Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-25 04:54:00.704 00:06:00.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 04:59:19.327 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47292 10 6438 1 2025-07-25 04:59:22.201 00:00:10.362 TCP 23.104.0.1:45684 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:00:19.547 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58836 10 6438 1 2025-07-25 05:00:22.604 00:00:10.384 TCP 23.104.0.1:59652 -> 1.101.0.1:3000 11 1507 1 2025-07-25 04:56:00.705 00:06:00.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 05:01:19.760 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44494 10 6438 1 2025-07-25 05:01:23.027 00:00:10.373 TCP 23.104.0.1:40044 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:02:19.964 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56176 10 6438 1 2025-07-25 05:02:23.436 00:00:10.366 TCP 23.104.0.1:49208 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:03:12.275 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 05:03:12.227 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 05:03:20.181 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:58698 10 6438 1 2025-07-25 05:03:23.846 00:00:10.385 TCP 23.104.0.1:39102 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:04:20.397 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:46306 10 6438 1 2025-07-25 05:04:24.270 00:00:10.362 TCP 23.104.0.1:54334 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:05:20.570 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:36478 10 6438 1 2025-07-25 05:05:24.668 00:00:10.367 TCP 23.104.0.1:35210 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:01:00.708 00:06:00.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 05:06:20.743 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:56134 10 6438 1 2025-07-25 05:06:25.101 00:00:10.363 TCP 23.104.0.1:47384 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:07:20.911 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42138 10 6438 1 2025-07-25 05:07:25.499 00:00:10.325 TCP 23.104.0.1:52306 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:03:00.705 00:06:00.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 05:08:12.541 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 05:08:12.698 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 05:08:21.130 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47826 10 6438 1 2025-07-25 05:08:25.866 00:00:10.366 TCP 23.104.0.1:37164 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:09:21.346 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53282 10 6438 1 2025-07-25 05:09:26.275 00:00:10.369 TCP 23.104.0.1:57794 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:10:21.556 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:34138 10 6438 1 2025-07-25 05:10:26.681 00:00:10.371 TCP 23.104.0.1:58450 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:11:21.763 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53498 10 6438 1 2025-07-25 05:11:27.106 00:00:10.365 TCP 23.104.0.1:32864 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:12:21.973 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:45312 10 6438 1 2025-07-25 05:12:27.511 00:00:10.366 TCP 23.104.0.1:32968 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:08:00.709 00:06:00.151 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 05:13:12.541 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 05:13:12.306 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 05:13:22.206 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52542 10 6438 1 2025-07-25 05:13:27.912 00:00:10.321 TCP 23.104.0.1:33656 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:14:22.423 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43076 10 6438 1 2025-07-25 05:14:28.276 00:00:10.364 TCP 23.104.0.1:56656 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:10:00.709 00:06:00.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 05:15:22.636 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:40630 10 6438 1 2025-07-25 05:15:28.679 00:00:10.377 TCP 23.104.0.1:43642 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:16:22.816 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:59844 10 6438 1 2025-07-25 05:16:29.111 00:00:10.357 TCP 23.104.0.1:43080 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:17:22.989 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:46458 10 6438 1 2025-07-25 05:17:29.510 00:00:10.364 TCP 23.104.0.1:33496 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:18:12.651 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 05:18:12.427 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 05:18:23.226 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:50374 10 6438 1 2025-07-25 05:18:29.909 00:00:10.366 TCP 23.104.0.1:59628 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:19:23.438 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:56608 10 6438 1 2025-07-25 05:19:30.314 00:00:10.330 TCP 23.104.0.1:46078 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:15:00.714 00:06:00.148 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 05:20:23.659 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:56000 10 6438 1 2025-07-25 05:20:30.685 00:00:10.378 TCP 23.104.0.1:50282 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:21:23.863 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:52704 10 6438 1 2025-07-25 05:21:31.107 00:00:10.366 TCP 23.104.0.1:51520 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:17:00.711 00:06:00.154 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 05:22:24.085 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:33074 10 6438 1 2025-07-25 05:22:31.512 00:00:10.367 TCP 23.104.0.1:51254 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:23:12.652 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 05:23:12.640 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 05:23:24.326 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53010 10 6438 1 2025-07-25 05:23:31.916 00:00:10.372 TCP 23.104.0.1:53152 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:24:24.538 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60182 10 6438 1 2025-07-25 05:24:32.331 00:00:10.367 TCP 23.104.0.1:57268 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:25:24.753 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:49700 10 6438 1 2025-07-25 05:25:32.737 00:00:10.364 TCP 23.104.0.1:37812 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:26:24.933 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:38632 10 6438 1 2025-07-25 05:26:33.141 00:00:10.366 TCP 23.104.0.1:35766 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:22:00.720 00:06:00.146 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 05:27:25.159 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47888 10 6438 1 2025-07-25 05:27:33.546 00:00:10.363 TCP 23.104.0.1:33284 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:28:12.773 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 05:28:12.683 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 05:28:25.368 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:55524 12 10352 1 2025-07-25 05:28:33.947 00:00:10.400 TCP 23.104.0.1:44304 -> 1.101.0.1:3000 15 1925 1 2025-07-25 05:24:00.711 00:06:00.159 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 