Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-08-28 00:58:51.358 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:53032 10 6452 1 2025-08-28 00:54:19.260 00:06:00.173 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 00:59:11.721 00:00:10.332 TCP 23.104.0.1:52284 -> 1.101.0.1:3000 11 1507 1 2025-08-28 00:59:29.454 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 00:59:29.546 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 00:59:51.566 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:43818 10 6452 1 2025-08-28 01:00:12.111 00:00:10.323 TCP 23.104.0.1:34346 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:00:51.743 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:35864 10 6452 1 2025-08-28 01:01:12.475 00:00:10.363 TCP 23.104.0.1:54006 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:01:51.971 00:00:10.148 TCP 1.101.0.1:3000 -> 22.102.0.1:47994 10 6452 1 2025-08-28 01:02:12.883 00:00:10.342 TCP 23.104.0.1:42044 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:02:52.159 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:34928 10 6452 1 2025-08-28 01:03:13.265 00:00:10.366 TCP 23.104.0.1:55340 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:03:52.382 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:43252 10 6452 1 2025-08-28 01:04:13.672 00:00:10.368 TCP 23.104.0.1:37538 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:04:29.808 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 01:04:29.534 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 01:04:52.593 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:49244 10 6452 1 2025-08-28 01:00:19.259 00:06:00.178 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 01:05:14.101 00:00:10.349 TCP 23.104.0.1:43316 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:05:52.773 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:46800 10 6452 1 2025-08-28 01:01:19.262 00:06:00.172 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 01:06:14.481 00:00:10.366 TCP 23.104.0.1:60932 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:06:52.989 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:42422 10 6452 1 2025-08-28 01:07:14.885 00:00:10.384 TCP 23.104.0.1:53908 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:07:53.208 00:00:10.179 TCP 1.101.0.1:3000 -> 22.102.0.1:40554 10 6452 1 2025-08-28 01:08:15.305 00:00:10.345 TCP 23.104.0.1:57652 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:08:53.426 00:00:10.174 TCP 1.101.0.1:3000 -> 22.102.0.1:57912 10 6452 1 2025-08-28 01:09:15.688 00:00:10.362 TCP 23.104.0.1:47646 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:09:29.604 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 01:09:29.395 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 01:09:53.638 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:45294 10 6452 1 2025-08-28 01:10:16.113 00:00:10.363 TCP 23.104.0.1:48182 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:10:53.857 00:00:10.196 TCP 1.101.0.1:3000 -> 22.102.0.1:52960 10 6452 1 2025-08-28 01:11:16.511 00:00:10.373 TCP 23.104.0.1:53910 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:11:54.094 00:00:10.568 TCP 1.101.0.1:3000 -> 22.102.0.1:51666 10 6452 1 2025-08-28 01:07:19.262 00:06:00.184 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 01:12:16.922 00:00:10.406 TCP 23.104.0.1:35688 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:12:54.706 00:00:10.129 TCP 1.101.0.1:3000 -> 22.102.0.1:43976 10 6452 1 2025-08-28 01:08:19.266 00:06:00.180 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 01:13:17.365 00:00:10.364 TCP 23.104.0.1:51020 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:13:54.877 00:00:10.184 TCP 1.101.0.1:3000 -> 22.102.0.1:56638 10 6452 1 2025-08-28 01:14:29.489 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 01:14:29.877 00:00:00.021 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 01:14:17.762 00:00:10.382 TCP 23.104.0.1:58250 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:14:55.100 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:60786 10 6452 1 2025-08-28 01:15:18.181 00:00:10.368 TCP 23.104.0.1:44006 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:15:55.310 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:55474 10 6452 1 2025-08-28 01:16:18.588 00:00:10.334 TCP 23.104.0.1:60592 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:16:55.486 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:43564 10 6452 1 2025-08-28 01:17:18.958 00:00:10.336 TCP 23.104.0.1:36136 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:17:55.704 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:43048 10 6452 1 2025-08-28 01:18:19.328 00:00:10.373 TCP 23.104.0.1:40290 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:18:55.915 00:00:10.167 TCP 1.101.0.1:3000 -> 22.102.0.1:43260 10 6452 1 2025-08-28 01:14:19.263 