Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-11 08:55:09.569 00:05:00.772 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 08:59:38.603 00:00:10.326 TCP 23.104.0.1:44058 -> 1.101.0.1:3000 11 1507 1 2025-08-11 08:59:37.638 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:34154 10 6452 1 2025-08-11 09:00:38.972 00:00:10.380 TCP 23.104.0.1:49582 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:00:37.805 00:00:10.280 TCP 1.101.0.1:3000 -> 22.102.0.1:54668 10 6452 1 2025-08-11 08:57:09.576 00:05:00.764 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 09:01:28.000 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 09:01:27.850 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 09:01:39.387 00:00:10.986 TCP 23.104.0.1:35314 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:01:38.119 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:33764 10 6452 1 2025-08-11 09:02:40.413 00:00:10.375 TCP 23.104.0.1:43404 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:02:38.705 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43444 10 6452 1 2025-08-11 09:03:38.925 00:00:10.166 TCP 1.101.0.1:3000 -> 22.102.0.1:52048 10 6452 1 2025-08-11 09:03:40.827 00:00:10.354 TCP 23.104.0.1:59228 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:04:39.130 00:00:10.128 TCP 1.101.0.1:3000 -> 22.102.0.1:37666 10 6452 1 2025-08-11 09:04:41.221 00:00:10.324 TCP 23.104.0.1:32878 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:01:09.576 00:05:00.767 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 09:05:41.580 00:00:10.372 TCP 23.104.0.1:40194 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:05:39.299 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39410 10 6452 1 2025-08-11 09:06:28.164 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 09:06:28.062 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 09:06:39.513 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:46468 10 6452 1 2025-08-11 09:06:42.000 00:00:10.364 TCP 23.104.0.1:33536 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:03:09.578 00:05:00.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 09:07:39.727 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44204 10 6452 1 2025-08-11 09:07:42.403 00:00:10.366 TCP 23.104.0.1:55172 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:08:39.941 00:00:10.159 TCP 1.101.0.1:3000 -> 22.102.0.1:51386 10 6452 1 2025-08-11 09:08:42.803 00:00:10.380 TCP 23.104.0.1:58834 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:09:40.136 00:00:10.310 TCP 1.101.0.1:3000 -> 22.102.0.1:33356 10 6452 1 2025-08-11 09:09:43.221 00:00:10.371 TCP 23.104.0.1:44978 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:10:40.487 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:49484 10 6452 1 2025-08-11 09:10:43.628 00:00:10.365 TCP 23.104.0.1:59438 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:07:09.577 00:05:00.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 09:11:28.226 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 09:11:28.194 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 09:11:40.660 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40118 10 6452 1 2025-08-11 09:11:44.032 00:00:10.365 TCP 23.104.0.1:46314 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:12:40.833 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:47668 10 6452 1 2025-08-11 09:12:44.436 00:00:10.367 TCP 23.104.0.1:47316 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:09:09.578 00:05:00.762 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 09:13:41.014 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:33328 10 6452 1 2025-08-11 09:13:44.840 00:00:10.378 TCP 23.104.0.1:41368 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:14:41.184 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:45258 10 6452 1 2025-08-11 09:14:45.260 00:00:10.368 TCP 23.104.0.1:43444 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:15:41.406 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:47212 10 6452 1 2025-08-11 09:15:45.665 00:00:10.368 TCP 23.104.0.1:44736 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:16:28.445 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 09:16:28.229 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 09:16:41.622 00:00:10.141 TCP 1.101.0.1:3000 -> 22.102.0.1:42830 10 6452 1 2025-08-11 09:16:46.097 00:00:10.370 TCP 23.104.0.1:35244 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:13:09.581 00:05:00.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 09:17:41.797 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:51436 10 6452 1 2025-08-11 09:17:46.504 00:00:10.323 TCP 23.104.0.1:58234 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:18:42.019 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:54742 10 6452 1 2025-08-11 09:18:46.867 00:00:10.369 TCP 23.104.0.1:38954 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:15:09.584 00:05:00.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 09:19:42.234 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59304 10 6452 1 2025-08-11 09:19:47.276 00:00:10.363 TCP 23.104.0.1:60708 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:20:42.447 00:00:10.233 TCP 1.101.0.1:3000 -> 22.102.0.1:44142 10 6452 1 2025-08-11 09:20:47.681 00:00:10.375 TCP 23.104.0.1:53018 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:21:28.330 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 09:21:28.349 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 09:21:42.717 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42958 10 6452 1 2025-08-11 09:21:48.103 00:00:10.367 TCP 23.104.0.1:39772 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:22:42.928 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:51372 10 6452 1 2025-08-11 09:22:48.510 00:00:10.366 TCP 23.104.0.1:51880 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:19:09.582 00:05:00.763 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 09:23:43.169 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:33138 10 6452 1 2025-08-11 09:23:48.915 00:00:10.360 TCP 23.104.0.1:57804 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:24:43.386 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58590 10 6452 1 2025-08-11 09:24:49.326 00:00:10.368 TCP 23.104.0.1:45340 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:21:09.584 00:05:00.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 09:25:43.601 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:60394 10 6452 1 2025-08-11 09:25:49.733 00:00:10.374 TCP 23.104.0.1:52106 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:26:28.555 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 09:26:28.405 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 09:26:43.770 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:57188 10 6452 1 2025-08-11 09:26:50.149 00:00:10.319 TCP 23.104.0.1:52176 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:27:43.983 00:00:10.654 TCP 1.101.0.1:3000 -> 22.102.0.1:54770 10 6452 1 2025-08-11 09:27:50.506 00:00:10.382 TCP 23.104.0.1:59078 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:28:44.670 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:37012 10 6452 1 2025-08-11 09:28:50.913 00:00:10.364 TCP 23.104.0.1:43536 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:25:09.582 00:05:00.765 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 09:29:44.838 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44576 10 6452 1 2025-08-11 09:29:51.317 00:00:10.369 TCP 23.104.0.1:42488 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:30:45.016 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:49182 10 6452 1 2025-08-11 09:30:51.725 00:00:10.370 TCP 23.104.0.1:59326 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:27:09.586 00:05:00.