Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-17 12:59:13.896 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55638 10 6438 1 2025-07-17 12:59:30.583 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 12:59:30.546 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 12:59:21.396 00:00:10.334 TCP 23.104.0.1:38754 -> 1.101.0.1:3000 11 1507 1 2025-07-17 12:54:57.032 00:06:00.002 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 13:00:14.110 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41712 10 6438 1 2025-07-17 13:00:21.784 00:00:10.377 TCP 23.104.0.1:60108 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:01:14.321 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:40044 10 6438 1 2025-07-17 13:01:22.195 00:00:10.338 TCP 23.104.0.1:41666 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:02:14.531 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:36314 10 6438 1 2025-07-17 13:02:22.569 00:00:10.376 TCP 23.104.0.1:45930 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:03:14.703 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:52110 10 6438 1 2025-07-17 13:03:22.988 00:00:10.368 TCP 23.104.0.1:59074 -> 1.101.0.1:3000 11 1507 1 2025-07-17 12:58:57.025 00:06:00.013 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 13:04:14.921 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59194 10 6438 1 2025-07-17 13:04:30.815 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 13:04:30.823 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 13:04:23.396 00:00:10.364 TCP 23.104.0.1:42150 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:05:15.133 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39708 10 6438 1 2025-07-17 13:05:23.803 00:00:10.367 TCP 23.104.0.1:40688 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:06:15.345 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59844 10 6438 1 2025-07-17 13:06:24.204 00:00:10.367 TCP 23.104.0.1:60420 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:01:57.036 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 13:07:15.558 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60838 10 6438 1 2025-07-17 13:07:24.608 00:00:10.327 TCP 23.104.0.1:37064 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:08:15.775 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50456 10 6438 1 2025-07-17 13:08:24.971 00:00:10.374 TCP 23.104.0.1:44112 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:09:30.738 00:00:00.026 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 13:09:15.996 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:45838 10 6438 1 2025-07-17 13:09:30.736 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 13:09:25.380 00:00:10.364 TCP 23.104.0.1:43584 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:10:16.223 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60906 10 6438 1 2025-07-17 13:10:25.783 00:00:10.366 TCP 23.104.0.1:60376 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:05:57.032 00:06:00.008 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 13:11:16.435 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:59590 10 6438 1 2025-07-17 13:11:26.186 00:00:10.326 TCP 23.104.0.1:53300 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:12:16.609 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40082 10 6438 1 2025-07-17 13:12:26.547 00:00:10.324 TCP 23.104.0.1:52030 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:13:16.826 00:00:10.158 TCP 1.101.0.1:3000 -> 22.102.0.1:58422 12 10350 1 2025-07-17 13:13:26.914 00:00:10.446 TCP 23.104.0.1:52726 -> 1.101.0.1:3000 15 1925 1 2025-07-17 13:08:57.037 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 9 601 1 2025-07-17 13:14:31.046 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 13:14:17.028 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:56402 10 6438 1 2025-07-17 13:14:31.040 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 13:14:27.396 00:00:10.365 TCP 23.104.0.1:34222 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:15:17.200 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:48444 10 6438 1 2025-07-17 13:15:27.799 00:00:10.384 TCP 23.104.0.1:46594 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:16:17.424 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43998 10 6438 1 2025-07-17 13:16:28.222 00:00:10.365 TCP 23.104.0.1:48564 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:17:17.639 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49080 12 6542 1 2025-07-17 13:17:28.625 00:00:10.325 TCP 23.104.0.1:35314 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:12:57.035 00:06:00.015 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 13:18:17.849 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60096 10 6438 1 2025-07-17 13:18:28.990 00:00:10.366 TCP 23.104.0.1:55274 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:19:18.082 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53500 10 6438 1 2025-07-17 13:19:31.050 00:00:00.045 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 13:19:31.265 00:00:00.032 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 13:19:29.395 00:00:10.371 TCP 23.104.0.1:47988 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:20:18.300 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49486 10 6438 1 2025-07-17 13:20:29.804 00:00:10.377 TCP 23.104.0.1:36020 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:15:57.039 00:06:00.009 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 13:21:18.515 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52192 10 6438 1 2025-07-17 13:21:30.223 00:00:10.325 TCP 23.104.0.1:58654 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:22:18.735 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38004 10 6438 1 2025-07-17 13:22:30.589 00:00:10.364 TCP 23.104.0.1:39084 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:23:18.947 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:48826 10 6438 1 2025-07-17 13:23:30.996 00:00:10.364 TCP 23.104.0.1:42686 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:24:31.170 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 13:24:19.172 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:51882 10 6438 1 2025-07-17 13:24:30.944 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 13:24:31.398 00:00:10.368 TCP 23.104.0.1:49954 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:19:57.038 00:06:00.015 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 13:25:19.382 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:57144 10 6438 1 2025-07-17 13:25:31.808 00:00:10.367 TCP 23.104.0.1:41842 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:26:19.592 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59762 10 6438 1 2025-07-17 13:26:32.213 00:00:10.369 TCP 23.104.0.1:50796 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:27:19.808 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59392 10 6438 1 2025-07-17 13:27:32.620 00:00:10.371 TCP 23.104.0.1:49016 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:22:57.050 00:06:00.000 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 13:28:19.986 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:58106 10 6438 1 2025-07-17 13:28:33.033 00:00:10.372 TCP 23.104.0.1:44084 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:29:20.208 