00:06:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 01:19:29.805 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 01:19:29.730 00:00:00.031 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 01:19:19.737 00:00:10.367 TCP 23.104.0.1:34144 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:19:56.123 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:50496 10 6452 1 2025-08-28 01:15:19.266 00:06:00.186 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 01:20:20.155 00:00:10.402 TCP 23.104.0.1:59894 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:20:56.342 00:00:10.191 TCP 1.101.0.1:3000 -> 22.102.0.1:46068 10 6452 1 2025-08-28 01:21:20.596 00:00:10.366 TCP 23.104.0.1:53022 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:21:56.568 00:00:10.138 TCP 1.101.0.1:3000 -> 22.102.0.1:40790 10 6452 1 2025-08-28 01:22:20.995 00:00:10.327 TCP 23.104.0.1:50040 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:22:56.739 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:44378 10 6452 1 2025-08-28 01:23:21.356 00:00:10.364 TCP 23.104.0.1:48998 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:23:56.960 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:60864 10 6452 1 2025-08-28 01:24:30.026 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 01:24:30.146 00:00:00.021 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 01:24:21.754 00:00:10.392 TCP 23.104.0.1:56844 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:24:57.177 00:00:10.193 TCP 1.101.0.1:3000 -> 22.102.0.1:54722 10 6452 1 2025-08-28 01:25:22.178 00:00:10.364 TCP 23.104.0.1:40940 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:25:57.412 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:60514 10 6452 1 2025-08-28 01:21:19.263 00:06:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 01:26:22.578 00:00:10.321 TCP 23.104.0.1:58088 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:26:57.635 00:00:10.134 TCP 1.101.0.1:3000 -> 22.102.0.1:41396 10 6452 1 2025-08-28 01:22:19.267 00:06:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 01:27:22.944 00:00:10.376 TCP 23.104.0.1:42170 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:27:57.814 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:42888 10 6452 1 2025-08-28 01:28:23.358 00:00:10.367 TCP 23.104.0.1:42526 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:28:58.035 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:59814 10 6452 1 2025-08-28 01:29:30.044 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 01:29:29.988 00:00:00.024 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 01:29:23.764 00:00:10.365 TCP 23.104.0.1:52752 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:29:58.256 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:38492 10 6452 1 2025-08-28 01:30:24.167 00:00:10.324 TCP 23.104.0.1:39564 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:30:58.475 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:47996 10 6452 1 2025-08-28 01:31:24.532 00:00:10.372 TCP 23.104.0.1:55096 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:31:58.686 00:00:10.620 TCP 1.101.0.1:3000 -> 22.102.0.1:54708 10 6452 1 2025-08-28 01:32:24.944 00:00:10.374 TCP 23.104.0.1:39828 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:32:59.345 00:00:10.170 TCP 1.101.0.1:3000 -> 22.102.0.1:41282 10 6452 1 2025-08-28 01:28:19.268 00:06:00.191 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 01:33:25.358 00:00:10.363 TCP 23.104.0.1:56886 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:33:59.555 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:46792 10 6452 1 2025-08-28 01:29:19.269 00:06:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 01:34:30.209 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 01:34:30.274 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 01:34:25.759 00:00:10.372 TCP 23.104.0.1:42806 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:34:59.769 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:38562 10 6452 1 2025-08-28 01:35:26.169 00:00:10.322 TCP 23.104.0.1:50362 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:35:59.984 00:00:10.188 TCP 1.101.0.1:3000 -> 22.102.0.1:39356 10 6452 1 2025-08-28 01:36:26.530 00:00:10.325 TCP 23.104.0.1:55332 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:37:00.211 00:00:10.168 TCP 1.101.0.1:3000 -> 22.102.0.1:36706 10 6452 1 2025-08-28 01:37:26.895 00:00:10.376 TCP 23.104.0.1:40038 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:38:00.419 00:00:10.131 TCP 1.101.0.1:3000 -> 22.102.0.1:38492 10 6452 1 2025-08-28 01:38:27.321 00:00:10.361 TCP 23.104.0.1:50116 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:39:00.590 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:54224 10 6452 1 2025-08-28 01:39:30.500 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 01:39:30.696 