Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-30 19:58:45.322 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:43884 10 6452 1 2025-07-30 19:54:03.435 00:06:00.213 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 19:59:15.996 00:00:10.339 TCP 23.104.0.1:35022 -> 1.101.0.1:3000 11 1507 1 2025-07-30 19:59:45.497 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37378 10 6452 1 2025-07-30 20:00:16.374 00:00:10.365 TCP 23.104.0.1:47228 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:00:54.484 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 20:00:54.661 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 20:00:45.715 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33706 10 6452 1 2025-07-30 20:01:16.778 00:00:10.365 TCP 23.104.0.1:59004 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:01:45.937 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:56668 10 6452 1 2025-07-30 20:02:17.180 00:00:10.364 TCP 23.104.0.1:39794 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:02:46.180 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:35432 10 6452 1 2025-07-30 19:58:03.473 00:06:00.174 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 20:03:17.586 00:00:10.363 TCP 23.104.0.1:47586 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:03:46.391 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:46410 10 6452 1 2025-07-30 20:04:17.982 00:00:10.370 TCP 23.104.0.1:41138 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:04:46.624 00:00:10.421 TCP 1.101.0.1:3000 -> 22.102.0.1:56104 10 6452 1 2025-07-30 20:05:18.422 00:00:10.380 TCP 23.104.0.1:51448 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:05:54.743 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 20:05:54.709 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 20:05:47.083 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56252 10 6452 1 2025-07-30 20:01:03.470 00:06:00.179 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 20:06:18.852 00:00:10.382 TCP 23.104.0.1:59478 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:06:47.296 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38536 10 6452 1 2025-07-30 20:07:19.267 00:00:10.367 TCP 23.104.0.1:56696 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:07:47.505 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:43352 10 6452 1 2025-07-30 20:08:19.672 00:00:10.521 TCP 23.104.0.1:42952 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:08:47.712 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:41574 10 6452 1 2025-07-30 20:09:20.231 00:00:10.360 TCP 23.104.0.1:46704 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:09:47.937 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:38478 10 6452 1 2025-07-30 20:05:03.474 00:06:00.189 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 20:10:20.632 00:00:10.368 TCP 23.104.0.1:40814 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:10:54.617 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 20:10:54.686 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 20:10:48.166 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:50902 10 6452 1 2025-07-30 20:11:21.033 00:00:10.368 TCP 23.104.0.1:46484 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:11:48.382 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53122 10 6452 1 2025-07-30 20:12:21.444 00:00:10.357 TCP 23.104.0.1:34414 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:12:48.594 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33714 10 6452 1 2025-07-30 20:08:03.473 00:06:00.198 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 20:13:21.838 00:00:10.389 TCP 23.104.0.1:35466 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:13:48.764 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50106 10 6452 1 2025-07-30 20:14:22.262 00:00:10.358 TCP 23.104.0.1:39360 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:14:48.977 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:47744 10 6452 1 2025-07-30 20:15:22.661 00:00:10.368 TCP 23.104.0.1:54016 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:15:54.902 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 20:15:54.806 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 20:15:49.212 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52140 10 6452 1 2025-07-30 20:16:23.093 00:00:10.334 TCP 23.104.0.1:42608 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:16:49.422 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:56202 10 6452 1 2025-07-30 20:12:03.475 00:06:00.195 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 20:17:23.464 00:00:10.361 TCP 23.104.0.1:38788 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:17:49.593 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:60772 10 6452 1 2025-07-30 20:18:23.861 00:00:10.369 TCP 23.104.0.1:47240 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:18:49.805 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54728 10 6452 1 2025-07-30 20:19:24.272 00:00:10.346 TCP 23.104.0.1:36508 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:19:50.037 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:49220 10 6452 1 2025-07-30 20:15:03.474 00:06:00.199 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 20:20:24.659 00:00:10.363 TCP 23.104.0.1:52208 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:20:55.063 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 20:20:54.921 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 20:20:50.231 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:47102 10 6452 1 2025-07-30 20:21:25.081 00:00:10.370 TCP 23.104.0.1:45576 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:21:50.442 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:42104 10 6452 1 2025-07-30 20:22:25.490 00:00:10.386 TCP 23.104.0.1:55292 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:22:50.607 00:00:13.117 TCP 1.101.0.1:3000 -> 22.102.0.1:37252 10 6452 1 2025-07-30 20:23:25.919 00:00:10.372 TCP 23.104.0.1:38452 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:23:53.763 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46602 10 6452 1 2025-07-30 20:19:03.485 00:06:00.187 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 20:24:26.336 00:00:10.327 TCP 23.104.0.1:55912 -> 1.101.0.1:3000 12 1559 1 2025-07-30 20:24:53.944 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:51988 10 6452 1 2025-07-30 20:25:26.705 00:00:10.358 TCP 23.104.0.1:33178 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:25:55.235 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 20:25:55.252 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 20:25:54.175 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:46096 10 6452 1 2025-07-30 20:26:27.110 00:00:10.364 TCP 23.104.0.1:52650 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:26:54.386 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:38964 10 6452 1 2025-07-30 20:22:03.483 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 20:27:27.514 00:00:10.362 TCP 23.104.0.1:40338 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:27:54.558 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51394 10 6452 1 2025-07-30 20:28:27.917 00:00:10.371 TCP 23.104.0.1:44138 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:28:54.775 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44120 