Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-17 19:58:42.250 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47822 10 6438 1 2025-07-17 19:59:09.962 00:00:10.387 TCP 23.104.0.1:54844 -> 1.101.0.1:3000 11 1507 1 2025-07-17 19:59:39.056 00:00:00.032 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 19:59:39.245 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 19:59:42.463 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60206 10 6438 1 2025-07-17 19:54:57.181 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 20:00:10.388 00:00:10.366 TCP 23.104.0.1:58132 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:00:42.679 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:53570 10 6438 1 2025-07-17 20:01:10.794 00:00:10.368 TCP 23.104.0.1:41610 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:01:42.847 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58464 10 6438 1 2025-07-17 20:02:11.200 00:00:10.358 TCP 23.104.0.1:36794 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:02:43.080 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59114 10 6438 1 2025-07-17 20:03:11.599 00:00:10.363 TCP 23.104.0.1:38156 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:03:43.295 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39196 10 6438 1 2025-07-17 19:58:57.157 00:06:00.028 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 20:04:11.999 00:00:10.360 TCP 23.104.0.1:56082 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:04:39.235 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 20:04:39.003 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 20:04:43.506 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56588 10 6438 1 2025-07-17 20:05:12.396 00:00:10.373 TCP 23.104.0.1:38114 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:05:43.679 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49392 10 6438 1 2025-07-17 20:06:12.809 00:00:10.370 TCP 23.104.0.1:43560 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:06:43.893 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:55722 10 6438 1 2025-07-17 20:01:57.182 00:06:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 20:07:13.213 00:00:10.366 TCP 23.104.0.1:49540 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:07:44.095 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42974 10 6438 1 2025-07-17 20:08:13.614 00:00:10.361 TCP 23.104.0.1:52708 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:08:44.308 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:42718 10 6438 1 2025-07-17 20:09:14.013 00:00:10.371 TCP 23.104.0.1:39128 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:09:39.086 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 20:09:39.280 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 20:09:44.522 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46710 10 6438 1 2025-07-17 20:10:14.426 00:00:10.371 TCP 23.104.0.1:57696 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:10:44.732 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39624 10 6438 1 2025-07-17 20:05:57.158 00:06:00.029 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 20:11:14.832 00:00:10.347 TCP 23.104.0.1:54462 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:11:44.950 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52366 10 6438 1 2025-07-17 20:12:15.222 00:00:10.372 TCP 23.104.0.1:50546 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:12:45.173 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48500 10 6438 1 2025-07-17 20:13:15.627 00:00:10.367 TCP 23.104.0.1:45604 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:13:45.387 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51408 10 6438 1 2025-07-17 20:08:57.183 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 20:14:16.034 00:00:10.366 TCP 23.104.0.1:33170 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:14:39.378 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 20:14:39.448 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 20:14:45.600 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58342 10 6438 1 2025-07-17 20:15:16.437 00:00:10.362 TCP 23.104.0.1:42186 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:15:45.812 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58526 10 6438 1 2025-07-17 20:16:16.839 00:00:10.396 TCP 23.104.0.1:44748 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:16:46.032 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40404 10 6438 1 2025-07-17 20:17:17.282 00:00:10.361 TCP 23.104.0.1:56846 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:17:46.247 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56352 10 6438 1 2025-07-17 20:12:57.163 00:06:00.024 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 20:18:17.683 00:00:10.367 TCP 23.104.0.1:53524 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:18:46.461 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:50154 10 6438 1 2025-07-17 20:19:18.095 00:00:10.360 TCP 23.104.0.1:51292 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:19:39.503 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 20:19:39.564 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 20:19:46.673 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:40902 10 6438 1 2025-07-17 20:20:18.504 00:00:10.362 TCP 23.104.0.1:46902 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:20:46.858 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49646 10 6438 1 2025-07-17 20:15:57.185 00:06:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 20:21:18.905 00:00:10.337 TCP 23.104.0.1:59912 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:21:47.089 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46376 10 6438 1 2025-07-17 20:22:19.278 00:00:10.367 TCP 23.104.0.1:44612 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:22:47.296 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49472 10 6438 1 2025-07-17 20:23:19.684 00:00:10.367 TCP 23.104.0.1:48376 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:23:47.474 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54860 10 6438 1 2025-07-17 20:24:20.110 00:00:10.365 TCP 23.104.0.1:42556 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:24:39.885 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 20:24:39.806 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 20:24:47.685 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:52296 10 6438 1 2025-07-17 20:19:57.168 00:06:00.022 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 20:25:20.517 00:00:10.363 TCP 23.104.0.1:52478 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:25:47.859 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:33162 10 6438 1 2025-07-17 20:26:20.920 00:00:10.382 TCP 23.104.0.1:42980 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:26:48.086 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58102 10 6438 1 2025-07-17 20:27:21.342 00:00:10.366 TCP 23.104.0.1:55218 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:27:48.301 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37636 10 6438 1 2025-07-17 20:22:57.185 00:06:00.005 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 20:28:21.746 00:00:10.365 TCP 23.104.0.1:59120 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:28:48.471 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48050 