Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 22:55:19.958 00:05:00.147 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-28 22:59:10.900 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:33352 10 6452 1 2025-08-28 22:59:24.408 00:00:10.366 TCP 23.104.0.1:37114 -> 1.101.0.1:3000 11 1507 1 2025-08-28 22:59:56.150 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 22:59:56.123 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 23:00:11.116 00:00:10.205 TCP 1.101.0.1:3000 -> 22.102.0.1:34340 10 6452 1 2025-08-28 23:00:24.813 00:00:10.366 TCP 23.104.0.1:38998 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:01:11.361 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:57582 10 6452 1 2025-08-28 23:01:25.219 00:00:10.362 TCP 23.104.0.1:43510 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:02:11.585 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:54988 10 6452 1 2025-08-28 23:02:25.621 00:00:10.323 TCP 23.104.0.1:36270 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:03:11.813 00:00:10.177 TCP 1.101.0.1:3000 -> 22.102.0.1:37252 10 6452 1 2025-08-28 22:59:19.956 00:05:00.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-28 23:03:25.983 00:00:10.364 TCP 23.104.0.1:41756 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:04:12.044 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38508 10 6452 1 2025-08-28 23:04:26.383 00:00:10.362 TCP 23.104.0.1:40218 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:04:56.429 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 23:04:56.645 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 23:01:19.962 00:05:00.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-28 23:05:12.260 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42306 10 6452 1 2025-08-28 23:05:26.788 00:00:10.381 TCP 23.104.0.1:45158 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:06:12.481 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:50628 10 6452 1 2025-08-28 23:06:27.209 00:00:10.340 TCP 23.104.0.1:45252 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:07:12.695 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:49270 10 6452 1 2025-08-28 23:07:27.572 00:00:10.327 TCP 23.104.0.1:51112 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:08:12.907 00:00:10.548 TCP 1.101.0.1:3000 -> 22.102.0.1:58116 10 6452 1 2025-08-28 23:08:27.939 00:00:10.376 TCP 23.104.0.1:52620 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:05:19.960 00:05:00.150 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-28 23:09:13.494 00:00:10.132 TCP 1.101.0.1:3000 -> 22.102.0.1:57224 10 6452 1 2025-08-28 23:09:28.353 00:00:10.362 TCP 23.104.0.1:35652 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:09:55.967 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 23:09:56.157 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 23:10:13.666 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:57642 10 6452 1 2025-08-28 23:10:28.755 00:00:10.377 TCP 23.104.0.1:36826 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:07:19.962 00:05:00.145 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-28 23:11:13.878 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:48576 10 6452 1 2025-08-28 23:11:29.174 00:00:10.365 TCP 23.104.0.1:35242 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:12:14.101 00:00:10.202 TCP 1.101.0.1:3000 -> 22.102.0.1:48128 12 10367 1 2025-08-28 23:12:29.579 00:00:10.406 TCP 23.104.0.1:53388 -> 1.101.0.1:3000 15 1926 1 2025-08-28 23:13:14.343 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:41332 10 6452 1 2025-08-28 23:13:30.025 00:00:10.319 TCP 23.104.0.1:39098 -> 1.101.0.1:3000 12 1559 1 2025-08-28 23:14:14.557 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:40934 10 6452 1 2025-08-28 23:14:30.386 00:00:10.815 TCP 23.104.0.1:49282 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:14:56.056 00:00:00.026 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 23:14:56.393 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 23:11:19.961 00:05:00.155 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-28 23:15:14.774 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:45944 10 6452 1 2025-08-28 23:15:31.235 00:00:10.321 TCP 23.104.0.1:46528 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:16:14.989 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:60492 10 6452 1 2025-08-28 23:16:31.595 00:00:10.339 TCP 23.104.0.1:49036 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:13:19.963 00:05:00.150 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-28 23:17:15.210 00:00:10.136 TCP 1.101.0.1:3000 -> 22.102.0.1:37648 10 6452 1 2025-08-28 23:17:31.981 00:00:10.368 TCP 23.104.0.1:36502 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:18:15.384 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42700 10 6452 1 2025-08-28 23:18:32.389 00:00:10.366 TCP 23.104.0.1:43616 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:19:15.600 00:00:10.190 TCP 1.101.0.1:3000 -> 22.102.0.1:38676 10 6452 1 2025-08-28 23:19:32.793 00:00:10.371 TCP 23.104.0.1:47468 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:19:56.185 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 23:19:55.869 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 23:20:15.826 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:57524 10 6452 1 2025-08-28 23:20:33.203 00:00:10.363 TCP 23.104.0.1:33274 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:17:19.961 00:05:00.