Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-12 05:55:09.976 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 05:59:04.778 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:52132 10 6452 1 2025-08-12 05:59:34.232 00:00:10.326 TCP 23.104.0.1:42002 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:00:05.002 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:33546 10 6452 1 2025-08-12 06:00:34.596 00:00:10.359 TCP 23.104.0.1:52592 -> 1.101.0.1:3000 11 1507 1 2025-08-12 05:57:09.979 00:05:00.860 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 06:01:05.181 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40650 10 6452 1 2025-08-12 06:01:34.994 00:00:10.369 TCP 23.104.0.1:52814 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:01:53.298 00:00:00.018 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 06:01:53.325 00:00:00.020 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 06:02:05.394 00:00:10.142 TCP 1.101.0.1:3000 -> 22.102.0.1:56464 10 6452 1 2025-08-12 06:02:35.404 00:00:10.368 TCP 23.104.0.1:58928 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:03:05.573 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:59266 10 6452 1 2025-08-12 06:03:35.810 00:00:10.332 TCP 23.104.0.1:60438 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:04:05.785 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:45256 10 6452 1 2025-08-12 06:04:36.183 00:00:10.363 TCP 23.104.0.1:56556 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:01:09.980 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 06:05:06.015 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:52532 10 6452 1 2025-08-12 06:05:36.582 00:00:10.372 TCP 23.104.0.1:40768 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:06:06.187 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:50976 10 6452 1 2025-08-12 06:06:36.995 00:00:10.362 TCP 23.104.0.1:46300 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:06:53.272 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 06:06:53.281 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 06:03:09.982 00:05:00.855 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 06:07:06.401 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:57620 10 6452 1 2025-08-12 06:07:37.396 00:00:10.361 TCP 23.104.0.1:51294 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:08:06.577 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50914 10 6452 1 2025-08-12 06:08:37.797 00:00:10.366 TCP 23.104.0.1:37086 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:09:06.786 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46898 10 6452 1 2025-08-12 06:09:38.202 00:00:10.369 TCP 23.104.0.1:37354 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:10:06.959 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:36790 12 6556 1 2025-08-12 06:10:38.606 00:00:10.325 TCP 23.104.0.1:45812 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:07:09.981 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 06:11:07.188 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:45720 10 6452 1 2025-08-12 06:11:38.971 00:00:10.377 TCP 23.104.0.1:32912 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:11:53.493 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 06:11:53.272 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 06:12:07.398 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:36926 10 6452 1 2025-08-12 06:12:39.392 00:00:10.328 TCP 23.104.0.1:47140 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:09:09.985 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 06:13:07.573 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39990 10 6452 1 2025-08-12 06:13:39.758 00:00:10.387 TCP 23.104.0.1:43986 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:14:07.781 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41180 10 6452 1 2025-08-12 06:14:40.199 00:00:10.365 TCP 23.104.0.1:40746 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:15:07.993 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:46992 10 6452 1 2025-08-12 06:15:40.602 00:00:10.381 TCP 23.104.0.1:42512 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:16:08.222 00:00:10.130 TCP 1.101.0.1:3000 -> 22.102.0.1:59324 10 6452 1 2025-08-12 06:16:41.028 00:00:10.369 TCP 23.104.0.1:36468 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:16:53.483 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 06:16:53.553 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 06:13:09.982 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 06:17:08.392 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:45906 10 6452 1 2025-08-12 06:17:41.434 00:00:10.377 TCP 23.104.0.1:45198 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:18:08.566 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53254 10 6452 1 2025-08-12 06:18:41.842 00:00:10.392 TCP 23.104.0.1:60592 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:15:09.987 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 06:19:08.773 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:47604 10 6452 1 2025-08-12 06:19:42.273 00:00:10.370 TCP 23.104.0.1:57970 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:20:08.988 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:57666 10 6452 1 2025-08-12 06:20:42.683 00:00:10.370 TCP 23.104.0.1:57842 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:21:09.213 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:48718 10 6452 1 2025-08-12 06:21:53.825 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 06:21:43.099 00:00:10.324 TCP 23.104.0.1:45688 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:21:53.495 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 06:22:09.437 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:59998 10 6452 1 2025-08-12 06:22:43.457 00:00:10.364 TCP 23.104.0.1:34006 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:19:09.987 00:05:00.856 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 06:23:09.608 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:58970 10 6452 1 2025-08-12 06:23:43.860 00:00:10.375 TCP 23.104.0.1:53584 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:24:09.832 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35522 10 6452 1 2025-08-12 06:24:44.271 00:00:10.371 TCP 23.104.0.1:60028 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:21:09.988 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 06:25:10.070 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:35714 10 6452 1 2025-08-12 06:25:44.682 00:00:10.322 TCP 23.104.0.1:40176 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:26:10.242 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57306 10 6452 1 2025-08-12 06:26:53.766 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 06:26:53.695 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 06:26:45.057 00:00:10.369 TCP 23.104.0.1:55434 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:27:10.453 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:51872 10 6452 1 2025-08-12 06:27:45.457 00:00:10.320 TCP 23.104.0.1:43216 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:28:10.629 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:39628 10 6452 1 2025-08-12 06:28:45.811 00:00:10.368 TCP 23.104.0.1:49260 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:25:09.987 00:05:00.857 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 