Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-07 20:59:09.389 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38244 10 6661 1 2025-09-07 20:54:25.112 00:06:00.765 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 20:59:42.362 00:00:00.012 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 20:59:33.740 00:00:10.480 TCP 23.104.0.1:44516 -> 1.101.0.1:3000 11 1507 1 2025-09-07 20:59:42.504 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 21:00:09.600 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:43966 10 6661 1 2025-09-07 21:00:34.259 00:00:10.376 TCP 23.104.0.1:39280 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:01:09.779 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58782 10 6661 1 2025-09-07 21:01:34.664 00:00:10.770 TCP 23.104.0.1:39836 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:02:10.005 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57010 10 6661 1 2025-09-07 20:57:25.111 00:06:00.769 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 21:02:35.470 00:00:10.329 TCP 23.104.0.1:52728 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:03:10.222 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:35272 12 10367 1 2025-09-07 21:03:35.839 00:00:10.420 TCP 23.104.0.1:34382 -> 1.101.0.1:3000 15 1926 1 2025-09-07 21:04:10.457 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:53268 10 6452 1 2025-09-07 21:04:42.618 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 21:04:36.300 00:00:10.366 TCP 23.104.0.1:34048 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:04:42.691 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 21:05:10.628 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33714 10 6452 1 2025-09-07 21:05:36.704 00:00:10.365 TCP 23.104.0.1:51584 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:06:10.835 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49764 10 6452 1 2025-09-07 21:01:25.114 00:06:00.766 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 21:06:37.107 00:00:10.363 TCP 23.104.0.1:54642 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:07:11.070 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50806 10 6452 1 2025-09-07 21:07:37.511 00:00:10.319 TCP 23.104.0.1:57684 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:08:11.300 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39664 10 6452 1 2025-09-07 21:08:37.870 00:00:10.325 TCP 23.104.0.1:56992 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:09:11.510 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60060 10 6452 1 2025-09-07 21:04:25.112 00:06:00.770 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 21:09:42.698 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 21:09:42.674 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 21:09:38.236 00:00:10.371 TCP 23.104.0.1:33280 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:10:11.728 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54726 10 6452 1 2025-09-07 21:10:38.648 00:00:10.662 TCP 23.104.0.1:54780 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:11:11.944 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:45270 10 6452 1 2025-09-07 21:11:39.348 00:00:10.361 TCP 23.104.0.1:38084 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:12:12.179 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54794 10 6452 1 2025-09-07 21:12:39.759 00:00:10.380 TCP 23.104.0.1:51480 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:08:25.117 00:06:00.763 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 21:13:12.403 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44294 10 6452 1 2025-09-07 21:13:40.178 00:00:10.327 TCP 23.104.0.1:42148 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:14:12.623 00:00:10.532 TCP 1.101.0.1:3000 -> 22.102.0.1:54770 10 6452 1 2025-09-07 21:14:43.306 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 21:14:43.346 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 21:14:40.543 00:00:10.373 TCP 23.104.0.1:44758 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:15:13.211 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:53714 10 6452 1 2025-09-07 21:15:40.954 00:00:10.870 TCP 23.104.0.1:43796 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:11:25.116 00:06:00.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 21:16:13.428 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:44578 10 6452 1 2025-09-07 21:16:41.861 00:00:10.372 TCP 23.104.0.1:57108 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:17:13.657 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:37514 10 6452 1 2025-09-07 21:17:42.274 00:00:10.364 TCP 23.104.0.1:38678 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:18:13.836 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37030 10 6452 1 2025-09-07 21:18:42.674 00:00:10.378 TCP 23.104.0.1:56990 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:19:14.070 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43012 10 6452 1 2025-09-07 21:19:42.736 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 21:19:42.713 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 21:19:43.111 00:00:10.327 TCP 23.104.0.1:34944 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:15:25.120 00:06:00.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 21:20:14.283 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47828 10 6452 1 2025-09-07 21:20:43.483 00:00:10.363 TCP 23.104.0.1:60820 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:21:14.496 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48880 10 6452 1 2025-09-07 21:21:43.886 00:00:10.348 TCP 23.104.0.1:56084 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:22:14.666 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41808 10 6452 1 2025-09-07 21:22:44.280 00:00:10.324 TCP 23.104.0.1:56492 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:18:25.120 00:06:00.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 21:23:14.883 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:48552 10 6452 1 2025-09-07 21:23:44.640 00:00:10.324 TCP 23.104.0.1:45132 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:24:15.112 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:55212 10 6452 1 2025-09-07 21:24:42.906 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 21:24:42.933 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 21:24:45.001 00:00:10.377 TCP 23.104.0.1:51664 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:25:15.340 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47490 10 6452 1 2025-09-07 21:25:45.412 00:00:10.333 TCP 23.104.0.1:45748 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:26:15.549 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53072 10 6452 1 2025-09-07 21:26:45.783 00:00:10.370 TCP 23.104.0.1:34154 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:22:25.123 00:06:00.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 21:27:15.778 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:44474 10 6452 1 2025-09-07 21:27:46.193 00:00:10.374 TCP 23.104.0.1:59040 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:28:16.000 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50158 10 6452 1 2025-09-07 21:28:46.596 00:00:10.368 TCP 23.104.0.1:49436 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:29:16.214 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59768 10 6452 1 2025-09-07 21:29:42.984 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 21:29:43.031 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 21:29:46.998 00:00:10.368 TCP 23.104.0.1:49888 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:30:16.383 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:37712 10 6452 1 2025-09-07 21:25:25.123 00:06:00.