Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-22 13:59:00.066 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43232 10 6438 1 2025-07-22 13:59:02.532 00:00:10.365 TCP 23.104.0.1:46796 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:00:00.282 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60968 10 6438 1 2025-07-22 14:00:02.936 00:00:10.380 TCP 23.104.0.1:59574 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:01:00.498 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:39076 10 6438 1 2025-07-22 14:01:03.354 00:00:10.364 TCP 23.104.0.1:58864 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:01:56.424 00:00:00.030 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 14:01:56.420 00:00:00.033 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 14:02:00.709 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:41502 10 6438 1 2025-07-22 14:02:03.753 00:00:10.379 TCP 23.104.0.1:53490 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:03:00.926 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:47730 10 6438 1 2025-07-22 14:03:04.173 00:00:10.364 TCP 23.104.0.1:38102 -> 1.101.0.1:3000 11 1507 1 2025-07-22 13:58:59.466 00:06:00.179 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 13:58:59.464 00:06:00.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 14:04:01.137 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59802 10 6438 1 2025-07-22 14:04:04.577 00:00:10.367 TCP 23.104.0.1:57826 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:05:01.308 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48446 10 6438 1 2025-07-22 14:05:04.988 00:00:10.368 TCP 23.104.0.1:60630 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:06:01.517 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38532 10 6438 1 2025-07-22 14:06:05.394 00:00:10.364 TCP 23.104.0.1:52572 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:06:56.184 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 14:06:56.213 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 14:07:01.737 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:54708 10 6438 1 2025-07-22 14:07:05.794 00:00:10.362 TCP 23.104.0.1:42096 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:08:06.196 00:00:10.361 TCP 23.104.0.1:56566 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:08:01.963 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54390 10 6438 1 2025-07-22 14:09:02.188 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:58500 10 6438 1 2025-07-22 14:09:06.594 00:00:10.365 TCP 23.104.0.1:40188 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:10:02.407 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33038 10 6438 1 2025-07-22 14:10:06.999 00:00:10.363 TCP 23.104.0.1:35552 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:05:59.465 00:06:00.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 14:05:59.467 00:06:00.181 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 14:11:02.623 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60962 10 6438 1 2025-07-22 14:11:07.402 00:00:10.359 TCP 23.104.0.1:49720 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:11:56.456 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 14:11:56.669 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 14:12:02.840 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35282 10 6438 1 2025-07-22 14:12:07.801 00:00:10.370 TCP 23.104.0.1:60164 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:13:03.085 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38278 10 6438 1 2025-07-22 14:13:08.208 00:00:10.365 TCP 23.104.0.1:42560 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:14:03.300 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:33884 10 6438 1 2025-07-22 14:14:08.609 00:00:10.363 TCP 23.104.0.1:41258 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:15:03.512 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47942 10 6438 1 2025-07-22 14:15:09.011 00:00:10.363 TCP 23.104.0.1:33646 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:16:03.732 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:59706 10 6438 1 2025-07-22 14:16:09.413 00:00:10.366 TCP 23.104.0.1:51180 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:16:56.713 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 14:16:56.718 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 14:17:03.963 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32786 12 6542 1 2025-07-22 14:17:09.818 00:00:10.364 TCP 23.104.0.1:47684 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:12:59.466 00:06:00.185 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 14:12:59.469 00:06:00.180 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 14:18:04.181 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48918 10 6438 1 2025-07-22 14:18:10.216 00:00:10.360 TCP 23.104.0.1:46022 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:19:04.399 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40098 10 6438 1 2025-07-22 14:19:10.615 00:00:10.362 TCP 23.104.0.1:38048 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:20:04.578 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43718 10 6438 1 2025-07-22 14:20:11.018 00:00:10.364 TCP 23.104.0.1:60102 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:21:04.787 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44882 10 6438 1 2025-07-22 14:21:11.422 00:00:10.384 TCP 23.104.0.1:56028 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:21:56.675 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 14:21:56.608 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 14:22:05.003 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33838 10 6438 1 2025-07-22 14:22:11.849 00:00:10.336 TCP 23.104.0.1:51348 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:23:05.216 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59206 10 6438 1 2025-07-22 14:23:12.225 00:00:10.369 TCP 23.104.0.1:53158 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:24:05.428 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:33116 10 6438 1 2025-07-22 14:24:12.627 00:00:10.364 TCP 23.104.0.1:33330 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:19:59.472 00:06:00.179 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 14:19:59.470 00:06:00.