10 6452 1 2025-07-30 20:29:28.330 00:00:10.368 TCP 23.104.0.1:58148 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:29:55.002 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:44938 10 6452 1 2025-07-30 20:30:28.737 00:00:10.369 TCP 23.104.0.1:43596 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:30:55.531 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 20:30:55.488 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 20:26:03.486 00:06:00.188 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 20:30:55.224 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51082 10 6452 1 2025-07-30 20:31:29.143 00:00:10.363 TCP 23.104.0.1:55516 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:31:55.437 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49876 10 6452 1 2025-07-30 20:32:29.541 00:00:10.364 TCP 23.104.0.1:45120 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:32:55.671 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33744 10 6452 1 2025-07-30 20:33:29.975 00:00:10.376 TCP 23.104.0.1:56210 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:33:55.891 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39564 10 6452 1 2025-07-30 20:29:03.485 00:06:00.192 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 20:34:30.386 00:00:10.423 TCP 23.104.0.1:56318 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:34:56.118 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48956 10 6452 1 2025-07-30 20:35:30.855 00:00:10.337 TCP 23.104.0.1:57284 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:35:55.407 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 20:35:55.275 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 20:35:56.333 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:48990 10 6452 1 2025-07-30 20:36:31.230 00:00:10.366 TCP 23.104.0.1:41876 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:36:56.549 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:33564 10 6452 1 2025-07-30 20:37:31.639 00:00:10.369 TCP 23.104.0.1:51764 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:33:03.488 00:06:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 20:37:56.722 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:34138 10 6452 1 2025-07-30 20:38:32.058 00:00:10.443 TCP 23.104.0.1:36764 -> 1.101.0.1:3000 15 1926 1 2025-07-30 20:38:56.891 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:50090 12 10367 1 2025-07-30 20:39:32.536 00:00:10.368 TCP 23.104.0.1:37480 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:39:57.097 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:38664 10 6452 1 2025-07-30 20:40:32.948 00:00:10.367 TCP 23.104.0.1:53542 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:40:55.364 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 20:40:55.441 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 20:36:03.486 00:06:00.197 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 20:40:57.301 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:46272 10 6452 1 2025-07-30 20:41:33.359 00:00:10.361 TCP 23.104.0.1:50214 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:41:57.514 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45648 10 6452 1 2025-07-30 20:42:33.762 00:00:10.383 TCP 23.104.0.1:54804 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:42:57.724 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:32970 10 6452 1 2025-07-30 20:43:34.189 00:00:10.358 TCP 23.104.0.1:50134 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:43:57.932 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:38284 10 6452 1 2025-07-30 20:44:34.585 00:00:10.364 TCP 23.104.0.1:51100 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:40:03.489 00:06:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 20:44:58.165 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38222 10 6452 1 2025-07-30 20:45:34.998 00:00:10.364 TCP 23.104.0.1:59320 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:45:55.400 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 20:45:55.426 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 20:45:58.385 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:56230 10 6452 1 2025-07-30 20:46:35.398 00:00:10.369 TCP 23.104.0.1:57630 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:46:58.560 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:50952 10 6452 1 2025-07-30 20:47:35.805 00:00:10.366 TCP 23.104.0.1:56420 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:43:03.488 00:06:00.198 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 20:47:58.788 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:54760 10 6452 1 2025-07-30 20:48:36.208 00:00:10.370 TCP 23.104.0.1:34286 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:48:59.006 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:57116 10 6452 1 2025-07-30 20:49:36.616 00:00:10.365 TCP 23.104.0.1:33920 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:49:59.183 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:53772 10 6452 1 2025-07-30 20:50:37.018 00:00:10.335 TCP 23.104.0.1:57434 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:50:55.621 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 20:50:55.707 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 20:50:59.353 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53268 10 6452 1 2025-07-30 20:51:37.384 00:00:10.366 TCP 23.104.0.1:52784 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:47:03.491 00:06:00.194 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 20:51:59.533 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53392 10 6452 1 2025-07-30 20:52:37.787 00:00:10.323 TCP 23.104.0.1:48400 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:52:59.712 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42056 10 6452 1 2025-07-30 20:53:38.145 00:00:10.373 TCP 23.104.0.1:43140 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:53:59.882 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:38536 10 6452 1 2025-07-30 20:54:38.560 00:00:10.366 TCP 23.104.0.1:35248 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:50:03.489 00:06:00.199 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 20:55:00.108 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:58140 10 6452 1 2025-07-30 20:55:38.965 00:00:10.403 TCP 23.104.0.1:54168 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:55:55.889 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 20:55:55.875 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 20:56:00.319 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39164 10 6452 1 2025-07-30 20:56:39.406 00:00:10.374 TCP 23.104.0.1:52726 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:57:00.538 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53726 10 6452 1 2025-07-30 20:57:39.814 00:00:10.367 TCP 23.104.0.1:39406 -> 1.101.0.1:3000 11 1507 1 2025-07-30 20:58:00.755 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53624 10 6452 1 2025-07-30 20:58:40.217 00:00:10.366 TCP 23.104.0.1:49590 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 502611, total packets: 1577, avg bps: 1034, avg pps: 0, avg bpp: 318 Time window: 2025-07-30 19:54:03 - 2025-07-30 20:58:50 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0013s User: 0.0025s Wall: 0.0016s flows/second: 102099.0 Runtime: 0.0016s