Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-29 14:59:22.273 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39452 10 6452 1 2025-07-29 14:59:27.121 00:00:10.364 TCP 23.104.0.1:44256 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:56:02.734 00:05:00.338 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 15:00:19.513 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 15:00:19.682 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 15:00:22.486 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:33506 10 6452 1 2025-07-29 15:00:27.520 00:00:10.356 TCP 23.104.0.1:59908 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:01:22.661 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44678 10 6452 1 2025-07-29 15:01:27.919 00:00:10.369 TCP 23.104.0.1:56500 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:02:22.882 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40512 10 6452 1 2025-07-29 15:02:28.326 00:00:10.362 TCP 23.104.0.1:44684 -> 1.101.0.1:3000 11 1507 1 2025-07-29 14:59:02.740 00:05:00.330 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 15:03:23.100 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:52948 12 10367 1 2025-07-29 15:03:28.725 00:00:10.403 TCP 23.104.0.1:40584 -> 1.101.0.1:3000 15 1926 1 2025-07-29 15:04:23.343 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:35252 10 6452 1 2025-07-29 15:04:29.167 00:00:10.324 TCP 23.104.0.1:57818 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:05:19.903 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 15:05:19.941 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 15:05:23.504 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57246 10 6452 1 2025-07-29 15:05:29.530 00:00:10.363 TCP 23.104.0.1:38108 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:02:02.742 00:05:00.333 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 15:06:23.714 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46810 10 6452 1 2025-07-29 15:06:29.938 00:00:10.668 TCP 23.104.0.1:56552 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:07:23.931 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:39474 10 6452 1 2025-07-29 15:07:30.641 00:00:10.327 TCP 23.104.0.1:37386 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:08:24.165 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42968 10 6452 1 2025-07-29 15:08:31.006 00:00:10.365 TCP 23.104.0.1:58656 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:05:02.744 00:05:00.328 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 15:09:24.376 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55410 10 6452 1 2025-07-29 15:09:31.419 00:00:10.323 TCP 23.104.0.1:49138 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:10:19.887 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 15:10:20.063 00:00:00.050 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 15:10:24.590 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57516 10 6452 1 2025-07-29 15:10:31.782 00:00:10.374 TCP 23.104.0.1:40880 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:11:24.805 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6452 1 2025-07-29 15:11:32.186 00:00:10.381 TCP 23.104.0.1:60032 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:08:02.745 00:05:00.331 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 15:12:25.020 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:60442 10 6452 1 2025-07-29 15:12:32.602 00:00:10.364 TCP 23.104.0.1:37474 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:13:25.234 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46384 10 6452 1 2025-07-29 15:13:33.001 00:00:10.366 TCP 23.104.0.1:55064 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:14:25.447 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:32996 10 6452 1 2025-07-29 15:14:33.401 00:00:10.368 TCP 23.104.0.1:55232 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:11:02.747 00:05:00.327 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 15:15:20.086 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 15:15:19.991 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 15:15:25.656 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:42730 10 6452 1 2025-07-29 15:15:33.810 00:00:10.412 TCP 23.104.0.1:36280 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:16:25.834 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46408 10 6452 1 2025-07-29 15:16:34.258 00:00:10.361 TCP 23.104.0.1:38192 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:17:26.006 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40286 10 6452 1 2025-07-29 15:17:34.658 00:00:10.331 TCP 23.104.0.1:39402 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:14:02.746 00:05:00.331 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 15:18:26.210 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53308 10 6452 1 2025-07-29 15:18:35.030 00:00:10.370 TCP 23.104.0.1:41538 -> 1.101.0.1:3000 12 1559 1 2025-07-29 15:19:26.426 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:53840 10 6452 1 2025-07-29 15:19:35.430 00:00:10.364 TCP 23.104.0.1:57082 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:20:20.062 00:00:00.059 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 15:20:19.929 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 15:20:26.607 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:37322 10 6452 1 2025-07-29 15:20:35.836 00:00:10.392 TCP 23.104.0.1:48560 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:17:02.750 00:05:00.325 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 15:21:26.825 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35578 10 6452 1 2025-07-29 15:21:36.266 00:00:10.366 TCP 23.104.0.1:58620 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:22:27.064 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:44858 10 6452 1 2025-07-29 15:22:36.666 00:00:10.364 TCP 23.104.0.1:54592 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:23:27.296 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33198 10 6452 1 2025-07-29 15:23:37.097 00:00:10.366 TCP 23.104.0.1:39772 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:20:02.749 00:05:00.328 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 15:24:27.515 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:54120 10 6452 1 2025-07-29 15:24:37.503 00:00:10.366 TCP 23.104.0.1:35006 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:25:20.297 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 15:25:20.239 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 15:25:27.689 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:49428 10 6452 1 2025-07-29 15:25:37.913 00:00:10.368 TCP 23.104.0.1:33706 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:26:27.909 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:53192 10 6452 1 2025-07-29 15:26:38.313 00:00:10.371 TCP 23.104.0.1:52906 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:23:02.751 00:05:00.