Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-19 23:58:51.009 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:32894 10 6438 1 2025-07-19 23:59:10.361 00:00:10.371 TCP 23.104.0.1:51320 -> 1.101.0.1:3000 11 1507 1 2025-07-19 23:59:51.217 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45974 10 6438 1 2025-07-19 23:54:58.237 00:06:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 00:00:10.781 00:00:10.364 TCP 23.104.0.1:36004 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:00:41.810 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 00:00:41.763 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 00:00:51.432 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60350 10 6438 1 2025-07-20 00:01:11.187 00:00:10.369 TCP 23.104.0.1:33146 -> 1.101.0.1:3000 11 1507 1 2025-07-19 23:56:58.235 00:06:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 00:01:51.652 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38546 10 6438 1 2025-07-20 00:02:11.596 00:00:10.369 TCP 23.104.0.1:46054 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:02:51.860 00:00:10.209 TCP 1.101.0.1:3000 -> 22.102.0.1:49852 10 6438 1 2025-07-20 00:03:12.001 00:00:10.360 TCP 23.104.0.1:39236 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:03:52.110 00:00:10.126 TCP 1.101.0.1:3000 -> 22.102.0.1:41256 10 6438 1 2025-07-20 00:04:12.405 00:00:10.357 TCP 23.104.0.1:43302 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:04:52.273 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49642 10 6438 1 2025-07-20 00:05:12.803 00:00:10.366 TCP 23.104.0.1:51410 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:05:41.868 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 00:05:41.810 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 00:05:52.489 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36470 10 6438 1 2025-07-20 00:06:13.211 00:00:10.326 TCP 23.104.0.1:40040 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:01:58.238 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 00:06:52.710 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44512 10 6438 1 2025-07-20 00:07:13.578 00:00:10.324 TCP 23.104.0.1:36536 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:07:52.918 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34476 10 6438 1 2025-07-20 00:08:13.939 00:00:10.379 TCP 23.104.0.1:46576 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:03:58.236 00:06:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 00:08:53.129 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:42402 10 6438 1 2025-07-20 00:09:14.359 00:00:10.364 TCP 23.104.0.1:47684 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:09:53.353 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41708 10 6438 1 2025-07-20 00:10:14.762 00:00:10.377 TCP 23.104.0.1:51806 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:10:42.023 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 00:10:42.033 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 00:10:53.562 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59092 10 6438 1 2025-07-20 00:11:15.175 00:00:10.323 TCP 23.104.0.1:52138 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:11:53.772 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38024 10 6438 1 2025-07-20 00:12:15.536 00:00:10.364 TCP 23.104.0.1:38626 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:12:53.984 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:49202 10 6438 1 2025-07-20 00:13:15.936 00:00:10.370 TCP 23.104.0.1:51286 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:08:58.239 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 00:13:54.227 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57698 10 6438 1 2025-07-20 00:14:16.351 00:00:10.363 TCP 23.104.0.1:43632 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:14:54.397 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:33272 10 6438 1 2025-07-20 00:15:16.760 00:00:10.381 TCP 23.104.0.1:40754 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:15:41.929 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 00:15:42.036 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 00:10:58.238 00:06:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 00:15:54.568 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52218 10 6438 1 2025-07-20 00:16:17.179 00:00:10.367 TCP 23.104.0.1:36182 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:16:54.741 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49848 10 6438 1 2025-07-20 00:17:17.585 00:00:10.367 TCP 23.104.0.1:60018 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:17:54.954 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:37502 10 6438 1 2025-07-20 00:18:17.984 00:00:10.332 TCP 23.104.0.1:42870 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:18:55.186 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:48592 10 6438 1 2025-07-20 00:19:18.351 00:00:10.362 TCP 23.104.0.1:57960 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:19:55.424 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34584 10 6438 1 2025-07-20 00:20:18.750 00:00:10.389 TCP 23.104.0.1:42426 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:20:42.007 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 00:20:42.200 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 00:15:58.241 00:06:00.190 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 00:20:55.639 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45108 10 6438 1 2025-07-20 00:21:19.177 00:00:10.372 TCP 23.104.0.1:53050 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:21:55.870 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55618 10 6438 1 2025-07-20 00:22:19.585 00:00:10.360 TCP 23.104.0.1:57092 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:17:58.239 00:06:00.195 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 00:22:56.088 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60796 10 6438 1 2025-07-20 00:23:19.985 00:00:10.374 TCP 23.104.0.1:45746 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:23:56.299 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47392 10 6438 1 2025-07-20 00:24:20.396 00:00:10.364 TCP 23.104.0.1:35170 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:24:56.510 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:43506 10 6438 1 2025-07-20 00:25:20.797 00:00:10.363 TCP 23.104.0.1:42348 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:25:42.210 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 00:25:42.010 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 00:25:56.734 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:44668 10 6438 1 2025-07-20 00:26:21.195 00:00:10.366 TCP 23.104.0.1:35600 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:26:56.942 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:39532 10 6438 1 2025-07-20 00:27:21.600 00:00:10.361 TCP 23.104.0.1:33662 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:22:58.241 00:06:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 00:27:57.176 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55108 10 6438 1 2025-07-20 00:28:21.997 00:00:10.364 TCP 23.104.0.1:49650 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:28:57.383 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34136 10 6438 1 2025-07-20 00:29:22.398 00:00:10.367 TCP 23.104.0.1:60638 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:24:58.243 00:06:00.