10 6438 1 2025-07-17 20:29:39.739 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 20:29:22.151 00:00:10.376 TCP 23.104.0.1:45706 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:29:39.537 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 20:29:48.686 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:59408 10 6438 1 2025-07-17 20:30:22.569 00:00:10.366 TCP 23.104.0.1:55152 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:30:48.892 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48158 10 6438 1 2025-07-17 20:31:22.970 00:00:10.370 TCP 23.104.0.1:37412 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:26:57.167 00:06:00.028 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 20:31:49.112 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47080 10 6438 1 2025-07-17 20:32:23.378 00:00:10.369 TCP 23.104.0.1:60790 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:32:49.320 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35040 10 6438 1 2025-07-17 20:33:23.786 00:00:10.362 TCP 23.104.0.1:58494 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:33:49.537 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59504 10 6438 1 2025-07-17 20:34:24.185 00:00:10.362 TCP 23.104.0.1:41996 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:34:39.952 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 20:34:39.885 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 20:34:49.749 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54186 10 6438 1 2025-07-17 20:29:57.190 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 20:35:24.586 00:00:10.368 TCP 23.104.0.1:57090 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:35:49.965 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:35476 10 6438 1 2025-07-17 20:36:24.993 00:00:10.329 TCP 23.104.0.1:41756 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:36:50.186 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40382 10 6438 1 2025-07-17 20:37:25.353 00:00:10.329 TCP 23.104.0.1:57586 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:37:50.400 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:55988 10 6438 1 2025-07-17 20:38:25.734 00:00:10.369 TCP 23.104.0.1:52292 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:38:50.572 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49728 10 6438 1 2025-07-17 20:33:57.168 00:06:00.029 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 20:39:39.993 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 20:39:26.139 00:00:10.365 TCP 23.104.0.1:34988 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:39:40.049 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 20:39:50.791 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47440 10 6438 1 2025-07-17 20:40:26.543 00:00:10.366 TCP 23.104.0.1:35422 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:40:51.004 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56250 10 6438 1 2025-07-17 20:41:26.956 00:00:10.365 TCP 23.104.0.1:54482 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:36:57.194 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 20:41:51.221 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38300 10 6438 1 2025-07-17 20:42:27.358 00:00:10.366 TCP 23.104.0.1:41648 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:42:51.443 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43396 10 6438 1 2025-07-17 20:43:27.766 00:00:10.378 TCP 23.104.0.1:33030 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:43:51.664 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43794 10 6438 1 2025-07-17 20:44:39.916 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 20:44:28.184 00:00:10.324 TCP 23.104.0.1:41102 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:44:39.986 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 20:44:51.832 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36138 10 6438 1 2025-07-17 20:45:28.551 00:00:10.325 TCP 23.104.0.1:33970 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:40:57.173 00:06:00.026 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 20:45:52.067 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59158 10 6438 1 2025-07-17 20:46:28.914 00:00:10.361 TCP 23.104.0.1:53570 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:46:52.242 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53886 10 6438 1 2025-07-17 20:47:29.318 00:00:10.371 TCP 23.104.0.1:43918 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:47:52.462 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:57870 12 10350 1 2025-07-17 20:48:29.732 00:00:10.444 TCP 23.104.0.1:47688 -> 1.101.0.1:3000 15 1925 1 2025-07-17 20:43:57.204 00:05:59.992 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 20:48:52.703 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:35054 10 6438 1 2025-07-17 20:49:39.989 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 20:49:30.214 00:00:10.372 TCP 23.104.0.1:37466 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:49:40.025 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 20:49:52.874 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:36280 10 6438 1 2025-07-17 20:50:30.624 00:00:10.362 TCP 23.104.0.1:43222 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:50:53.074 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38350 10 6438 1 2025-07-17 20:51:31.024 00:00:10.365 TCP 23.104.0.1:51260 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:51:53.293 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54002 10 6438 1 2025-07-17 20:52:31.433 00:00:10.370 TCP 23.104.0.1:54076 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:47:57.173 00:06:00.026 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 20:52:53.520 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41284 10 6438 1 2025-07-17 20:53:31.840 00:00:10.387 TCP 23.104.0.1:41980 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:53:53.732 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58978 10 6438 1 2025-07-17 20:54:40.293 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 20:54:40.191 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 20:54:32.270 00:00:10.363 TCP 23.104.0.1:51418 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:54:53.905 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33248 10 6438 1 2025-07-17 20:55:32.668 00:00:10.364 TCP 23.104.0.1:33896 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:50:57.195 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 20:55:54.120 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:49222 10 6438 1 2025-07-17 20:56:33.094 00:00:10.364 TCP 23.104.0.1:41992 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:56:54.288 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58472 10 6438 1 2025-07-17 20:57:33.496 00:00:10.365 TCP 23.104.0.1:56110 -> 1.101.0.1:3000 11 1507 1 2025-07-17 20:57:54.502 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53026 10 6438 1 2025-07-17 20:58:33.912 00:00:10.426 TCP 23.104.0.1:38070 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 498439, total packets: 1513, avg bps: 1041, avg pps: 0, avg bpp: 329 Time window: 2025-07-17 19:54:57 - 2025-07-17 20:58:44 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0011s User: 0.0032s Wall: 0.0023s flows/second: 69338.0 Runtime: 0.0023s