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 21:30:47.405 00:00:10.326 TCP 23.104.0.1:44400 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:31:16.602 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34710 10 6452 1 2025-09-07 21:31:47.770 00:00:10.370 TCP 23.104.0.1:58656 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:32:16.810 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60042 10 6452 1 2025-09-07 21:32:48.175 00:00:10.367 TCP 23.104.0.1:57118 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:33:17.024 00:00:10.487 TCP 1.101.0.1:3000 -> 22.102.0.1:36170 10 6452 1 2025-09-07 21:33:48.579 00:00:10.367 TCP 23.104.0.1:38978 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:29:25.124 00:06:00.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 21:34:17.552 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:53664 10 6452 1 2025-09-07 21:34:43.622 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 21:34:43.531 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 21:34:48.984 00:00:10.330 TCP 23.104.0.1:33184 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:35:17.771 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:54876 10 6452 1 2025-09-07 21:35:49.354 00:00:10.365 TCP 23.104.0.1:42956 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:36:17.943 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:42706 10 6452 1 2025-09-07 21:36:49.761 00:00:10.368 TCP 23.104.0.1:49090 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:32:25.123 00:06:00.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 21:37:18.181 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56762 10 6452 1 2025-09-07 21:37:50.165 00:00:10.363 TCP 23.104.0.1:37708 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:38:18.399 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:47312 10 6452 1 2025-09-07 21:38:50.571 00:00:10.367 TCP 23.104.0.1:35242 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:39:18.572 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:42780 10 6452 1 2025-09-07 21:39:43.053 00:00:00.035 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 21:39:43.302 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 21:39:50.979 00:00:10.884 TCP 23.104.0.1:52198 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:40:18.819 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47056 10 6452 1 2025-09-07 21:40:51.899 00:00:10.363 TCP 23.104.0.1:47710 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:36:25.125 00:06:00.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 21:41:19.065 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:39210 10 6452 1 2025-09-07 21:41:52.316 00:00:10.367 TCP 23.104.0.1:33110 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:42:19.293 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34332 10 6452 1 2025-09-07 21:42:52.718 00:00:10.377 TCP 23.104.0.1:44556 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:43:19.517 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47748 10 6452 1 2025-09-07 21:43:53.138 00:00:10.366 TCP 23.104.0.1:41830 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:39:25.124 00:06:00.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 21:44:19.738 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56182 10 6452 1 2025-09-07 21:44:43.305 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 21:44:43.455 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 21:44:53.542 00:00:10.322 TCP 23.104.0.1:55132 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:45:19.959 00:00:10.245 TCP 1.101.0.1:3000 -> 22.102.0.1:57070 11 6504 1 2025-09-07 21:45:53.903 00:00:10.370 TCP 23.104.0.1:45242 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:46:20.244 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:57176 10 6452 1 2025-09-07 21:46:54.307 00:00:10.364 TCP 23.104.0.1:42332 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:47:20.462 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40946 10 6452 1 2025-09-07 21:47:54.706 00:00:10.325 TCP 23.104.0.1:38534 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:43:25.128 00:06:00.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 21:48:20.676 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57264 10 6452 1 2025-09-07 21:48:55.101 00:00:10.375 TCP 23.104.0.1:36468 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:49:20.888 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37964 10 6452 1 2025-09-07 21:49:43.183 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 21:49:43.475 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 21:49:55.514 00:00:10.327 TCP 23.104.0.1:53338 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:50:21.105 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36010 10 6452 1 2025-09-07 21:50:55.882 00:00:10.386 TCP 23.104.0.1:59476 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:46:25.126 00:06:00.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 21:51:21.318 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57450 10 6452 1 2025-09-07 21:51:56.315 00:00:10.367 TCP 23.104.0.1:43788 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:52:21.534 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42906 10 6452 1 2025-09-07 21:52:56.719 00:00:10.375 TCP 23.104.0.1:58712 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:53:21.749 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:59348 10 6452 1 2025-09-07 21:53:57.130 00:00:10.369 TCP 23.104.0.1:39670 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:54:21.928 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:47814 10 6452 1 2025-09-07 21:54:43.461 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-07 21:54:43.665 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-07 21:54:57.534 00:00:10.330 TCP 23.104.0.1:37122 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:50:25.129 00:06:00.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-09-07 21:55:22.167 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39586 10 6452 1 2025-09-07 21:55:57.897 00:00:10.373 TCP 23.104.0.1:58408 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:56:22.382 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:33038 10 6452 1 2025-09-07 21:56:58.309 00:00:10.326 TCP 23.104.0.1:58196 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:57:22.555 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35214 10 6452 1 2025-09-07 21:57:58.668 00:00:10.365 TCP 23.104.0.1:40356 -> 1.101.0.1:3000 11 1507 1 2025-09-07 21:53:25.128 00:06:00.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-09-07 21:58:22.770 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38738 10 6452 1 Summary: total flows: 161, total bytes: 502801, total packets: 1580, avg bps: 1031, avg pps: 0, avg bpp: 318 Time window: 2025-09-07 20:54:25 - 2025-09-07 21:59:25 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0028s User: 0.0018s Wall: 0.0028s flows/second: 57067.8 Runtime: 0.0028s