Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-11 10:55:09.609 00:05:00.776 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 10:59:04.485 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37836 10 6452 1 2025-08-11 10:59:27.623 00:00:10.364 TCP 23.104.0.1:42182 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:00:04.698 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:51438 10 6452 1 2025-08-11 11:00:28.028 00:00:10.319 TCP 23.104.0.1:48364 -> 1.101.0.1:3000 11 1507 1 2025-08-11 10:57:09.612 00:05:00.771 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 11:01:04.910 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:47028 10 6452 1 2025-08-11 11:01:30.453 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 11:01:30.364 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 11:01:28.393 00:00:10.365 TCP 23.104.0.1:56852 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:02:05.128 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:50368 10 6452 1 2025-08-11 11:02:28.798 00:00:10.367 TCP 23.104.0.1:58828 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:03:05.304 00:00:10.271 TCP 1.101.0.1:3000 -> 22.102.0.1:56972 10 6452 1 2025-08-11 11:03:29.201 00:00:10.367 TCP 23.104.0.1:40014 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:04:05.617 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:37246 10 6452 1 2025-08-11 11:04:29.606 00:00:10.362 TCP 23.104.0.1:52548 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:01:09.609 00:05:00.793 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 11:05:05.800 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58980 10 6452 1 2025-08-11 11:05:30.003 00:00:10.320 TCP 23.104.0.1:54644 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:06:06.012 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49574 10 6452 1 2025-08-11 11:06:30.907 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 11:06:30.581 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 11:06:30.364 00:00:10.359 TCP 23.104.0.1:37332 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:03:09.612 00:05:00.789 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 11:07:06.221 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48306 10 6452 1 2025-08-11 11:07:30.764 00:00:10.329 TCP 23.104.0.1:40246 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:08:06.432 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:36476 10 6452 1 2025-08-11 11:08:31.140 00:00:10.366 TCP 23.104.0.1:43610 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:09:06.649 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:41330 10 6452 1 2025-08-11 11:09:31.547 00:00:10.362 TCP 23.104.0.1:38458 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:10:06.858 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:48976 10 6452 1 2025-08-11 11:10:31.948 00:00:10.368 TCP 23.104.0.1:51988 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:07:09.612 00:05:00.792 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 11:11:07.043 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:38286 10 6452 1 2025-08-11 11:11:30.635 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 11:11:30.572 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 11:11:32.368 00:00:10.373 TCP 23.104.0.1:43746 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:12:07.253 00:00:10.146 TCP 1.101.0.1:3000 -> 22.102.0.1:42188 10 6452 1 2025-08-11 11:12:32.781 00:00:10.374 TCP 23.104.0.1:37276 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:09:09.616 00:05:00.787 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 11:13:07.443 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:52596 10 6452 1 2025-08-11 11:13:33.195 00:00:10.327 TCP 23.104.0.1:41882 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:14:07.658 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:38082 10 6452 1 2025-08-11 11:14:33.560 00:00:10.363 TCP 23.104.0.1:51780 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:15:07.886 00:00:10.237 TCP 1.101.0.1:3000 -> 22.102.0.1:34662 10 6452 1 2025-08-11 11:15:33.964 00:00:10.372 TCP 23.104.0.1:43878 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:16:08.174 00:00:10.200 TCP 1.101.0.1:3000 -> 22.102.0.1:38614 10 6452 1 2025-08-11 11:16:30.804 00:00:00.025 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 11:16:30.749 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 11:16:34.374 00:00:10.361 TCP 23.104.0.1:46330 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:13:09.623 00:05:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 11:17:08.406 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:39228 10 6452 1 2025-08-11 11:17:34.771 00:00:15.676 TCP 23.104.0.1:55492 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:18:08.625 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58016 10 6452 1 2025-08-11 11:18:40.489 00:00:10.367 TCP 23.104.0.1:44468 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:15:09.624 