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 14:25:05.648 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45936 10 6438 1 2025-07-22 14:25:13.031 00:00:10.366 TCP 23.104.0.1:32770 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:26:05.857 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:42100 10 6438 1 2025-07-22 14:26:13.433 00:00:10.368 TCP 23.104.0.1:60462 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:26:56.851 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 14:26:56.995 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 14:27:06.088 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:39062 10 6438 1 2025-07-22 14:27:13.837 00:00:10.345 TCP 23.104.0.1:53838 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:28:06.299 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:42170 10 6438 1 2025-07-22 14:28:14.222 00:00:10.361 TCP 23.104.0.1:34272 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:29:06.465 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40508 10 6438 1 2025-07-22 14:29:14.625 00:00:10.367 TCP 23.104.0.1:57500 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:30:06.676 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:45854 10 6438 1 2025-07-22 14:30:15.029 00:00:10.322 TCP 23.104.0.1:57412 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:31:06.889 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46500 10 6438 1 2025-07-22 14:31:15.395 00:00:10.365 TCP 23.104.0.1:34078 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:31:57.551 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 14:26:59.478 00:06:00.176 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 14:31:57.722 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 14:26:59.475 00:06:00.181 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 14:32:07.111 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:56004 10 6438 1 2025-07-22 14:32:15.796 00:00:10.381 TCP 23.104.0.1:36116 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:33:07.330 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:46006 12 10350 1 2025-07-22 14:33:16.215 00:00:10.440 TCP 23.104.0.1:59150 -> 1.101.0.1:3000 15 1925 1 2025-07-22 14:34:07.575 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53444 10 6438 1 2025-07-22 14:34:16.692 00:00:10.372 TCP 23.104.0.1:42720 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:35:07.787 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:59248 10 6438 1 2025-07-22 14:35:17.228 00:00:10.363 TCP 23.104.0.1:39848 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:36:07.993 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:39096 10 6438 1 2025-07-22 14:36:17.631 00:00:10.362 TCP 23.104.0.1:48782 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:36:57.165 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 14:36:57.099 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 14:37:08.220 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:44124 10 6438 1 2025-07-22 14:37:18.033 00:00:10.366 TCP 23.104.0.1:49064 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:38:08.430 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49818 11 6478 1 2025-07-22 14:38:18.429 00:00:10.361 TCP 23.104.0.1:36296 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:33:59.476 00:06:00.184 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 14:33:59.478 00:06:00.178 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 14:39:08.649 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46098 10 6438 1 2025-07-22 14:39:18.833 00:00:10.347 TCP 23.104.0.1:56456 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:40:08.820 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:44768 10 6438 1 2025-07-22 14:40:19.222 00:00:10.337 TCP 23.104.0.1:34862 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:41:09.030 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:58470 10 6438 1 2025-07-22 14:41:19.599 00:00:10.361 TCP 23.104.0.1:50958 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:41:57.095 00:00:00.044 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 14:41:57.164 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 14:42:09.216 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:59414 10 6438 1 2025-07-22 14:42:19.999 00:00:10.334 TCP 23.104.0.1:47182 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:43:09.395 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49508 10 6438 1 2025-07-22 14:43:20.373 00:00:10.364 TCP 23.104.0.1:50976 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:44:09.605 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57116 10 6438 1 2025-07-22 14:44:20.777 00:00:10.368 TCP 23.104.0.1:38016 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:45:09.825 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52756 10 6438 1 2025-07-22 14:45:21.180 00:00:10.365 TCP 23.104.0.1:50654 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:40:59.482 00:06:00.178 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 14:40:59.479 00:06:00.183 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 14:46:10.077 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43050 10 6438 1 2025-07-22 14:46:21.583 00:00:10.364 TCP 23.104.0.1:34476 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:46:57.463 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 14:46:57.252 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 14:47:10.292 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:48088 10 6438 1 2025-07-22 14:47:21.985 00:00:10.365 TCP 23.104.0.1:45794 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:48:10.502 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:55064 10 6438 1 2025-07-22 14:48:22.391 00:00:10.327 TCP 23.104.0.1:55890 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:49:10.672 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38806 10 6438 1 2025-07-22 14:49:22.747 00:00:10.360 TCP 23.104.0.1:53864 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:50:10.843 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41774 10 6438 1 2025-07-22 14:50:23.155 00:00:10.364 TCP 23.104.0.1:41054 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:51:11.070 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53918 10 6438 1 2025-07-22 14:51:23.555 00:00:10.368 TCP 23.104.0.1:48884 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:51:57.126 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 14:51:57.499 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 14:52:11.282 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36390 10 6438 1 2025-07-22 14:52:23.965 00:00:10.370 TCP 23.104.0.1:35428 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:47:59.483 00:06:00.182 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-22 14:47:59.481 00:06:00.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-22 14:53:11.495 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:52440 10 6438 1 2025-07-22 14:53:24.369 00:00:10.355 TCP 23.104.0.1:39158 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:54:11.723 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48466 10 6438 1 2025-07-22 14:54:24.765 00:00:10.336 TCP 23.104.0.1:41332 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:55:11.930 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:51640 10 6438 1 2025-07-22 14:55:25.137 00:00:10.365 TCP 23.104.0.1:56756 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:56:12.163 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47766 10 6438 1 2025-07-22 14:56:25.540 00:00:10.364 TCP 23.104.0.1:45688 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:56:57.568 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-22 14:56:57.673 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-22 14:57:12.376 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33790 10 6438 1 2025-07-22 14:57:25.943 00:00:10.376 TCP 23.104.0.1:36758 -> 1.101.0.1:3000 11 1507 1 2025-07-22 14:58:12.588 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33452 10 6438 1 2025-07-22 14:58:26.372 00:00:10.365 TCP 23.104.0.1:51260 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 160, total bytes: 500998, total packets: 1565, avg bps: 1120, avg pps: 0, avg bpp: 320 Time window: 2025-07-22 13:58:59 - 2025-07-22 14:58:36 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0028s User: 0.0019s Wall: 0.0024s flows/second: 67910.2 Runtime: 0.0024s