Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-18 14:55:13.095 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 14:59:33.769 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:55266 10 6452 1 2025-08-18 14:59:41.243 00:00:10.366 TCP 23.104.0.1:54234 -> 1.101.0.1:3000 11 1507 1 2025-08-18 14:59:57.482 00:00:00.020 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 14:59:57.627 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 14:56:13.098 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 15:00:33.984 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:42502 10 6452 1 2025-08-18 15:00:41.645 00:00:10.367 TCP 23.104.0.1:45016 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:01:34.203 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:34208 10 6452 1 2025-08-18 15:01:42.052 00:00:10.327 TCP 23.104.0.1:49536 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:02:34.423 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43418 10 6452 1 2025-08-18 15:02:42.422 00:00:10.377 TCP 23.104.0.1:35568 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:03:34.645 00:00:10.145 TCP 1.101.0.1:3000 -> 22.102.0.1:41910 10 6452 1 2025-08-18 15:03:42.839 00:00:10.395 TCP 23.104.0.1:54864 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:04:34.830 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:40940 10 6452 1 2025-08-18 15:04:43.271 00:00:10.371 TCP 23.104.0.1:46632 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:04:57.567 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 15:04:57.376 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 15:01:13.096 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 15:05:35.059 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:60048 10 6452 1 2025-08-18 15:05:43.682 00:00:10.372 TCP 23.104.0.1:33948 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:02:13.099 00:05:00.964 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 15:06:35.271 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:37454 10 6452 1 2025-08-18 15:06:44.102 00:00:10.366 TCP 23.104.0.1:41240 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:07:35.442 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38238 10 6452 1 2025-08-18 15:07:44.504 00:00:10.369 TCP 23.104.0.1:37170 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:08:35.657 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:53368 10 6452 1 2025-08-18 15:08:44.914 00:00:10.377 TCP 23.104.0.1:56090 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:09:35.826 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:44826 10 6452 1 2025-08-18 15:09:45.333 00:00:10.360 TCP 23.104.0.1:33652 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:09:57.639 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 15:09:57.562 00:00:00.030 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 15:10:36.037 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:42764 10 6452 1 2025-08-18 15:10:45.734 00:00:10.321 TCP 23.104.0.1:60250 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:07:13.097 00:05:00.969 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 15:11:36.251 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:34456 10 6452 1 2025-08-18 15:11:46.104 00:00:10.366 TCP 23.104.0.1:60384 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:08:13.099 00:05:00.965 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 15:12:36.469 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:49524 10 6452 1 2025-08-18 15:12:46.513 00:00:10.323 TCP 23.104.0.1:58946 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:13:36.682 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:43234 10 6452 1 2025-08-18 15:13:46.876 00:00:10.364 TCP 23.104.0.1:54650 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:14:36.897 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:60522 10 6452 1 2025-08-18 15:14:57.619 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 15:14:57.731 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 15:14:47.279 00:00:10.373 TCP 23.104.0.1:45462 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:15:37.112 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:54914 10 6452 1 2025-08-18 15:15:47.689 00:00:10.368 TCP 23.104.0.1:38662 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:16:37.327 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:32930 10 6452 1 2025-08-18 15:16:48.103 00:00:10.323 TCP 23.104.0.1:34592 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:13:13.099 00:05:00.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 15:17:37.546 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:56312 10 6452 1 2025-08-18 15:17:48.463 00:00:10.329 TCP 23.104.0.1:36582 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:14:13.100 00:05:00.974 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 15:18:37.757 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:60500 10 6452 1 2025-08-18 15:18:48.828 00:00:10.391 TCP 23.104.0.1:58966 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:19:37.969 00:00:10.160 TCP 1.101.0.1:3000 -> 22.102.0.1:35602 10 6452 1 2025-08-18 15:19:49.251 00:00:10.367 TCP 23.104.0.1:47308 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:19:57.984 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 15:19:57.577 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 15:20:38.168 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:50740 10 6452 1 2025-08-18 15:20:49.660 00:00:10.367 TCP 23.104.0.1:41504 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:21:38.386 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:55950 10 6452 1 2025-08-18 15:21:50.091 00:00:10.361 TCP 23.104.0.1:39968 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:22:38.593 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:56182 10 6452 1 2025-08-18 15:22:50.489 00:00:10.376 TCP 23.104.0.1:60038 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:19:13.098 00:05:00.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 15:23:38.808 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58676 10 6452 1 2025-08-18 15:23:50.909 00:00:10.361 TCP 23.104.0.1:40756 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:20:13.101 00:05:00.974 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 15:24:38.981 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:50036 10 6452 1 2025-08-18 15:24:57.785 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 15:24:51.310 00:00:10.325 TCP 23.104.0.1:54682 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:24:57.687 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 15:25:39.210 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55960 10 6452 1 2025-08-18 15:25:51.680 00:00:10.370 TCP 23.104.0.1:59434 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:26:39.382 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:56334 10 6452 1 2025-08-18 15:26:52.108 00:00:10.363 TCP 23.104.0.1:40200 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:27:39.557 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:43042 10 6452 1 2025-08-18 15:27:52.513 00:00:10.380 TCP 23.104.0.1:38438 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:28:39.732 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58220 10 6452 1 2025-08-18 15:28:52.933 00:00:10.381 TCP 23.104.0.1:55548 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:25:13.099 00:05:00.