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:56570 10 6438 1 2025-07-17 13:29:31.409 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 13:29:31.391 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 13:29:33.444 00:00:10.359 TCP 23.104.0.1:47642 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:30:20.377 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40248 10 6438 1 2025-07-17 13:30:33.841 00:00:10.386 TCP 23.104.0.1:59228 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:31:20.588 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:35534 10 6438 1 2025-07-17 13:31:34.263 00:00:10.366 TCP 23.104.0.1:38072 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:26:57.040 00:06:00.014 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 13:32:20.801 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:32834 10 6438 1 2025-07-17 13:32:34.668 00:00:10.324 TCP 23.104.0.1:52144 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:33:21.024 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51682 10 6438 1 2025-07-17 13:33:35.033 00:00:10.367 TCP 23.104.0.1:59026 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:34:31.505 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 13:34:31.479 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 13:34:21.237 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34664 10 6438 1 2025-07-17 13:34:35.436 00:00:10.330 TCP 23.104.0.1:54998 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:29:57.050 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 13:35:21.447 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:58774 10 6438 1 2025-07-17 13:35:35.799 00:00:10.369 TCP 23.104.0.1:51426 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:36:21.668 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:37182 10 6438 1 2025-07-17 13:36:36.204 00:00:10.379 TCP 23.104.0.1:51890 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:37:21.880 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:50154 10 6438 1 2025-07-17 13:37:36.605 00:00:10.367 TCP 23.104.0.1:59834 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:38:22.102 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:54054 10 6438 1 2025-07-17 13:38:37.018 00:00:10.366 TCP 23.104.0.1:37686 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:33:57.041 00:06:00.016 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 13:39:31.463 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 13:39:31.208 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 13:39:22.301 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34272 10 6438 1 2025-07-17 13:39:37.425 00:00:10.363 TCP 23.104.0.1:47442 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:40:22.521 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35906 12 6542 1 2025-07-17 13:40:37.827 00:00:10.365 TCP 23.104.0.1:48020 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:41:22.732 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60898 10 6438 1 2025-07-17 13:41:38.226 00:00:10.363 TCP 23.104.0.1:45954 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:36:57.052 00:06:00.003 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 13:42:22.943 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:52218 10 6438 1 2025-07-17 13:42:38.631 00:00:10.378 TCP 23.104.0.1:33062 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:43:23.170 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55604 10 6438 1 2025-07-17 13:43:39.054 00:00:10.363 TCP 23.104.0.1:48252 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:44:31.772 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 13:44:31.539 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 13:44:23.387 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:55996 10 6438 1 2025-07-17 13:44:39.455 00:00:10.373 TCP 23.104.0.1:38056 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:45:23.564 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52244 10 6438 1 2025-07-17 13:45:39.865 00:00:10.368 TCP 23.104.0.1:44744 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:40:57.043 00:06:00.016 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 13:46:23.782 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55376 10 6438 1 2025-07-17 13:46:40.275 00:00:10.366 TCP 23.104.0.1:33186 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:47:23.998 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:45106 10 6438 1 2025-07-17 13:47:40.678 00:00:10.372 TCP 23.104.0.1:36496 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:48:24.216 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34706 10 6438 1 2025-07-17 13:48:41.109 00:00:10.358 TCP 23.104.0.1:59620 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:43:57.056 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 13:49:24.426 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59718 10 6438 1 2025-07-17 13:49:32.174 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 13:49:31.980 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 13:49:41.504 00:00:10.364 TCP 23.104.0.1:59616 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:50:24.640 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38854 10 6438 1 2025-07-17 13:50:41.909 00:00:10.381 TCP 23.104.0.1:58318 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:51:24.854 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50344 10 6438 1 2025-07-17 13:51:42.328 00:00:10.357 TCP 23.104.0.1:52002 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:52:25.081 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:52678 10 6438 1 2025-07-17 13:52:42.726 00:00:10.373 TCP 23.104.0.1:60050 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:47:57.043 00:06:00.017 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-17 13:53:25.290 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51988 10 6438 1 2025-07-17 13:53:43.136 00:00:10.365 TCP 23.104.0.1:55954 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:54:31.801 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-17 13:54:31.893 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-17 13:54:25.505 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:34994 10 6438 1 2025-07-17 13:54:43.544 00:00:10.362 TCP 23.104.0.1:56428 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:55:25.712 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56992 10 6438 1 2025-07-17 13:55:43.945 00:00:10.373 TCP 23.104.0.1:50902 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:50:57.056 00:06:00.001 TCP 179.1.22.1:179 -> 179.1.22.22:39396 7 497 1 2025-07-17 13:56:25.927 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:46292 10 6438 1 2025-07-17 13:56:44.363 00:00:10.368 TCP 23.104.0.1:49128 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:57:26.164 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46416 10 6438 1 2025-07-17 13:57:44.769 00:00:10.369 TCP 23.104.0.1:36624 -> 1.101.0.1:3000 11 1507 1 2025-07-17 13:58:26.385 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52228 10 6438 1 Summary: total flows: 160, total bytes: 497244, total packets: 1508, avg bps: 1041, avg pps: 0, avg bpp: 329 Time window: 2025-07-17 12:54:57 - 2025-07-17 13:58:36 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0040s User: 0.0000s Wall: 0.0023s flows/second: 69177.3 Runtime: 0.0023s