00:05:00.781 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 11:19:08.834 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44160 10 6452 1 2025-08-11 11:19:40.895 00:00:10.369 TCP 23.104.0.1:44012 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:20:09.073 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:52674 10 6452 1 2025-08-11 11:20:41.303 00:00:10.360 TCP 23.104.0.1:38196 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:21:09.283 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47204 10 6452 1 2025-08-11 11:21:31.154 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 11:21:30.977 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 11:21:41.699 00:00:10.328 TCP 23.104.0.1:36284 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:22:09.497 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38778 10 6452 1 2025-08-11 11:22:42.090 00:00:10.363 TCP 23.104.0.1:52758 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:19:09.622 00:05:00.785 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 11:23:09.714 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:44782 10 6452 1 2025-08-11 11:23:42.492 00:00:10.324 TCP 23.104.0.1:45886 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:24:09.926 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44422 12 10367 1 2025-08-11 11:24:42.859 00:00:10.497 TCP 23.104.0.1:49414 -> 1.101.0.1:3000 15 1926 1 2025-08-11 11:21:09.625 00:05:00.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 11:25:10.137 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34502 10 6452 1 2025-08-11 11:25:43.394 00:00:10.363 TCP 23.104.0.1:44570 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:26:10.355 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:36754 10 6452 1 2025-08-11 11:26:30.743 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 11:26:30.826 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 11:26:43.796 00:00:10.366 TCP 23.104.0.1:59914 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:27:10.562 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:36532 10 6452 1 2025-08-11 11:27:44.204 00:00:10.366 TCP 23.104.0.1:38600 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:28:10.772 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:41594 10 6452 1 2025-08-11 11:28:44.612 00:00:10.364 TCP 23.104.0.1:47738 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:25:09.624 00:05:00.783 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 11:29:10.983 00:00:10.218 TCP 1.101.0.1:3000 -> 22.102.0.1:54838 12 10365 1 2025-08-11 11:29:45.015 00:00:10.397 TCP 23.104.0.1:43588 -> 1.101.0.1:3000 15 1926 1 2025-08-11 11:30:11.236 00:00:10.150 TCP 1.101.0.1:3000 -> 22.102.0.1:38582 10 6452 1 2025-08-11 11:30:45.452 00:00:10.853 TCP 23.104.0.1:39516 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:27:09.626 00:05:00.779 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 11:31:11.445 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:43246 10 6452 1 2025-08-11 11:31:31.049 00:00:00.040 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 11:31:31.013 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 11:31:46.343 00:00:10.323 TCP 23.104.0.1:52118 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:32:11.658 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:50198 10 6452 1 2025-08-11 11:32:46.705 00:00:10.367 TCP 23.104.0.1:43932 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:33:11.871 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34486 10 6452 1 2025-08-11 11:33:47.111 00:00:10.364 TCP 23.104.0.1:49628 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:34:12.086 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:32984 10 6452 1 2025-08-11 11:34:47.516 00:00:10.367 TCP 23.104.0.1:57662 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:31:09.625 00:05:00.784 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 11:35:12.300 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56702 10 6452 1 2025-08-11 11:35:47.919 00:00:10.378 TCP 23.104.0.1:53922 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:36:12.511 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59800 10 6452 1 2025-08-11 11:36:31.088 00:00:00.049 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 11:36:31.037 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 11:36:48.335 00:00:10.325 TCP 23.104.0.1:53118 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:33:09.629 00:05:00.778 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 11:37:12.728 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:48400 10 6452 1 2025-08-11 11:37:48.701 00:00:10.367 TCP 23.104.0.1:33246 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:38:12.954 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:37580 10 6452 1 2025-08-11 11:38:49.110 00:00:10.365 TCP 23.104.0.1:45628 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:39:13.189 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54500 10 6452 1 2025-08-11 11:39:49.516 00:00:10.325 TCP 23.104.0.1:54338 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:40:13.404 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:33270 10 6452 1 2025-08-11 11:40:49.885 00:00:10.387 TCP 23.104.0.1:52410 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:37:09.629 00:05:00.