Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-23 12:58:50.530 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59322 10 6438 1 2025-07-23 12:54:59.873 00:05:00.227 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 12:59:17.590 00:00:10.328 TCP 23.104.0.1:57246 -> 1.101.0.1:3000 11 1507 1 2025-07-23 12:59:50.744 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33582 10 6438 1 2025-07-23 13:00:17.955 00:00:10.367 TCP 23.104.0.1:52036 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:00:50.961 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40588 10 6438 1 2025-07-23 13:01:18.361 00:00:10.323 TCP 23.104.0.1:41538 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:01:51.183 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:58742 10 6438 1 2025-07-23 13:02:24.234 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 13:02:24.335 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 13:02:18.718 00:00:10.372 TCP 23.104.0.1:52290 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:02:51.393 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:57086 10 6438 1 2025-07-23 12:58:59.871 00:05:00.229 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 13:03:19.127 00:00:10.371 TCP 23.104.0.1:35194 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:03:51.563 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53046 10 6438 1 2025-07-23 13:04:19.532 00:00:10.376 TCP 23.104.0.1:38720 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:04:51.790 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55782 10 6438 1 2025-07-23 13:00:59.874 00:05:00.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 13:05:19.945 00:00:10.331 TCP 23.104.0.1:33898 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:05:52.003 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39636 10 6438 1 2025-07-23 13:06:20.316 00:00:10.358 TCP 23.104.0.1:46024 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:06:52.216 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46620 10 6438 1 2025-07-23 13:07:23.791 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 13:07:24.167 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 13:07:20.713 00:00:10.374 TCP 23.104.0.1:50414 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:07:52.429 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56048 10 6438 1 2025-07-23 13:08:21.124 00:00:10.323 TCP 23.104.0.1:35128 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:04:59.873 00:05:00.229 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 13:08:52.645 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34164 10 6438 1 2025-07-23 13:09:21.488 00:00:10.372 TCP 23.104.0.1:47414 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:09:52.817 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60000 10 6438 1 2025-07-23 13:10:21.891 00:00:10.344 TCP 23.104.0.1:37192 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:06:59.876 00:05:00.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 13:10:53.043 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:58522 10 6438 1 2025-07-23 13:11:22.294 00:00:10.318 TCP 23.104.0.1:44176 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:11:53.229 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43936 10 6438 1 2025-07-23 13:12:24.047 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 13:12:24.136 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 13:12:22.652 00:00:10.329 TCP 23.104.0.1:41596 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:12:53.449 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:54402 10 6438 1 2025-07-23 13:13:23.022 00:00:10.321 TCP 23.104.0.1:40732 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:13:53.663 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46156 10 6438 1 2025-07-23 13:14:23.382 00:00:10.364 TCP 23.104.0.1:38734 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:10:59.875 00:05:00.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 13:14:53.875 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49520 10 6438 1 2025-07-23 13:15:23.784 00:00:10.381 TCP 23.104.0.1:50876 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:15:54.072 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58618 10 6438 1 2025-07-23 13:16:24.191 00:00:10.366 TCP 23.104.0.1:35000 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:12:59.877 00:05:00.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 13:16:54.290 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47812 10 6438 1 2025-07-23 13:17:24.649 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 13:17:24.430 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 13:17:24.596 00:00:10.372 TCP 23.104.0.1:59542 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:17:54.504 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48170 10 6438 1 2025-07-23 13:18:25.017 00:00:10.361 TCP 23.104.0.1:43922 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:18:54.713 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39728 10 6438 1 2025-07-23 13:19:25.415 00:00:10.347 TCP 23.104.0.1:46134 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:19:54.941 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:49028 10 6438 1 2025-07-23 13:20:25.803 00:00:10.365 TCP 23.104.0.1:49522 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:16:59.875 00:05:00.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 13:20:55.174 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:36358 10 6438 1 2025-07-23 13:21:26.207 00:00:10.329 TCP 23.104.0.1:38432 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:21:55.386 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40232 10 6438 1 2025-07-23 13:22:24.451 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 13:22:24.416 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 13:22:26.573 00:00:10.338 TCP 23.104.0.1:45268 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:18:59.878 00:05:00.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 13:22:55.559 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:47086 12 10350 1 2025-07-23 13:23:26.945 00:00:10.444 TCP 23.104.0.1:37328 -> 1.101.0.1:3000 15 1925 1 2025-07-23 13:23:55.758 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:37816 10 6438 1 2025-07-23 13:24:27.445 00:00:10.331 TCP 23.104.0.1:60874 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:24:55.926 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60420 10 6438 1 2025-07-23 13:25:27.811 00:00:10.368 TCP 23.104.0.1:50654 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:25:56.157 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59712 10 6438 1 2025-07-23 13:26:28.227 00:00:10.366 TCP 23.104.0.1:42588 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:22:59.876 00:05:00.229 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 13:26:56.327 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60758 10 6438 1 2025-07-23 13:27:24.347 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 13:27:24.557 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 13:27:28.626 00:00:10.365 TCP 23.104.0.1:34428 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:27:56.536 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:56988 12 10350 1 2025-07-23 13:28:29.025 00:00:10.398 TCP 23.104.0.1:39572 -> 1.101.0.1:3000 15 1925 1 2025-07-23 13:24:59.879 00:05:00.