Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-24 13:59:09.706 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50846 10 6438 1 2025-07-24 13:59:21.880 00:00:10.383 TCP 23.104.0.1:47442 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:00:09.925 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:36442 10 6438 1 2025-07-24 14:00:22.303 00:00:10.365 TCP 23.104.0.1:33376 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:01:10.154 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:36988 10 6438 1 2025-07-24 14:01:22.710 00:00:10.368 TCP 23.104.0.1:60410 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:02:10.327 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60438 10 6438 1 2025-07-24 14:02:23.119 00:00:10.321 TCP 23.104.0.1:42428 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:02:54.287 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 14:02:54.165 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 13:58:00.419 00:06:00.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 14:03:10.540 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:60062 10 6438 1 2025-07-24 14:03:23.481 00:00:10.364 TCP 23.104.0.1:49394 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:04:10.746 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48290 10 6438 1 2025-07-24 14:04:23.880 00:00:10.379 TCP 23.104.0.1:33194 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:00:00.416 00:06:00.135 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 14:05:10.963 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:51012 10 6438 1 2025-07-24 14:05:24.292 00:00:10.366 TCP 23.104.0.1:44280 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:06:11.194 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:53124 10 6438 1 2025-07-24 14:06:24.694 00:00:10.367 TCP 23.104.0.1:55866 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:07:11.370 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44680 10 6438 1 2025-07-24 14:07:25.104 00:00:10.366 TCP 23.104.0.1:37416 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:07:54.187 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 14:07:54.348 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 14:08:11.591 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:56264 10 6438 1 2025-07-24 14:08:25.508 00:00:10.363 TCP 23.104.0.1:33668 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:09:11.765 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57152 10 6438 1 2025-07-24 14:09:25.914 00:00:10.363 TCP 23.104.0.1:39280 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:05:00.419 00:06:00.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 14:10:11.991 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56184 10 6438 1 2025-07-24 14:10:26.317 00:00:10.369 TCP 23.104.0.1:36578 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:11:12.174 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52030 10 6438 1 2025-07-24 14:11:26.727 00:00:10.374 TCP 23.104.0.1:52228 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:07:00.418 00:06:00.134 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 14:12:12.389 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:55350 10 6438 1 2025-07-24 14:12:27.137 00:00:10.366 TCP 23.104.0.1:55808 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:12:54.297 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 14:12:54.124 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 14:13:12.604 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:54886 10 6438 1 2025-07-24 14:13:27.541 00:00:10.361 TCP 23.104.0.1:45756 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:14:12.826 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:54800 10 6438 1 2025-07-24 14:14:27.945 00:00:10.348 TCP 23.104.0.1:40902 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:15:13.002 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:47434 10 6438 1 2025-07-24 14:15:28.342 00:00:10.363 TCP 23.104.0.1:58786 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:16:13.215 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:51166 10 6438 1 2025-07-24 14:16:28.741 00:00:10.367 TCP 23.104.0.1:57604 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:12:00.421 00:06:00.129 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 14:17:13.439 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47418 10 6438 1 2025-07-24 14:17:29.146 00:00:10.376 TCP 23.104.0.1:59846 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:17:54.303 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 14:17:54.577 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 14:18:13.653 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:53712 12 10352 1 2025-07-24 14:18:29.560 00:00:10.436 TCP 23.104.0.1:48130 -> 1.101.0.1:3000 15 1925 1 2025-07-24 14:14:00.421 00:06:00.132 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 14:19:13.894 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50572 10 6438 1 2025-07-24 14:19:30.035 00:00:10.361 TCP 23.104.0.1:56994 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:20:14.113 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48384 10 6438 1 2025-07-24 14:20:30.436 00:00:10.361 TCP 23.104.0.1:59580 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:21:14.327 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:46386 10 6438 1 2025-07-24 14:21:30.836 00:00:10.389 TCP 23.104.0.1:35484 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:22:14.543 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55166 10 6438 1 2025-07-24 14:22:31.266 00:00:10.327 TCP 23.104.0.1:40876 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:22:54.505 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 14:22:54.641 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 14:23:14.753 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38642 10 6438 1 2025-07-24 14:23:31.636 00:00:10.337 TCP 23.104.0.1:44528 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:19:00.424 00:06:00.128 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 14:24:14.963 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:60366 10 6438 1 2025-07-24 14:24:32.008 00:00:10.367 TCP 23.104.0.1:55010 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:25:15.189 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42200 10 6438 1 2025-07-24 14:25:32.410 00:00:10.320 TCP 23.104.0.1:49668 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:21:00.422 00:06:00.133 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 14:26:15.401 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:44572 10 6438 1 2025-07-24 14:26:32.776 00:00:10.373 TCP 23.104.0.1:41280 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:27:15.574 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:56606 10 6438 1 2025-07-24 14:27:33.186 00:00:10.371 TCP 23.104.0.1:37910 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:27:54.722 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 14:27:54.605 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 14:28:15.790 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53708 10 6438 1 2025-07-24 14:28:33.592 00:00:10.367 TCP 23.104.0.1:38542 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:29:16.005 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:34346 10 