Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-31 03:58:49.019 00:00:10.204 TCP 1.101.0.1:3000 -> 22.102.0.1:54408 12 10367 1 2025-07-31 03:54:03.733 00:06:00.077 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 03:59:29.821 00:00:10.362 TCP 23.104.0.1:57368 -> 1.101.0.1:3000 11 1507 1 2025-07-31 03:59:49.259 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:34054 10 6452 1 2025-07-31 04:00:30.219 00:00:10.362 TCP 23.104.0.1:50302 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:00:49.431 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:51322 10 6452 1 2025-07-31 04:01:04.315 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 04:01:04.372 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 04:01:30.618 00:00:10.323 TCP 23.104.0.1:46830 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:01:49.642 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:55706 10 6452 1 2025-07-31 03:57:03.731 00:06:00.082 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 04:02:30.983 00:00:10.328 TCP 23.104.0.1:35942 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:02:49.853 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40264 10 6452 1 2025-07-31 04:03:31.353 00:00:10.360 TCP 23.104.0.1:43682 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:03:50.039 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43598 10 6452 1 2025-07-31 04:04:31.756 00:00:10.393 TCP 23.104.0.1:56124 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:04:50.252 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41018 10 6452 1 2025-07-31 04:05:32.179 00:00:10.322 TCP 23.104.0.1:37454 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:05:50.480 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:49036 10 6452 1 2025-07-31 04:06:04.423 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 04:01:03.735 00:06:00.076 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 04:06:04.439 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 04:06:32.541 00:00:10.337 TCP 23.104.0.1:58486 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:06:50.718 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49278 10 6452 1 2025-07-31 04:07:32.931 00:00:10.378 TCP 23.104.0.1:36600 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:07:50.931 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:41134 10 6452 1 2025-07-31 04:08:33.345 00:00:10.417 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:08:51.162 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39940 10 6452 1 2025-07-31 04:04:03.735 00:06:00.080 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 04:09:33.803 00:00:10.370 TCP 23.104.0.1:43822 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:09:51.391 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:37564 10 6452 1 2025-07-31 04:10:34.213 00:00:10.367 TCP 23.104.0.1:54528 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:10:51.571 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40226 10 6452 1 2025-07-31 04:11:04.532 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 04:11:04.593 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 04:11:34.617 00:00:10.373 TCP 23.104.0.1:34302 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:11:51.744 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:49134 10 6452 1 2025-07-31 04:12:35.021 00:00:10.370 TCP 23.104.0.1:54164 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:12:51.953 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:36154 10 6452 1 2025-07-31 04:08:03.742 00:06:00.071 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 04:13:35.428 00:00:10.366 TCP 23.104.0.1:57476 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:13:52.202 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:59628 10 6452 1 2025-07-31 04:14:35.831 00:00:10.399 TCP 23.104.0.1:45600 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:14:52.414 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56020 10 6452 1 2025-07-31 04:15:36.260 00:00:10.373 TCP 23.104.0.1:42598 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:15:52.631 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38500 10 6452 1 2025-07-31 04:16:04.643 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 04:16:04.651 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 04:11:03.739 00:06:00.080 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 04:16:36.669 00:00:10.368 TCP 23.104.0.1:55316 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:16:52.849 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43706 10 6452 1 2025-07-31 04:17:37.098 00:00:10.376 TCP 23.104.0.1:46828 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:17:53.082 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:57564 10 6452 1 2025-07-31 04:18:37.527 00:00:10.362 TCP 23.104.0.1:53682 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:18:53.267 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47394 10 6452 1 2025-07-31 04:19:37.933 00:00:10.387 TCP 23.104.0.1:41976 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:19:53.478 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51022 10 6452 1 2025-07-31 04:15:03.747 00:06:00.069 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 04:20:38.361 00:00:10.360 TCP 23.104.0.1:45562 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:21:04.537 00:00:00.034 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 04:20:53.690 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60798 10 6452 1 2025-07-31 04:21:04.432 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 04:21:38.758 00:00:10.342 TCP 23.104.0.1:44118 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:21:53.896 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43858 10 6452 1 2025-07-31 04:22:39.129 00:00:10.370 TCP 23.104.0.1:53552 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:22:54.111 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:44114 10 6452 1 2025-07-31 04:18:03.740 00:06:00.080 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 04:23:39.537 00:00:10.374 TCP 23.104.0.1:52866 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:23:54.329 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:54546 10 6452 1 2025-07-31 04:24:39.941 00:00:10.377 TCP 23.104.0.1:47088 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:24:54.560 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:33738 10 6452 1 2025-07-31 04:25:40.357 00:00:10.364 TCP 23.104.0.1:51886 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:25:54.787 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:39354 10 6452 1 2025-07-31 04:26:04.856 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 04:26:04.835 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 04:26:40.763 00:00:10.330 TCP 23.104.0.1:47720 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:26:54.969 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:36076 10 6452 1 2025-07-31 04:22:03.743 00:06:00.075 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 04:27:41.131 00:00:10.372 TCP 23.104.0.1:59806 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:27:55.198 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57588 10 6452 1 2025-07-31 04:28:41.551 00:00:10.369 TCP 23.104.0.1:53110 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:28:55.405 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:54750 10 