Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-09-15 20:59:00.736 00:00:10.393 TCP 1.101.0.1:3000 -> 22.102.0.1:45166 10 6452 1 2025-09-15 20:59:35.342 00:00:10.366 TCP 23.104.0.1:38772 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:00:01.163 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40754 10 6452 1 2025-09-15 20:56:28.885 00:05:01.068 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 21:00:35.748 00:00:10.366 TCP 23.104.0.1:43050 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:01:01.379 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42610 10 6452 1 2025-09-15 20:57:28.886 00:05:01.063 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 21:01:36.152 00:00:10.316 TCP 23.104.0.1:34680 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:02:01.602 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60566 10 6452 1 2025-09-15 21:02:36.508 00:00:10.368 TCP 23.104.0.1:48256 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:03:01.812 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34796 10 6452 1 2025-09-15 21:03:40.886 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 21:03:40.837 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 21:03:36.912 00:00:10.379 TCP 23.104.0.1:53954 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:04:02.036 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:45946 10 6452 1 2025-09-15 21:04:37.331 00:00:10.365 TCP 23.104.0.1:46784 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:05:02.260 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42428 10 6452 1 2025-09-15 21:05:37.738 00:00:10.367 TCP 23.104.0.1:57274 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:06:02.475 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40630 10 6452 1 2025-09-15 21:02:28.884 00:05:01.073 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 21:06:38.143 00:00:10.365 TCP 23.104.0.1:44374 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:07:02.687 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:54482 10 6452 1 2025-09-15 21:03:28.887 00:05:01.068 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 21:07:38.548 00:00:10.369 TCP 23.104.0.1:47060 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:08:02.911 00:00:10.154 TCP 1.101.0.1:3000 -> 22.102.0.1:53640 10 6452 1 2025-09-15 21:08:41.170 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 21:08:41.018 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 21:08:38.954 00:00:10.329 TCP 23.104.0.1:35562 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:09:03.102 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57506 10 6452 1 2025-09-15 21:09:39.319 00:00:10.440 TCP 23.104.0.1:53396 -> 1.101.0.1:3000 15 1926 1 2025-09-15 21:10:03.327 00:00:10.243 TCP 1.101.0.1:3000 -> 22.102.0.1:53610 12 10367 1 2025-09-15 21:10:39.800 00:00:10.366 TCP 23.104.0.1:35386 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:11:03.606 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51966 10 6452 1 2025-09-15 21:11:40.207 00:00:10.362 TCP 23.104.0.1:43770 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:12:03.787 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:39760 10 6452 1 2025-09-15 21:08:28.885 00:05:01.074 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 21:12:40.606 00:00:10.369 TCP 23.104.0.1:36724 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:13:04.009 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58768 10 6452 1 2025-09-15 21:09:28.889 00:05:01.069 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 21:13:40.959 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 21:13:41.012 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 21:13:41.010 00:00:10.378 TCP 23.104.0.1:43862 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:14:04.242 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:47156 10 6452 1 2025-09-15 21:14:41.426 00:00:10.363 TCP 23.104.0.1:44820 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:15:04.469 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45796 10 6452 1 2025-09-15 21:15:41.829 00:00:10.396 TCP 23.104.0.1:39322 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:16:04.681 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58388 10 6452 1 2025-09-15 21:16:42.266 00:00:10.371 TCP 23.104.0.1:53618 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:17:04.899 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38774 10 6452 1 2025-09-15 21:17:42.679 00:00:10.324 TCP 23.104.0.1:43114 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:18:05.117 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:53628 10 6452 1 2025-09-15 21:14:28.887 00:05:01.076 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 21:18:41.227 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 21:18:41.280 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 21:18:43.052 00:00:10.365 TCP 23.104.0.1:46710 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:19:05.297 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57884 10 6452 1 2025-09-15 21:15:28.893 00:05:01.068 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 21:19:43.456 00:00:10.322 TCP 23.104.0.1:38410 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:20:05.515 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36950 10 6452 1 2025-09-15 21:20:43.820 00:00:10.408 TCP 23.104.0.1:60084 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:21:05.726 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41454 10 6452 1 2025-09-15 21:21:44.260 00:00:10.365 TCP 23.104.0.1:40346 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:22:05.941 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:57950 10 6452 1 2025-09-15 21:22:44.666 00:00:10.331 TCP 23.104.0.1:40872 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:23:06.191 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54850 10 6452 1 2025-09-15 21:23:41.407 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 21:23:41.499 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 21:23:45.028 00:00:10.324 TCP 23.104.0.1:55568 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:24:06.402 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56478 10 6452 1 2025-09-15 21:20:28.891 00:05:01.073 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 21:24:45.389 00:00:10.362 TCP 23.104.0.1:38026 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:25:06.624 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53270 10 6452 1 2025-09-15 21:21:28.894 00:05:01.067 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 21:25:45.786 00:00:10.368 TCP 23.104.0.1:56264 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:26:06.837 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:39802 10 6452 1 2025-09-15 21:26:46.192 00:00:10.362 TCP 23.104.0.1:50780 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:27:07.081 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:60292 10 6452 1 2025-09-15 21:27:46.591 00:00:10.377 TCP 23.104.0.1:53066 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:28:07.305 00:00:10.627 TCP 1.101.0.1:3000 -> 22.102.0.1:57886 10 6452 1 2025-09-15 21:28:41.323 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 21:28:41.149 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 21:28:47.005 00:00:10.369 TCP 23.104.0.1:45024 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:29:07.971 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:53388 10 6452 