06:29:10.841 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:33966 10 6452 1 2025-08-12 06:29:46.219 00:00:10.364 TCP 23.104.0.1:57710 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:30:11.082 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46376 10 6452 1 2025-08-12 06:30:46.620 00:00:10.366 TCP 23.104.0.1:38762 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:27:09.991 00:05:00.852 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 06:31:11.293 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:48106 10 6452 1 2025-08-12 06:31:53.926 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 06:31:54.020 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 06:31:47.025 00:00:10.362 TCP 23.104.0.1:58770 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:32:11.467 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:53610 10 6452 1 2025-08-12 06:32:47.426 00:00:10.419 TCP 23.104.0.1:60708 -> 1.101.0.1:3000 12 1559 1 2025-08-12 06:33:11.676 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:48178 10 6452 1 2025-08-12 06:33:47.881 00:00:10.371 TCP 23.104.0.1:60122 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:34:11.891 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:44368 10 6452 1 2025-08-12 06:34:48.289 00:00:10.360 TCP 23.104.0.1:55446 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:31:09.990 00:05:00.859 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 06:35:12.114 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:41084 10 6452 1 2025-08-12 06:35:48.688 00:00:10.362 TCP 23.104.0.1:55990 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:36:12.326 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:43854 10 6452 1 2025-08-12 06:36:54.001 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 06:36:53.849 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 06:36:49.108 00:00:10.371 TCP 23.104.0.1:41564 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:33:09.991 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 06:37:12.542 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:55816 10 6452 1 2025-08-12 06:37:49.515 00:00:10.367 TCP 23.104.0.1:54728 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:38:12.774 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:59468 10 6452 1 2025-08-12 06:38:49.931 00:00:10.392 TCP 23.104.0.1:35998 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:39:12.961 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:53638 12 6556 1 2025-08-12 06:39:50.364 00:00:10.397 TCP 23.104.0.1:55858 -> 1.101.0.1:3000 15 1926 1 2025-08-12 06:40:13.189 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:49320 12 10367 1 2025-08-12 06:40:50.797 00:00:10.364 TCP 23.104.0.1:34328 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:37:09.991 00:05:00.858 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 06:41:13.428 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:46158 10 6452 1 2025-08-12 06:41:53.975 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 06:41:53.721 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 06:41:51.201 00:00:10.371 TCP 23.104.0.1:57436 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:42:13.598 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:44010 10 6452 1 2025-08-12 06:42:51.606 00:00:10.419 TCP 23.104.0.1:59682 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:39:09.993 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 06:43:13.772 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:46624 10 6452 1 2025-08-12 06:43:52.095 00:00:10.360 TCP 23.104.0.1:52146 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:44:13.948 00:00:10.162 TCP 1.101.0.1:3000 -> 22.102.0.1:43372 10 6452 1 2025-08-12 06:44:52.496 00:00:10.364 TCP 23.104.0.1:34882 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:45:14.146 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:55156 10 6452 1 2025-08-12 06:45:52.921 00:00:10.391 TCP 23.104.0.1:33978 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:46:14.327 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38656 10 6452 1 2025-08-12 06:46:54.148 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 06:46:54.021 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 06:46:53.357 00:00:10.362 TCP 23.104.0.1:35608 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:43:09.991 00:05:00.860 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 06:47:14.499 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:53970 10 6452 1 2025-08-12 06:47:53.758 00:00:10.368 TCP 23.104.0.1:33620 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:48:14.709 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:43592 10 6452 1 2025-08-12 06:48:54.165 00:00:10.369 TCP 23.104.0.1:51770 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:45:09.995 00:05:00.854 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 06:49:14.933 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:60786 10 6452 1 2025-08-12 06:49:54.569 00:00:11.681 TCP 23.104.0.1:58498 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:50:15.178 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57930 10 6452 1 2025-08-12 06:50:56.329 00:00:10.363 TCP 23.104.0.1:39842 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:51:15.396 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:52772 10 6452 1 2025-08-12 06:51:54.341 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 06:51:54.161 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 06:51:56.730 00:00:10.368 TCP 23.104.0.1:45342 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:52:15.615 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:52874 10 6452 1 2025-08-12 06:52:57.138 00:00:10.757 TCP 23.104.0.1:57532 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:49:09.992 00:05:00.861 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-12 06:53:15.788 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:56856 10 6452 1 2025-08-12 06:53:57.936 00:00:10.392 TCP 23.104.0.1:39292 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:54:16.000 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:51622 10 6452 1 2025-08-12 06:51:09.997 00:05:00.853 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-12 06:54:58.358 00:00:10.320 TCP 23.104.0.1:56608 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:55:16.223 00:00:10.165 TCP 1.101.0.1:3000 -> 22.102.0.1:42622 10 6452 1 2025-08-12 06:55:58.719 00:00:10.327 TCP 23.104.0.1:34570 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:56:16.430 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:59630 10 6452 1 2025-08-12 06:56:54.379 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-12 06:56:54.258 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-12 06:56:59.106 00:00:10.322 TCP 23.104.0.1:41474 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:57:16.646 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44782 10 6452 1 2025-08-12 06:57:59.470 00:00:10.360 TCP 23.104.0.1:51282 -> 1.101.0.1:3000 11 1507 1 2025-08-12 06:58:16.859 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:49260 10 6452 1 Summary: total flows: 163, total bytes: 501435, total packets: 1572, avg bps: 1056, avg pps: 0, avg bpp: 318 Time window: 2025-08-12 05:55:09 - 2025-08-12 06:58:27 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0024s User: 0.0016s Wall: 0.0021s flows/second: 79312.2 Runtime: 0.0021s