Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-21 17:59:06.423 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:50038 10 6452 1 2025-12-21 17:59:21.809 00:00:10.368 TCP 23.104.0.1:57278 -> 1.101.0.1:3000 11 1507 1 2025-12-21 17:55:20.810 00:05:54.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 17:55:20.807 00:05:54.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 18:00:06.635 00:00:10.860 TCP 1.101.0.1:3000 -> 22.102.0.1:41970 10 6452 1 2025-12-21 18:00:20.583 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 18:00:20.574 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 18:00:22.222 00:00:10.365 TCP 23.104.0.1:41298 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:01:07.536 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38950 10 6452 1 2025-12-21 18:01:22.626 00:00:10.925 TCP 23.104.0.1:43936 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:02:07.748 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45648 10 6452 1 2025-12-21 18:02:23.590 00:00:10.321 TCP 23.104.0.1:58138 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:03:07.965 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:55122 10 6452 1 2025-12-21 18:03:23.954 00:00:10.370 TCP 23.104.0.1:51922 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:04:08.137 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47204 10 6452 1 2025-12-21 18:04:24.363 00:00:10.365 TCP 23.104.0.1:51830 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:05:08.345 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52548 10 6452 1 2025-12-21 18:05:20.543 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 18:05:20.514 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 18:05:24.767 00:00:10.367 TCP 23.104.0.1:47438 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:01:20.808 00:05:54.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 18:01:20.811 00:05:54.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 18:06:08.559 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:34194 10 6452 1 2025-12-21 18:06:25.171 00:00:10.326 TCP 23.104.0.1:47122 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:07:08.749 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46564 10 6452 1 2025-12-21 18:07:25.537 00:00:10.323 TCP 23.104.0.1:36408 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:08:08.962 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36020 10 6452 1 2025-12-21 18:08:25.904 00:00:10.365 TCP 23.104.0.1:40504 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:09:09.188 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:45820 10 6452 1 2025-12-21 18:09:26.308 00:00:10.322 TCP 23.104.0.1:42426 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:10:09.408 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:54198 10 6452 1 2025-12-21 18:10:20.854 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 18:10:20.853 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 18:10:26.671 00:00:10.365 TCP 23.104.0.1:55854 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:11:09.588 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56214 10 6452 1 2025-12-21 18:11:27.098 00:00:10.375 TCP 23.104.0.1:43566 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:07:20.813 00:05:54.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 18:07:20.810 00:05:54.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 18:12:09.801 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:53036 10 6452 1 2025-12-21 18:12:27.518 00:00:10.367 TCP 23.104.0.1:34636 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:13:10.028 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:35552 10 6452 1 2025-12-21 18:13:27.926 00:00:10.397 TCP 23.104.0.1:55916 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:14:10.193 00:00:16.648 TCP 1.101.0.1:3000 -> 22.102.0.1:48230 10 6452 1 2025-12-21 18:14:28.357 00:00:10.366 TCP 23.104.0.1:39984 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:15:20.816 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 18:15:20.903 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 18:15:16.884 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:51454 10 6452 1 2025-12-21 18:15:28.763 00:00:10.370 TCP 23.104.0.1:36258 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:16:17.110 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:44422 10 6452 1 2025-12-21 18:16:29.170 00:00:10.363 TCP 23.104.0.1:55626 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:17:17.317 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:34268 10 6452 1 2025-12-21 18:17:29.599 00:00:10.328 TCP 23.104.0.1:56426 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:13:20.814 00:05:54.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 18:13:20.812 00:05:54.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 18:18:17.485 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57040 10 6452 1 2025-12-21 18:18:29.968 00:00:10.371 TCP 23.104.0.1:56990 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:19:17.701 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56114 10 6452 1 2025-12-21 18:19:30.375 00:00:10.330 TCP 23.104.0.1:45610 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:20:20.759 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 18:20:20.943 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 18:20:17.920 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44550 10 6452 1 2025-12-21 18:20:30.741 00:00:10.364 TCP 23.104.0.1:33386 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:21:18.137 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:60316 10 6452 1 2025-12-21 18:21:31.143 00:00:10.366 TCP 23.104.0.1:33354 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:22:18.362 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36812 10 6452 1 2025-12-21 18:22:31.541 00:00:10.364 TCP 23.104.0.1:33012 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:23:18.585 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36834 10 6452 1 2025-12-21 18:23:31.944 00:00:10.430 TCP 23.104.0.1:37028 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:19:20.815 00:05:54.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 18:19:20.812 00:05:54.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 18:24:18.810 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:38142 10 6452 1 2025-12-21 18:24:32.414 00:00:10.363 TCP 23.104.0.1:44272 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:25:21.109 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 18:25:21.133 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 18:25:18.987 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:39680 10 6452 1 2025-12-21 18:25:32.818 00:00:10.373 TCP 23.104.0.1:46472 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:26:19.220 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41788 10 6452 1 2025-12-21 18:26:33.234 00:00:10.324 TCP 23.104.0.1:36486 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:27:19.434 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50434 12 6556 1 2025-12-21 18:27:33.598 00:00:10.326 TCP 23.104.0.1:39544 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:28:19.662 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:49880 10 6452 1 2025-12-21 18:28:33.974 00:00:10.333 TCP 23.104.0.1:53562 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:29:19.925 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43842 10 6452 1 2025-12-21 