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 01:39:27.721 00:00:10.366 TCP 23.104.0.1:43548 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:40:00.810 00:00:10.140 TCP 1.101.0.1:3000 -> 22.102.0.1:44184 10 6452 1 2025-08-28 01:35:19.268 00:06:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 01:40:28.127 00:00:10.365 TCP 23.104.0.1:35596 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:41:01.003 00:00:10.176 TCP 1.101.0.1:3000 -> 22.102.0.1:37780 10 6452 1 2025-08-28 01:36:19.270 00:06:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 01:41:28.529 00:00:10.358 TCP 23.104.0.1:55160 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:42:01.220 00:00:10.283 TCP 1.101.0.1:3000 -> 22.102.0.1:46648 10 6452 1 2025-08-28 01:42:28.925 00:00:10.385 TCP 23.104.0.1:39340 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:43:01.542 00:00:10.172 TCP 1.101.0.1:3000 -> 22.102.0.1:53310 10 6452 1 2025-08-28 01:43:29.349 00:00:10.376 TCP 23.104.0.1:46716 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:44:01.753 00:00:10.173 TCP 1.101.0.1:3000 -> 22.102.0.1:40524 10 6452 1 2025-08-28 01:44:30.212 00:00:00.023 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 01:44:30.538 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 01:44:29.764 00:00:10.378 TCP 23.104.0.1:40914 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:45:01.960 00:00:10.186 TCP 1.101.0.1:3000 -> 22.102.0.1:33676 12 6556 1 2025-08-28 01:45:30.181 00:00:10.363 TCP 23.104.0.1:40532 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:46:02.180 00:00:10.171 TCP 1.101.0.1:3000 -> 22.102.0.1:34188 10 6452 1 2025-08-28 01:46:30.581 00:00:10.331 TCP 23.104.0.1:58972 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:47:02.392 00:00:10.195 TCP 1.101.0.1:3000 -> 22.102.0.1:41286 10 6452 1 2025-08-28 01:42:19.269 00:06:00.192 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 01:47:30.959 00:00:10.377 TCP 23.104.0.1:58188 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:48:02.631 00:00:10.182 TCP 1.101.0.1:3000 -> 22.102.0.1:58748 10 6452 1 2025-08-28 01:43:19.271 00:06:00.187 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 01:48:31.376 00:00:10.365 TCP 23.104.0.1:33814 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:49:02.852 00:00:10.180 TCP 1.101.0.1:3000 -> 22.102.0.1:35242 10 6452 1 2025-08-28 01:49:30.563 00:00:00.025 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 01:49:30.770 00:00:00.023 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 01:49:31.780 00:00:10.325 TCP 23.104.0.1:54156 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:50:03.082 00:00:10.133 TCP 1.101.0.1:3000 -> 22.102.0.1:46454 10 6452 1 2025-08-28 01:50:32.143 00:00:10.326 TCP 23.104.0.1:53188 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:51:03.261 00:00:10.198 TCP 1.101.0.1:3000 -> 22.102.0.1:50598 10 6452 1 2025-08-28 01:51:32.524 00:00:10.373 TCP 23.104.0.1:44870 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:52:03.514 00:00:10.181 TCP 1.101.0.1:3000 -> 22.102.0.1:45432 10 6452 1 2025-08-28 01:52:32.938 00:00:10.372 TCP 23.104.0.1:36896 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:53:03.735 00:00:10.175 TCP 1.101.0.1:3000 -> 22.102.0.1:48132 10 6452 1 2025-08-28 01:53:33.351 00:00:10.366 TCP 23.104.0.1:56054 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:54:03.950 00:00:10.189 TCP 1.101.0.1:3000 -> 22.102.0.1:33268 10 6452 1 2025-08-28 01:49:19.270 00:06:00.193 TCP 179.1.22.1:179 -> 179.1.22.22:39396 14 861 1 2025-08-28 01:54:30.625 00:00:00.022 ICMP 4.0.198.2:0 -> 22.102.0.1:8.0 3 252 1 2025-08-28 01:54:30.654 00:00:00.022 ICMP 23.107.0.1:0 -> 1.0.198.2:0.0 3 252 1 2025-08-28 01:54:33.754 00:00:10.385 TCP 23.104.0.1:40462 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:55:04.180 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:41796 10 6452 1 2025-08-28 01:50:19.274 00:06:00.188 TCP 179.1.22.22:39396 -> 179.1.22.1:179 14 861 1 2025-08-28 01:55:34.181 00:00:10.371 TCP 23.104.0.1:49704 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:56:04.357 00:00:10.178 TCP 1.101.0.1:3000 -> 22.102.0.1:33650 10 6452 1 2025-08-28 01:56:34.589 00:00:10.364 TCP 23.104.0.1:51292 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:57:04.572 00:00:10.399 TCP 1.101.0.1:3000 -> 22.102.0.1:56136 10 6452 1 2025-08-28 01:57:34.992 00:00:10.364 TCP 23.104.0.1:32876 -> 1.101.0.1:3000 11 1507 1 2025-08-28 01:58:05.008 00:00:10.137 TCP 1.101.0.1:3000 -> 22.102.0.1:35606 10 6452 1 2025-08-28 01:58:35.399 00:00:10.365 TCP 23.104.0.1:44380 -> 1.101.0.1:3000 11 1507 1 Summary: total flows: 161, total bytes: 498329, total packets: 1572, avg bps: 1031, avg pps: 0, avg bpp: 317 Time window: 2025-08-28 00:54:19 - 2025-08-28 01:58:45 Total flows processed: 161, passed: 161, Blocks skipped: 0, Bytes read: 16808 Sys: 0.0010s User: 0.0039s Wall: 0.0028s flows/second: 58143.9 Runtime: 0.0028s