6452 1 2025-07-31 04:29:41.960 00:00:10.367 TCP 23.104.0.1:35572 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:29:55.575 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39956 10 6452 1 2025-07-31 04:25:03.741 00:06:00.081 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 04:30:42.366 00:00:10.414 TCP 23.104.0.1:55800 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:31:04.852 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 04:31:04.894 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 04:30:55.789 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48740 10 6452 1 2025-07-31 04:31:42.817 00:00:10.364 TCP 23.104.0.1:59286 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:31:55.997 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:44762 10 6452 1 2025-07-31 04:32:43.222 00:00:10.362 TCP 23.104.0.1:35192 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:32:56.223 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:55980 10 6452 1 2025-07-31 04:33:43.620 00:00:10.364 TCP 23.104.0.1:35712 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:33:56.449 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33864 10 6452 1 2025-07-31 04:29:03.744 00:06:00.075 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 04:34:44.024 00:00:10.324 TCP 23.104.0.1:42824 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:34:56.662 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:40252 10 6452 1 2025-07-31 04:35:44.384 00:00:10.369 TCP 23.104.0.1:43034 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:36:05.065 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 04:36:05.127 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 04:35:56.834 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:56650 10 6452 1 2025-07-31 04:36:44.792 00:00:10.368 TCP 23.104.0.1:55448 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:32:03.744 00:06:00.079 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 04:36:57.067 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40946 10 6452 1 2025-07-31 04:37:45.200 00:00:10.367 TCP 23.104.0.1:59228 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:37:57.283 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:42208 10 6452 1 2025-07-31 04:38:45.601 00:00:10.366 TCP 23.104.0.1:33660 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:38:57.500 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50832 10 6452 1 2025-07-31 04:39:46.006 00:00:10.412 TCP 23.104.0.1:53756 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:39:57.668 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40404 10 6452 1 2025-07-31 04:40:46.459 00:00:10.359 TCP 23.104.0.1:45862 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:41:05.190 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 04:41:05.032 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 04:36:03.749 00:06:00.073 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 04:40:57.892 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53358 10 6452 1 2025-07-31 04:41:46.858 00:00:10.373 TCP 23.104.0.1:51250 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:41:58.115 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38342 10 6452 1 2025-07-31 04:42:47.278 00:00:10.361 TCP 23.104.0.1:37422 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:42:58.337 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:36090 10 6452 1 2025-07-31 04:43:47.682 00:00:10.370 TCP 23.104.0.1:46390 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:39:03.747 00:06:00.078 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 04:43:58.543 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35152 10 6452 1 2025-07-31 04:44:48.109 00:00:10.363 TCP 23.104.0.1:58338 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:44:58.752 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56580 10 6452 1 2025-07-31 04:45:48.515 00:00:10.361 TCP 23.104.0.1:54418 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:46:05.509 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 04:46:05.051 00:00:00.048 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 04:45:58.964 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:56430 12 6556 1 2025-07-31 04:46:48.916 00:00:10.322 TCP 23.104.0.1:50272 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:46:59.189 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36238 10 6452 1 2025-07-31 04:47:49.278 00:00:10.366 TCP 23.104.0.1:32864 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:43:03.751 00:06:00.075 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 04:47:59.402 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46728 10 6452 1 2025-07-31 04:48:49.690 00:00:10.367 TCP 23.104.0.1:57360 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:48:59.629 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55494 10 6452 1 2025-07-31 04:49:50.109 00:00:10.364 TCP 23.104.0.1:42994 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:49:59.843 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:40000 10 6452 1 2025-07-31 04:50:50.526 00:00:10.362 TCP 23.104.0.1:50372 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:51:05.494 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 04:46:03.751 00:06:00.077 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 04:51:05.516 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 04:51:00.075 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60254 10 6452 1 2025-07-31 04:51:50.934 00:00:10.399 TCP 23.104.0.1:45970 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:52:00.289 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51012 10 6452 1 2025-07-31 04:52:51.379 00:00:10.363 TCP 23.104.0.1:53872 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:53:00.508 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53046 10 6452 1 2025-07-31 04:53:51.782 00:00:10.324 TCP 23.104.0.1:58506 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:54:00.725 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:35420 10 6452 1 2025-07-31 04:54:52.145 00:00:10.326 TCP 23.104.0.1:48666 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:50:03.754 00:06:00.074 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-31 04:55:00.940 00:00:10.199 TCP 1.101.0.1:3000 -> 22.102.0.1:59794 10 6452 1 2025-07-31 04:55:52.517 00:00:10.366 TCP 23.104.0.1:42666 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:56:05.417 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-31 04:56:05.487 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-31 04:56:01.210 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33994 10 6452 1 2025-07-31 04:56:52.928 00:00:10.389 TCP 23.104.0.1:54944 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:57:01.429 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41952 10 6452 1 2025-07-31 04:57:53.357 00:00:10.362 TCP 23.104.0.1:60926 -> 1.101.0.1:3000 11 1507 1 2025-07-31 04:53:03.752 00:06:00.078 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-31 04:58:01.642 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:53080 10 6452 1 Summary: total flows: 161, total bytes: 501598, total packets: 1577, avg bps: 1028, avg pps: 0, avg bpp: 318 Time window: 2025-07-31 03:54:03 - 2025-07-31 04:59:03 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0023s User: 0.0023s Wall: 0.0026s flows/second: 61355.9 Runtime: 0.0026s