Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 16:53:59.509 00:06:00.201 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 16:53:59.507 00:06:00.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 16:59:14.358 00:00:10.365 TCP 23.104.0.1:47666 -> 1.101.0.1:3000 11 1507 1 2025-07-22 16:59:38.007 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47680 10 6438 1 2025-07-22 17:00:14.758 00:00:10.377 TCP 23.104.0.1:57522 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:00:38.236 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:42940 10 6438 1 2025-07-22 17:01:15.173 00:00:10.320 TCP 23.104.0.1:58976 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:01:38.429 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58834 10 6438 1 2025-07-22 17:01:59.756 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 17:01:59.892 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 17:02:15.535 00:00:10.365 TCP 23.104.0.1:44430 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:02:38.643 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36182 10 6438 1 2025-07-22 17:03:15.936 00:00:10.448 TCP 23.104.0.1:56698 -> 1.101.0.1:3000 15 1925 1 2025-07-22 17:03:38.862 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34662 12 10352 1 2025-07-22 17:04:16.418 00:00:10.367 TCP 23.104.0.1:47058 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:04:39.079 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48558 10 6438 1 2025-07-22 17:05:16.822 00:00:10.369 TCP 23.104.0.1:57282 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:05:39.291 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52510 10 6438 1 2025-07-22 17:00:59.511 00:06:00.203 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 17:00:59.510 00:06:00.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 17:06:17.229 00:00:10.371 TCP 23.104.0.1:59892 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:06:39.510 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54436 10 6438 1 2025-07-22 17:06:59.988 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 17:06:59.978 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 17:07:17.646 00:00:10.378 TCP 23.104.0.1:40704 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:07:39.724 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:48262 10 6438 1 2025-07-22 17:08:18.092 00:00:10.339 TCP 23.104.0.1:35152 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:08:39.930 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:59604 10 6438 1 2025-07-22 17:09:18.457 00:00:10.365 TCP 23.104.0.1:54458 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:09:40.117 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:54648 10 6438 1 2025-07-22 17:10:18.857 00:00:10.331 TCP 23.104.0.1:42712 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:10:40.329 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38548 10 6438 1 2025-07-22 17:11:19.224 00:00:10.367 TCP 23.104.0.1:39376 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:11:40.539 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43118 10 6438 1 2025-07-22 17:12:00.378 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 17:12:00.068 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 17:12:19.627 00:00:10.363 TCP 23.104.0.1:35310 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:12:40.752 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35096 10 6438 1 2025-07-22 17:07:59.514 00:06:00.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 17:07:59.512 00:06:00.208 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 17:13:20.029 00:00:10.366 TCP 23.104.0.1:59644 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:13:40.973 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59964 10 6438 1 2025-07-22 17:14:20.428 00:00:10.364 TCP 23.104.0.1:45002 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:14:41.203 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:47692 10 6438 1 2025-07-22 17:15:20.827 00:00:10.357 TCP 23.104.0.1:34286 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:15:41.426 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57104 10 6438 1 2025-07-22 17:16:21.220 00:00:10.346 TCP 23.104.0.1:44608 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:16:41.641 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56998 10 6438 1 2025-07-22 17:17:00.456 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 17:17:00.445 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 17:17:21.584 00:00:10.370 TCP 23.104.0.1:56100 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:17:41.816 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46694 10 6438 1 2025-07-22 17:18:21.989 00:00:10.374 TCP 23.104.0.1:48498 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:18:42.039 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:41242 10 6438 1 2025-07-22 17:19:22.396 00:00:10.364 TCP 23.104.0.1:34634 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:19:42.255 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39968 10 6438 1 2025-07-22 17:14:59.514 00:06:00.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 17:14:59.513 00:06:00.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 17:20:22.798 00:00:10.372 TCP 23.104.0.1:48090 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:20:42.478 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:56048 10 6438 1 2025-07-22 17:21:23.207 00:00:10.329 TCP 23.104.0.1:43128 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:21:42.690 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55354 10 6438 1 2025-07-22 17:22:00.198 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 17:22:00.487 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 17:22:23.578 00:00:10.367 TCP 23.104.0.1:42270 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:22:42.895 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49768 10 6438 1 2025-07-22 17:23:23.985 00:00:10.369 TCP 23.104.0.1:33504 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:23:43.113 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38874 10 6438 1 2025-07-22 17:24:24.393 00:00:10.368 TCP 23.104.0.1:45398 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:24:43.327 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45854 10 6438 1 2025-07-22 17:25:24.800 00:00:10.366 TCP 23.104.0.1:40954 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:25:43.541 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39992 10 6438 1 2025-07-22 17:26:25.208 00:00:10.329 TCP 23.104.0.1:58124 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:26:43.711 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:39106 10 6438 1 2025-07-22 17:27:00.366 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 17:21:59.515 00:06:00.206 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 17:27:00.583 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 17:21:59.518 00:06:00.201 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 17:27:25.573 00:00:10.365 TCP 23.104.0.1:45414 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:27:43.943 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:49158 10 6438 1 2025-07-22 17:28:25.974 00:00:10.363 TCP 23.104.0.1:52240 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:28:44.143 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52494 10 