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 15:29:39.944 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:37444 10 6452 1 2025-08-18 15:29:58.042 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 15:29:58.026 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 15:29:53.355 00:00:10.359 TCP 23.104.0.1:54454 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:26:13.102 00:05:00.974 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 15:30:40.177 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:48264 10 6452 1 2025-08-18 15:30:53.754 00:00:10.388 TCP 23.104.0.1:39822 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:31:40.353 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:47304 10 6452 1 2025-08-18 15:31:54.180 00:00:10.368 TCP 23.104.0.1:57214 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:32:40.529 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:32936 10 6452 1 2025-08-18 15:32:54.585 00:00:10.363 TCP 23.104.0.1:45570 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:33:40.738 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:47972 10 6452 1 2025-08-18 15:33:54.988 00:00:10.366 TCP 23.104.0.1:48928 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:34:40.953 00:00:10.164 TCP 1.101.0.1:3000 -> 22.102.0.1:41594 10 6452 1 2025-08-18 15:34:57.960 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 15:34:57.834 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 15:34:55.389 00:00:10.365 TCP 23.104.0.1:45902 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:31:13.101 00:05:00.978 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 15:35:41.156 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:36526 10 6452 1 2025-08-18 15:35:55.791 00:00:10.319 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:32:13.104 00:05:00.974 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 15:36:41.384 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45556 10 6452 1 2025-08-18 15:36:56.149 00:00:10.322 TCP 23.104.0.1:51612 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:37:41.602 00:00:10.194 TCP 1.101.0.1:3000 -> 22.102.0.1:37048 10 6452 1 2025-08-18 15:37:56.507 00:00:10.326 TCP 23.104.0.1:36050 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:38:41.835 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:59808 10 6452 1 2025-08-18 15:38:56.870 00:00:10.367 TCP 23.104.0.1:44438 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:39:42.076 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:38884 10 6452 1 2025-08-18 15:39:58.167 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 15:39:58.220 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 15:39:57.272 00:00:10.366 TCP 23.104.0.1:58108 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:40:42.288 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47374 10 6452 1 2025-08-18 15:40:57.686 00:00:10.367 TCP 23.104.0.1:33842 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:37:13.101 00:05:00.978 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 15:41:42.500 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:48512 10 6452 1 2025-08-18 15:41:58.105 00:00:10.365 TCP 23.104.0.1:52976 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:38:13.106 00:05:00.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 15:42:42.715 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:55434 10 6452 1 2025-08-18 15:42:58.506 00:00:10.367 TCP 23.104.0.1:33470 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:43:42.926 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:56218 10 6452 1 2025-08-18 15:43:58.913 00:00:10.366 TCP 23.104.0.1:34412 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:44:57.863 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 15:44:43.169 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:47444 10 6452 1 2025-08-18 15:44:58.214 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 15:44:59.322 00:00:10.362 TCP 23.104.0.1:44248 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:45:43.345 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:38818 10 6452 1 2025-08-18 15:45:59.720 00:00:10.371 TCP 23.104.0.1:41058 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:46:43.517 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56570 10 6452 1 2025-08-18 15:47:00.131 00:00:10.360 TCP 23.104.0.1:60520 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:43:13.102 00:05:00.978 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 15:47:43.731 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:38076 10 6452 1 2025-08-18 15:48:00.529 00:00:10.366 TCP 23.104.0.1:47460 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:44:13.105 00:05:00.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 15:48:43.904 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:38712 10 6452 1 2025-08-18 15:49:00.934 00:00:10.376 TCP 23.104.0.1:49580 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:49:44.114 00:00:10.274 TCP 1.101.0.1:3000 -> 22.102.0.1:32796 10 6452 1 2025-08-18 15:49:58.248 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 15:49:58.339 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 15:50:01.355 00:00:10.333 TCP 23.104.0.1:39070 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:50:44.427 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:39794 10 6452 1 2025-08-18 15:51:01.731 00:00:10.328 TCP 23.104.0.1:47594 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:51:44.598 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:48910 10 6452 1 2025-08-18 15:52:02.107 00:00:10.361 TCP 23.104.0.1:45628 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:52:44.813 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:55000 10 6452 1 2025-08-18 15:49:13.103 00:05:00.979 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-18 15:53:02.505 00:00:10.361 TCP 23.104.0.1:51438 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:53:44.993 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:39188 10 6452 1 2025-08-18 15:50:13.106 00:05:00.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-18 15:54:02.906 00:00:10.371 TCP 23.104.0.1:59954 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:54:45.218 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:56236 10 6452 1 2025-08-18 15:54:58.562 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-18 15:54:58.465 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-18 15:55:03.315 00:00:10.363 TCP 23.104.0.1:57102 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:55:45.436 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:58568 10 6452 1 2025-08-18 15:56:03.716 00:00:10.374 TCP 23.104.0.1:55978 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:56:45.608 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:37508 10 6452 1 2025-08-18 15:57:04.130 00:00:10.368 TCP 23.104.0.1:41456 -> 1.101.0.1:3000 11 1507 1 2025-08-18 15:57:45.826 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:44144 10 6452 1 2025-08-18 15:58:04.537 00:00:10.362 TCP 23.104.0.1:45938 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 162, total bytes: 490389, total packets: 1551, avg bps: 1037, avg pps: 0, avg bpp: 316 Time window: 2025-08-18 14:55:13 - 2025-08-18 15:58:14 Total flows processed: 162, passed: 162, Blocks skipped: 0, Bytes read: 16912 Sys: 0.0035s User: 0.0018s Wall: 0.0022s flows/second: 74455.1 Runtime: 0.0022s