34.428 00:00:10.367 TCP 23.104.0.1:46162 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:18:48.397 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38940 10 6452 1 2025-08-27 21:19:25.010 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 21:19:25.220 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 21:19:34.829 00:00:10.349 TCP 23.104.0.1:42022 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:19:48.579 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58010 10 6452 1 2025-08-27 21:20:35.213 00:00:10.365 TCP 23.104.0.1:56600 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:20:48.788 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60010 10 6452 1 2025-08-27 21:16:19.148 00:06:00.209 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 21:21:35.614 00:00:10.323 TCP 23.104.0.1:48530 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:21:49.003 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43520 10 6452 1 2025-08-27 21:17:19.150 00:06:00.205 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 21:22:35.971 00:00:10.361 TCP 23.104.0.1:42772 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:22:49.220 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:41326 10 6452 1 2025-08-27 21:23:36.376 00:00:10.387 TCP 23.104.0.1:54440 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:23:49.440 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53192 10 6452 1 2025-08-27 21:24:25.117 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 21:24:25.028 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 21:24:36.801 00:00:10.374 TCP 23.104.0.1:57156 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:24:49.658 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55608 10 6452 1 2025-08-27 21:25:37.220 00:00:10.385 TCP 23.104.0.1:55962 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:25:49.879 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:50754 10 6452 1 2025-08-27 21:26:37.646 00:00:10.367 TCP 23.104.0.1:49196 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:26:50.077 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56304 10 6452 1 2025-08-27 21:27:38.058 00:00:10.364 TCP 23.104.0.1:39054 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:27:50.253 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:42802 10 6452 1 2025-08-27 21:23:19.167 00:06:00.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 21:28:38.467 00:00:10.370 TCP 23.104.0.1:53270 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:28:50.426 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:39864 10 6452 1 2025-08-27 21:24:19.169 00:06:00.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 21:29:25.246 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 21:29:25.624 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 21:29:38.878 00:00:10.370 TCP 23.104.0.1:53674 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:29:50.598 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60576 10 6452 1 2025-08-27 21:30:39.281 00:00:10.366 TCP 23.104.0.1:42132 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:30:50.812 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45640 10 6452 1 2025-08-27 21:31:39.686 00:00:10.446 TCP 23.104.0.1:58150 -> 1.101.0.1:3000 15 1926 1 2025-08-27 21:31:51.038 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:35084 12 10365 1 2025-08-27 21:32:40.172 00:00:10.327 TCP 23.104.0.1:56868 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:32:51.280 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47676 10 6452 1 2025-08-27 21:33:40.538 00:00:10.327 TCP 23.104.0.1:48464 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:33:51.500 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:56264 10 6452 1 2025-08-27 21:34:25.409 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 21:34:25.263 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 21:34:40.901 00:00:10.331 TCP 23.104.0.1:35772 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:34:51.723 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:43918 10 6452 1 2025-08-27 21:30:19.167 00:06:00.209 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 21:35:41.269 00:00:10.564 TCP 23.104.0.1:49112 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:35:51.915 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42236 10 6452 1 2025-08-27 21:31:19.169 00:06:00.190 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 21:36:41.874 00:00:10.362 TCP 23.104.0.1:49946 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:36:52.138 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:35230 10 6452 1 2025-08-27 21:37:42.275 00:00:10.373 TCP 23.104.0.1:41580 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:37:52.366 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43362 10 6452 1 2025-08-27 21:38:42.673 00:00:10.355 TCP 23.104.0.1:54084 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:38:52.573 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33304 10 6452 1 2025-08-27 21:39:25.269 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 21:39:25.341 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 21:39:43.093 00:00:10.367 TCP 23.104.0.1:58166 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:39:52.793 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:38042 10 6452 1 2025-08-27 21:40:43.496 00:00:10.369 TCP 23.104.0.1:45354 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:40:52.973 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:52654 10 6452 1 2025-08-27 21:41:43.905 00:00:10.321 TCP 23.104.0.1:58450 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:41:53.154 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32980 10 6452 1 2025-08-27 21:37:19.168 00:06:00.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 21:42:44.267 00:00:10.340 TCP 23.104.0.1:43564 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:42:53.367 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39436 10 6452 1 2025-08-27 21:38:19.181 00:06:00.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 21:43:44.649 00:00:10.361 TCP 23.104.0.1:49252 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:43:53.581 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:38314 10 6452 1 2025-08-27 21:44:25.672 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 21:44:25.707 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 21:44:45.058 00:00:10.371 TCP 23.104.0.1:35918 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:44:53.752 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:37296 10 6452 1 2025-08-27 21:45:45.477 00:00:10.321 TCP 23.104.0.1:33024 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:45:53.972 00:00:10.481 TCP 1.101.0.1:3000 -> 22.102.0.1:39736 10 6452 1 2025-08-27 21:46:45.845 00:00:10.384 TCP 23.104.0.1:38558 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:46:54.489 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41250 10 6452 1 2025-08-27 21:47:46.265 00:00:10.361 TCP 23.104.0.1:57802 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:47:54.703 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:45046 10 6452 1 2025-08-27 21:48:46.667 00:00:10.365 TCP 23.104.0.1:60780 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:48:54.930 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:57952 10 6452 1 2025-08-27 21:44:19.174 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 21:49:26.137 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 21:49:25.972 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 21:49:47.093 00:00:10.361 TCP 23.104.0.1:44106 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:49:55.169 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:36900 10 6452 1 2025-08-27 21:45:19.177 00:06:00.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 21:50:47.493 00:00:10.375 TCP 23.104.0.1:44100 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:50:55.386 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52792 10 6452 1 2025-08-27 21:51:47.909 00:00:10.370 TCP 23.104.0.1:46694 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:51:55.605 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57394 10 6452 1 2025-08-27 21:52:48.316 00:00:10.376 TCP 23.104.0.1:39564 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:52:55.818 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51618 10 6452 1 2025-08-27 21:53:48.735 00:00:10.369 TCP 23.104.0.1:60672 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:53:56.037 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:45882 10 6452 1 2025-08-27 21:54:25.894 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-27 21:54:25.555 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-27 21:54:49.139 00:00:10.364 TCP 23.104.0.1:46758 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:54:56.281 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:45570 10 6452 1 2025-08-27 21:55:49.545 00:00:10.316 TCP 23.104.0.1:48288 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:55:56.491 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40138 10 6452 1 2025-08-27 21:51:19.175 00:06:00.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-27 21:56:49.900 00:00:10.381 TCP 23.104.0.1:56370 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:56:56.703 00:00:10.823 TCP 1.101.0.1:3000 -> 22.102.0.1:34126 10 6452 1 2025-08-27 21:52:19.178 00:06:00.191 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-27 21:57:50.324 00:00:10.376 TCP 23.104.0.1:57504 -> 1.101.0.1:3000 11 1507 1 2025-08-27 21:57:57.563 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33532 10 6452 1 Summary: total flows: 161, total bytes: 501911, total packets: 1579, avg bps: 1062, avg pps: 0, avg bpp: 317 Time window: 2025-08-27 20:55:19 - 2025-08-27 21:58:19 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0024s User: 0.0024s Wall: 0.0023s flows/second: 70371.3 Runtime: 0.0023s