Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-24 03:59:01.328 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:38210 10 6438 1 2025-07-24 03:59:20.136 00:00:10.365 TCP 23.104.0.1:39484 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:00:01.506 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6438 1 2025-07-24 04:00:20.541 00:00:10.362 TCP 23.104.0.1:57594 -> 1.101.0.1:3000 11 1507 1 2025-07-24 03:56:00.221 00:06:00.140 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 04:01:01.688 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:33506 10 6438 1 2025-07-24 04:01:20.940 00:00:10.368 TCP 23.104.0.1:50236 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:02:01.902 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:45168 10 6438 1 2025-07-24 04:02:21.350 00:00:10.365 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:02:42.174 00:00:00.028 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 04:02:42.344 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 03:58:00.219 00:06:00.144 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 04:03:02.133 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38620 10 6438 1 2025-07-24 04:03:21.757 00:00:10.375 TCP 23.104.0.1:42794 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:04:02.348 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47220 10 6438 1 2025-07-24 04:04:22.172 00:00:10.367 TCP 23.104.0.1:33164 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:05:02.560 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:40678 10 6438 1 2025-07-24 04:05:22.576 00:00:10.325 TCP 23.104.0.1:53744 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:06:02.773 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52178 10 6438 1 2025-07-24 04:06:22.942 00:00:10.336 TCP 23.104.0.1:44620 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:07:02.990 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:58138 10 6438 1 2025-07-24 04:07:23.317 00:00:10.363 TCP 23.104.0.1:38878 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:07:42.349 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 04:07:42.327 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 04:03:00.222 00:06:00.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 04:08:03.218 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:40898 10 6438 1 2025-07-24 04:08:23.721 00:00:10.371 TCP 23.104.0.1:51588 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:09:03.426 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53592 10 6438 1 2025-07-24 04:09:24.137 00:00:10.365 TCP 23.104.0.1:52718 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:05:00.219 00:06:00.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 04:10:03.643 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48622 10 6438 1 2025-07-24 04:10:24.540 00:00:10.367 TCP 23.104.0.1:43300 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:11:03.814 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:45832 10 6438 1 2025-07-24 04:11:24.939 00:00:10.373 TCP 23.104.0.1:50746 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:12:04.050 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:53586 10 6438 1 2025-07-24 04:12:25.355 00:00:10.364 TCP 23.104.0.1:57108 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:12:42.527 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 04:12:42.300 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 04:13:04.272 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:58248 10 6438 1 2025-07-24 04:13:25.763 00:00:10.370 TCP 23.104.0.1:47706 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:14:04.507 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60962 10 6438 1 2025-07-24 04:14:26.181 00:00:10.364 TCP 23.104.0.1:53524 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:10:00.223 00:06:00.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 04:15:04.717 00:00:10.238 TCP 1.101.0.1:3000 -> 22.102.0.1:41770 10 6438 1 2025-07-24 04:15:26.576 00:00:10.369 TCP 23.104.0.1:46066 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:16:04.997 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:52302 10 6438 1 2025-07-24 04:16:26.985 00:00:10.369 TCP 23.104.0.1:43582 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:12:00.221 00:06:00.148 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 04:17:05.222 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44828 10 6438 1 2025-07-24 04:17:27.394 00:00:10.360 TCP 23.104.0.1:56544 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:17:42.139 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 04:17:42.537 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 04:18:05.434 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47362 10 6438 1 2025-07-24 04:18:27.793 00:00:10.353 TCP 23.104.0.1:42658 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:19:05.650 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:37474 10 6438 1 2025-07-24 04:19:28.183 00:00:10.380 TCP 23.104.0.1:38166 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:20:05.852 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:55572 10 6438 1 2025-07-24 04:20:28.602 00:00:10.369 TCP 23.104.0.1:44944 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:21:06.079 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37924 10 6438 1 2025-07-24 04:21:29.015 00:00:10.358 TCP 23.104.0.1:33242 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:17:00.225 00:06:00.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 04:22:06.249 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:43680 10 6438 1 2025-07-24 04:22:42.611 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 04:22:29.414 00:00:10.361 TCP 23.104.0.1:44320 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:22:42.614 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 04:23:06.432 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45994 10 6438 1 2025-07-24 04:23:29.817 00:00:10.366 TCP 23.104.0.1:40416 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:19:00.223 00:06:00.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 04:24:06.602 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49476 10 6438 1 2025-07-24 04:24:30.226 00:00:10.319 TCP 23.104.0.1:60408 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:25:06.813 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57282 10 6438 1 2025-07-24 04:25:30.585 00:00:10.365 TCP 23.104.0.1:44702 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:26:07.031 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36816 10 6438 1 2025-07-24 04:26:30.995 00:00:10.361 TCP 23.104.0.1:51236 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:27:07.244 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60796 10 6438 1 2025-07-24 04:27:42.655 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 04:27:31.397 00:00:10.364 TCP 23.104.0.1:57534 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:27:42.491 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 04:28:07.452 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36968 10 6438 1 2025-07-24 04:28:31.802 00:00:10.364 TCP 23.104.0.1:58074 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:24:00.227 00:06:00.