Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-30 22:58:42.214 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59602 10 6452 1 2025-07-30 22:59:28.682 00:00:10.370 TCP 23.104.0.1:40548 -> 1.101.0.1:3000 11 1507 1 2025-07-30 22:59:42.430 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:45572 10 6452 1 2025-07-30 23:00:29.109 00:00:10.360 TCP 23.104.0.1:57222 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:00:42.611 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45632 10 6452 1 2025-07-30 23:00:58.086 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 23:00:58.237 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 22:56:03.567 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 23:01:29.506 00:00:10.363 TCP 23.104.0.1:36048 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:01:42.826 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46698 10 6452 1 2025-07-30 23:02:29.909 00:00:10.363 TCP 23.104.0.1:34486 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:02:43.088 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33898 10 6452 1 2025-07-30 23:03:30.313 00:00:10.360 TCP 23.104.0.1:43666 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:03:43.270 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:32972 10 6452 1 2025-07-30 23:04:30.714 00:00:10.383 TCP 23.104.0.1:55812 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:04:43.446 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47834 10 6452 1 2025-07-30 23:00:03.570 00:06:00.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 23:05:31.139 00:00:10.366 TCP 23.104.0.1:51140 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:05:43.656 00:00:13.164 TCP 1.101.0.1:3000 -> 22.102.0.1:50204 10 6452 1 2025-07-30 23:05:58.131 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 23:05:58.289 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 23:06:31.548 00:00:10.323 TCP 23.104.0.1:50022 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:06:46.873 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:55762 10 6452 1 2025-07-30 23:07:31.914 00:00:10.366 TCP 23.104.0.1:37024 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:07:47.101 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:53088 10 6452 1 2025-07-30 23:03:03.569 00:06:00.166 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 23:08:32.316 00:00:10.380 TCP 23.104.0.1:47564 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:08:47.324 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:58718 10 6452 1 2025-07-30 23:09:32.735 00:00:10.373 TCP 23.104.0.1:37096 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:09:47.545 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:38412 10 6452 1 2025-07-30 23:10:33.144 00:00:10.367 TCP 23.104.0.1:52442 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:10:47.726 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55098 10 6452 1 2025-07-30 23:10:58.376 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 23:10:58.477 00:00:00.017 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 23:11:33.552 00:00:10.365 TCP 23.104.0.1:50410 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:11:47.937 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56962 10 6452 1 2025-07-30 23:07:03.573 00:06:00.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 23:12:33.956 00:00:10.370 TCP 23.104.0.1:43936 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:12:48.149 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57602 10 6452 1 2025-07-30 23:13:34.377 00:00:10.362 TCP 23.104.0.1:50224 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:13:48.366 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43366 10 6452 1 2025-07-30 23:14:34.781 00:00:10.363 TCP 23.104.0.1:40664 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:14:48.537 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:49486 10 6452 1 2025-07-30 23:10:03.570 00:06:00.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 23:15:35.182 00:00:10.362 TCP 23.104.0.1:32844 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:15:58.426 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 23:15:48.758 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42670 10 6452 1 2025-07-30 23:15:58.648 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 23:16:35.588 00:00:10.368 TCP 23.104.0.1:44002 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:16:48.972 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:56596 10 6452 1 2025-07-30 23:17:35.997 00:00:10.361 TCP 23.104.0.1:46756 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:17:49.213 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60332 10 6452 1 2025-07-30 23:18:36.397 00:00:10.366 TCP 23.104.0.1:50554 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:18:49.425 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45324 10 6452 1 2025-07-30 23:14:03.575 00:06:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 23:19:36.807 00:00:10.367 TCP 23.104.0.1:44254 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:19:49.642 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:43580 10 6452 1 2025-07-30 23:20:37.217 00:00:10.362 TCP 23.104.0.1:49950 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:20:58.726 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 23:20:58.611 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 23:20:49.866 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58324 10 6452 1 2025-07-30 23:21:37.617 00:00:10.360 TCP 23.104.0.1:54008 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:21:50.085 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58930 10 6452 1 2025-07-30 23:17:03.573 00:06:00.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 23:22:38.021 00:00:10.326 TCP 23.104.0.1:49646 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:22:50.295 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:49742 10 6452 1 2025-07-30 23:23:38.391 00:00:10.450 TCP 23.104.0.1:42744 -> 1.101.0.1:3000 15 1926 1 2025-07-30 23:23:50.506 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:34480 12 10367 1 2025-07-30 23:24:38.878 00:00:10.388 TCP 23.104.0.1:40486 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:24:50.761 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43682 10 6452 1 2025-07-30 23:25:39.303 00:00:10.362 TCP 23.104.0.1:58214 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:25:58.776 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 23:25:50.975 00:00:10.157 TCP 1.101.0.1:3000 -> 22.102.0.1:58702 10 6452 1 2025-07-30 23:25:58.709 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 23:21:03.576 00:06:00.161 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 23:26:39.702 00:00:10.363 TCP 23.104.0.1:44648 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:26:51.179 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:48286 10 6452 1 2025-07-30 23:27:40.112 00:00:10.372 TCP 23.104.0.1:35668 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:27:51.359 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48906 10 6452 1 2025-07-30 23:28:40.527 00:00:10.365 TCP 23.104.0.1:48862 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:28:51.575 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:42544 10 6452 1 2025-07-30 23:24:03.575 00:06:00.167 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 23:29:40.927 00:00:10.381 TCP 23.104.0.1:42738 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:29:51.805 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43172 10 6452 1 2025-07-30 23:30:41.343 00:00:10.362 TCP 23.104.0.1:51270 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:30:58.968 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 23:30:59.006 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 23:30:52.035 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57220 10 6452 1 2025-07-30 23:31:41.742 00:00:10.366 TCP 23.104.0.1:54832 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:31:52.252 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:33790 10 6452 1 2025-07-30 23:32:42.143 00:00:10.367 TCP 23.104.0.1:34788 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:32:52.421 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36996 10 6452 1 2025-07-30 23:28:03.579 00:06:00.