Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-07-25 16:55:00.939 00:05:00.210 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 16:58:53.125 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:36656 10 6438 1 2025-07-25 16:59:15.268 00:00:10.362 TCP 23.104.0.1:59622 -> 1.101.0.1:3000 11 1507 1 2025-07-25 16:56:00.936 00:05:00.215 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 16:59:53.339 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:51266 10 6438 1 2025-07-25 17:00:15.668 00:00:10.323 TCP 23.104.0.1:38430 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:00:53.549 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:39726 10 6438 1 2025-07-25 17:01:16.032 00:00:10.357 TCP 23.104.0.1:49708 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:01:53.764 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:35802 10 6438 1 2025-07-25 17:02:16.432 00:00:10.365 TCP 23.104.0.1:59080 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:02:53.982 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:44664 10 6438 1 2025-07-25 17:03:26.731 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 17:03:26.707 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 17:03:16.857 00:00:10.378 TCP 23.104.0.1:36828 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:03:54.218 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46032 10 6438 1 2025-07-25 17:04:17.276 00:00:10.360 TCP 23.104.0.1:56490 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:04:54.431 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37728 10 6438 1 2025-07-25 17:01:00.940 00:05:00.209 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 17:05:17.675 00:00:10.379 TCP 23.104.0.1:50564 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:02:00.938 00:05:00.213 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 17:05:54.643 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60274 10 6438 1 2025-07-25 17:06:18.106 00:00:10.364 TCP 23.104.0.1:49198 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:06:54.864 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:48004 10 6438 1 2025-07-25 17:07:18.509 00:00:10.382 TCP 23.104.0.1:34848 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:07:55.123 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:48942 10 6438 1 2025-07-25 17:08:26.944 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 17:08:26.849 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 17:08:18.931 00:00:10.370 TCP 23.104.0.1:47786 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:08:55.330 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:40976 10 6438 1 2025-07-25 17:09:19.345 00:00:10.367 TCP 23.104.0.1:38444 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:09:55.547 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:38448 10 6438 1 2025-07-25 17:10:19.755 00:00:10.388 TCP 23.104.0.1:39186 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:07:00.943 00:05:00.206 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 17:10:55.758 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45410 10 6438 1 2025-07-25 17:11:20.184 00:00:10.322 TCP 23.104.0.1:35850 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:08:00.941 00:05:00.211 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 17:11:55.970 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:53148 10 6438 1 2025-07-25 17:12:20.547 00:00:10.378 TCP 23.104.0.1:39008 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:12:56.193 00:00:10.156 TCP 1.101.0.1:3000 -> 22.102.0.1:37598 12 10352 1 2025-07-25 17:13:27.170 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 17:13:27.000 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 17:13:20.967 00:00:10.449 TCP 23.104.0.1:43956 -> 1.101.0.1:3000 15 1925 1 2025-07-25 17:13:56.386 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:59674 10 6438 1 2025-07-25 17:14:21.451 00:00:10.361 TCP 23.104.0.1:36550 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:14:56.558 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:57014 10 6438 1 2025-07-25 17:15:21.845 00:00:10.401 TCP 23.104.0.1:38402 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:15:56.783 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40276 10 6438 1 2025-07-25 17:16:22.264 00:00:10.326 TCP 23.104.0.1:47250 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:13:00.948 00:05:00.207 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 17:16:56.996 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:46180 10 6438 1 2025-07-25 17:17:22.627 00:00:10.382 TCP 23.104.0.1:60446 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:14:00.944 00:05:00.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 17:17:57.218 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37246 10 6438 1 2025-07-25 17:18:27.106 00:00:00.047 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 17:18:27.224 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 17:18:23.049 00:00:10.382 TCP 23.104.0.1:59332 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:18:57.434 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55610 10 6438 1 2025-07-25 17:19:23.469 00:00:10.365 TCP 23.104.0.1:35928 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:19:57.644 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:45666 10 6438 1 2025-07-25 17:20:23.873 00:00:10.370 TCP 23.104.0.1:40432 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:20:57.856 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:59466 10 6438 1 2025-07-25 17:21:24.280 00:00:10.334 TCP 23.104.0.1:41488 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:21:58.086 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:45572 10 6438 1 2025-07-25 17:22:24.643 00:00:10.371 TCP 23.104.0.1:40172 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:19:00.949 00:05:00.206 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 17:22:58.259 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:49156 10 6438 1 2025-07-25 17:23:26.815 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 17:23:27.204 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 17:23:25.050 00:00:10.368 TCP 23.104.0.1:45736 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:20:00.947 00:05:00.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 17:23:58.475 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:59816 10 6438 1 2025-07-25 17:24:25.456 00:00:10.363 TCP 23.104.0.1:41158 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:24:58.689 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42732 10 6438 1 2025-07-25 17:25:25.859 00:00:10.365 TCP 23.104.0.1:56122 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:25:58.898 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37676 10 6438 1 2025-07-25 17:26:26.263 00:00:10.363 TCP 23.104.0.1:51072 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:26:59.118 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:59002 10 6438 1 2025-07-25 17:27:26.673 00:00:10.367 TCP 23.104.0.1:58552 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:27:59.331 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:53566 10 6438 1 2025-07-25 17:28:27.444 00:00:00.033 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 17:28:27.412 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 17:28:27.101 00:00:10.314 TCP 23.104.0.1:34336 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:25:00.949 00:05:00.206 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 17:28:59.555 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:47474 