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 11:41:13.621 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:40130 10 6452 1 2025-08-11 11:41:31.408 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 11:41:31.345 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 11:41:50.310 00:00:10.326 TCP 23.104.0.1:58530 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:42:13.844 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:49802 10 6452 1 2025-08-11 11:42:50.678 00:00:10.331 TCP 23.104.0.1:41016 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:39:09.633 00:05:00.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 11:43:14.078 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:41558 10 6452 1 2025-08-11 11:43:51.057 00:00:10.325 TCP 23.104.0.1:40836 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:44:14.269 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:48738 10 6452 1 2025-08-11 11:44:51.420 00:00:10.360 TCP 23.104.0.1:32796 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:45:14.485 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:58464 10 6452 1 2025-08-11 11:45:51.820 00:00:10.365 TCP 23.104.0.1:58966 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:46:14.701 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:52088 10 6452 1 2025-08-11 11:46:31.097 00:00:00.046 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 11:46:31.315 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 11:46:52.218 00:00:10.369 TCP 23.104.0.1:54600 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:43:09.629 00:05:00.782 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 11:47:14.872 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:36106 10 6452 1 2025-08-11 11:47:52.630 00:00:10.373 TCP 23.104.0.1:55590 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:48:15.095 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:39966 10 6452 1 2025-08-11 11:48:53.049 00:00:10.364 TCP 23.104.0.1:45396 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:45:09.634 00:05:00.776 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 11:49:15.308 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:43890 10 6452 1 2025-08-11 11:49:53.451 00:00:10.362 TCP 23.104.0.1:37502 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:50:15.483 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54202 10 6452 1 2025-08-11 11:50:53.847 00:00:10.379 TCP 23.104.0.1:37056 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:51:15.698 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:47210 10 6452 1 2025-08-11 11:51:31.344 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 11:51:31.416 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 11:51:54.264 00:00:10.368 TCP 23.104.0.1:41348 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:52:15.935 00:00:10.210 TCP 1.101.0.1:3000 -> 22.102.0.1:55732 10 6452 1 2025-08-11 11:52:54.679 00:00:10.325 TCP 23.104.0.1:33974 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:49:09.633 00:05:00.781 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-11 11:53:16.185 00:00:16.473 TCP 1.101.0.1:3000 -> 22.102.0.1:58968 10 6452 1 2025-08-11 11:53:55.048 00:00:10.437 TCP 23.104.0.1:59532 -> 1.101.0.1:3000 15 1926 1 2025-08-11 11:54:22.706 00:00:10.161 TCP 1.101.0.1:3000 -> 22.102.0.1:58240 12 10367 1 2025-08-11 11:54:55.525 00:00:10.360 TCP 23.104.0.1:44904 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:51:09.638 00:05:00.775 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-11 11:55:22.906 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:55210 10 6452 1 2025-08-11 11:55:55.924 00:00:10.388 TCP 23.104.0.1:46160 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:56:31.562 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-11 11:56:31.484 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-11 11:56:23.131 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:60222 10 6452 1 2025-08-11 11:56:56.355 00:00:10.365 TCP 23.104.0.1:49682 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:57:23.360 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59822 10 6452 1 2025-08-11 11:57:56.762 00:00:10.344 TCP 23.104.0.1:51486 -> 1.101.0.1:3000 11 1507 1 2025-08-11 11:58:23.581 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:46646 10 6452 1 Summary: total flows: 163, total bytes: 509841, total packets: 1579, avg bps: 1072, avg pps: 0, avg bpp: 322 Time window: 2025-08-11 10:55:09 - 2025-08-11 11:58:33 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0016s Wall: 0.0021s flows/second: 77399.7 Runtime: 0.0021s