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-28 23:21:15.997 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:32944 10 6452 1 2025-08-28 23:21:33.607 00:00:10.396 TCP 23.104.0.1:45474 -> 1.101.0.1:3000 15 1926 1 2025-08-28 23:22:16.167 00:00:10.203 TCP 1.101.0.1:3000 -> 22.102.0.1:36884 12 10365 1 2025-08-28 23:22:34.047 00:00:10.359 TCP 23.104.0.1:34150 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:19:19.966 00:05:00.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-28 23:23:16.407 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:49104 10 6452 1 2025-08-28 23:23:34.447 00:00:10.380 TCP 23.104.0.1:57420 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:24:16.623 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:42226 10 6452 1 2025-08-28 23:24:34.862 00:00:10.373 TCP 23.104.0.1:57920 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:24:56.647 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 23:24:56.741 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 23:25:16.831 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:46786 10 6452 1 2025-08-28 23:25:35.271 00:00:10.369 TCP 23.104.0.1:48904 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:26:17.069 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:56190 10 6452 1 2025-08-28 23:26:35.673 00:00:10.334 TCP 23.104.0.1:51952 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:23:19.963 00:05:00.156 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-28 23:27:17.286 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:34378 10 6452 1 2025-08-28 23:27:36.042 00:00:10.324 TCP 23.104.0.1:44932 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:28:17.508 00:00:10.169 TCP 1.101.0.1:3000 -> 22.102.0.1:46356 10 6452 1 2025-08-28 23:28:36.402 00:00:10.370 TCP 23.104.0.1:49780 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:25:19.967 00:05:00.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-28 23:29:17.717 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:39216 10 6452 1 2025-08-28 23:29:36.809 00:00:10.365 TCP 23.104.0.1:48336 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:29:56.717 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 23:29:56.633 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 23:30:17.927 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:34316 10 6452 1 2025-08-28 23:30:37.214 00:00:10.363 TCP 23.104.0.1:46608 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:31:18.149 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47576 10 6452 1 2025-08-28 23:31:37.615 00:00:10.360 TCP 23.104.0.1:46968 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:32:18.364 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:47918 10 6452 1 2025-08-28 23:32:38.015 00:00:10.368 TCP 23.104.0.1:48472 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:29:19.968 00:05:00.158 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-28 23:33:18.579 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:60222 10 6452 1 2025-08-28 23:33:38.422 00:00:10.324 TCP 23.104.0.1:38384 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:34:18.785 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:60924 10 6452 1 2025-08-28 23:34:56.436 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 23:34:38.787 00:00:10.368 TCP 23.104.0.1:47390 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:34:56.725 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 23:31:19.972 00:05:00.153 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-28 23:35:18.998 00:00:10.183 TCP 1.101.0.1:3000 -> 22.102.0.1:52730 10 6452 1 2025-08-28 23:35:39.191 00:00:10.327 TCP 23.104.0.1:47622 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:36:19.220 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:36512 10 6452 1 2025-08-28 23:36:39.558 00:00:10.367 TCP 23.104.0.1:34690 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:37:19.432 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:47026 10 6452 1 2025-08-28 23:37:39.970 00:00:10.366 TCP 23.104.0.1:60306 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:38:19.644 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:42710 10 6452 1 2025-08-28 23:38:40.374 00:00:10.324 TCP 23.104.0.1:44620 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:35:19.972 00:05:00.