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 04:29:07.669 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:46314 10 6438 1 2025-07-24 04:29:32.209 00:00:10.364 TCP 23.104.0.1:57468 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:30:07.860 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:58286 10 6438 1 2025-07-24 04:30:32.616 00:00:10.329 TCP 23.104.0.1:56780 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:26:00.225 00:06:00.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 04:31:08.084 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48234 10 6438 1 2025-07-24 04:31:32.984 00:00:10.366 TCP 23.104.0.1:42688 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:32:08.300 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:43992 10 6438 1 2025-07-24 04:32:43.242 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 04:32:43.027 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 04:32:33.392 00:00:10.369 TCP 23.104.0.1:35646 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:33:08.515 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42832 10 6438 1 2025-07-24 04:33:33.806 00:00:10.375 TCP 23.104.0.1:41710 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:34:08.734 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:37170 10 6438 1 2025-07-24 04:34:34.216 00:00:10.371 TCP 23.104.0.1:45972 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:35:08.952 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:45158 10 6438 1 2025-07-24 04:35:34.621 00:00:10.368 TCP 23.104.0.1:33316 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:31:00.227 00:06:00.141 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 04:36:09.144 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:43180 10 6438 1 2025-07-24 04:36:35.031 00:00:10.369 TCP 23.104.0.1:42116 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:37:09.359 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:51828 10 6438 1 2025-07-24 04:37:42.629 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 04:37:35.439 00:00:10.362 TCP 23.104.0.1:60836 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:37:42.809 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 04:33:00.227 00:06:00.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 04:38:09.526 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60396 10 6438 1 2025-07-24 04:38:35.835 00:00:10.343 TCP 23.104.0.1:38104 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:39:09.739 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38470 10 6438 1 2025-07-24 04:39:36.217 00:00:10.368 TCP 23.104.0.1:47052 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:40:09.946 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:35734 10 6438 1 2025-07-24 04:40:36.622 00:00:10.365 TCP 23.104.0.1:58730 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:41:10.172 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:39308 10 6438 1 2025-07-24 04:41:37.024 00:00:10.362 TCP 23.104.0.1:55708 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:42:10.351 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:46860 10 6438 1 2025-07-24 04:42:42.881 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 04:42:43.008 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 04:42:37.429 00:00:10.368 TCP 23.104.0.1:51440 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:38:00.230 00:06:00.142 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 04:43:10.578 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47436 10 6438 1 2025-07-24 04:43:37.831 00:00:10.400 TCP 23.104.0.1:53244 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:44:10.795 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50398 10 6438 1 2025-07-24 04:44:38.277 00:00:10.367 TCP 23.104.0.1:49692 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:40:00.228 00:06:00.146 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 04:45:11.008 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:33208 10 6438 1 2025-07-24 04:45:38.686 00:00:10.366 TCP 23.104.0.1:35956 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:46:11.185 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47020 10 6438 1 2025-07-24 04:46:39.102 00:00:10.367 TCP 23.104.0.1:36960 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:47:11.406 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:32986 10 6438 1 2025-07-24 04:47:42.902 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 04:47:43.062 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 04:47:39.510 00:00:10.372 TCP 23.104.0.1:50474 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:48:11.627 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55312 10 6438 1 2025-07-24 04:48:39.924 00:00:10.370 TCP 23.104.0.1:60976 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:49:11.804 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33352 10 6438 1 2025-07-24 04:49:40.331 00:00:10.366 TCP 23.104.0.1:37704 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:45:00.232 00:06:00.143 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 04:50:12.038 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36654 10 6438 1 2025-07-24 04:50:40.736 00:00:10.368 TCP 23.104.0.1:60336 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:51:12.248 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42362 10 6438 1 2025-07-24 04:51:41.141 00:00:10.362 TCP 23.104.0.1:34514 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:47:00.231 00:06:00.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 04:52:12.460 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:54552 10 6438 1 2025-07-24 04:52:43.040 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 04:52:43.216 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 04:52:41.537 00:00:10.323 TCP 23.104.0.1:44020 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:53:12.668 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:35440 10 6438 1 2025-07-24 04:53:41.901 00:00:10.375 TCP 23.104.0.1:54618 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:54:12.885 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:59576 10 6438 1 2025-07-24 04:54:42.316 00:00:10.363 TCP 23.104.0.1:49104 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:55:13.113 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:54502 10 6438 1 2025-07-24 04:55:42.719 00:00:10.329 TCP 23.104.0.1:54772 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:56:13.328 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:50620 10 6438 1 2025-07-24 04:56:43.099 00:00:10.371 TCP 23.104.0.1:52684 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:52:00.234 00:06:00.144 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 04:57:13.501 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34232 10 6438 1 2025-07-24 04:57:43.016 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 04:57:43.397 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 04:57:43.511 00:00:10.368 TCP 23.104.0.1:51280 -> 1.101.0.1:3000 11 1507 1 2025-07-24 04:58:13.712 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36574 10 6438 1 Summary: total flows: 160, total bytes: 495878, total packets: 1559, avg bps: 1059, avg pps: 0, avg bpp: 318 Time window: 2025-07-24 03:56:00 - 2025-07-24 04:58:23 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0020s User: 0.0020s Wall: 0.0018s flows/second: 90345.8 Runtime: 0.0018s