Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-24 18:54:00.510 00:06:00.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 18:59:12.629 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52918 10 6438 1 2025-07-24 18:59:21.711 00:00:10.374 TCP 23.104.0.1:35130 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:00:12.839 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38388 10 6438 1 2025-07-24 19:00:22.125 00:00:10.368 TCP 23.104.0.1:33534 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:01:13.078 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:35174 10 6438 1 2025-07-24 19:01:22.536 00:00:10.363 TCP 23.104.0.1:44616 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:02:13.292 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:41872 10 6438 1 2025-07-24 19:02:22.940 00:00:10.376 TCP 23.104.0.1:56966 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:03:00.156 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 19:03:00.035 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 19:03:13.461 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:47024 10 6438 1 2025-07-24 19:03:23.353 00:00:10.374 TCP 23.104.0.1:41302 -> 1.101.0.1:3000 11 1507 1 2025-07-24 18:59:00.515 00:06:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 19:04:13.638 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34412 10 6438 1 2025-07-24 19:04:23.768 00:00:10.368 TCP 23.104.0.1:54210 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:05:13.845 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:57420 10 6438 1 2025-07-24 19:05:24.172 00:00:10.368 TCP 23.104.0.1:46540 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:01:00.513 00:06:00.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 19:06:14.037 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45524 10 6438 1 2025-07-24 19:06:24.579 00:00:10.370 TCP 23.104.0.1:47258 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:07:14.256 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:56430 10 6438 1 2025-07-24 19:07:24.977 00:00:10.361 TCP 23.104.0.1:42158 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:08:00.319 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 19:08:00.325 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 19:08:14.430 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47130 10 6438 1 2025-07-24 19:08:25.378 00:00:10.365 TCP 23.104.0.1:36370 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:09:14.640 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:38366 10 6438 1 2025-07-24 19:09:25.780 00:00:10.324 TCP 23.104.0.1:33704 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:10:14.852 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40840 10 6438 1 2025-07-24 19:10:26.143 00:00:10.364 TCP 23.104.0.1:39126 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:06:00.519 00:06:00.166 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 19:11:15.081 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36002 10 6438 1 2025-07-24 19:11:26.548 00:00:10.369 TCP 23.104.0.1:57258 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:12:15.309 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38288 10 6438 1 2025-07-24 19:12:26.949 00:00:10.366 TCP 23.104.0.1:48656 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:13:00.308 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 19:13:00.398 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 19:08:00.515 00:06:00.172 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 19:13:15.526 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:57992 10 6438 1 2025-07-24 19:13:27.358 00:00:10.362 TCP 23.104.0.1:43690 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:14:15.738 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37586 10 6438 1 2025-07-24 19:14:27.756 00:00:10.374 TCP 23.104.0.1:40070 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:15:15.950 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:36982 10 6438 1 2025-07-24 19:15:28.171 00:00:10.362 TCP 23.104.0.1:58248 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:16:16.176 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57846 10 6438 1 2025-07-24 19:16:28.576 00:00:10.363 TCP 23.104.0.1:35760 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:17:16.390 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:59606 10 6438 1 2025-07-24 19:17:28.978 00:00:10.370 TCP 23.104.0.1:33526 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:18:00.397 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 19:18:00.589 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 19:13:00.523 00:06:00.163 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 19:18:16.603 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:58144 10 6438 1 2025-07-24 19:18:29.396 00:00:10.372 TCP 23.104.0.1:54420 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:19:16.772 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:56310 10 6438 1 2025-07-24 19:19:29.806 00:00:10.368 TCP 23.104.0.1:49318 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:15:00.521 00:06:00.168 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 19:20:16.985 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:33574 10 6438 1 2025-07-24 19:20:30.214 00:00:10.365 TCP 23.104.0.1:33626 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:21:17.209 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49684 10 6438 1 2025-07-24 19:21:30.613 00:00:10.362 TCP 23.104.0.1:40950 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:22:17.420 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:49376 10 6438 1 2025-07-24 19:22:31.022 00:00:10.355 TCP 23.104.0.1:42656 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:23:00.658 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 19:23:00.529 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 19:23:17.629 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46728 10 6438 1 2025-07-24 19:23:31.419 00:00:10.371 TCP 23.104.0.1:57460 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:24:17.842 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:49326 10 6438 1 2025-07-24 19:24:31.829 00:00:10.361 TCP 23.104.0.1:58004 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:20:00.524 00:06:00.164 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 19:25:18.086 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:58580 10 6438 1 2025-07-24 19:25:32.233 00:00:10.371 TCP 23.104.0.1:55828 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:26:18.299 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44982 10 6438 1 2025-07-24 19:26:32.645 00:00:10.364 TCP 23.104.0.1:35138 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:22:00.521 00:06:00.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 19:27:18.519 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:58888 10 6438 1 2025-07-24 19:27:33.049 00:00:10.389 TCP 23.104.0.1:43150 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:28:00.432 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 19:28:00.385 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 19:28:18.737 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:49496 12 10352 1 2025-07-24 19:28:33.478 00:00:10.397 TCP 23.104.0.1:33348 -> 1.101.0.1:3000 15 1925 1 2025-07-24 19:29:18.975 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47802 10 6438 1 2025-07-24 19:29:33.917 00:00:10.336 TCP 23.104.0.1:36864 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:30:19.208 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58762 10 6438 1 2025-07-24 19:30:34.290 00:00:10.362 TCP 23.104.0.1:45100 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:31:19.420 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:52162 10 6438 1 2025-07-24 19:31:34.695 00:00:10.328 TCP 23.104.0.1:37382 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:27:00.527 00:06:00.