05:29:25.603 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:49822 10 6438 1 2025-07-25 05:29:34.394 00:00:10.368 TCP 23.104.0.1:48686 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:30:25.820 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48928 10 6438 1 2025-07-25 05:30:34.798 00:00:10.366 TCP 23.104.0.1:39168 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:31:26.057 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:33746 10 6438 1 2025-07-25 05:31:35.200 00:00:10.360 TCP 23.104.0.1:59318 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:32:26.277 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59310 10 6438 1 2025-07-25 05:32:35.604 00:00:10.367 TCP 23.104.0.1:60192 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:33:12.876 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 05:33:13.009 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 05:33:26.487 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:42000 10 6438 1 2025-07-25 05:33:36.006 00:00:10.357 TCP 23.104.0.1:55034 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:29:00.715 00:06:00.154 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 05:34:26.706 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57532 10 6438 1 2025-07-25 05:34:36.415 00:00:10.369 TCP 23.104.0.1:53502 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:35:26.919 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46400 10 6438 1 2025-07-25 05:35:36.824 00:00:10.375 TCP 23.104.0.1:35330 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:31:00.714 00:06:00.157 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 05:36:27.131 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:33672 10 6438 1 2025-07-25 05:36:37.239 00:00:10.366 TCP 23.104.0.1:34048 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:37:27.304 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:49268 10 6438 1 2025-07-25 05:37:37.649 00:00:10.374 TCP 23.104.0.1:43444 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:38:13.030 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 05:38:13.117 00:00:00.042 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 05:38:27.523 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:44642 10 6438 1 2025-07-25 05:38:38.110 00:00:10.511 TCP 23.104.0.1:55342 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:39:27.732 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47184 10 6438 1 2025-07-25 05:39:38.660 00:00:10.366 TCP 23.104.0.1:41462 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:40:27.952 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59108 10 6438 1 2025-07-25 05:40:39.094 00:00:10.363 TCP 23.104.0.1:34782 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:36:00.719 00:06:00.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 05:41:28.181 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:54308 10 6438 1 2025-07-25 05:41:39.500 00:00:10.366 TCP 23.104.0.1:33676 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:42:28.396 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40884 10 6438 1 2025-07-25 05:42:39.908 00:00:10.419 TCP 23.104.0.1:44956 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:38:00.717 00:06:00.155 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 05:43:13.054 00:00:00.043 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 05:43:13.192 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 05:43:28.569 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59634 10 6438 1 2025-07-25 05:43:40.369 00:00:10.361 TCP 23.104.0.1:35608 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:44:28.785 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35442 10 6438 1 2025-07-25 05:44:40.772 00:00:10.374 TCP 23.104.0.1:48138 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:45:29.006 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34406 10 6438 1 2025-07-25 05:45:41.186 00:00:10.362 TCP 23.104.0.1:56704 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:46:29.223 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:32986 10 6438 1 2025-07-25 05:46:41.588 00:00:10.368 TCP 23.104.0.1:44512 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:47:29.407 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56294 10 6438 1 2025-07-25 05:47:41.992 00:00:10.362 TCP 23.104.0.1:60706 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:43:00.724 00:06:00.152 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 05:48:13.204 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 05:48:13.261 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 05:48:29.624 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56668 10 6438 1 2025-07-25 05:48:42.387 00:00:10.365 TCP 23.104.0.1:57386 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:49:29.836 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:41420 10 6438 1 2025-07-25 05:49:42.792 00:00:10.367 TCP 23.104.0.1:45950 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:45:00.721 00:06:00.158 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 05:50:30.078 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53488 10 6438 1 2025-07-25 05:50:43.196 00:00:10.371 TCP 23.104.0.1:45504 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:51:30.289 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44576 10 6438 1 2025-07-25 05:51:43.602 00:00:10.370 TCP 23.104.0.1:50186 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:52:30.500 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:56130 10 6438 1 2025-07-25 05:52:44.010 00:00:10.375 TCP 23.104.0.1:44838 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:53:13.022 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 05:53:13.297 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 05:53:30.719 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:58384 10 6438 1 2025-07-25 05:53:44.424 00:00:10.371 TCP 23.104.0.1:49476 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:54:30.925 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51926 10 6438 1 2025-07-25 05:54:44.837 00:00:10.390 TCP 23.104.0.1:34898 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:50:00.726 00:06:00.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-07-25 05:55:31.130 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54394 10 6438 1 2025-07-25 05:55:45.260 00:00:10.374 TCP 23.104.0.1:33980 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:56:31.344 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44390 10 6438 1 2025-07-25 05:56:45.673 00:00:10.386 TCP 23.104.0.1:53932 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:52:00.724 00:06:00.156 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-07-25 05:57:31.556 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44416 10 6438 1 2025-07-25 05:57:46.112 00:00:10.327 TCP 23.104.0.1:52534 -> 1.101.0.1:3000 11 1507 1 2025-07-25 05:58:13.353 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 05:58:13.441 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 05:58:31.762 00:00:10.230 TCP 1.101.0.1:3000 -> 22.102.0.1:46854 14 14266 1 Summary: total flows: 161, total bytes: 508899, total packets: 1583, avg bps: 1048, avg pps: 0, avg bpp: 321 Time window: 2025-07-25 04:54:00 - 2025-07-25 05:58:41 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0021s User: 0.0021s Wall: 0.0027s flows/second: 60228.6 Runtime: 0.0027s