Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-30 06:58:49.251 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:57794 12 10365 1 2025-07-30 06:54:03.117 00:06:00.270 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 06:58:58.427 00:00:10.446 TCP 23.104.0.1:37848 -> 1.101.0.1:3000 15 1926 1 2025-07-30 06:59:49.487 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50856 10 6452 1 2025-07-30 06:59:58.911 00:00:10.365 TCP 23.104.0.1:55694 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:00:39.165 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 07:00:38.883 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 07:00:49.703 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:42948 10 6452 1 2025-07-30 07:00:59.317 00:00:10.363 TCP 23.104.0.1:39130 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:01:49.917 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53280 10 6452 1 2025-07-30 06:57:03.116 00:06:00.275 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 07:01:59.713 00:00:10.325 TCP 23.104.0.1:38408 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:02:50.142 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55186 10 6452 1 2025-07-30 07:03:00.114 00:00:10.368 TCP 23.104.0.1:53178 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:03:50.371 00:00:10.420 TCP 1.101.0.1:3000 -> 22.102.0.1:41516 10 6452 1 2025-07-30 07:04:00.517 00:00:10.455 TCP 23.104.0.1:45164 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:04:50.833 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58488 10 6452 1 2025-07-30 07:05:01.010 00:00:10.364 TCP 23.104.0.1:48258 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:05:38.863 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 07:05:39.180 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 07:05:51.073 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38878 10 6452 1 2025-07-30 07:01:03.122 00:06:00.267 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 07:06:01.412 00:00:10.367 TCP 23.104.0.1:44682 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:06:51.289 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49786 10 6452 1 2025-07-30 07:07:01.817 00:00:10.365 TCP 23.104.0.1:59026 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:07:51.496 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56950 10 6452 1 2025-07-30 07:08:02.220 00:00:10.361 TCP 23.104.0.1:59670 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:08:51.668 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39420 10 6452 1 2025-07-30 07:04:03.120 00:06:00.272 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 07:09:02.623 00:00:10.364 TCP 23.104.0.1:58252 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:09:51.876 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:32794 10 6452 1 2025-07-30 07:10:03.029 00:00:10.366 TCP 23.104.0.1:42024 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:10:39.380 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 07:10:39.251 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 07:10:52.094 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52456 10 6452 1 2025-07-30 07:11:03.430 00:00:10.371 TCP 23.104.0.1:56870 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:11:52.315 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35976 10 6452 1 2025-07-30 07:12:03.848 00:00:10.385 TCP 23.104.0.1:33852 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:08:03.122 00:06:00.268 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 07:12:52.525 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45668 10 6452 1 2025-07-30 07:13:04.268 00:00:10.370 TCP 23.104.0.1:34648 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:13:52.737 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47066 10 6452 1 2025-07-30 07:14:04.681 00:00:10.366 TCP 23.104.0.1:36726 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:14:52.956 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38230 10 6452 1 2025-07-30 07:15:05.107 00:00:10.325 TCP 23.104.0.1:44082 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:15:39.029 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 07:15:39.332 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 07:11:03.121 00:06:00.274 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 07:15:53.190 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44380 10 6452 1 2025-07-30 07:16:05.474 00:00:10.371 TCP 23.104.0.1:59726 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:16:53.360 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44382 10 6452 1 2025-07-30 07:17:05.886 00:00:10.375 TCP 23.104.0.1:42130 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:17:53.577 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46334 10 6452 1 2025-07-30 07:18:06.295 00:00:10.364 TCP 23.104.0.1:41006 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:18:53.742 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38328 10 6452 1 2025-07-30 07:19:06.697 00:00:10.366 TCP 23.104.0.1:42712 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:19:53.955 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60198 11 7373 1 2025-07-30 07:15:03.126 00:06:00.267 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 07:20:07.108 00:00:10.331 TCP 23.104.0.1:45046 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:20:39.536 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 07:20:39.526 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 07:20:54.196 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:34598 10 6452 1 2025-07-30 07:21:07.471 00:00:10.326 TCP 23.104.0.1:37574 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:21:54.425 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49400 10 6452 1 2025-07-30 07:22:07.838 00:00:10.380 TCP 23.104.0.1:42356 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:22:54.641 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43288 10 6452 1 2025-07-30 07:18:03.124 00:06:00.272 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 07:23:08.262 00:00:10.457 TCP 23.104.0.1:60016 -> 1.101.0.1:3000 15 1926 1 2025-07-30 07:23:54.848 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:37512 12 10365 1 2025-07-30 07:24:08.757 00:00:10.373 TCP 23.104.0.1:45650 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:24:55.079 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:38202 10 6452 1 2025-07-30 07:25:09.166 00:00:10.329 TCP 23.104.0.1:40452 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:25:39.462 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 07:25:39.431 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 07:25:55.293 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39934 10 6452 1 2025-07-30 07:26:09.534 00:00:10.371 TCP 23.104.0.1:33894 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:22:03.156 00:06:00.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 07:26:55.505 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:45854 10 6452 1 2025-07-30 07:27:09.941 00:00:10.377 TCP 23.104.0.1:48526 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:27:55.713 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58110 10 6452 1 2025-07-30 07:28:10.355 00:00:10.324 TCP 23.104.0.1:33378 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:28:55.921 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:56814 10 6452 1 2025-07-30 07:29:10.711 00:00:10.381 TCP 23.104.0.1:45126 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:29:56.108 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:55014 10 6452 1 2025-07-30 07:25:03.154 00:06:00.