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 09:31:28.715 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 09:31:28.730 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 09:31:45.226 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48926 10 6452 1 2025-08-11 09:31:52.131 00:00:10.365 TCP 23.104.0.1:59058 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:32:45.443 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59940 10 6452 1 2025-08-11 09:32:52.532 00:00:10.362 TCP 23.104.0.1:42582 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:33:45.658 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:36354 10 6452 1 2025-08-11 09:33:52.933 00:00:10.372 TCP 23.104.0.1:33398 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:34:45.888 00:00:10.274 TCP 1.101.0.1:3000 -> 22.102.0.1:60544 10 6452 1 2025-08-11 09:34:53.350 00:00:10.363 TCP 23.104.0.1:45468 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:31:09.585 00:05:00.764 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 09:35:46.201 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:45558 10 6452 1 2025-08-11 09:35:53.756 00:00:10.335 TCP 23.104.0.1:50286 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:36:28.681 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 09:36:28.748 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 09:36:46.407 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:39780 10 6452 1 2025-08-11 09:36:54.125 00:00:10.323 TCP 23.104.0.1:60542 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:33:09.589 00:05:00.759 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 09:37:46.630 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56990 10 6452 1 2025-08-11 09:37:54.490 00:00:10.372 TCP 23.104.0.1:59992 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:38:46.850 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:33978 10 6452 1 2025-08-11 09:38:54.897 00:00:10.373 TCP 23.104.0.1:35972 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:39:47.082 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:35148 10 6452 1 2025-08-11 09:39:55.309 00:00:10.370 TCP 23.104.0.1:36460 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:40:47.305 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:46022 10 6452 1 2025-08-11 09:40:55.713 00:00:10.394 TCP 23.104.0.1:46434 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:37:09.586 00:05:00.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 09:41:28.782 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 09:41:28.775 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 09:41:47.529 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47648 10 6452 1 2025-08-11 09:41:56.149 00:00:10.376 TCP 23.104.0.1:57550 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:42:47.746 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60128 10 6452 1 2025-08-11 09:42:56.557 00:00:10.322 TCP 23.104.0.1:60878 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:39:09.590 00:05:00.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 09:43:47.970 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:44592 10 6452 1 2025-08-11 09:43:56.915 00:00:10.368 TCP 23.104.0.1:48716 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:44:48.200 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:57588 10 6452 1 2025-08-11 09:44:57.314 00:00:10.363 TCP 23.104.0.1:45086 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:45:48.424 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:40932 10 6452 1 2025-08-11 09:45:57.721 00:00:10.371 TCP 23.104.0.1:60716 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:46:28.909 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 09:46:28.663 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 09:46:48.647 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:41136 10 6452 1 2025-08-11 09:46:58.129 00:00:10.325 TCP 23.104.0.1:34934 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:43:09.588 00:05:00.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 09:47:48.883 00:00:10.312 TCP 1.101.0.1:3000 -> 22.102.0.1:43484 10 6452 1 2025-08-11 09:47:58.492 00:00:10.325 TCP 23.104.0.1:34966 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:48:49.235 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:58536 10 6452 1 2025-08-11 09:45:09.591 00:05:00.760 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 09:48:58.859 00:00:10.331 TCP 23.104.0.1:60702 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:49:49.462 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:54844 10 6452 1 2025-08-11 09:49:59.226 00:00:10.372 TCP 23.104.0.1:50854 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:50:49.669 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45368 10 6452 1 2025-08-11 09:50:59.638 00:00:10.370 TCP 23.104.0.1:50010 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:51:28.925 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 09:51:28.957 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 09:51:49.886 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:46500 10 6452 1 2025-08-11 09:52:00.058 00:00:10.362 TCP 23.104.0.1:51558 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:52:50.081 00:00:10.222 TCP 1.101.0.1:3000 -> 22.102.0.1:57706 11 6504 1 2025-08-11 09:53:00.459 00:00:10.364 TCP 23.104.0.1:47848 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:49:09.591 00:05:00.766 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 09:53:50.344 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:46542 10 6452 1 2025-08-11 09:54:00.862 00:00:10.370 TCP 23.104.0.1:46558 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:54:50.512 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:34410 10 6452 1 2025-08-11 09:51:09.594 00:05:00.761 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 09:55:01.278 00:00:10.329 TCP 23.104.0.1:44472 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:55:50.724 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49058 10 6452 1 2025-08-11 09:56:01.644 00:00:10.364 TCP 23.104.0.1:51886 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:56:29.058 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 09:56:28.899 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 09:56:50.896 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:50928 10 6452 1 2025-08-11 09:57:02.063 00:00:10.373 TCP 23.104.0.1:37778 -> 1.101.0.1:3000 11 1507 1 2025-08-11 09:57:51.124 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:55688 10 6452 1 2025-08-11 09:58:02.476 00:00:10.634 TCP 23.104.0.1:41150 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490441, total packets: 1552, avg bps: 1036, avg pps: 0, avg bpp: 316 Time window: 2025-08-11 08:55:09 - 2025-08-11 09:58:13 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0025s User: 0.0025s Wall: 0.0042s flows/second: 38849.5 Runtime: 0.0042s