Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-19 03:55:13.323 00:05:00.977 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 03:59:23.446 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:38946 10 6452 1 2025-08-19 03:59:26.216 00:00:10.326 TCP 23.104.0.1:38838 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:00:13.066 00:00:00.034 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 04:00:13.218 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 03:56:13.325 00:05:00.972 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 04:00:23.620 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:44536 10 6452 1 2025-08-19 04:00:26.582 00:00:10.364 TCP 23.104.0.1:34344 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:01:23.870 00:00:10.206 TCP 1.101.0.1:3000 -> 22.102.0.1:44048 10 6452 1 2025-08-19 04:01:26.985 00:00:10.378 TCP 23.104.0.1:41406 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:02:24.115 00:00:10.656 TCP 1.101.0.1:3000 -> 22.102.0.1:49362 10 6452 1 2025-08-19 04:02:27.421 00:00:10.344 TCP 23.104.0.1:36870 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:03:24.815 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:40934 10 6452 1 2025-08-19 04:03:27.823 00:00:10.365 TCP 23.104.0.1:42692 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:04:25.034 00:00:10.639 TCP 1.101.0.1:3000 -> 22.102.0.1:52412 10 6452 1 2025-08-19 04:04:28.234 00:00:10.365 TCP 23.104.0.1:47022 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:05:12.917 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 04:05:12.810 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 04:01:13.324 00:05:00.977 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 04:05:25.713 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:60550 10 6452 1 2025-08-19 04:05:28.643 00:00:10.320 TCP 23.104.0.1:54690 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:02:13.326 00:05:00.973 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 04:06:25.936 00:00:10.431 TCP 1.101.0.1:3000 -> 22.102.0.1:58444 10 6452 1 2025-08-19 04:06:29.006 00:00:10.360 TCP 23.104.0.1:57430 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:07:26.401 00:00:10.479 TCP 1.101.0.1:3000 -> 22.102.0.1:41892 10 6452 1 2025-08-19 04:07:29.404 00:00:10.366 TCP 23.104.0.1:45126 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:08:26.930 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:41188 10 6452 1 2025-08-19 04:08:29.809 00:00:10.376 TCP 23.104.0.1:34874 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:09:27.156 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40772 10 6452 1 2025-08-19 04:09:30.223 00:00:10.367 TCP 23.104.0.1:58080 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:10:13.029 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 04:10:13.076 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 04:10:30.627 00:00:10.364 TCP 23.104.0.1:54514 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:10:27.371 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:47234 10 6452 1 2025-08-19 04:07:13.326 00:05:00.980 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 04:11:31.032 00:00:10.366 TCP 23.104.0.1:47894 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:11:27.542 00:00:10.192 TCP 1.101.0.1:3000 -> 22.102.0.1:37508 10 6452 1 2025-08-19 04:08:13.328 00:05:00.975 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 04:12:27.770 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:57902 10 6452 1 2025-08-19 04:12:31.438 00:00:10.373 TCP 23.104.0.1:32988 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:13:27.990 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:47488 10 6452 1 2025-08-19 04:13:31.848 00:00:10.385 TCP 23.104.0.1:40576 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:14:28.217 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:48212 10 6452 1 2025-08-19 04:14:32.264 00:00:10.368 TCP 23.104.0.1:37418 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:15:13.270 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 04:15:13.315 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 04:15:28.433 00:00:10.211 TCP 1.101.0.1:3000 -> 22.102.0.1:53508 12 10365 1 2025-08-19 04:15:32.668 00:00:10.404 TCP 23.104.0.1:44838 -> 1.101.0.1:3000 15 1926 1 2025-08-19 04:16:28.685 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:43622 10 6452 1 2025-08-19 04:16:33.113 00:00:10.361 TCP 23.104.0.1:41472 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:13:13.325 00:05:00.980 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 04:17:28.892 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:58984 10 6452 1 2025-08-19 04:17:33.510 00:00:10.376 TCP 23.104.0.1:53640 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:14:13.329 00:05:00.975 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 04:18:29.083 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:34562 10 6452 1 2025-08-19 04:18:33.917 00:00:10.387 