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 07:30:11.131 00:00:10.369 TCP 23.104.0.1:39512 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:30:39.602 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 07:30:39.525 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 07:30:56.317 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59926 10 6452 1 2025-07-30 07:31:11.537 00:00:10.363 TCP 23.104.0.1:52406 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:31:56.487 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:49376 10 6452 1 2025-07-30 07:32:11.939 00:00:10.380 TCP 23.104.0.1:39150 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:32:56.656 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48652 10 6452 1 2025-07-30 07:33:12.355 00:00:10.365 TCP 23.104.0.1:54554 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:29:03.158 00:06:00.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 07:33:56.873 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37106 10 6452 1 2025-07-30 07:34:12.755 00:00:10.383 TCP 23.104.0.1:43794 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:34:57.098 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:34076 10 6452 1 2025-07-30 07:35:13.179 00:00:10.368 TCP 23.104.0.1:40362 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:35:39.501 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 07:35:39.742 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 07:35:57.275 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54848 10 6452 1 2025-07-30 07:36:13.582 00:00:10.363 TCP 23.104.0.1:43624 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:32:03.155 00:06:00.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 07:36:57.501 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:59554 10 6452 1 2025-07-30 07:37:13.982 00:00:10.327 TCP 23.104.0.1:35472 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:37:57.719 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:50332 10 6452 1 2025-07-30 07:38:14.347 00:00:10.362 TCP 23.104.0.1:53838 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:38:57.933 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:39130 10 6452 1 2025-07-30 07:39:14.748 00:00:10.361 TCP 23.104.0.1:36928 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:39:58.170 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:46182 10 6452 1 2025-07-30 07:40:15.146 00:00:10.326 TCP 23.104.0.1:58698 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:40:39.831 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 07:40:39.930 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 07:36:03.158 00:06:00.239 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 07:40:58.383 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40222 10 6452 1 2025-07-30 07:41:15.510 00:00:10.362 TCP 23.104.0.1:45366 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:41:58.598 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49844 10 6452 1 2025-07-30 07:42:15.913 00:00:10.363 TCP 23.104.0.1:36734 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:42:58.807 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59670 10 6452 1 2025-07-30 07:43:16.314 00:00:10.436 TCP 23.104.0.1:36740 -> 1.101.0.1:3000 15 1926 1 2025-07-30 07:39:03.156 00:06:00.244 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 07:43:59.039 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:45586 12 10367 1 2025-07-30 07:44:16.788 00:00:10.373 TCP 23.104.0.1:60182 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:44:59.279 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40030 10 6452 1 2025-07-30 07:45:17.197 00:00:10.367 TCP 23.104.0.1:33314 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:45:39.896 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 07:45:39.922 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 07:45:59.499 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40462 10 6452 1 2025-07-30 07:46:17.599 00:00:10.373 TCP 23.104.0.1:33272 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:46:59.715 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:53086 10 6452 1 2025-07-30 07:47:18.011 00:00:10.375 TCP 23.104.0.1:37792 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:43:03.161 00:06:00.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 07:47:59.886 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:38574 10 6452 1 2025-07-30 07:48:18.426 00:00:10.332 TCP 23.104.0.1:52414 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:49:00.105 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33996 10 6452 1 2025-07-30 07:49:18.796 00:00:10.360 TCP 23.104.0.1:41576 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:50:00.314 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:48604 10 6452 1 2025-07-30 07:50:19.194 00:00:10.412 TCP 23.104.0.1:59738 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:50:39.852 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 07:50:39.938 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 07:46:03.159 00:06:00.243 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 07:51:00.528 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54170 10 6452 1 2025-07-30 07:51:19.641 00:00:10.368 TCP 23.104.0.1:34750 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:52:00.747 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:33778 10 6452 1 2025-07-30 07:52:20.056 00:00:10.373 TCP 23.104.0.1:59694 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:53:00.956 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:50344 10 6452 1 2025-07-30 07:53:20.469 00:00:10.369 TCP 23.104.0.1:44410 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:54:01.187 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:52652 10 6452 1 2025-07-30 07:54:20.878 00:00:10.318 TCP 23.104.0.1:49374 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:50:03.161 00:06:00.237 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 07:55:01.408 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49078 10 6452 1 2025-07-30 07:55:21.230 00:00:10.362 TCP 23.104.0.1:41134 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:55:40.176 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 07:55:40.173 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 07:56:01.619 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34410 10 6452 1 2025-07-30 07:56:21.632 00:00:10.363 TCP 23.104.0.1:33720 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:57:01.827 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38506 10 6452 1 2025-07-30 07:57:22.043 00:00:10.367 TCP 23.104.0.1:46788 -> 1.101.0.1:3000 11 1507 1 2025-07-30 07:53:03.161 00:06:00.241 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 07:58:02.075 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:37578 10 6452 1 2025-07-30 07:58:22.452 00:00:10.479 TCP 23.104.0.1:42246 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 513005, total packets: 1603, avg bps: 1052, avg pps: 0, avg bpp: 320 Time window: 2025-07-30 06:54:03 - 2025-07-30 07:59:03 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0027s User: 0.0020s Wall: 0.0031s flows/second: 51608.5 Runtime: 0.0032s