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 23:33:42.547 00:00:10.359 TCP 23.104.0.1:55352 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:33:52.593 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:49436 10 6452 1 2025-07-30 23:34:42.950 00:00:10.338 TCP 23.104.0.1:33970 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:34:52.812 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:53836 10 6452 1 2025-07-30 23:35:43.326 00:00:10.366 TCP 23.104.0.1:34186 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:35:58.952 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 23:35:59.060 00:00:00.038 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 23:35:52.986 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58544 10 6452 1 2025-07-30 23:31:03.576 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 23:36:43.738 00:00:10.326 TCP 23.104.0.1:35464 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:36:53.209 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37682 10 6452 1 2025-07-30 23:37:44.107 00:00:10.368 TCP 23.104.0.1:45918 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:37:53.430 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36068 10 6452 1 2025-07-30 23:38:44.513 00:00:10.364 TCP 23.104.0.1:57674 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:38:53.639 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:41534 10 6452 1 2025-07-30 23:39:44.920 00:00:10.389 TCP 23.104.0.1:40514 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:39:53.846 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:49562 10 6452 1 2025-07-30 23:35:03.579 00:06:00.162 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 23:40:45.347 00:00:10.363 TCP 23.104.0.1:45616 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:40:59.078 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 23:40:59.114 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 23:40:54.089 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60588 10 6452 1 2025-07-30 23:41:45.748 00:00:10.324 TCP 23.104.0.1:57118 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:41:54.299 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:54038 10 6452 1 2025-07-30 23:42:46.117 00:00:10.365 TCP 23.104.0.1:40808 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:42:54.476 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37402 10 6452 1 2025-07-30 23:38:03.578 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 23:43:46.516 00:00:10.447 TCP 23.104.0.1:34574 -> 1.101.0.1:3000 15 1926 1 2025-07-30 23:43:54.690 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:60562 12 10365 1 2025-07-30 23:44:47.019 00:00:10.363 TCP 23.104.0.1:45262 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:44:54.935 00:00:10.212 TCP 1.101.0.1:3000 -> 22.102.0.1:60968 10 6452 1 2025-07-30 23:45:47.424 00:00:10.366 TCP 23.104.0.1:49896 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:45:59.186 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 23:45:59.200 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 23:45:55.182 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44894 10 6452 1 2025-07-30 23:46:47.833 00:00:10.381 TCP 23.104.0.1:58696 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:46:55.395 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50450 10 6452 1 2025-07-30 23:42:03.581 00:06:00.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 23:47:48.253 00:00:10.369 TCP 23.104.0.1:42284 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:47:55.613 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:59390 10 6452 1 2025-07-30 23:48:48.660 00:00:10.325 TCP 23.104.0.1:52844 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:48:55.831 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38006 10 6452 1 2025-07-30 23:49:49.024 00:00:10.364 TCP 23.104.0.1:48710 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:45:03.580 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 23:49:56.072 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54916 10 6452 1 2025-07-30 23:50:59.309 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 23:50:49.426 00:00:10.323 TCP 23.104.0.1:49920 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:50:59.235 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 23:50:56.286 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53868 10 6452 1 2025-07-30 23:51:49.786 00:00:10.324 TCP 23.104.0.1:38782 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:51:56.463 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52694 10 6452 1 2025-07-30 23:52:50.152 00:00:10.361 TCP 23.104.0.1:35198 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:52:56.685 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40948 10 6452 1 2025-07-30 23:53:50.554 00:00:10.328 TCP 23.104.0.1:42044 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:49:03.585 00:06:00.160 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-30 23:53:56.903 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49430 10 6452 1 2025-07-30 23:54:50.931 00:00:10.381 TCP 23.104.0.1:33002 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:54:57.123 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36572 10 6452 1 2025-07-30 23:55:59.298 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-30 23:55:51.353 00:00:10.363 TCP 23.104.0.1:40634 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:55:59.192 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-30 23:55:57.292 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:41600 10 6452 1 2025-07-30 23:56:51.757 00:00:10.382 TCP 23.104.0.1:52498 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:52:03.582 00:06:00.165 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-30 23:56:57.465 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59984 10 6452 1 2025-07-30 23:57:52.179 00:00:10.365 TCP 23.104.0.1:60800 -> 1.101.0.1:3000 11 1507 1 2025-07-30 23:57:57.680 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52372 10 6452 1 Summary: total flows: 160, total bytes: 505384, total packets: 1571, avg bps: 1085, avg pps: 0, avg bpp: 321 Time window: 2025-07-30 22:56:03 - 2025-07-30 23:58:07 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0042s User: 0.0000s Wall: 0.0030s flows/second: 52895.8 Runtime: 0.0030s