Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 13:59:05.212 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:48706 10 6452 1 2025-12-21 13:59:38.462 00:00:10.361 TCP 23.104.0.1:53976 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:00:15.699 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 13:55:20.725 00:05:54.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 14:00:05.442 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56726 10 6452 1 2025-12-21 14:00:15.778 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 13:55:20.728 00:05:54.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 14:00:38.868 00:00:10.371 TCP 23.104.0.1:50046 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:01:05.658 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:36350 12 10375 1 2025-12-21 14:01:39.278 00:00:10.397 TCP 23.104.0.1:58328 -> 1.101.0.1:3000 15 1926 1 2025-12-21 14:02:05.903 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56850 10 6452 1 2025-12-21 14:02:39.721 00:00:10.370 TCP 23.104.0.1:33082 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:03:06.122 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:47598 10 6452 1 2025-12-21 14:03:40.128 00:00:10.364 TCP 23.104.0.1:47008 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:04:06.338 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60906 10 6452 1 2025-12-21 14:04:40.528 00:00:10.360 TCP 23.104.0.1:49900 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:05:15.940 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 14:05:06.559 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:46862 10 6452 1 2025-12-21 14:05:15.709 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 14:05:40.929 00:00:10.375 TCP 23.104.0.1:33618 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:01:20.725 00:05:54.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 14:06:06.786 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37738 10 6452 1 2025-12-21 14:01:20.728 00:05:54.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 14:06:41.346 00:00:10.359 TCP 23.104.0.1:37044 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:07:07.003 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56228 10 6452 1 2025-12-21 14:07:41.745 00:00:10.365 TCP 23.104.0.1:36388 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:08:07.223 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:33682 10 6452 1 2025-12-21 14:08:42.148 00:00:10.365 TCP 23.104.0.1:36480 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:09:07.435 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57754 10 6452 1 2025-12-21 14:09:42.553 00:00:10.365 TCP 23.104.0.1:38228 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:10:15.890 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 14:10:15.935 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 14:10:07.654 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59886 10 6452 1 2025-12-21 14:10:42.955 00:00:10.349 TCP 23.104.0.1:41838 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:11:07.862 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:46550 10 6452 1 2025-12-21 14:11:43.356 00:00:10.319 TCP 23.104.0.1:58298 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:07:20.728 00:05:54.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 14:07:20.729 00:05:54.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 14:12:08.088 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34218 10 6452 1 2025-12-21 14:12:43.716 00:00:10.325 TCP 23.104.0.1:49186 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:13:08.312 00:00:10.748 TCP 1.101.0.1:3000 -> 22.102.0.1:38168 10 6452 1 2025-12-21 14:13:44.100 00:00:10.364 TCP 23.104.0.1:59984 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:14:09.097 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:57176 10 6452 1 2025-12-21 14:14:44.499 00:00:10.363 TCP 23.104.0.1:42224 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:15:15.904 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 14:15:15.820 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 14:15:09.317 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:41156 10 6452 1 2025-12-21 14:15:44.901 00:00:10.371 TCP 23.104.0.1:58890 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:16:09.542 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:42260 10 6452 1 2025-12-21 14:16:45.308 00:00:10.365 TCP 23.104.0.1:37288 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:17:09.766 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33716 10 6452 1 2025-12-21 14:17:45.714 00:00:10.968 TCP 23.104.0.1:51054 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:13:20.729 00:05:54.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 14:13:20.732 00:05:54.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 14:18:09.939 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56330 10 6452 1 2025-12-21 14:18:46.720 00:00:10.372 TCP 23.104.0.1:53698 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:19:10.148 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:48362 10 6452 1 2025-12-21 14:19:47.131 00:00:10.361 TCP 23.104.0.1:38398 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:20:15.969 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 14:20:16.032 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 14:20:10.357 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55426 10 6452 1 2025-12-21 14:20:47.529 00:00:10.325 TCP 23.104.0.1:49126 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:21:10.576 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:40468 10 6452 1 2025-12-21 14:21:47.892 00:00:10.716 TCP 23.104.0.1:59414 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:22:10.792 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:59204 10 6452 1 2025-12-21 14:22:48.643 00:00:10.368 TCP 23.104.0.1:46768 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:23:11.002 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33836 10 6452 1 2025-12-21 14:23:49.057 00:00:10.370 TCP 23.104.0.1:34334 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:19:20.731 00:05:54.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 14:19:20.733 00:05:54.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 14:24:11.217 00:00:10.891 TCP 1.101.0.1:3000 -> 22.102.0.1:42696 10 6452 1 2025-12-21 14:24:49.466 00:00:10.364 TCP 23.104.0.1:38820 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:25:16.053 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 14:25:16.310 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 14:25:12.148 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:40776 10 6452 1 2025-12-21 14:25:49.869 00:00:10.371 TCP 23.104.0.1:59160 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:26:12.355 00:00:10.668 TCP 1.101.0.1:3000 -> 22.102.0.1:34410 10 6452 1 2025-12-21 14:26:50.279 00:00:10.374 TCP 23.104.0.1:43352 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:27:13.079 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:52484 10 6452 1 2025-12-21 14:27:50.681 00:00:10.365 TCP 23.104.0.1:45496 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:28:13.291 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51738 10 6452 1 2025-12-21 14:28:51.108 00:00:11.331 TCP 23.104.0.1:49862 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:29:13.507 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59428 