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 19:32:19.631 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:57088 10 6438 1 2025-07-24 19:32:35.093 00:00:10.363 TCP 23.104.0.1:54812 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:33:00.692 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 19:33:00.807 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 19:33:19.845 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:55128 10 6438 1 2025-07-24 19:33:35.499 00:00:10.359 TCP 23.104.0.1:57300 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:29:00.524 00:06:00.170 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 19:34:20.081 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48210 10 6438 1 2025-07-24 19:34:35.899 00:00:10.371 TCP 23.104.0.1:36884 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:35:20.299 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:55190 10 6438 1 2025-07-24 19:35:36.310 00:00:10.361 TCP 23.104.0.1:42862 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:36:20.505 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52460 10 6438 1 2025-07-24 19:36:36.706 00:00:10.363 TCP 23.104.0.1:46666 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:37:20.727 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:57202 10 6438 1 2025-07-24 19:37:37.108 00:00:10.360 TCP 23.104.0.1:53900 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:38:00.738 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 19:38:00.842 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 19:38:20.937 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:34786 10 6438 1 2025-07-24 19:38:37.508 00:00:10.369 TCP 23.104.0.1:58706 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:34:00.527 00:06:00.165 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 19:39:21.176 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32792 10 6438 1 2025-07-24 19:39:37.918 00:00:10.410 TCP 23.104.0.1:40666 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:40:21.391 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:42410 10 6438 1 2025-07-24 19:40:38.372 00:00:10.359 TCP 23.104.0.1:57020 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:36:00.526 00:06:00.174 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 19:41:21.563 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:51774 10 6438 1 2025-07-24 19:41:38.767 00:00:10.374 TCP 23.104.0.1:53614 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:42:21.775 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44084 10 6438 1 2025-07-24 19:42:39.174 00:00:10.365 TCP 23.104.0.1:50662 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:43:01.166 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 19:43:01.163 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 19:43:21.988 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:46286 10 6438 1 2025-07-24 19:43:39.575 00:00:10.365 TCP 23.104.0.1:53388 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:44:22.178 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53320 10 6438 1 2025-07-24 19:44:39.976 00:00:10.375 TCP 23.104.0.1:46592 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:45:22.390 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:50658 10 6438 1 2025-07-24 19:45:40.388 00:00:10.367 TCP 23.104.0.1:41092 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:41:00.528 00:06:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 19:46:22.593 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58226 10 6438 1 2025-07-24 19:46:40.791 00:00:10.370 TCP 23.104.0.1:32788 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:47:22.802 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46864 10 6438 1 2025-07-24 19:47:41.201 00:00:10.367 TCP 23.104.0.1:49410 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:48:01.437 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 19:48:01.414 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 19:43:00.527 00:06:00.176 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 19:48:23.016 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35960 10 6438 1 2025-07-24 19:48:41.606 00:00:10.366 TCP 23.104.0.1:52740 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:49:23.230 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49832 10 6438 1 2025-07-24 19:49:42.008 00:00:10.360 TCP 23.104.0.1:40746 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:50:23.443 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42488 10 6438 1 2025-07-24 19:50:42.404 00:00:10.365 TCP 23.104.0.1:38772 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:51:23.660 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:51512 10 6438 1 2025-07-24 19:51:42.806 00:00:10.367 TCP 23.104.0.1:56142 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:52:23.882 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:54852 10 6438 1 2025-07-24 19:52:43.225 00:00:10.367 TCP 23.104.0.1:56944 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:53:01.056 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 19:53:01.217 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 19:48:00.528 00:06:00.169 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-24 19:53:24.100 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45092 10 6438 1 2025-07-24 19:53:43.631 00:00:10.363 TCP 23.104.0.1:43046 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:54:24.274 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:59112 10 6438 1 2025-07-24 19:54:44.036 00:00:10.365 TCP 23.104.0.1:52646 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:50:00.527 00:06:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-24 19:55:24.487 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:45596 10 6438 1 2025-07-24 19:55:44.439 00:00:10.366 TCP 23.104.0.1:50438 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:56:24.660 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:52226 10 6438 1 2025-07-24 19:56:44.868 00:00:10.365 TCP 23.104.0.1:55362 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:57:24.826 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:53228 10 6438 1 2025-07-24 19:57:45.273 00:00:10.320 TCP 23.104.0.1:44590 -> 1.101.0.1:3000 11 1507 1 2025-07-24 19:58:01.369 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-24 19:58:01.211 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-24 19:58:25.005 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60644 10 6438 1 Summary: total flows: 160, total bytes: 500210, total packets: 1565, avg bps: 1032, avg pps: 0, avg bpp: 319 Time window: 2025-07-24 18:54:00 - 2025-07-24 19:58:35 Total flows processed: 160, passed: 160, Blocks skipped: 0, Bytes read: 16704 Sys: 0.0024s User: 0.0024s Wall: 0.0032s flows/second: 49352.0 Runtime: 0.0033s