1 2025-09-15 21:29:47.415 00:00:10.369 TCP 23.104.0.1:50712 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:30:08.209 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43060 10 6452 1 2025-09-15 21:26:28.892 00:05:01.075 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 21:30:47.824 00:00:10.366 TCP 23.104.0.1:58512 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:31:08.423 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:51706 10 6452 1 2025-09-15 21:27:28.896 00:05:01.068 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 21:31:48.227 00:00:10.367 TCP 23.104.0.1:34476 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:32:08.606 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51606 10 6452 1 2025-09-15 21:32:48.628 00:00:10.324 TCP 23.104.0.1:58120 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:33:08.826 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46086 10 6452 1 2025-09-15 21:33:41.503 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 21:33:41.514 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 21:33:48.993 00:00:10.365 TCP 23.104.0.1:51914 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:34:09.069 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43948 10 6452 1 2025-09-15 21:34:49.394 00:00:10.323 TCP 23.104.0.1:33340 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:35:09.289 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37892 10 6452 1 2025-09-15 21:35:49.753 00:00:10.370 TCP 23.104.0.1:36226 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:36:09.497 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:41672 10 6452 1 2025-09-15 21:32:28.894 00:05:01.075 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 21:36:50.156 00:00:10.362 TCP 23.104.0.1:43690 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:37:09.718 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:50686 10 6452 1 2025-09-15 21:33:28.897 00:05:01.069 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 21:37:50.558 00:00:10.360 TCP 23.104.0.1:60784 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:38:09.943 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:51524 10 6452 1 2025-09-15 21:38:41.571 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 21:38:41.526 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 21:38:50.961 00:00:10.394 TCP 23.104.0.1:44202 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:39:10.178 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46322 10 6452 1 2025-09-15 21:39:51.365 00:00:10.434 TCP 23.104.0.1:43672 -> 1.101.0.1:3000 15 1926 1 2025-09-15 21:40:10.407 00:00:10.208 TCP 1.101.0.1:3000 -> 22.102.0.1:47562 12 10367 1 2025-09-15 21:40:51.837 00:00:10.383 TCP 23.104.0.1:57928 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:41:10.658 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36310 10 6452 1 2025-09-15 21:41:52.262 00:00:10.362 TCP 23.104.0.1:50992 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:42:10.865 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58380 10 6452 1 2025-09-15 21:38:28.896 00:05:01.075 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 21:42:52.665 00:00:10.362 TCP 23.104.0.1:34770 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:43:11.087 00:00:10.486 TCP 1.101.0.1:3000 -> 22.102.0.1:48586 10 6452 1 2025-09-15 21:39:28.898 00:05:01.070 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 21:43:41.742 00:00:00.027 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 21:43:41.678 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 21:43:53.091 00:00:10.359 TCP 23.104.0.1:53500 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:44:11.613 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33136 10 6452 1 2025-09-15 21:44:53.492 00:00:10.366 TCP 23.104.0.1:35694 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:45:11.831 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56184 10 6452 1 2025-09-15 21:45:53.898 00:00:10.368 TCP 23.104.0.1:51208 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:46:12.072 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41582 10 6452 1 2025-09-15 21:46:54.308 00:00:10.356 TCP 23.104.0.1:46998 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:47:12.240 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41442 10 6452 1 2025-09-15 21:47:54.700 00:00:10.324 TCP 23.104.0.1:56186 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:48:12.450 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44236 10 6452 1 2025-09-15 21:44:28.899 00:05:01.072 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 21:48:41.929 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 21:48:41.853 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 21:48:55.092 00:00:21.328 TCP 23.104.0.1:42192 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:49:12.667 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34958 10 6452 1 2025-09-15 21:45:28.901 00:05:01.068 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 21:50:06.489 00:00:10.370 TCP 23.104.0.1:44188 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:50:12.879 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42266 10 6452 1 2025-09-15 21:51:06.895 00:00:10.374 TCP 23.104.0.1:58192 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:51:13.095 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36238 10 6452 1 2025-09-15 21:52:07.313 00:00:10.329 TCP 23.104.0.1:48388 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:52:13.310 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40282 10 6452 1 2025-09-15 21:53:07.680 00:00:10.378 TCP 23.104.0.1:58518 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:53:13.486 00:00:10.592 TCP 1.101.0.1:3000 -> 22.102.0.1:60166 10 6452 1 2025-09-15 21:53:41.867 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 21:53:41.922 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-09-15 21:54:08.104 00:00:10.361 TCP 23.104.0.1:37312 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:54:14.118 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:43436 10 6452 1 2025-09-15 21:50:28.902 00:05:01.073 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-09-15 21:55:08.507 00:00:10.361 TCP 23.104.0.1:43614 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:55:14.348 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48196 10 6452 1 2025-09-15 21:51:28.904 00:05:01.067 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-09-15 21:56:08.909 00:00:10.372 TCP 23.104.0.1:54654 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:56:14.579 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:34672 10 6452 1 2025-09-15 21:57:09.316 00:00:10.324 TCP 23.104.0.1:42138 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:57:14.802 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53518 10 6452 1 2025-09-15 21:58:09.680 00:00:10.371 TCP 23.104.0.1:45380 -> 1.101.0.1:3000 11 1507 1 2025-09-15 21:58:15.032 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57270 10 6452 1 2025-09-15 21:58:41.968 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-09-15 21:58:41.926 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 Summary: total flows: 163, total bytes: 505509, total packets: 1573, avg bps: 1083, avg pps: 0, avg bpp: 321 Time window: 2025-09-15 20:56:28 - 2025-09-15 21:58:41 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0019s User: 0.0039s Wall: 0.0024s flows/second: 69211.5 Runtime: 0.0024s