6438 1 2025-07-24 14:29:34.001 00:00:10.359 TCP 23.104.0.1:60998 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:30:16.194 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35000 10 6438 1 2025-07-24 14:30:34.407 00:00:10.325 TCP 23.104.0.1:38180 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:26:00.424 00:06:00.127 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 14:31:16.404 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58196 10 6438 1 2025-07-24 14:31:34.771 00:00:10.369 TCP 23.104.0.1:54580 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:32:16.613 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46120 10 6438 1 2025-07-24 14:32:35.178 00:00:10.326 TCP 23.104.0.1:42152 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:32:54.826 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 14:32:54.885 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 14:28:00.423 00:06:00.132 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 14:33:16.824 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46344 10 6438 1 2025-07-24 14:33:35.539 00:00:10.366 TCP 23.104.0.1:55018 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:34:17.059 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:39648 10 6438 1 2025-07-24 14:34:35.946 00:00:10.327 TCP 23.104.0.1:55592 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:35:17.229 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:48590 10 6438 1 2025-07-24 14:35:36.309 00:00:10.378 TCP 23.104.0.1:57600 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:36:17.442 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54802 10 6438 1 2025-07-24 14:36:36.724 00:00:10.371 TCP 23.104.0.1:44650 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:37:17.652 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48226 10 6438 1 2025-07-24 14:37:37.130 00:00:10.362 TCP 23.104.0.1:50452 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:37:54.917 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 14:37:54.803 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 14:33:00.427 00:06:00.125 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 14:38:17.864 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:46094 10 6438 1 2025-07-24 14:38:37.528 00:00:10.360 TCP 23.104.0.1:34536 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:39:18.090 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:55644 10 6438 1 2025-07-24 14:39:37.927 00:00:10.389 TCP 23.104.0.1:54610 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:35:00.425 00:06:00.131 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 14:40:18.309 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49376 10 6438 1 2025-07-24 14:40:38.351 00:00:10.370 TCP 23.104.0.1:58054 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:41:18.519 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:54742 10 6438 1 2025-07-24 14:41:38.765 00:00:10.371 TCP 23.104.0.1:36612 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:42:18.733 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43976 10 6438 1 2025-07-24 14:42:54.928 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 14:42:39.183 00:00:10.362 TCP 23.104.0.1:37356 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:42:54.763 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 14:43:18.942 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:38546 10 6438 1 2025-07-24 14:43:39.586 00:00:10.368 TCP 23.104.0.1:35186 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:44:19.178 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:43752 10 6438 1 2025-07-24 14:44:39.989 00:00:10.366 TCP 23.104.0.1:54390 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:40:00.433 00:06:00.123 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 14:45:19.346 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:46108 10 6438 1 2025-07-24 14:45:40.396 00:00:10.370 TCP 23.104.0.1:53568 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:46:19.553 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40660 10 6438 1 2025-07-24 14:46:40.802 00:00:10.366 TCP 23.104.0.1:48942 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:42:00.431 00:06:00.128 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 14:47:19.769 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57570 10 6438 1 2025-07-24 14:47:41.216 00:00:10.365 TCP 23.104.0.1:39440 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:47:55.038 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 14:47:54.935 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 14:48:19.982 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:42730 10 6438 1 2025-07-24 14:48:41.616 00:00:10.320 TCP 23.104.0.1:47756 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:49:20.211 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43864 10 6438 1 2025-07-24 14:49:41.974 00:00:10.331 TCP 23.104.0.1:49516 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:50:20.424 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:48966 10 6438 1 2025-07-24 14:50:42.343 00:00:10.364 TCP 23.104.0.1:58254 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:51:20.606 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40600 10 6438 1 2025-07-24 14:51:42.744 00:00:10.374 TCP 23.104.0.1:51466 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:47:00.436 00:06:00.122 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 14:52:20.816 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:51024 10 6438 1 2025-07-24 14:52:55.148 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 14:52:55.000 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 14:52:43.143 00:00:10.370 TCP 23.104.0.1:48086 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:53:20.991 00:00:10.152 TCP 1.101.0.1:3000 -> 22.102.0.1:40182 10 6438 1 2025-07-24 14:53:43.550 00:00:10.367 TCP 23.104.0.1:59614 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:49:00.436 00:06:00.124 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 14:54:21.200 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57106 10 6438 1 2025-07-24 14:54:43.958 00:00:10.328 TCP 23.104.0.1:49682 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:55:21.412 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38950 10 6438 1 2025-07-24 14:55:44.322 00:00:10.366 TCP 23.104.0.1:45920 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:56:21.625 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:50952 10 6438 1 2025-07-24 14:56:44.725 00:00:10.329 TCP 23.104.0.1:53556 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:57:21.834 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:32944 10 6438 1 2025-07-24 14:57:54.983 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 14:57:55.373 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 14:57:45.108 00:00:10.334 TCP 23.104.0.1:45204 -> 1.101.0.1:3000 11 1507 1 2025-07-24 14:58:22.070 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:40952 12 10352 1 Summary: total flows: 159, total bytes: 503263, total packets: 1553, avg bps: 1108, avg pps: 0, avg bpp: 324 Time window: 2025-07-24 13:58:00 - 2025-07-24 14:58:32 Total flows processed: 159, passed: 159, Blocks skipped: 0, Bytes read: 16600 Sys: 0.0026s User: 0.0013s Wall: 0.0026s flows/second: 61527.3 Runtime: 0.0026s