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 15:27:28.118 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46968 10 6452 1 2025-07-29 15:27:38.722 00:00:10.338 TCP 23.104.0.1:51734 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:28:28.325 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:35954 12 10365 1 2025-07-29 15:28:39.096 00:00:10.440 TCP 23.104.0.1:56416 -> 1.101.0.1:3000 15 1926 1 2025-07-29 15:29:28.565 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:49720 10 6452 1 2025-07-29 15:29:39.570 00:00:10.369 TCP 23.104.0.1:33208 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:26:02.749 00:05:00.329 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 15:30:20.273 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 15:30:20.363 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 15:30:28.736 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38844 10 6452 1 2025-07-29 15:30:39.977 00:00:10.331 TCP 23.104.0.1:57422 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:31:28.951 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:58958 10 6452 1 2025-07-29 15:31:40.371 00:00:10.385 TCP 23.104.0.1:48124 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:32:29.183 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36194 10 6452 1 2025-07-29 15:32:40.830 00:00:10.400 TCP 23.104.0.1:34594 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:29:02.753 00:05:00.324 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 15:33:29.398 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:39606 10 6452 1 2025-07-29 15:33:41.274 00:00:10.361 TCP 23.104.0.1:38146 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:34:29.614 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44444 10 6452 1 2025-07-29 15:34:41.682 00:00:10.329 TCP 23.104.0.1:49806 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:35:20.354 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 15:35:20.551 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 15:35:29.828 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39206 10 6452 1 2025-07-29 15:35:42.053 00:00:10.368 TCP 23.104.0.1:41832 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:32:02.753 00:05:00.331 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 15:36:30.067 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57882 10 6452 1 2025-07-29 15:36:42.455 00:00:10.336 TCP 23.104.0.1:45796 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:37:30.282 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58070 10 6452 1 2025-07-29 15:37:42.831 00:00:10.398 TCP 23.104.0.1:53050 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:38:30.492 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:52968 12 10365 1 2025-07-29 15:38:43.267 00:00:10.453 TCP 23.104.0.1:48788 -> 1.101.0.1:3000 15 1926 1 2025-07-29 15:35:02.754 00:05:00.325 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 15:39:30.727 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:35862 10 6452 1 2025-07-29 15:39:43.747 00:00:10.367 TCP 23.104.0.1:38474 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:40:20.693 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 15:40:20.587 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 15:40:30.940 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:33140 10 6452 1 2025-07-29 15:40:44.151 00:00:10.368 TCP 23.104.0.1:46074 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:41:31.174 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50198 10 6452 1 2025-07-29 15:41:44.556 00:00:10.709 TCP 23.104.0.1:46154 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:38:02.752 00:05:00.330 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 15:42:31.383 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41572 10 6452 1 2025-07-29 15:42:45.307 00:00:10.362 TCP 23.104.0.1:38896 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:43:31.595 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59604 10 6452 1 2025-07-29 15:43:45.705 00:00:10.371 TCP 23.104.0.1:47006 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:44:31.816 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33498 10 6452 1 2025-07-29 15:44:46.110 00:00:10.357 TCP 23.104.0.1:54492 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:41:02.756 00:05:00.325 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 15:45:20.598 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 15:45:20.568 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 15:45:32.040 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34960 10 6452 1 2025-07-29 15:45:46.508 00:00:10.365 TCP 23.104.0.1:52800 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:46:32.255 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55128 10 6452 1 2025-07-29 15:46:46.916 00:00:10.386 TCP 23.104.0.1:41720 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:47:32.481 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:47480 10 6452 1 2025-07-29 15:47:47.342 00:00:10.364 TCP 23.104.0.1:41276 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:44:02.754 00:05:00.331 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 15:48:32.728 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48776 10 6452 1 2025-07-29 15:48:47.748 00:00:10.376 TCP 23.104.0.1:43782 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:49:32.953 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46512 10 6452 1 2025-07-29 15:49:48.162 00:00:10.318 TCP 23.104.0.1:56022 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:50:20.832 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 15:50:20.693 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 15:50:33.182 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:53298 10 6452 1 2025-07-29 15:50:48.525 00:00:10.366 TCP 23.104.0.1:32978 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:47:02.756 00:05:00.326 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 15:51:33.396 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:37032 10 6452 1 2025-07-29 15:51:48.930 00:00:10.389 TCP 23.104.0.1:39654 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:52:33.571 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40486 10 6452 1 2025-07-29 15:52:49.357 00:00:10.365 TCP 23.104.0.1:36642 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:53:33.785 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:34092 10 6452 1 2025-07-29 15:53:49.761 00:00:10.327 TCP 23.104.0.1:33496 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:50:02.754 00:05:00.330 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-29 15:54:34.001 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:55678 10 6452 1 2025-07-29 15:54:50.126 00:00:10.376 TCP 23.104.0.1:48670 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:55:20.775 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-29 15:55:20.862 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-29 15:55:34.216 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41004 10 6452 1 2025-07-29 15:55:50.543 00:00:10.363 TCP 23.104.0.1:35946 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:56:34.427 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:51392 10 6452 1 2025-07-29 15:56:50.945 00:00:10.370 TCP 23.104.0.1:44114 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:53:02.758 00:05:00.326 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-29 15:57:34.640 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54500 10 6452 1 2025-07-29 15:57:51.354 00:00:10.362 TCP 23.104.0.1:49310 -> 1.101.0.1:3000 11 1507 1 2025-07-29 15:58:34.854 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:52632 10 6452 1 Summary: total flows: 163, total bytes: 509891, total packets: 1580, avg bps: 1084, avg pps: 0, avg bpp: 322 Time window: 2025-07-29 14:56:02 - 2025-07-29 15:58:45 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0028s User: 0.0019s Wall: 0.0025s flows/second: 64479.1 Runtime: 0.0025s