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 00:29:57.596 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57420 10 6438 1 2025-07-20 00:30:22.810 00:00:10.330 TCP 23.104.0.1:42522 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:30:42.354 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 00:30:42.558 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 00:30:57.810 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38516 10 6438 1 2025-07-20 00:31:23.185 00:00:10.367 TCP 23.104.0.1:40750 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:31:58.027 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53684 10 6438 1 2025-07-20 00:32:23.586 00:00:10.365 TCP 23.104.0.1:41786 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:32:58.238 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44242 10 6438 1 2025-07-20 00:33:24.004 00:00:10.362 TCP 23.104.0.1:46940 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:33:58.445 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48308 10 6438 1 2025-07-20 00:34:24.407 00:00:10.366 TCP 23.104.0.1:58410 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:29:58.245 00:06:00.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 00:34:58.664 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:51614 10 6438 1 2025-07-20 00:35:24.808 00:00:10.362 TCP 23.104.0.1:39808 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:35:42.352 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 00:35:42.299 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 00:35:58.877 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52252 10 6438 1 2025-07-20 00:36:25.214 00:00:10.361 TCP 23.104.0.1:38920 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:31:58.245 00:06:00.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 00:36:59.101 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57342 10 6438 1 2025-07-20 00:37:25.615 00:00:10.367 TCP 23.104.0.1:60930 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:37:59.322 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48218 10 6438 1 2025-07-20 00:38:26.018 00:00:10.339 TCP 23.104.0.1:59538 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:38:59.535 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:32846 10 6438 1 2025-07-20 00:39:26.391 00:00:10.368 TCP 23.104.0.1:38940 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:39:59.706 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:38792 10 6438 1 2025-07-20 00:40:26.792 00:00:10.366 TCP 23.104.0.1:52320 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:40:42.474 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 00:40:42.513 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 00:40:59.929 00:00:10.217 TCP 1.101.0.1:3000 -> 22.102.0.1:47388 10 6438 1 2025-07-20 00:41:27.198 00:00:10.322 TCP 23.104.0.1:54334 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:36:58.248 00:06:00.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 00:42:00.188 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:50340 10 6438 1 2025-07-20 00:42:27.562 00:00:10.365 TCP 23.104.0.1:56754 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:43:00.395 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:33308 12 10352 1 2025-07-20 00:43:27.966 00:00:10.449 TCP 23.104.0.1:38856 -> 1.101.0.1:3000 15 1925 1 2025-07-20 00:38:58.245 00:06:00.193 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 00:44:00.592 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46608 10 6438 1 2025-07-20 00:44:28.456 00:00:10.374 TCP 23.104.0.1:50320 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:45:00.806 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57750 10 6438 1 2025-07-20 00:45:28.875 00:00:10.397 TCP 23.104.0.1:49620 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:45:42.559 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 00:45:42.721 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 00:46:01.038 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:40464 10 6438 1 2025-07-20 00:46:29.322 00:00:10.322 TCP 23.104.0.1:43744 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:47:01.222 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49494 10 6438 1 2025-07-20 00:47:29.695 00:00:10.365 TCP 23.104.0.1:51906 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:48:01.454 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:54542 10 6438 1 2025-07-20 00:48:30.104 00:00:10.330 TCP 23.104.0.1:41436 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:43:58.248 00:06:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 00:49:01.672 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35962 10 6438 1 2025-07-20 00:49:30.490 00:00:10.375 TCP 23.104.0.1:37810 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:50:01.845 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46228 10 6438 1 2025-07-20 00:50:30.908 00:00:10.366 TCP 23.104.0.1:41292 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:50:42.813 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 00:50:42.737 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 00:45:58.247 00:06:00.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 00:51:02.079 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:51156 10 6438 1 2025-07-20 00:51:31.307 00:00:10.371 TCP 23.104.0.1:58980 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:52:02.250 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49856 10 6438 1 2025-07-20 00:52:31.715 00:00:10.372 TCP 23.104.0.1:39544 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:53:02.464 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48866 10 6438 1 2025-07-20 00:53:32.127 00:00:10.324 TCP 23.104.0.1:47456 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:54:02.677 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56770 10 6438 1 2025-07-20 00:54:32.486 00:00:10.368 TCP 23.104.0.1:37834 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:55:02.894 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33986 10 6438 1 2025-07-20 00:55:32.889 00:00:10.373 TCP 23.104.0.1:38176 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:55:42.806 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-20 00:55:42.687 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-20 00:50:58.250 00:06:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-20 00:56:03.112 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55394 10 6438 1 2025-07-20 00:56:33.298 00:00:10.373 TCP 23.104.0.1:47230 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:57:03.323 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54766 10 6438 1 2025-07-20 00:57:33.704 00:00:10.373 TCP 23.104.0.1:47516 -> 1.101.0.1:3000 11 1507 1 2025-07-20 00:52:58.248 00:06:00.196 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-20 00:58:03.539 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:44452 10 6438 1 2025-07-20 00:58:34.109 00:00:10.326 TCP 23.104.0.1:40276 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 502578, total packets: 1590, avg bps: 1046, avg pps: 0, avg bpp: 316 Time window: 2025-07-19 23:54:58 - 2025-07-20 00:58:58 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0035s User: 0.0009s Wall: 0.0021s flows/second: 75598.3 Runtime: 0.0022s