TCP 23.104.0.1:36156 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:19:29.305 00:00:10.197 TCP 1.101.0.1:3000 -> 22.102.0.1:52934 10 6452 1 2025-08-19 04:19:34.341 00:00:10.380 TCP 23.104.0.1:54300 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:20:13.328 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 04:20:13.436 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 04:20:29.534 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:49592 10 6452 1 2025-08-19 04:20:34.754 00:00:10.389 TCP 23.104.0.1:37138 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:21:29.702 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:47866 10 6452 1 2025-08-19 04:21:35.182 00:00:10.367 TCP 23.104.0.1:35908 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:22:29.913 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:59500 10 6452 1 2025-08-19 04:22:35.586 00:00:10.373 TCP 23.104.0.1:59520 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:19:13.327 00:05:00.982 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 04:23:30.157 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:50674 10 6452 1 2025-08-19 04:23:35.996 00:00:10.369 TCP 23.104.0.1:58212 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:20:13.328 00:05:00.978 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 04:24:30.374 00:00:10.185 TCP 1.101.0.1:3000 -> 22.102.0.1:40790 10 6452 1 2025-08-19 04:24:36.407 00:00:10.367 TCP 23.104.0.1:50966 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:25:13.494 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 04:25:13.368 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 04:25:30.598 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:39460 10 6452 1 2025-08-19 04:25:36.809 00:00:10.366 TCP 23.104.0.1:35856 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:26:30.808 00:00:10.144 TCP 1.101.0.1:3000 -> 22.102.0.1:54772 10 6452 1 2025-08-19 04:26:37.212 00:00:10.368 TCP 23.104.0.1:35462 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:27:30.997 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:53522 10 6452 1 2025-08-19 04:27:37.618 00:00:10.322 TCP 23.104.0.1:57766 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:28:31.178 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:46236 10 6452 1 2025-08-19 04:28:37.978 00:00:10.376 TCP 23.104.0.1:34440 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:25:13.327 00:05:00.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 04:29:31.391 00:00:10.349 TCP 1.101.0.1:3000 -> 22.102.0.1:60730 10 6452 1 2025-08-19 04:29:38.400 00:00:10.371 TCP 23.104.0.1:43246 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:30:13.215 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 04:30:13.281 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 04:26:13.330 00:05:00.979 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 04:30:31.780 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:52682 10 6452 1 2025-08-19 04:30:38.813 00:00:10.367 TCP 23.104.0.1:37904 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:31:31.997 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:60386 10 6452 1 2025-08-19 04:31:39.232 00:00:10.346 TCP 23.104.0.1:34870 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:32:32.214 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:56076 10 6452 1 2025-08-19 04:32:39.623 00:00:10.366 TCP 23.104.0.1:40264 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:33:32.423 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:43972 10 6452 1 2025-08-19 04:33:40.028 00:00:10.364 TCP 23.104.0.1:41986 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:34:32.590 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:35020 10 6452 1 2025-08-19 04:34:40.436 00:00:10.361 TCP 23.104.0.1:46116 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:35:13.691 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 04:31:13.328 00:05:00.988 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 04:35:13.680 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 04:35:32.768 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:43870 10 6452 1 2025-08-19 04:35:40.839 00:00:10.388 TCP 23.104.0.1:35024 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:32:13.331 00:05:00.