Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-11-27 21:58:52.538 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 21:58:52.379 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 21:59:02.872 00:00:10.361 TCP 23.104.0.1:51404 -> 1.101.0.1:3000 11 1507 1 2025-11-27 21:59:14.326 00:00:10.808 TCP 1.101.0.1:3000 -> 22.102.0.1:38288 10 6870 1 2025-11-27 21:56:04.665 00:05:04.542 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 21:56:04.663 00:05:04.546 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 22:00:03.274 00:00:10.362 TCP 23.104.0.1:39182 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:00:15.170 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:45232 10 6870 1 2025-11-27 22:01:03.673 00:00:10.364 TCP 23.104.0.1:45910 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:01:15.382 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:40524 10 6870 1 2025-11-27 22:02:04.101 00:00:10.322 TCP 23.104.0.1:33592 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:02:15.596 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41682 10 6870 1 2025-11-27 22:03:04.475 00:00:10.329 TCP 23.104.0.1:42860 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:03:15.766 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57000 10 6870 1 2025-11-27 22:03:52.273 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 22:03:52.309 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 22:04:04.845 00:00:10.342 TCP 23.104.0.1:57710 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:04:15.979 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:52870 10 6870 1 2025-11-27 22:05:05.228 00:00:10.364 TCP 23.104.0.1:34344 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:05:16.217 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:37110 10 6870 1 2025-11-27 22:02:04.664 00:05:04.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 22:02:04.667 00:05:04.542 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 22:06:05.635 00:00:10.331 TCP 23.104.0.1:45722 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:06:16.427 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58978 10 6870 1 2025-11-27 22:07:06.021 00:00:10.364 TCP 23.104.0.1:43818 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:07:16.641 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40554 10 6870 1 2025-11-27 22:08:06.423 00:00:10.371 TCP 23.104.0.1:58704 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:08:16.854 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:51334 10 6870 1 2025-11-27 22:08:52.356 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 22:08:52.390 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 22:09:06.830 00:00:10.393 TCP 23.104.0.1:56568 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:09:17.082 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41194 10 6870 1 2025-11-27 22:10:07.264 00:00:10.321 TCP 23.104.0.1:40512 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:10:17.293 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:36802 10 6870 1 2025-11-27 22:11:07.627 00:00:10.394 TCP 23.104.0.1:39240 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:11:17.505 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57088 10 6870 1 2025-11-27 22:08:04.669 00:05:04.543 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 22:08:04.671 00:05:04.539 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 22:12:08.090 00:00:10.365 TCP 23.104.0.1:36902 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:12:17.717 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49612 10 6870 1 2025-11-27 22:13:08.496 00:00:10.367 TCP 23.104.0.1:54216 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:13:17.934 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:57994 10 6870 1 2025-11-27 22:13:52.341 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 22:13:52.215 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 22:14:08.901 00:00:10.325 TCP 23.104.0.1:46674 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:14:18.135 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55156 10 6870 1 2025-11-27 22:15:09.265 00:00:10.761 TCP 23.104.0.1:51594 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:15:18.344 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50754 10 6870 1 2025-11-27 22:16:10.097 00:00:10.369 TCP 23.104.0.1:48472 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:16:18.561 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38288 10 6870 1 2025-11-27 22:17:10.498 00:00:10.366 TCP 23.104.0.1:36368 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:17:18.779 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55262 10 6870 1 2025-11-27 22:14:04.669 00:05:04.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 22:14:04.672 00:05:04.542 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 22:18:10.902 00:00:10.374 TCP 23.104.0.1:46700 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:18:19.008 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:49728 10 6870 1 2025-11-27 22:18:52.619 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 22:18:52.550 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 22:19:11.308 00:00:10.360 TCP 23.104.0.1:59850 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:19:19.183 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43504 10 6870 1 2025-11-27 22:20:11.706 00:00:10.365 TCP 23.104.0.1:37568 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:20:19.352 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37042 10 6870 1 2025-11-27 22:21:12.121 00:00:10.365 TCP 23.104.0.1:34804 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:21:19.565 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37366 10 6870 1 2025-11-27 22:22:12.522 00:00:10.365 TCP 23.104.0.1:33470 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:22:19.744 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56698 10 6870 1 2025-11-27 22:23:12.928 00:00:10.389 TCP 23.104.0.1:48074 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:23:19.962 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:54226 10 6870 1 2025-11-27 22:23:52.572 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 22:23:52.482 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 22:20:04.670 00:05:04.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 22:20:04.674 00:05:04.541 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 22:24:13.355 00:00:10.362 TCP 23.104.0.1:45660 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:24:20.150 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40358 10 6870 1 2025-11-27 22:25:13.757 00:00:10.366 TCP 23.104.0.1:57510 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:25:20.361 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:44380 10 6870 1 2025-11-27 22:26:14.161 00:00:10.365 TCP 23.104.0.1:52098 -> 1.101.0.1:3000 12 1559 1 2025-11-27 22:26:20.530 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39270 10 6870 1 2025-11-27 22:27:14.564 00:00:10.321 TCP 23.104.0.1:53494 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:27:20.747 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51870 10 6870 1 2025-11-27 22:28:14.924 00:00:10.384 TCP 23.104.0.1:47546 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:28:20.961 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35066 12 6974 1 2025-11-27 22:28:52.976 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 22:28:52.839 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 