18:29:34.345 00:00:10.364 TCP 23.104.0.1:51156 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:25:20.812 00:05:54.794 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 18:25:20.816 00:05:54.789 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 18:30:21.026 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 18:30:21.064 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 18:30:20.132 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40336 10 6452 1 2025-12-21 18:30:34.747 00:00:10.364 TCP 23.104.0.1:53260 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:31:20.347 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40454 10 6452 1 2025-12-21 18:31:35.151 00:00:10.365 TCP 23.104.0.1:44128 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:32:20.560 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57340 10 6452 1 2025-12-21 18:32:35.554 00:00:10.365 TCP 23.104.0.1:54372 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:33:20.784 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60138 10 6452 1 2025-12-21 18:33:35.957 00:00:10.364 TCP 23.104.0.1:48448 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:34:21.001 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:50874 10 6452 1 2025-12-21 18:34:36.357 00:00:10.363 TCP 23.104.0.1:47154 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:35:21.285 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 18:35:21.143 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 18:35:21.173 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39460 10 6452 1 2025-12-21 18:35:36.754 00:00:10.330 TCP 23.104.0.1:34342 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:31:20.815 00:05:54.792 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 18:31:20.818 00:05:54.787 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 18:36:21.389 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41874 10 6452 1 2025-12-21 18:36:37.121 00:00:10.323 TCP 23.104.0.1:59646 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:37:21.602 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41210 10 6452 1 2025-12-21 18:37:37.484 00:00:10.367 TCP 23.104.0.1:47450 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:38:21.771 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44178 10 6452 1 2025-12-21 18:38:37.891 00:00:10.378 TCP 23.104.0.1:33600 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:39:21.984 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:42958 10 6452 1 2025-12-21 18:39:38.311 00:00:10.366 TCP 23.104.0.1:34442 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:40:21.310 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 18:40:21.382 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 18:40:22.185 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45562 10 6452 1 2025-12-21 18:40:38.716 00:00:10.325 TCP 23.104.0.1:33272 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:41:22.407 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45046 10 6452 1 2025-12-21 18:41:39.104 00:00:10.368 TCP 23.104.0.1:56662 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:37:20.817 00:05:54.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 18:37:20.819 00:05:54.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 18:42:22.583 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:54944 10 6452 1 2025-12-21 18:42:39.510 00:00:10.370 TCP 23.104.0.1:56972 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:43:22.767 00:00:10.665 TCP 1.101.0.1:3000 -> 22.102.0.1:56720 10 6452 1 2025-12-21 18:43:39.923 00:00:10.388 TCP 23.104.0.1:38174 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:44:23.476 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52888 10 6452 1 2025-12-21 18:44:40.347 00:00:10.366 TCP 23.104.0.1:58132 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:45:21.526 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 18:45:21.446 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 18:45:23.685 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49812 10 6452 1 2025-12-21 18:45:40.758 00:00:10.383 TCP 23.104.0.1:60214 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:46:23.893 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:53394 10 6452 1 2025-12-21 18:46:41.185 00:00:10.362 TCP 23.104.0.1:38208 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:47:24.118 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:50902 10 6452 1 2025-12-21 18:47:41.584 00:00:10.379 TCP 23.104.0.1:58510 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:43:20.820 00:05:54.788 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 18:43:20.818 00:05:54.793 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 18:48:24.340 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55628 10 6452 1 2025-12-21 18:48:41.997 00:00:10.373 TCP 23.104.0.1:37804 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:49:24.554 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:33112 10 6452 1 2025-12-21 18:49:42.411 00:00:10.364 TCP 23.104.0.1:59152 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:50:21.473 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 18:50:21.473 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 18:50:24.736 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:51118 10 6452 1 2025-12-21 18:50:42.820 00:00:10.360 TCP 23.104.0.1:48684 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:51:24.960 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37198 10 6452 1 2025-12-21 18:51:43.220 00:00:10.364 TCP 23.104.0.1:56672 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:52:25.178 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58190 10 6452 1 2025-12-21 18:52:43.623 00:00:10.369 TCP 23.104.0.1:41146 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:53:25.390 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58328 10 6452 1 2025-12-21 18:53:44.028 00:00:10.364 TCP 23.104.0.1:35514 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:49:20.822 00:05:54.786 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-12-21 18:49:20.820 00:05:54.791 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-12-21 18:54:25.601 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:54534 10 6452 1 2025-12-21 18:54:44.426 00:00:10.366 TCP 23.104.0.1:60136 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:55:21.858 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-12-21 18:55:21.715 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-12-21 18:55:25.768 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49274 12 6556 1 2025-12-21 18:55:44.829 00:00:10.338 TCP 23.104.0.1:55602 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:56:26.011 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:52446 10 6452 1 2025-12-21 18:56:45.207 00:00:10.330 TCP 23.104.0.1:46780 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:57:26.228 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:48580 10 6452 1 2025-12-21 18:57:45.578 00:00:10.367 TCP 23.104.0.1:38874 -> 1.101.0.1:3000 11 1507 1 2025-12-21 18:58:26.401 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53156 10 6452 1 Summary: total flows: 163, total bytes: 497049, total packets: 1565, avg bps: 1047, avg pps: 0, avg bpp: 317 Time window: 2025-12-21 17:55:20 - 2025-12-21 18:58:36 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0021s User: 0.0032s Wall: 0.0024s flows/second: 68428.7 Runtime: 0.0024s