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-28 23:39:19.862 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:59548 10 6452 1 2025-08-28 23:39:40.742 00:00:10.387 TCP 23.104.0.1:51878 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:39:56.789 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 23:39:57.109 00:00:00.028 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 23:40:20.090 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:45818 10 6452 1 2025-08-28 23:40:41.165 00:00:10.366 TCP 23.104.0.1:44880 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:37:19.975 00:05:00.151 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-28 23:41:20.306 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:59084 10 6452 1 2025-08-28 23:41:41.570 00:00:10.365 TCP 23.104.0.1:57216 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:42:20.486 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:45320 10 6452 1 2025-08-28 23:42:41.975 00:00:10.365 TCP 23.104.0.1:59014 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:43:20.662 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:46218 10 6452 1 2025-08-28 23:43:42.382 00:00:10.367 TCP 23.104.0.1:59350 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:44:20.840 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:35418 10 6452 1 2025-08-28 23:44:56.878 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 23:44:42.790 00:00:10.365 TCP 23.104.0.1:33178 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:44:56.771 00:00:00.031 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 23:41:19.971 00:05:00.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-28 23:45:21.081 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:46252 10 6452 1 2025-08-28 23:45:43.193 00:00:10.326 TCP 23.104.0.1:50332 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:46:21.307 00:00:10.687 TCP 1.101.0.1:3000 -> 22.102.0.1:47200 10 6452 1 2025-08-28 23:46:43.554 00:00:10.365 TCP 23.104.0.1:37476 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:43:19.975 00:05:00.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-28 23:47:22.043 00:00:10.127 TCP 1.101.0.1:3000 -> 22.102.0.1:45614 10 6452 1 2025-08-28 23:47:43.958 00:00:10.365 TCP 23.104.0.1:44808 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:48:22.210 00:00:10.151 TCP 1.101.0.1:3000 -> 22.102.0.1:36060 10 6452 1 2025-08-28 23:48:44.357 00:00:10.366 TCP 23.104.0.1:55214 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:49:22.402 00:00:10.135 TCP 1.101.0.1:3000 -> 22.102.0.1:44756 10 6452 1 2025-08-28 23:49:44.762 00:00:10.335 TCP 23.104.0.1:35446 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:49:57.139 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 23:49:56.976 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 23:50:22.575 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:59958 10 6452 1 2025-08-28 23:50:45.132 00:00:10.365 TCP 23.104.0.1:35470 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:47:19.972 00:05:00.157 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-28 23:51:22.797 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:46370 10 6452 1 2025-08-28 23:51:45.531 00:00:10.365 TCP 23.104.0.1:56196 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:52:23.027 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57550 10 6452 1 2025-08-28 23:52:45.932 00:00:10.380 TCP 23.104.0.1:46166 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:49:19.976 00:05:00.152 TCP 179.1.22.22:39396 -> 179.1.22.1:179 12 738 1 2025-08-28 23:53:23.243 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:35630 10 6452 1 2025-08-28 23:53:46.353 00:00:10.366 TCP 23.104.0.1:48088 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:54:23.452 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:52360 10 6452 1 2025-08-28 23:54:57.356 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 23:54:57.226 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 23:54:46.760 00:00:10.374 TCP 23.104.0.1:41164 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:55:23.662 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:53630 10 6452 1 2025-08-28 23:55:47.169 00:00:10.366 TCP 23.104.0.1:58802 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:56:23.879 00:00:10.187 TCP 1.101.0.1:3000 -> 22.102.0.1:36348 10 6452 1 2025-08-28 23:56:47.572 00:00:10.326 TCP 23.104.0.1:52306 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:53:19.972 00:05:00.159 TCP 179.1.22.1:179 -> 179.1.22.22:39396 12 738 1 2025-08-28 23:57:24.103 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60468 10 6452 1 2025-08-28 23:57:47.934 00:00:10.381 TCP 23.104.0.1:42492 -> 1.101.0.1:3000 11 1507 1 2025-08-28 23:58:24.325 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:55106 10 6452 1 Summary: total flows: 163, total bytes: 505559, total packets: 1574, avg bps: 1065, avg pps: 0, avg bpp: 321 Time window: 2025-08-28 22:55:19 - 2025-08-28 23:58:34 Total flows processed: 163, passed: 163, Blocks skipped: 0, Bytes read: 17016 Sys: 0.0046s User: 0.0000s Wall: 0.0015s flows/second: 106673.7 Runtime: 0.0015s