22:29:15.353 00:00:10.374 TCP 23.104.0.1:54758 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:29:21.183 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:41392 10 6870 1 2025-11-27 22:26:04.673 00:05:04.545 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 22:26:04.675 00:05:04.541 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 22:30:15.767 00:00:10.354 TCP 23.104.0.1:39822 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:30:21.395 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47686 10 6870 1 2025-11-27 22:31:16.139 00:00:10.364 TCP 23.104.0.1:48308 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:31:21.606 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50668 10 6870 1 2025-11-27 22:32:16.542 00:00:10.361 TCP 23.104.0.1:47100 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:32:21.821 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36088 10 6870 1 2025-11-27 22:33:16.943 00:00:10.377 TCP 23.104.0.1:56332 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:33:22.042 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:49856 10 6870 1 2025-11-27 22:33:53.305 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 22:33:53.599 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 22:34:17.907 00:00:10.361 TCP 23.104.0.1:34760 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:34:22.273 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52100 10 6870 1 2025-11-27 22:35:18.309 00:00:10.324 TCP 23.104.0.1:46438 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:35:22.486 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59042 10 6870 1 2025-11-27 22:32:04.674 00:05:04.549 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 22:32:04.677 00:05:04.543 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 22:36:18.678 00:00:10.454 TCP 23.104.0.1:54968 -> 1.101.0.1:3000 15 1926 1 2025-11-27 22:36:22.699 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:59076 12 10369 1 2025-11-27 22:37:19.172 00:00:11.250 TCP 23.104.0.1:51018 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:37:22.943 00:00:10.155 TCP 1.101.0.1:3000 -> 22.102.0.1:43712 10 6452 1 2025-11-27 22:38:20.460 00:00:10.361 TCP 23.104.0.1:33526 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:38:23.134 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:39056 10 6452 1 2025-11-27 22:38:53.014 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 22:38:53.073 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 22:39:20.861 00:00:10.373 TCP 23.104.0.1:40518 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:39:23.299 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:37636 10 6452 1 2025-11-27 22:40:21.277 00:00:10.377 TCP 23.104.0.1:54116 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:40:23.504 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47988 10 6452 1 2025-11-27 22:41:21.703 00:00:10.319 TCP 23.104.0.1:59888 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:41:23.714 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53676 10 6452 1 2025-11-27 22:38:04.677 00:05:04.544 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 22:38:04.675 00:05:04.549 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 22:42:22.087 00:00:10.368 TCP 23.104.0.1:47848 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:42:23.931 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:34926 10 6452 1 2025-11-27 22:43:22.493 00:00:10.365 TCP 23.104.0.1:57200 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:43:24.134 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41318 10 6452 1 2025-11-27 22:43:53.302 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 22:43:53.231 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 22:44:24.348 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34568 10 6452 1 2025-11-27 22:44:22.900 00:00:10.373 TCP 23.104.0.1:37446 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:45:24.565 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:59398 10 6452 1 2025-11-27 22:45:23.313 00:00:10.365 TCP 23.104.0.1:50672 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:46:24.785 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:43654 10 6452 1 2025-11-27 22:46:23.720 00:00:10.380 TCP 23.104.0.1:48712 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:47:24.136 00:00:10.318 TCP 23.104.0.1:53494 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:47:25.003 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55232 10 6452 1 2025-11-27 22:44:04.682 00:05:04.541 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 22:44:04.678 00:05:04.547 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 22:48:24.494 00:00:10.329 TCP 23.104.0.1:59634 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:48:25.214 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38970 10 6452 1 2025-11-27 22:48:53.092 00:00:00.041 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 22:48:52.941 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 22:49:24.860 00:00:10.373 TCP 23.104.0.1:44590 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:49:25.391 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48066 10 6452 1 2025-11-27 22:50:25.603 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49008 10 6452 1 2025-11-27 22:50:25.275 00:00:10.321 TCP 23.104.0.1:37286 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:51:25.634 00:00:10.361 TCP 23.104.0.1:32950 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:51:25.820 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50948 10 6452 1 2025-11-27 22:52:26.043 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48344 10 6452 1 2025-11-27 22:52:26.031 00:00:10.359 TCP 23.104.0.1:50902 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:53:26.428 00:00:10.365 TCP 23.104.0.1:54636 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:53:26.256 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40524 10 6452 1 2025-11-27 22:53:53.286 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-11-27 22:53:53.120 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-11-27 22:50:04.682 00:05:04.543 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-11-27 22:50:04.680 00:05:04.548 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-11-27 22:54:26.476 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38172 10 6452 1 2025-11-27 22:54:26.831 00:00:11.161 TCP 23.104.0.1:39220 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:55:26.694 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:54106 10 6452 1 2025-11-27 22:55:28.028 00:00:10.366 TCP 23.104.0.1:42694 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:56:28.438 00:00:10.371 TCP 23.104.0.1:50366 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:56:26.909 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:57890 10 6452 1 2025-11-27 22:57:28.840 00:00:10.394 TCP 23.104.0.1:35426 -> 1.101.0.1:3000 11 1507 1 2025-11-27 22:57:27.111 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:55926 10 6452 1 2025-11-27 22:58:27.276 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:34846 10 6452 1 2025-11-27 22:58:29.271 00:00:10.382 TCP 23.104.0.1:49258 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 518306, total packets: 1581, avg bps: 1104, avg pps: 0, avg bpp: 327 Time window: 2025-11-27 21:56:04 - 2025-11-27 22:58:39 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0036s User: 0.0009s Wall: 0.0016s flows/second: 102620.6 Runtime: 0.0016s