10 6438 1 2025-07-25 17:29:27.458 00:00:10.327 TCP 23.104.0.1:42446 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:26:00.947 00:05:00.211 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 17:29:59.770 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:59454 10 6438 1 2025-07-25 17:30:27.825 00:00:10.396 TCP 23.104.0.1:51934 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:30:59.987 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:51328 10 6438 1 2025-07-25 17:31:28.265 00:00:10.363 TCP 23.104.0.1:54010 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:32:00.213 00:00:10.153 TCP 1.101.0.1:3000 -> 22.102.0.1:53458 10 6438 1 2025-07-25 17:32:28.670 00:00:10.364 TCP 23.104.0.1:52728 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:33:00.409 00:00:10.201 TCP 1.101.0.1:3000 -> 22.102.0.1:37202 12 10350 1 2025-07-25 17:33:27.414 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 17:33:27.413 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 17:33:29.103 00:00:10.443 TCP 23.104.0.1:34714 -> 1.101.0.1:3000 15 1925 1 2025-07-25 17:34:00.648 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:44032 10 6438 1 2025-07-25 17:34:29.583 00:00:10.364 TCP 23.104.0.1:54904 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:31:00.952 00:05:00.207 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 17:35:00.862 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:60230 12 6542 1 2025-07-25 17:35:29.989 00:00:10.365 TCP 23.104.0.1:44664 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:32:00.950 00:05:00.213 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 17:36:01.101 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:44104 10 6438 1 2025-07-25 17:36:30.395 00:00:10.364 TCP 23.104.0.1:43412 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:37:01.312 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:38362 10 6438 1 2025-07-25 17:37:30.800 00:00:10.364 TCP 23.104.0.1:49692 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:38:01.532 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:51310 10 6438 1 2025-07-25 17:38:27.612 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 17:38:27.418 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 17:38:31.208 00:00:10.368 TCP 23.104.0.1:36974 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:39:01.742 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:52688 10 6438 1 2025-07-25 17:39:31.616 00:00:10.361 TCP 23.104.0.1:43118 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:40:01.950 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:58746 10 6438 1 2025-07-25 17:40:32.016 00:00:10.362 TCP 23.104.0.1:44522 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:37:00.954 00:05:00.208 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 17:41:02.178 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55888 10 6438 1 2025-07-25 17:41:32.415 00:00:10.367 TCP 23.104.0.1:45888 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:38:00.950 00:05:00.214 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 17:42:02.393 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:59950 10 6438 1 2025-07-25 17:42:32.821 00:00:10.365 TCP 23.104.0.1:42766 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:43:02.568 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:32842 10 6438 1 2025-07-25 17:43:27.512 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 17:43:27.422 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 17:43:33.227 00:00:10.360 TCP 23.104.0.1:44862 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:44:02.741 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:53694 10 6438 1 2025-07-25 17:44:33.626 00:00:10.370 TCP 23.104.0.1:50850 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:45:02.972 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:48138 10 6438 1 2025-07-25 17:45:34.036 00:00:10.360 TCP 23.104.0.1:47374 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:46:03.157 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42326 10 6438 1 2025-07-25 17:46:34.436 00:00:10.366 TCP 23.104.0.1:53682 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:43:00.954 00:05:00.208 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 17:47:03.373 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40012 10 6438 1 2025-07-25 17:47:34.839 00:00:10.385 TCP 23.104.0.1:41398 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:44:00.952 00:05:00.213 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 17:48:03.588 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:38676 10 6438 1 2025-07-25 17:48:27.548 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 17:48:27.591 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 17:48:35.265 00:00:10.363 TCP 23.104.0.1:37444 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:49:03.793 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:36872 10 6438 1 2025-07-25 17:49:35.674 00:00:10.356 TCP 23.104.0.1:34650 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:50:04.003 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:40026 10 6438 1 2025-07-25 17:50:36.089 00:00:10.364 TCP 23.104.0.1:46918 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:51:04.182 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:49696 10 6438 1 2025-07-25 17:51:36.488 00:00:10.364 TCP 23.104.0.1:43900 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:52:04.395 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52686 10 6438 1 2025-07-25 17:52:36.891 00:00:10.373 TCP 23.104.0.1:34108 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:49:00.955 00:05:00.207 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-07-25 17:53:04.607 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33232 10 6438 1 2025-07-25 17:53:27.926 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 17:53:28.052 00:00:00.015 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 17:53:37.303 00:00:10.366 TCP 23.104.0.1:33358 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:50:00.953 00:05:00.212 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-07-25 17:54:04.829 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:43788 10 6438 1 2025-07-25 17:54:37.702 00:00:10.324 TCP 23.104.0.1:41024 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:55:05.075 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:55864 10 6438 1 2025-07-25 17:55:38.098 00:00:10.366 TCP 23.104.0.1:56122 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:56:05.289 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39272 10 6438 1 2025-07-25 17:56:38.503 00:00:10.366 TCP 23.104.0.1:53266 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:57:05.516 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:57158 10 6438 1 2025-07-25 17:57:38.914 00:00:10.372 TCP 23.104.0.1:34636 -> 1.101.0.1:3000 11 1507 1 2025-07-25 17:58:05.739 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:43846 10 6438 1 2025-07-25 17:58:27.794 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-07-25 17:58:27.833 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-07-25 17:58:39.324 00:00:10.364 TCP 23.104.0.1:44906 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 164, total bytes: 506274, total packets: 1586, avg bps: 1057, avg pps: 0, avg bpp: 319 Time window: 2025-07-25 16:55:00 - 2025-07-25 17:58:49 Total flows processed: 164, passed: 164, Blocks skipped: 0, Bytes read: 17120 Sys: 0.0032s User: 0.0011s Wall: 0.0026s flows/second: 64041.1 Runtime: 0.0026s