10 6452 1 2025-12-21 14:29:52.475 00:00:10.363 TCP 23.104.0.1:40400 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:30:16.336 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 14:25:20.734 00:05:54.791 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 14:30:16.348 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 14:25:20.731 00:05:54.796 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 14:30:13.727 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:58064 10 6452 1 2025-12-21 14:30:52.881 00:00:10.420 TCP 23.104.0.1:37252 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:31:13.974 00:00:10.396 TCP 1.101.0.1:3000 -> 22.102.0.1:57372 10 6452 1 2025-12-21 14:31:53.341 00:00:10.365 TCP 23.104.0.1:59790 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:32:14.415 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35884 10 6452 1 2025-12-21 14:32:53.746 00:00:10.362 TCP 23.104.0.1:53662 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:33:14.645 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57770 10 6452 1 2025-12-21 14:33:54.148 00:00:10.367 TCP 23.104.0.1:38122 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:34:14.854 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:47872 10 6452 1 2025-12-21 14:34:54.554 00:00:10.318 TCP 23.104.0.1:42138 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:35:16.226 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 14:35:16.285 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 14:35:15.092 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:38280 10 6452 1 2025-12-21 14:35:54.911 00:00:11.348 TCP 23.104.0.1:39064 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:31:20.735 00:05:54.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 14:31:20.737 00:05:54.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 14:36:15.314 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47850 10 6452 1 2025-12-21 14:36:56.296 00:00:10.363 TCP 23.104.0.1:56108 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:37:15.544 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:54290 10 6452 1 2025-12-21 14:37:56.700 00:00:10.322 TCP 23.104.0.1:32872 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:38:15.768 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45064 10 6452 1 2025-12-21 14:38:57.074 00:00:10.329 TCP 23.104.0.1:46760 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:39:15.988 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:57324 10 6452 1 2025-12-21 14:39:57.450 00:00:10.369 TCP 23.104.0.1:49450 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:40:16.384 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 14:40:16.565 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 14:40:16.223 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52364 10 6452 1 2025-12-21 14:40:57.856 00:00:10.381 TCP 23.104.0.1:48886 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:41:16.438 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36254 10 6452 1 2025-12-21 14:41:58.282 00:00:10.327 TCP 23.104.0.1:60408 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:37:20.737 00:05:54.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 14:37:20.739 00:05:54.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 14:42:16.646 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39266 10 6452 1 2025-12-21 14:42:58.649 00:00:10.367 TCP 23.104.0.1:33992 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:43:16.861 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41452 10 6452 1 2025-12-21 14:43:59.065 00:00:10.372 TCP 23.104.0.1:57462 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:44:17.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33944 10 6452 1 2025-12-21 14:44:59.480 00:00:10.361 TCP 23.104.0.1:50344 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:45:16.613 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 14:45:16.680 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 14:45:17.298 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49434 10 6452 1 2025-12-21 14:45:59.882 00:00:10.388 TCP 23.104.0.1:42964 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:46:17.518 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:36924 10 6452 1 2025-12-21 14:47:00.311 00:00:10.364 TCP 23.104.0.1:35164 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:47:17.689 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38700 10 6452 1 2025-12-21 14:48:00.720 00:00:10.342 TCP 23.104.0.1:35684 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:43:20.739 00:05:54.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 14:43:20.740 00:05:54.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 14:48:17.903 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53904 10 6452 1 2025-12-21 14:49:01.106 00:00:10.334 TCP 23.104.0.1:51954 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:49:18.114 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35504 10 6452 1 2025-12-21 14:50:01.481 00:00:10.369 TCP 23.104.0.1:45848 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:50:16.620 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 14:50:16.679 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 14:50:18.330 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:56884 10 6452 1 2025-12-21 14:51:01.888 00:00:10.379 TCP 23.104.0.1:32890 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:51:18.565 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:49584 10 6452 1 2025-12-21 14:52:02.305 00:00:10.324 TCP 23.104.0.1:36298 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:52:18.740 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60378 10 6452 1 2025-12-21 14:53:02.670 00:00:10.373 TCP 23.104.0.1:39468 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:53:18.948 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:42784 10 6452 1 2025-12-21 14:49:20.739 00:05:54.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 14:54:03.102 00:00:10.364 TCP 23.104.0.1:52674 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:49:20.743 00:05:54.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 14:54:19.188 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50872 10 6452 1 2025-12-21 14:55:16.810 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 14:55:03.503 00:00:10.369 TCP 23.104.0.1:34360 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:55:16.564 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 14:55:19.405 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:51688 10 6452 1 2025-12-21 14:56:03.903 00:00:10.372 TCP 23.104.0.1:59792 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:56:19.623 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42336 10 6452 1 2025-12-21 14:57:04.311 00:00:10.366 TCP 23.104.0.1:49860 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:57:19.837 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59000 10 6452 1 2025-12-21 14:58:04.715 00:00:10.390 TCP 23.104.0.1:53324 -> 1.101.0.1:3000 11 1507 1 2025-12-21 14:58:20.074 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53876 10 6452 1 Summary: total flows: 163, total bytes: 501183, total packets: 1567, avg bps: 1058, avg pps: 0, avg bpp: 319 Time window: 2025-12-21 13:55:20 - 2025-12-21 14:58:30 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0063s User: 0.0000s Wall: 0.0031s flows/second: 52582.0 Runtime: 0.0031s