6438 1 2025-07-22 17:29:26.374 00:00:10.378 TCP 23.104.0.1:36144 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:29:44.351 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59682 10 6438 1 2025-07-22 17:30:26.789 00:00:10.378 TCP 23.104.0.1:41858 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:30:44.521 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42394 10 6438 1 2025-07-22 17:31:27.199 00:00:10.363 TCP 23.104.0.1:58414 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:31:44.732 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34980 10 6438 1 2025-07-22 17:32:00.323 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 17:32:00.597 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 17:32:27.602 00:00:10.365 TCP 23.104.0.1:50650 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:32:44.955 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:57838 12 6542 1 2025-07-22 17:33:28.006 00:00:10.364 TCP 23.104.0.1:37008 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:33:45.183 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57138 10 6438 1 2025-07-22 17:28:59.517 00:06:00.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 17:28:59.520 00:06:00.202 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 17:34:28.407 00:00:10.361 TCP 23.104.0.1:58138 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:34:45.399 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45768 10 6438 1 2025-07-22 17:35:28.808 00:00:10.364 TCP 23.104.0.1:58470 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:35:45.610 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:58320 10 6438 1 2025-07-22 17:36:29.211 00:00:10.362 TCP 23.104.0.1:33750 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:37:00.533 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 17:36:45.821 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:44392 10 6438 1 2025-07-22 17:37:00.744 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 17:37:29.612 00:00:10.358 TCP 23.104.0.1:44880 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:37:46.072 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39868 10 6438 1 2025-07-22 17:38:30.011 00:00:10.320 TCP 23.104.0.1:52434 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:38:46.278 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54118 10 6438 1 2025-07-22 17:39:30.373 00:00:10.371 TCP 23.104.0.1:46952 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:39:46.489 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48218 10 6438 1 2025-07-22 17:40:30.783 00:00:10.333 TCP 23.104.0.1:46748 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:40:46.713 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45756 10 6438 1 2025-07-22 17:35:59.521 00:06:00.203 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 17:35:59.519 00:06:00.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 17:41:31.168 00:00:10.383 TCP 23.104.0.1:33564 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:42:00.901 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 17:41:46.930 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:50136 10 6438 1 2025-07-22 17:42:00.871 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 17:42:31.594 00:00:10.324 TCP 23.104.0.1:51628 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:42:47.160 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38170 10 6438 1 2025-07-22 17:43:31.966 00:00:10.364 TCP 23.104.0.1:47978 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:43:47.382 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:37810 10 6438 1 2025-07-22 17:44:32.365 00:00:10.323 TCP 23.104.0.1:47464 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:44:47.594 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:57492 10 6438 1 2025-07-22 17:45:32.724 00:00:10.373 TCP 23.104.0.1:44928 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:45:47.808 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35930 10 6438 1 2025-07-22 17:46:33.129 00:00:10.363 TCP 23.104.0.1:34620 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:47:00.831 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 17:47:00.796 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 17:46:48.036 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:55680 10 6438 1 2025-07-22 17:47:33.530 00:00:10.365 TCP 23.104.0.1:39520 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:42:59.520 00:06:00.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 17:42:59.523 00:06:00.203 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 17:47:48.263 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:40392 10 6438 1 2025-07-22 17:48:33.935 00:00:10.384 TCP 23.104.0.1:44604 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:48:48.438 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48244 10 6438 1 2025-07-22 17:49:34.353 00:00:10.359 TCP 23.104.0.1:37966 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:49:48.648 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36800 10 6438 1 2025-07-22 17:50:34.749 00:00:10.362 TCP 23.104.0.1:56788 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:50:48.877 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47334 10 6438 1 2025-07-22 17:51:35.161 00:00:10.365 TCP 23.104.0.1:38776 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:52:00.979 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 17:51:49.108 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59068 10 6438 1 2025-07-22 17:52:00.680 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 17:52:35.566 00:00:10.325 TCP 23.104.0.1:39242 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:52:49.351 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:38140 10 6438 1 2025-07-22 17:53:35.923 00:00:10.333 TCP 23.104.0.1:41708 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:53:49.560 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46632 10 6438 1 2025-07-22 17:54:36.292 00:00:10.367 TCP 23.104.0.1:45892 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:54:49.773 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57342 10 6438 1 2025-07-22 17:49:59.524 00:06:00.201 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 17:49:59.522 00:06:00.207 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 17:55:36.696 00:00:10.370 TCP 23.104.0.1:32814 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:55:49.949 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:49946 10 6438 1 2025-07-22 17:56:37.109 00:00:10.365 TCP 23.104.0.1:39238 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:57:01.080 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 17:57:01.221 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 17:56:50.175 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:40770 10 6438 1 2025-07-22 17:57:37.511 00:00:10.365 TCP 23.104.0.1:51616 -> 1.101.0.1:3000 11 1507 1 2025-07-22 17:57:50.367 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53352 10 6438 1 2025-07-22 17:58:37.916 00:00:10.362 TCP 23.104.0.1:55650 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 496244, total packets: 1582, avg bps: 1020, avg pps: 0, avg bpp: 313 Time window: 2025-07-22 16:53:59 - 2025-07-22 17:58:48 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0044s User: 0.0009s Wall: 0.0028s flows/second: 58440.8 Runtime: 0.0028s