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 13:28:56.778 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33336 10 6438 1 2025-07-23 13:29:29.463 00:00:10.377 TCP 23.104.0.1:41394 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:29:56.995 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:37864 10 6438 1 2025-07-23 13:30:29.870 00:00:10.368 TCP 23.104.0.1:39716 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:30:57.175 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59588 10 6438 1 2025-07-23 13:31:30.275 00:00:10.361 TCP 23.104.0.1:48286 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:31:57.396 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37882 10 6438 1 2025-07-23 13:32:24.803 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 13:32:24.726 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 13:32:30.674 00:00:10.379 TCP 23.104.0.1:43512 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:28:59.878 00:05:00.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 13:32:57.610 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49664 10 6438 1 2025-07-23 13:33:31.100 00:00:10.367 TCP 23.104.0.1:43708 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:33:57.821 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37710 10 6438 1 2025-07-23 13:34:31.499 00:00:10.324 TCP 23.104.0.1:32884 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:30:59.880 00:05:00.224 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 13:34:58.038 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49958 10 6438 1 2025-07-23 13:35:31.865 00:00:10.374 TCP 23.104.0.1:46728 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:35:58.250 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59126 10 6438 1 2025-07-23 13:36:32.272 00:00:10.365 TCP 23.104.0.1:38844 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:36:58.464 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52156 10 6438 1 2025-07-23 13:37:24.739 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 13:37:24.867 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 13:37:32.675 00:00:10.326 TCP 23.104.0.1:39584 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:37:58.674 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:34102 10 6438 1 2025-07-23 13:38:33.047 00:00:10.363 TCP 23.104.0.1:40580 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:34:59.879 00:05:00.231 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 13:38:58.887 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49796 10 6438 1 2025-07-23 13:39:33.453 00:00:10.362 TCP 23.104.0.1:36372 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:39:59.103 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:33560 10 6438 1 2025-07-23 13:40:33.861 00:00:10.374 TCP 23.104.0.1:58282 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:36:59.882 00:05:00.225 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 13:40:59.281 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57456 10 6438 1 2025-07-23 13:41:34.275 00:00:10.369 TCP 23.104.0.1:38560 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:41:59.498 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32900 10 6438 1 2025-07-23 13:42:24.728 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 13:42:24.944 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 13:42:34.680 00:00:10.369 TCP 23.104.0.1:33136 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:42:59.713 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51656 10 6438 1 2025-07-23 13:43:35.103 00:00:10.366 TCP 23.104.0.1:54206 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:43:59.925 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37334 10 6438 1 2025-07-23 13:44:35.521 00:00:10.369 TCP 23.104.0.1:41304 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:40:59.880 00:05:00.229 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 13:45:00.107 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46830 10 6438 1 2025-07-23 13:45:35.925 00:00:10.377 TCP 23.104.0.1:36768 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:46:00.320 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:35010 10 6438 1 2025-07-23 13:46:36.337 00:00:10.366 TCP 23.104.0.1:43368 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:42:59.884 00:05:00.223 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 13:47:00.487 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46224 10 6438 1 2025-07-23 13:47:24.886 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 13:47:24.675 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 13:47:36.739 00:00:10.365 TCP 23.104.0.1:40122 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:48:00.708 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43012 10 6438 1 2025-07-23 13:48:37.146 00:00:10.362 TCP 23.104.0.1:57436 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:49:00.931 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58734 10 6438 1 2025-07-23 13:49:37.554 00:00:10.367 TCP 23.104.0.1:46984 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:50:01.166 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38982 10 6438 1 2025-07-23 13:50:37.956 00:00:10.371 TCP 23.104.0.1:48706 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:46:59.883 00:05:00.228 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 13:51:01.384 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51240 10 6438 1 2025-07-23 13:51:38.368 00:00:10.364 TCP 23.104.0.1:53514 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:52:01.598 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41114 10 6438 1 2025-07-23 13:52:25.191 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 13:52:24.909 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 13:52:38.773 00:00:10.330 TCP 23.104.0.1:38118 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:48:59.884 00:05:00.224 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-23 13:53:01.817 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:42692 10 6438 1 2025-07-23 13:53:39.142 00:00:10.326 TCP 23.104.0.1:38992 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:54:01.988 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:40866 10 6438 1 2025-07-23 13:54:39.508 00:00:10.325 TCP 23.104.0.1:52176 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:55:02.222 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:44328 10 6438 1 2025-07-23 13:55:39.880 00:00:10.363 TCP 23.104.0.1:58860 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:56:02.391 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:53986 10 6438 1 2025-07-23 13:56:40.281 00:00:10.371 TCP 23.104.0.1:56276 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:52:59.883 00:05:00.230 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-23 13:57:02.605 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47690 10 6438 1 2025-07-23 13:57:25.088 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-23 13:57:25.305 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-23 13:57:40.691 00:00:10.366 TCP 23.104.0.1:34920 -> 1.101.0.1:3000 11 1507 1 2025-07-23 13:58:02.820 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47498 10 6438 1 2025-07-23 13:58:41.106 00:00:10.365 TCP 23.104.0.1:40172 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 506168, total packets: 1584, avg bps: 1056, avg pps: 0, avg bpp: 319 Time window: 2025-07-23 12:54:59 - 2025-07-23 13:58:51 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0019s User: 0.0028s Wall: 0.0022s flows/second: 74508.9 Runtime: 0.0022s