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 04:36:32.979 00:00:10.147 TCP 1.101.0.1:3000 -> 22.102.0.1:35718 10 6452 1 2025-08-19 04:36:41.263 00:00:10.327 TCP 23.104.0.1:38750 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:37:33.165 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:34520 10 6452 1 2025-08-19 04:37:41.625 00:00:10.365 TCP 23.104.0.1:59836 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:38:33.380 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:41088 10 6452 1 2025-08-19 04:38:42.028 00:00:10.327 TCP 23.104.0.1:59982 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:39:33.596 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:42958 10 6452 1 2025-08-19 04:39:42.398 00:00:10.323 TCP 23.104.0.1:48372 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:40:13.758 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 04:40:13.715 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 04:40:33.807 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:59682 10 6452 1 2025-08-19 04:40:42.766 00:00:10.376 TCP 23.104.0.1:52684 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:37:13.334 00:05:00.983 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 04:41:33.978 00:00:10.207 TCP 1.101.0.1:3000 -> 22.102.0.1:34556 10 6452 1 2025-08-19 04:41:43.183 00:00:10.371 TCP 23.104.0.1:37470 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:38:13.337 00:05:00.978 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 04:42:34.224 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:37816 10 6452 1 2025-08-19 04:42:43.590 00:00:10.362 TCP 23.104.0.1:37180 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:43:34.441 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47088 10 6452 1 2025-08-19 04:43:43.990 00:00:10.364 TCP 23.104.0.1:59676 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:44:34.657 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:41682 10 6452 1 2025-08-19 04:44:44.392 00:00:10.361 TCP 23.104.0.1:57194 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:45:13.749 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 04:45:13.793 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 04:45:34.832 00:00:10.231 TCP 1.101.0.1:3000 -> 22.102.0.1:59076 10 6452 1 2025-08-19 04:45:44.794 00:00:10.356 TCP 23.104.0.1:45582 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:46:35.116 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:57776 10 6452 1 2025-08-19 04:46:45.197 00:00:10.371 TCP 23.104.0.1:43136 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:43:13.335 00:05:00.983 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 04:47:35.335 00:00:10.320 TCP 1.101.0.1:3000 -> 22.102.0.1:39926 10 6452 1 2025-08-19 04:47:45.600 00:00:10.364 TCP 23.104.0.1:48492 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:44:13.338 00:05:00.978 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 04:48:35.695 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:33704 10 6452 1 2025-08-19 04:48:46.004 00:00:10.364 TCP 23.104.0.1:38812 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:49:35.911 00:00:10.143 TCP 1.101.0.1:3000 -> 22.102.0.1:58218 10 6452 1 2025-08-19 04:49:46.407 00:00:10.321 TCP 23.104.0.1:42130 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:50:14.276 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 04:50:13.931 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 04:50:36.093 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:46364 10 6452 1 2025-08-19 04:50:46.769 00:00:10.370 TCP 23.104.0.1:50728 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:51:36.271 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:53916 10 6452 1 2025-08-19 04:51:47.179 00:00:10.359 TCP 23.104.0.1:34190 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:52:36.490 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:40190 10 6452 1 2025-08-19 04:52:47.577 00:00:10.363 TCP 23.104.0.1:52930 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:49:13.336 00:05:00.985 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-19 04:53:36.662 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:39032 10 6452 1 2025-08-19 04:53:47.985 00:00:10.377 TCP 23.104.0.1:45170 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:50:13.340 00:05:00.983 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-19 04:54:36.877 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:35410 10 6452 1 2025-08-19 04:54:48.436 00:00:10.369 TCP 23.104.0.1:58284 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:55:14.149 00:00:00.024 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-19 04:55:14.126 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-19 04:55:37.099 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:38184 10 6452 1 2025-08-19 04:55:48.842 00:00:10.390 TCP 23.104.0.1:41476 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:56:37.317 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:58490 10 6452 1 2025-08-19 04:56:49.275 00:00:10.366 TCP 23.104.0.1:51572 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:57:37.533 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:46056 10 6452 1 2025-08-19 04:57:49.684 00:00:10.322 TCP 23.104.0.1:40434 -> 1.101.0.1:3000 11 1507 1 2025-08-19 04:58:37.744 00:00:10.139 TCP 1.101.0.1:3000 -> 22.102.0.1:43052 10 6452 1 Summary: total flows: 163, total bytes: 501173, total packets: 1567, avg bps: 1051, avg pps: 0, avg bpp: 319 Time window: 2025-08-19 03:55:13 - 2025-08-19 04:58:47 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0031s User: 0.0010s Wall: 0.0021s flows/second: 79092.0 Runtime: 0.0021s